last executing test programs: 4.327471738s ago: executing program 2 (id=985): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xffff, 0x7, 0x1, {0x22, 0x9}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000180)={0x20, 0x23, 0xa, {0xa, 0x21, "f70ba38103000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.134928683s ago: executing program 3 (id=995): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, 0x0, 0x0}, 0x20) 2.598247645s ago: executing program 3 (id=1001): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f00000001c0), 0x3, 0x480, &(0x7f0000001540)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0xa0000, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xc681}) 2.371444339s ago: executing program 2 (id=1003): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x5, @local, 'wg2\x00'}}, 0x1e) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 2.214713323s ago: executing program 3 (id=1005): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000080)=ANY=[], 0x1, 0x629f, &(0x7f0000004a00)="$eJzs3U9vHGcdB/Df7D//KW2jHqoSIeS2AVpK87eEQIG2Bzj0wgHlihK5bhWRAkoCSquIuMqFAy8ChMQREEdOvIAeuHLjBRApQQJ66qCxn8cZL96s43R31n4+H8md+c0z432m3x3vbmZmnwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4u3v//BMFRGXfpEWHIv4XPQjehErTb0WEStrx/L6g4h4Lraa49mIGC5FVLnx6YjXIuLjpyLu3b+13iw6u89+fO9Pf//dj574wd/+MDz1nz/f6L8+ab2bN3/977/cPvj+AgAAQInquq6r9DH/ePp83+u6UwDAXOTX/zrJy9ULV28uWH/UarVafQjrtnpvt9tFRGy2t2neMzgdDwCHzGZ80nUX6JD8izaIiCe67gSw0KquO8BM3Lt/a71K+Vbt14O17fZ8Lciu/Dernfs7Jk2nGb/GZF7PrzvRj2cm9GdlTn1YJDn/3nj+l7bbR2m9Wec/L5PyH23f+lScnH9/PP8xRyf/3p75lyrnP3ik/PvyBwAAAACABZb//f9Yx+d/lx5/V/blYed/1+bUBwAAAAAAAAD4rD3u+H87KuP/AQAAwKJqPqs3fvPUg2WTvoutWX6xinhybH2gMOlmmdWu+wEAAAAAAAAAAAAAJRlsX8N7sYoYRsSTq6t1XTc/beP1o3rc7Q+70vcfStb1H3kAANj28VNj9/JXEcsRcTF9199wdXW1rpdXVuvVemUpv58dLS3XK63PtXnaLFsa7eMN8WBUN79subVd27TPy9Pax39f81ijur+Pjs1Hh4EDQERsvxrd84p0xNT109H1uxwOB8f/0eP4Zz+6fp4CAAAAs1fXdV2lr/M+ns7597ruFAAwF/n1f/y8gFqtVqvV6qNXt9V7u90uImKzvU3znsFw/ABwyGzGJ113gQ7Jv2iDiHiu604AC63qugPMxL37t9arlG/Vfj1I47vna0F25b9ZbW2Xt99rOs34NSbzen7diX48M6E/z86pD4sk598bz//SdvsorTfr/OdlUv7Nfh7roD9dy/n3x/Mfc3Ty7+2Zf6ly/oNHyr8vfwAAAAAAWGD53/+PLdT539FBd2eqh53/XZvZowIAAAAAAADAbN27f2s93/eaz/9/YY/13P95NOX8K/kXKeef7v/fufDmpbH1+q35u289yP9f92+t//7GPz+fp/vNfynPVOmZVaVnRJUeqRqk6QF3bII7w/6oeaRh1esP0jU/9fDduBJXYyNO71q3l46HB+1ndrU3PR1utdf97fazu9oHO+15+3O72ofpSqd6JbefjPX4aVyNd7bam7alKfu/PKW9ntKe8+87/ouU8x+0fpr8V1N7NTZt3P2o93/HfXu61+O8eeWLvzo9+92Z6k70d/atrdm/Fzroz9b/kydG8fPrG9dO3rx848a1M5Emu5aejTT5jOX8h+kn5//Si9vt+e9++3i9+9HokfNfFHdiMDH/F1vzzf6+POe+dSHnP0o/Of93Uvvex/9hzn/y8f9KB/0BAAAAAAAAAAAAAACAh6nreusW0Tcj4ny6/6erezMBgPnKr/91kpfPq+4fdPs/7t6PrvqvVs+5rhasP3OtP61n/XhvL9T+qg9U/3fB+rNwdVu9tzfaRUT8tb1N857hl3v9MgBgkX0aEf/ouhN0Rv4Fy9/310xPdN0ZYK6uf/Dhjy9fvbpx7XrXPQEAAAAAAAAADiqP/7nWGv/5RF3Xt8fW2zX+61ux9rjjfw7yzM4AoxMGqu4/+j49TC+ivzXWeboF4vmYNP73cGfuYeN/D6Y83nBK+2hK+9KU9uUp7Xve6NGS83++Nd75iYg4Pjb8egnjv46PeV+CnP8Lredzk/9XxtZr51//9jDn39uV/6kb7//s1PUPPnz1yvuX39t4b+Mn586cOX3u/PkLFy6cevfK1Y3T2//tsMezlfPPY1+7DrQsOf+cufzLkvP/UqrlX5ac/5dTLf+y5Pzz+z35lyXnnz/7yL8sOf+XUy3/suT8v5pq+Zcl5/9KquVflpz/11It/7Lk/F9NtfzLkvM/mWr5lyXnfyrV+8x/Zdb9Yj5y/vkMl+O/LDn/fGWD/MuS8z+bavmXJed/LtXyL0vO/7VUy78sOf+vp1r+Zcn5n0+1/MuS8/9GquVflpz/hVTLvyw5/2+mWv5lyfl/K9XyL0vO//VUy78sOf9vp1r+Zcn5fyfV8i9Lzv+7qZZ/WXL+b6Ra/mV58P3/ZsyYMZNnuv7LBAAAAAAAAAAAAACMm8flxF3vIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwP3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhb17i5Hrru8AfmZvXjuQGAipk5qwdowxzia7vsQXWhcTrg235lrSS2zXu3YWfIvXLkka1Y4CJRJGRRVtk4e2gKI2LxVWlQdaBZQH1KpSJdI+0BdEhcpDVAUUkKrSCrLVzPn//zszOzuz9o7XM+d8PlLyy86cmXPmzH9m92vnuwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAvQ3vm/58JcuySqWSX7A2y95QnavH1tYueffVPT4AAABg+X5R+/dr16UL9i/hRnXb/NPN33lhbm5uLvvk4J8Of3luLl0xlmXDq7Ksdl108QcPVuq3CZ7KRisDdV8PdNj9YIfrhzpcP9zh+pEO16/qcP1oh+sXnIAFVmeVdGebav+5Nj+l2fXZcO26TS1u9VRl1UD13KXbZpXabeaGj2Qz2bFsOpts2D7ftlLb/sUN1X19OIv7Gqjb1/rqCvnJE4fjMVTCOd7UsK/5+4x+9N5s7Kc/eeLwX5959cZWs+NpaLi//Di3bKwe52fDJfmxVrJV6ZzE4xyoO871LZ6TwYbjrNRuV/3v5uN8bYnHOTh/mCuq+TkfzQZq//1y7TwNVbIW52l9uOxnt2RZdn7+sJu3WbCvbCBb03DJwPzzM5qvyOp9VJfSm7OhS1qnG5awTqtzalPjOm1+TcTnf0O43dAix1D/NP3oyZG65/3nc5ezTqPqo17stdK8Brv9WumVNRjXxcu1B/10yzW4KTz+JzYvvgZbrp0WazA97ro1uLHTGhwYGawdc3oSKrXbzK/BbQ3bD9b2VKnNVza3X4MTZ46fmph97PHbZo4fOjp9dPrEjm3bJnfs2rVnz56JIzPHpifzf1/m2e59a7KB9BrYGM5dfA28s2nb+qU699WRBe+/l/s6HG3zOlzbtG23X4dDzQ+usjIvyIVrOn9t3Fc96aMXBrJFXmO152fr8l+H6XHXvQ6H6l6HLb+ntHgdDi3hdVjd5tTWpf3MMlT3T6tjWPx7wfLW4Nq6Ndj880jzGuz2zyO9sgZHw7r43tbFvxesD8f79Pil/jwyuGANpocb3nuql6Sf90f31EardXlT9YprRrKzs9Onb3/00Jkzp7dlYayIt9Stleb1uqbuMWUL1uvAJa/X/TM3P31Ti8vXhnM1elv1X6OLPlfVbXbe3v65qn13a30+Gy7dnoXRZSt9Plt9N6+ez5Ese/bbT97zzSeefd+i57OaNz87sfyfxVMurXv/HV7k/Tfm/tfz/aW7empweCh//Q6mszPc8H7c+FQN1d67KrV9vzaxtPfj4fDPSr8fX9/m/Xhd07bdfj8ebn5w8f240ulPO5an+fkcDevk2GT79+PqNuu2X+qaHGr7fnxLmJVw/t8VkkLKRXVrZ7F1m/Y1NDQcHtdQ3EPjOt3RsP1wyGbVfT2//fLW6ZZb8vsaTI9u3kqt07Gmbbu9TtOffS22Tiud/vTt8jQ/n6NhXVy/o/06rW7z0s7lv3eujv9Z99450mkNDg+OVI95OC3C2vt9Nrc6rsHbs8PZyexYNlW7dqS2niq1fY3fsbQ1OBL+Wen3ynVt1uCWpm27vQbT97HF1l5laOGD74Lm53M0rItn7mi/BqvbvH93d3923RIuSdvU/eza/Odri/2Z101Np+lKrZWhcJzf3t3+z2ar2xzbc6k5s/15ujVcck2L89T8+l3sNTWVrcx5WheO89U9i5+n6vFUt/ny3iWup/1Zlp175M7an/eGv1/5u7PffaHh711a/Z3OuUfu/PEbj/zjpRw/AP3v9Xysyb/X1f3N1FL+/h8AAADoCzH3D4SZyP8AAABQGDH3x/8rPJH/AQAAoDBi7h8KMylJ/l/3/ldnXj+XpWb+XBCvT6fhrny72HGdDF+Pzc2rXn7nc9P//Q/nlrbvgSzLfn7XH7Tcft1d8bhyY+E4L36g8fIFXrhtSfs+eP+5tN/6/vpXwv3Hx7PUZdCqgjuZZdmL132xtp+xBy/U5kt3HazNe84//VR1m9f25l/H27/ylnz7vwjl3/1HDjXc/pVwHn4Y5uRHWp+PeLuvX3jX+t0PzO8v3q6y8draw37mofx+4+/J+dJT+fbxPC92/N/8wvNfr27/6DtaH/+5gdbH/3y43+fC/N+35dvXPwfVr+PtPheOP+4v3u72r32r5fFf/Hy+/akP5tsdDDPuf0v4etMHX52pP1+PVg41PK7sQ/l2cf+T3/3j2vXx/uL9Nx//6IELDeejeX289G/5/Uw0bR8vj/uJ/r5p/9X7qV+fcf/P/9HBhvPcaf8X73nlbdX7bd7/rU3bnXpka23/8/fX+Bub/vJzX2y5v3g8+//2VMPj2X93eB2H/T/zUFiP4fr/u5jfX/NvVzh4d+P7T9z+K2vPNTye6MM/zfd/8T1Ha3PV6Oo117zhjdeef3v13GXZy6vy++u0/6N/dbLh+L96Q34+4vWxo9+8/8XE/Z/+zPiJk7NnZ6bSWX3iutrvzvlofjzxeK8L763NXx84eebh6dNjk2OTWTZW3F+hd9m+FuaP83G+/dZzC95Bt94fns+b/vzFNZv/9Qvx8n+/L7/8wkfy71vvDNt9KVy+Njx/l7b/hZ7ZcEPt9V15KRzh3MLfF7wc6zf9154lbRgef/PPBXG9n3rrw7XzUL2u9n0jvq6Xefzfn8rv5xvhvM6F38y88Yb5/dVvH383woV789f7ss9feJuLz+vfhOf7Yz/M7z8eV3y83w8/x3xrXeP7XVwf3zg30Hz/td/icT68n2Tn8+vjVvF8X3jthpaHF38PSXb+xtrXf5Lu58ZLepiLmX1sduLYzImzj06cmZ49MzH72OMHjp88e+LMgdrv8jzwqU63n39/WlN7f5qa3rUzq71bnczHFXa1j//U/Yendk9unpo+cujskTP3n5o+ffTw7Ozh6anZzYeOHJn+TKfbz0zt27Z9747d28ePzkzt27N374694zMnTlYPIz+oDnZNfnr8xOkDtZvM7tu5d9sdd+ycHD9+cmp63+7JyfGznW5f+940Xr3174+fnj526MzM8enx2ZnHp/dt27tr1/aOvw3w+Kkjs2MTp8+emDg7O316In8sY2dqF1e/93W6PcU0+x/5z7PNKvkv4ss+ceuu9PtZq557ctG7yjdp+gWir4bfRfPPbzq1Zylfx9w/HGZSkvwPAAAAZRBz/0iYifwPAAAAhRFz/6owE/kfAAAACiPm/tEwk5Lk/8L1/9edW9L+9f/1/+vPl/5/yfr/9/Za/z9/v9D/747l9u/1/wP9f/1//X/9f/1/uqDX+v8x96/OslLmfwAAACiDmPvXhJnI/wAAAFAYMfdfE2Yi/wMAAEBhxNz/hjCTkuR//X/9f/1//X/9/9b71//vT/r/7en/d6D/P5GVq/9/vpvHr/+v/89Cvdb/j7n/jWEmJcn/AAAAUAYx918bZiL/AwAAQGHE3H9dmIn8DwAAAIURc//aMJOS5H/9f/1//X/9f/3/1vvX/+9P+v/t6f93oP/v8//1//X/6ape6//H3P+mMJOS5H8AAAAog5j73xxmIv8DAABA7xm6vJvF3P+WMJMF+f8ydwAAAABcdTH3X581FcFL8vf/+v/6/73f/1+VrtP/1//PerL/P5jp//eOq9L/f3YiPX/6//r/mf6//r/+v/4/Sa/1/2u5PxvN3hpmUpL8DwAAAGUQc/8NYSbyPwAAABRGzP2/FGYi/wMAAEBhxNy/LsykJPlf/79/+/8j4TbF7//7/H/9/17v//v8/17i8//b0//vQP9f/1//X/+fruq1/n/M/TeGmZQk/wMAAEAZxNx/U5iJ/A8AAACFEXP/L4eZyP8AAABQGDH3rw8zKUn+1//v8f5/bI6W+vP/9f/1//X/9f+XTv+/Pf3/DvT/9f/1//X/6ape6//H3P+2MJOS5H8AAAAog5j7bw4zkf8BAACgMGLuf3uYifwPAAAAhRFz/1iYSUnyv/5/j/f/8x78SKvP/7/c/n/1rvX/9f/1//X/i0r/vz39/w70//X/u9L/nzun/6//T67X+v8x928IMylJ/gcAAIAyiLl/Y5iJ/A8AAACFEXP/LWEm8j8AAAAURsz9m8JMSpL/9f/7ov+fdbP/7/P/9f/1//X/i0z/vz39/w70//X/ff6//j9d1Wv9/5j73xFmUpL8DwAAAGUQc//mMBP5HwAAAAoj5v53hpnI/wAAAFAYMfdvCTMpSf7X/9f/1//X/9f/b71//f/+pP/fnv5/B/r/+v9XoP8/p/+v/19ivdb/j7n/XWEmJcn/AAAAUAYx928NM5H/AQAAoDBi7r81zET+BwAAgMKIuX88zKQk+V//X/9f/1//X/+/9f71//uT/n97+v8d6P/r//v8f/1/uqrX+v8x998WZlKS/A8AAABlEHP/7WEm8j8AAAAURsz9E2Em8j8AAAAURsz9k2EmJcn/+v/6//r/+v+X1P9/+/z96v/n9P97i/5/e/r/Hej/6/9f9f7/sP4/hdJr/f+Y+7eFmZQk/wMAAEAZxNy/PcxE/gcAAIDCiLl/R5iJ/A8AAACFEXP/zjCTkuR//X/9f/1//X+f/996//r//Un/v73u9//jQ9T/1//X//f5//r/LNRr/f+Y++8IMylJ/gcAAIAyiLl/V5iJ/A8AAACFEXP/7jAT+R8AAAAKI+b+PWEmJcn/+v/6//r/+v/6/633r//fn/T/2/P5/x3o/+v/6//r/7NM9/5h/Ve91v+PuX9vmElJ8j8AAACUQcz97w4zkf8BAACgMGLu/5UwE/kfAAAACiPm/l8NMylJ/tf/b+ieVx+u/r/+v/6//n+N/n9/0v9vT/+/A/1//X/9f/1/umrR/n+I3ivd/4+5f1+YSUnyPwAAAJRBzP2/FmYi/wMAAEBhxNz/njAT+R8AAAAKI+b+/WEmJcn/+v8+/1//X/9f/7/1/le6/z8S71f/f1n0/9vT/+9A/1//X/9f/5+u6rXP/4+5/71hJiXJ/wAAAFAGMfffGWYi/wMAAEBhxNz/vjAT+R8AAAAKI+b+94eZlCT/6//r//dL//8a/X/9/6bHU7T+v8//7w79//b0/zvQ/9f/1//X/6ereq3/H3P/B8JMSpL/AQAAoAxi7v9gmIn8DwAAAIURc/+HwkzkfwAAACiMmPs/HGZSkvyv/6//3y/9/0z/X/+/6fHo/+v/t6L/357+fwf6//r/+v/6/3RVr/X/Y+7/9TCTkuR/AAAAKIOY++8KM5H/AQAAoDBi7v9ImIn8DwAAAIURc/9Hw0xKkv/1//X/9f/1//X/W+9f/78/6f+312f9/19cGy7vVv9/qNMB6P/r/69g/795PV6R/v8PFuv/z61qvr3+P1dCr/X/Y+7/WJhJSfI/AAAAlEHM/R8PM5H/AQAAoDBi7v9EmIn8DwAAAIURc/9vhJmUJP/r/1ePY769rP9f1P7/gP6//r/+f0no/7fXZ/1/n//fRP+/t4/f5//r/7NQr/X/Y+6/O8ykJPkfAAAAyiDm/nvCTOR/AAAAKIyY++8NM5H/AQAAoDBi7r8vzKQk+V//3+f/l6P/7/P/M/1//f+S0P9vT/+/A/1//f9e6///p/4//a3X+v8x998fZlKS/A8AAABlEHP/A2Em8j8AAAAURsz9vxlmIv8DAABAYcTc/8kwk5Lkf/3/fun/j/Vp//9J/f8r2P+/+dp8O/1//X/m6f+3p//fgf6//n+v9f99/j99rtf6/zH3PxhmsvT8P7rkLQEAAICrIub+3wozKcnf/wMAAEAZxNz/22Em8j8AAAAURsz9vxNmUpL8r//fL/1/n/+f6f/7/P+mx6P/r//fysr1/+M7j/6//r/+f6T/r/+v/0+zXuv/x9z/u2EmJcn/AAAAUAYx9z8UZiL/AwAAQF9o9f9kN4u5/0CYifwPAAAAhRFz/8Ewk5Lkf/1//X/9/x7t///Zxn/53nc+fnCb/r/+v/7/JVnRz/+vvvh9/r/+v/5/ov+v/6//T7Ne6//H3H8ozKQk+R8AAADKIOb+3wszkf8BAACgMGLuPxxmIv8DAABAYcTcPxVmUpL8r/+v/6//36P9/z7+/P94PvT/G3Wt/x/fdPX/W8r792kVXdn+/wPzPXH9/0vt/4+0vFT/X/+/n49f/1//n4V6rf8fc/90mElJ8j8AAACUQcj9A0fyOX+F/A8AAACFEXP/0TAT+R8AAAAKI+b+h8NMSpL/9f/1//X/9f99/n/r/bfr/1eGfP5/r0r9+5/VXij6/016p//fmv6//n8/H7/+v/4/C/Va/z/m/pkwk5LkfwAAACiDmPs/FWYi/wMAAEBhxNz/6TAT+R8AAAAKI+b+Y2EmJcn/+v/6//r/+v/6/63337Of/6//39Zy+/f6/4H+f7n7//+j/6//r/9Pd/Ra/z/m/uNhJiXJ/wAAAPD/7N1Jk2V1Wsfxk1hQWQFGuHPhxgiXRvgGWOhaX4BGuHFjhOECB1ScKZxHFBRnRXAeQAVBRAVnEVREcQYVZ3tueqLp7qgOMp/nqRxOnpuZdfPec/7/z2fBY2dncq8EkcWvkm+fHuTuvyNusf8BAACgGbn7vyRusf8BAACgGbn7vzRu6WT/6/9vpP+/Xinr/w+//9X9f77iBfb/n6n/P+n19f/L6P8/72b9/3no/6fp/1cY7/9vGYahr/7f8//1//p/1mRu/X/u/i+LWzrZ/wAAANCD3P1fHrfY/wAAANCM3P13xi32PwAAADQjd/9XxC2d7P8j/f/O0Gf/nxmv5/97/r/+X/8/m/7f8//PZ7P9/z1vfefT/5+6/3/0/lUvO9P+v8Xn/98y9sFt9/M3atvv/5T9/+WTvl7/T4vm1v/n7v/KuKWT/Q8AAAA9yN3/VXGL/Q8AAADNyN1/V9xi/wMAAEAzcvd/ddzSyf5f3/P/r+x9fKH9f9H/6//3PqD/1//r/xfL8/+n9fT8/ztfvvWO15/8lKfO8vod9f+jtt3PL/39e/6//p/j5tb/5+7/mrilk/0PAAAAPcjd/7Vxi/0PAAAAzcjd/3Vxi/0PAAAAzcjd//VxSyf7f339/6Kf/1820v9/ov5f/3/48/X/+/T/+v910P9P66n/P8/r6//1//p//T/rNbf+P3f/N8Qtnex/AAAA6EHu/m+MW+x/AAAAaEbu/rvjFvsfAAAAlutIyJa7/2rc0sn+1/9feP+fibDn/+v/9f/6f/3/Buj/p+n/V9D/6//1//p/1mpu/X/u/nvilk72PwAAAPQgd/83xS32PwAAADQjd/83xy32PwAAADQjd/+3xC2d7H/9/xae/6//1/8f+Xz9/z79v/5/HfT/0/T/K+j/b7Sfv1n/r//X/3PQGfv/Nye+ba+l/8/d/61xSyf7HwAAAHqQu//b4hb7HwAAAJqRu//b4xb7HwAAAJqRu/874pZO9r/+X/+v/9f/n7v/P/633h79/zj9/2bo/6fNpv/fuTT6Yf3/4vt/z//X/+v/OWRuz//P3f+dcUsn+x8AAAB6kLv/u+KWif1/5t/MBwAAALYqd/93xy1+/g8AAACLl9VZ7v7viVs62f/6f/2//l//7/n/468/1f8/deD96f/nRf8/bTb9/wn0//r/Jb9//b/+n+Pm1v/n7v/euKWT/Q8AAAA9yN1/b9xi/wMAAEAzcvd/X9xi/wMAAEAzcvd/f9zSyf4f7/+v//f6/9PR/x9+/731/2lT/X/+GfX/k/3/Z3n+f5/0/9M23/9f1v8f/vPr/y/Qtt9/4/3/lVVfr/9nzNz6/9z998Utnex/AAAA6EHu/vvjFvsfAAAAmpG7/wfiFvsfAAAAmpG7/wfjlk72v+f/6//1/57/32j/f6HP/x823v9f0v+fkv5/muf/r6D/1//r/z3/n7WaW/+fu/+BuKWT/Q8AAAA9eOCNYW/3/9Aw2P8AAACwRAf/3YGj/0JpyN3/w3GL/Q8AAACzdvkMn5u7/0filkP7f73t3Zzo//X/+n/9v/5//PXP2v+vejCy5/9vhv5/mv5/Bf3/RfTzlxrr/x886evn0P/frf9nZg71/89c//i2+v/c/T8at/j5PwAAADQjd/+PxS32PwAAADQjd/+Pxy32PwAAADQjd/9PxC2d7P8L7/8nglj9v/5f/6//b6n/X0X/vxn6/2n6/xX0/57/7/n/+n/W6nr/f/j74bb6/9z9Pxm3dLL/AQAAoAe5+38qbrH/AQAAoBm5+x+MW+x/AAAAaEbu/p+OWzrZ/57/r//X/+v/9f/jr6//Xyb9/zT9/wr6f/2//l//z1odev7/Advq/3P3PxS3dLL/AQAAoAe5+x+OW+x/AAAAaEbu/p+JW+x/AAAAaEbu/p+NWzrZ//r/i+3/8+P6f/3/oP/X/+v/N6Lb/n9n7Fei407o/1/4oqufc/gj+n/9/8L7//xerf/X/7Nds+j/r13/p8vc/T8Xt3Sy/wEAAKAHuft/Pm6x/wEAAKAZuft/IW6x/wEAAKAZuft/MW454/7/pLW+q83R/3v+v/5f/6//H399/f8yddv/n5Ln/6+g/2+m//f8f/0/8zCL/v/Af87d/0txi5//AwAAQDNy9/9y3GL/AwAAQDNy9/9K3GL/AwAAQDNy9/9q3NLJ/tf/6//1//p//f/465+3/98dxun/N0P/P03/v4L+X/+v/9f/s1Zz6/9z9z8St3Sy/wEAAKAHufsfjVvsfwAAAGhG7v5fi1vsfwAAAGhG7v5fj1s62f/6/+31/5f1//p//X+T/f9J9P+bof+ftrn+P79fzLD/f2ziDYz1/9cu6//1//p//T/nNLf+P3f/b8Qtnex/AAAA6EHu/sfiFvsfAAAAmpG7//G4xf4HAACAZuTu/824pZP9r//3/H/9v/5f/z/++vr/ZdL/T/P8/xU8/1//r//X/7NWc+v/c/c/Ebd0sv8BAACgB7n7n4xb7H8AAABoRu7+34pb7H8AAABoRu7+p+KWTva//l//r//X/19I/39V/3+U/n8zLq7/H/T/+n/9/wr6f/3/qv7/tlV/Epqzqf7/zfh+v6r/z93/23FLJ/sfAAAAepC7/+m4xf4HAACAZuTu/524xf4HAACAZuTu/924pZP9r//X/+v/9f+e/z/++vr/ZfL8/2k99v9jv0afSP+v/9f/e/4/a7Wp/v+k3v/of87d/3txSyf7HwAAAHqQu/+ZuMX+BwAAgGbk7n82brH/AQAAoBm5+38/bulk/+v/9f+H+/9h0P/r//X/+zbQ/+8O+v+10/9P67H/P8vr6/8b7f9vGhrq/6+c+PX6f+Zobv1/7v4/iFs62f8AAADQg9z9fxi32P8AAADQjNz9fxS32P8AAADQjNz9fxy3tLT/P3Zy+rb8/v/ykS/U/w/D8Mpdnv+v/594ff3/bPr/+quq/18f/f80/f8K+v82+3/P/9f/szVz6/9z9/9J3NLS/gcAAIDO5e7/07jF/gcAAIBm5O7/s7jF/gcAAIBm5O5/Lm7pZP8vv/8/+oX6/+GGnv+v/9/7QBP9/86Jr6//1/+37Eb7+4d249c0/b/+X/8/2s/vnPDPPYP+X/+v/2fE3Pr/3P1/Hrd0sv8BAACgB7n7n49b7H8AAABoRu7+F+IW+x8AAACakbv/L+KWTva//l//31z/f1Mf/f+u5//r//X/o+by/P/bb//sl/T/+v8W+/8p+n/9v/6fo+bW/+fu/8u4pZP9DwAAAD3I3f9XcYv9DwAAAM3I3f9i3GL/AwAAQDNe3As5d4e/HoYu9//x/v/mYb9Q3TfW/0ejpv8/QP9/+P17/v/43x+bff7/ya+/sf7/M/T/B+n/N2Mu/b/n/5/v/ev/9f9Lfv9n6v8/9fjX6/9p0dz6/9z9L8Utnex/AAAA6EHu/r+JW+x/AAAAaEbu/r+NW+x/AAAAaEbu/pfjlk72v+f/6//1//p/z/8ff339/zLp/6fp/1fQ/994P5/fVfX/y33+/yfo/1mfufX/ufv/Lm7ZG36fdts5/98EAAAAZiR3/9/HLZ38/B8AAAB6kLv/H+IW+x8AAACakbv/H+OWTva//l//v6T+f7iq/9f/6//1/9P0/9P0/yv00//vjn1w2/38jdr2+2+m//f8f9Zobv1/7v5/ils62f8AAADQtjf2/pi7/5/jFvsfAAAAmpG7/1/iFvsfAAAAmpG7/5W4pZP9r//X/y+p/z/f8/+/QP9/5PX1//r/lun/81f0cfr/Ffrp/0dtu59f+vvX/+v/OW5u/X/u/lfjlk72PwAAAPQgd/+/xi32PwAAADQjd/+/xS32PwAAADQjd/+/xy1N7P9LKz9D/99X/78z9Nj/e/6//l//35Pl9P8Pj/4i7fn/+n/9/3Lfv/5f/89xc+v/c/e/tnOpwf0PAAAA7frcT//iV0/7ua/t/XF3+I+4xf4HAACAZuTu/8+4xf4HAACAZuTu/6+4pZP9r//vq//v8/n/+n/9v/6/Jxvr/5+L/2KGz/+fMv/+f/+fR/T/+v8lvn/9v/6f4+bW/+fu/++45cDwW/2/ogcAAABs1C1n+/Tc/f8Tt3Ty838AAADoQe7+/41bju3/a6f8t9oBAACAedod/i9u6eTn//r/mff/wwX1//F5+v99+n/9/9jr6/+XaTnP/x838/7/2o7n/+v/J+j/9f/6f46aW/+fu//pJ4Yu9z8AAAA06tDvKPz/3h93h7fFLfY/AAAANCN3/9vjFvsfAAAAmpG7/x1xSyf7/4z9/z36/3Hzev7/lfq/PP+/8/7/3t3R19f/6/9bpv+fNv/n/+v/9f/Lff/6f/0/x52h/98bpBfd/+fuf2fc0sn+BwAAgB7k7n9X3GL/AwAAQDNy9787brH/AQAAoBm5+98Tt3Sy/z3/fwv9/32Xh+FC+/9TPP9f/99H/3/C67fT/3/yrVef//wvfPwR/T/XbbL/z78X9P/6f/3/Pv2//l//z1Fze/5/7v73xi2d7H8AAADoQe7+1+MW+x8AAACakbv/fXHLW/v/2W29KwAAAGCdcve/P27p5Of/+v8Wn/+/zP4//1pvof+/urz+P5vi3vt/z//X/x/n+f/T9P8r6P/1//p//T9rNbf+P3f/B+KWTvY/AAAA9CB3/wfjltz/O2f+rXsAAABgZnL3fyhu8fN/AAAAaEbu/jfilk72v/5f/z+X/j95/v/1r/P8/336f/3/Wej/p+n/V9D/6//1//p/1mpu/X/u/g/HLZ3sfwAAAOhB7v434xb7HwAAAJqRu/8jcYv9DwAAAM3I3f/RuOXY/m/zNwT0//p//b/+X/8//vr6/2XS/0/T/6+g/9f/N9v/X1n5/vX/XIS59f+5+z8eAAD//+WKZqU=") chdir(&(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 1.84739121s ago: executing program 2 (id=1008): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180200005566e2ff0002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0xa2000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000100)=""/129) 1.758512663s ago: executing program 2 (id=1010): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="375e27bd7000fedbdf25140000001c0007800c0003"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x50) 1.551711617s ago: executing program 2 (id=1014): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x1200082, &(0x7f0000000500)=ANY=[@ANYRES8=0x0], 0x5, 0x1530, &(0x7f0000002f80)="$eJzs3AuYjlX3MPC19t43Y5r0NMlh2Huvm4cG2yRJDklySJIkSc4JSZMkCYkhp6QhCTlOyGEIyWFi0jifDzknyStJkpCQZH/XdPj83/q/V/2/t/fz/t9Zv+u6r9lrnmetZ93Pmmvuw3PNfNVteK0mtas3IiL4p+DPX1IAIAYABgPANQAQAED5+PLx2Y/nkZjyz70I+2s9mH6lO2BXEs8/Z+P552w8/5yN55+z8fxzNp5/zsbzz9l4/ozlZNtmFbqWt5y7/XL/Pwb4/n8OxMf/nI3n/x/De9/nf5zE88/ZeP45G88/Z+P552w8/5yN55+z2N/EPH/GcrK/5D5y7l+K/cPniP/NnzP8+lb9k3WKBz+X+Vf1Gfw/5V2hHzvGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYznMeX+ZAoBf11e6L8YYY4wxxhhjjP11fO4r3QFjjDHGGGOMMcb+9RBASVAQQC7IDTGQB2LhKoiDqyEvXAMRuBbi4TrIB9dDfigABaEQJEBhKAIaDFggCKEoFIMoFIcScAMkQkkoBaXBQRlIghuhLNwE5eBmKA+3QAW4FSpCJagMVeA2qAq3QzW4A6rDnVADakItqA13QR28G+rCPVAP7oX6cB80gPuhITwAjeBBaAwPQRN4GJpCM2gOLaAltILWv82HP5P/PPSCF6A39IEU6Av94EXoDwNgIAyCwfASDIGXYSi8AqkwDIbDqzACXoOR8DqMgtEwBt6AsTAOxsMEmAiTIA3ehMkwBabCWzANpsMMmAnpMAtmw9swB+bCPHgH5sO7sAAWwiJYDBnwHiyBpZAJ78My+ACyYDmsgJWwClbDGlgL62A9bICNsAk2wxbYCtvgQ9gOO2An7ILdsAf2wkewDz6G/fAJHIBP/4f5536T3x0BAQUKVKgwF+bCGIzBWIzFOIzDvJgXIxjBeIzHfJgP82N+LIgFMQEAi2ARNGiQkLAoFsUoRrEElsBETMRSWAodOkzCJCyLN2E5LIflsTxWwApYESthJayCVbAqVsVqWA2r37oQAGtgLayFd+FdeDfWxbpYD+thfayPDbABNsSG2AgbYWNsjE2wCTbFptgcm2NLbImtsTW2wTbYFttie2yPHbADdsSOmIzJ2Ak7YWfsjF2wC3bFrtgNu2F37IE98Hl8Hl/AF7AP1hB9sR/2w/7YHwfiIByEL+EQfBlfximYisNwOL6Kr+JrOBLP4igcjWNwDFYV43A8TkASkzAN03AyTsapOBWn4XScjjMxHWfhbJyNc3AuzsV3cD6+i+/iQlyIizEDM3AJLsVMzMRleA6zcDmuwJW4CgBX4Vpch2txA27EDbgZN+NW3Iof4oe4A3fgLtyFe3APfoQf4cf4MaZiMwA4iAfxEB7Cw3gYj+ARPIpH8Rgew+N4HE/gCTyJp/A0nsIzeAbP4jk8j+fxAl7Ai/hswheN95RcnwoimxJK5BK5RIyIEbEiVsSJOJFX5BURERHxIl7kE/lEfpFfFBQFRYJIEEVEEWGEESRCUVQUFVERFSVECZEoEkUpUUr0FU4kiSRRVpQV5UQ5UV7cIiqIW0VFUUm0c1VEFVFVtHfVxB2iuqguaoiaopaoLWqLOqKOqCvqinqinqgv6gsFAA1FXxyID4rsyTQRw7CpGI7NRQvRUrQSr+Ejoo0YiW1FO9FePCZG4yjsKNq4ZPGk6CTGY2fxtJiAz4iuYhJ2E8+J7qKH6CmeF71EW9db9BHTsK/oJ2ZifzFADBSDxBysKbInVku8IlLFMDFcvCoW42tipHhdjBKjxRjxhhgrxonxYoKYKCaJNPGmmCymiKniLTFNTBczxEyRLmaJ2eJtMUfMFfPEO2K+eFcsEAvFIrFYZIj3xBKxVGSK98Uy8YHIEsvFCrFSrBKrxRqxVqwT68UGsVFsEpvFFrFVbBMfiu1ih9gpdondYo/YKz4S+8THYr/4RBwQn4qD4m/ikPhMHBafiyPiC3FUfCmOia/EcfG1OCH6iJPilDgtvhVnxHfirDgnzovvxQXxg7gofhSXhBcgUQoppZKBzCVzyxiZR8bKq2ScvFrmldfIiLxWxsvrZD55vcwvC8iCspBMkIVlEamlkVaSDGVRWUxGZXFZQt4gE2VJWUqWlk6WkUnyRllW3iTLyZtleXmLrCBvlRVlJVlZVpG3yarydllN3iGryztlDVlT1pK15V2yjrxb1pX3yHryXllf3icbyPtlQ/mAbCQflI3lQ7KJfFg2lc1kc9lCtpStZGv5iGwjH5VtZTvZXj4mO8jHZUf5hEyWT8pO8inZWT4tu8hnZFf5rOwmn5PdZQ/ZU/4oL0kve8s+MkX2lf3ki7K/zD4WDpKD5UtyiHxZDpWvyFQ5TA6Xr8oR8jU5Ur4uR8nRcox8Q46V4+R4OUFOlJNkmnxTTpZT5FT5lpwmp8sZcqZMl7PkwF8qzfsT+VN+zff48yFZzpJDU1LlsJStcpv8UG6XO+ROuUvulnvkXrlX7pP75H65Xx6QB+RBeVAekofkYXlYHpFH5FF5VB6Tx+RxeVyekCfkSXlKfi+/lWfkd/KsPCfPye/lBXlBXvzlPQCFSiiplApULpVbxag8KlZdpeLU1SqvAAB1rYpX16l86nqVXxVQBVUhlaAKqyJKK6OsIhWqoqqYiqriqoS6QSWqkqqUKq2cKqOS1I0q8k/m/31/8tf+Vs74+Z1SrVVr1Ua1UW1VW9VetVcdVAfVUXVUySpZdVKdVGfVWXVRXVRX1VV1U91Ud9Vd9VQ9VS/VS/VGUCkqRfVTL6r+aoAaqAapweolNUQNUUPVUJWqUtVwNVyNUCPUSDVSjVKj1Bg1Ro1VY9V4NV5NVBNVmkpTk9VkNVVNVdPUNDVDzVDpKl3NVrPVHDVHzVPz1Hw1Xy1QC9QitUhlqAy1RC1RmSpTLVPLVJZarparlWqlWq1Wq7VqrVqv1quNaqParDarLLVNbVPb1Xa1U+1Uu9VutVftVfvUPrVf7VcH1AF1UB1Uh9QhdVgdVkfUEXVUHVXH1DF1XB1XJ9QJdVKdVKfVaXVGnVFn1Vl1Xp1XF9QFdVFdVJfUpezTvkAEIlCBCnIFuYKYICaIDWKDuCAuyBvkDSJBJIgP4oN8wfVB/qBAUDAoFCQEhYMigQ5MYAMKwqBoUCyIBsWDEsENQWJQMigVlA5cUCZICm4MygY3BeWCm4PywS1BheDWoGJQKagcVAluC6oGtwfVgjuC6sGdQY2gZlArqB3cFdQJ7g7qBvcE9YJ7g/rBfUGD4P6gYfBA0Ch4MGgcPBQ0CR4OmgbNguZBi6Bl0Cpo/VfVx+z63p8t8Kjrrfvo3NBX99Mv6v56gB6oB+nB+iU9RL+sh+pXdKoepofHvKpH6Nf0SP26HqVH6zH6DT1Wj9Pj9QQ9UU/SafpNPVlP0VP1W3qanq5n6Jk6Xc/Ss/Xbeo6eq+fpd/R8/a5eoBfqRXqxztDv6SV6qc7U7+tl+gOdpZfrFXqlXqVX6zV6rV6n1+sNeqPepDfrLXqr3qY/1Nv1Dr1T79K79R69V3+k9+mP9X79iT6gP9UH9d/0If2ZPqw/10f0F/qo/lIf01/p4/prfUJ/o0/qU/q0/laf0d/ps/qcPq+/1xf0D/qi/lFf0j775D778G6UUSaXyWViTIyJNbEmzsSZvCaviZiIiTfxJp/JZ/Kb/KagKWgSTIIpYoqYbGTIFDVFTdRETQlTwiSaRFPKlDLOOJNkkkxZU9aUM+VMeVPeVDAVTEVT0VQ2lc1t5jZzu7nd3GHuMHeaO01NU9PUNrVNHVPH1DV1TT1Tz9Q39U0D08A0NA1NI9PINDaNTRPTxDQ1TU1z09y0NC1Na9PatDFtTFvT1rQ37U0H08F0NB1Nskk2nUwn09l0Nl1MF9PVdDXdTDfT3XQ3PU1P08v0Mr1Nb5NiUkw/08/0N/3NQDPQDDaDzRAzxAw1Q02qSTXDzXAzwowwI81IM8qMNmPMG2asGWfGmwlmoplk0kyamWwmm6lmqplmppkZZoZJN+lmtplt5pg5Zp6ZZ+ab+WaBWWAWmUUmw2SYJWaJyTSZZplZZrJMlllhVphVZpVZY9aYdWad2WA2mE1mk9litphtZpvZbrabnWan2W12m71mr9ln9pn9Zr85YA6Yg+agOWQOmRg4bI6YI+aoOWqOmWPmuDluTpgT5qQ5aU6b0+aMOWPOmrPmvDlvLpgfzEXzo7lkvImxeWysvcrG2attXnuN/W1c0BayCbawLWK1zW8L/F1srLWJtqQtZUtbZ8vYJHvj7+KKtpKtbKvY22xVe7ut9ru4jr3b1rX32Hr2Xlvb3vV3cX17n21gH7YNbTPbyLawjW0r28Q+bJvaZra5bWFb2la2g33cdrRP2GT7pO1kn/pdvMQutevservBbrT77Mf2vP3eHrNf2Qv2B9vb9rGD7Ut2iH3ZDrWv2FQ77HfxGPuGHWvH2fF2gp1oJ/0unmFn2nQ7y862b9s5du7v4gz7np1vM+0Cu9Ausot/irN7yrTv22X2A5tll9sVdqVdZVfbNXbt/+11pd1st9itdq/9yG63O+xOu8vutnt+irP3Y7/9xB6wn9qj9kt7yH5mD9vj9oj94qc4e/+O26/tCfuNPWlP2dP2W3vGfmfP2nM/7X/2vn9rf7SXrLdASIIkKQooF+WmGMpDsXQVxdHVlJeuoQhdS/F0HeWj6yk/FaCCVIgSqDAVIU2GLBGFVJSKUZSKUwm6gRKpJJWi0uSoDCXRjVSWbqJydDOVp1uoAt1KFakSVaYqdBtVpdupGt1B1elOqkE1qRbVpruoDt1Ndekeqkf3Un26jxrQ/dSQHqBG9CA1poeoCT1MTakZNacW1JJaUWt6hNrQo9SW2lF7eow60OPUkZ6gZHqSOtFT1Jmepi70DHWlZ6kbPUfdqQf1pOepF71AvakPpVBf6kcvUn8aQANpEA2ml2oAAA2lVyiVhtFwepVG0Gs0kl6nUTSaxtAbNJbG0XiaQBNpEqXRmzSZptBUeoum0XSaQTMpnWbRbHqb5tBcmkfv0Hx6lxbQQlpEiymD3qMltJQy6X1aRh9QFi2nFbSSVtFqWkNrfW4A2kAbaRNtpi20lbbRh7SddhDSLtpNe2gvfUT76GPaT5/QAfqUDhLiIfqMDtPndIS+oKP0JR2jr+g4fU0n6Bs6SafoNH1LZ+g7Okvn6Dx9TxfoB7pIP9Il8gQhhiKUoQqDMFeYO4wJ84Sx4VVhXHh1mDe8JoyE14bx4XVhvvD6MH9YICwYFgoTwsJhkVCHJrQhhWFYNCwWRsPiYYnwhjAxLBmWCkuHLiwTJoU3hmXDm8Jy4c1h+fCWsEJ4a1gxrBQ+fG+V8Lawanh7WC28I6we3hnWCGuGtcLa4V1hnfDusG54T1gvvDcsF94XNgjvDxuGD4SNwgfDxuFDYZPw4bBp2CxsHrYIW4atwtbhI2Gb8NGwbdgubB8+FnYIHw87hk+EyeGTYafwqT98PCXsG/YLXwxfDL2/Ry6KLo5mRN+LLokujWZG348ui34QzYouj66Iroyuiq6Oromuja6Lro9uiG6Mbopujm6Jbo16Xzs3OHTCSadc4HK53C7G5XGx7ioX5652ed01LuKudfHuOpfPXe/yuwKuoCvkElxhV8RpZ5x15EJX1BVzUVfclXA3uERX0pVypZ1zZVySa+Vau9aujXvUtXXtXHv3mHvMPe4ed0+4J9yTrpN7ynV2T7su7hnX1T3rnnXPue6uh+vpnne93Auut+vjUlyK6+f6uf6uvxvoBrrBbrAb4oa4oW6oS3Wpbrgb7ka4EW6kG+lGuVFujBvjxrqxbrwb7yb6iS7NpbnJbrKb6qa6aW6am+FmuHSX7ma72W6Om+PmuXlufuJ8t8AtcIvcIpfhMtwSt8Rluky3zC1zWS7LrXAr3Cq3yq1xa9w6t85tcBvcJrfJbXFb3Da3zW13291Ot9PtdrvdXrfX7XP73H633x1wB9xBd/C8d4fcYfe5O+K+cEfdl+6Y+8odd1+7E+4bd9Kdcqfdt+6M+86ddefcefe9u+B+cBfdj+6S8y4t8mZkcmRKZGrkrci0yPTIjMjMSHpkVmR25O3InMjcyLwIwvzIu5EFkYWRRZHFkYzIe5ElkaWRzMj7kWWRDyJZkeWRFZGVkVWR1RHvC28PfVFfzEd9cV/C3+ATfUlfypf2zpfxSf5GX9bf5Mv5m315f4uv4G/1FX0lX9k38819C9/St/Kt/SO+jX/Ut/XtfHv/mO/gH/cd/RM+2T/pO/mnfGf/tO/in/Fd/bO+m3/Od/c9fE//vO/lX/C9fR+f4vv6fv5F398P8AP9ID/Yv+SH+Jf9UP+KT/XD/HD/qh/hX/Mj/et+lB/tx/g3/Fg/zo/3E/xEP8mn+Tf9ZD/FT/Vv+Wl+up/hZ/p0P8vP9m/7OX6un+ff8fP9u36BX+gX+cU+w7/nl/ilPtO/75f5D3yWX+5X+JUeYlb7NX6tX+fX+w1+o9/kN/stfqvf5j/02/0Ov9Pv8rv9Hr/Xf+T3+Y/9fv+JP+A/9Qf93/wh/5k/7D/3R/wX/qj/0h/zX/nj/mt/wn/jT/pT/rT/1p/x3/mz/pw/77/3F/wP/qL/0V/iv1ljjDHGGPtT5B883ve/+Z74ZcvWDwCu3lHoyG9rbsr/83qASOgQAYAn+3R78JdPN1Jq1EhJSfnluVkSgmILASByOT8XXI6XQ3t4HJKhHZT9b/sbIHpcoF/q/7r9tn70FoDY/5ITA5fjy/Vv+gf1x83/w/oLARKLXc7JA5fjy/XL/YP6Bdr8Qf08n6UBtP0vOXFwOb5cPwkehacg+Y8G+rODf+pZjDHGGGOMMcb+YwwQlbv80fVt9vV5grqckxsux390ff6TP3dNyhhjjDHGGGOMsX+RZ3r0fOKR5OR2Xa7UAuBKvjov/swi179HG/9hC/nv0cY/Wlzp30yMMcYYY4yxv9rlk/4r3QljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZZz/f/4d2JXeh8ZY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxK+3/BAAA//9MkSIw") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) 1.348980121s ago: executing program 4 (id=1016): syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file1\x00', 0x2a18c46, &(0x7f0000001180)={[{@utf8}, {@uni_xlateno}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@utf8}, {@rodir}, {@utf8no}, {@uni_xlateno}, {@rodir}, {@shortname_winnt}, {@uni_xlate}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}]}, 0x81, 0x2c2, &(0x7f0000001240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/59, 0x5e) 1.195382455s ago: executing program 2 (id=1017): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x59, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0xc, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xb, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000180)={0x20, 0x8, 0x28, {0x28, 0x31, "f70ba381030000000000000000cb4fdca0560f920d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.136402306s ago: executing program 4 (id=1019): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1, 0x0, 0x3}}, 0x20) 885.870101ms ago: executing program 1 (id=1020): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0xffffffffffffffff, 0x3, 0xffffffff, 0x3, 0x22}, 0x6}) 803.483433ms ago: executing program 4 (id=1021): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000fc0)={0x30, r1, 0x215, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x15}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 786.000373ms ago: executing program 0 (id=1022): r0 = epoll_create1(0x80000) r1 = openat$dlm_plock(0xffffff9c, &(0x7f0000000040), 0x101000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x2}) 729.495945ms ago: executing program 1 (id=1023): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x11, @loopback, 0x15, 0x0, 'wlc\x00', 0x3c, 0xa, 0x80}, 0x2c) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x14, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) 696.538885ms ago: executing program 4 (id=1024): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2004010, &(0x7f0000000100), 0x2, 0x522, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0xe) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 625.991316ms ago: executing program 1 (id=1025): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, [@printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x10}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) 582.738867ms ago: executing program 0 (id=1026): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a2200000000000400000000000000002d0000000000000104800000200002000a0000000000000000000000000000000000000000000000010000000d0001007564703a73"], 0x6c}}, 0x0) 559.433428ms ago: executing program 3 (id=1027): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x3c, r1, 0x852dd6c070cd7e4d, 0xfffffffc, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x3c}, 0x4, 0x700000000000000, 0x0, 0x20084885}, 0x4000010) 500.169229ms ago: executing program 1 (id=1028): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x5522, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) 454.28212ms ago: executing program 0 (id=1029): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@mcast2, 0x800, 0x0, 0x2, 0x1, 0x1, 0x100}, 0x20) 323.954523ms ago: executing program 1 (id=1030): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) 245.506715ms ago: executing program 0 (id=1031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x300}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x3000000, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x8890}, 0x24008080) 175.399096ms ago: executing program 4 (id=1032): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000040)=0x2, 0x4) 168.840336ms ago: executing program 3 (id=1033): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x2000000000000190, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) 109.219447ms ago: executing program 0 (id=1034): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)={0x14, 0x42, 0x601, 0x0, 0x25dfdbff, "", [@typed={0x4, 0x200}]}, 0x14}], 0x1}, 0x800) 55.954128ms ago: executing program 3 (id=1035): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 2.10056ms ago: executing program 0 (id=1036): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000540), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="050000000100000000000000000000008fabcad33e4a195660a1b2b8072fede33b42dce14ef04d185fd980c73999f9ddebe5df50a9e2e3423a2f76189788c15ddb5931818ea3981a4f7ad71425"], 0x48}, 0x2}, 0x0) 330.98µs ago: executing program 4 (id=1037): r0 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001f80)=@newtaction={0x70, 0x13, 0x1, 0x1, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x12, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x47, 0xfff, 0x4, 0x5, 0x2}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x989}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x101}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) 0s ago: executing program 1 (id=1038): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x3, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.54' (ED25519) to the list of known hosts. [ 60.531446][ T4176] cgroup: Unknown subsys name 'net' [ 60.668708][ T4176] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 62.273730][ T4176] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 63.625679][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 63.760315][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 63.775146][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.783353][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.794940][ T4189] device bridge_slave_0 entered promiscuous mode [ 63.825804][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.832971][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.841918][ T4189] device bridge_slave_1 entered promiscuous mode [ 63.849894][ T4199] chnl_net:caif_netlink_parms(): no params data found [ 63.865007][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 63.885262][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 63.930634][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.964095][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.024672][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.032214][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.041417][ T4188] device bridge_slave_0 entered promiscuous mode [ 64.053922][ T4189] team0: Port device team_slave_0 added [ 64.075921][ T4189] team0: Port device team_slave_1 added [ 64.083955][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.092149][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.100877][ T4188] device bridge_slave_1 entered promiscuous mode [ 64.116848][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.124185][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.132414][ T4199] device bridge_slave_0 entered promiscuous mode [ 64.147667][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.154956][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.163690][ T4199] device bridge_slave_1 entered promiscuous mode [ 64.184542][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.193814][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.203679][ T4190] device bridge_slave_0 entered promiscuous mode [ 64.246490][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.255169][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.263791][ T4190] device bridge_slave_1 entered promiscuous mode [ 64.276988][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.284289][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.310446][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.324885][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.335835][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.356327][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.372661][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.379863][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.406025][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.419146][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.449196][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.456660][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.465538][ T4194] device bridge_slave_0 entered promiscuous mode [ 64.480437][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.499292][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.515464][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.523398][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.531617][ T4194] device bridge_slave_1 entered promiscuous mode [ 64.568666][ T4188] team0: Port device team_slave_0 added [ 64.582366][ T4199] team0: Port device team_slave_0 added [ 64.597806][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.617318][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.628517][ T4188] team0: Port device team_slave_1 added [ 64.636382][ T4199] team0: Port device team_slave_1 added [ 64.646655][ T4189] device hsr_slave_0 entered promiscuous mode [ 64.654647][ T4189] device hsr_slave_1 entered promiscuous mode [ 64.663904][ T4190] team0: Port device team_slave_0 added [ 64.698437][ T4190] team0: Port device team_slave_1 added [ 64.716995][ T4194] team0: Port device team_slave_0 added [ 64.747655][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.756836][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.787874][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.800987][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.807980][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.835034][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.853302][ T4194] team0: Port device team_slave_1 added [ 64.871412][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.878413][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.905996][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.918970][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.926234][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.953137][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.975941][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.983420][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.010979][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.029850][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.036838][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.065557][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.112990][ T4199] device hsr_slave_0 entered promiscuous mode [ 65.120603][ T4199] device hsr_slave_1 entered promiscuous mode [ 65.127865][ T4199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.137879][ T4199] Cannot create hsr debugfs directory [ 65.154979][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.162246][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.190100][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.214056][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.221184][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.247299][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.285853][ T4188] device hsr_slave_0 entered promiscuous mode [ 65.292635][ T4188] device hsr_slave_1 entered promiscuous mode [ 65.300576][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.309306][ T4188] Cannot create hsr debugfs directory [ 65.363085][ T4190] device hsr_slave_0 entered promiscuous mode [ 65.370871][ T4209] Bluetooth: hci0: command 0x0409 tx timeout [ 65.378364][ T4190] device hsr_slave_1 entered promiscuous mode [ 65.385252][ T4200] Bluetooth: hci2: command 0x0409 tx timeout [ 65.392044][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.392218][ T4200] Bluetooth: hci4: command 0x0409 tx timeout [ 65.404654][ T4190] Cannot create hsr debugfs directory [ 65.406849][ T4200] Bluetooth: hci3: command 0x0409 tx timeout [ 65.459712][ T4200] Bluetooth: hci1: command 0x0409 tx timeout [ 65.496879][ T4194] device hsr_slave_0 entered promiscuous mode [ 65.504050][ T4194] device hsr_slave_1 entered promiscuous mode [ 65.511563][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.519123][ T4194] Cannot create hsr debugfs directory [ 65.757161][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.770937][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.785795][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.796232][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.857520][ T4199] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.877874][ T4199] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.886968][ T4199] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.896366][ T4199] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.936468][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.947672][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.970029][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.991876][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.067598][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.088184][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.101173][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.111011][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.123648][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.169153][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.180839][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.196924][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.206639][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.217261][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.236049][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.245614][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.271328][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.282675][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.292174][ T3031] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.300771][ T3031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.309231][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.319670][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.328022][ T3031] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.335124][ T3031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.346029][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.374984][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.394089][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.406452][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.417625][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.453046][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.463655][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.473834][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.483171][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.493539][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.501585][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.542549][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.550678][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.558604][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.569716][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.578269][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.588255][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.597794][ T240] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.606254][ T240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.616364][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.625565][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.634560][ T240] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.641909][ T240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.650159][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.659139][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.669250][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.682091][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.694051][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.703121][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.715658][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.727723][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.776344][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.797740][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.806835][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.829573][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.838444][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.848293][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.857077][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.871240][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.886187][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.906547][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.918332][ T240] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.926037][ T240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.942631][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.952085][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.962837][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.976928][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.012607][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.024541][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.033582][ T3031] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.040716][ T3031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.052545][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.061163][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.073916][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.104286][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.132630][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.149053][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.157704][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.166844][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.176084][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.184780][ T3031] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.192183][ T3031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.201237][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.210660][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.219217][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.228056][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.239371][ T3031] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.246514][ T3031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.255416][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.264285][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.273324][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.313402][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.321023][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.332389][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.342242][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.351969][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.361099][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.371914][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.380697][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.390495][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.399203][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.407224][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.415363][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.423232][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.431647][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.439753][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.451562][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 67.459914][ T4234] Bluetooth: hci3: command 0x041b tx timeout [ 67.463256][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.468194][ T4234] Bluetooth: hci4: command 0x041b tx timeout [ 67.478165][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.486402][ T4234] Bluetooth: hci2: command 0x041b tx timeout [ 67.540574][ T4234] Bluetooth: hci1: command 0x041b tx timeout [ 67.546734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.555644][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.571946][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.583327][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.592505][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.601799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.613659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.623050][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.632280][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.641785][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.650972][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.658036][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.666009][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.675990][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.685037][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.692289][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.701468][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.710509][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.723690][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.744981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.756693][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.771027][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.784474][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.810211][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.819164][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.866831][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.876749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.887158][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.933057][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.951072][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.961235][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.968975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.002636][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.020714][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.029161][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.037763][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.046740][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.055536][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.065735][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.075408][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.088592][ T4199] device veth0_vlan entered promiscuous mode [ 68.098394][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.116105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.125856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.135276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.144666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.161423][ T4199] device veth1_vlan entered promiscuous mode [ 68.189298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.198943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.207916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.217531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.226428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.234998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.244936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.255269][ T4189] device veth0_vlan entered promiscuous mode [ 68.279011][ T4189] device veth1_vlan entered promiscuous mode [ 68.294267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.310688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.319073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.335418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.355098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.363792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.373276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.381939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.391558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.408794][ T4188] device veth0_vlan entered promiscuous mode [ 68.431893][ T4199] device veth0_macvtap entered promiscuous mode [ 68.446040][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.455016][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.464303][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.481055][ T4188] device veth1_vlan entered promiscuous mode [ 68.494995][ T4189] device veth0_macvtap entered promiscuous mode [ 68.507419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.515830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.526185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.536143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.545168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.553215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.564503][ T4189] device veth1_macvtap entered promiscuous mode [ 68.576572][ T4199] device veth1_macvtap entered promiscuous mode [ 68.625511][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.638039][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.647363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.657455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.673448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.686116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.699378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.708403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.717820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.726820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.737795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.747435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.755665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.764828][ T4190] device veth0_vlan entered promiscuous mode [ 68.775305][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.795774][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.818039][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.838166][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.846869][ T4188] device veth0_macvtap entered promiscuous mode [ 68.859381][ T4188] device veth1_macvtap entered promiscuous mode [ 68.867740][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.877149][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.886421][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.898688][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.921135][ T4199] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.932181][ T4199] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.942526][ T4199] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.951695][ T4199] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.964691][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.988555][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.008397][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.026900][ T4190] device veth1_vlan entered promiscuous mode [ 69.039348][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.048888][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.070622][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.081315][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.090804][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.101393][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.156259][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.166111][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.192370][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.203860][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.214354][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.226625][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.238154][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.248591][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.259355][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.270442][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.281522][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.293738][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.307423][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.323137][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.333106][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.342242][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.353177][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.362437][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.377126][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.386718][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.403440][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.412272][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.423830][ T4190] device veth0_macvtap entered promiscuous mode [ 69.465816][ T4190] device veth1_macvtap entered promiscuous mode [ 69.519015][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.530501][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 69.537537][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.539287][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 69.552814][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 69.553870][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.558935][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 69.572964][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.605564][ T4194] device veth0_vlan entered promiscuous mode [ 69.617240][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 69.628430][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.639081][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.650277][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.660938][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.671747][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.682265][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.694382][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.702880][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.711950][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.720769][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.729254][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.745910][ T240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.754037][ T4194] device veth1_vlan entered promiscuous mode [ 69.773110][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.784895][ T240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.786985][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.802522][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.813575][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.823704][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.834181][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.845921][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.861029][ T4267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.862184][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.868880][ T4267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.887313][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.895450][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.904670][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.914217][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.942971][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.955580][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.965331][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.974745][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.009989][ T3031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.017867][ T3031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.037059][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.051215][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.060552][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.073811][ T4194] device veth0_macvtap entered promiscuous mode [ 70.095477][ T4194] device veth1_macvtap entered promiscuous mode [ 70.136023][ T3031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.154282][ T3031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.165870][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.168859][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.189013][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.193334][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.200391][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.213478][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.273912][ T240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.293774][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.304923][ T240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.312956][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.323911][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.335700][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.345869][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.356602][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.366911][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.377693][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.390399][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.401435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.412317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.421888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.434665][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.447080][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.457323][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.470227][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.480806][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.493392][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.503915][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.514563][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.526914][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.537866][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.548118][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.559515][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.568851][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.589509][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.609542][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.650153][ T4267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.658017][ T4267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.754541][ T3031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.759566][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.769662][ T3031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.835815][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.938537][ T4267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.940911][ T4283] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8'. [ 70.968585][ T4267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.981967][ T26] audit: type=1326 audit(1782732563.333:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4278 comm="syz.1.7" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1da1ee8e59 code=0x0 [ 71.036203][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.066377][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.089462][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.099079][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.453370][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.460468][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.531007][ T4209] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 71.617739][ T4311] loop1: detected capacity change from 0 to 2048 [ 71.621141][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 71.644726][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 71.659885][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 71.684378][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 71.714764][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 71.808120][ T4320] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.897803][ T4311] attempt to access beyond end of device [ 71.897803][ T4311] loop1: rw=0, want=2198922592330, limit=2048 [ 71.915688][ T4326] loop3: detected capacity change from 0 to 128 [ 71.916303][ T4209] usb 3-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 71.923370][ T4311] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=1) [ 71.959549][ T4209] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 71.980106][ T4326] ======================================================= [ 71.980106][ T4326] WARNING: The mand mount option has been deprecated and [ 71.980106][ T4326] and is ignored by this kernel. Remove the mand [ 71.980106][ T4326] option from the mount to silence this warning. [ 71.980106][ T4326] ======================================================= [ 72.022894][ T4209] usb 3-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 72.087924][ T4331] device bridge1 entered promiscuous mode [ 72.111580][ T4209] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 72.134275][ T4209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 72.143884][ T4326] hpfs: hpfs_map_4sectors(): unaligned read [ 72.152812][ T4326] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 72.170067][ T4209] usb 3-1: SerialNumber: syz [ 72.222890][ T4326] hpfs: hpfs_map_sector(): read error [ 72.233311][ T4209] usb-storage 3-1:253.0: USB Mass Storage device detected [ 72.268022][ T4209] usb-storage 3-1:253.0: Quirks match for vid 0525 pid a4a5: 10000 [ 72.376379][ T4343] netlink: 48 bytes leftover after parsing attributes in process `syz.1.26'. [ 72.594449][ T4209] usb 3-1: USB disconnect, device number 2 [ 72.733879][ T4356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31'. [ 73.257193][ T4390] xt_connbytes: Forcing CT accounting to be enabled [ 73.259498][ T4209] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 73.528624][ T4402] overlayfs: missing 'lowerdir' [ 73.529934][ T4209] usb 4-1: Using ep0 maxpacket: 16 [ 73.645968][ T4410] netlink: 20 bytes leftover after parsing attributes in process `syz.2.56'. [ 73.671638][ T4209] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.699196][ T4415] overlayfs: conflicting options: nfs_export=on,index=off [ 73.717972][ T4209] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 73.750525][ T4209] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 73.774408][ T4413] loop0: detected capacity change from 0 to 2048 [ 73.781823][ T4209] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 73.910533][ T4422] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.979976][ T4209] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 73.987874][ T4413] attempt to access beyond end of device [ 73.987874][ T4413] loop0: rw=0, want=2198922592330, limit=2048 [ 73.989284][ T4209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.043581][ T4413] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=1) [ 74.045272][ T4209] usb 4-1: Product: syz [ 74.056976][ T4209] usb 4-1: Manufacturer: syz [ 74.067900][ T4209] usb 4-1: SerialNumber: syz [ 74.114084][ T4209] usb 4-1: config 0 descriptor?? [ 74.177147][ T4209] port100 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 74.209650][ T4200] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.390707][ T4441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.72'. [ 74.485600][ T4200] usb 2-1: Using ep0 maxpacket: 8 [ 74.509078][ T4446] device bond1 entered promiscuous mode [ 74.550239][ T13] usb 4-1: USB disconnect, device number 2 [ 74.561988][ T4446] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.703126][ T4459] capability: warning: `syz.0.81' uses deprecated v2 capabilities in a way that may be insecure [ 74.820542][ T4200] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 74.840043][ T4200] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.848180][ T4200] usb 2-1: Product: syz [ 74.882919][ T4200] usb 2-1: Manufacturer: syz [ 74.894753][ T4200] usb 2-1: SerialNumber: syz [ 74.922604][ T4200] usb 2-1: config 0 descriptor?? [ 75.179868][ T4200] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 75.360786][ T4497] netlink: 'syz.2.100': attribute type 25 has an invalid length. [ 75.368964][ T4497] netlink: 'syz.2.100': attribute type 3 has an invalid length. [ 75.392602][ T4200] usb write operation failed. (-71) [ 75.421391][ T4200] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 75.439579][ T4497] netlink: 132 bytes leftover after parsing attributes in process `syz.2.100'. [ 75.463085][ T4200] dvbdev: DVB: registering new adapter (Terratec H7) [ 75.485444][ T4200] usb 2-1: media controller created [ 75.521352][ T4506] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 75.529736][ T4200] usb read operation failed. (-71) [ 75.559669][ T4200] usb write operation failed. (-71) [ 75.582407][ T4200] dvb_usb_az6007: probe of 2-1:0.0 failed with error -5 [ 75.601439][ T4509] process 'syz.4.105' launched './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 75.625477][ T4200] usb 2-1: USB disconnect, device number 2 [ 75.714341][ C0] vkms_vblank_simulate: vblank timer overrun [ 75.787824][ T4518] netlink: 'syz.2.109': attribute type 2 has an invalid length. [ 75.970174][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 76.242964][ T4542] netlink: 14 bytes leftover after parsing attributes in process `syz.3.121'. [ 76.299845][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 76.419964][ T4551] loop2: detected capacity change from 0 to 16 [ 76.429859][ T13] usb 1-1: config index 0 descriptor too short (expected 176, got 162) [ 76.439883][ T13] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.469044][ T4551] erofs: (device loop2): mounted with root inode @ nid 36. [ 76.485992][ T13] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.506868][ T13] usb 1-1: config 1 interface 0 has no altsetting 0 [ 76.534933][ T4551] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 76.576254][ T4551] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -11 in[52, 4044] out[1851] [ 76.625592][ T4551] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 76.633932][ T4558] netlink: 'syz.3.129': attribute type 22 has an invalid length. [ 76.634099][ T4558] (unnamed net_device) (uninitialized): option ad_select: invalid value (7) [ 76.730330][ T13] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 76.752469][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.783628][ T13] usb 1-1: Product: syz [ 76.798102][ T13] usb 1-1: Manufacturer: syz [ 76.809851][ T13] usb 1-1: SerialNumber: syz [ 76.839612][ T1108] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 76.929585][ T4235] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.106927][ T1108] usb 2-1: Using ep0 maxpacket: 16 [ 77.181232][ T13] usb 1-1: 0:2 : does not exist [ 77.188440][ T4578] autofs4:pid:4578:autofs_fill_super: called with bogus options [ 77.300106][ T1108] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.317367][ T1108] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 77.431697][ T4586] loop3: detected capacity change from 0 to 2048 [ 77.440112][ T13] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 77.465262][ T4588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.144'. [ 77.484849][ T4235] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 77.493641][ T13] usb 1-1: USB disconnect, device number 2 [ 77.524414][ T1108] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 77.534196][ T4235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.548124][ T4586] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 77.563372][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.578660][ T4284] udevd[4284]: setting mode of /dev/bus/usb/001/002 to 020664 failed: No such file or directory [ 77.584508][ T1108] usb 2-1: Product: syz [ 77.604398][ T1108] usb 2-1: Manufacturer: syz [ 77.614569][ T1108] usb 2-1: SerialNumber: syz [ 77.618021][ T4284] udevd[4284]: setting owner of /dev/bus/usb/001/002 to uid=0, gid=0 failed: No such file or directory [ 77.634865][ T4235] usb 5-1: Product: syz [ 77.688065][ T4235] usb 5-1: Manufacturer: syz [ 77.700513][ T4235] usb 5-1: SerialNumber: syz [ 77.707252][ T4586] Invalid option length (0) for dns_resolver key [ 77.711186][ T4235] usb 5-1: config 0 descriptor?? [ 77.776036][ T4235] ch341 5-1:0.0: ch341-uart converter detected [ 77.796682][ T4284] udevd[4284]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 77.953696][ T4598] QAT: failed to copy from user cfg_data. [ 77.979991][ T4235] usb 5-1: failed to receive control message: -71 [ 77.986753][ T4235] ch341-uart: probe of ttyUSB0 failed with error -71 [ 77.999685][ T1108] usb 2-1: 0:2 : does not exist [ 78.031223][ T4235] usb 5-1: USB disconnect, device number 2 [ 78.056273][ T4235] ch341 5-1:0.0: device disconnected [ 78.071724][ T1108] usb 2-1: USB disconnect, device number 3 [ 78.300271][ T4609] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 78.380977][ T4284] udevd[4284]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 78.578100][ T4623] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (2) [ 79.059527][ T4234] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 79.081702][ T4651] netlink: 20 bytes leftover after parsing attributes in process `syz.4.174'. [ 79.105661][ T4656] netlink: 132 bytes leftover after parsing attributes in process `syz.3.177'. [ 79.126822][ T4651] netlink: 24 bytes leftover after parsing attributes in process `syz.4.174'. [ 79.470761][ T4673] netlink: 56 bytes leftover after parsing attributes in process `syz.1.186'. [ 79.475516][ T4234] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 79.488409][ T4234] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.519632][ T4234] usb 3-1: config 0 has no interface number 0 [ 79.536134][ T4234] usb 3-1: config 0 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 79.562268][ T4676] netlink: 44 bytes leftover after parsing attributes in process `syz.3.187'. [ 79.599065][ T4676] netlink: 24 bytes leftover after parsing attributes in process `syz.3.187'. [ 79.750028][ T4234] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 79.783892][ T4234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.803562][ T4234] usb 3-1: Product: syz [ 79.807782][ T4234] usb 3-1: Manufacturer: syz [ 79.832827][ T4234] usb 3-1: SerialNumber: syz [ 79.846085][ T4234] usb 3-1: config 0 descriptor?? [ 79.875220][ T4698] netlink: 28 bytes leftover after parsing attributes in process `syz.1.196'. [ 79.890556][ T4698] netlink: 28 bytes leftover after parsing attributes in process `syz.1.196'. [ 79.923380][ T4234] asix: probe of 3-1:0.251 failed with error -22 [ 80.033787][ T4705] nft_compat: unsupported protocol 0 [ 80.229132][ T4234] usb 3-1: USB disconnect, device number 3 [ 80.521292][ T4732] loop4: detected capacity change from 0 to 64 [ 80.728382][ T26] audit: type=1800 audit(1782732573.073:3): pid=4732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.208" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 81.270460][ T4234] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 81.849518][ T4234] usb 2-1: Using ep0 maxpacket: 16 [ 81.989005][ T4803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.241'. [ 82.005702][ T4234] usb 2-1: config 4 has an invalid interface number: 35 but max is 0 [ 82.017225][ T4234] usb 2-1: config 4 has no interface number 0 [ 82.035334][ T4234] usb 2-1: config 4 interface 35 has no altsetting 0 [ 82.162980][ T4798] loop3: detected capacity change from 0 to 8192 [ 82.245577][ T4234] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=ff.e5 [ 82.272627][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.292004][ T4798] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 82.307923][ T4234] usb 2-1: Product: syz [ 82.309668][ T4798] REISERFS (device loop3): using ordered data mode [ 82.312619][ T4234] usb 2-1: Manufacturer: syz [ 82.324427][ T4234] usb 2-1: SerialNumber: syz [ 82.366818][ T4798] reiserfs: using flush barriers [ 82.421725][ T4798] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 82.510182][ T4798] REISERFS (device loop3): checking transaction log (loop3) [ 82.549277][ T4798] REISERFS (device loop3): Using r5 hash to sort names [ 82.563377][ T4798] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 82.681163][ T4234] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 82.694649][ T4234] usb 2-1: selecting invalid altsetting 1 [ 82.739570][ T4234] gspca_stk014: reg_r err -71 [ 82.739583][ T4233] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 82.746622][ T4234] stk014: probe of 2-1:4.35 failed with error -71 [ 82.788450][ T4234] usb 2-1: USB disconnect, device number 4 [ 83.039535][ T4233] usb 1-1: Using ep0 maxpacket: 32 [ 83.159810][ T4233] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.187257][ T4233] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.217786][ T4837] loop2: detected capacity change from 0 to 4096 [ 83.300153][ T4837] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 83.320219][ T4233] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 83.352000][ T4233] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 83.379920][ T4233] usb 1-1: Product: syz [ 83.394497][ T4233] usb 1-1: Manufacturer: syz [ 83.460583][ T4233] hub 1-1:4.0: USB hub found [ 83.674461][ T4233] hub 1-1:4.0: 8 ports detected [ 83.699631][ T4233] hub 1-1:4.0: insufficient power available to use all downstream ports [ 83.900200][ T4233] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 83.906918][ T4233] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 84.007878][ T4233] usb 1-1: USB disconnect, device number 3 [ 84.259471][ T1108] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 84.364394][ T4889] loop4: detected capacity change from 0 to 4096 [ 84.636780][ T4903] netlink: 'syz.0.288': attribute type 5 has an invalid length. [ 84.657888][ T4889] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 84.699921][ T1108] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 84.738958][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.758597][ T1108] usb 2-1: config 0 descriptor?? [ 85.105086][ T4927] loop0: detected capacity change from 0 to 8 [ 85.127238][ T4929] loop2: detected capacity change from 0 to 1024 [ 85.158541][ T4931] bond0: (slave ip6tnl0): refused to change device type [ 85.180578][ T4927] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 85.237310][ T1108] ath6kl: Failed to submit usb control message: -71 [ 85.248885][ T4929] hfsplus: catalog record size mismatch (type 1, got 62, expected 88) [ 85.257620][ T4284] udevd[4284]: incorrect cramfs checksum on /dev/loop0 [ 85.269654][ T1108] ath6kl: unable to send the bmi data to the device: -71 [ 85.276870][ T1108] ath6kl: Unable to send get target info: -71 [ 85.279073][ T4927] cramfs: Error -5 while decompressing! [ 85.307513][ T4939] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.329622][ T4927] cramfs: ffffffff963fa068(18)->ffff88805bb9f000(4096) [ 85.347533][ T4927] cramfs: Error -5 while decompressing! [ 85.367805][ T4927] cramfs: ffffffff963fa068(18)->ffff88805bb9f000(4096) [ 85.398828][ T26] audit: type=1800 audit(1782732577.743:4): pid=4927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.299" name="file1" dev="loop0" ino=324 res=0 errno=0 [ 85.508100][ T4514] udevd[4514]: incorrect cramfs checksum on /dev/loop0 [ 85.670384][ T4957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.313'. [ 85.763271][ T4962] netlink: 10 bytes leftover after parsing attributes in process `syz.4.316'. [ 86.107351][ T4980] netlink: 'syz.4.325': attribute type 11 has an invalid length. [ 86.120125][ T4209] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 86.223691][ T4986] loop4: detected capacity change from 0 to 1024 [ 86.293383][ T4986] EXT4-fs (loop4): Ignoring removed bh option [ 86.366280][ T4986] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,nojournal_checksum,dioread_lock,stripe=0x0000000000000010,bh,init_itable,,errors=continue. Quota mode: none. [ 86.432792][ T4997] libceph: resolve '0..' (ret=-3): failed [ 86.615730][ T4972] loop0: detected capacity change from 0 to 32768 [ 86.649656][ T4209] usb 3-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 86.659682][ T4232] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.675477][ T4209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.694086][ T4209] usb 3-1: Product: syz [ 86.698307][ T4209] usb 3-1: Manufacturer: syz [ 86.714685][ T4209] usb 3-1: SerialNumber: syz [ 86.738998][ T4209] usb 3-1: config 0 descriptor?? [ 86.790338][ T4209] hub 3-1:0.0: bad descriptor, ignoring hub [ 86.814200][ T4209] hub: probe of 3-1:0.0 failed with error -5 [ 86.825830][ T1111] cfg80211: failed to load regulatory.db [ 86.850337][ T1108] ath6kl: Failed to init ath6kl core: -71 [ 86.867947][ T4209] f81232 3-1:0.0: f81534a converter detected [ 86.920295][ T1108] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 86.927679][ T4972] XFS (loop0): Mounting V5 Filesystem [ 86.952047][ T1108] usb 2-1: USB disconnect, device number 5 [ 87.059813][ T4232] usb 4-1: unable to get BOS descriptor or descriptor too short [ 87.067998][ T4209] usb 3-1: f81534a converter now attached to ttyUSB0 [ 87.116564][ T4972] XFS (loop0): Ending clean mount [ 87.139936][ T4232] usb 4-1: config 1 interface 0 altsetting 223 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.163589][ T4972] XFS (loop0): Quotacheck needed: Please wait. [ 87.176623][ T4232] usb 4-1: config 1 interface 0 has no altsetting 0 [ 87.322514][ T4972] XFS (loop0): Quotacheck: Done. [ 87.349803][ T4232] usb 4-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.40 [ 87.369623][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.379985][ T4232] usb 4-1: Product: syz [ 87.399589][ T4232] usb 4-1: Manufacturer: syz [ 87.408216][ T4232] usb 4-1: SerialNumber: syz [ 87.427377][ T4235] usb 3-1: USB disconnect, device number 4 [ 87.459140][ T4235] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 87.494061][ T4235] f81232 3-1:0.0: device disconnected [ 87.552134][ T4188] XFS (loop0): Unmounting Filesystem [ 87.722486][ T5052] netlink: 'syz.1.355': attribute type 5 has an invalid length. [ 87.728152][ T4232] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input8 [ 87.745762][ T5052] device  entered promiscuous mode [ 87.779697][ T3546] bcm5974 4-1:1.0: could not read from device [ 87.809281][ T4232] usb 4-1: USB disconnect, device number 3 [ 87.820591][ T3546] bcm5974 4-1:1.0: could not read from device [ 87.912375][ T5057] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 88.459983][ T5090] mmap: syz.2.371 (5090) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 88.761698][ T5116] netlink: 'syz.0.383': attribute type 10 has an invalid length. [ 88.790087][ T5116] netlink: 40 bytes leftover after parsing attributes in process `syz.0.383'. [ 88.799152][ T5116] netlink: 'syz.0.383': attribute type 10 has an invalid length. [ 88.849995][ T5116] netlink: 40 bytes leftover after parsing attributes in process `syz.0.383'. [ 89.182146][ T5146] netlink: 'syz.3.399': attribute type 5 has an invalid length. [ 89.194153][ T5144] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 89.320171][ T5144] CIFS mount error: No usable UNC path provided in device string! [ 89.320171][ T5144] [ 89.359843][ T5144] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 89.503352][ T5171] capability: warning: `syz.4.411' uses 32-bit capabilities (legacy support in use) [ 89.658931][ T5180] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 89.719098][ T5180] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 89.803050][ T5191] comedi comedi2: no devices specified [ 89.980900][ T5203] comedi comedi3: pcmmio: I/O port conflict (0x2,32) [ 90.029912][ T5208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.425'. [ 90.039569][ T1108] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 90.299552][ T1108] usb 3-1: Using ep0 maxpacket: 16 [ 90.387675][ T4234] kernel write not supported for file /163/net/rt_acct (pid: 4234 comm: kworker/0:5) [ 90.429536][ T4209] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 90.439806][ T1108] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.639759][ T1108] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 90.671491][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.713271][ T1108] usb 3-1: Product: syz [ 90.717506][ T1108] usb 3-1: Manufacturer: syz [ 90.728961][ T1108] usb 3-1: SerialNumber: syz [ 90.744133][ T1108] usb 3-1: config 0 descriptor?? [ 90.777185][ T5236] loop0: detected capacity change from 0 to 4096 [ 90.799968][ T4209] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 90.833349][ T4209] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 90.841781][ T5236] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 90.854157][ T4209] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 90.911726][ T4209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.959066][ T5236] ntfs: volume version 3.1. [ 91.120599][ T5246] Cannot find add_set index 0 as target [ 91.213610][ T5218] loop3: detected capacity change from 0 to 32768 [ 91.221189][ T5248] loop1: detected capacity change from 0 to 16 [ 91.244030][ T5250] netlink: 'syz.0.445': attribute type 21 has an invalid length. [ 91.258115][ T5248] erofs: (device loop1): mounted with root inode @ nid 36. [ 91.263487][ T5250] netlink: 164 bytes leftover after parsing attributes in process `syz.0.445'. [ 91.303794][ T5248] attempt to access beyond end of device [ 91.303794][ T5248] loop1: rw=524288, want=24, limit=16 [ 91.339847][ T5248] attempt to access beyond end of device [ 91.339847][ T5248] loop1: rw=524288, want=34359738368, limit=16 [ 91.365332][ T5248] erofs: (device loop1): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 91.376528][ T5248] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 24575 of nid 89 [ 91.387487][ T5248] erofs: (device loop1): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 91.396615][ T5248] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 20479 of nid 89 [ 91.400406][ T5218] XFS (loop3): Mounting V5 Filesystem [ 91.406736][ T5248] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 91.421265][ T5248] attempt to access beyond end of device [ 91.421265][ T5248] loop1: rw=524288, want=56, limit=16 [ 91.432610][ T5248] attempt to access beyond end of device [ 91.432610][ T5248] loop1: rw=0, want=24, limit=16 [ 91.439797][ T4209] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 91.459536][ T26] audit: type=1800 audit(1782732583.793:5): pid=5248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.444" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 91.507759][ T4209] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input9 [ 91.538419][ T5248] syz.1.444 (5248) used greatest stack depth: 20928 bytes left [ 91.568731][ T4209] input: failed to attach handler kbd to device input9, error: -5 [ 91.649575][ T4209] usb 5-1: USB disconnect, device number 3 [ 91.706094][ T5218] XFS (loop3): Ending clean mount [ 91.891641][ T4199] XFS (loop3): Unmounting Filesystem [ 92.256270][ T5288] netlink: 64 bytes leftover after parsing attributes in process `syz.0.461'. [ 92.279660][ T5288] netlink: 64 bytes leftover after parsing attributes in process `syz.0.461'. [ 92.388550][ T5295] netlink: 'syz.0.465': attribute type 1 has an invalid length. [ 92.410098][ T5296] netlink: 'syz.1.464': attribute type 41 has an invalid length. [ 92.437406][ T5295] netlink: 224 bytes leftover after parsing attributes in process `syz.0.465'. [ 92.527827][ T5299] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 92.629537][ T4232] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 92.793313][ T1111] usb 3-1: USB disconnect, device number 5 [ 92.856947][ T5321] loop2: detected capacity change from 0 to 128 [ 92.879959][ T4232] usb 5-1: Using ep0 maxpacket: 32 [ 92.937176][ T5321] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 92.962474][ T5321] hpfs: filesystem error: improperly stopped [ 92.968574][ T5321] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 93.009692][ T4232] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.016264][ T5321] hpfs: You really don't want any checks? You are crazy... [ 93.033048][ T5321] hpfs: Code page index out of array [ 93.049254][ T5321] hpfs: code page support is disabled [ 93.056671][ T5321] hpfs: hpfs_map_4sectors(): unaligned read [ 93.090291][ T5321] hpfs: hpfs_map_4sectors(): unaligned read [ 93.099753][ T5321] hpfs: filesystem error: unable to find root dir [ 93.213468][ T4232] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 93.230372][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.242027][ T5336] loop1: detected capacity change from 0 to 128 [ 93.248904][ T4232] usb 5-1: Product: syz [ 93.253205][ T4232] usb 5-1: Manufacturer: syz [ 93.277987][ T4232] usb 5-1: SerialNumber: syz [ 93.287686][ T5336] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 93.322395][ T4232] usb 5-1: config 0 descriptor?? [ 93.336164][ T5336] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.376995][ T4232] usb 5-1: bad CDC descriptors [ 93.417006][ T4232] usb 5-1: unsupported MDLM descriptors [ 93.443036][ T5336] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 93.589176][ T5350] netlink: 'syz.3.488': attribute type 1 has an invalid length. [ 93.628981][ T4234] usb 5-1: USB disconnect, device number 4 [ 94.014558][ T5377] loop2: detected capacity change from 0 to 64 [ 94.339813][ T4234] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 94.390048][ T5399] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 94.728855][ T5419] xt_socket: unknown flags 0x50 [ 94.835877][ T4234] usb 2-1: unable to get BOS descriptor or descriptor too short [ 94.848651][ T5427] netlink: 'syz.4.527': attribute type 8 has an invalid length. [ 94.890129][ T5427] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.527'. [ 94.939817][ T4234] usb 2-1: config 3 has an invalid interface number: 249 but max is 0 [ 94.948062][ T4234] usb 2-1: config 3 has no interface number 0 [ 94.971010][ T4234] usb 2-1: config 3 interface 249 has no altsetting 0 [ 95.169727][ T4234] usb 2-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=5a.9d [ 95.189186][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.230479][ T4234] usb 2-1: Product: syz [ 95.236542][ T4234] usb 2-1: Manufacturer: syz [ 95.257076][ T4234] usb 2-1: SerialNumber: syz [ 95.599653][ T5473] IPv6: Can't replace route, no match found [ 95.621459][ T4234] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 95.659543][ T4234] gspca_sn9c2028: read1 error -71 [ 95.679558][ T4234] gspca_sn9c2028: read1 error -71 [ 95.699577][ T4234] gspca_sn9c2028: read1 error -71 [ 95.704835][ T4234] sn9c2028: probe of 2-1:3.249 failed with error -71 [ 95.755433][ T4234] usb 2-1: USB disconnect, device number 6 [ 96.153618][ T5501] device syz_tun entered promiscuous mode [ 96.189368][ T5501] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 96.359512][ T4234] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 96.426676][ T5516] xt_TCPMSS: Only works on TCP SYN packets [ 96.622362][ T4234] usb 4-1: Using ep0 maxpacket: 16 [ 96.720709][ T5530] overlayfs: './file0' not a directory [ 96.788897][ T5534] loop4: detected capacity change from 0 to 512 [ 96.837350][ T5534] EXT4-fs (loop4): orphan cleanup on readonly fs [ 96.865636][ T5534] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.580: inode #16777216: comm syz.4.580: iget: illegal inode # [ 96.894183][ T5534] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.580: error while reading EA inode 16777216 err=-117 [ 96.916727][ T5534] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:984: inode #11: comm syz.4.580: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 96.944483][ T5534] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.4.580: ea_inode dec ref err=-117 [ 96.970373][ T5534] EXT4-fs (loop4): 1 orphan inode deleted [ 96.976363][ T5534] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.993942][ T5534] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.4.580: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 96.999930][ T4234] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 97.019547][ T4209] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 97.031875][ T5497] loop2: detected capacity change from 0 to 32768 [ 97.063108][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.075069][ T4234] usb 4-1: Product: syz [ 97.079295][ T4234] usb 4-1: Manufacturer: syz [ 97.087984][ T4234] usb 4-1: SerialNumber: syz [ 97.101018][ T4234] usb 4-1: config 0 descriptor?? [ 97.141333][ T4234] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 97.166522][ T5497] XFS (loop2): Mounting V5 Filesystem [ 97.216250][ T5550] comedi comedi3: rti800: I/O port conflict (0x4,16) [ 97.289706][ T4209] usb 2-1: Using ep0 maxpacket: 16 [ 97.350439][ T4234] usb 4-1: clie_3_5_startup: get config number bad return length: 0 [ 97.358694][ T4234] visor: probe of 4-1:0.0 failed with error -5 [ 97.388255][ T5497] XFS (loop2): Ending clean mount [ 97.432836][ T5497] XFS (loop2): Quotacheck needed: Please wait. [ 97.451443][ T5558] delete_channel: no stack [ 97.523764][ T5497] XFS (loop2): Quotacheck: Done. [ 97.570027][ T4209] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 97.589761][ T4209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.597864][ T4209] usb 2-1: Product: syz [ 97.599579][ T5563] netlink: 96 bytes leftover after parsing attributes in process `syz.0.590'. [ 97.621526][ T4209] usb 2-1: Manufacturer: syz [ 97.636471][ T4209] usb 2-1: SerialNumber: syz [ 97.645267][ T5563] netlink: 96 bytes leftover after parsing attributes in process `syz.0.590'. [ 97.656078][ T4209] usb 2-1: config 0 descriptor?? [ 97.667981][ T4234] usb 4-1: USB disconnect, device number 4 [ 97.674828][ T5561] loop4: detected capacity change from 0 to 4096 [ 97.706281][ T4190] XFS (loop2): Unmounting Filesystem [ 97.714487][ T4209] gspca_main: spca508-2.14.0 probing 041e:4018 [ 97.763227][ T5565] netlink: 20 bytes leftover after parsing attributes in process `syz.0.592'. [ 97.909935][ T5561] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 98.153890][ T4209] gspca_spca508: reg_read err -71 [ 98.169676][ T4209] gspca_spca508: reg_read err -71 [ 98.189904][ T4209] gspca_spca508: reg_read err -71 [ 98.245431][ T4209] gspca_spca508: reg_read err -71 [ 98.260573][ T5577] loop2: detected capacity change from 0 to 764 [ 98.270450][ T4209] gspca_spca508: reg write: error -71 [ 98.275915][ T4209] spca508: probe of 2-1:0.0 failed with error -71 [ 98.309537][ T4209] usb 2-1: USB disconnect, device number 7 [ 98.361011][ T5577] rock: directory entry would overflow storage [ 98.390649][ T5577] rock: sig=0x4654, size=5, remaining=4 [ 98.486223][ T5587] syz.4.602 uses obsolete (PF_INET,SOCK_PACKET) [ 99.067051][ T5602] loop2: detected capacity change from 0 to 8192 [ 99.153078][ T5623] netlink: 20 bytes leftover after parsing attributes in process `syz.0.619'. [ 99.159957][ T5602] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 99.173620][ T5602] REISERFS (device loop2): using ordered data mode [ 99.180285][ T5602] reiserfs: using flush barriers [ 99.187426][ T5602] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 99.206373][ T5602] REISERFS (device loop2): checking transaction log (loop2) [ 99.342136][ T5631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.622'. [ 99.354842][ T5602] REISERFS (device loop2): Using tea hash to sort names [ 99.400956][ T5602] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 99.412339][ T5631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.622'. [ 99.848666][ T264] block nbd1: Attempted send on invalid socket [ 99.856465][ T264] blk_update_request: I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 99.889003][ T5654] REISERFS warning (device nbd1): sh-2006 read_super_block: bread failed (dev nbd1, block 2, size 4096) [ 99.958154][ T150] block nbd1: Attempted send on invalid socket [ 99.964784][ T150] blk_update_request: I/O error, dev nbd1, sector 128 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 99.977437][ T5654] REISERFS warning (device nbd1): sh-2006 read_super_block: bread failed (dev nbd1, block 16, size 4096) [ 100.048914][ T5654] REISERFS warning (device nbd1): sh-2021 reiserfs_fill_super: can not find reiserfs on nbd1 [ 100.263518][ T5675] netlink: 'syz.2.635': attribute type 3 has an invalid length. [ 100.802975][ T5716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.664'. [ 101.031040][ T5727] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 101.057970][ T5731] netlink: 148 bytes leftover after parsing attributes in process `syz.1.671'. [ 101.181539][ T4200] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 101.268909][ T5731] netlink: 148 bytes leftover after parsing attributes in process `syz.1.671'. [ 101.499559][ T4200] usb 5-1: Using ep0 maxpacket: 8 [ 101.521186][ T5751] loop2: detected capacity change from 0 to 512 [ 101.545528][ T5753] device gre1 entered promiscuous mode [ 101.624379][ T5751] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 101.682031][ T4200] usb 5-1: unable to get BOS descriptor or descriptor too short [ 101.683488][ T5751] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 101.733115][ T5751] EXT4-fs error (device loop2): __ext4_iget:4919: inode #11: block 1: comm syz.2.680: invalid block [ 101.737598][ T5751] EXT4-fs (loop2): Remounting filesystem read-only [ 101.737673][ T5751] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.680: couldn't read orphan inode 11 (err -117) [ 101.737868][ T5751] EXT4-fs (loop2): Remounting filesystem read-only [ 101.737885][ T5751] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000010001ff,noblock_validity,max_dir_size_kb=0x0000000000000009,nodioread_nolock,jqfmt=vfsold,. Quota mode: none. [ 101.769906][ T4200] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 101.769942][ T4200] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 21064, setting to 64 [ 101.769970][ T4200] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 101.769998][ T4200] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 101.770022][ T4200] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 101.770045][ T4200] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8669, setting to 64 [ 101.968585][ T4200] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 101.968618][ T4200] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.968639][ T4200] usb 5-1: Product: syz [ 101.968664][ T4200] usb 5-1: Manufacturer: syz [ 101.968679][ T4200] usb 5-1: SerialNumber: syz [ 101.972600][ T4200] usb 5-1: config 0 descriptor?? [ 102.011107][ T5722] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 102.162072][ T4599] udevd[4599]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.213740][ T5743] loop3: detected capacity change from 0 to 32768 [ 102.246786][ T4200] usb 5-1: USB disconnect, device number 5 [ 102.289596][ T4263] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 102.327162][ T5743] XFS (loop3): Mounting V5 Filesystem [ 102.353470][ T4232] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 102.419071][ T5743] XFS (loop3): Ending clean mount [ 102.430550][ T5743] XFS (loop3): Quotacheck needed: Please wait. [ 102.486352][ T5743] XFS (loop3): Quotacheck: Done. [ 102.551771][ T4263] usb 3-1: Using ep0 maxpacket: 8 [ 102.609512][ T4232] usb 1-1: Using ep0 maxpacket: 16 [ 102.625613][ T4199] XFS (loop3): Unmounting Filesystem [ 102.729762][ T4263] usb 3-1: unable to get BOS descriptor or descriptor too short [ 102.839866][ T4263] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.868260][ T5802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.697'. [ 102.899714][ T4232] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 102.922715][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.947579][ T4232] usb 1-1: Product: syz [ 102.961104][ T4232] usb 1-1: Manufacturer: syz [ 102.977022][ T4232] usb 1-1: SerialNumber: syz [ 103.004590][ T4232] usb 1-1: config 0 descriptor?? [ 103.051223][ T4232] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 103.084130][ T4263] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 103.104515][ T4263] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.127149][ T4263] usb 3-1: Product: syz [ 103.132046][ T4263] usb 3-1: Manufacturer: syz [ 103.136673][ T4263] usb 3-1: SerialNumber: syz [ 103.347978][ T5819] loop4: detected capacity change from 0 to 256 [ 103.479907][ T4232] ssu100: probe of 1-1:0.0 failed with error -71 [ 103.485915][ T4263] snd-usb-audio: probe of 3-1:1.0 failed with error -2 [ 103.536354][ T4232] usb 1-1: USB disconnect, device number 4 [ 103.543223][ T4263] usb 3-1: USB disconnect, device number 6 [ 103.747092][ T5834] netlink: 16 bytes leftover after parsing attributes in process `syz.1.710'. [ 103.769053][ T5834] netlink: 16 bytes leftover after parsing attributes in process `syz.1.710'. [ 103.780822][ T5834] netlink: 24 bytes leftover after parsing attributes in process `syz.1.710'. [ 103.869099][ T4284] udevd[4284]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.166263][ T5858] loop4: detected capacity change from 0 to 128 [ 104.226672][ T5861] mip6: mip6_rthdr_init_state: state's mode is not 2: 0 [ 104.251514][ T5858] EXT4-fs (loop4): Test dummy encryption mode enabled [ 104.356032][ T5864] device bond1 entered promiscuous mode [ 104.362259][ T5864] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.401621][ T5858] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,user_xattr,inode_readahead_blks=0x0000000001000000,,errors=continue. Quota mode: none. [ 104.518728][ T5858] ext4 filesystem being mounted at /140/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 104.892500][ T5856] loop3: detected capacity change from 0 to 32768 [ 105.080115][ T5905] ieee802154 phy0 wpan0: encryption failed: -90 [ 105.083636][ T5856] XFS (loop3): Mounting V5 Filesystem [ 105.208483][ T5917] loop2: detected capacity change from 0 to 2048 [ 105.256705][ T5856] XFS (loop3): Ending clean mount [ 105.297925][ T5856] XFS (loop3): Quotacheck needed: Please wait. [ 105.316339][ T5917] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.379920][ T5917] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.412121][ T5917] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.745: bg 0: block 345: padding at end of block bitmap is not set [ 105.431283][ T5917] EXT4-fs error (device loop2): ext4_xattr_block_set:2197: inode #15: comm syz.2.745: bad block 128 [ 105.452138][ T5856] XFS (loop3): Quotacheck: Done. [ 105.525393][ T5927] loop1: detected capacity change from 0 to 512 [ 105.595162][ T4199] XFS (loop3): Unmounting Filesystem [ 105.725464][ T5927] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 105.779795][ T5927] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.850215][ T5915] loop0: detected capacity change from 0 to 32768 [ 105.876350][ T5941] netlink: 16 bytes leftover after parsing attributes in process `syz.2.756'. [ 105.947186][ T5915] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.744 (5915) [ 106.185924][ T5915] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 106.258962][ T5915] BTRFS info (device loop0): enabling ssd optimizations [ 106.310086][ T5915] BTRFS info (device loop0): not using ssd optimizations [ 106.317190][ T5915] BTRFS info (device loop0): turning off barriers [ 106.362803][ T5956] loop3: detected capacity change from 0 to 1024 [ 106.369914][ T5915] BTRFS info (device loop0): using free space tree [ 106.402662][ T5915] BTRFS info (device loop0): has skinny extents [ 106.462521][ T5961] loop1: detected capacity change from 0 to 1764 [ 106.534657][ T5956] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 106.578496][ T5961] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 106.909836][ T5994] CIFS mount error: No usable UNC path provided in device string! [ 106.909836][ T5994] [ 106.974626][ T5994] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 107.434418][ T6014] netlink: 'syz.4.774': attribute type 1 has an invalid length. [ 107.720811][ T6026] loop3: detected capacity change from 0 to 128 [ 107.727014][ T6025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.780'. [ 108.158700][ T6037] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.180821][ T6037] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 108.192572][ T6048] loop0: detected capacity change from 0 to 1024 [ 108.303503][ T6037] syz.4.782 (6037) used greatest stack depth: 20688 bytes left [ 108.365907][ T6054] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 108.696434][ T6078] NILFS (nullb0): couldn't find nilfs on the device [ 108.733226][ T4232] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 108.865709][ T6087] netlink: 'syz.3.800': attribute type 3 has an invalid length. [ 108.989680][ T4232] usb 1-1: Using ep0 maxpacket: 16 [ 109.159650][ T4232] usb 1-1: unable to get BOS descriptor or descriptor too short [ 109.429904][ T4232] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 109.440069][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.448100][ T4232] usb 1-1: Product: syz [ 109.458874][ T6126] netlink: 'syz.3.817': attribute type 1 has an invalid length. [ 109.471352][ T4232] usb 1-1: Manufacturer: syz [ 109.476005][ T4232] usb 1-1: SerialNumber: syz [ 109.497988][ T6130] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 109.589679][ T4234] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 109.869794][ T4232] usb 1-1: 1:1 : bogus bTerminalLink 8 [ 109.889631][ T4232] usb 1-1: unit 0 not found! [ 109.894291][ T4232] usb 1-1: unit 4 not found! [ 109.898939][ T4232] usb 1-1: unit 12 not found! [ 109.901960][ T6149] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 110.049742][ T4234] usb 5-1: unable to get BOS descriptor or descriptor too short [ 110.069671][ T4232] usb 1-1: USB disconnect, device number 5 [ 110.097889][ T4234] usb 5-1: not running at top speed; connect to a high speed hub [ 110.209881][ T4234] usb 5-1: config 1 has an invalid interface number: 93 but max is 0 [ 110.225921][ T4234] usb 5-1: config 1 has no interface number 0 [ 110.233051][ T6163] nfs4: Bad value for 'source' [ 110.257848][ T4234] usb 5-1: config 1 interface 93 has no altsetting 0 [ 110.340482][ T4264] udevd[4264]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.400205][ T6174] netlink: 40 bytes leftover after parsing attributes in process `syz.1.834'. [ 110.479749][ T4234] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d [ 110.509315][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.523522][ T6179] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.837'. [ 110.540922][ T4234] usb 5-1: Product: syz [ 110.551439][ T4234] usb 5-1: Manufacturer: syz [ 110.551462][ T4234] usb 5-1: SerialNumber: syz [ 110.574089][ T6179] bridge_slave_1: default FDB implementation only supports local addresses [ 110.677545][ T6189] loop3: detected capacity change from 0 to 16 [ 110.710606][ T6189] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 110.927665][ T4234] usb 5-1: USB disconnect, device number 6 [ 110.963592][ T6203] loop2: detected capacity change from 0 to 8 [ 111.125312][ T6203] SQUASHFS error: xz decompression failed, data probably corrupt [ 111.157420][ T6203] SQUASHFS error: Failed to read block 0x108: -5 [ 111.194737][ T6203] SQUASHFS error: Unable to read metadata cache entry [106] [ 111.222720][ T6203] SQUASHFS error: Unable to read inode 0x11f [ 111.286611][ T6214] loop0: detected capacity change from 0 to 2048 [ 111.321048][ T6214] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=301132, location=301132 [ 111.412895][ T6214] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.437650][ T6224] loop3: detected capacity change from 0 to 128 [ 111.603712][ T6237] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 111.644493][ T6224] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 111.729602][ T6224] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.877087][ T6224] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.856: No space for directory leaf checksum. Please run e2fsck -D. [ 111.975626][ T6260] netlink: 44 bytes leftover after parsing attributes in process `syz.4.869'. [ 111.981110][ T6224] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.856: checksumming directory block 0 [ 112.014272][ T6260] netlink: 43 bytes leftover after parsing attributes in process `syz.4.869'. [ 112.069722][ T6260] netlink: 'syz.4.869': attribute type 6 has an invalid length. [ 112.099796][ T6260] netlink: 'syz.4.869': attribute type 5 has an invalid length. [ 112.144990][ T6260] netlink: 43 bytes leftover after parsing attributes in process `syz.4.869'. [ 112.918979][ T6311] loop3: detected capacity change from 0 to 1024 [ 113.374564][ T6333] loop2: detected capacity change from 0 to 4096 [ 113.482353][ T6333] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 113.638452][ T6358] loop0: detected capacity change from 0 to 4096 [ 113.858869][ T6358] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 114.067075][ T6368] loop3: detected capacity change from 0 to 4096 [ 114.379869][ T4234] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 114.490593][ T6378] loop0: detected capacity change from 0 to 8192 [ 114.552507][ T6378] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 114.619700][ T6378] REISERFS (device loop0): using ordered data mode [ 114.629029][ T6378] reiserfs: using flush barriers [ 114.639555][ T4234] usb 3-1: Using ep0 maxpacket: 8 [ 114.647713][ T6355] loop1: detected capacity change from 0 to 32768 [ 114.660177][ T6378] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 114.683497][ T6378] REISERFS (device loop0): checking transaction log (loop0) [ 114.693788][ T6378] REISERFS (device loop0): Using r5 hash to sort names [ 114.713294][ T6378] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 114.749238][ T6392] loop4: detected capacity change from 0 to 256 [ 114.774843][ T6355] (syz.1.906,6355,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 114.789933][ T4234] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 114.838453][ T6355] (syz.1.906,6355,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 114.866031][ T6392] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 114.975510][ T6355] JBD2: Ignoring recovery information on journal [ 115.010017][ T4234] usb 3-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=70.4b [ 115.019163][ T4234] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 115.105226][ T4234] usb 3-1: Product: syz [ 115.146855][ T4234] usb 3-1: Manufacturer: syz [ 115.154142][ T6355] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 115.190147][ T4234] usb 3-1: SerialNumber: syz [ 115.406491][ T6407] loop4: detected capacity change from 0 to 1024 [ 115.466241][ T6407] hfsplus: bad catalog entry type [ 115.489634][ T4234] usb 3-1: palm_os_4_probe - error -71 getting connection info [ 115.509843][ T4234] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 115.539874][ T4234] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 115.563296][ T4234] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 115.564776][ T6411] netlink: 452 bytes leftover after parsing attributes in process `syz.0.931'. [ 115.579841][ T4234] usb 3-1: USB disconnect, device number 7 [ 115.597124][ T6411] netlink: 20 bytes leftover after parsing attributes in process `syz.0.931'. [ 115.615752][ T240] hfsplus: b-tree write err: -5, ino 25 [ 115.632576][ T4234] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 115.642689][ T240] hfsplus: b-tree write err: -5, ino 4 [ 115.648470][ T240] hfsplus: b-tree write err: -5, ino 2 [ 115.675500][ T4234] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 115.689036][ T4189] ocfs2: Unmounting device (7,1) on (node local) [ 115.714628][ T4234] visor 3-1:1.0: device disconnected [ 115.836500][ T6419] loop4: detected capacity change from 0 to 256 [ 115.937273][ T6419] FAT-fs (loop4): Directory bread(block 64) failed [ 115.985176][ T6419] FAT-fs (loop4): Directory bread(block 65) failed [ 115.996891][ T6419] FAT-fs (loop4): Directory bread(block 66) failed [ 116.026852][ T6419] FAT-fs (loop4): Directory bread(block 67) failed [ 116.049781][ T6419] FAT-fs (loop4): Directory bread(block 68) failed [ 116.056414][ T6419] FAT-fs (loop4): Directory bread(block 69) failed [ 116.092172][ T6419] FAT-fs (loop4): Directory bread(block 70) failed [ 116.125475][ T6419] FAT-fs (loop4): Directory bread(block 71) failed [ 116.168336][ T6419] FAT-fs (loop4): Directory bread(block 72) failed [ 116.211450][ T6419] FAT-fs (loop4): Directory bread(block 73) failed [ 116.247999][ T6431] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 116.248794][ T6419] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.671230][ T6450] loop3: detected capacity change from 0 to 256 [ 116.743976][ T6450] FAT-fs (loop3): Directory bread(block 64) failed [ 116.759699][ T6450] FAT-fs (loop3): Directory bread(block 65) failed [ 116.770010][ T6450] FAT-fs (loop3): Directory bread(block 66) failed [ 116.789557][ T4234] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 116.807032][ T6450] FAT-fs (loop3): Directory bread(block 67) failed [ 116.817149][ T6450] FAT-fs (loop3): Directory bread(block 68) failed [ 116.824016][ T6450] FAT-fs (loop3): Directory bread(block 69) failed [ 116.831322][ T6450] FAT-fs (loop3): Directory bread(block 70) failed [ 116.837972][ T6450] FAT-fs (loop3): Directory bread(block 71) failed [ 116.845325][ T6450] FAT-fs (loop3): Directory bread(block 72) failed [ 116.856746][ T6450] FAT-fs (loop3): Directory bread(block 73) failed [ 116.936925][ T240] attempt to access beyond end of device [ 116.936925][ T240] loop3: rw=1, want=1228, limit=256 [ 117.039515][ T4234] usb 2-1: Using ep0 maxpacket: 16 [ 117.170464][ T4234] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 117.225611][ T4234] usb 2-1: config 0 interface 0 has no altsetting 0 [ 117.291704][ T6469] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.958' resets device [ 117.449769][ T4234] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 117.473212][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.491576][ T4234] usb 2-1: Product: syz [ 117.495838][ T4234] usb 2-1: Manufacturer: syz [ 117.521987][ T4234] usb 2-1: SerialNumber: syz [ 117.540859][ T4234] usb 2-1: config 0 descriptor?? [ 117.608266][ T6481] FAT-fs (loop4): Directory bread(block 64) failed [ 117.638937][ T6486] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.649520][ T6481] FAT-fs (loop4): Directory bread(block 65) failed [ 117.649639][ T6481] FAT-fs (loop4): Directory bread(block 66) failed [ 117.649673][ T6481] FAT-fs (loop4): Directory bread(block 67) failed [ 117.649778][ T6481] FAT-fs (loop4): Directory bread(block 68) failed [ 117.649809][ T6481] FAT-fs (loop4): Directory bread(block 69) failed [ 117.649878][ T6481] FAT-fs (loop4): Directory bread(block 70) failed [ 117.649909][ T6481] FAT-fs (loop4): Directory bread(block 71) failed [ 117.649973][ T6481] FAT-fs (loop4): Directory bread(block 72) failed [ 117.825860][ T4234] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input10 [ 117.826769][ T6481] FAT-fs (loop4): Directory bread(block 73) failed [ 118.049448][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-75): ignored [ 118.118857][ T6505] set_capacity_and_notify: 3 callbacks suppressed [ 118.118874][ T6505] loop3: detected capacity change from 0 to 256 [ 118.161849][ T6502] loop0: detected capacity change from 0 to 4096 [ 118.187816][ T6502] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 118.250975][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 118.262493][ T4234] imon:send_packet: packet tx failed (-71) [ 118.280013][ T4234] imon 2-1:0.0: panel buttons/knobs setup failed [ 118.487726][ T6519] loop4: detected capacity change from 0 to 164 [ 118.501559][ T4234] rc_core: IR keymap rc-imon-pad not found [ 118.507438][ T4234] Registered IR keymap rc-empty [ 118.539552][ T4234] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 118.572467][ T4234] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 118.639639][ T4234] imon:send_packet: packet tx failed (-71) [ 118.679587][ T4234] imon 2-1:0.0: remote input dev register failed [ 118.686065][ T4234] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 118.823987][ T4234] imon 2-1:0.0: unable to initialize intf0, err 0 [ 118.839606][ T4234] imon:imon_probe: failed to initialize context! [ 118.857676][ T4234] imon 2-1:0.0: unable to register, err -19 [ 118.898284][ T4234] usb 2-1: USB disconnect, device number 8 [ 118.949635][ T4266] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 119.006062][ T6534] loop0: detected capacity change from 0 to 4096 [ 119.095059][ T6538] loop1: detected capacity change from 0 to 4096 [ 119.112354][ T6534] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 119.159700][ T6030] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 119.189828][ T4266] usb 3-1: Using ep0 maxpacket: 8 [ 119.242547][ T6538] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 119.309677][ T4266] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.320695][ T4266] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.333680][ T4266] usb 3-1: config 0 interface 0 has no altsetting 0 [ 119.340647][ T4266] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 119.349326][ T6538] EXT4-fs (loop1): Cannot change quota options when quota turned on [ 119.349831][ T4266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.361562][ T6523] loop3: detected capacity change from 0 to 40427 [ 119.387148][ T4266] usb 3-1: config 0 descriptor?? [ 119.489814][ T6030] usb 5-1: not running at top speed; connect to a high speed hub [ 119.495414][ T6523] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 119.537427][ T6523] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 119.589555][ T6030] usb 5-1: config 88 has an invalid interface number: 11 but max is 0 [ 119.615805][ T6030] usb 5-1: config 88 has no interface number 0 [ 119.644980][ T6523] F2FS-fs (loop3): Found nat_bits in checkpoint [ 119.654417][ T6549] loop1: detected capacity change from 0 to 512 [ 119.670186][ T6030] usb 5-1: config 88 interface 11 has no altsetting 0 [ 119.739264][ T6523] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 119.752556][ T6549] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.993: dx entry: limit 0 != root limit 125 [ 119.773964][ T6523] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 119.776884][ T6549] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.993: Corrupt directory, running e2fsck is recommended [ 119.808536][ T6549] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 119.817809][ T6549] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.993: corrupted in-inode xattr [ 119.847395][ T6549] EXT4-fs (loop1): Remounting filesystem read-only [ 119.849622][ T6030] usb 5-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 119.856565][ T6549] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.993: couldn't read orphan inode 15 (err -117) [ 119.872585][ T4266] corsair 0003:1B1C:1B3E.0001: unknown main item tag 0x0 [ 119.882955][ T6030] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.900749][ T6030] usb 5-1: Product: syz [ 119.904965][ T6030] usb 5-1: Manufacturer: syz [ 119.912468][ T4266] corsair 0003:1B1C:1B3E.0001: hidraw0: USB HID vff.ff Device [HID 1b1c:1b3e] on usb-dummy_hcd.2-1/input0 [ 119.917289][ T6549] EXT4-fs (loop1): Remounting filesystem read-only [ 119.924009][ T6030] usb 5-1: SerialNumber: syz [ 119.940545][ T6549] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc=0x000000000000000e,abort,user_xattr,user_xattr,grpjquota=.max_batch_time=0x0000000000000001,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 120.086371][ T13] usb 3-1: USB disconnect, device number 8 [ 120.117015][ T6555] fido_id[6555]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 120.217634][ T6559] comedi comedi1: pcmda12: I/O port conflict (0x100,16) [ 120.277301][ T6030] usb 5-1: USB disconnect, device number 7 [ 120.448500][ T6569] loop3: detected capacity change from 0 to 512 [ 120.477545][ T6569] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 120.573767][ T6569] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #17: comm syz.3.1001: corrupted in-inode xattr [ 120.618912][ T6569] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.1001: couldn't read orphan inode 17 (err -117) [ 120.646046][ T6569] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.821271][ T6571] loop0: detected capacity change from 0 to 32768 [ 120.866040][ T6571] (syz.0.1002,6571,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 120.899268][ T6571] (syz.0.1002,6571,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 120.996538][ T6571] JBD2: Ignoring recovery information on journal [ 121.054967][ T6571] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 121.339628][ T6590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1010'. [ 121.458602][ T6592] loop1: detected capacity change from 0 to 4096 [ 121.460515][ T4188] ocfs2: Unmounting device (7,0) on (node local) [ 121.557786][ T6597] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.629121][ T6596] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 121.644506][ T6592] NILFS (loop1): nilfs_ioctl_move_inode_block: invalid virtual block address (data): ino=1, cno=18446744073709551612, offset=9, blocknr=0, vblocknr=1073741827 [ 121.703302][ T6592] NILFS (loop1): error -2 preparing GC: cannot read source blocks [ 121.942823][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1012'. [ 121.952981][ T6606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1012'. [ 121.962259][ T6606] netlink: 'syz.0.1012': attribute type 14 has an invalid length. [ 122.004261][ T6606] netlink: 'syz.0.1012': attribute type 11 has an invalid length. [ 122.079229][ T6581] [ 122.079229][ T6581] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 122.079229][ T6581] [ 122.159700][ T13] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 122.261182][ T6581] ERROR: (device loop3): dbReAlloc: the block is outside the filesystem [ 122.261182][ T6581] [ 122.300265][ T6581] ERROR: (device loop3): remounting filesystem as read-only [ 122.308067][ T6581] jfs_mkdir: dtInsert returned -EIO [ 122.321068][ T6581] ERROR: (device loop3): jfs_mkdir: [ 122.321068][ T6581] [ 122.456317][ T6623] tipc: Enabling of bearer rejected, failed to enable media [ 122.593566][ T6619] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 122.609877][ T13] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 122.622252][ T13] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 122.635367][ T13] usb 3-1: config 0 interface 0 has no altsetting 0 [ 122.642141][ T13] usb 3-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 122.652265][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.667678][ T13] usb 3-1: config 0 descriptor?? [ 122.673054][ T6619] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.031163][ T6645] [ 123.033589][ T6645] ====================================================== [ 123.040622][ T6645] WARNING: possible circular locking dependency detected [ 123.047660][ T6645] syzkaller #0 Not tainted [ 123.052096][ T6645] ------------------------------------------------------ [ 123.059134][ T6645] syz.3.1035/6645 is trying to acquire lock: [ 123.065136][ T6645] ffff888079668f98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 123.075603][ T6645] [ 123.075603][ T6645] but task is already holding lock: [ 123.082993][ T6645] ffff8880796693f0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1020 [ 123.092343][ T6645] [ 123.092343][ T6645] which lock already depends on the new lock. [ 123.092343][ T6645] [ 123.102809][ T6645] [ 123.102809][ T6645] the existing dependency chain (in reverse order) is: [ 123.111844][ T6645] [ 123.111844][ T6645] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 123.119523][ T6645] __mutex_lock_common+0x1e5/0x2400 [ 123.125285][ T6645] mutex_lock_nested+0x17/0x20 [ 123.130646][ T6645] hci_dev_do_close+0x5f/0x1020 [ 123.136061][ T6645] hci_rfkill_set_block+0x101/0x180 [ 123.141865][ T6645] rfkill_set_block+0x1c1/0x3c0 [ 123.147290][ T6645] rfkill_fop_write+0x453/0x560 [ 123.152685][ T6645] vfs_write+0x304/0xd70 [ 123.157477][ T6645] ksys_write+0x153/0x260 [ 123.162368][ T6645] do_syscall_64+0x4c/0xa0 [ 123.167335][ T6645] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.173781][ T6645] [ 123.173781][ T6645] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 123.181805][ T6645] __mutex_lock_common+0x1e5/0x2400 [ 123.187567][ T6645] mutex_lock_nested+0x17/0x20 [ 123.192885][ T6645] rfkill_register+0x2f/0x970 [ 123.198111][ T6645] hci_register_dev+0x459/0x980 [ 123.203514][ T6645] vhci_create_device+0x32e/0x5c0 [ 123.209090][ T6645] vhci_write+0x389/0x440 [ 123.213952][ T6645] vfs_write+0x748/0xd70 [ 123.218737][ T6645] ksys_write+0x153/0x260 [ 123.223632][ T6645] do_syscall_64+0x4c/0xa0 [ 123.228594][ T6645] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.235033][ T6645] [ 123.235033][ T6645] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 123.242877][ T6645] __mutex_lock_common+0x1e5/0x2400 [ 123.248623][ T6645] mutex_lock_nested+0x17/0x20 [ 123.254037][ T6645] vhci_send_frame+0x88/0x100 [ 123.259268][ T6645] hci_send_frame+0x1a9/0x2e0 [ 123.264499][ T6645] hci_tx_work+0x9b5/0x16d0 [ 123.269551][ T6645] process_one_work+0x867/0xff0 [ 123.274945][ T6645] worker_thread+0xad7/0x12a0 [ 123.280175][ T6645] kthread+0x42e/0x520 [ 123.284785][ T6645] ret_from_fork+0x1f/0x30 [ 123.289741][ T6645] [ 123.289741][ T6645] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 123.298980][ T6645] __lock_acquire+0x2c66/0x7b50 [ 123.304897][ T6645] lock_acquire+0x19e/0x400 [ 123.309957][ T6645] __flush_work+0x116/0x210 [ 123.315009][ T6645] hci_dev_do_close+0x201/0x1020 [ 123.320502][ T6645] hci_rfkill_set_block+0x101/0x180 [ 123.326254][ T6645] rfkill_set_block+0x1c1/0x3c0 [ 123.331656][ T6645] rfkill_fop_write+0x453/0x560 [ 123.337058][ T6645] vfs_write+0x304/0xd70 [ 123.341852][ T6645] ksys_write+0x153/0x260 [ 123.346712][ T6645] do_syscall_64+0x4c/0xa0 [ 123.351658][ T6645] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.358085][ T6645] [ 123.358085][ T6645] other info that might help us debug this: [ 123.358085][ T6645] [ 123.368326][ T6645] Chain exists of: [ 123.368326][ T6645] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 123.368326][ T6645] [ 123.383472][ T6645] Possible unsafe locking scenario: [ 123.383472][ T6645] [ 123.390920][ T6645] CPU0 CPU1 [ 123.396285][ T6645] ---- ---- [ 123.401642][ T6645] lock(&hdev->req_lock); [ 123.406054][ T6645] lock(rfkill_global_mutex); [ 123.413420][ T6645] lock(&hdev->req_lock); [ 123.420349][ T6645] lock((work_completion)(&hdev->tx_work)); [ 123.426325][ T6645] [ 123.426325][ T6645] *** DEADLOCK *** [ 123.426325][ T6645] [ 123.434457][ T6645] 2 locks held by syz.3.1035/6645: [ 123.439572][ T6645] #0: ffffffff8d6c48a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560 [ 123.449670][ T6645] #1: ffff8880796693f0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1020 [ 123.459414][ T6645] [ 123.459414][ T6645] stack backtrace: [ 123.465312][ T6645] CPU: 1 PID: 6645 Comm: syz.3.1035 Not tainted syzkaller #0 [ 123.472677][ T6645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 123.482817][ T6645] Call Trace: [ 123.486102][ T6645] [ 123.489029][ T6645] dump_stack_lvl+0x188/0x250 [ 123.493708][ T6645] ? load_image+0x410/0x410 [ 123.498207][ T6645] ? show_regs_print_info+0x20/0x20 [ 123.503422][ T6645] ? print_circular_bug+0x12b/0x1a0 [ 123.508621][ T6645] check_noncircular+0x296/0x330 [ 123.513570][ T6645] ? look_up_lock_class+0x71/0x110 [ 123.518686][ T6645] ? add_chain_block+0x9b0/0x9b0 [ 123.523619][ T6645] ? lockdep_lock+0xf1/0x1f0 [ 123.528213][ T6645] ? mark_lock+0x94/0x320 [ 123.532558][ T6645] ? _find_first_zero_bit+0xd1/0xf0 [ 123.537755][ T6645] __lock_acquire+0x2c66/0x7b50 [ 123.542615][ T6645] ? add_chain_block+0x9b0/0x9b0 [ 123.547554][ T6645] ? lockdep_unlock+0x143/0x2e0 [ 123.552404][ T6645] ? verify_lock_unused+0x140/0x140 [ 123.557602][ T6645] ? mark_lock+0x94/0x320 [ 123.561931][ T6645] ? __lock_acquire+0x1305/0x7b50 [ 123.566961][ T6645] lock_acquire+0x19e/0x400 [ 123.571462][ T6645] ? __flush_work+0xfa/0x210 [ 123.576068][ T6645] ? verify_lock_unused+0x140/0x140 [ 123.581268][ T6645] ? read_lock_is_recursive+0x10/0x10 [ 123.586648][ T6645] __flush_work+0x116/0x210 [ 123.591149][ T6645] ? __flush_work+0xfa/0x210 [ 123.595737][ T6645] ? flush_work+0x20/0x20 [ 123.600066][ T6645] ? rcu_lock_release+0x5/0x20 [ 123.604841][ T6645] ? __lock_acquire+0x7b50/0x7b50 [ 123.609871][ T6645] hci_dev_do_close+0x201/0x1020 [ 123.614811][ T6645] hci_rfkill_set_block+0x101/0x180 [ 123.620009][ T6645] ? rcu_lock_release+0x20/0x20 [ 123.624866][ T6645] rfkill_set_block+0x1c1/0x3c0 [ 123.629716][ T6645] rfkill_fop_write+0x453/0x560 [ 123.634565][ T6645] ? rfkill_fop_read+0x560/0x560 [ 123.639499][ T6645] ? common_file_perm+0x120/0x1c0 [ 123.644523][ T6645] ? fsnotify_perm+0x5d/0x560 [ 123.649196][ T6645] ? security_file_permission+0x75/0xa0 [ 123.654741][ T6645] ? rfkill_fop_read+0x560/0x560 [ 123.659683][ T6645] vfs_write+0x304/0xd70 [ 123.663927][ T6645] ? file_end_write+0x250/0x250 [ 123.668776][ T6645] ? __fget_files+0x402/0x470 [ 123.673452][ T6645] ? __fdget_pos+0x1e2/0x370 [ 123.678036][ T6645] ? ksys_write+0x70/0x260 [ 123.682449][ T6645] ksys_write+0x153/0x260 [ 123.686782][ T6645] ? __ia32_sys_read+0x80/0x80 [ 123.691542][ T6645] ? lockdep_hardirqs_on+0x94/0x140 [ 123.696741][ T6645] do_syscall_64+0x4c/0xa0 [ 123.701153][ T6645] ? clear_bhb_loop+0x30/0x80 [ 123.705830][ T6645] ? clear_bhb_loop+0x30/0x80 [ 123.710503][ T6645] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.716401][ T6645] RIP: 0033:0x7fb9de667e59 [ 123.720819][ T6645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.740429][ T6645] RSP: 002b:00007fb9dc8c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 123.748844][ T6645] RAX: ffffffffffffffda RBX: 00007fb9de8e0fa0 RCX: 00007fb9de667e59 [ 123.756834][ T6645] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 123.764803][ T6645] RBP: 00007fb9de6fde6f R08: 0000000000000000 R09: 0000000000000000 [ 123.772773][ T6645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.780745][ T6645] R13: 00007fb9de8e1038 R14: 00007fb9de8e0fa0 R15: 00007fff994605b8 [ 123.788722][ T6645] [ 123.815234][ T13] wacom 0003:056A:0059.0002: unknown main item tag 0x3 [ 123.868706][ T13] wacom 0003:056A:0059.0002: unknown main item tag 0x0 [ 123.881929][ T13] wacom 0003:056A:0059.0002: unknown main item tag 0x0 [ 123.889042][ T13] wacom 0003:056A:0059.0002: unknown main item tag 0x0 [ 123.896265][ T13] wacom 0003:056A:0059.0002: unknown main item tag 0x0 [ 123.905099][ T13] wacom 0003:056A:0059.0002: unknown main item tag 0x0 [ 123.912051][ T13] wacom 0003:056A:0059.0002: unknown main item tag 0x0 [ 123.919055][ T13] wacom 0003:056A:0059.0002: unknown main item tag 0x0 [ 123.927938][ T13] wacom 0003:056A:0059.0002: hidraw0: USB HID v0.04 Device [HID 056a:0059] on usb-dummy_hcd.2-1/input0 [ 124.023861][ T6028] usb 3-1: USB disconnect, device number 9 [ 132.900987][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.907498][ T1432] ieee802154 phy1 wpan1: encryption failed: -22