last executing test programs: 2.918742509s ago: executing program 3 (id=747): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x1c, r1, 0x201, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) 2.730549674s ago: executing program 3 (id=749): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@bridge_delneigh={0x30, 0x1d, 0x1, 0x70bd28, 0x25dfdbcd, {0x7, 0x0, 0x0, r1, 0x80, 0x0, 0x1}, [@NDA_VLAN={0x6, 0x5, 0x1}, @NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x40040) 2.504455463s ago: executing program 3 (id=752): r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000140)=@id, 0x10) connect$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x2}}, 0x10) 2.323116949s ago: executing program 2 (id=754): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="1f", 0x1}], 0x1, 0x6) 2.318571908s ago: executing program 3 (id=755): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000680)=""/48, 0x30}], 0x1) preadv(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1, 0x9, 0xe7) 2.214684849s ago: executing program 1 (id=756): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x8, 0x0, 0x5, 0x2, &(0x7f0000000180), 0x101, 0x0, 0x0, {0x2}}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 2.153737998s ago: executing program 2 (id=757): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x10) 2.124027502s ago: executing program 3 (id=758): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c802, &(0x7f0000000000)=ANY=[], 0x3, 0x5f74, &(0x7f0000002040)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2081413, 0x0, 0x0, 0x0, &(0x7f0000000080)) mount$9p_virtio(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1800013, 0x0) 2.021750044s ago: executing program 1 (id=760): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x48, 0x40}, {0x20, 0x1, 0x0, 0x3}, {0x16, 0x7, 0x6, 0x6}]}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="db1c", 0x2}], 0x1}, 0x40004854) 1.922739445s ago: executing program 2 (id=761): personality(0x410000e) r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040), &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0, 0x18}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) 1.810786235s ago: executing program 0 (id=762): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f00000007c0)={&(0x7f0000000680), 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r1, 0x903, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x10}}, {0x6}}]}, 0x44}}, 0x0) 1.810504704s ago: executing program 1 (id=763): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x0, 0x421, 0x1, 0xcc7, 0x7fffffff, 0x5c952399, 0x5, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x9, 0x0, 0x0, 0x8, 0xfffffffa, 0x1ff, 0x80000089, 0xa, 0x4, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x8000000, 0xdffffffa]}) 1.715873297s ago: executing program 2 (id=764): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x6, 0x4004, 0x7}) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x12, r0, 0x100000000) 1.620183s ago: executing program 1 (id=765): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x10) 1.490723626s ago: executing program 2 (id=766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x39}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 1.490370536s ago: executing program 0 (id=767): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000010900020073797a310000000008000a40fffffffc140011800c000100636f756e7465720004000280400000000c0a010100000000000000000a0000020900020073797a31000000000900010073797a310000000014000380100000800c000180050002"], 0xb8}}, 0x40) 1.427633094s ago: executing program 1 (id=768): r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYRES8, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1.357250451s ago: executing program 2 (id=769): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd018009050202100202000009058202"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.302717661s ago: executing program 0 (id=770): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{&(0x7f0000000440)=@phonet={0x23, 0x2, 0x4, 0x7}, 0x80, 0x0}}, {{&(0x7f0000000080)=@phonet={0x23, 0xff, 0x4, 0x7}, 0x12, 0x0, 0x0, &(0x7f0000000340)=[@timestamping={{0x10, 0x1, 0x25, 0x8}}], 0x10}}], 0x2, 0x40001) 1.022398799s ago: executing program 0 (id=771): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x1e1e, &(0x7f0000000280)={0x0, 0x86f7, 0x10100}, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c"], 0x34c}}, 0x0) 545.958191ms ago: executing program 0 (id=772): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file2\x00', 0x1000000, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x43, 0x70b, &(0x7f0000000300)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 214.56458ms ago: executing program 3 (id=773): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x80, 0x8, 0x2, 0x40000000, 0x23, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)={0x80, 0x8, 0x40002, 0xfffffffc}) 100.307269ms ago: executing program 0 (id=774): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xd0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 0s ago: executing program 1 (id=775): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x1010006, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,noquota,nointegrity,errors=continue,iocharset=cp863,noquota,gid=', @ANYRESHEX=0x0, @ANYBLOB=',discard=0x0000000000000004,uid=', @ANYRESHEX=0x0, @ANYBLOB="0000bbaa213ca1750a73593e8b6b51ec762e74cada46036fb2cd30b777e4a35afadbbd049c95b9880c70e694709bce9011b4c0460c95d9e0cc473d9f4f1841cdaff7b2a25ff3baddc86b3ab69e93b6beea217b6ff816e2f122cb63010bce65149c059d20b376f3696de010eb1b9ca12fc97b85d273e059e8c625da1575d7ac7d39571c4447ebadc4da39b8bcdf520b21994c5b02d448852f9765d56ffcedca0ad05a7fd150d8028a6997510bf1bf9871f25c4ab5966143ab5fbf218f99d125b00c5ebf68a5ad9dd56d7a"], 0x1, 0x61b6, &(0x7f00000075c0)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxTaV7esb2dHW7fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+QP24/t//scffnLsR3//0/DMf/9yq//GpOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eq5qzfnrD9qtVqtXsC6rhzvbr2IiM36OtV7BofjAWDBbMYnbXeBFsm/0wYRcaztTgBzrWi7AxyJ+w/urBcp36L+erC2057PBdmT/2axe33HpOk0zXNMZvX42op+PDehPysz6sM8yfn3mvlf2WkfpeWOOv9ZmZT/aOfSp87J+feb+Tc8Pfn3xubfVTn/waHy78sfAAAAAADmWP77/4mWj/8uPf6mHMh+x3/XZtQHAAAAAAAAAHjSDjv+36Ax/t8u4/8BAADA3Ko+q1d+d/zhbZO+i626/XIR8UxjeaBj0sUyq233AwAAAAAAAAAAAAC6ZLBzDu/lImIYEc+srpZlWf3UNevDetz1F13Xtx+6rO0neQAA2PHx8ca1/EXEckRcTt/1N1xdXS3L5ZXVcrVcWcrvZ0dLy+VK7XNtnla3LY0O8IZ4MCqrX7ZcW69u2uflae3N31fd16jsH6Bjs9Fi4AAQETuvRvcnvSL9z+vVYirLZ6PlNzksiH32fxaU/Z+DaPtxCgAAABy9sizLIn2d98l0zL/XdqcAgJnIr//N4wJqtVqtVqufvrquHO9uvYiIzfo61XsGw/EDwILZjE/a7gItkn+nDSLihbY7Acy1ou0OcCTuP7izXqR8i/rrQRrfPZ8Lsif/zWJ7vbz+uOk0zXNMZvX42op+PDehP8/PqA/zJOffa+Z/Zad9lJZ7/PzLPX8mbOsco0n5V9t5ooX+tC3n32/m33DU+/+sbEVvbP5dlfMfHCr/vvwBAAAAAGCO5b//n5ir47+jR92cqfY7/rs2do2j6wsAAAAAAAAAPCn3H9xZz9e95uP/XxiznOs/n045/0L+nZTz7zXy/2pjuX5t/t7bD/P/94M763+89a/P5+lB81/KM0V6ZBXpEVGkeyoGafo4W/dZW8P+qLqnYdHrD9I5P+Xw3bgW12Mjzu5Ztpf+Px62n9vTXvV0uN1e9nfaz+9pH+y25/Uv7GkfprOLypXcfjrW4+dxPd7Zbq/alqZs//KU9nJKe86/b//vpJz/oPZT5b+a2ovGtHLvo95n9vv6dNz9vHXti785e/SbM9VW9He3ra7avpda6M/2/8mxUfzy5saN07ev3rp141ykyZ5bz0eaPGE5/2H62X3+f3mnPT/v1/fXex+NDp3/vNiKwcT8X67NV9v7yoz71oac/yj95PzfSe3j9/9Fzn/y/v9qC/0BAAAAAAAAAAAAAACA/ZRluX2J6FsRcTFd/9PWtZkAwGzl1/8yybfPqu7P+P7U6gWviznrz0zrT8v56o9avYh1XTnem/UiIv5WX6d6z/Drcb8MAJhnn0bEP9vuBK2Rf4fl7/urpqfa7gwwUzc/+PCnV69f37hxs+2eAAAAAAAAAACPKo//uVYb//lUWZZ3G8vtGf/17Vh73PE/B3lmd4DRCQNV9w+/TfvZ6o36vdpw4y/GpPG/h7tz+43/PZhyf8Mp7aMp7UtT2pentI+90KMm5/9ibbzzUxFxsjH8ehfGf22Oed8FOf+Xao/nKv+vNJar51/+fpHz7+3J/8yt939x5uYHH7527f2r7228t/GzC+fOnb1w8eKlS5fOvHvt+sbZnX9b7PHRyvnnsa+dB9otOf+cufy7Jef/pVTLv1ty/l9Otfy7Jeef3+/Jv1ty/vmzj/y7Jef/Sqrl3y05/6+lWv7dkvN/NdXy75ac/9dTLf9uyfm/lmr5d0vO/3Sq5d8tOf8zqT5g/itH3S9mI+efj3DZ/7sl55/PbJB/t+T8z6da/t2S87+Qavl3S87/9VTLv1ty/t9Itfy7Jed/MdXy75ac/zdTLf9uyflfSrX8uyXn/61Uy79bcv7fTrX8uyXn/0aq5d8tOf/vpFr+3ZLz/26q5d8tOf/vpVr+3ZLzfzPV8u+Wh9//b8aMGTN5pu1nJgAAAAAAAAAAAACgaRanE7e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuLkaus74f+Jl989qBxEDI38nfwMYxISSb7NpO/EKbYsJrw1sJhEJfsF3v2iz4Da9dAo1k00CJhFFRRdtw0RYQanNTkQsuaAUoF6gVUiVoL+gNokLlIqoCCkiVaAXZas55nmdnZmdndu3x+sw5n4+U/LIzZ+acOXPm7H53850BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoNWtr5//dCPLsuY/+b+2ZtkLmv+9eWprftlrrvUWAgAAAFfqV/m/n7shXXBwDTdqWeafX/7dry0tLS1l7xv98/HPLy2lK6aybHxTluXXRU/96P2N1mWCx7LJxkjL1yN9Vj/a5/qxPteP97l+os/1m/pcP9nn+hU7YIXNxe9j8jvbmf/n1mKXZjdm4/l1O7vc6rHGppGR+LucXCO/zdL4sWwhO5HNZ7NtyxfLNvLlv3Frc11vyeK6RlrWtb15hPzs0aNxGxphH+9sW9fyfUY/eV029fOfPXr0b889e3O32Xc3tN1fsZ137Ghu5yfDJcW2NrJNaZ/E7Rxp2c7tXZ6T0bbtbOS3a/5353Y+t8btHF3ezA3V+ZxPZiP5f38v309jrb/WS/tpe7jsF7dlWXZxebM7l1mxrmwk29J2ycjy8zNZHJHN+2geSi/OxtZ1nN66huO0Oed2th+nna+J+PzfGm43tso2tD5NP/nERMvz/sulyzlOo+ajXu210nkMDvq1UpZjMB4X38sf9ONdj8Gd4fE/evvqx2DXY6fLMZged8sxuKPfMTgyMZpvc3oSGvltlo/BXW3Lj+ZrauTzmdt7H4Mz506emVn82MfvXjh55Pj88flTe3btmt2zd+/+/ftnji2cmJ8t/n2Ze7v8tmQj6TWwI+y7+Bp4VceyrYfq0pcmVpx/L/d1ONnjdbi1Y9lBvw7HOh9cY2NekCuP6eK18Z7mTp+8NJKt8hrLn587r/x1mB53y+twrOV12PV7SpfX4dgaXofNZc7cubafWcZa/um2Dat/L7iyY3BryzHY+fNI5zE46J9HynIMTobj4gd3rv69YHvY3sen1/vzyOiKYzA93HDuaV6Sft6f3J+PbsflLc0rrpvIzi/On73nkSPnzp3dlYWxIV7Scqx0Hq9bWh5TtuJ4HVn38Xpw4eWP39Ll8q1hX03e3fzX5KrPVXOZe+/p/Vzl392678+2S3dnYQzYRu/Pbt/Nm/tzIsu+8O1PPPTNR7/w+lX3ZzNvfnLmyn8WT7m05fw7vsr5N+b+54v1pbt6bHR8rHj9jqa9M952Pm5/qsbyc1cjX/dzM2s7H4+Hfzb6fHxjj/Pxto5lB30+Hu98cPF83Oj3244r0/l8Tobj5MRs7/Nxc5ltu9d7TI71PB/fFmYj7P9Xh6SQclHLsbPacZvWNTY2Hh7XWFxD+3G6p2358ZDNmut6cnf4oTBt5dqO0ztuK5YfbbldtFHH6VTHsoM+TtPvvlY7Thv9fvt2eTqfz8lwXNy4p/dx2lzm6Xuv/Ny5Of5ny7lzot8xOD460dzm8XQQ5uf7bGlzPAbvyY5mp7MT2Vx+7UR+PDXydU3ft7Zz5UT4Z6PPldt6HIN3dCw76GMwfR9b7dhrjK188APQ+XxOhuPiift6H4PNZd6wb7A/u94RLknLtPzs2vn7tdV+53VLx266WsfKWNjOb+/r/bvZ5jIn9q83Z/beT3eFS67rsp86X7+rvabmso3ZT9vCdj67f/X91Nye5jKfP7DG4+lglmUXPvJA/vve8PeVC+e//7W2v7t0+5vOhY888NMXHvun9Ww/AMPv+WJsKb7Xtfxlai1//wcAAACGQsz9I2Em8j8AAABURsz98f8KT+R/AAAAqIyY+8fCTKqQ//+4/yLb3vDswvMXstTMXwri9Wk3PFgsFzuus+HrqaVlzcsf+Mr8f//jhbVt3kiWZb988I+6Lr/twbhdhamwnU+9sf3yFb5295rWffjhC2m9rf31L4b7j49nrYdBtwrubJZl37jhs/l6pt5/KZ9PP3g4nw9dfPyx5jLPHSi+jrd/5iXF8n8Vyr8Hjx1pu/0zYT/8OMzZt3bfH/F2X7306u373ru8vni7xo7r84f9xAeK+43vk/O5x4rl435ebfu/+Zknv9pc/pFXdt/+CyPdt//JcL9fCfN/XlYs3/ocNL+Ot/tU2P64vni7e778ra7b/9Sni+XPvKlY7nCYcf13hK93vunZhdb99UjjSNvjyt5cLBfXP/v9P82vj/cX779z+ycPXWrbH53Hx9P/VtzPTMfy8fK4nugfOtbfvJ/W4zOu/8k/Ody2n/ut/6mHnnlZ8347139Xx3JnPnJnvv7l+2t/x6a//tRnu64vbs/Bvz/T9ngOviu8jsP6n/hAOB7D9f/7VHF/ne+ucPhd7eefuPwXt15oezzRW35erP+p1x7P56bJzVuue8ELr7/4iua+y7LvbSrur9/6j//N6bbt/9JNxf6I18eOfuf6VxPXf/aj06dOL55fmEt79dEb8vfOeVuxPXF7bwjn1s6vD50+98H5s1OzU7NZNlXdt9C7bF8O86fFuNh76aUVZ9A7Hw7P5y1/+Y0tt//rZ+Ll//6e4vJLby2+b70qLPe5cPnW8Pytb/0rPXHrTfnru/F02MKlle8XfCW27/yv/WtaMDz+zp8L4vF+5qUfzPdD87r8+0Z8XV/h9v9wrrifr4f9uhTemXnHTcvra10+vjfCpXcXr/cr3n/hNBef178Lz/fbf1zcf9yu+Hh/GH6O+da29vNdPD6+fmGk8/7zd/G4GM4n2cXi+rhU3N+Xnrup6+bF9yHJLt6cf/1n6X5uXtfDXM3ixxZnTiycOv/IzLn5xXMzix/7+KGTp8+fOncofy/PQx/qd/vl89OW/Pw0N7/33iw/W50uxlV2rbf/zMNH5/bN3j43f+zI+WPnHj4zf/b40cXFo/Nzi7cfOXZs/qP9br8wd/+u3Qf27Ns9fXxh7v79Bw7sOTC9cOp0czOKjepj7+yHp0+dPZTfZPH+ew/suu++e2enT56em79/3+zs9Pl+t8+/N003b/2H02fnTxw5t3Byfnpx4ePz9+86sHfv7r7vBnjyzLHFqZmz50/NnF+cPztTPJapc/nFze99/W5PNS3+R/HzbKdG8UZ82Tvv2pven7XpK59Y9a6KRTreQPTZ8F4033nRmf1r+Trm/vEwkyrkfwAAACAXc/9EmIn8DwAAAJURc/+mMBP5HwAAACoj5v7JMNP/ElCT/F+5/v+2C2tav/6//n/r/tL/r1n//91l6/8X5wv9/8G40v69/n+g/6//r/+v/6//zwCUrf8fc//mLPP3fwAAAKiomPu3hJnI/wAAAFAZMfdfF2Yi/wMAAEBlxNz/gjCTmuR//X/9f/1//X/9/+7r1/8fTvr/ven/96H/P5PVq/9/cZDbfw36/5tbv9D/p4zK1v+Puf+FYSY1yf8AAABQBzH3Xx9mIv8DAABAZcTcf0OYifwPAAAAlRFz/9Ywk5rkf/3/K+r/p86V/n/79uv/t9P/D8eD/r/+/wbQ/+9N/78P/X+f/z9c/f82+v+UUdn6/zH3vyjMpCb5HwAAAOog5v4Xh5nI/wAAAFA+Y5d3s5j7XxJmsiL/X+YKAAAAgGsu5v4bs44ieE3+/q//7/P/9f/1//X/u69/7f3/0Uz/vzz0/3vT/+9D/1//X/9f/5+BKlv/P8/92WT20jCTmuR/AAAAqIOY+28KM5H/AQAAoDJi7v9/YSbyPwAAAFRGzP3bwkxqkv/1/yvT//9F61On/6//32v9+v8+/7/K9P970//vQ/9f/1//X/+fgSpb/z/m/pvDTGqS/wEAAKAOYu6/JcxE/gcAAIDKiLn//4eZyP8AAABQGTH3bw8zqUn+1/8vef8/Nkd9/r/+v/5/Kfv/k/r/paP/35v+fx/6//r/+v/6/wxU2fr/Mfe/LMykJvkfAAAA6iDm/peHmcj/AAAAUBkx978izET+BwAAgMqIuX8qzKQm+X89/f/GRf3/1Vzlz/+fWMPn/7fR/9f/77V+/X+f/19l+v+96f/3of+v/6//r//PQJWt/x9z/61hJjXJ/wAAAFAHMffvCDOR/wEAAKAyYu6/LcxE/gcAAIDKiLl/Z5hJTfK/z/8fiv5/pv+v/6//r/+v/782+v+96f/3of+v/6//r//PQJWt/x9z/yvDTGqS/wEAAKAOYu6/PcxE/gcAAIDKiLn/VWEm8j8AAABURsz9d4SZ1CT/6//r/+v/6//r/3dfv/7/cNL/703/vw/9f/1//X/9fwaqbP3/mPtfHWZSk/wPAAAAdRBz/51hJvI/AAAAVEbM/XeFmcj/AAAAUBkx90+HmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j77w4zqUn+BwAAgDqIuf+eMBP5HwAAACoj5v6ZMBP5HwAAACoj5v7ZMJOa5H/9f/1//X/9/3X1/1+xfL/6/wX9/3LR/+9N/78P/X/9/2ve/x/X/6dSytb/j7l/V5hJTfI/AAAA1EHM/bvDTOR/AAAAqIyY+/eEmcj/AAAAUBkx998bZlKT/K//r/+v/6//7/P/u69f/3846f/3Nvj+f3yI+v/6//r/Pv9f/5+Vytb/j7n/vjCTmuR/AAAAqIOY+/eGmcj/AAAAUBkx9+8LM5H/AQAAoDJi7t8fZlKT/K//r/+v/6//r//fff36/8NJ/783n//fh/6//v8Q9/+bx5b+P2VTtv5/zP0Hwkxqkv8BAACgDmLuf02YifwPAAAAlRFz/6+Fmcj/AAAAUBkx9/96mElN8r/+v/6//r/+f9n7/xP6//r/66D/35v+fx/6//r/Q9z/9/n/lFHZ+v8x998fZlKT/A8AAAB1EHP/b4SZyP8AAABQGTH3vzbMRP4HAACAyoi5/2CYSU3yv/7/BvX/44X6//r/+v8+/1///6rS/+9N/78P/X/9f/1//X8Gqmz9/5j7XxdmUpP8DwAAAHUQc/8DYSbyPwAAAFRGzP2vDzOR/wEAAKAyYu5/Q5hJTfK//r/P/7/2/f/xtm3X/1++nf5/Qf9f/3899P970//vQ/9f/1//X/+fgSpb/z/m/jeGmdQk/wMAAEAdxNz/pjAT+R8AAAAqI+b+N4eZyP8AAABQGTH3vyXMpCb5X/9f///a9/99/r/+f0H/X/9/EPT/e9P/70P/X/9f/1//n4EqW/8/5v7fDDOpSf4HAACAOoi5/8EwE/kfAAAAKiPm/reGmcj/AAAAUBkx978tzKQm+V//X/9f/1//X/+/+/r1/4eT/n9vQ9b//9X14XL9/4L+f7m3f739/7GOr69K//9Hq/X/lzZ13l7/n6uhbP3/mPvfHmZSk/wPAAAAdRBz/zvCTOR/AAAAqIyY+98ZZiL/AwAAQGXE3P9bYSY1yf/6/83tWG4v6//r/+cX6P/r/+v/Dy39/96GrP/v8/876P+Xe/t9/r/+PyuVrf8fc/+7wkxqkv8BAACgDmLufyjMRP4HAACAyoi5/91hJvI/AAAAVEbM/e8JM6lJ/tf/9/n/+v/6//r/3dev/z+c9P970//vQ/9f/79s/f//1P9nuJWt/x9z/8NhJjXJ/wAAAFAHMfe/N8xE/gcAAIDKiLn/t8NM5H8AAACojJj73xdmUpP8r/8/LP3/Kf3/dfb/J8Jl+v/6//r/9aL/35v+fx/6//r/Zev/+/x/hlzZ+v8x978/zGTt+X9yzUsCAAAA10TM/b8TZlKTv/8DAABAHcTc/7thJvI/AAAAVEbM/b8XZlKT/K//Pyz9f5//n/n8f/3/jsej/6//383G9f/jmUf/X/9f/z/S/9f/1/+nU9n6/zH3/36YSU3yPwAAANRBzP0fCDOR/wEAAGAodPt/sjvF3H8ozET+BwAAgMqIuf9wmElN8r/+v/6//n9J+/9/seNffvDddxzepf+v/6//vy4b+vn/zRe/z//X/9f/T/T/9f/1/+lUtv5/zP1HwkyWg9/bfMA/AAAADLeY+/8gzKQmf/8HAACAOoi5/2iYifwPAAAAlRFz/1yYSU3yv/6//r/+f0n7/0P8+f9xfwxT/3960xD1/+NJV/+/qw3t/793uSeu/7/e/v9E10s7+/8N/f82+v/r3v7vZFmm/6//zzVUtv5/zP3zYSY1yf8AAABQByH3jxwr5vIV8j8AAABURsz9x8NM5H8AAACojJj7PxhmUpP8r/+v/6//r//v8/+7r7+0/X+f/9+T/n9v5en/d+fz//X/h3n79f/1/1mpbP3/mPsXwkxqkv8BAACgDmLu/1CYifwPAAAAlRFz/4fDTOR/AAAAqIyY+0+EmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j7T4aZ1CT/AwAAQB3E3H8qzOT/2LuPJsvq847jt3FTzBQb77zwwt77JbAwa/sFeMHGC7vK5YWxjXNicI4454BtJRRQAAmhhHICJSSUhSSUc0AZSTUqmOd5Znr69LndM7e7z/0/n89CDzSMzkU1BfrRfDn2PwAAAAwjd//NcYv9DwAAAMPI3f/LcUuT/a//1/8P2///pP7/oOfr//X/I9P/z9P/r6H/1//r//X/bNTS+v/c/b8StzTZ/wAAANBB7v5fjVvsfwAAABhG7v5b4hb7HwAAAIaRu//X4pYm+/+y/n9n1bP/z4xX/z9S/+/9/wc+X/+v/x/Zyfb/tz3xZz79v/5f/x/0//p//T+XW1r/n7v/1+OWJvsfAAAAOsjd/xtxi/0PAAAAw8jd/5txi/0PAAAAw8jd/1txS5P97/3/3v+v/9f/6/+nn6//307e/z+vU/9/y8PX/9Jj9/7ofUd5vv5f/6//1/+zWUvr/3P3/3bc0mT/AwAAQAe5+38nbrH/AQAAYBi5+383brH/AQAAYAudnfxq7v7fi1ua7H/9v/5f/x/9/xn9v/5f/z8C/f+8Tv3/lTxf/6//1//r/9mspfX/uft/P25psv8BAACgg9z9fxC32P8AAACwXFP/IPaM3P23xi32PwAAAAwjd/+5uKXJ/tf/H3///339/3b0/97/r//X/w9B/z9P/7+G/l//r//X/7NRS+v/c/ffFrc02f8AAADQQe7+P4xb7H8AAAAYRu7+P4pb7H8AAAAYRu7+P45bmux//b/3/+v/9f/6/+nn6/+3k/5/nv5/Df3/1fbz1+r/9f/6fy51xP7/8Zk/bW+k/8/d/ydxS5P9DwAAAB3k7v/TuMX+BwAAgGHk7v+zuMX+BwAAgGHk7v/zuKXJ/tf/6//1//r/K+7/9//Ue5L+f5r+/2To/+ctpv/f2Z38sv5/6/t/7//X/+v/2WNp7//P3f8XcUuT/Q8AAAAd5O7/y7hlZv8f+W/mAwAAAKcqd/9fxS2+/w8AAABbL6uz3P1/Hbc02f/6f/2//l//7/3/08+f6//vu+Tz6f+XRf8/bzH9/wH0//r/bf78+n/9P/strf/P3f83cUuT/Q8AAAAd5O6/PW6x/wEAAGAYufv/Nm6x/wEAAGAYufv/Lm5psv+n+/+Lv13/fzj6/72fX/8//fNjU/1//jfq/2f7/xu9/78n/f88/f8a+n/9v/7/oP7/7Lofr/9nytL6/9z9fx+3NNn/AAAA0EHu/n+IW+x/AAAAGEbu/n+MW+x/AAAAGEbu/n+KW5rsf+//1//r/7ev//f+/wtO8/3/qxPv/3f1/4ek/5+n/19D/6//1//Pv/9/5t8CoP9nytL6/9z9/xy3NNn/AAAA0EHu/n+JW+x/AAAA2A6X/rMDl/8DpSF3/7/GLfY/AAAADCN3/7/FLePs/9l3der/9f/6f/2//n/6+cvq/73//7D0//P0/2vo/4+jn98drP+/46Afv4T+/9bj7v9n6P+Zsqf/v//i10+r/8/d/+9xyzj7HwAAANrL3f8fcYv9DwAAAMPI3f+fcYv9DwAAAMPI3f9fcUuT/X/s/f/Mv31A/6//1//r//X/+v9N0//P0/+vof/3/n/v/9f/s1F7+v9LnFb/n7v/v+OWJvsfAAAAOsjd/z9xi/0PAAAAw8jdf0fcYv8DAADAMHL3/2/c0mT/e/+//l//r//X/08/X/+/na6qv79G/1/0//p//b/+X//PBiyt/8/d/39xS5P9DwAAAB3k7v//uMX+BwAAgGHk7n9K3GL/AwAAwDBy9z81bmmy//X/x9v/59f1//r/lf5f/6//PxFt3/+/M/VXov0O6P8f/IVzP733K/p//b/+X/+v/+eQfnjmty2i/z9/8f9d5u5/WtzSZP8DAABAB7n7nx632P8AAAAwjNz9z4hb7H8AAAAYRu7+O+OWI+7/ueZhyfT/3v+v/9f/6/+nn6//305t+/9D8v7/NfT/+n/9v/6fjVpE/3/Jr+fuf2bc4vv/AAAAMIzc/c+KW+x/AAAAGEbu/mfHLfY/AAAADCN3/3Pilib7X/+v/9f/6//1/9PP1/9vJ/3/PP3/GtvU/995Ff3/7vSXT7ufv1qn/fn1//p/9lta/5+7/664pcn+BwAAgA5y9z83brH/AQAAYBi5+58Xt9j/AAAAMIzc/c+PW5rsf/2//l//r//X/08/X/+/nfT/8/T/q9Xq7pkPMNX/n79umf2/9/8v7vPr//X/7Le0/j93/wvilib7HwAAADrI3X933GL/AwAAwDBy998Tt9j/AAAAMIzc/S+MW5rsf/2//l//r//X/08/X/+/nfT/8/T/a2zT+//1/4v7/Pp//T/7La3/z93/orilyf4HAACADnL33xu32P8AAAAwjNz9L45b7H8AAAAYRu7+++KWJvtf/6//1//r//X/08/X/2+n4+v/V/p//b/+fw39v/5f/8/lltb/5+5/SdzSZP8DAABAB7n7Xxq32P8AAAAwjNz9L4tb7H8AAAAYRu7+l8ctTfa//l//r//X/+v/p5+v/99O3v8/T/+/hv5f/6//1/+zUdP9/62n1v/n7n9F3NJk/wMAAEAHufvvj1vsfwAAABhG7v5Xxi32PwAAAAwjd/+r4pYm+1//r//f2/+vVvp//b/+/4IT6P/PrPT/G6f/n6f/X0P/P2b/f81qoP7/7IE/Xv/PEi3t/f+5+18dtzTZ/wAAANBB7v7XxC32PwAAAAwjd/9r4xb7HwAAAIaRu/91cUuT/a//1/97/7/+X/8//Xzv/99O+v95+v819P9j9v/e/6//59Qsrf/P3f/6uKXJ/gcAAIAOcve/IW6x/wEAAGAYufvfGLfY/wAAADCM3P1vilua7H/9v/5f/6//1/9PP1//v530//P0/2vo//X/+n/9Pxu1tP4/d/+b45Ym+x8AAAA6yN3/QNxi/wMAAMAwcvc/GLfY/wAAADCM3P1viVua7H/9v/5f/7+d/f8Z/b/+X/8/aSn9/w03/NRD+n/9v/5f/6//1/93t7T+P3f/W+OWJvsfAAAAOsjd/7a4xf4HAACAYeTuf3vcYv8DAADAMHL3vyNuabL/9/f/164uFKoXTPX/0ajp/y+h/9/7+fX/0z8/vP9f/6//P35L6f+9///KPr/+X/+/zZ//SP3/j+//8fp/RrS0/j93/0NxS5P9DwAAAB3k7n9n3GL/AwAAwDBy978rbrH/AQAAYBi5+x+OW5rsf+//1//r//X/+v/p5+v/t5P+f57+fw39v/7f+/9v/rkf0v+zOUvr/3P3vztuabL/AQAAoIPc/e+JW+x/AAAAGEbu/vfGLfY/AAAADCN3//vilib7X/+v/9f/6//1/9PP1/9vJ/3/PP1/ufwP7YI+/f+ZqS+edj9/tU778w/T/3v/Pxu0tP4/d//745Ym+x8AAAA6yN3/gbjF/gcAAIBh5O7/YNxi/wMAAMAwcvd/KG5psv/1//r/8fv/n9X/X/Z8/b/+f2T6//wr+jT9/xp9+v9Jp93Pb/vn1//r/9lvaf1/7v5H4pYm+x8AAAA6yN3/4bjF/gcAAIBh5O7/SNxi/wMAAMAwcvd/NG5psv/1/736/51Vx/7f+//1//r/TvT/8/T/a+j/9f/6f/0/G7W0/j93/6M7uy33PwAAAGyrn/mJX3zksL/vo0/+55nVx+KWG1fnD/ltbAAAAGDhntj9O7ur1cef/DXf/wcAAIAR5e7/RNzSZP/r/3v1/z3f/6//1//r/zvR/8/T/6+h/9f/6//1/2zU0vr/3P2fjFsuGX67R/6jBAAAAJYkd/+n4pYm3/8HAACADnL3fzpu2bf//esAAQAAYFvl7v9M3NLk+//6/4X3/6tj6v/j99P/X6D/1/9PPV//v530//Ousv8/v6P/1//P0P/r//X/XG5p/X/u/s/GLU32PwAAAAxqz99RyN3/ubjF/gcAAIBh5O7/fNxi/wMAAMAwcvd/IW5psv/1/yfe/2eqfozv/z9bv+T9/837/9vPTD5f/6//H5n+f573/6+h/x+l/79O/6//ZxmW1v/n7v9i3NJk/wMAAEAHufu/FLfY/wAAADCM3P1fjlvsfwAAABhG7v6vxC1N9r/+f+Hv/7+i/v8Q7//X//fo/w94/jj9/49cf+6Bm37+nrv0/1x0kv1//lzQ/+v/9f8XLKj/9/5//T8Lsfn+f3fPF4/a/+fu/2rc0mT/AwAAQAe5+x+LW+x/AAAAGEbu/q/FLfY/AAAADCN3/9fjlib7X/+v/19K/5//W59C/3/uivv/s6vV6lT6/2yKu/f/3v+v/9/P+//n6f/X0P/r//X/+n82avP9/94vHrX/z93/jbilyf4HAACADnL3fzNuyf2/c+S/dQ8AAAAsTO7+b8Utvv8PAAAAw8jd/+24pcn+1//r/5fS/yfv/7/448Z6//9NFaf27P9/rH5J/3+89P/z9P9r6P/1//p//T8btbT+P3f/d+KWJvsfAAAAOsjd/3jcYv8DAADAMHL3fzdusf8BAABgGLn7vxe3NNn/+v9R+/8s4vX/+v+l9P/e/+/9/ydD/z9P/7+G/l//r//X/7NRS+v/c/f/IAAA//9GqnSo") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents(r0, &(0x7f0000000080)=""/43, 0x2b) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.155' (ED25519) to the list of known hosts. [ 77.218880][ T5752] cgroup: Unknown subsys name 'net' [ 77.363234][ T5752] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.915150][ T5752] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.662791][ T5766] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.681292][ T5766] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.705444][ T5766] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.734800][ T5766] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.757028][ T5772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.789392][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.806876][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.822145][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.880264][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.894232][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.898412][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.909278][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.932799][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.933670][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.944284][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.957007][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.962537][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.976789][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.004777][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.019816][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.032194][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.076688][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.090237][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.102305][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.761767][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 81.778465][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 81.928687][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 81.971073][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 82.141914][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.158451][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.174067][ T5765] bridge_slave_0: entered allmulticast mode [ 82.191384][ T5765] bridge_slave_0: entered promiscuous mode [ 82.207280][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.222417][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.235833][ T5765] bridge_slave_1: entered allmulticast mode [ 82.248722][ T5765] bridge_slave_1: entered promiscuous mode [ 82.285254][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.307461][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.321133][ T5768] bridge_slave_0: entered allmulticast mode [ 82.330203][ T5768] bridge_slave_0: entered promiscuous mode [ 82.388431][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.404824][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.420549][ T5768] bridge_slave_1: entered allmulticast mode [ 82.434073][ T5768] bridge_slave_1: entered promiscuous mode [ 82.518132][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.527188][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.539510][ T5769] bridge_slave_0: entered allmulticast mode [ 82.552985][ T5769] bridge_slave_0: entered promiscuous mode [ 82.582494][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.609871][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.622977][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.633459][ T5769] bridge_slave_1: entered allmulticast mode [ 82.641989][ T5769] bridge_slave_1: entered promiscuous mode [ 82.655532][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.672721][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.688475][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.713678][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.723627][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.736405][ T5770] bridge_slave_0: entered allmulticast mode [ 82.746245][ T5770] bridge_slave_0: entered promiscuous mode [ 82.758851][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.770599][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.780141][ T5770] bridge_slave_1: entered allmulticast mode [ 82.791440][ T5770] bridge_slave_1: entered promiscuous mode [ 82.883052][ T5768] team0: Port device team_slave_0 added [ 82.898587][ T5765] team0: Port device team_slave_0 added [ 82.930098][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.950955][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.972864][ T5768] team0: Port device team_slave_1 added [ 82.985289][ T5765] team0: Port device team_slave_1 added [ 83.011568][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.025801][ T5775] Bluetooth: hci1: command tx timeout [ 83.028580][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.032661][ T5779] Bluetooth: hci0: command tx timeout [ 83.106048][ T5779] Bluetooth: hci3: command tx timeout [ 83.109602][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.123473][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.158400][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.179334][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.190159][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.190233][ T5779] Bluetooth: hci2: command tx timeout [ 83.241320][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.259549][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.270750][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.308482][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.329330][ T5769] team0: Port device team_slave_0 added [ 83.352841][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.362835][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.401673][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.428407][ T5769] team0: Port device team_slave_1 added [ 83.457942][ T5770] team0: Port device team_slave_0 added [ 83.467900][ T5770] team0: Port device team_slave_1 added [ 83.502539][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.516239][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.555972][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.587633][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.600631][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.647934][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.728533][ T5765] hsr_slave_0: entered promiscuous mode [ 83.737716][ T5765] hsr_slave_1: entered promiscuous mode [ 83.768326][ T5768] hsr_slave_0: entered promiscuous mode [ 83.776992][ T5768] hsr_slave_1: entered promiscuous mode [ 83.786028][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.795378][ T5768] Cannot create hsr debugfs directory [ 83.833221][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.842259][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.875170][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.913309][ T5769] hsr_slave_0: entered promiscuous mode [ 83.921559][ T5769] hsr_slave_1: entered promiscuous mode [ 83.928943][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.941880][ T5769] Cannot create hsr debugfs directory [ 83.970599][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.980401][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.018563][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.207033][ T5770] hsr_slave_0: entered promiscuous mode [ 84.236353][ T5770] hsr_slave_1: entered promiscuous mode [ 84.254475][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.264201][ T5770] Cannot create hsr debugfs directory [ 84.657488][ T5765] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.692096][ T5765] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.713209][ T5765] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.759572][ T5765] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.827331][ T5768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.871536][ T5768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.893788][ T5768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.938993][ T5768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.022313][ T5769] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.044159][ T5769] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.079215][ T5769] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.091958][ T5769] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.105559][ T5779] Bluetooth: hci0: command tx timeout [ 85.106432][ T5775] Bluetooth: hci1: command tx timeout [ 85.182147][ T5770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.185210][ T5775] Bluetooth: hci3: command tx timeout [ 85.206938][ T5770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.272441][ T5770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.282373][ T5775] Bluetooth: hci2: command tx timeout [ 85.311308][ T5770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.397392][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.461484][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.482734][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.503801][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.515361][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.568706][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.578355][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.593359][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.661775][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.673227][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.723080][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.734960][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.757236][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.843077][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.862234][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.871872][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.936379][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.947874][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.041545][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.166225][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.206619][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.216508][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.279335][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.288716][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.500385][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.613096][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.656210][ T5765] veth0_vlan: entered promiscuous mode [ 86.684411][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.698475][ T5765] veth1_vlan: entered promiscuous mode [ 86.799648][ T5768] veth0_vlan: entered promiscuous mode [ 86.844265][ T5765] veth0_macvtap: entered promiscuous mode [ 86.859957][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.885065][ T5768] veth1_vlan: entered promiscuous mode [ 86.898022][ T5769] veth0_vlan: entered promiscuous mode [ 86.910609][ T5765] veth1_macvtap: entered promiscuous mode [ 86.929648][ T5769] veth1_vlan: entered promiscuous mode [ 86.981909][ T5768] veth0_macvtap: entered promiscuous mode [ 86.993527][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.033684][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.076626][ T5765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.090795][ T5765] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.103356][ T5765] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.121983][ T5765] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.144218][ T5768] veth1_macvtap: entered promiscuous mode [ 87.160756][ T5770] veth0_vlan: entered promiscuous mode [ 87.186358][ T5775] Bluetooth: hci0: command tx timeout [ 87.188800][ T5779] Bluetooth: hci1: command tx timeout [ 87.217231][ T5769] veth0_macvtap: entered promiscuous mode [ 87.244026][ T5769] veth1_macvtap: entered promiscuous mode [ 87.260734][ T5770] veth1_vlan: entered promiscuous mode [ 87.268812][ T5779] Bluetooth: hci3: command tx timeout [ 87.306240][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.323218][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.337573][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.347769][ T5779] Bluetooth: hci2: command tx timeout [ 87.358286][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.373774][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.387535][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.403099][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.417490][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.446782][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.467414][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.481775][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.506598][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.528974][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.542064][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.555844][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.570494][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.602832][ T5769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.612719][ T5769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.623855][ T5769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.633545][ T5769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.655833][ T5768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.665494][ T5768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.676624][ T5768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.687827][ T5768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.721623][ T4273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.733430][ T4273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.860008][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.872265][ T5770] veth0_macvtap: entered promiscuous mode [ 87.880315][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.917946][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.933165][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.948171][ T5770] veth1_macvtap: entered promiscuous mode [ 88.015968][ T4273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.039564][ T4273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.093502][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.103765][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.124932][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.141112][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.158381][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.184993][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.201854][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.218384][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.231991][ T5829] trusted_key: encrypted_key: key user:syz not found [ 88.237353][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.319554][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.319831][ T4273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.333471][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.360764][ T4273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.365908][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.389392][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.404465][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.424629][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.445898][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.485826][ T5770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.503184][ T5770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.540031][ T5770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.558625][ T5770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.721894][ T5837] syz.1.2[5837]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 88.793824][ T5840] loop0: detected capacity change from 0 to 16 [ 88.807562][ T5837] loop1: detected capacity change from 0 to 1024 [ 88.866890][ T4273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.887104][ T5840] erofs: (device loop0): mounted with root inode @ nid 36. [ 88.905468][ T4273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.058825][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.096274][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.234499][ T5837] syz.1.2: attempt to access beyond end of device [ 89.234499][ T5837] loop1: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 89.272476][ T5779] Bluetooth: hci0: command tx timeout [ 89.279213][ T5775] Bluetooth: hci1: command tx timeout [ 89.348367][ T5775] Bluetooth: hci3: command tx timeout [ 89.425228][ T5775] Bluetooth: hci2: command tx timeout [ 90.300231][ T5876] loop0: detected capacity change from 0 to 4096 [ 90.356125][ T5876] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 90.509625][ T5876] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 90.639160][ T5894] loop1: detected capacity change from 0 to 8 [ 90.685374][ T5876] ntfs3: loop0: failed to convert "c46c" to iso8859-14 [ 90.768610][ T5894] SQUASHFS error: Failed to read block 0x1ec: -5 [ 90.818157][ T5894] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 90.928825][ T5899] loop3: detected capacity change from 0 to 1024 [ 91.172036][ T34] hfsplus: b-tree write err: -5, ino 25 [ 91.213299][ T34] hfsplus: b-tree write err: -5, ino 4 [ 91.255732][ T34] hfsplus: b-tree write err: -5, ino 2 [ 91.423605][ T5913] [U]  [ 91.605176][ T5919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.39'. [ 91.668322][ T5924] capability: warning: `syz.2.42' uses deprecated v2 capabilities in a way that may be insecure [ 91.800006][ T5927] loop0: detected capacity change from 0 to 2048 [ 91.852280][ T5927] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.920859][ T5932] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.210163][ T5941] genirq: Flags mismatch irq 4. 00000000 (pcl818) vs. 00000000 (ttyS0) [ 92.275749][ T5943] netlink: 'syz.2.51': attribute type 1 has an invalid length. [ 92.314103][ T5945] loop1: detected capacity change from 0 to 64 [ 92.379266][ T5947] loop3: detected capacity change from 0 to 64 [ 92.828420][ T5960] loop1: detected capacity change from 0 to 512 [ 92.911368][ T5960] FAT-fs (loop1): error, clusters badly computed (1 != 0) [ 92.923208][ T5960] FAT-fs (loop1): Filesystem has been set read-only [ 92.947429][ T5960] FAT-fs (loop1): error, clusters badly computed (2 != 1) [ 93.045630][ T5771] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.273498][ T5771] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 93.296782][ T5965] loop0: detected capacity change from 0 to 16 [ 93.312043][ T5771] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.342181][ T5771] usb 3-1: Product: syz [ 93.354393][ T5771] usb 3-1: Manufacturer: syz [ 93.364261][ T5771] usb 3-1: SerialNumber: syz [ 93.408080][ T5965] erofs: (device loop0): mounted with root inode @ nid 36. [ 94.442282][ T5993] Zero length message leads to an empty skb [ 94.594042][ T5771] rtl8150 3-1:1.0: couldn't reset the device [ 94.612667][ T5771] rtl8150: probe of 3-1:1.0 failed with error -5 [ 95.268934][ T6000] loop0: detected capacity change from 0 to 32768 [ 95.389601][ T6000] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 95.732733][ T6000] XFS (loop0): Ending clean mount [ 95.817392][ T6000] XFS (loop0): Quotacheck needed: Please wait. [ 95.851866][ T5771] usb 3-1: USB disconnect, device number 2 [ 96.015173][ T6028] netlink: 134736 bytes leftover after parsing attributes in process `syz.3.86'. [ 96.033300][ T6000] XFS (loop0): Quotacheck: Done. [ 96.195047][ T5765] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 96.722362][ T6036] loop2: detected capacity change from 0 to 4096 [ 97.084218][ T6026] loop1: detected capacity change from 0 to 32768 [ 97.138686][ T6026] XFS (loop1): Cannot mount filesystem with identical rtdev and ddev/logdev. [ 97.836145][ T9] cfg80211: failed to load regulatory.db [ 98.277774][ T6059] Driver unsupported XDP return value 0 on prog (id 8) dev N/A, expect packet loss! [ 98.500584][ T6068] macsec1: entered allmulticast mode [ 98.520435][ T6068] veth1_macvtap: entered allmulticast mode [ 98.896801][ T6060] loop0: detected capacity change from 0 to 32768 [ 98.929714][ T6068] veth1_macvtap: left allmulticast mode [ 98.971300][ T6060] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 99.096063][ T6060] XFS (loop0): Ending clean mount [ 99.137977][ T6060] XFS (loop0): Quotacheck needed: Please wait. [ 99.219674][ T6060] XFS (loop0): Quotacheck: Done. [ 99.301518][ T6068] syz.1.106 (6068) used greatest stack depth: 20904 bytes left [ 99.352039][ T6082] loop2: detected capacity change from 0 to 512 [ 99.392815][ T6082] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 99.419585][ T6082] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 99.538042][ T6082] EXT4-fs (loop2): 1 truncate cleaned up [ 99.567228][ T6082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.597191][ T5765] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 99.776288][ T6082] EXT4-fs error (device loop2): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.2.108: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 99.896393][ T6082] EXT4-fs (loop2): Remounting filesystem read-only [ 99.903641][ T6082] EXT4-fs warning (device loop2): ext4_rename_delete:3778: inode #2: comm syz.2.108: Deleting old file: nlink 5, error=-117 [ 100.047541][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.424156][ T6086] loop3: detected capacity change from 0 to 32768 [ 100.436027][ T6086] ======================================================= [ 100.436027][ T6086] WARNING: The mand mount option has been deprecated and [ 100.436027][ T6086] and is ignored by this kernel. Remove the mand [ 100.436027][ T6086] option from the mount to silence this warning. [ 100.436027][ T6086] ======================================================= [ 100.550294][ T6086] XFS (loop3): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent. [ 100.773767][ T5770] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 100.803696][ T6115] loop0: detected capacity change from 0 to 2048 [ 100.962881][ T6117] netlink: 'syz.1.122': attribute type 3 has an invalid length. [ 101.004726][ T6117] netlink: 666 bytes leftover after parsing attributes in process `syz.1.122'. [ 101.057586][ T6118] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.253026][ T6120] loop1: detected capacity change from 0 to 512 [ 101.267413][ T6115] NILFS error (device loop0): nilfs_dotdot: directory #12 missing '..' [ 101.285501][ T6120] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 101.304200][ T6115] Remounting filesystem read-only [ 101.351777][ T6120] EXT4-fs (loop1): 1 orphan inode deleted [ 101.389970][ T6120] EXT4-fs (loop1): 1 truncate cleaned up [ 101.408301][ T5765] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 101.421136][ T5765] NILFS (loop0): discard dirty page: offset=0, ino=18 [ 101.445118][ T6120] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.502796][ T5765] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 101.514010][ T5765] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 101.532743][ T6120] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 101.549758][ T5765] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 101.559717][ T5765] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 101.570885][ T5765] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 101.584021][ T6120] EXT4-fs (loop1): Remounting filesystem read-only [ 101.609551][ T5765] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 101.645751][ T5765] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 101.658372][ T5765] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 101.666200][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.672106][ T5765] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 101.691058][ T5765] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 101.699417][ T5765] NILFS (loop0): discard dirty block: blocknr=35, size=1024 [ 101.707825][ T5765] NILFS (loop0): discard dirty block: blocknr=36, size=1024 [ 101.748879][ T5765] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 101.776795][ T5765] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 101.799472][ T5765] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 101.821825][ T5765] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 101.830139][ T5765] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 101.841095][ T5765] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 101.850961][ T5765] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 101.866843][ T5765] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 101.882171][ T5765] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 101.906876][ T6134] binder: 6133:6134 ioctl c0306201 200000000680 returned -14 [ 101.916307][ T5765] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 101.930246][ T5765] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 101.950269][ T5765] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 101.975201][ T5765] NILFS (loop0): discard dirty page: offset=65536, ino=3 [ 101.996104][ T5765] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 102.017107][ T5765] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 102.048941][ T5765] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 102.057897][ T5765] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 102.117467][ T6139] loop2: detected capacity change from 0 to 2048 [ 102.147018][ T6139] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 102.215304][ T6143] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.237163][ T5805] udevd[5805]: incorrect nilfs2 checksum on /dev/loop2 [ 102.341534][ T6145] loop1: detected capacity change from 0 to 1024 [ 102.365409][ T6147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.134'. [ 102.432549][ T6147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.453458][ T6145] hfsplus: bad catalog entry type [ 102.485428][ T6147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.531072][ T6147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.566300][ T6147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.623888][ T6147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.640812][ T6147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.653525][ T6147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.665768][ T6147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.632710][ T6164] loop1: detected capacity change from 0 to 40427 [ 103.672502][ T6164] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 103.695969][ T6164] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 103.735334][ T6164] F2FS-fs (loop1): Image doesn't support compression [ 103.748212][ T6164] F2FS-fs (loop1): invalid crc value [ 103.762750][ T6164] F2FS-fs (loop1): Found nat_bits in checkpoint [ 103.885963][ T6164] F2FS-fs (loop1): Start checkpoint disabled! [ 103.962512][ T6164] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 103.984361][ T6166] loop2: detected capacity change from 0 to 40427 [ 104.043310][ T6166] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 104.070189][ T6166] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 104.120271][ T6166] F2FS-fs (loop2): invalid crc value [ 104.154773][ T6166] F2FS-fs (loop2): Found nat_bits in checkpoint [ 104.406768][ T6166] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 104.449693][ T6166] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 104.675125][ T6195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.156'. [ 104.707688][ T6195] ip6gretap0: entered promiscuous mode [ 104.786354][ T6197] loop1: detected capacity change from 0 to 16 [ 104.794229][ T6195] ip6gretap0: left promiscuous mode [ 104.846890][ T6197] erofs: (device loop1): mounted with root inode @ nid 36. [ 104.946542][ T6197] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 104.987816][ T6197] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851] [ 105.037048][ T6201] loop0: detected capacity change from 0 to 1024 [ 105.055068][ T6197] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 105.090649][ T12] hfsplus: b-tree write err: -5, ino 25 [ 105.120704][ T12] hfsplus: b-tree write err: -5, ino 4 [ 105.149497][ T12] hfsplus: b-tree write err: -5, ino 2 [ 105.207317][ T6204] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 105.327111][ T6209] bridge0: entered promiscuous mode [ 105.396723][ T6212] loop0: detected capacity change from 0 to 512 [ 105.452370][ T6212] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 49, start 000000c8) [ 105.801193][ T6225] netlink: 'syz.2.168': attribute type 1 has an invalid length. [ 105.825762][ T6225] NCSI netlink: No device for ifindex 0 [ 106.502509][ T6249] loop0: detected capacity change from 0 to 256 [ 106.630177][ T6249] FAT-fs (loop0): Directory bread(block 64) failed [ 106.655563][ T6249] FAT-fs (loop0): Directory bread(block 65) failed [ 106.674201][ T6249] FAT-fs (loop0): Directory bread(block 66) failed [ 106.684211][ T6249] FAT-fs (loop0): Directory bread(block 67) failed [ 106.719275][ T6249] FAT-fs (loop0): Directory bread(block 68) failed [ 106.767801][ T6249] FAT-fs (loop0): Directory bread(block 69) failed [ 106.804784][ T6249] FAT-fs (loop0): Directory bread(block 70) failed [ 106.845491][ T6249] FAT-fs (loop0): Directory bread(block 71) failed [ 106.865286][ T6249] FAT-fs (loop0): Directory bread(block 72) failed [ 106.874148][ T6249] FAT-fs (loop0): Directory bread(block 73) failed [ 107.137844][ T6261] loop1: detected capacity change from 0 to 1764 [ 107.516973][ T6273] loop0: detected capacity change from 0 to 64 [ 107.853305][ T6281] loop2: detected capacity change from 0 to 256 [ 107.965878][ T6281] FAT-fs (loop2): Directory bread(block 64) failed [ 107.985312][ T6281] FAT-fs (loop2): Directory bread(block 65) failed [ 107.988726][ T6287] loop0: detected capacity change from 0 to 16 [ 107.992036][ T6281] FAT-fs (loop2): Directory bread(block 66) failed [ 108.019242][ T6281] FAT-fs (loop2): Directory bread(block 67) failed [ 108.034014][ T6281] FAT-fs (loop2): Directory bread(block 68) failed [ 108.041425][ T6281] FAT-fs (loop2): Directory bread(block 69) failed [ 108.053265][ T6287] erofs: (device loop0): mounted with root inode @ nid 36. [ 108.053334][ T6281] FAT-fs (loop2): Directory bread(block 70) failed [ 108.097387][ T6281] FAT-fs (loop2): Directory bread(block 71) failed [ 108.104407][ T6281] FAT-fs (loop2): Directory bread(block 72) failed [ 108.117867][ T28] audit: type=1800 audit(1773255832.863:2): pid=6287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.199" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 108.141126][ T6281] FAT-fs (loop2): Directory bread(block 73) failed [ 108.411130][ T6296] netlink: 24 bytes leftover after parsing attributes in process `syz.3.204'. [ 108.421719][ T6299] netlink: 16 bytes leftover after parsing attributes in process `syz.2.205'. [ 108.601177][ T6306] loop2: detected capacity change from 0 to 512 [ 108.635605][ T6306] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 108.642569][ T6301] loop1: detected capacity change from 0 to 4096 [ 108.686594][ T6301] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 108.764043][ T6309] loop3: detected capacity change from 0 to 128 [ 108.792621][ T6309] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.904825][ T6309] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 109.150744][ T5770] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.464100][ T6328] loop1: detected capacity change from 0 to 256 [ 109.673888][ T6339] loop2: detected capacity change from 0 to 128 [ 109.755973][ T6339] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 109.855237][ T6339] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 109.931539][ T6347] netlink: 240 bytes leftover after parsing attributes in process `syz.0.226'. [ 109.985005][ T6347] netlink: 56 bytes leftover after parsing attributes in process `syz.0.226'. [ 109.995142][ T28] audit: type=1800 audit(1773255834.733:3): pid=6339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.222" name="file1" dev="loop2" ino=104 res=0 errno=0 [ 110.286106][ T6357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.234'. [ 110.511730][ T6368] netlink: 'syz.1.237': attribute type 3 has an invalid length. [ 110.692359][ T28] audit: type=1326 audit(1773255835.433:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3589d9c799 code=0x7ffc0000 [ 110.746828][ T28] audit: type=1326 audit(1773255835.463:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3589d9c799 code=0x7ffc0000 [ 110.851652][ T28] audit: type=1326 audit(1773255835.523:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3589d9c799 code=0x7ffc0000 [ 110.924669][ T28] audit: type=1326 audit(1773255835.523:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3589d9c799 code=0x7ffc0000 [ 110.999840][ T28] audit: type=1326 audit(1773255835.523:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3589d9c799 code=0x7ffc0000 [ 111.054583][ T28] audit: type=1326 audit(1773255835.523:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3589d9c799 code=0x7ffc0000 [ 111.065501][ T6383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.120639][ T28] audit: type=1326 audit(1773255835.523:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3589d9c799 code=0x7ffc0000 [ 111.304332][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.460797][ T28] audit: type=1326 audit(1773255836.203:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6394 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff374f9c799 code=0x7ffc0000 [ 111.616805][ T6382] set_capacity_and_notify: 1 callbacks suppressed [ 111.616821][ T6382] loop2: detected capacity change from 0 to 40427 [ 111.643504][ T6382] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 111.658759][ T6382] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 111.676079][ T6382] F2FS-fs (loop2): invalid crc value [ 111.887627][ T6382] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 111.915823][ T6382] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 112.058706][ T6406] loop3: detected capacity change from 0 to 128 [ 112.084276][ T6406] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 112.135852][ T6406] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 112.155982][ T5769] syz-executor: attempt to access beyond end of device [ 112.155982][ T5769] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 112.191542][ T5769] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 112.334884][ T2131] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 112.353986][ T12] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 112.575097][ T2131] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.605240][ T2131] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.626876][ T2131] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 112.654824][ T2131] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 112.674474][ T2131] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.701378][ T2131] usb 2-1: config 0 descriptor?? [ 113.118895][ T6419] loop3: detected capacity change from 0 to 256 [ 113.208308][ T2131] kovaplus 0003:1E7D:2D50.0001: item fetching failed at offset 3/5 [ 113.222781][ T2131] kovaplus 0003:1E7D:2D50.0001: parse failed [ 113.229893][ T2131] kovaplus: probe of 0003:1E7D:2D50.0001 failed with error -22 [ 113.475852][ T5827] usb 2-1: USB disconnect, device number 2 [ 113.826229][ T6437] loop2: detected capacity change from 0 to 64 [ 113.948707][ T6422] loop0: detected capacity change from 0 to 32768 [ 114.017375][ T6422] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 114.246194][ T6422] XFS (loop0): Ending clean mount [ 114.374397][ T6461] loop2: detected capacity change from 0 to 512 [ 114.409586][ T6461] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 114.443785][ T6461] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a000c018, mo2=0002] [ 114.471736][ T6461] System zones: 0-2, 18-18, 34-35 [ 114.494217][ T6461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.512483][ T6461] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.560731][ T6422] syz.0.261 (6422) used greatest stack depth: 20552 bytes left [ 114.572740][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 114.584030][ T6461] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz.2.276: invalid size [ 114.670725][ T5765] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 114.789442][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.843370][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 114.873340][ T9] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 114.900283][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.934681][ T9] usb 4-1: Product: syz [ 114.951783][ T9] usb 4-1: Manufacturer: syz [ 114.972581][ T9] usb 4-1: SerialNumber: syz [ 115.013474][ T9] usb 4-1: config 0 descriptor?? [ 115.031316][ T9] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 115.046196][ T5771] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 115.163437][ T6475] veth1_to_team: entered promiscuous mode [ 115.184242][ T6475] veth1_to_team: left promiscuous mode [ 115.265819][ T5771] usb 2-1: unable to get BOS descriptor or descriptor too short [ 115.286971][ T5771] usb 2-1: string descriptor 0 read error: -22 [ 115.305061][ T5771] usb 2-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 115.334673][ T5771] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.393400][ T6479] loop0: detected capacity change from 0 to 64 [ 115.661575][ T5771] usb 2-1: 1:1 : bogus bTerminalLink 3 [ 115.686902][ T9] radio-usb-si4713: probe of 4-1:0.0 failed with error -71 [ 115.715318][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 115.761595][ T9] usb 4-1: USB disconnect, device number 2 [ 115.860201][ T5771] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 115.887646][ T5771] snd-usb-audio: probe of 2-1:1.0 failed with error -2 [ 116.069789][ T5771] usb 2-1: 1:1 : bogus bTerminalLink 3 [ 116.088184][ T5771] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 116.099074][ T5771] snd-usb-audio: probe of 2-1:1.1 failed with error -2 [ 116.123104][ T5771] usb 2-1: 1:1 : bogus bTerminalLink 3 [ 116.135222][ T5771] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 116.318937][ T5771] snd-usb-audio: probe of 2-1:1.2 failed with error -2 [ 116.362218][ T5771] usb 2-1: USB disconnect, device number 3 [ 116.449964][ T6501] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 117.035075][ T6519] loop0: detected capacity change from 0 to 1024 [ 117.210152][ T34] hfsplus: b-tree write err: -5, ino 25 [ 117.239972][ T34] hfsplus: b-tree write err: -5, ino 4 [ 117.270691][ T34] hfsplus: b-tree write err: -5, ino 2 [ 117.554230][ T6531] loop1: detected capacity change from 0 to 2048 [ 117.611394][ T6531] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.737697][ T6539] loop0: detected capacity change from 0 to 128 [ 117.770090][ T6541] loop2: detected capacity change from 0 to 256 [ 117.805843][ T6539] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 117.861181][ T6539] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.872841][ T6541] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 118.094926][ T5771] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 118.247607][ T6550] loop2: detected capacity change from 0 to 1024 [ 118.261985][ T6550] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 118.289545][ T5771] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.319797][ T6550] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.332545][ T5771] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.364149][ T5771] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 118.396830][ T5771] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.399280][ T6555] hsr0: entered promiscuous mode [ 118.431634][ T5771] usb 4-1: config 0 descriptor?? [ 118.437268][ T6555] macvtap1: entered promiscuous mode [ 118.484394][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.902303][ T5771] logitech-djreceiver 0003:046D:C71F.0002: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.3-1/input0 [ 118.990759][ T6557] loop2: detected capacity change from 0 to 32768 [ 119.022921][ T6557] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.318 (6557) [ 119.149400][ T6557] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 119.188201][ T2131] usb 4-1: USB disconnect, device number 3 [ 119.209193][ T6557] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 119.259328][ T6557] BTRFS info (device loop2): enabling auto defrag [ 119.286328][ T6562] netlink: 52 bytes leftover after parsing attributes in process `syz.0.320'. [ 119.304689][ T6557] BTRFS info (device loop2): use no compression [ 119.311502][ T6557] BTRFS info (device loop2): max_inline at 4096 [ 119.322223][ T6562] netlink: 48 bytes leftover after parsing attributes in process `syz.0.320'. [ 119.332745][ T6557] BTRFS info (device loop2): using free space tree [ 119.484014][ T6557] BTRFS info (device loop2): enabling ssd optimizations [ 119.525866][ T6557] BTRFS info (device loop2): auto enabling async discard [ 119.966083][ T6568] loop1: detected capacity change from 0 to 32768 [ 120.046237][ T6568] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop1 scanned by syz.1.321 (6568) [ 120.137393][ T6568] BTRFS info (device loop1): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 120.176142][ T6568] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 120.212391][ T6568] BTRFS info (device loop1): using free space tree [ 120.401498][ T5769] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 120.430285][ T6568] BTRFS info (device loop1): enabling ssd optimizations [ 120.438501][ T6568] BTRFS info (device loop1): auto enabling async discard [ 120.444009][ T6613] loop0: detected capacity change from 0 to 256 [ 120.531270][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 120.531285][ T28] audit: type=1800 audit(1773255845.253:19): pid=6568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.321" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 120.563745][ T5768] BTRFS info (device loop1): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 120.663014][ T6613] FAT-fs (loop0): Directory bread(block 64) failed [ 120.670671][ T6613] FAT-fs (loop0): Directory bread(block 65) failed [ 120.697193][ T6613] FAT-fs (loop0): Directory bread(block 66) failed [ 120.744793][ T6613] FAT-fs (loop0): Directory bread(block 67) failed [ 120.778944][ T6613] FAT-fs (loop0): Directory bread(block 68) failed [ 120.795774][ T6613] FAT-fs (loop0): Directory bread(block 69) failed [ 120.802763][ T6613] FAT-fs (loop0): Directory bread(block 70) failed [ 120.822269][ T6613] FAT-fs (loop0): Directory bread(block 71) failed [ 120.855070][ T6613] FAT-fs (loop0): Directory bread(block 72) failed [ 120.893200][ T6613] FAT-fs (loop0): Directory bread(block 73) failed [ 120.963012][ T6596] loop3: detected capacity change from 0 to 32768 [ 120.971057][ T6615] loop1: detected capacity change from 0 to 128 [ 121.075859][ T6615] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 121.092178][ T6596] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 121.103971][ T6615] hpfs: filesystem error: improperly stopped [ 121.112238][ T6615] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 121.121225][ T6615] hpfs: You really don't want any checks? You are crazy... [ 121.165002][ T6615] hpfs: hpfs_map_sector(): read error [ 121.171231][ T6615] hpfs: code page support is disabled [ 121.234650][ T6615] hpfs: hpfs_map_4sectors(): unaligned read [ 121.243219][ T6615] hpfs: hpfs_map_4sectors(): unaligned read [ 121.254139][ T6625] netlink: 44 bytes leftover after parsing attributes in process `syz.2.328'. [ 121.272055][ T6596] XFS (loop3): Ending clean mount [ 121.334990][ T6615] hpfs: filesystem error: unable to find root dir [ 121.536139][ T5770] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 122.003170][ T6645] bond0: option resend_igmp: invalid value (18446744073709551607) [ 122.012188][ T6645] bond0: option resend_igmp: allowed values 0 - 255 [ 122.950920][ T6679] loop0: detected capacity change from 0 to 1024 [ 123.043018][ T6679] hfsplus: request for non-existent node 33554434 in B*Tree [ 123.070142][ T6684] loop1: detected capacity change from 0 to 512 [ 123.075756][ T6679] hfsplus: request for non-existent node 33554434 in B*Tree [ 123.116476][ T6679] hfsplus: request for non-existent node 33554434 in B*Tree [ 123.138445][ T6679] hfsplus: request for non-existent node 33554434 in B*Tree [ 123.147592][ T6686] hfsplus: request for non-existent node 33554434 in B*Tree [ 123.201457][ T6684] Quota error (device loop1): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 123.244649][ T6686] hfsplus: request for non-existent node 33554434 in B*Tree [ 123.252692][ T6684] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 123.301136][ T6684] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.359: Failed to acquire dquot type 1 [ 123.373892][ T6684] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #16: comm syz.1.359: corrupted inode contents [ 123.396748][ T12] hfsplus: request for non-existent node 33554434 in B*Tree [ 123.410178][ T12] hfsplus: request for non-existent node 33554434 in B*Tree [ 123.424669][ T6684] EXT4-fs error (device loop1): ext4_dirty_inode:6124: inode #16: comm syz.1.359: mark_inode_dirty error [ 123.500369][ T6684] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #16: comm syz.1.359: corrupted inode contents [ 123.550437][ T6684] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.359: mark_inode_dirty error [ 123.597826][ T6684] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #16: comm syz.1.359: corrupted inode contents [ 123.618538][ T6684] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 123.629334][ T6684] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #16: comm syz.1.359: corrupted inode contents [ 123.652623][ T6684] EXT4-fs error (device loop1): ext4_truncate:4294: inode #16: comm syz.1.359: mark_inode_dirty error [ 123.682867][ T6684] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 123.711044][ T6684] EXT4-fs (loop1): 1 truncate cleaned up [ 123.722955][ T6684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.775174][ T6684] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.906141][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.114453][ T6694] loop2: detected capacity change from 0 to 40427 [ 124.146989][ T6694] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 124.165653][ T6694] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 124.206664][ T6694] F2FS-fs (loop2): invalid crc value [ 124.256970][ T6694] F2FS-fs (loop2): Found nat_bits in checkpoint [ 124.340895][ T6726] netlink: 92 bytes leftover after parsing attributes in process `syz.1.373'. [ 124.360765][ T6726] netlink: 24 bytes leftover after parsing attributes in process `syz.1.373'. [ 124.415330][ T6728] netlink: 'syz.3.374': attribute type 66 has an invalid length. [ 124.428148][ T6694] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 124.444845][ T6694] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 124.479618][ T6694] syz.2.361: attempt to access beyond end of device [ 124.479618][ T6694] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 124.936784][ T6747] Bluetooth: MGMT ver 1.22 [ 125.028542][ T5769] syz-executor: attempt to access beyond end of device [ 125.028542][ T5769] loop2: rw=2051, sector=45096, nr_sectors = 8 limit=40427 [ 125.052792][ T5769] F2FS-fs (loop2): Issue discard(5637, 5637, 1) failed, ret: -5 [ 125.055078][ T5809] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 125.268020][ T5809] usb 4-1: config 0 has an invalid interface number: 32 but max is 0 [ 125.312565][ T5809] usb 4-1: config 0 has no interface number 0 [ 125.342809][ T5809] usb 4-1: config 0 interface 32 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 125.424375][ T5809] usb 4-1: config 0 interface 32 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.454805][ T5809] usb 4-1: config 0 interface 32 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.494912][ T5809] usb 4-1: config 0 interface 32 has no altsetting 0 [ 125.514012][ T6755] loop1: detected capacity change from 0 to 1024 [ 125.540361][ T5809] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 125.577241][ T6755] hfsplus: bad catalog entry type [ 125.584464][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.617663][ T5809] usb 4-1: config 0 descriptor?? [ 125.724773][ T12] hfsplus: b-tree write err: -5, ino 25 [ 125.743384][ T12] hfsplus: b-tree write err: -5, ino 4 [ 125.754166][ T12] hfsplus: b-tree write err: -5, ino 2 [ 125.875143][ T5779] Bluetooth: hci1: hardware error 0x09 [ 125.964814][ T2131] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 126.095413][ T5809] uclogic 0003:145F:0212.0003: interface is invalid, ignoring [ 126.157248][ T2131] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.175957][ T2131] usb 1-1: config 0 has no interfaces? [ 126.182588][ T2131] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 126.196126][ T2131] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.231531][ T2131] usb 1-1: config 0 descriptor?? [ 126.332258][ T5809] usb 4-1: USB disconnect, device number 4 [ 126.427143][ T6772] netlink: 9 bytes leftover after parsing attributes in process `syz.1.394'. [ 126.440753][ T6772] 0: renamed from hsr_slave_1 (while UP) [ 126.468270][ T6772] 0: entered allmulticast mode [ 126.475227][ T6772] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 126.498354][ T5827] usb 1-1: USB disconnect, device number 2 [ 126.997985][ T6791] warning: `syz.2.402' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 127.212228][ T6800] loop1: detected capacity change from 0 to 256 [ 127.234666][ T5809] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 127.259014][ T6800] FAT-fs (loop1): Directory bread(block 64) failed [ 127.274735][ T6800] FAT-fs (loop1): Directory bread(block 65) failed [ 127.302893][ T6800] FAT-fs (loop1): Directory bread(block 66) failed [ 127.322630][ T6800] FAT-fs (loop1): Directory bread(block 67) failed [ 127.354915][ T6800] FAT-fs (loop1): Directory bread(block 68) failed [ 127.375615][ T6800] FAT-fs (loop1): Directory bread(block 69) failed [ 127.410791][ T6800] FAT-fs (loop1): Directory bread(block 70) failed [ 127.429417][ T6800] FAT-fs (loop1): Directory bread(block 71) failed [ 127.446483][ T5809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 127.460963][ T6800] FAT-fs (loop1): Directory bread(block 72) failed [ 127.474611][ T5809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.488668][ T6800] FAT-fs (loop1): Directory bread(block 73) failed [ 127.518727][ T5809] usb 4-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 127.556445][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.577619][ T5809] usb 4-1: config 0 descriptor?? [ 127.738002][ T6813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.416'. [ 127.749060][ T6813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.416'. [ 127.984959][ T5779] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 128.021747][ T5809] cypress 0003:04B4:DE64.0004: hidraw0: USB HID vff.ff Device [HID 04b4:de64] on usb-dummy_hcd.3-1/input0 [ 128.201069][ T5809] usb 4-1: USB disconnect, device number 5 [ 128.716318][ T6823] loop0: detected capacity change from 0 to 40427 [ 128.768716][ T6823] F2FS-fs (loop0): invalid crc value [ 128.783298][ T6823] F2FS-fs (loop0): Found nat_bits in checkpoint [ 128.899932][ T6844] capability: warning: `syz.2.426' uses 32-bit capabilities (legacy support in use) [ 128.982850][ T6823] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 129.129010][ T5765] syz-executor: attempt to access beyond end of device [ 129.129010][ T5765] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 129.147890][ T6854] loop3: detected capacity change from 0 to 256 [ 129.176276][ T5765] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 129.355026][ T5771] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 129.423547][ T6859] loop1: detected capacity change from 0 to 512 [ 129.448243][ T6859] EXT4-fs: Ignoring removed nobh option [ 129.486263][ T6859] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 129.542018][ T6859] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.434: invalid indirect mapped block 256 (level 1) [ 129.577096][ T5771] usb 3-1: Using ep0 maxpacket: 16 [ 129.630464][ T5771] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.661013][ T6859] EXT4-fs (loop1): Remounting filesystem read-only [ 129.673827][ T5771] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 129.675263][ T6859] EXT4-fs (loop1): 1 truncate cleaned up [ 129.696566][ T5771] usb 3-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 129.712357][ T5771] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.724508][ T6859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.765999][ T5771] usb 3-1: config 0 descriptor?? [ 129.857605][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.030954][ T6875] loop3: detected capacity change from 0 to 512 [ 130.042501][ T6875] EXT4-fs: Ignoring removed mblk_io_submit option [ 130.061608][ T6875] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 130.096067][ T6875] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.439: inode #15: comm syz.3.439: iget: illegal inode # [ 130.121963][ T6875] EXT4-fs (loop3): Remounting filesystem read-only [ 130.131897][ T6875] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.226648][ T5771] uclogic 0003:28BD:0075.0005: interface is invalid, ignoring [ 130.248205][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.370287][ T6884] atomic_op ffff88807ac8b198 conn xmit_atomic 0000000000000000 [ 130.419530][ T5771] usb 3-1: USB disconnect, device number 3 [ 131.374124][ T6909] loop0: detected capacity change from 0 to 512 [ 131.408634][ T6909] EXT4-fs error (device loop0): ext4_orphan_get:1398: inode #15: comm syz.0.455: inode has both inline data and extents flags [ 131.427813][ T6909] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.455: couldn't read orphan inode 15 (err -117) [ 131.451552][ T6909] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.595770][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.773527][ T6918] loop0: detected capacity change from 0 to 512 [ 131.793010][ T6918] EXT4-fs: Ignoring removed bh option [ 131.805391][ T6920] loop1: detected capacity change from 0 to 764 [ 131.820918][ T6918] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 131.867173][ T6918] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 131.885678][ T6920] rock: directory entry would overflow storage [ 131.896549][ T6920] rock: sig=0x4f50, size=4, remaining=3 [ 131.904363][ T6920] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 131.948686][ T6918] EXT4-fs (loop0): orphan cleanup on readonly fs [ 132.023705][ T6918] EXT4-fs (loop0): 1 truncate cleaned up [ 132.048915][ T6918] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 132.244203][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.330518][ T6927] loop3: detected capacity change from 0 to 4096 [ 132.475030][ T6933] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.975049][ T787] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 133.052251][ T6954] netlink: 'syz.2.475': attribute type 10 has an invalid length. [ 133.184176][ T6956] loop0: detected capacity change from 0 to 2048 [ 133.189694][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.211597][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.221030][ T6956] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 133.276847][ T787] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 133.280979][ T6961] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 133.304663][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.349642][ T787] usb 2-1: config 0 descriptor?? [ 133.675028][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.682447][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.686633][ T6969] loop3: detected capacity change from 0 to 4096 [ 133.790843][ T787] playstation 0003:054C:0DF2.0006: unknown main item tag 0x5 [ 133.816163][ T6969] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 133.829124][ T787] playstation 0003:054C:0DF2.0006: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 133.857809][ T6969] ntfs3: loop3: Failed to load $Extend (-22). [ 133.864168][ T6969] ntfs3: loop3: Failed to initialize $Extend. [ 133.977704][ T787] playstation 0003:054C:0DF2.0006: Failed to retrieve feature with reportID 9: -71 [ 134.000082][ T6969] ntfs3: loop3: ino=9, attr_set_size [ 134.015500][ T787] playstation 0003:054C:0DF2.0006: Failed to retrieve DualSense pairing info: -71 [ 134.057329][ T787] playstation 0003:054C:0DF2.0006: Failed to get MAC address from DualSense [ 134.088338][ T787] playstation 0003:054C:0DF2.0006: Failed to create dualsense. [ 134.128977][ T787] playstation: probe of 0003:054C:0DF2.0006 failed with error -71 [ 134.171527][ T6966] loop0: detected capacity change from 0 to 40427 [ 134.207442][ T787] usb 2-1: USB disconnect, device number 4 [ 134.232476][ T6966] F2FS-fs (loop0): invalid crc value [ 134.267702][ T6966] F2FS-fs (loop0): Found nat_bits in checkpoint [ 134.430010][ T6973] loop2: detected capacity change from 0 to 8192 [ 134.465866][ T6966] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 135.083064][ T6993] loop1: detected capacity change from 0 to 256 [ 135.207328][ T6993] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0x2f9e4978, utbl_chksum : 0xe619d30d) [ 135.698747][ T6984] loop3: detected capacity change from 0 to 32768 [ 135.902172][ T7008] loop1: detected capacity change from 0 to 128 [ 135.925944][ T28] audit: type=1800 audit(1773255860.663:20): pid=6984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.488" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 135.953213][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.322798][ T7014] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 136.403901][ T7004] loop2: detected capacity change from 0 to 32768 [ 136.470656][ T7004] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.498 (7004) [ 136.555121][ T7004] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 136.618192][ T7004] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 136.663475][ T7004] BTRFS info (device loop2): setting nodatasum [ 136.692814][ T7004] BTRFS info (device loop2): force zlib compression, level 3 [ 136.725403][ T7004] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 136.793384][ T7004] BTRFS info (device loop2): use lzo compression, level 0 [ 136.822440][ T7004] BTRFS info (device loop2): turning on flush-on-commit [ 136.846804][ T7026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.509'. [ 136.848386][ T7004] BTRFS info (device loop2): enabling auto defrag [ 136.872978][ T7004] BTRFS info (device loop2): max_inline at 4096 [ 136.881732][ T7004] BTRFS info (device loop2): using free space tree [ 136.893705][ T7026] team0: Device vlan2 is already an upper device of the team interface [ 136.896265][ T7030] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 136.896265][ T7030] The task syz.1.510 (7030) triggered the difference, watch for misbehavior. [ 136.931586][ C0] vkms_vblank_simulate: vblank timer overrun [ 137.097498][ T7004] BTRFS info (device loop2): enabling ssd optimizations [ 137.125323][ T7049] syz.0.512 uses obsolete (PF_INET,SOCK_PACKET) [ 137.488888][ T5769] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 137.771212][ T7057] loop0: detected capacity change from 0 to 2048 [ 137.900174][ T7057] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.034677][ T5809] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 138.244637][ T5809] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.289776][ T5809] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.322322][ T5809] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 138.345531][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 138.364705][ T5809] usb 4-1: SerialNumber: syz [ 138.597335][ T5809] usb 4-1: 0:2 : does not exist [ 138.664989][ T5809] usb 4-1: USB disconnect, device number 6 [ 138.774739][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 138.778318][ T5805] udevd[5805]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.006433][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 139.015706][ T9] usb 1-1: config 0 has no interface number 0 [ 139.022059][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.054620][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.074676][ T9] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 139.094691][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.116826][ T9] usb 1-1: config 0 descriptor?? [ 139.251789][ T7090] loop2: detected capacity change from 0 to 32768 [ 139.255356][ T7094] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.534'. [ 139.277312][ T7094] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 139.357405][ T7090] JBD2: Ignoring recovery information on journal [ 139.557562][ T9] prodikeys 0003:041E:2801.0007: unknown main item tag 0x0 [ 139.587431][ T7090] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 139.614623][ T9] prodikeys 0003:041E:2801.0007: unknown main item tag 0x0 [ 139.635108][ T9] prodikeys 0003:041E:2801.0007: unknown main item tag 0x0 [ 139.643101][ T9] prodikeys 0003:041E:2801.0007: unknown main item tag 0x0 [ 139.674634][ T9] prodikeys 0003:041E:2801.0007: unknown main item tag 0x0 [ 139.685249][ T9] prodikeys 0003:041E:2801.0007: unknown main item tag 0x0 [ 139.693055][ T9] prodikeys 0003:041E:2801.0007: unknown main item tag 0x0 [ 139.741801][ T9] prodikeys 0003:041E:2801.0007: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input1 [ 139.794213][ T9] hid_prodikeys: hid-prodikeys: failed to find output report [ 139.794213][ T9] [ 139.839724][ T9] usb 1-1: USB disconnect, device number 3 [ 139.946565][ T7104] fido_id[7104]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 139.976563][ T5769] ocfs2: Unmounting device (7,2) on (node local) [ 140.237546][ T7102] loop3: detected capacity change from 0 to 32768 [ 140.313696][ T7102] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 140.432531][ T7102] XFS (loop3): Ending clean mount [ 140.504044][ T7102] XFS (loop3): Quotacheck needed: Please wait. [ 140.692805][ T7129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.545'. [ 140.735063][ T7102] XFS (loop3): Quotacheck: Done. [ 140.980956][ T5770] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 141.126862][ T7141] overlayfs: missing 'workdir' [ 141.901195][ T7169] loop2: detected capacity change from 0 to 256 [ 142.028404][ T7169] FAT-fs (loop2): Directory bread(block 64) failed [ 142.048485][ T7169] FAT-fs (loop2): Directory bread(block 65) failed [ 142.065073][ T7169] FAT-fs (loop2): Directory bread(block 66) failed [ 142.082440][ T7169] FAT-fs (loop2): Directory bread(block 67) failed [ 142.105564][ T7169] FAT-fs (loop2): Directory bread(block 68) failed [ 142.129527][ T7169] FAT-fs (loop2): Directory bread(block 69) failed [ 142.158145][ T7169] FAT-fs (loop2): Directory bread(block 70) failed [ 142.182932][ T7173] loop0: detected capacity change from 0 to 4096 [ 142.193322][ T7169] FAT-fs (loop2): Directory bread(block 71) failed [ 142.193448][ T7169] FAT-fs (loop2): Directory bread(block 72) failed [ 142.232646][ T7169] FAT-fs (loop2): Directory bread(block 73) failed [ 142.265130][ T7173] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 142.612671][ T7165] loop1: detected capacity change from 0 to 40427 [ 142.679223][ T7165] F2FS-fs (loop1): Found nat_bits in checkpoint [ 142.834919][ T7165] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 143.014797][ T5768] syz-executor: attempt to access beyond end of device [ 143.014797][ T5768] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 143.059040][ T7189] loop3: detected capacity change from 0 to 256 [ 143.074967][ T5768] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 143.108497][ T7189] exfat: Deprecated parameter 'utf8' [ 143.218206][ T7189] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 143.250400][ T7194] loop2: detected capacity change from 0 to 512 [ 143.336478][ T7194] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.576: Directory hole found for htree index block 0 [ 143.442313][ T7194] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 143.505478][ T7194] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.755330][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.790269][ T7206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.580'. [ 144.754973][ T2131] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 144.908626][ T7253] loop0: detected capacity change from 0 to 164 [ 144.966024][ T2131] usb 2-1: Using ep0 maxpacket: 32 [ 144.992976][ T2131] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.026352][ T2131] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.077848][ T2131] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.122824][ T2131] usb 2-1: config 0 interface 0 has no altsetting 0 [ 145.152499][ T2131] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 145.183455][ T2131] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.207143][ T7255] loop3: detected capacity change from 0 to 4096 [ 145.221888][ T7255] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 145.270475][ T2131] usb 2-1: config 0 descriptor?? [ 145.446684][ T7255] ntfs: volume version 3.1. [ 145.555914][ T7255] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 145.609020][ T7255] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 145.650697][ T7255] ntfs: (device loop3): ntfs_cluster_alloc(): Failed to map page. [ 145.682166][ T7255] ntfs: (device loop3): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 145.698310][ T2131] corsair-cpro 0003:1B1C:0C10.0008: unknown main item tag 0x0 [ 145.720594][ T7255] ntfs: (device loop3): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the conversion from resident to non-resident attribute failed with error code -5. [ 145.726044][ T2131] corsair-cpro 0003:1B1C:0C10.0008: unknown main item tag 0x0 [ 145.774734][ T2131] corsair-cpro 0003:1B1C:0C10.0008: unknown main item tag 0x0 [ 145.784191][ T7255] ntfs: (device loop3): ntfs_prepare_file_for_write(): Cannot perform write to inode 0x43, attribute type 0x80, because extending the allocation failed (error 5). [ 145.796183][ T2131] corsair-cpro 0003:1B1C:0C10.0008: unknown main item tag 0x0 [ 145.827204][ T2131] corsair-cpro 0003:1B1C:0C10.0008: unknown main item tag 0x0 [ 145.844033][ T2131] corsair-cpro 0003:1B1C:0C10.0008: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 145.970226][ T2131] corsair-cpro: probe of 0003:1B1C:0C10.0008 failed with error -38 [ 146.029455][ T2131] usb 2-1: USB disconnect, device number 5 [ 146.568414][ T7282] loop2: detected capacity change from 0 to 512 [ 146.645117][ T7282] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 146.689697][ T7282] EXT4-fs (loop2): 1 truncate cleaned up [ 146.717895][ T7282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.785953][ T7282] EXT4-fs: Ignoring removed orlov option [ 146.789230][ T7292] loop1: detected capacity change from 0 to 512 [ 146.791871][ T7282] EXT4-fs: Ignoring removed orlov option [ 146.826867][ T7282] EXT4-fs error (device loop2): __ext4_remount:6752: comm syz.2.615: Abort forced by user [ 146.850692][ T7282] EXT4-fs (loop2): Remounting filesystem read-only [ 146.852713][ T7292] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.619: invalid indirect mapped block 256 (level 2) [ 146.865260][ T7282] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 146.925767][ T7295] mkiss: ax0: crc mode is auto. [ 146.930993][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.968918][ T7292] EXT4-fs (loop1): 2 truncates cleaned up [ 146.978992][ T7292] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.176644][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.452343][ T7309] loop1: detected capacity change from 0 to 256 [ 147.501558][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.628'. [ 147.572247][ T7309] FAT-fs (loop1): Directory bread(block 64) failed [ 147.601603][ T7309] FAT-fs (loop1): Directory bread(block 65) failed [ 147.624817][ T7309] FAT-fs (loop1): Directory bread(block 66) failed [ 147.631490][ T7309] FAT-fs (loop1): Directory bread(block 67) failed [ 147.669921][ T7309] FAT-fs (loop1): Directory bread(block 68) failed [ 147.685119][ T7309] FAT-fs (loop1): Directory bread(block 69) failed [ 147.692307][ T7309] FAT-fs (loop1): Directory bread(block 70) failed [ 147.724725][ T7309] FAT-fs (loop1): Directory bread(block 71) failed [ 147.734615][ T7309] FAT-fs (loop1): Directory bread(block 72) failed [ 147.758001][ T7309] FAT-fs (loop1): Directory bread(block 73) failed [ 148.613598][ T7318] loop0: detected capacity change from 0 to 32768 [ 148.659961][ T7318] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.631 (7318) [ 148.755983][ T7318] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 148.790860][ T7318] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 148.828469][ T7318] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 148.858962][ T7318] BTRFS info (device loop0): use zstd compression, level 3 [ 148.894703][ T7318] BTRFS info (device loop0): using free space tree [ 149.043200][ T7318] BTRFS info (device loop0): enabling ssd optimizations [ 149.074985][ T7318] BTRFS info (device loop0): auto enabling async discard [ 149.130709][ T7337] loop1: detected capacity change from 0 to 32768 [ 149.270566][ T5765] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 149.575741][ T6462] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop0 scanned by udevd (6462) [ 149.655062][ T787] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 149.866648][ T787] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.884714][ T5771] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 149.898419][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.924766][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.954647][ T787] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 149.974755][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.016894][ T787] usb 2-1: config 0 descriptor?? [ 150.112054][ T5771] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.139091][ T5771] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.169524][ T5771] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 150.187748][ T5771] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.207050][ T5771] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.257065][ T5771] usb 4-1: config 0 descriptor?? [ 150.395292][ T7388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.657'. [ 150.463977][ T787] hid-rmi 0003:0461:4E72.0009: unbalanced collection at end of report description [ 150.503546][ T787] hid-rmi 0003:0461:4E72.0009: parse failed [ 150.526667][ T787] hid-rmi: probe of 0003:0461:4E72.0009 failed with error -22 [ 150.643418][ T7392] loop2: detected capacity change from 0 to 1764 [ 150.667070][ T787] usb 2-1: USB disconnect, device number 6 [ 150.712791][ T5771] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.733460][ T7384] loop0: detected capacity change from 0 to 32768 [ 150.742505][ T7384] XFS: attr2 mount option is deprecated. [ 150.748987][ T5771] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.759484][ T5771] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.770447][ T5771] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.780341][ T5771] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.803965][ T7384] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 150.835334][ T5771] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.843306][ T5771] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.861264][ T5771] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.885481][ T5771] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 150.900537][ T7384] XFS (loop0): Ending clean mount [ 150.911836][ T5771] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 150.920118][ T7384] XFS (loop0): Quotacheck needed: Please wait. [ 150.955963][ T5771] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 151.021767][ T7384] XFS (loop0): Quotacheck: Done. [ 151.029077][ T5771] usb 4-1: USB disconnect, device number 7 [ 151.148734][ T7404] fido_id[7404]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 151.187161][ T7384] xfs: Unexpected value for 'quota' [ 151.308820][ T5765] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 151.313598][ T7408] loop2: detected capacity change from 0 to 1024 [ 151.371593][ T7408] hfsplus: request for non-existent node 16777216 in B*Tree [ 151.387512][ T7408] hfsplus: request for non-existent node 16777216 in B*Tree [ 151.497771][ T7412] loop2: detected capacity change from 0 to 64 [ 152.049025][ T7410] loop1: detected capacity change from 0 to 32768 [ 152.112044][ T7410] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 152.219621][ T7410] XFS (loop1): Ending clean mount [ 152.235478][ T9] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x10 [ 152.274688][ T9] XFS (loop1): Unmount and run xfs_repair [ 152.303198][ T9] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 152.324807][ T9] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 152.340343][ T9] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 152.352786][ T9] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 152.353827][ T7418] loop2: detected capacity change from 0 to 40427 [ 152.379155][ T9] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37 ..............@7 [ 152.386711][ T7418] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 152.404663][ T27] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 152.409899][ T9] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 152.431114][ T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 152.452710][ T7418] F2FS-fs (loop2): invalid crc value [ 152.474936][ T9] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00 ................ [ 152.489552][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 152.499406][ T7418] F2FS-fs (loop2): Found nat_bits in checkpoint [ 152.530821][ T7410] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 4 error 74 [ 152.587341][ T7410] XFS (loop1): Failed to initialize disk quotas. [ 152.622235][ T27] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 152.684874][ T27] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 152.725671][ T27] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 152.751012][ T27] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 152.782800][ T5768] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 152.785055][ T27] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 152.810219][ T7418] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 152.881291][ T27] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 152.892640][ T27] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 152.915350][ T27] usb 4-1: Product: syz [ 152.920949][ T27] usb 4-1: Manufacturer: syz [ 152.938379][ T27] cdc_wdm 4-1:1.0: skipping garbage [ 152.947720][ T27] cdc_wdm 4-1:1.0: skipping garbage [ 152.963493][ T27] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 152.987424][ T27] cdc_wdm 4-1:1.0: Unknown control protocol [ 153.015050][ T5769] syz-executor: attempt to access beyond end of device [ 153.015050][ T5769] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 153.091743][ T5769] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 153.227856][ T9] usb 4-1: USB disconnect, device number 8 [ 153.839605][ T7456] xt_hashlimit: size too large, truncated to 1048576 [ 154.787745][ T7477] loop3: detected capacity change from 0 to 4096 [ 155.088556][ T7477] EXT4-fs (loop3): Test dummy encryption mode enabled [ 155.126480][ T7477] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 155.154445][ T7477] System zones: 0-5 [ 155.187052][ T7472] loop2: detected capacity change from 0 to 32768 [ 155.191780][ T7477] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.445759][ T7465] loop0: detected capacity change from 0 to 32768 [ 155.477097][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.567974][ T7465] gfs2: fsid=localflocks: Trying to join cluster "lock_nolock", "localflocks" [ 155.642392][ T7465] gfs2: fsid=localflocks: Now mounting FS (format 1801)... [ 155.805632][ T7465] gfs2: fsid=localflocks.s: journal 0 mapped with 5 extents in 0ms [ 155.974500][ T7465] gfs2: fsid=localflocks.s: first mount done, others may mount [ 156.793460][ T7499] loop0: detected capacity change from 0 to 256 [ 156.805950][ T7499] exfat: Deprecated parameter 'utf8' [ 156.860777][ T7499] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 157.450850][ T7515] netlink: 20 bytes leftover after parsing attributes in process `syz.3.702'. [ 157.638735][ T7519] loop2: detected capacity change from 0 to 16 [ 157.668998][ T7519] erofs: (device loop2): mounted with root inode @ nid 36. [ 157.724800][ T7519] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 0 @ lcn 0 of nid 36 [ 157.753979][ T7519] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 0 @ lcn 0 of nid 36 [ 157.771150][ T7519] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 157.782548][ T7519] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 157.881997][ T7527] loop3: detected capacity change from 0 to 64 [ 158.012240][ T7527] hfs: bad catalog entry type 65409 [ 158.298547][ T7542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.716'. [ 158.358971][ T7544] loop0: detected capacity change from 0 to 1024 [ 158.477480][ T7544] hfsplus: bad catalog entry type [ 158.599562][ T12] hfsplus: b-tree write err: -5, ino 25 [ 158.608851][ T12] hfsplus: b-tree write err: -5, ino 4 [ 158.638826][ T7550] loop2: detected capacity change from 0 to 2048 [ 158.645979][ T12] hfsplus: b-tree write err: -5, ino 2 [ 158.683123][ T7550] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.833989][ T7558] process 'syz.0.723' launched '/dev/fd/3' with NULL argv: empty string added [ 159.858756][ T7586] loop0: detected capacity change from 0 to 1024 [ 160.043981][ T4299] hfsplus: b-tree write err: -5, ino 25 [ 160.081207][ T4299] hfsplus: b-tree write err: -5, ino 4 [ 160.109149][ T4299] hfsplus: b-tree write err: -5, ino 2 [ 160.322046][ T7569] loop2: detected capacity change from 0 to 32768 [ 160.340947][ T5771] kernel write not supported for file /uhid (pid: 5771 comm: kworker/0:3) [ 160.505111][ T7569] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 160.530706][ T7595] loop3: detected capacity change from 0 to 8192 [ 160.576257][ T7608] loop1: detected capacity change from 0 to 128 [ 160.642914][ T7615] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 160.679417][ T7569] XFS (loop2): Ending clean mount [ 160.732731][ T7608] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 160.827804][ T7608] ext4 filesystem being mounted at /172/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 160.876365][ T5769] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 161.092426][ T5768] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.213384][ T7620] netlink: 216 bytes leftover after parsing attributes in process `syz.0.745'. [ 161.999847][ T7647] sctp: [Deprecated]: syz.2.751 (pid 7647) Use of int in max_burst socket option. [ 161.999847][ T7647] Use struct sctp_assoc_value instead [ 162.731404][ T7676] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 162.824990][ T7680] netlink: 'syz.0.762': attribute type 3 has an invalid length. [ 163.282425][ T7689] loop1: detected capacity change from 0 to 8192 [ 163.333927][ T7689] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 163.348356][ T7668] loop3: detected capacity change from 0 to 32768 [ 163.365059][ T7689] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 163.376773][ T7689] REISERFS (device loop1): using ordered data mode [ 163.386298][ T7689] reiserfs: using flush barriers [ 163.396262][ T7689] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 163.422467][ T7689] REISERFS (device loop1): checking transaction log (loop1) [ 163.469095][ T7689] REISERFS (device loop1): Using r5 hash to sort names [ 163.498328][ T5827] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 163.562280][ T7668] UFO tlock:0xffffc9000289a090 [ 163.563600][ T7689] reiserfs: enabling write barrier flush mode [ 163.590447][ T7696] netlink: 532 bytes leftover after parsing attributes in process `syz.0.771'. [ 163.614485][ T7668] MetaData crosses page boundary!! [ 163.624805][ T7668] lblock = 6300000010, size = -820051968 [ 163.631524][ T7668] CPU: 0 PID: 7668 Comm: syz.3.758 Not tainted syzkaller #0 [ 163.639296][ T7668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 163.650053][ T7689] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 163.651292][ T7668] Call Trace: [ 163.651332][ T7668] [ 163.651342][ T7668] dump_stack_lvl+0x18c/0x250 [ 163.651376][ T7668] ? show_regs_print_info+0x20/0x20 [ 163.669706][ T7689] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 163.671488][ T7668] ? load_image+0x400/0x400 [ 163.671520][ T7668] ? folio_unlock+0x118/0x2e0 [ 163.675853][ T7689] REISERFS (device loop1): Remounting filesystem read-only [ 163.679899][ T7668] __get_metapage+0xaac/0xfa0 [ 163.679935][ T7668] dtSearch+0x591/0x21b0 [ 163.679979][ T7668] jfs_lookup+0x1b1/0x420 [ 163.686852][ T7689] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 163.698387][ T7668] ? jfs_get_parent+0xb0/0xb0 [ 163.698419][ T7668] ? d_alloc_parallel+0x13f6/0x1530 [ 163.698455][ T7668] ? lockdep_softirqs_off+0x430/0x430 [ 163.698473][ T7668] ? d_hash_and_lookup+0x1b0/0x1b0 [ 163.698498][ T7668] ? __init_waitqueue_head+0xa9/0x150 [ 163.698517][ T7668] __lookup_slow+0x2a1/0x400 [ 163.698542][ T7668] ? lookup_one_len+0x2e0/0x2e0 [ 163.698569][ T7668] ? try_to_unlazy+0x34c/0x5a0 [ 163.698589][ T7668] ? down_read+0x1ac/0x2e0 [ 163.698607][ T7668] lookup_slow+0x53/0x70 [ 163.698629][ T7668] walk_component+0x2be/0x3f0 [ 163.698645][ T7668] ? path_lookupat+0x15c/0x440 [ 163.698669][ T7668] path_lookupat+0x169/0x440 [ 163.698698][ T7668] filename_lookup+0x228/0x560 [ 163.698794][ T7668] ? hashlen_string+0x110/0x110 [ 163.698839][ T7668] ? strncpy_from_user+0x197/0x2d0 [ 163.698861][ T7668] ? getname_flags+0x20a/0x500 [ 163.698885][ T7668] user_path_at_empty+0x42/0x60 [ 163.698907][ T7668] __se_sys_mount+0x2a8/0x3d0 [ 163.698929][ T7668] ? __x64_sys_mount+0xc0/0xc0 [ 163.698950][ T7668] ? lockdep_hardirqs_on+0x98/0x150 [ 163.698968][ T7668] ? __x64_sys_mount+0x20/0xc0 [ 163.698985][ T7668] do_syscall_64+0x55/0xa0 [ 163.699006][ T7668] ? clear_bhb_loop+0x40/0x90 [ 163.699025][ T7668] ? clear_bhb_loop+0x40/0x90 [ 163.699044][ T7668] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 163.699062][ T7668] RIP: 0033:0x7ff374f9c799 [ 163.699092][ T7668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.699106][ T7668] RSP: 002b:00007ff375e2b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 163.699125][ T7668] RAX: ffffffffffffffda RBX: 00007ff375215fa0 RCX: 00007ff374f9c799 [ 163.699138][ T7668] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000000 [ 163.699149][ T7668] RBP: 00007ff375032c99 R08: 0000000000000000 R09: 0000000000000000 [ 163.699158][ T7668] R10: 0000000001800013 R11: 0000000000000246 R12: 0000000000000000 [ 163.699168][ T7668] R13: 00007ff375216038 R14: 00007ff375215fa0 R15: 00007fff51894858 [ 163.699194][ T7668] [ 163.713114][ T7668] bread failed! [ 163.758280][ T5827] usb 3-1: Using ep0 maxpacket: 32 [ 163.775158][ T5827] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 163.775182][ T5827] usb 3-1: config 0 has no interface number 0 [ 163.775218][ T5827] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 163.805947][ T7689] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 163.823153][ T5827] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 163.905570][ T7668] jfs_lookup: dtSearch returned -5 [ 163.917764][ T5827] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 163.950145][ T7689] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 163.995301][ T5827] usb 3-1: config 0 interface 196 has no altsetting 0 [ 164.065118][ T7689] REISERFS error (device loop1): zam-7001 reiserfs_find_entry: io error [ 164.071702][ T5827] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 164.092119][ T7698] loop0: detected capacity change from 0 to 1024 [ 164.095404][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.121737][ T5827] usb 3-1: Product: syz [ 164.130133][ T5827] usb 3-1: Manufacturer: syz [ 164.147379][ T5827] usb 3-1: SerialNumber: syz [ 164.149620][ T7689] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 164.156850][ T5827] usb 3-1: config 0 descriptor?? [ 164.175809][ T7689] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 164.185065][ T7691] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 164.217842][ T7698] hfsplus: bad catalog entry type [ 164.225118][ T7689] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 164.245665][ T7689] REISERFS warning (device loop1): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 164.360276][ T4273] hfsplus: b-tree write err: -5, ino 25 [ 164.389151][ T4273] hfsplus: b-tree write err: -5, ino 4 [ 164.407243][ T4273] hfsplus: b-tree write err: -5, ino 2 [ 164.460781][ T5768] ------------[ cut here ]------------ [ 164.467756][ T5768] kernel BUG at fs/reiserfs/journal.c:1916! [ 164.485334][ T5768] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 164.492932][ T5768] CPU: 0 PID: 5768 Comm: syz-executor Not tainted syzkaller #0 [ 164.502491][ T5768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 164.513171][ T5768] RIP: 0010:do_journal_release+0x4e6/0x4f0 [ 164.520465][ T5768] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 64 dc b5 ff e9 f9 fc ff ff e8 8a ad 5d ff <0f> 0b e8 83 ad 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3 [ 164.547231][ T5768] RSP: 0018:ffffc90004427b00 EFLAGS: 00010293 [ 164.556371][ T5768] RAX: ffffffff82296ed6 RBX: 1ffff92000884f64 RCX: ffff88802877bc00 [ 164.568680][ T5768] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 164.578231][ T5768] RBP: ffffc90004427bf8 R08: ffffc90004427b77 R09: 0000000000000000 [ 164.588344][ T5768] R10: ffffc90004427b40 R11: fffff52000884f6f R12: ffffc900037e9000 [ 164.596856][ T5768] R13: dffffc0000000000 R14: ffff88805d040630 R15: 0000000000000000 [ 164.605807][ T5768] FS: 000055557b8ee500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 164.607465][ T5827] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 164.616128][ T5768] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 164.616148][ T5768] CR2: 000055557b909a28 CR3: 00000000637e4000 CR4: 00000000003506f0 [ 164.616160][ T5768] Call Trace: [ 164.616169][ T5768] [ 164.616177][ T5768] ? journal_release+0x30/0x30 [ 164.616208][ T5768] journal_release+0x1f/0x30 [ 164.616227][ T5768] reiserfs_put_super+0x26b/0x510 [ 164.636560][ T5827] ipheth: probe of 3-1:0.196 failed with error -22 [ 164.640583][ T5768] ? hook_inode_free_security+0xb0/0xb0 [ 164.640610][ T5768] ? evict_inodes+0x63c/0x6a0 [ 164.682276][ T5768] ? reiserfs_dirty_inode+0x270/0x270 [ 164.688938][ T5768] ? fscrypt_destroy_keyring+0x288/0x2a0 [ 164.695360][ T5768] ? reiserfs_dirty_inode+0x270/0x270 [ 164.701359][ T5768] generic_shutdown_super+0x134/0x2b0 [ 164.707243][ T5768] kill_block_super+0x44/0x90 [ 164.712140][ T5768] deactivate_locked_super+0x97/0x100 [ 164.717596][ T5768] cleanup_mnt+0x43b/0x4d0 [ 164.722319][ T5768] task_work_run+0x1d4/0x260 [ 164.727600][ T5768] ? task_work_cancel+0x220/0x220 [ 164.732988][ T5768] ? exit_to_user_mode_loop+0x3b/0x110 [ 164.738714][ T5768] exit_to_user_mode_loop+0xe6/0x110 [ 164.744732][ T5768] exit_to_user_mode_prepare+0xee/0x180 [ 164.750833][ T5768] syscall_exit_to_user_mode+0x1a/0x50 [ 164.756580][ T5768] do_syscall_64+0x61/0xa0 [ 164.761441][ T5768] ? clear_bhb_loop+0x40/0x90 [ 164.766477][ T5768] ? clear_bhb_loop+0x40/0x90 [ 164.771378][ T5768] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 164.777735][ T5768] RIP: 0033:0x7fd18a59d9d7 [ 164.782864][ T5768] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 164.803658][ T5768] RSP: 002b:00007ffcbdf197b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 164.812733][ T5768] RAX: 0000000000000000 RBX: 00007fd18a632050 RCX: 00007fd18a59d9d7 [ 164.820126][ T5809] usb 3-1: USB disconnect, device number 4 [ 164.821501][ T5768] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcbdf19870 [ 164.821522][ T5768] RBP: 00007ffcbdf19870 R08: 00007ffcbdf1a870 R09: 00000000ffffffff [ 164.821531][ T5768] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcbdf1a900 [ 164.821539][ T5768] R13: 00007fd18a632050 R14: 00000000000281c5 R15: 00007ffcbdf1a940 [ 164.821555][ T5768] [ 164.821561][ T5768] Modules linked in: [ 164.874192][ T5768] ---[ end trace 0000000000000000 ]--- [ 164.880601][ T5768] RIP: 0010:do_journal_release+0x4e6/0x4f0 [ 164.886904][ T5768] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 64 dc b5 ff e9 f9 fc ff ff e8 8a ad 5d ff <0f> 0b e8 83 ad 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3 [ 164.909368][ T5768] RSP: 0018:ffffc90004427b00 EFLAGS: 00010293 [ 164.916156][ T5768] RAX: ffffffff82296ed6 RBX: 1ffff92000884f64 RCX: ffff88802877bc00 [ 164.925391][ T5768] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 164.934008][ T5768] RBP: ffffc90004427bf8 R08: ffffc90004427b77 R09: 0000000000000000 [ 164.942290][ T5768] R10: ffffc90004427b40 R11: fffff52000884f6f R12: ffffc900037e9000 [ 164.950507][ T5768] R13: dffffc0000000000 R14: ffff88805d040630 R15: 0000000000000000 [ 164.959196][ T5768] FS: 000055557b8ee500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 164.968895][ T5768] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 164.975988][ T5768] CR2: 000055557b909a28 CR3: 00000000637e4000 CR4: 00000000003506f0 [ 164.984323][ T5768] Kernel panic - not syncing: Fatal exception [ 164.990974][ T5768] Kernel Offset: disabled [ 164.995399][ T5768] Rebooting in 86400 seconds..