last executing test programs: 4.577670361s ago: executing program 2 (id=418): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5, 0x3, "e4"}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "1f23"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x90}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) 4.512001587s ago: executing program 3 (id=419): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x6, 0x15, 0x0, &(0x7f0000000100)) 4.456525843s ago: executing program 2 (id=421): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2a20c2a, &(0x7f0000000140)={[{@uid={'uid', 0x3d, 0xffffffffffffffff}}]}) 4.360050163s ago: executing program 3 (id=422): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000007400)=ANY=[], 0x1, 0x61ee, &(0x7f000000d5c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) 4.359765482s ago: executing program 2 (id=424): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) 4.216878606s ago: executing program 2 (id=425): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f00000093b020966eabd5e2000016fae47404"], 0x0}, 0x0) 3.961737322s ago: executing program 0 (id=430): syz_usb_connect(0x5, 0x27, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000240)={&(0x7f0000000200)=[{0xf, 0x1200, 0x1, &(0x7f0000000080)='4'}, {0x101, 0x2200, 0x0, 0x0}, {0x0, 0x2000, 0x0, 0x0}], 0x3}) 3.639940463s ago: executing program 3 (id=438): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_012={0x2, 0x2, 0x0, 'R.'}, @main=@item_012={0x1, 0x0, 0x9, "b0"}]}}, 0x0}, 0x0) 3.215533675s ago: executing program 1 (id=447): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/234, 0xea}], 0x1) read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) 3.191419887s ago: executing program 1 (id=448): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) 3.135691343s ago: executing program 1 (id=449): unshare(0x28040680) r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, 0x0, 0xfffffffffffffe10) 3.070198269s ago: executing program 1 (id=451): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @local, 0xe79}, 0x1c) 3.005054536s ago: executing program 1 (id=453): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000040)={0x0, 0xc, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 2.179411537s ago: executing program 0 (id=460): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x44, r1, 0x1, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}}, 0x0) 2.084633326s ago: executing program 0 (id=461): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080)=0x2) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0x8, 0xbde, 0x6, 0x100}}) 2.012143733s ago: executing program 0 (id=462): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x2c}]}, 0x44}}, 0x0) 2.011852153s ago: executing program 0 (id=463): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000000c0)={0x1}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000140)={0x0, 0xf74, [0x4, 0x7, 0x80, 0xffffffffffff3dd7, 0x8, 0x6]}) 1.570164726s ago: executing program 3 (id=465): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x4c, r1, 0x2b8ee6cf79dab3f, 0x0, 0x0, {0x2e}, [{@pci={{0x10}, {0x11}}, {0x1c}}]}, 0x4c}}, 0x0) 1.479666015s ago: executing program 3 (id=467): r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYRES8, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1.471967966s ago: executing program 4 (id=468): ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) r0 = socket$key(0xf, 0x3, 0x2) ioctl(r0, 0x8b27, &(0x7f0000000040)) 1.316067781s ago: executing program 4 (id=469): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x9e) 1.256489477s ago: executing program 0 (id=470): syz_mount_image$reiserfs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x1141, &(0x7f0000002380)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 1.177119885s ago: executing program 2 (id=471): syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./bus\x00', 0xc2, &(0x7f0000000900)={[{@acl}, {@usrjquota_file, 0x4}, {@acl}, {@balloc_hashed_reloc}, {@usrjquota, 0x3d}]}, 0x2, 0x1115, &(0x7f0000002280)="$eJzs2D9rFEEYB+Df7B0Yq5NNvwhaWEhIODurFBGutbaRkMpUuSoiiN/FjyOp7EM+gEXAUhjZTdYTCUS5CxJ4Hpjd4Z13/pXvBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK687D/bTdKOkSZJSbrubHGRpBvjj75MmpS8PlosD07mr5ZJJkN66Vs/q5+Wdu/JVjtv5+1e+2J7/2m7PH3/7u3x8dHJ9TIlXc4vN3+Rcn2eG22VzW8IAAAA90Rd2+zPJadj528q7vX3BwAAAG6z8QcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH9UZ6t+m+RHrTVNkpJ03dniIkn3Pw8IAAAArK2kyZvZTfEMzwArz/N1Vob42L6XPmc3n4f5D1aph00e3v3RAQAA4B6Z3ppRfqvHn2WaWuvHcexxptnZuer3v37g234yOT3I7q+a/NPwPb/8cDi2Uid3dB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Cc7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAHwUAAD//wAQ3aw=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000180)={{}, {0x1, 0x1}, [{0x2, 0x3}], {}, [], {0x10, 0x6}, {0x20, 0x5}}, 0x2c, 0x1) 1.108069202s ago: executing program 4 (id=472): r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x41}}, 0x42) 953.446707ms ago: executing program 4 (id=473): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0xc) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) 715.55424ms ago: executing program 4 (id=474): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3, 0xfffffffb, 0x1, 0x3ff}}) 517.00664ms ago: executing program 1 (id=475): syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0xc0ed000e, &(0x7f0000000300)={[{@init_itable_val={'init_itable', 0x3d, 0xfaca}}, {@nolazytime}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@lazytime}, {@acl}]}, 0xfe, 0x478, &(0x7f0000000940)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 504.946071ms ago: executing program 4 (id=476): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000001480)=ANY=[], 0xfd, 0x5519, &(0x7f00000079c0)="$eJzs3M1rI2UYAPAn7Xa/XYt48LYDi9DCJmy6H+ht1V38wF3KqgdPmiZpyG6SKU2a1p48eBQP/iei4Mmjf4MHz97Eg+JNUDLvVLe6gtC0sdvfDybPzDtvnnneUArPTEgAJ9Zi9uvPlbgU5yJiPiIuRhT7lXIr3E7hhYi4HBFzj22VcvzPgdMRcT4iLk2Sp5yV8tTnV8dXbv701i/ffHfm1IUvvv5+dqsGZu3FiOhvpP3tfop5J8WH5Xhj3C1i/8a4jOlE72w638/T+HZ7rciw3dib1yji9U6an29sDSdxvddoTmKnu16MbwzSBYfjzl6e4g0PG5vFcau9VsTuMC9iZzddd2c3/W/bHY5SnlaZ76MifYxGezGNt3faaT0bj4rYHIzK8ZQ3b7V3JnFcxvJy0cx7raKOtQN80P9zb3cHWzvZuL057OaD7Gat/lKtfqta38xb7VH7RrXRb926kS11epNp1VG70b/dyfNOr11r5v3lbKnTbFbr9WzpTnut2xhk9Xrteu1a9eZyuXc1e/3+e1mvlS1N4qvdwdao2xtm6/lmlt6xnK3Urr+8nF2pZ+/cW81WH9y9e2/13Q/uvH//lXtvvlZO+kdZ2dLKtZWVav1adaW+fILW/0lZ9BTXDwdSmXUBAMeP/h+YhYP0//1H5fET+//NBxGH3/+H/n8qjlX/e9L7/0NYPxyI/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MT6YeHLN4qdxXR8oRx/phx6rjyuRMRcRPz+BPNxel/O+TLPwr/MX/hbDd9WosgwucaZcjsfEbfL7bdnD/tTAAAAgKfXVx9f/ix16+llcdYFcZTSTZu5ix9OKV8lIhYWf5xStrnJy/NTSlb8fZ+KnSllK25gnZ1SsnTL7dS0sv0n8/vC2cdCJYW5Iy0HAAA4Evs7gaPtQgAAADhKn866AGajEnuPMveeBRffvP/rgeC5fUcAAADAMVSZdQEAAADAoSv6f7//BwAAAE+39Pt/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8wc793CYORHEAfjZ4Yf9p0Wrv28reoIwtIcccIwpIExSQAzWkAWogt5QQQYTHIRBxiOSxrUTfJzmTscyPNwgOMyMNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJceqnUVN39v2+bs9u3kGQ0AAABwybZaL+p/Zqn/vbn/s7n1u+kXEVFGxKW5+yi+nGWOmpzq9fm70+erNzXcR9QJh/eYNNe3iPjXXE+/uv4UAAAA4PPaLFfzNFtPf2ZDF0Sf0qJN+eN/prwiIqrZY6a08pD3J1NY/f0ex3WmtHoBa5opLC25jXOlvUv9cz+u2k1PmiI15cWXHYvMNnYAAKBHo7Om31kIAAAAfboaugCGUcTLVuZxK3CSmmZ77+tZDwAAAPiAiqELAAAAADpXz/97Ov9v7/w/AAAAGEY6/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAubav1YrNczdvm7Pbt5BkNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADP7M87CoRAGITB3vWdydz/sNKgqalJFQgff2MwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCxPy8pEAJBEAVzxv9O+v6HlQQ9gwgR0PCoohYNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCxcz8vclNxAMBfksnUVsVxlTmsiIIHvdjptLb2Jh6UxYN/grBsp3Xt1B/tHmwp4l68yZ57ET2KCMp66//Qcwu91FsPc6ggHkeSSWbSdtFZwSTd/Xzg5X0TQt73JbDsNy+7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCavLuIk2zTm8Vxcez2g+sbWX/nkT5zc+fuatayOKoz6SfDy9WdqN9cIgAAABweSVnfhxDupbtrWR/38vo/Lc/Jav7vn53FZT3/aN1f9mXtn7Xffr3/4nyg3myc7KLnN8ejE4+n0vn/Ztluz/3rGZ38zufvXpL8gcQfbL8wSfP7GX1769Z73Tw8Uke2AMB/cbzsi6D8fSjrh00mBsCh0akU3mX9n/SazQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgDpPt8HQZRyGE1c4iztx5cH1jr/7mzt3Vsp25cWMnfL24ZnaJNIRwfnM8OlHrbNrtytVrF9fH49Hl+oNXQghNjf5OMf2LHy1xcgiN3J/9B3+1I422BXHxsNuSz5MRNPhDCQCAAyktWlbX30t317Jj0UoI0x8erv9fr8Rhyfr//sdnblfHqtb/w9pm2H6DrUufD65cvfbm5qX1C6MLo0/fOjl8e3jq7OnTZwf5u5KBNyYAAADs23Q6nc53ukWr1v/xyuPr/8cqcViy/v/iu+FX1YET9f+eFot+TWcCAABwuD3/6p9/RHscj7rd8OX61tbl4Ww73z852zaQ6r4dKVq1/k9Wms4KAAAAqMNkO3po/f9cJQ5Lrv8/8+NLP1evmYQQjhbr/8c3Phufq286rVbHnxM3PUcAAACadbRo1fX/NP/+P55/8hCHEN54bRYX/wbwH+v/tKj/k/e/+ak6VvX7/1P1TbGV4v7sfuR9P4ROv+mMAAAAOMieKlpW7P+e7q598suxD7u+/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACo298BAAD//y5wQIQ=") r0 = creat(&(0x7f0000000000)='./file0\x00', 0x10) open_by_handle_at(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="100000000200000006000000000000040200000000000000"], 0x200000) 178.765613ms ago: executing program 2 (id=477): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe020002c00e00000800040001000000", 0x24) 0s ago: executing program 3 (id=478): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x5, 0x14fe, &(0x7f0000003f40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x90) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x2, 0xde, 0xfffffffffffffff8}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.127' (ED25519) to the list of known hosts. [ 49.557889][ T4171] cgroup: Unknown subsys name 'net' [ 49.690612][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.929427][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 52.135720][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 52.171690][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 52.289585][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.297720][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.306628][ T4191] device bridge_slave_0 entered promiscuous mode [ 52.316578][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.323651][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.331777][ T4191] device bridge_slave_1 entered promiscuous mode [ 52.349044][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 52.398584][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.424350][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 52.441088][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.469585][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.476867][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.484595][ T4198] device bridge_slave_0 entered promiscuous mode [ 52.510000][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.520159][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.529336][ T4198] device bridge_slave_1 entered promiscuous mode [ 52.556358][ T4191] team0: Port device team_slave_0 added [ 52.581948][ T4191] team0: Port device team_slave_1 added [ 52.604879][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.612735][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.613710][ T4181] device bridge_slave_0 entered promiscuous mode [ 52.629837][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 52.645615][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.664117][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.671321][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.679533][ T4181] device bridge_slave_1 entered promiscuous mode [ 52.698370][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.705534][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.732321][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.745866][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.772476][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.779823][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.787673][ T4182] device bridge_slave_0 entered promiscuous mode [ 52.800808][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.808257][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.834325][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.858245][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.865574][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.873602][ T4182] device bridge_slave_1 entered promiscuous mode [ 52.882353][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.897675][ T4198] team0: Port device team_slave_0 added [ 52.906686][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.930377][ T4198] team0: Port device team_slave_1 added [ 52.957942][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.989427][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.007746][ T4191] device hsr_slave_0 entered promiscuous mode [ 53.014540][ T4191] device hsr_slave_1 entered promiscuous mode [ 53.023300][ T4181] team0: Port device team_slave_0 added [ 53.043206][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.050639][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.077323][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.089944][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.096953][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.123212][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.136483][ T4181] team0: Port device team_slave_1 added [ 53.174922][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.182332][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.190413][ T4183] device bridge_slave_0 entered promiscuous mode [ 53.203132][ T4182] team0: Port device team_slave_0 added [ 53.238872][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.246002][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.272455][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.283689][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.290960][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.299225][ T4183] device bridge_slave_1 entered promiscuous mode [ 53.306985][ T4182] team0: Port device team_slave_1 added [ 53.330404][ T4198] device hsr_slave_0 entered promiscuous mode [ 53.337333][ T4198] device hsr_slave_1 entered promiscuous mode [ 53.343961][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.351843][ T4198] Cannot create hsr debugfs directory [ 53.366427][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.373395][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.399816][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.430561][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.471140][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.492955][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.500135][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.526817][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.542193][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.549408][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.575947][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.600838][ T4181] device hsr_slave_0 entered promiscuous mode [ 53.607896][ T4181] device hsr_slave_1 entered promiscuous mode [ 53.614926][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.622691][ T4181] Cannot create hsr debugfs directory [ 53.661695][ T4183] team0: Port device team_slave_0 added [ 53.698326][ T4183] team0: Port device team_slave_1 added [ 53.744805][ T4182] device hsr_slave_0 entered promiscuous mode [ 53.751641][ T4182] device hsr_slave_1 entered promiscuous mode [ 53.758570][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.766574][ T4182] Cannot create hsr debugfs directory [ 53.788570][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.796278][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.823220][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.835293][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.842259][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.869010][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.879962][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 53.890636][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 53.901387][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 53.945347][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 53.956053][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 53.980199][ T4183] device hsr_slave_0 entered promiscuous mode [ 53.987098][ T4183] device hsr_slave_1 entered promiscuous mode [ 53.993776][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.001525][ T4183] Cannot create hsr debugfs directory [ 54.083550][ T4198] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.102649][ T4198] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.114172][ T4198] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.138530][ T4198] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.206293][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.216453][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.236606][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.247453][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.312274][ T4181] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.332880][ T4181] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.343592][ T4181] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.362441][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.381068][ T4181] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.415032][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.423930][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.433869][ T4182] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.444547][ T4182] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.458362][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.472862][ T4182] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.483900][ T4182] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.496617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.509231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.519850][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.527236][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.577093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.586405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.596210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.604967][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.612112][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.620350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.633166][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.653314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.679642][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.689756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.698748][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.707510][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.717325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.726244][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.733962][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.753715][ T4198] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.764678][ T4198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.778666][ T4183] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.790278][ T4183] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.801080][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.808731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.817581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.827670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.836698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.846383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.865161][ T4183] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.877641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.890731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.900761][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.907889][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.927965][ T4183] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.943573][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.956782][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.982162][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.991421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.001036][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.008130][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.018907][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.061786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.070568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.079255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.101419][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.114070][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.123585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.132404][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.140339][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.149615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.160318][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.182528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.192284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.202261][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.209843][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.219100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.230255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.239131][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.246526][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.254348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.263254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.286882][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.295459][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.319316][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.330361][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.342727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.351186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.360513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.368746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.378034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.388139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.397977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.407352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.416469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.424696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.436206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.444914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.453989][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.461092][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.472521][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.518026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.527664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.546872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.556819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.565430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.573765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.582393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.590809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.599394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.607904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.617031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.626539][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.633596][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.642611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.651369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.660155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.669197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.680532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.688695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.699254][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.707761][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.719366][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.743405][ T4182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.762860][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.788781][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.803458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.813457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.823542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.833130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.848194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.857447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.867761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.877266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.886692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.932863][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.945554][ T4225] Bluetooth: hci2: command 0x041b tx timeout [ 55.951689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.959964][ T4225] Bluetooth: hci1: command 0x041b tx timeout [ 55.972545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.989506][ T4225] Bluetooth: hci0: command 0x041b tx timeout [ 56.010078][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.017231][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.026443][ T4255] Bluetooth: hci3: command 0x041b tx timeout [ 56.032971][ T4255] Bluetooth: hci4: command 0x041b tx timeout [ 56.039464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.049496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.058813][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.066012][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.073852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.082522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.090196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.098868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.113324][ T4198] device veth0_vlan entered promiscuous mode [ 56.126584][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.136147][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.164703][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.188760][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.206945][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.220774][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.233261][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.242014][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.249892][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.258167][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.277916][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.292875][ T4198] device veth1_vlan entered promiscuous mode [ 56.304739][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.319578][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.330106][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.344273][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.353363][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.362387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.371037][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.417433][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.424936][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.440416][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.452030][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.467280][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.477000][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.490810][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.515251][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.523816][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.534004][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.542928][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.564432][ T4191] device veth0_vlan entered promiscuous mode [ 56.572503][ T4198] device veth0_macvtap entered promiscuous mode [ 56.580711][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.590903][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.599740][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.619577][ T4181] device veth0_vlan entered promiscuous mode [ 56.629823][ T4198] device veth1_macvtap entered promiscuous mode [ 56.645526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.654539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.663168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.671987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.680409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.690409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.698969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.708176][ T4191] device veth1_vlan entered promiscuous mode [ 56.719960][ T4181] device veth1_vlan entered promiscuous mode [ 56.733714][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.750552][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.762355][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.780503][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.789066][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.798716][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.807490][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.815883][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.824576][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.833790][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.842980][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.852053][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.861082][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.898668][ T4198] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.909526][ T4198] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.918591][ T4198] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.927586][ T4198] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.947798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.956939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.970640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.980440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.012835][ T4181] device veth0_macvtap entered promiscuous mode [ 57.023938][ T4182] device veth0_vlan entered promiscuous mode [ 57.036266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.044363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.052400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.060379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.071395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.080768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.089484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.104679][ T4181] device veth1_macvtap entered promiscuous mode [ 57.131077][ T4191] device veth0_macvtap entered promiscuous mode [ 57.162392][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.171260][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.179679][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.188808][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.200124][ T4183] device veth0_vlan entered promiscuous mode [ 57.212968][ T4182] device veth1_vlan entered promiscuous mode [ 57.226198][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.234391][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.244638][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.261195][ T4191] device veth1_macvtap entered promiscuous mode [ 57.274428][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.285598][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.298530][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.311160][ T4183] device veth1_vlan entered promiscuous mode [ 57.320441][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.340020][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.345318][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.357663][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.366008][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.374006][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.382305][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.391407][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.410121][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.422205][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.433611][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.459906][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.473419][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.483612][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.494656][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.507072][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.514774][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.523546][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.532402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.541333][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.559319][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.568921][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.594069][ T4182] device veth0_macvtap entered promiscuous mode [ 57.603555][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.614861][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.626111][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.637050][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.648140][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.657483][ T4181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.666396][ T4181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.676331][ T4181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.685025][ T4181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.697078][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.704902][ T4183] device veth0_macvtap entered promiscuous mode [ 57.712563][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.726759][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.735463][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.748792][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.758581][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.767616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.776807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.788021][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.797607][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.806364][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.815116][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.826088][ T4182] device veth1_macvtap entered promiscuous mode [ 57.837429][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.845795][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.881652][ T4183] device veth1_macvtap entered promiscuous mode [ 57.901437][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.917223][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.927899][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.938606][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.950892][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.961646][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.973140][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.002633][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.013095][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.022710][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.036808][ T4255] Bluetooth: hci0: command 0x040f tx timeout [ 58.043246][ T4255] Bluetooth: hci1: command 0x040f tx timeout [ 58.050504][ T4255] Bluetooth: hci2: command 0x040f tx timeout [ 58.083707][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.099449][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.111408][ T4255] Bluetooth: hci4: command 0x040f tx timeout [ 58.121709][ T4255] Bluetooth: hci3: command 0x040f tx timeout [ 58.129645][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.140689][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.152523][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.163571][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.174897][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.185976][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.200245][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.212657][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.227790][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.237986][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.248911][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.259109][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.269818][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.281890][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.299138][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.311767][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.330674][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.340119][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.351431][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.363645][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.374021][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.384735][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.394886][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.406274][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.416142][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.427827][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.439652][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.450986][ T4182] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.460600][ T4182] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.470245][ T4182] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.479062][ T4182] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.508439][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.518136][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.538176][ T4183] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.557102][ T4183] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.569706][ T4183] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.579640][ T4183] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.616680][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.652015][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.696731][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.734624][ T4308] loop1: detected capacity change from 0 to 256 [ 58.755405][ T1231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.765388][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.773389][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.778432][ T4308] FAT-fs (loop1): "posix" option is obsolete, not supported now [ 58.788716][ T1231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.809797][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.820868][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.890198][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.901995][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.919260][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.958259][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.977395][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.002787][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.034906][ T3108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.060326][ T3108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.086456][ T4272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.094487][ T4272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.114760][ T4314] loop0: detected capacity change from 0 to 1024 [ 59.116008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.137964][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.168045][ T4314] ======================================================= [ 59.168045][ T4314] WARNING: The mand mount option has been deprecated and [ 59.168045][ T4314] and is ignored by this kernel. Remove the mand [ 59.168045][ T4314] option from the mount to silence this warning. [ 59.168045][ T4314] ======================================================= [ 59.183412][ T4309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.245781][ T4314] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 59.286296][ T4318] loop4: detected capacity change from 0 to 128 [ 59.324625][ T4309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.404332][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.413127][ T4314] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,block_validity,dioread_nolock,. Quota mode: none. [ 59.521896][ T4314] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.639677][ T4332] netlink: 288 bytes leftover after parsing attributes in process `syz.2.3'. [ 59.652978][ T4336] loop4: detected capacity change from 0 to 1024 [ 59.860588][ T4336] hfsplus: xattr searching failed [ 60.114769][ T4184] Bluetooth: hci2: command 0x0419 tx timeout [ 60.134146][ T4184] Bluetooth: hci1: command 0x0419 tx timeout [ 60.169543][ T4184] Bluetooth: hci0: command 0x0419 tx timeout [ 60.195625][ T4233] Bluetooth: hci3: command 0x0419 tx timeout [ 60.207568][ T4233] Bluetooth: hci4: command 0x0419 tx timeout [ 60.273287][ T4370] capability: warning: `syz.2.29' uses deprecated v2 capabilities in a way that may be insecure [ 60.384106][ T4376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'. [ 60.435585][ T4376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.35'. [ 60.462069][ T4379] loop1: detected capacity change from 0 to 4096 [ 60.500339][ T4376] netlink: 'syz.0.35': attribute type 12 has an invalid length. [ 60.500822][ T4381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.37'. [ 60.535257][ T4376] netlink: 'syz.0.35': attribute type 14 has an invalid length. [ 60.555624][ T4381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.37'. [ 60.687798][ T4386] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 61.175162][ T4404] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 61.291760][ T4413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.51'. [ 61.518432][ T4383] loop3: detected capacity change from 0 to 40427 [ 61.639020][ T4383] F2FS-fs (loop3): Found nat_bits in checkpoint [ 61.771203][ T4390] loop4: detected capacity change from 0 to 32768 [ 61.815922][ T4383] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 62.096797][ T4182] attempt to access beyond end of device [ 62.096797][ T4182] loop3: rw=2049, want=45104, limit=40427 [ 62.135192][ T4233] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 62.306621][ T4445] netlink: 'syz.0.65': attribute type 4 has an invalid length. [ 62.380987][ T4445] netlink: 17 bytes leftover after parsing attributes in process `syz.0.65'. [ 62.405356][ T4233] usb 3-1: Using ep0 maxpacket: 32 [ 62.545231][ T4233] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 62.554748][ T4233] usb 3-1: config 0 has no interface number 0 [ 62.765321][ T4233] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 62.768415][ T4456] loop4: detected capacity change from 0 to 512 [ 62.794940][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.810351][ T4233] usb 3-1: Product: syz [ 62.814551][ T4233] usb 3-1: Manufacturer: syz [ 62.853635][ T4458] loop0: detected capacity change from 0 to 16 [ 62.855174][ T4233] usb 3-1: SerialNumber: syz [ 62.870111][ T4456] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 62.917388][ T4233] usb 3-1: config 0 descriptor?? [ 62.953206][ T4456] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 62.977763][ T4233] smsc95xx v2.0.0 [ 62.981105][ T4458] erofs: (device loop0): mounted with root inode @ nid 36. [ 63.005273][ T4456] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.055330][ T4463] loop3: detected capacity change from 0 to 64 [ 63.094540][ T26] audit: type=1800 audit(1761571561.076:2): pid=4458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.72" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 63.149836][ T4435] loop1: detected capacity change from 0 to 32768 [ 63.222972][ T4435] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 63.249799][ T4435] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 63.373423][ T4435] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 63.431101][ T4468] loop0: detected capacity change from 0 to 1024 [ 63.453718][ T4435] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 63.567547][ T4468] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 63.663361][ T4435] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error [ 63.663361][ T4435] inode = 12 2341 [ 63.663361][ T4435] function = gfs2_dirent_search, file = fs/gfs2/dir.c, line = 821 [ 63.755312][ T4233] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 63.765128][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 63.772483][ T4233] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 63.785506][ T4435] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 63.792996][ T4435] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 63.816346][ T4233] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 63.826961][ T4435] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 63.847412][ T4233] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 63.850743][ T4435] gfs2: fsid=syz:syz.s: File system withdrawn [ 63.868737][ T4435] CPU: 0 PID: 4435 Comm: syz.1.60 Not tainted syzkaller #0 [ 63.876063][ T4435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 63.886160][ T4435] Call Trace: [ 63.886537][ T4233] usb 3-1: USB disconnect, device number 2 [ 63.889451][ T4435] [ 63.898189][ T4435] dump_stack_lvl+0x168/0x230 [ 63.902909][ T4435] ? kobject_uevent_env+0x371/0x890 [ 63.908129][ T4435] ? show_regs_print_info+0x20/0x20 [ 63.913442][ T4435] ? load_image+0x3b0/0x3b0 [ 63.917966][ T4435] ? kobject_uevent_env+0x371/0x890 [ 63.923296][ T4435] gfs2_withdraw+0x111b/0x1460 [ 63.928319][ T4435] ? gfs2_lm+0x220/0x220 [ 63.932683][ T4435] ? __lock_acquire+0x7c60/0x7c60 [ 63.937735][ T4435] ? do_raw_spin_lock+0x11d/0x280 [ 63.942783][ T4435] ? gfs2_consist_inode_i+0xc0/0xe0 [ 63.948089][ T4435] gfs2_dirent_search+0x268/0x7e0 [ 63.953139][ T4435] ? gfs2_dirent_search+0x7e0/0x7e0 [ 63.958358][ T4435] ? gfs2_permission+0x3ed/0x4b0 [ 63.963330][ T4435] ? gfs2_dir_search+0x220/0x220 [ 63.968293][ T4435] ? gfs2_lookupi+0x5e0/0x5e0 [ 63.972995][ T4435] ? gfs2_glock_nq+0xcb0/0x1550 [ 63.977878][ T4435] gfs2_dir_search+0x49/0x220 [ 63.982572][ T4435] gfs2_lookupi+0x45c/0x5e0 [ 63.987096][ T4435] ? gfs2_lookup_simple+0xf0/0xf0 [ 63.992151][ T4435] ? gfs2_lookupi+0x3fe/0x5e0 [ 63.996860][ T4435] ? __rwlock_init+0x140/0x140 [ 64.001742][ T4435] __gfs2_lookup+0x8c/0x260 [ 64.006276][ T4435] ? d_alloc_parallel+0x1203/0x12d0 [ 64.011499][ T4435] ? gfs2_atomic_open+0x210/0x210 [ 64.016565][ T4435] ? __init_waitqueue_head+0xa5/0x150 [ 64.021966][ T4435] __lookup_slow+0x27d/0x3d0 [ 64.026575][ T4435] ? lookup_one_len+0x2c0/0x2c0 [ 64.031451][ T4435] ? gfs2_lookupi+0x5e0/0x5e0 [ 64.036156][ T4435] ? preempt_count_add+0x8d/0x190 [ 64.041197][ T4435] ? down_read+0x1aa/0x2e0 [ 64.045725][ T4435] lookup_slow+0x53/0x70 [ 64.049991][ T4435] walk_component+0x319/0x460 [ 64.054693][ T4435] link_path_walk+0x662/0xd40 [ 64.059403][ T4435] ? handle_lookup_down+0x130/0x130 [ 64.064643][ T4435] path_lookupat+0x9d/0x440 [ 64.069171][ T4435] filename_lookup+0x1e2/0x4f0 [ 64.074056][ T4435] ? hashlen_string+0x110/0x110 [ 64.079046][ T4435] ? strncpy_from_user+0x1fb/0x360 [ 64.084195][ T4435] ? getname_flags+0x1fe/0x500 [ 64.089086][ T4435] user_path_at_empty+0x40/0x190 [ 64.094058][ T4435] vfs_statx+0x102/0x4d0 [ 64.098324][ T4435] ? vfs_fstatat+0x40/0x40 [ 64.102769][ T4435] __x64_sys_statx+0x17e/0x200 [ 64.107563][ T4435] ? cp_statx+0x590/0x590 [ 64.111926][ T4435] ? lock_chain_count+0x20/0x20 [ 64.116797][ T4435] ? vtime_user_exit+0x2dc/0x400 [ 64.121766][ T4435] ? lockdep_hardirqs_on+0x94/0x140 [ 64.127076][ T4435] do_syscall_64+0x4c/0xa0 [ 64.131506][ T4435] ? clear_bhb_loop+0x30/0x80 [ 64.136220][ T4435] ? clear_bhb_loop+0x30/0x80 [ 64.141007][ T4435] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 64.146927][ T4435] RIP: 0033:0x7f0805f97fc9 [ 64.151879][ T4435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.171684][ T4435] RSP: 002b:00007f08041ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 64.180117][ T4435] RAX: ffffffffffffffda RBX: 00007f08061eefa0 RCX: 00007f0805f97fc9 [ 64.188109][ T4435] RDX: 0000000000000100 RSI: 0000200000000580 RDI: ffffffffffffff9c [ 64.196098][ T4435] RBP: 00007f080601af91 R08: 0000000000000000 R09: 0000000000000000 [ 64.204088][ T4435] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 64.212076][ T4435] R13: 00007f08061ef038 R14: 00007f08061eefa0 R15: 00007ffdfc6e0738 [ 64.220125][ T4435] [ 64.281821][ T4474] loop3: detected capacity change from 0 to 32768 [ 64.347319][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 64.382433][ T4474] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 64.495289][ T7] usb 5-1: config 0 has an invalid interface number: 107 but max is 0 [ 64.508565][ T7] usb 5-1: config 0 has no interface number 0 [ 64.524884][ T4342] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.619014][ T4481] tipc: Started in network mode [ 64.639737][ T4481] tipc: Node identity e0000002, cluster identity 4711 [ 64.666926][ T4481] tipc: Enabling of bearer rejected, failed to enable media [ 64.679007][ T4182] ocfs2: Unmounting device (7,3) on (node local) [ 64.696060][ T7] usb 5-1: New USB device found, idVendor=04b8, idProduct=0602, bcdDevice= 1.10 [ 64.709207][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.745934][ T7] usb 5-1: Product: syz [ 64.750138][ T7] usb 5-1: Manufacturer: syz [ 64.763453][ T7] usb 5-1: SerialNumber: syz [ 64.785764][ T4342] usb 1-1: Using ep0 maxpacket: 16 [ 64.793967][ T4483] loop1: detected capacity change from 0 to 1024 [ 64.816272][ T7] usb 5-1: config 0 descriptor?? [ 64.867010][ T7] usb-storage 5-1:0.107: USB Mass Storage device detected [ 64.913845][ T7] usb-storage 5-1:0.107: Quirks match for vid 04b8 pid 0602: 1 [ 64.922585][ T4342] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 64.960957][ T4342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.006815][ T4342] usb 1-1: config 0 descriptor?? [ 65.073243][ T7] usb 5-1: USB disconnect, device number 2 [ 65.087747][ T154] hfsplus: b-tree write err: -5, ino 4 [ 65.461724][ T4494] loop3: detected capacity change from 0 to 32768 [ 65.501058][ T4487] loop2: detected capacity change from 0 to 32768 [ 65.522392][ T4342] corsair-psu 0003:1B1C:1C09.0001: unknown main item tag 0x3 [ 65.530257][ T4342] corsair-psu 0003:1B1C:1C09.0001: item fetching failed at offset 5/7 [ 65.531056][ T4494] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 65.539531][ T4342] corsair-psu: probe of 0003:1B1C:1C09.0001 failed with error -22 [ 65.572643][ T4494] (syz.3.83,4494,0):ocfs2_clear_journal_error:1085 ERROR: File system error -318767104 recorded in journal 0. [ 65.598242][ T4494] (syz.3.83,4494,0):ocfs2_clear_journal_error:1087 ERROR: File system on device loop3 needs checking. [ 65.602383][ T4487] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.80 (4487) [ 65.639478][ T4494] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 65.675516][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 65.699098][ T4506] netlink: 'syz.4.87': attribute type 2 has an invalid length. [ 65.729187][ T4342] usb 1-1: USB disconnect, device number 2 [ 65.766331][ T4487] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 65.810180][ T4182] ocfs2: Unmounting device (7,3) on (node local) [ 65.825549][ T4487] BTRFS info (device loop2): using free space tree [ 65.860091][ T4487] BTRFS info (device loop2): has skinny extents [ 65.945269][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 66.095589][ T7] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 66.103800][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.114868][ T7] usb 2-1: config 0 has no interface number 0 [ 66.166995][ T4240] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 66.188879][ T4487] BTRFS info (device loop2): enabling ssd optimizations [ 66.295258][ T7] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 66.314707][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.345349][ T7] usb 2-1: Product: syz [ 66.349641][ T7] usb 2-1: Manufacturer: syz [ 66.354237][ T7] usb 2-1: SerialNumber: syz [ 66.417925][ T4549] mkiss: ax0: crc mode is auto. [ 66.424178][ T7] usb 2-1: config 0 descriptor?? [ 66.481401][ T7] usb 2-1: Found UVC 0.00 device syz (046d:08c3) [ 66.500325][ T7] usb 2-1: No valid video chain found. [ 66.540739][ T4240] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 66.552157][ T4240] usb 4-1: config 1 has no interface number 0 [ 66.564668][ T4240] usb 4-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 66.577918][ T4240] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.700400][ T4248] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 66.787545][ T4240] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 66.796836][ T4240] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.807475][ T4240] usb 4-1: Product: syz [ 66.812089][ T4240] usb 4-1: Manufacturer: syz [ 66.817491][ T4240] usb 4-1: SerialNumber: syz [ 66.845533][ T4513] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 66.872458][ T4240] usb 4-1: Expected 3 endpoints, found: 2 [ 66.877253][ T4566] loop0: detected capacity change from 0 to 64 [ 66.900006][ T4562] usb 2-1: USB disconnect, device number 2 [ 67.125351][ T4248] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.145128][ T4248] usb 5-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 67.154207][ T4248] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.204176][ T4573] loop0: detected capacity change from 0 to 4096 [ 67.205684][ T4578] loop2: detected capacity change from 0 to 1024 [ 67.218073][ T4248] usb 5-1: config 0 descriptor?? [ 67.295760][ T4573] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 67.337886][ T144] hfsplus: b-tree write err: -5, ino 4 [ 67.424175][ T4573] ntfs: volume version 3.1. [ 67.467667][ T4588] sock: sock_timestamping_bind_phc: sock not bind to device [ 67.519745][ T4573] ntfs: (device loop0): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp775. You might want to try to use the mount option nls=utf8. [ 67.555299][ T4573] ntfs: (device loop0): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 67.778276][ T4248] wacom 0003:056A:00C6.0002: hidraw0: USB HID v0.00 Device [HID 056a:00c6] on usb-dummy_hcd.4-1/input0 [ 67.788275][ T4607] loop2: detected capacity change from 0 to 256 [ 67.840978][ T4609] netlink: 108 bytes leftover after parsing attributes in process `syz.1.106'. [ 67.919285][ T4240] usb 5-1: USB disconnect, device number 3 [ 68.127557][ T4620] openvswitch: netlink: Duplicate or invalid key (type 0). [ 68.141932][ T4618] fido_id[4618]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 68.182331][ T4620] openvswitch: netlink: Actions may not be safe on all matching packets [ 68.537061][ T4606] loop0: detected capacity change from 0 to 32768 [ 68.578321][ T4606] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop0 scanned by syz.0.104 (4606) [ 68.641662][ T4643] loop4: detected capacity change from 0 to 22 [ 68.680287][ T4606] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 68.702318][ T4606] BTRFS info (device loop0): using free space tree [ 68.713226][ T4643] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 68.754153][ T4606] BTRFS info (device loop0): has skinny extents [ 68.801556][ T4643] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 68.915559][ T4248] usb 4-1: USB disconnect, device number 2 [ 68.953651][ T4626] loop2: detected capacity change from 0 to 32768 [ 69.016087][ T4626] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 69.024291][ T4626] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 69.082892][ T4626] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 69.179528][ T4606] BTRFS info (device loop0): enabling ssd optimizations [ 69.225281][ T4626] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 69.365470][ T4626] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error [ 69.365470][ T4626] inode = 12 2341 [ 69.365470][ T4626] function = gfs2_dirent_search, file = fs/gfs2/dir.c, line = 821 [ 69.418610][ T4626] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 69.437613][ T4626] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 69.475237][ T4626] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 69.517501][ T4626] gfs2: fsid=syz:syz.s: File system withdrawn [ 69.544793][ T4626] CPU: 1 PID: 4626 Comm: syz.2.110 Not tainted syzkaller #0 [ 69.552133][ T4626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 69.562839][ T4626] Call Trace: [ 69.566308][ T4626] [ 69.569250][ T4626] dump_stack_lvl+0x168/0x230 [ 69.573950][ T4626] ? kobject_uevent_env+0x371/0x890 [ 69.579181][ T4626] ? show_regs_print_info+0x20/0x20 [ 69.584408][ T4626] ? load_image+0x3b0/0x3b0 [ 69.589033][ T4626] ? kobject_uevent_env+0x371/0x890 [ 69.594266][ T4626] gfs2_withdraw+0x111b/0x1460 [ 69.595321][ T4248] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 69.599065][ T4626] ? gfs2_lm+0x220/0x220 [ 69.599094][ T4626] ? __lock_acquire+0x7c60/0x7c60 [ 69.608939][ T4508] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 10 /dev/loop0 scanned by udevd (4508) [ 69.610791][ T4626] ? do_raw_spin_lock+0x11d/0x280 [ 69.610821][ T4626] ? gfs2_consist_inode_i+0xc0/0xe0 [ 69.637933][ T4626] gfs2_dirent_search+0x268/0x7e0 [ 69.642981][ T4626] ? gfs2_dirent_search+0x7e0/0x7e0 [ 69.648196][ T4626] ? gfs2_permission+0x3ed/0x4b0 [ 69.653159][ T4626] ? gfs2_dir_search+0x220/0x220 [ 69.658115][ T4626] ? gfs2_lookupi+0x5e0/0x5e0 [ 69.662806][ T4626] ? gfs2_glock_nq+0xcb0/0x1550 [ 69.667679][ T4626] gfs2_dir_search+0x49/0x220 [ 69.672420][ T4626] gfs2_lookupi+0x45c/0x5e0 [ 69.676962][ T4626] ? gfs2_lookup_simple+0xf0/0xf0 [ 69.682011][ T4626] ? gfs2_lookupi+0x3fe/0x5e0 [ 69.686711][ T4626] ? __rwlock_init+0x140/0x140 [ 69.691592][ T4626] __gfs2_lookup+0x8c/0x260 [ 69.696136][ T4626] ? d_alloc_parallel+0x1203/0x12d0 [ 69.701353][ T4626] ? gfs2_atomic_open+0x210/0x210 [ 69.706413][ T4626] ? __init_waitqueue_head+0xa5/0x150 [ 69.711809][ T4626] __lookup_slow+0x27d/0x3d0 [ 69.716517][ T4626] ? lookup_one_len+0x2c0/0x2c0 [ 69.721481][ T4626] ? gfs2_lookupi+0x5e0/0x5e0 [ 69.726189][ T4626] ? preempt_count_add+0x8d/0x190 [ 69.731237][ T4626] ? down_read+0x1aa/0x2e0 [ 69.735676][ T4626] lookup_slow+0x53/0x70 [ 69.739954][ T4626] walk_component+0x319/0x460 [ 69.744708][ T4626] link_path_walk+0x662/0xd40 [ 69.749420][ T4626] ? handle_lookup_down+0x130/0x130 [ 69.751195][ T4690] loop1: detected capacity change from 0 to 1024 [ 69.754703][ T4626] path_lookupat+0x9d/0x440 [ 69.754735][ T4626] filename_lookup+0x1e2/0x4f0 [ 69.770306][ T4626] ? hashlen_string+0x110/0x110 [ 69.775190][ T4626] ? strncpy_from_user+0x1fb/0x360 [ 69.780317][ T4626] ? getname_flags+0x1fe/0x500 [ 69.785102][ T4626] user_path_at_empty+0x40/0x190 [ 69.790069][ T4626] vfs_statx+0x102/0x4d0 [ 69.794340][ T4626] ? vfs_fstatat+0x40/0x40 [ 69.798791][ T4626] __x64_sys_statx+0x17e/0x200 [ 69.803575][ T4626] ? cp_statx+0x590/0x590 [ 69.807937][ T4626] ? lock_chain_count+0x20/0x20 [ 69.812806][ T4626] ? vtime_user_exit+0x2dc/0x400 [ 69.817772][ T4626] ? lockdep_hardirqs_on+0x94/0x140 [ 69.823000][ T4626] do_syscall_64+0x4c/0xa0 [ 69.827447][ T4626] ? clear_bhb_loop+0x30/0x80 [ 69.832155][ T4626] ? clear_bhb_loop+0x30/0x80 [ 69.836852][ T4626] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.842854][ T4626] RIP: 0033:0x7f1c87be2fc9 [ 69.847389][ T4626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.867252][ T4626] RSP: 002b:00007f1c85e4a038 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 69.875697][ T4626] RAX: ffffffffffffffda RBX: 00007f1c87e39fa0 RCX: 00007f1c87be2fc9 [ 69.883771][ T4626] RDX: 0000000000000100 RSI: 0000200000000580 RDI: ffffffffffffff9c [ 69.891765][ T4626] RBP: 00007f1c87c65f91 R08: 0000000000000000 R09: 0000000000000000 [ 69.899751][ T4626] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 69.907728][ T4626] R13: 00007f1c87e3a038 R14: 00007f1c87e39fa0 R15: 00007fffe48f9c68 [ 69.915732][ T4626] [ 69.988380][ T4248] usb 4-1: Using ep0 maxpacket: 16 [ 70.057718][ T1231] hfsplus: b-tree write err: -5, ino 4 [ 70.145465][ T4248] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.189986][ T4248] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 70.213930][ T4716] loop1: detected capacity change from 0 to 256 [ 70.242314][ T4248] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.298008][ T4248] usb 4-1: config 0 descriptor?? [ 70.544479][ T4731] capability: warning: `syz.2.126' uses 32-bit capabilities (legacy support in use) [ 70.767673][ T4248] greenasia 0003:0E8F:0012.0003: unknown main item tag 0xd [ 70.793037][ T4248] greenasia 0003:0E8F:0012.0003: item fetching failed at offset 4/5 [ 70.802134][ T4740] comedi comedi3: board detection failed [ 70.832399][ T4248] greenasia 0003:0E8F:0012.0003: parse failed [ 70.866115][ T4248] greenasia: probe of 0003:0E8F:0012.0003 failed with error -22 [ 70.976336][ T4248] usb 4-1: USB disconnect, device number 3 [ 71.309348][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.318902][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.367877][ T4756] loop2: detected capacity change from 0 to 1024 [ 71.380505][ T4736] loop1: detected capacity change from 0 to 32768 [ 71.431244][ T4756] hfsplus: bad catalog entry type [ 71.523915][ T154] hfsplus: b-tree write err: -5, ino 4 [ 71.574697][ T4747] loop0: detected capacity change from 0 to 32768 [ 71.628331][ T4747] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 71.634681][ T4764] loop4: detected capacity change from 0 to 1024 [ 71.653930][ T4747] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 71.669246][ T4747] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 71.777136][ T4764] hfsplus: unable to parse mount options [ 71.839915][ T4747] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 71.989677][ T4778] netlink: 16 bytes leftover after parsing attributes in process `syz.2.151'. [ 72.031952][ T4747] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error [ 72.031952][ T4747] inode = 12 2341 [ 72.031952][ T4747] function = gfs2_dirent_search, file = fs/gfs2/dir.c, line = 821 [ 72.065618][ T4778] IPVS: Unknown mcast interface: [ 72.076101][ T4248] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 72.090799][ T4780] loop3: detected capacity change from 0 to 128 [ 72.094842][ T4747] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 72.112534][ T4747] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 72.122132][ T4747] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 72.154328][ T4747] gfs2: fsid=syz:syz.s: File system withdrawn [ 72.161927][ T4747] CPU: 0 PID: 4747 Comm: syz.0.137 Not tainted syzkaller #0 [ 72.169499][ T4747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 72.179565][ T4747] Call Trace: [ 72.182850][ T4747] [ 72.185805][ T4747] dump_stack_lvl+0x168/0x230 [ 72.190591][ T4747] ? kobject_uevent_env+0x371/0x890 [ 72.195841][ T4747] ? show_regs_print_info+0x20/0x20 [ 72.201064][ T4747] ? load_image+0x3b0/0x3b0 [ 72.205594][ T4747] ? kobject_uevent_env+0x371/0x890 [ 72.210827][ T4747] gfs2_withdraw+0x111b/0x1460 [ 72.215624][ T4747] ? gfs2_lm+0x220/0x220 [ 72.219884][ T4747] ? __lock_acquire+0x7c60/0x7c60 [ 72.225149][ T4747] ? do_raw_spin_lock+0x11d/0x280 [ 72.230199][ T4747] ? gfs2_consist_inode_i+0xc0/0xe0 [ 72.233130][ T4780] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,barrier=0x0000000000000de2,nogrpid,,errors=continue. Quota mode: none. [ 72.235416][ T4747] gfs2_dirent_search+0x268/0x7e0 [ 72.235451][ T4747] ? gfs2_dirent_search+0x7e0/0x7e0 [ 72.235466][ T4747] ? gfs2_permission+0x3ed/0x4b0 [ 72.235489][ T4747] ? gfs2_dir_search+0x220/0x220 [ 72.235505][ T4747] ? gfs2_lookupi+0x5e0/0x5e0 [ 72.235520][ T4747] ? gfs2_glock_nq+0xcb0/0x1550 [ 72.262071][ T4780] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.262829][ T4747] gfs2_dir_search+0x49/0x220 [ 72.262869][ T4747] gfs2_lookupi+0x45c/0x5e0 [ 72.262898][ T4747] ? gfs2_lookup_simple+0xf0/0xf0 [ 72.306986][ T4747] ? gfs2_lookupi+0x3fe/0x5e0 [ 72.311697][ T4747] ? __rwlock_init+0x140/0x140 [ 72.316483][ T4747] __gfs2_lookup+0x8c/0x260 [ 72.321176][ T4747] ? d_alloc_parallel+0x1203/0x12d0 [ 72.326392][ T4747] ? gfs2_atomic_open+0x210/0x210 [ 72.331446][ T4747] ? __init_waitqueue_head+0xa5/0x150 [ 72.336848][ T4747] __lookup_slow+0x27d/0x3d0 [ 72.341494][ T4747] ? lookup_one_len+0x2c0/0x2c0 [ 72.346364][ T4747] ? gfs2_lookupi+0x5e0/0x5e0 [ 72.351064][ T4747] ? preempt_count_add+0x8d/0x190 [ 72.356097][ T4747] ? down_read+0x1aa/0x2e0 [ 72.360532][ T4747] lookup_slow+0x53/0x70 [ 72.364784][ T4747] walk_component+0x319/0x460 [ 72.369474][ T4747] link_path_walk+0x662/0xd40 [ 72.374166][ T4747] ? handle_lookup_down+0x130/0x130 [ 72.379356][ T4747] path_lookupat+0x9d/0x440 [ 72.383864][ T4747] filename_lookup+0x1e2/0x4f0 [ 72.388636][ T4747] ? hashlen_string+0x110/0x110 [ 72.393482][ T4747] ? strncpy_from_user+0x1fb/0x360 [ 72.398683][ T4747] ? getname_flags+0x1fe/0x500 [ 72.403583][ T4747] user_path_at_empty+0x40/0x190 [ 72.408505][ T4747] vfs_statx+0x102/0x4d0 [ 72.412737][ T4747] ? vfs_fstatat+0x40/0x40 [ 72.417234][ T4747] __x64_sys_statx+0x17e/0x200 [ 72.422004][ T4747] ? cp_statx+0x590/0x590 [ 72.426331][ T4747] ? lock_chain_count+0x20/0x20 [ 72.431191][ T4747] ? vtime_user_exit+0x2dc/0x400 [ 72.436121][ T4747] ? lockdep_hardirqs_on+0x94/0x140 [ 72.441322][ T4747] do_syscall_64+0x4c/0xa0 [ 72.445772][ T4747] ? clear_bhb_loop+0x30/0x80 [ 72.450454][ T4747] ? clear_bhb_loop+0x30/0x80 [ 72.455335][ T4747] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 72.461252][ T4747] RIP: 0033:0x7fcfe4eedfc9 [ 72.465661][ T4747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.485277][ T4747] RSP: 002b:00007fcfe3155038 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 72.493709][ T4747] RAX: ffffffffffffffda RBX: 00007fcfe5144fa0 RCX: 00007fcfe4eedfc9 [ 72.501677][ T4747] RDX: 0000000000000100 RSI: 0000200000000580 RDI: ffffffffffffff9c [ 72.509734][ T4747] RBP: 00007fcfe4f70f91 R08: 0000000000000000 R09: 0000000000000000 [ 72.517703][ T4747] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 72.525686][ T4747] R13: 00007fcfe5145038 R14: 00007fcfe5144fa0 R15: 00007ffd75f7f898 [ 72.533670][ T4747] [ 72.685164][ T4248] usb 5-1: Using ep0 maxpacket: 8 [ 72.845310][ T4248] usb 5-1: config 4 has an invalid interface number: 244 but max is 0 [ 72.877294][ T4248] usb 5-1: config 4 has no interface number 0 [ 72.883525][ T4248] usb 5-1: config 4 interface 244 altsetting 1 endpoint 0x1 has an invalid bInterval 41, changing to 7 [ 72.937200][ T4248] usb 5-1: config 4 interface 244 altsetting 1 endpoint 0x2 has invalid maxpacket 21201, setting to 1024 [ 72.983549][ T4248] usb 5-1: config 4 interface 244 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 1024 [ 73.020773][ T4248] usb 5-1: config 4 interface 244 has no altsetting 0 [ 73.226072][ T4248] usb 5-1: New USB device found, idVendor=05ac, idProduct=fa33, bcdDevice=cb.aa [ 73.240284][ T4822] loop2: detected capacity change from 0 to 512 [ 73.255136][ T4248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.267190][ T4248] usb 5-1: Product: syz [ 73.292190][ T4248] usb 5-1: Manufacturer: syz [ 73.297199][ T4248] usb 5-1: SerialNumber: syz [ 73.302902][ T4825] loop0: detected capacity change from 0 to 128 [ 73.325961][ T4764] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 73.359488][ T4825] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 73.404103][ T4822] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001004,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 73.429003][ T4822] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.444627][ T4830] loop1: detected capacity change from 0 to 2048 [ 73.464231][ T4822] EXT4-fs error (device loop2): ext4_do_update_inode:5210: inode #2: comm syz.2.169: corrupted inode contents [ 73.541670][ T4830] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 73.555151][ T4822] EXT4-fs error (device loop2): ext4_dirty_inode:6046: inode #2: comm syz.2.169: mark_inode_dirty error [ 73.601780][ T4822] EXT4-fs error (device loop2): ext4_do_update_inode:5210: inode #2: comm syz.2.169: corrupted inode contents [ 73.620580][ T4817] loop3: detected capacity change from 0 to 32768 [ 73.635689][ T4822] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.169: mark_inode_dirty error [ 73.655786][ T4248] ipheth 5-1:4.244: Unable to find endpoints [ 73.681493][ T4248] usb 5-1: USB disconnect, device number 4 [ 73.693863][ T4817] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 73.715400][ T4817] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 73.733400][ T4817] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 73.951266][ T4817] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 74.122016][ T4842] netlink: 24 bytes leftover after parsing attributes in process `syz.1.181'. [ 74.164962][ T4817] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error [ 74.164962][ T4817] inode = 12 2341 [ 74.164962][ T4817] function = gfs2_dirent_search, file = fs/gfs2/dir.c, line = 821 [ 74.215249][ T4817] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 74.232822][ T4817] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 74.234170][ T4850] loop0: detected capacity change from 0 to 65 [ 74.248230][ T4817] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 74.266399][ T4817] gfs2: fsid=syz:syz.s: File system withdrawn [ 74.285374][ T4817] CPU: 0 PID: 4817 Comm: syz.3.166 Not tainted syzkaller #0 [ 74.292715][ T4817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 74.302866][ T4817] Call Trace: [ 74.306155][ T4817] [ 74.309350][ T4817] dump_stack_lvl+0x168/0x230 [ 74.314146][ T4817] ? kobject_uevent_env+0x371/0x890 [ 74.319364][ T4817] ? show_regs_print_info+0x20/0x20 [ 74.324582][ T4817] ? load_image+0x3b0/0x3b0 [ 74.329099][ T4817] ? kobject_uevent_env+0x371/0x890 [ 74.334317][ T4817] gfs2_withdraw+0x111b/0x1460 [ 74.339101][ T4817] ? gfs2_lm+0x220/0x220 [ 74.343340][ T4817] ? __lock_acquire+0x7c60/0x7c60 [ 74.348358][ T4817] ? do_raw_spin_lock+0x11d/0x280 [ 74.353379][ T4817] ? gfs2_consist_inode_i+0xc0/0xe0 [ 74.358574][ T4817] gfs2_dirent_search+0x268/0x7e0 [ 74.363594][ T4817] ? gfs2_dirent_search+0x7e0/0x7e0 [ 74.368866][ T4817] ? gfs2_permission+0x3ed/0x4b0 [ 74.373798][ T4817] ? gfs2_dir_search+0x220/0x220 [ 74.378747][ T4817] ? gfs2_lookupi+0x5e0/0x5e0 [ 74.383421][ T4817] ? gfs2_glock_nq+0xcb0/0x1550 [ 74.388268][ T4817] gfs2_dir_search+0x49/0x220 [ 74.392938][ T4817] gfs2_lookupi+0x45c/0x5e0 [ 74.397449][ T4817] ? gfs2_lookup_simple+0xf0/0xf0 [ 74.402473][ T4817] ? gfs2_lookupi+0x3fe/0x5e0 [ 74.407141][ T4817] ? __rwlock_init+0x140/0x140 [ 74.411902][ T4817] __gfs2_lookup+0x8c/0x260 [ 74.416408][ T4817] ? d_alloc_parallel+0x1203/0x12d0 [ 74.421606][ T4817] ? gfs2_atomic_open+0x210/0x210 [ 74.426665][ T4817] ? __init_waitqueue_head+0xa5/0x150 [ 74.432040][ T4817] __lookup_slow+0x27d/0x3d0 [ 74.436717][ T4817] ? lookup_one_len+0x2c0/0x2c0 [ 74.441563][ T4817] ? gfs2_lookupi+0x5e0/0x5e0 [ 74.446230][ T4817] ? preempt_count_add+0x8d/0x190 [ 74.451245][ T4817] ? down_read+0x1aa/0x2e0 [ 74.455671][ T4817] lookup_slow+0x53/0x70 [ 74.459902][ T4817] walk_component+0x319/0x460 [ 74.464573][ T4817] link_path_walk+0x662/0xd40 [ 74.469254][ T4817] ? handle_lookup_down+0x130/0x130 [ 74.474448][ T4817] path_lookupat+0x9d/0x440 [ 74.478945][ T4817] filename_lookup+0x1e2/0x4f0 [ 74.483705][ T4817] ? hashlen_string+0x110/0x110 [ 74.488558][ T4817] ? strncpy_from_user+0x1fb/0x360 [ 74.493663][ T4817] ? getname_flags+0x1fe/0x500 [ 74.498423][ T4817] user_path_at_empty+0x40/0x190 [ 74.503353][ T4817] vfs_statx+0x102/0x4d0 [ 74.507598][ T4817] ? vfs_fstatat+0x40/0x40 [ 74.512012][ T4817] __x64_sys_statx+0x17e/0x200 [ 74.516767][ T4817] ? cp_statx+0x590/0x590 [ 74.521092][ T4817] ? lock_chain_count+0x20/0x20 [ 74.525932][ T4817] ? vtime_user_exit+0x2dc/0x400 [ 74.530862][ T4817] ? lockdep_hardirqs_on+0x94/0x140 [ 74.536051][ T4817] do_syscall_64+0x4c/0xa0 [ 74.540457][ T4817] ? clear_bhb_loop+0x30/0x80 [ 74.545128][ T4817] ? clear_bhb_loop+0x30/0x80 [ 74.549801][ T4817] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.556116][ T4817] RIP: 0033:0x7f03ce949fc9 [ 74.560519][ T4817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.580129][ T4817] RSP: 002b:00007f03ccbb1038 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 74.588537][ T4817] RAX: ffffffffffffffda RBX: 00007f03ceba0fa0 RCX: 00007f03ce949fc9 [ 74.596502][ T4817] RDX: 0000000000000100 RSI: 0000200000000580 RDI: ffffffffffffff9c [ 74.604498][ T4817] RBP: 00007f03ce9ccf91 R08: 0000000000000000 R09: 0000000000000000 [ 74.612479][ T4817] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 74.620442][ T4817] R13: 00007f03ceba1038 R14: 00007f03ceba0fa0 R15: 00007ffe9a1c08a8 [ 74.628419][ T4817] [ 74.653984][ T4850] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway [ 74.716443][ T4854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.186'. [ 75.074363][ T4562] kernel write not supported for file /media6 (pid: 4562 comm: kworker/1:11) [ 75.214569][ T4880] tipc: Enabling of bearer rejected, failed to enable media [ 75.266221][ T4564] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 75.427342][ T4892] loop3: detected capacity change from 0 to 256 [ 75.501808][ T4892] exFAT-fs (loop3): failed to load upcase table (idx : 0x00000c00, chksum : 0x08037f6a, utbl_chksum : 0xe619d30d) [ 75.525259][ T4564] usb 2-1: Using ep0 maxpacket: 8 [ 75.645381][ T4564] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.666627][ T4564] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.692703][ T4564] usb 2-1: config 0 interface 0 has no altsetting 0 [ 75.705694][ T4564] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 75.747162][ T4564] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.786721][ T4564] usb 2-1: config 0 descriptor?? [ 75.842208][ T4906] loop2: detected capacity change from 0 to 8192 [ 76.090875][ T4907] loop4: detected capacity change from 0 to 32768 [ 76.172738][ T4913] loop3: detected capacity change from 0 to 32768 [ 76.215332][ T4907] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.210 (4907) [ 76.241977][ T4907] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 76.255489][ T4907] BTRFS info (device loop4): using free space tree [ 76.268048][ T4907] BTRFS info (device loop4): has skinny extents [ 76.329499][ T4913] XFS (loop3): Mounting V5 Filesystem [ 76.397646][ T4564] steelseries_srws1 0003:1038:1410.0004: item fetching failed at offset 3/5 [ 76.421168][ T4564] steelseries_srws1 0003:1038:1410.0004: parse failed [ 76.433203][ T21] cfg80211: failed to load regulatory.db [ 76.444635][ T4564] steelseries_srws1: probe of 0003:1038:1410.0004 failed with error -22 [ 76.498467][ T21] XFS (loop3): Corruption warning: Metadata has LSN (2:16) ahead of current LSN (1:80). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 76.518885][ T21] XFS (loop3): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_inobt block 0x18 [ 76.531620][ T21] XFS (loop3): Unmount and run xfs_repair [ 76.543104][ T21] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 76.551912][ T21] 00000000: 49 41 42 33 00 00 00 01 ff ff ff ff ff ff ff ff IAB3............ [ 76.566955][ T21] 00000010: 00 00 00 00 00 00 00 18 00 00 00 02 00 00 00 10 ................ [ 76.579485][ T21] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 76.592428][ T21] 00000030: 00 00 00 00 f0 ea ad a5 00 00 11 40 00 00 40 37 ...........@..@7 [ 76.598758][ T4248] usb 2-1: USB disconnect, device number 3 [ 76.605030][ T21] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 76.620977][ T21] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 76.632477][ T21] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 76.644934][ T21] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 76.660260][ T4913] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x18 len 8 error 74 [ 76.672094][ T4913] XFS (loop3): Failed to read root inode 0x1140, error 117 [ 76.713842][ T4907] BTRFS info (device loop4): enabling ssd optimizations [ 76.805265][ T4701] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 77.066808][ T4701] usb 3-1: Using ep0 maxpacket: 32 [ 77.186028][ T4701] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 77.211496][ T4701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.247271][ T4701] usb 3-1: config 0 descriptor?? [ 77.308085][ T4701] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 77.327374][ T4959] loop4: detected capacity change from 0 to 64 [ 77.451709][ T26] audit: type=1800 audit(1761571575.436:3): pid=4959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.218" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 77.532807][ T4962] loop3: detected capacity change from 0 to 8192 [ 77.566705][ T4964] process 'syz.1.224' launched '/dev/fd/3' with NULL argv: empty string added [ 77.608240][ T4962] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 77.652581][ T4962] REISERFS (device loop3): using ordered data mode [ 77.681129][ T4962] reiserfs: using flush barriers [ 77.739087][ T4962] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 77.764079][ T4962] REISERFS (device loop3): checking transaction log (loop3) [ 77.797242][ T4962] REISERFS (device loop3): Using r5 hash to sort names [ 77.829148][ T4962] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 77.845580][ T4304] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 77.921488][ T4973] loop1: detected capacity change from 0 to 4096 [ 77.932212][ T4701] usb 3-1: USB disconnect, device number 3 [ 77.987903][ T4973] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 78.011540][ T4973] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 78.053429][ T4973] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 78.095719][ T4973] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 78.125353][ T4304] usb 5-1: Using ep0 maxpacket: 32 [ 78.140469][ T4973] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 78.153394][ T4973] ntfs: volume version 3.1. [ 78.180867][ T4973] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 78.193964][ T4973] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 78.214216][ T4973] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 78.235509][ T4973] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 78.258242][ T4979] loop3: detected capacity change from 0 to 512 [ 78.268391][ T4304] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 78.279943][ T4304] usb 5-1: config 0 has no interface number 0 [ 78.496638][ T4304] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 78.527774][ T4304] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.561465][ T4304] usb 5-1: Product: syz [ 78.570380][ T4304] usb 5-1: Manufacturer: syz [ 78.585375][ T4304] usb 5-1: SerialNumber: syz [ 78.604026][ T4304] usb 5-1: config 0 descriptor?? [ 78.648737][ T4304] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 78.682736][ T4304] usb 5-1: selecting invalid altsetting 1 [ 78.699175][ T4304] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 78.758285][ T4304] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 78.799679][ T4304] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 78.855900][ T4304] usb 5-1: media controller created [ 78.873861][ T5011] netlink: 'syz.1.246': attribute type 7 has an invalid length. [ 78.873907][ T5011] netlink: 'syz.1.246': attribute type 1 has an invalid length. [ 78.873920][ T5011] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.246'. [ 78.884971][ T4304] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 78.985733][ T4304] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 78.985891][ T4304] zl10353_read_register: readreg error (reg=127, ret==-71) [ 79.010763][ T4304] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 79.084236][ T4304] usb 5-1: USB disconnect, device number 5 [ 79.170969][ T5027] loop3: detected capacity change from 0 to 128 [ 79.199928][ T5029] netlink: 'syz.0.255': attribute type 3 has an invalid length. [ 79.200469][ T5027] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 79.202213][ T5027] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.443039][ T5033] loop1: detected capacity change from 0 to 4096 [ 79.471171][ T5040] loop4: detected capacity change from 0 to 64 [ 79.522990][ T5033] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 79.652313][ T5033] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 79.728152][ T5033] ntfs3: loop1: ino=5, "/" directory corrupted [ 79.750186][ T4564] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 80.040260][ T4564] usb 1-1: Using ep0 maxpacket: 32 [ 80.043955][ T5063] loop1: detected capacity change from 0 to 2048 [ 80.081871][ T5063] Dev loop1: RDB in block 1 has bad checksum [ 80.113214][ T5043] loop3: detected capacity change from 0 to 32768 [ 80.165524][ T4564] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.179662][ T4564] usb 1-1: config 0 interface 0 has no altsetting 0 [ 80.186430][ T4564] usb 1-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.00 [ 80.193603][ T5068] loop1: detected capacity change from 0 to 64 [ 80.226321][ T4564] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.264546][ T4564] usb 1-1: config 0 descriptor?? [ 80.680179][ T5082] loop1: detected capacity change from 0 to 8192 [ 80.702613][ T5082] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 80.718319][ T5082] REISERFS (device loop1): using ordered data mode [ 80.738838][ T5093] loop4: detected capacity change from 0 to 1024 [ 80.751568][ T5082] reiserfs: using flush barriers [ 80.758733][ T4564] wacom 0003:056A:00F4.0005: unknown main item tag 0x0 [ 80.768471][ T5082] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 80.771187][ T4564] wacom 0003:056A:00F4.0005: hidraw0: USB HID ve.52 Device [HID 056a:00f4] on usb-dummy_hcd.0-1/input0 [ 80.835897][ T5082] REISERFS (device loop1): checking transaction log (loop1) [ 80.877969][ T5093] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,i_version,,errors=continue. Quota mode: none. [ 80.938584][ T5093] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.955222][ T5082] REISERFS (device loop1): Using tea hash to sort names [ 80.966748][ T5082] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 80.971781][ T4564] usb 1-1: USB disconnect, device number 3 [ 81.099449][ T5096] fido_id[5096]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 81.377780][ T5088] loop3: detected capacity change from 0 to 32768 [ 81.534784][ T5117] loop2: detected capacity change from 0 to 128 [ 81.573740][ T5088] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 81.743337][ T4182] ocfs2: Unmounting device (7,3) on (node local) [ 81.944147][ T5135] loop4: detected capacity change from 0 to 8 [ 82.190844][ T4701] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 82.233854][ T5141] loop3: detected capacity change from 0 to 8192 [ 82.275652][ T5146] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 82.389115][ T5152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.311'. [ 82.425397][ T4562] Bluetooth: hci4: command 0x0405 tx timeout [ 82.447309][ T5125] orangefs_mount: mount request failed with -4 [ 82.505292][ T4701] usb 2-1: Using ep0 maxpacket: 8 [ 82.695604][ T4701] usb 2-1: unable to get BOS descriptor or descriptor too short [ 82.731924][ T5169] loop3: detected capacity change from 0 to 1024 [ 82.808593][ T5169] hfsplus: bad catalog entry type [ 82.825962][ T4701] usb 2-1: config 5 has an invalid interface number: 215 but max is 0 [ 82.839443][ T4701] usb 2-1: config 5 has no interface number 0 [ 82.857885][ T4701] usb 2-1: config 5 interface 215 has no altsetting 0 [ 82.899777][ T4309] hfsplus: b-tree write err: -5, ino 4 [ 83.068547][ T4701] usb 2-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba [ 83.072779][ T5194] netlink: 260 bytes leftover after parsing attributes in process `syz.0.330'. [ 83.095166][ T4701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.113644][ T4701] usb 2-1: Product: syz [ 83.123787][ T4701] usb 2-1: Manufacturer: syz [ 83.138737][ T4701] usb 2-1: SerialNumber: syz [ 83.204368][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 83.204388][ T26] audit: type=1400 audit(1761571581.186:4): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5201 comm="syz.0.333" [ 83.482923][ T4701] cypress_m8 2-1:5.215: DeLorme Earthmate USB converter detected [ 83.501203][ T5219] netlink: 277 bytes leftover after parsing attributes in process `syz.0.341'. [ 83.528005][ T4701] usb 2-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 83.558794][ T4701] usb 2-1: USB disconnect, device number 4 [ 83.586607][ T4701] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 83.617196][ T4701] cypress_m8 2-1:5.215: device disconnected [ 83.789304][ T3108] wlan1: Trigger new scan to find an IBSS to join [ 83.881905][ T5237] tipc: Started in network mode [ 83.898473][ T5237] tipc: Node identity 00000000000000000000ffff7f000001, cluster identity 4711 [ 83.932811][ T5237] tipc: Enabling of bearer rejected, failed to enable media [ 83.989887][ T5239] netlink: 100 bytes leftover after parsing attributes in process `syz.1.352'. [ 84.060692][ T5213] loop4: detected capacity change from 0 to 32768 [ 84.074612][ T5241] loop2: detected capacity change from 0 to 4096 [ 84.225417][ T5213] XFS (loop4): Mounting V5 Filesystem [ 84.248325][ T5259] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.360'. [ 84.257811][ T5259] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 84.325825][ T5256] loop0: detected capacity change from 0 to 4096 [ 84.414940][ T5213] XFS (loop4): Ending clean mount [ 84.425560][ T5256] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 84.552469][ T4191] XFS (loop4): Unmounting Filesystem [ 84.575239][ T4701] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 84.663279][ T144] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 84.699692][ T4181] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 84.731646][ T4181] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 84.744736][ T4181] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 84.779760][ T144] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 84.810280][ T4181] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 84.995707][ T4701] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 85.009801][ T5285] loop3: detected capacity change from 0 to 512 [ 85.114995][ T5285] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #12: comm syz.3.371: iget: bad extra_isize 64544 (inode size 256) [ 85.200756][ T5285] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.371: couldn't read orphan inode 12 (err -117) [ 85.218560][ T5277] loop2: detected capacity change from 0 to 32768 [ 85.230331][ T5285] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 85.245318][ T4701] usb 2-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 85.251904][ T5285] EXT4-fs warning (device loop3): __ext4fs_dirhash:283: invalid/unsupported hash tree version 9 [ 85.263272][ T4701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.273553][ T4701] usb 2-1: Product: syz [ 85.282806][ T4701] usb 2-1: Manufacturer: syz [ 85.288163][ T4701] usb 2-1: SerialNumber: syz [ 85.376501][ T4562] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 85.555493][ T4701] usb 2-1: selecting invalid altsetting 1 [ 85.573767][ T5305] netlink: 'syz.3.380': attribute type 2 has an invalid length. [ 85.635277][ T4562] usb 5-1: Using ep0 maxpacket: 16 [ 85.663276][ T5311] loop3: detected capacity change from 0 to 256 [ 85.742946][ T5311] FAT-fs (loop3): Directory bread(block 64) failed [ 85.750930][ T5311] FAT-fs (loop3): Directory bread(block 65) failed [ 85.758029][ T4562] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.765370][ T4701] LME2510(C): Firmware Status: 1a 03 34 00 32 00 [ 85.768185][ T4701] dvb_usb_lmedm04: probe of 2-1:2.0 failed with error -22 [ 85.768797][ T5311] FAT-fs (loop3): Directory bread(block 66) failed [ 85.793950][ T5311] FAT-fs (loop3): Directory bread(block 67) failed [ 85.795344][ T4562] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.807108][ T5311] FAT-fs (loop3): Directory bread(block 68) failed [ 85.817038][ T5311] FAT-fs (loop3): Directory bread(block 69) failed [ 85.824336][ T5311] FAT-fs (loop3): Directory bread(block 70) failed [ 85.831234][ T5311] FAT-fs (loop3): Directory bread(block 71) failed [ 85.838357][ T5311] FAT-fs (loop3): Directory bread(block 72) failed [ 85.845954][ T5311] FAT-fs (loop3): Directory bread(block 73) failed [ 85.895315][ T2238] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 85.952346][ T5313] tmpfs: Bad value for 'mpol' [ 85.965391][ T4562] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 85.974613][ T4701] usb 2-1: USB disconnect, device number 5 [ 85.990926][ T4562] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.003074][ T4562] usb 5-1: Product: syz [ 86.028449][ T4562] usb 5-1: Manufacturer: syz [ 86.039617][ T4562] usb 5-1: SerialNumber: syz [ 86.153727][ T5319] loop3: detected capacity change from 0 to 1024 [ 86.180012][ T5319] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 86.239272][ T5319] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,dioread_nolock,nombcache. Quota mode: none. [ 86.295595][ T5330] loop2: detected capacity change from 0 to 2048 [ 86.335404][ T2238] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.348942][ T2238] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.369487][ T2238] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 86.375556][ T4562] usb 5-1: cannot find UAC_HEADER [ 86.384117][ T5330] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 86.402168][ T2238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.424593][ T5330] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 86.446564][ T2238] usb 1-1: config 0 descriptor?? [ 86.514048][ T4562] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 86.560486][ T4562] usb 5-1: USB disconnect, device number 6 [ 86.796004][ T4197] udevd[4197]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.960272][ T4304] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 86.981796][ T5343] loop2: detected capacity change from 0 to 32768 [ 87.074381][ T5343] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 87.142421][ T5343] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 87.151888][ T2238] hid-led: probe of 0003:27B8:01ED.0006 failed with error -71 [ 87.188061][ T2238] usb 1-1: USB disconnect, device number 4 [ 87.245242][ T4304] usb 2-1: Using ep0 maxpacket: 8 [ 87.318435][ T4183] ocfs2: Unmounting device (7,2) on (node local) [ 87.365383][ T4304] usb 2-1: config 0 has an invalid interface number: 65 but max is 5 [ 87.383793][ T4304] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 6 [ 87.404058][ T4304] usb 2-1: config 0 has no interface number 0 [ 87.420683][ T4304] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 87.441933][ T4304] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 87.484642][ T4304] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 87.499565][ T4304] usb 2-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 87.542581][ T4304] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 87.580852][ T4304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.601993][ T5390] xt_socket: unknown flags 0xe4 [ 87.619373][ T4304] usb 2-1: config 0 descriptor?? [ 87.704933][ T5388] loop4: detected capacity change from 0 to 4096 [ 87.804764][ T5403] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 87.877274][ T5388] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 87.905512][ T4950] usb 2-1: USB disconnect, device number 6 [ 87.953893][ T5388] ntfs3: loop4: Failed to load $Extend. [ 88.141559][ C1] sd 0:0:1:0: tag#8134 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 88.151881][ C1] sd 0:0:1:0: tag#8134 CDB: Read(6) 08 00 00 00 00 00 00 00 98 18 00 00 [ 88.349275][ T5398] loop3: detected capacity change from 0 to 32768 [ 88.495250][ T21] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 88.582483][ T5431] loop1: detected capacity change from 0 to 16 [ 88.594567][ T5433] mmap: syz.4.440 (5433) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 88.678819][ T5431] erofs: (device loop1): mounted with root inode @ nid 36. [ 88.748339][ T5441] loop4: detected capacity change from 0 to 64 [ 88.839932][ T1231] wlan1: Trigger new scan to find an IBSS to join [ 88.875248][ T4304] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 89.020158][ T21] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 89.035658][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.058468][ T21] usb 1-1: Product: syz [ 89.067255][ T21] usb 1-1: Manufacturer: syz [ 89.071989][ T21] usb 1-1: SerialNumber: syz [ 89.086001][ T21] usb 1-1: config 0 descriptor?? [ 89.131397][ T21] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 89.158709][ T21] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 89.197552][ T21] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 89.207270][ T21] usb 1-1: media controller created [ 89.219833][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 89.255387][ T21] DVB: Unable to find symbol mt352_attach() [ 89.265489][ T4304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 89.281463][ T4304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.288857][ T21] DVB: Unable to find symbol nxt6000_attach() [ 89.292248][ T4304] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 89.297584][ T21] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 89.314544][ T4304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.336290][ T5415] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 89.347797][ T5415] dvb-usb: bulk message failed: -22 (7/0) [ 89.362562][ T4304] usb 4-1: config 0 descriptor?? [ 89.383237][ T21] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 89.400576][ T21] dvb-usb: schedule remote query interval to 1000 msecs. [ 89.409110][ T21] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 89.419538][ T21] dvb-usb: bulk message failed: -22 (7/0) [ 89.433686][ T21] dvb-usb: bulk message failed: -22 (7/0) [ 89.443874][ T21] usb 1-1: USB disconnect, device number 5 [ 89.505662][ T4950] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 89.524982][ T21] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 89.791548][ T154] wlan1: Creating new IBSS network, BSSID 36:c2:b2:7a:f0:4c [ 89.792805][ T5478] loop4: detected capacity change from 0 to 32768 [ 89.849180][ T4304] bigben 0003:146B:0902.0007: unexpected rdesc, please submit for review [ 89.861183][ T4304] bigben 0003:146B:0902.0007: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.3-1/input0 [ 89.874551][ T4304] bigben 0003:146B:0902.0007: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 89.884652][ T4304] bigben 0003:146B:0902.0007: no output report found [ 89.900601][ T5478] XFS (loop4): Mounting V5 Filesystem [ 89.915353][ T4950] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 89.946331][ T4950] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.994279][ T4950] usb 2-1: config 0 has no interface number 0 [ 90.011697][ T4950] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 90.027778][ T4950] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.042104][ T21] usb 4-1: USB disconnect, device number 4 [ 90.051544][ T5478] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 90.112669][ T5478] XFS (loop4): Ending clean mount [ 90.215493][ T4950] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 90.224785][ T4191] XFS (loop4): Unmounting Filesystem [ 90.229265][ T4950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.254185][ T4950] usb 2-1: Product: syz [ 90.264320][ T4950] usb 2-1: Manufacturer: syz [ 90.274455][ T4950] usb 2-1: SerialNumber: syz [ 90.286843][ T4950] usb 2-1: config 0 descriptor?? [ 90.406625][ T5495] loop0: detected capacity change from 0 to 32768 [ 90.465699][ T5495] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.463 (5495) [ 90.489515][ T5495] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 90.501737][ T5495] BTRFS info (device loop0): using free space tree [ 90.510851][ T5495] BTRFS info (device loop0): has skinny extents [ 90.635605][ T5517] netlink: 40 bytes leftover after parsing attributes in process `syz.3.465'. [ 90.749084][ T5495] BTRFS info (device loop0): enabling ssd optimizations [ 90.835540][ T5529] BTRFS warning (device loop0): qgroup rescan is already in progress [ 90.911990][ T4272] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 90.975498][ T5523] loop3: detected capacity change from 0 to 8192 [ 90.989032][ T4950] usb 2-1: USB disconnect, device number 7 [ 91.074730][ T4197] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop0 scanned by udevd (4197) [ 91.245374][ T5523] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 91.247656][ T5535] loop2: detected capacity change from 0 to 8192 [ 91.275720][ T5523] REISERFS (device loop3): using ordered data mode [ 91.311331][ T5523] reiserfs: using flush barriers [ 91.341091][ T5523] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 91.341133][ T5535] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 91.367213][ T5535] REISERFS (device loop2): using ordered data mode [ 91.373737][ T5535] reiserfs: using flush barriers [ 91.386028][ T5535] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 91.438117][ T5523] REISERFS (device loop3): checking transaction log (loop3) [ 91.446769][ T5535] REISERFS (device loop2): checking transaction log (loop2) [ 91.471976][ T5545] loop0: detected capacity change from 0 to 8192 [ 91.488483][ T5523] REISERFS (device loop3): Using r5 hash to sort names [ 91.506427][ T5535] REISERFS (device loop2): Using r5 hash to sort names [ 91.538170][ T5535] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 91.545714][ T5545] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 91.586153][ T5545] REISERFS (device loop0): using ordered data mode [ 91.592948][ T5523] reiserfs: enabling write barrier flush mode [ 91.595344][ T5545] reiserfs: using flush barriers [ 91.601039][ T5535] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 91.607666][ T5523] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 91.677409][ T5523] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 91.688586][ T5523] REISERFS (device loop3): Remounting filesystem read-only [ 91.689463][ T5545] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 91.700589][ T5523] REISERFS error (device loop3): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 91.726710][ T5550] loop1: detected capacity change from 0 to 512 [ 91.733425][ T5523] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 91.756064][ T5550] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 91.765838][ T5523] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 91.782031][ T5550] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 91.793665][ T5535] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 91.798042][ T5545] REISERFS (device loop0): checking transaction log (loop0) [ 91.814960][ T5523] REISERFS error (device loop3): zam-7001 reiserfs_find_entry: io error [ 91.831565][ T5523] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 91.831699][ T5550] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 91.849323][ T5535] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 91.870153][ T5535] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 91.903373][ T5523] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 91.925256][ T5550] System zones: 1-12 [ 91.932819][ T5523] REISERFS error (device loop3): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 91.947381][ T5523] REISERFS warning (device loop3): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 91.968935][ T5545] REISERFS (device loop0): Using rupasov hash to sort names [ 91.997373][ T5523] REISERFS warning (device loop3): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 92.042564][ T5545] REISERFS (device loop0): using 3.5.x disk format [ 92.055149][ T5550] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2229: inode #15: comm syz.1.475: corrupted in-inode xattr [ 92.080555][ T5550] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.475: couldn't read orphan inode 15 (err -117) [ 92.088179][ T5545] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 92.115493][ T5550] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x000000000000faca,nolazytime,debug,noload,mblk_io_submit,commit=0x0000000000000005,lazytime,acl,,errors=continue. Quota mode: none. [ 92.149423][ T4182] ------------[ cut here ]------------ [ 92.152263][ T5545] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 92.154910][ T4182] kernel BUG at fs/reiserfs/journal.c:1913! [ 92.186816][ T4182] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 92.192903][ T4182] CPU: 0 PID: 4182 Comm: syz-executor Not tainted syzkaller #0 [ 92.200446][ T4182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 92.210505][ T4182] RIP: 0010:do_journal_release+0x536/0x540 [ 92.216328][ T4182] Code: be ff e9 49 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c b9 fc ff ff 4c 89 ff e8 14 4a be ff e9 ac fc ff ff e8 4a e2 79 ff <0f> 0b e8 43 e2 79 ff 0f 0b 90 41 57 41 56 53 48 89 f3 49 bf 00 00 [ 92.218084][ T5545] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 92.236129][ T4182] RSP: 0018:ffffc90002f0fb80 EFLAGS: 00010293 [ 92.236153][ T4182] RAX: ffffffff81fde846 RBX: ffff888076ece000 RCX: ffff88807c329dc0 [ 92.236165][ T4182] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 92.236173][ T4182] RBP: ffffc90002f0fc78 R08: dffffc0000000000 R09: ffffc90002f0fbc0 [ 92.236183][ T4182] R10: fffff520005e1f7f R11: 1ffff920005e1f78 R12: ffffc900038b1000 [ 92.236192][ T4182] R13: 1ffff920005e1f74 R14: ffff888076ece678 R15: 0000000000000000 [ 92.236202][ T4182] FS: 0000555569435500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 92.236214][ T4182] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.236224][ T4182] CR2: 00005555694505c8 CR3: 0000000063fdb000 CR4: 00000000003506f0 [ 92.236237][ T4182] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 92.236246][ T4182] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 92.236256][ T4182] Call Trace: [ 92.236261][ T4182] [ 92.236269][ T4182] ? journal_release+0x30/0x30 [ 92.236293][ T4182] ? do_raw_spin_unlock+0x11d/0x230 [ 92.236312][ T4182] journal_release+0x1b/0x30 [ 92.236327][ T4182] reiserfs_put_super+0x21e/0x480 [ 92.295424][ T5545] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 92.302031][ T4182] ? hook_inode_free_security+0xa0/0xa0 [ 92.331012][ T5545] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 92.332577][ T4182] ? reiserfs_dirty_inode+0x240/0x240 [ 92.392369][ T4182] ? reiserfs_dirty_inode+0x240/0x240 [ 92.397755][ T4182] generic_shutdown_super+0x130/0x300 [ 92.403399][ T4182] kill_block_super+0x7c/0xe0 [ 92.408093][ T4182] deactivate_locked_super+0x93/0xf0 [ 92.413385][ T4182] cleanup_mnt+0x418/0x4d0 [ 92.417809][ T4182] ? lockdep_hardirqs_on+0x94/0x140 [ 92.423009][ T4182] task_work_run+0x125/0x1a0 [ 92.427617][ T4182] exit_to_user_mode_loop+0x10f/0x130 [ 92.432993][ T4182] exit_to_user_mode_prepare+0xee/0x180 [ 92.437825][ T5552] loop4: detected capacity change from 0 to 40427 [ 92.438539][ T4182] syscall_exit_to_user_mode+0x16/0x40 [ 92.438562][ T4182] do_syscall_64+0x58/0xa0 [ 92.454810][ T4182] ? clear_bhb_loop+0x30/0x80 [ 92.459496][ T4182] ? clear_bhb_loop+0x30/0x80 [ 92.459971][ T5552] F2FS-fs (loop4): invalid crc value [ 92.464179][ T4182] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.464203][ T4182] RIP: 0033:0x7f03ce94b2f7 [ 92.479736][ T4182] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 92.499343][ T4182] RSP: 002b:00007ffe9a1bfb38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 92.500332][ T5545] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 92.507757][ T4182] RAX: 0000000000000000 RBX: 00007f03ce9ccd7d RCX: 00007f03ce94b2f7 [ 92.507773][ T4182] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe9a1bfbf0 [ 92.507782][ T4182] RBP: 00007ffe9a1bfbf0 R08: 0000000000000000 R09: 0000000000000000 [ 92.507790][ T4182] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe9a1c0c80 [ 92.507799][ T4182] R13: 00007f03ce9ccd7d R14: 0000000000016773 R15: 00007ffe9a1c0cc0 [ 92.507816][ T4182] [ 92.507835][ T4182] Modules linked in: [ 92.522621][ T4182] ---[ end trace 131446723a50ce53 ]--- [ 92.534196][ T5545] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 92.572830][ T4182] RIP: 0010:do_journal_release+0x536/0x540 [ 92.596302][ T4182] Code: be ff e9 49 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c b9 fc ff ff 4c 89 ff e8 14 4a be ff e9 ac fc ff ff e8 4a e2 79 ff <0f> 0b e8 43 e2 79 ff 0f 0b 90 41 57 41 56 53 48 89 f3 49 bf 00 00 [ 92.599079][ T5552] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 92.667139][ T4182] RSP: 0018:ffffc90002f0fb80 EFLAGS: 00010293 [ 92.673821][ T4182] RAX: ffffffff81fde846 RBX: ffff888076ece000 RCX: ffff88807c329dc0 [ 92.682293][ T5545] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 92.683241][ T4182] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 92.695811][ T5552] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 92.702650][ T4182] RBP: ffffc90002f0fc78 R08: dffffc0000000000 R09: ffffc90002f0fbc0 [ 92.737781][ T4182] R10: fffff520005e1f7f R11: 1ffff920005e1f78 R12: ffffc900038b1000 [ 92.749287][ T4182] R13: 1ffff920005e1f74 R14: ffff888076ece678 R15: 0000000000000000 [ 92.757549][ T4182] FS: 0000555569435500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 92.757886][ T4191] attempt to access beyond end of device [ 92.757886][ T4191] loop4: rw=2049, want=45104, limit=40427 [ 92.767485][ T4182] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.784942][ T4182] CR2: 000000110c441541 CR3: 0000000063fdb000 CR4: 00000000003506f0 [ 92.814973][ T4182] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 92.830575][ T4182] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 92.839273][ T4182] Kernel panic - not syncing: Fatal exception [ 92.845595][ T4182] Kernel Offset: disabled [ 92.850045][ T4182] Rebooting in 86400 seconds..