last executing test programs: 42.786489497s ago: executing program 4 (id=260): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d89, 0xc00}, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x40000143, 0x1}) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) 42.540807051s ago: executing program 4 (id=262): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) 42.283590276s ago: executing program 4 (id=265): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x1, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) 42.096309249s ago: executing program 4 (id=267): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000000b80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=') 41.497060829s ago: executing program 4 (id=273): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 40.729782042s ago: executing program 4 (id=282): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x2, 0x7}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x5}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x5, 0x5b, 0x2}) 40.149868201s ago: executing program 32 (id=282): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x2, 0x7}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x5}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x5, 0x5b, 0x2}) 6.720818359s ago: executing program 2 (id=525): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 5.961619221s ago: executing program 2 (id=528): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r0, &(0x7f00000004c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}, 0x80) shutdown(r0, 0x1) syz_emit_vhci(&(0x7f0000003980)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x6, 0xc8}}}, 0x6) 5.297887432s ago: executing program 0 (id=531): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0x8) 5.070099485s ago: executing program 0 (id=533): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000500)={0x1, 0x0, [{0x0, 0xfffffffffffffe13, &(0x7f0000000780)=""/221}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) 4.874378299s ago: executing program 2 (id=535): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='net_prio.prioidx\x00', 0x0, 0x0) preadv2(r1, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) 4.735241291s ago: executing program 0 (id=536): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001c00070c000000000000000007000000", @ANYRES32=r1, @ANYBLOB="021000000a0002"], 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 4.527520225s ago: executing program 2 (id=537): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000600)=ANY=[], 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) pwrite64(r0, &(0x7f0000001500)='_', 0x1, 0x10000000005) 4.502019305s ago: executing program 1 (id=538): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@bridge_setlink={0x44, 0x13, 0xa2f, 0xfffffffd, 0x0, {0x7, 0x0, 0x68, r1, 0x900, 0x8203}, [@IFLA_LINKINFO={0x24, 0x1a, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5}]}}}]}, 0x44}}, 0x4050) 4.246681909s ago: executing program 0 (id=539): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e28}, {&(0x7f00000000c0)=""/250, 0x8}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000280)={0x18, r0, 0xfaac4106a1b87a7, 0x0, 0x0, {0xb}, [@HEADER={0x4}]}, 0x18}}, 0x0) 3.785743937s ago: executing program 0 (id=540): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="696f636861727365743d6d616363726f617469616e2c646973636172643d3078303030303030303030303030303030332c6e6f646973636172642c6572726f72733d636f6e74696e75652c696f636861727365743d6d6163637972696c6c69632c0067add4ceec7cb8702b1b4a0ff322839e69b507d7478e0706b00408dc59283f5c0159b8e3c0289dcb182504844ef8e6972cdb3f50680fc9602ed27c1f6b47a91f941f154ae205d34a9b7a7c67efa0c0e2a70251d664fce12ae64a5a521aa83080b7672c4e1566a61a0ade4b6c9d78151053d9fb31fd2cfc77f269f873e14e5fe3c46c0acbb22d40391ae31d2025dcd947adf76739ae4ecbe3b630040b37e2b09d7816e0b93981de1147532cf2f46d4d4904f68fb43cd165b9"], 0x1, 0x61d0, &(0x7f000000cb40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40042, 0x0) pwrite64(r0, &(0x7f0000000540)="9e", 0x1, 0xfecf) unlink(&(0x7f0000000100)='./file1\x00') 3.785196967s ago: executing program 1 (id=541): openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$tipc(0x1e, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.779661464s ago: executing program 1 (id=544): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x20008c0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x3, 0x445a, &(0x7f0000004480)="$eJzs3c9rHNcdAPA3I9mWXP+QXBdcKHShhpa2CMmntjJUlmXLkq26uLUpvaxX0tpWu9IaaVV68EG9GXoq9FB6MA7kppPxIVfnT8glR+cUiCE5JIdAwInC7s5KO6PdaGN2pTj+fA6anfdrvtrvzNNbwezEicq9pbXc0lqusJIrL9xZO5f7R7m0vlwM8T5pefxD+3d8OtOL8+Sgz7032fWLl/9061wI7y6+/2Jra2srVPWHlsaaXn/+6YOFne2R7fI406c6buvRuuWvIYTTu+Kq6gsh/OWdEKIQwoWkbDLZDoYQjod63a0H/76d61I0T54Xz+dfzj18On52dvPR0/rvfrZFwyiE/5d+/Ou7yx//rG/8g1926fAAAAAAAAAAAAAAAAAAALzmpm9cv/nH0bHwLAr9m9Hu+3Wnk227+2O3uuanvf9lAQAAAAAAAAAAAAAAAAAA4Dtq5/7/XHSqxf3/U8l2ok3/rd/3PkZ6Z+YP16cujY4lz3+PdtX/Jin65EJfGN713Pf089ZD03PWG1o+/332o67F34ivcdyhOLMf4nhkJIS3kge/n4mOxqXyWuVXd8rrK4tdC+O1lc5//c1LnQXJ+9lp/icz4/f++f8/DNmztrp/e/epTAvp/Pe1bff2v6KO8n8x028/8s+rS+e/v1Y22Nxgoj4BVPP/n/698z+VGb9X+T8RQshF1VhzqRmguoaplrdbr5CWzv+hWllq6kzeyHbX/xeZ/F/KjH9Q8/9G9g8RLaXzf7hWNpBqsXP9D8d7X/+XM+MfRP6r8W/4+9+RdP6P1Av7U01q72Sn8/90Zvyu5f9wevdm/Fn9xYkodQZsRvX4231fHWnp/A/sqt/5/Pdl8j1935z/K5n+rfPfvYuzEV/juEMhikeaPof8Iqp//qO1dP4H27br9PqfyfTr9fw/UVv/dfWUeqOk83+0VpZeOw/Vfnaa/9nM+Nn8f/iD7sRdW5UMNPK/k/yvjtTLH1v/dSSd/yQ5cXOLjdrP2vov2nv9fzUz/kGs/6rxb8S9Per3RTr/x7LVPxpPXlTz/16b//9sndzpcC0zQO/zH8Kouf+VpfN/vG272vU/sPf8P5fp1+v8/7yXgwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8BiaT7VCI4pHUfhyPjIRwMdk/E45G84XF/HypvPD3tRCmkvJcOBXdLZXnC6X80kp5sZgvlErlhRAuJfWnw0C0VipX8suF+5e3xxqM7hULq5X5YqESQphOyn8SjjfGml+qLBfuhxCubNedjMur9+8VVvKLS6u/Gx0dHQ0z2zEMR8V/VoorlfrR67UhzG73HYqagqtVX92O5Vj0t/L66kqhVCu/1tSnVF4olJr6zCV1/w3DUWV1fWWhUCnmS+W7jeMdpIlkOzVz4883ro3tqr8d1beT+xsWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN/Ss/Hf/i+E0F/fi0MIE40XUav2T54Xz+dfzj18On52dvPR4xft2gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwNTtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYpWOUCIIgCqC/28A18xhGw25muqKIBo4InkCP4WH0KF7COygYmBqIIN3JOAMmbvReUjCfoQr6AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/M35zXh7vd4kJauv/eT5/uU1Se35ZZuPJ/P/7+3oTv7HxdV4erbetHcvv/Lj9ul9W3/Sz4+Hu8zM7mnSk9anib7nYPGuad/ekqxmytbv63sPU+qQZNvyo1LrMCyuAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgmx04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswLEAAAAAgDB/6yy6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFkBAAD//5ypKmA=") r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2.661668746s ago: executing program 3 (id=545): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 2.343956001s ago: executing program 3 (id=546): r0 = semget$private(0x0, 0x4000000009, 0x0) semop(r0, &(0x7f00000002c0)=[{0x0, 0xff}, {0x0, 0x1f}, {0x4, 0x202}, {0x0, 0x8, 0x1000}, {0x0, 0xfff}], 0x26) semop(r0, &(0x7f0000000200), 0x53) semop(r0, &(0x7f0000000380)=[{0x0, 0x7d12}], 0x1) 2.085391625s ago: executing program 0 (id=547): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) 1.941543108s ago: executing program 2 (id=558): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x101, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2404c886) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.727837281s ago: executing program 5 (id=549): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x2000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000001480)) 1.450088416s ago: executing program 5 (id=550): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 1.069843842s ago: executing program 5 (id=551): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e28}, {&(0x7f00000000c0)=""/250, 0x8}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000280)={0x18, r0, 0xfaac4106a1b87a7, 0x0, 0x0, {0xb}, [@HEADER={0x4}]}, 0x18}}, 0x0) 1.060057632s ago: executing program 3 (id=562): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$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") lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f00000000c0)) syz_mount_image$msdos(&(0x7f0000000800), &(0x7f0000000840)='.\x00', 0x104821, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, &(0x7f00000007c0)) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000002"], 0x0) 965.242334ms ago: executing program 2 (id=552): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) r1 = dup(r0) write$FUSE_DIRENTPLUS(r1, 0x0, 0x10) 907.624775ms ago: executing program 1 (id=553): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000a20000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x400000ffc020) 665.643158ms ago: executing program 3 (id=554): ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008000500000000000800060000020000080007"], 0x44}}, 0x0) 653.000879ms ago: executing program 5 (id=555): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = io_uring_setup(0x2282, &(0x7f0000000140)) r2 = dup3(r0, r1, 0x0) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, 0x0) 416.433973ms ago: executing program 3 (id=556): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="800000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010010000000280005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000000a000400aaaaaaaaaa00000008000300030000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r1], 0x80}}, 0x0) 390.190903ms ago: executing program 5 (id=557): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000100)={0x77359400}) read(r0, &(0x7f00000002c0)=""/114, 0x72) 273.775095ms ago: executing program 1 (id=559): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 30.272209ms ago: executing program 1 (id=560): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000000010040"]) 29.173389ms ago: executing program 3 (id=561): r0 = epoll_create(0x6) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x0, 0x2, 0x4}) 0s ago: executing program 5 (id=563): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x35) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.19' (ED25519) to the list of known hosts. [ 67.130472][ T4239] cgroup: Unknown subsys name 'net' [ 67.267164][ T4239] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.815874][ T4239] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 70.202374][ T4252] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.211220][ T4252] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.218899][ T4252] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.227711][ T4252] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.235226][ T4252] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.243255][ T4252] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.251937][ T4261] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.260034][ T4261] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.267347][ T4261] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.284844][ T4252] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.294358][ T4252] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.301918][ T4252] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.309362][ T4259] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.317951][ T4252] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.327601][ T4259] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.335974][ T4252] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.347906][ T4259] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.355541][ T4259] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.382948][ T4259] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.391372][ T4259] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.398951][ T4259] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.419713][ T4259] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.427267][ T4259] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.435572][ T4259] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.443067][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 70.450985][ T4259] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.451112][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.466202][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.475812][ T4252] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.483182][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.775985][ T4251] chnl_net:caif_netlink_parms(): no params data found [ 70.877044][ T4255] chnl_net:caif_netlink_parms(): no params data found [ 70.944757][ T4256] chnl_net:caif_netlink_parms(): no params data found [ 70.983881][ T4262] chnl_net:caif_netlink_parms(): no params data found [ 71.083953][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.091336][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.101228][ T4251] device bridge_slave_0 entered promiscuous mode [ 71.121708][ T4255] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.132395][ T4255] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.140480][ T4255] device bridge_slave_0 entered promiscuous mode [ 71.148988][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.156152][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.164433][ T4251] device bridge_slave_1 entered promiscuous mode [ 71.176668][ T4263] chnl_net:caif_netlink_parms(): no params data found [ 71.190577][ T4255] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.197743][ T4255] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.206556][ T4255] device bridge_slave_1 entered promiscuous mode [ 71.272944][ T4251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.282463][ T4256] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.289825][ T4256] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.297718][ T4256] device bridge_slave_0 entered promiscuous mode [ 71.334483][ T4251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.352626][ T4256] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.360509][ T4256] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.368752][ T4256] device bridge_slave_1 entered promiscuous mode [ 71.375874][ T4262] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.383158][ T4262] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.391433][ T4262] device bridge_slave_0 entered promiscuous mode [ 71.400816][ T4255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.412887][ T4255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.419322][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.429326][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.457271][ T4262] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.464980][ T4262] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.474233][ T4262] device bridge_slave_1 entered promiscuous mode [ 71.487524][ T4251] team0: Port device team_slave_0 added [ 71.522661][ T4251] team0: Port device team_slave_1 added [ 71.530426][ T4256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.542184][ T4255] team0: Port device team_slave_0 added [ 71.574153][ T4256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.585281][ T4255] team0: Port device team_slave_1 added [ 71.593477][ T4262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.634147][ T4262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.652343][ T4263] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.659665][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.667517][ T4263] device bridge_slave_0 entered promiscuous mode [ 71.676628][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.684080][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.710304][ T4251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.740680][ T4255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.747762][ T4255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.773998][ T4255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.786891][ T4255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.794006][ T4255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.820300][ T4255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.835197][ T4263] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.842517][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.850974][ T4263] device bridge_slave_1 entered promiscuous mode [ 71.875999][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.883047][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.909328][ T4251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.927530][ T4256] team0: Port device team_slave_0 added [ 71.957695][ T4263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.967913][ T4256] team0: Port device team_slave_1 added [ 71.983779][ T4262] team0: Port device team_slave_0 added [ 71.993323][ T4262] team0: Port device team_slave_1 added [ 72.010487][ T4263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.075761][ T4262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.082980][ T4262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.109907][ T4262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.131543][ T4263] team0: Port device team_slave_0 added [ 72.141715][ T4251] device hsr_slave_0 entered promiscuous mode [ 72.148875][ T4251] device hsr_slave_1 entered promiscuous mode [ 72.156150][ T4256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.163408][ T4256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.189678][ T4256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.211138][ T4262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.218462][ T4262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.245011][ T4262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.258435][ T4263] team0: Port device team_slave_1 added [ 72.268882][ T4256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.275862][ T4256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.302092][ T4256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.317618][ T4255] device hsr_slave_0 entered promiscuous mode [ 72.324826][ T4255] device hsr_slave_1 entered promiscuous mode [ 72.331851][ T4255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.339912][ T4255] Cannot create hsr debugfs directory [ 72.369324][ T4252] Bluetooth: hci2: command 0x0409 tx timeout [ 72.378273][ T4252] Bluetooth: hci0: command 0x0409 tx timeout [ 72.411691][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.418782][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.444899][ T4263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.458202][ T4252] Bluetooth: hci1: command 0x0409 tx timeout [ 72.488599][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.495690][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.522122][ T4263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.528356][ T4252] Bluetooth: hci4: command 0x0409 tx timeout [ 72.534204][ T4257] Bluetooth: hci3: command 0x0409 tx timeout [ 72.567630][ T4256] device hsr_slave_0 entered promiscuous mode [ 72.574558][ T4256] device hsr_slave_1 entered promiscuous mode [ 72.581519][ T4256] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.589649][ T4256] Cannot create hsr debugfs directory [ 72.602840][ T4262] device hsr_slave_0 entered promiscuous mode [ 72.610011][ T4262] device hsr_slave_1 entered promiscuous mode [ 72.616598][ T4262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.624719][ T4262] Cannot create hsr debugfs directory [ 72.753554][ T4263] device hsr_slave_0 entered promiscuous mode [ 72.762748][ T4263] device hsr_slave_1 entered promiscuous mode [ 72.770568][ T4263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.778277][ T4263] Cannot create hsr debugfs directory [ 73.011851][ T4255] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.026981][ T4255] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.037437][ T4255] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.047629][ T4255] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.104665][ T4251] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.114635][ T4251] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.125022][ T4251] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.138671][ T4251] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.219566][ T4262] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.231653][ T4262] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.243191][ T4262] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.254710][ T4262] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.343922][ T4263] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.355350][ T4263] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.373832][ T4255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.401329][ T4263] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.411512][ T4263] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.434532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.445559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.487907][ T4255] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.512020][ T4251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.530610][ T4256] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.541587][ T4256] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.551943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.562013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.571935][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.579398][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.588622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.597872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.606919][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.614054][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.622777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.640183][ T4256] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.653038][ T4256] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.668825][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.677481][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.690710][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.705623][ T4251] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.732803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.753445][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.762731][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.772541][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.779901][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.802506][ T4262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.823558][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.832796][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.842171][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.851014][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.865761][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.874747][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.886070][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.897600][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.906470][ T1119] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.913679][ T1119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.934508][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.943649][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.952507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.961495][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.982049][ T4262] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.996554][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.013665][ T4255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.026762][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.039879][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.049793][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.060503][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.077439][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.088186][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.096778][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.104018][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.113703][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.142634][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.159112][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.167802][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.175023][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.197642][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.224393][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.239800][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.260427][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.268969][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.299260][ T4263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.314783][ T4256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.332926][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.344027][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.353413][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.364705][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.373884][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.382976][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.392671][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.402894][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.412419][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.423593][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.448657][ T4257] Bluetooth: hci0: command 0x041b tx timeout [ 74.448865][ T4252] Bluetooth: hci2: command 0x041b tx timeout [ 74.462379][ T4263] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.474722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.484798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.493506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.501781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.510214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.517961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.527815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.535788][ T4252] Bluetooth: hci1: command 0x041b tx timeout [ 74.535830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.559108][ T4256] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.566098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.582381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.603778][ T4255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.609660][ T4252] Bluetooth: hci4: command 0x041b tx timeout [ 74.616656][ T4252] Bluetooth: hci3: command 0x041b tx timeout [ 74.645922][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.655680][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.665097][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.672273][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.681601][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.691214][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.700818][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.710095][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.718970][ T1119] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.726150][ T1119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.734100][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.746081][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.767684][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.777492][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.786628][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.797719][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.804938][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.815610][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.830313][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.842486][ T1119] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.849671][ T1119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.910606][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.925077][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.945772][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.955056][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.966115][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.977210][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.994212][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.006678][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.026082][ T4255] device veth0_vlan entered promiscuous mode [ 75.050315][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.065592][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.076592][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.094708][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.105682][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.121276][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.134305][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.146995][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.162595][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.173101][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.182566][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.191164][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.199438][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.207290][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.223651][ T4255] device veth1_vlan entered promiscuous mode [ 75.235507][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.254988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.266820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.284131][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.325976][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.336877][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.349232][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.357853][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.368485][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.377137][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.393908][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.413934][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.426989][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.475138][ T4262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.493090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.505166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.515566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.530421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.546150][ T4255] device veth0_macvtap entered promiscuous mode [ 75.582739][ T4255] device veth1_macvtap entered promiscuous mode [ 75.606778][ T4251] device veth0_vlan entered promiscuous mode [ 75.622604][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.644473][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.665711][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.675108][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.692133][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.703848][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.732782][ T4263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.746069][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.755022][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.767774][ T4251] device veth1_vlan entered promiscuous mode [ 75.784238][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.803821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.817047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.829165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.862247][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.884857][ T4251] device veth0_macvtap entered promiscuous mode [ 75.910275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.923568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.932929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.942298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.953323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.962435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.982955][ T4255] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.998889][ T4255] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.007647][ T4255] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.020368][ T4255] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.037561][ T4251] device veth1_macvtap entered promiscuous mode [ 76.080056][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.088928][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.097861][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.126549][ T4256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.163509][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.180490][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.194011][ T4263] device veth0_vlan entered promiscuous mode [ 76.204314][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.214448][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.229595][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.241298][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.254358][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.274776][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.284022][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.293086][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.301880][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.316295][ T4263] device veth1_vlan entered promiscuous mode [ 76.345311][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.356052][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.371412][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.381586][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.390915][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.401482][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.410391][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.419315][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.468780][ T4251] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.477538][ T4251] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.489822][ T4251] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.500019][ T4251] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.529017][ T4252] Bluetooth: hci2: command 0x040f tx timeout [ 76.535103][ T4252] Bluetooth: hci0: command 0x040f tx timeout [ 76.538033][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.551102][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.560770][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.571188][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.580666][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.592276][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.600550][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.609839][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 76.632779][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.641449][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.641886][ T4256] device veth0_vlan entered promiscuous mode [ 76.671917][ T4263] device veth0_macvtap entered promiscuous mode [ 76.680956][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.689246][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 76.689444][ T4252] Bluetooth: hci4: command 0x040f tx timeout [ 76.697305][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.711299][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.723714][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.744263][ T4256] device veth1_vlan entered promiscuous mode [ 76.756053][ T4263] device veth1_macvtap entered promiscuous mode [ 76.785475][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.793968][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.803169][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.813592][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.822472][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.831032][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.848656][ T4262] device veth0_vlan entered promiscuous mode [ 76.879361][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.892159][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.902710][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.914321][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.925829][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.947073][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.960542][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.986759][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.995341][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.010595][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.020050][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.030215][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.039273][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.051813][ T4262] device veth1_vlan entered promiscuous mode [ 77.062654][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.073513][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.083589][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.095440][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.108603][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.137522][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.147617][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.156977][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.179367][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.194497][ T4256] device veth0_macvtap entered promiscuous mode [ 77.205757][ T4263] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.261364][ T4263] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.267244][ T4327] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 77.275979][ T4263] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.287866][ T4263] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.310898][ T4256] device veth1_macvtap entered promiscuous mode [ 77.329889][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.353102][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.367493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.385678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.430866][ T4262] device veth0_macvtap entered promiscuous mode [ 77.444717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.454726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.485716][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.508604][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.519520][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.531104][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.541697][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.552470][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.564320][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.574256][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.576675][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.600472][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.608123][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.619147][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.634494][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.645820][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.667795][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.679959][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.692163][ T4262] device veth1_macvtap entered promiscuous mode [ 77.708470][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.717000][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.731437][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.743888][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.754158][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.766440][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.786035][ T4256] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.801782][ T4256] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.817647][ T4256] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.826869][ T4256] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.907921][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.926778][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.937568][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.954475][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.964766][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.981993][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.993481][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.010095][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.026477][ T4262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.066737][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.076929][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.090876][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.107015][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.117922][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.129270][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.169542][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.198315][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.224940][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.246022][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.260855][ T4262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.298740][ T4339] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10'. [ 78.335666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.345930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.388808][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.393143][ T4262] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.406094][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.445999][ T4262] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.487747][ T4262] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.513627][ T4262] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.530692][ T4345] loop1: detected capacity change from 0 to 256 [ 78.542923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.555286][ T4345] ======================================================= [ 78.555286][ T4345] WARNING: The mand mount option has been deprecated and [ 78.555286][ T4345] and is ignored by this kernel. Remove the mand [ 78.555286][ T4345] option from the mount to silence this warning. [ 78.555286][ T4345] ======================================================= [ 78.608560][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 78.609902][ T4252] Bluetooth: hci0: command 0x0419 tx timeout [ 78.676621][ T4345] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x19066d23, utbl_chksum : 0xe619d30d) [ 78.692237][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.706519][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 78.733955][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.739059][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.746892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.757589][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.768228][ T48] Bluetooth: hci4: command 0x0419 tx timeout [ 78.778296][ T4252] Bluetooth: hci3: command 0x0419 tx timeout [ 78.807586][ T27] audit: type=1800 audit(1743578039.758:2): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.13" name="file1" dev="loop1" ino=1048586 res=0 errno=0 [ 78.882544][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.894499][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.938251][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.946658][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.973281][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.010317][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.030559][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.102851][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.119836][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.153360][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.550937][ T4362] loop3: detected capacity change from 0 to 1024 [ 79.889382][ T4296] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.032059][ T4374] loop3: detected capacity change from 0 to 512 [ 80.080790][ T4356] loop0: detected capacity change from 0 to 40427 [ 80.088409][ T4296] usb 5-1: Using ep0 maxpacket: 32 [ 80.100574][ T4296] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 80.124366][ T4356] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 80.138334][ T4296] usb 5-1: config 0 has no interface number 0 [ 80.146540][ T4374] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 80.162934][ T4356] F2FS-fs (loop0): invalid crc value [ 80.173818][ T4374] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.190139][ T4296] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 80.207812][ T4374] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #12: block 32: comm syz.3.23: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 80.211435][ T4356] F2FS-fs (loop0): Found nat_bits in checkpoint [ 80.239135][ T4374] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz.3.23: directory missing '.' [ 80.267465][ T4296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.286142][ T4383] misc userio: No port type given on /dev/userio [ 80.304892][ T4296] usb 5-1: Product: syz [ 80.313354][ T4296] usb 5-1: Manufacturer: syz [ 80.320035][ T4296] usb 5-1: SerialNumber: syz [ 80.362039][ T4296] usb 5-1: config 0 descriptor?? [ 80.373751][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 80.385608][ T4296] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 80.457978][ T4356] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 80.620703][ T4388] loop3: detected capacity change from 0 to 256 [ 80.629476][ T4296] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 80.677069][ T4296] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 80.774488][ T4391] Zero length message leads to an empty skb [ 80.862160][ T4388] FAT-fs (loop3): Directory bread(block 64) failed [ 80.872473][ T4256] syz-executor: attempt to access beyond end of device [ 80.872473][ T4256] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 80.887622][ T4388] FAT-fs (loop3): Directory bread(block 65) failed [ 80.904374][ T4388] FAT-fs (loop3): Directory bread(block 66) failed [ 80.924750][ T4388] FAT-fs (loop3): Directory bread(block 67) failed [ 80.957423][ T4388] FAT-fs (loop3): Directory bread(block 68) failed [ 80.978019][ T4388] FAT-fs (loop3): Directory bread(block 69) failed [ 80.986238][ T4395] process 'syz.1.31' launched './file1' with NULL argv: empty string added [ 80.995345][ T4388] FAT-fs (loop3): Directory bread(block 70) failed [ 81.038920][ T4388] FAT-fs (loop3): Directory bread(block 71) failed [ 81.055250][ T4388] FAT-fs (loop3): Directory bread(block 72) failed [ 81.065738][ T4388] FAT-fs (loop3): Directory bread(block 73) failed [ 81.118046][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 81.121303][ T4242] usb 5-1: USB disconnect, device number 2 [ 81.217642][ T4242] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 81.292642][ T4242] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 81.359710][ T4242] quatech2 5-1:0.51: device disconnected [ 81.667813][ T4363] syz.4.19 (4363) used greatest stack depth: 20056 bytes left [ 81.904848][ T4242] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.974391][ T4411] loop0: detected capacity change from 0 to 1024 [ 81.992642][ T4411] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.061727][ T4411] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 82.110312][ T4242] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 82.151149][ T4242] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.201682][ T4242] usb 3-1: Product: syz [ 82.205909][ T4242] usb 3-1: Manufacturer: syz [ 82.212920][ T4295] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 82.258006][ T4242] usb 3-1: SerialNumber: syz [ 82.305660][ T4242] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 82.399847][ T4292] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 82.439350][ T4295] usb 5-1: Using ep0 maxpacket: 16 [ 82.453787][ T4295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.456463][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 82.478271][ T4295] usb 5-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 82.497772][ T4295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.537957][ T4295] usb 5-1: config 0 descriptor?? [ 82.683773][ T4405] loop1: detected capacity change from 0 to 32768 [ 82.764688][ T4405] XFS (loop1): Mounting V5 Filesystem [ 82.814003][ T4428] loop3: detected capacity change from 0 to 64 [ 82.834695][ T4427] loop0: detected capacity change from 0 to 1024 [ 82.854498][ T4427] EXT4-fs: Ignoring removed nobh option [ 82.865106][ T4427] EXT4-fs: Ignoring removed bh option [ 82.878970][ T4427] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 82.951854][ T4427] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 82.980788][ T4295] uclogic 0003:5543:0003.0001: unknown main item tag 0x0 [ 82.989323][ T4295] uclogic 0003:5543:0003.0001: unknown main item tag 0x0 [ 82.996538][ T4295] uclogic 0003:5543:0003.0001: unknown main item tag 0x0 [ 83.004455][ T4295] uclogic 0003:5543:0003.0001: unknown main item tag 0x0 [ 83.012203][ T4295] uclogic 0003:5543:0003.0001: unknown main item tag 0x0 [ 83.021553][ T4295] uclogic 0003:5543:0003.0001: No inputs registered, leaving [ 83.035951][ T4295] uclogic 0003:5543:0003.0001: hidraw0: USB HID v0.00 Device [HID 5543:0003] on usb-dummy_hcd.4-1/input0 [ 83.088889][ T4242] usb 3-1: USB disconnect, device number 2 [ 83.102519][ T4405] XFS (loop1): Ending clean mount [ 83.236145][ T4297] usb 5-1: USB disconnect, device number 3 [ 83.289217][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 83.303883][ T4251] XFS (loop1): Unmounting Filesystem [ 83.648639][ T4292] usb 3-1: Service connection timeout for: 256 [ 83.654896][ T4292] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 83.699799][ T4292] ath9k_htc: Failed to initialize the device [ 83.707206][ T4242] usb 3-1: ath9k_htc: USB layer deinitialized [ 83.840398][ T4445] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.321465][ T4459] loop2: detected capacity change from 0 to 2048 [ 84.371991][ T4464] overlayfs: failed to set xattr on upper [ 84.443482][ T4459] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 84.591971][ T4474] loop1: detected capacity change from 0 to 64 [ 84.622609][ T27] audit: type=1800 audit(1743578045.575:3): pid=4459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.53" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 84.784679][ T4480] netlink: 16 bytes leftover after parsing attributes in process `syz.3.62'. [ 84.799460][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 85.046254][ T4485] loop3: detected capacity change from 0 to 64 [ 85.070626][ T4486] Illegal XDP return value 72949760 on prog (id 8) dev N/A, expect packet loss! [ 85.261923][ T4488] loop2: detected capacity change from 0 to 256 [ 85.354628][ T4488] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 85.653633][ T4476] loop4: detected capacity change from 0 to 32768 [ 85.698968][ T4478] loop0: detected capacity change from 0 to 32768 [ 85.794918][ T4476] XFS (loop4): Mounting V5 Filesystem [ 85.806066][ T4478] XFS (loop0): Mounting V5 Filesystem [ 85.960384][ T4476] XFS (loop4): Ending clean mount [ 85.978743][ T4478] XFS (loop0): Ending clean mount [ 86.006044][ T4476] XFS (loop4): Quotacheck needed: Please wait. [ 86.029958][ T4478] XFS (loop0): Quotacheck needed: Please wait. [ 86.075241][ T4502] loop3: detected capacity change from 0 to 32768 [ 86.112127][ T4476] XFS (loop4): Quotacheck: Done. [ 86.157459][ T4478] XFS (loop0): Quotacheck: Done. [ 86.200168][ T4502] XFS (loop3): Mounting V5 Filesystem [ 86.223766][ T4262] XFS (loop4): Unmounting Filesystem [ 86.265384][ T4478] xfs: Unexpected value for 'discard' [ 86.307493][ T4256] XFS (loop0): Unmounting Filesystem [ 86.392633][ T4502] XFS (loop3): Ending clean mount [ 86.405857][ T4502] XFS (loop3): Quotacheck needed: Please wait. [ 86.537242][ T4502] XFS (loop3): Quotacheck: Done. [ 86.682358][ T4534] netlink: 'syz.2.77': attribute type 5 has an invalid length. [ 86.779990][ T7] cfg80211: failed to load regulatory.db [ 86.803260][ T4263] XFS (loop3): Unmounting Filesystem [ 86.957977][ T4537] netlink: 36 bytes leftover after parsing attributes in process `syz.1.79'. [ 86.995517][ T4537] device vlan0 entered promiscuous mode [ 87.176462][ T4546] syz.4.81 uses obsolete (PF_INET,SOCK_PACKET) [ 87.826677][ T4562] loop4: detected capacity change from 0 to 1024 [ 88.565802][ T4586] loop1: detected capacity change from 0 to 1024 [ 88.585071][ T4586] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.634236][ T4586] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 88.742592][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 89.237072][ T4609] loop3: detected capacity change from 0 to 128 [ 89.468544][ T4615] loop2: detected capacity change from 0 to 1024 [ 89.473029][ T27] audit: type=1326 audit(1743578050.395:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.4.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830958d169 code=0x7fc00000 [ 89.526187][ T4615] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.565571][ T27] audit: type=1326 audit(1743578050.405:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.4.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f830958d169 code=0x7fc00000 [ 89.623092][ T27] audit: type=1326 audit(1743578050.405:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.4.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830958d169 code=0x7fc00000 [ 89.647763][ T4620] capability: warning: `syz.3.111' uses deprecated v2 capabilities in a way that may be insecure [ 89.657122][ T27] audit: type=1326 audit(1743578050.405:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.4.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830958d169 code=0x7fc00000 [ 89.689054][ T4621] loop0: detected capacity change from 0 to 1024 [ 89.706508][ T27] audit: type=1326 audit(1743578050.405:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.4.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830958d169 code=0x7fc00000 [ 89.756694][ T27] audit: type=1326 audit(1743578050.405:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.4.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830958d169 code=0x7fc00000 [ 89.804256][ T27] audit: type=1326 audit(1743578050.405:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.4.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830958d169 code=0x7fc00000 [ 89.843586][ T27] audit: type=1326 audit(1743578050.405:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.4.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830958d169 code=0x7fc00000 [ 89.871720][ T27] audit: type=1326 audit(1743578050.405:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.4.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830958d169 code=0x7fc00000 [ 89.949114][ T27] audit: type=1326 audit(1743578050.405:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.4.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830958d169 code=0x7fc00000 [ 90.070572][ T27] audit: type=1326 audit(1743578050.405:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.4.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830958d169 code=0x7fc00000 [ 90.102084][ T27] audit: type=1326 audit(1743578050.405:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.4.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830958d169 code=0x7fc00000 [ 90.137157][ T27] audit: type=1326 audit(1743578050.405:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.4.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830958d169 code=0x7fc00000 [ 90.275784][ T4629] loop3: detected capacity change from 0 to 2048 [ 90.326756][ T4635] loop0: detected capacity change from 0 to 64 [ 90.368423][ T48] Bluetooth: hci4: command 0x0405 tx timeout [ 90.375252][ T4629] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 90.405265][ T4629] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.498379][ T4242] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.580912][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 90.688578][ T4242] usb 2-1: Using ep0 maxpacket: 16 [ 90.697640][ T4242] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.748266][ T4242] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 90.760223][ T4242] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 90.785002][ T4646] loop3: detected capacity change from 0 to 512 [ 90.810229][ T4242] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.814502][ T4646] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 90.848760][ T4242] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 90.856821][ T4242] usb 2-1: SerialNumber: syz [ 90.876349][ T4646] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 90.912375][ T4242] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 90.924858][ T4646] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 90.942027][ T4646] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 90.992926][ T4242] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 91.026745][ T4646] System zones: 0-2, 18-18, 34-34 [ 91.086252][ T4646] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 91.129014][ T4659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.127'. [ 91.132814][ T4295] usb 2-1: USB disconnect, device number 2 [ 91.160865][ T4646] EXT4-fs (loop3): 1 truncate cleaned up [ 91.166754][ T4646] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 91.184605][ T4659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.127'. [ 91.337186][ T4661] loop0: detected capacity change from 0 to 1024 [ 91.379209][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 91.736590][ T4670] netlink: 'syz.3.135': attribute type 25 has an invalid length. [ 91.798256][ T4670] netlink: 20 bytes leftover after parsing attributes in process `syz.3.135'. [ 91.940274][ T4676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.137'. [ 92.038370][ T4242] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.235683][ T4682] serio: Serial port ptm0 [ 92.248398][ T4242] usb 1-1: Using ep0 maxpacket: 16 [ 92.265259][ T4242] usb 1-1: config 0 interface 0 has no altsetting 0 [ 92.281276][ T4242] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 92.301357][ T4242] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.317783][ T4242] usb 1-1: config 0 descriptor?? [ 92.743758][ T4242] hid (null): global environment stack underflow [ 92.990077][ T4242] usb 1-1: USB disconnect, device number 2 [ 93.275988][ T4707] device dummy0 entered promiscuous mode [ 93.295758][ T4707] device dummy0 left promiscuous mode [ 93.696407][ T4702] loop3: detected capacity change from 0 to 32768 [ 93.873600][ T4729] loop2: detected capacity change from 0 to 256 [ 93.878160][ T4702] XFS (loop3): Mounting V5 Filesystem [ 93.920140][ T4729] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 93.962148][ T4737] loop4: detected capacity change from 0 to 256 [ 94.007543][ T4702] XFS (loop3): Ending clean mount [ 94.064994][ T4737] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 94.249262][ T4263] XFS (loop3): Unmounting Filesystem [ 94.686681][ T4746] loop2: detected capacity change from 0 to 4096 [ 94.694153][ T4727] loop1: detected capacity change from 0 to 40427 [ 94.745645][ T4727] F2FS-fs (loop1): invalid crc value [ 94.815348][ T4727] F2FS-fs (loop1): Found nat_bits in checkpoint [ 95.058317][ T4727] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 95.082636][ T4756] loop4: detected capacity change from 0 to 1024 [ 95.143972][ T4756] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 95.206329][ T4756] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002] [ 95.238254][ T4756] System zones: 0-1, 3-36 [ 95.243827][ T4756] EXT4-fs (loop4): orphan cleanup on readonly fs [ 95.292448][ T4756] EXT4-fs (loop4): 1 orphan inode deleted [ 95.305591][ T4756] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 95.328535][ T4251] syz-executor: attempt to access beyond end of device [ 95.328535][ T4251] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 95.434138][ T4756] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002] [ 95.548507][ T4756] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 95.567162][ T4756] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:511: comm syz.4.169: Block bitmap for bg 0 marked uninitialized [ 95.719924][ T4262] EXT4-fs (loop4): unmounting filesystem. [ 96.530705][ T4776] mmap: syz.0.179 (4776) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 97.170621][ T4801] loop1: detected capacity change from 0 to 128 [ 97.238844][ T4801] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 97.326348][ T27] kauditd_printk_skb: 87 callbacks suppressed [ 97.326364][ T27] audit: type=1326 audit(1743578059.276:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4804 comm="syz.0.190" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90b0d8d169 code=0x0 [ 97.435791][ T4251] sysv_free_block: flc_count > flc_size [ 97.459551][ T4251] sysv_free_block: flc_count > flc_size [ 97.465270][ T4251] sysv_free_block: flc_count > flc_size [ 97.491504][ T4251] sysv_free_block: flc_count > flc_size [ 97.497130][ T4251] sysv_free_block: flc_count > flc_size [ 97.513179][ T4251] sysv_free_block: flc_count > flc_size [ 97.519017][ T4251] sysv_free_block: flc_count > flc_size [ 97.524878][ T4251] sysv_free_block: flc_count > flc_size [ 97.530693][ T4251] sysv_free_block: flc_count > flc_size [ 97.536430][ T4251] sysv_free_block: flc_count > flc_size [ 97.544558][ T4251] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 97.824852][ T4817] tap0: tun_chr_ioctl cmd 1074025677 [ 97.833999][ T4817] tap0: linktype set to 65534 [ 98.008645][ T4827] loop1: detected capacity change from 0 to 1024 [ 98.391310][ T4525] hfsplus: b-tree write err: -5, ino 4 [ 98.409071][ T4839] can0: slcan on ttyS3. [ 98.545690][ T4839] can0 (unregistered): slcan off ttyS3. [ 99.550415][ T4834] loop3: detected capacity change from 0 to 40427 [ 99.645015][ T4842] loop0: detected capacity change from 0 to 32768 [ 99.668155][ T4834] F2FS-fs (loop3): Found nat_bits in checkpoint [ 99.766270][ T4834] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 99.813849][ T4842] XFS (loop0): Mounting V5 Filesystem [ 99.954795][ T4842] XFS (loop0): Ending clean mount [ 100.020618][ T4842] XFS (loop0): Quotacheck needed: Please wait. [ 100.031978][ T4834] syz.3.202: attempt to access beyond end of device [ 100.031978][ T4834] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 100.108319][ T4842] XFS (loop0): Quotacheck: Done. [ 100.246098][ T4263] syz-executor: attempt to access beyond end of device [ 100.246098][ T4263] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 100.356386][ T4256] XFS (loop0): Unmounting Filesystem [ 101.162519][ T4908] loop4: detected capacity change from 0 to 128 [ 101.370112][ T4891] loop1: detected capacity change from 0 to 32768 [ 101.419059][ T4891] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.215 (4891) [ 101.538452][ T4891] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 101.600145][ T4891] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 101.647292][ T4891] BTRFS info (device loop1): turning on async discard [ 101.683327][ T4891] BTRFS info (device loop1): use no compression [ 101.695980][ T4921] ALSA: mixer_oss: invalid OSS volume '' [ 101.705114][ T4891] BTRFS info (device loop1): turning on sync discard [ 101.728452][ T4891] BTRFS info (device loop1): force clearing of disk cache [ 101.756255][ T4891] BTRFS info (device loop1): enabling auto defrag [ 101.818213][ T4891] BTRFS info (device loop1): disabling free space tree [ 102.188678][ T4891] BTRFS info (device loop1): enabling ssd optimizations [ 102.234356][ T4891] BTRFS info (device loop1): rebuilding free space tree [ 102.342516][ T4891] BTRFS info (device loop1): disabling free space tree [ 102.351302][ T4891] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 102.408281][ T4891] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 102.593265][ T4966] loop0: detected capacity change from 0 to 512 [ 102.709419][ T4966] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 102.758265][ T4966] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.902559][ T27] audit: type=1800 audit(1743578064.856:105): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.235" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 103.025046][ T27] audit: type=1800 audit(1743578064.856:106): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.235" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 103.118301][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 103.183818][ T4251] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 103.890350][ T5003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.249'. [ 104.535263][ T5017] loop4: detected capacity change from 0 to 2048 [ 104.624017][ T5017] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.052070][ T5014] loop2: detected capacity change from 0 to 32768 [ 105.194379][ T5014] ERROR: (device loop2): jfs_readdir: DT_GETPAGE: dtree page corrupt [ 105.194379][ T5014] [ 105.256933][ T5014] ERROR: (device loop2): remounting filesystem as read-only [ 105.978372][ T5047] loop4: detected capacity change from 0 to 512 [ 106.134278][ T5047] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 106.202492][ T5047] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.286574][ T5038] loop1: detected capacity change from 0 to 32768 [ 106.323862][ T5047] EXT4-fs: Cannot change journaled quota options when quota turned on [ 106.384150][ T5038] XFS (loop1): Mounting V5 Filesystem [ 106.405315][ T4262] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 106.473479][ T4262] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 106.524415][ T5038] XFS (loop1): Ending clean mount [ 106.549915][ T5038] XFS (loop1): Quotacheck needed: Please wait. [ 106.654252][ T5038] XFS (loop1): Quotacheck: Done. [ 106.990916][ T4251] XFS (loop1): Unmounting Filesystem [ 107.060226][ T4262] EXT4-fs (loop4): unmounting filesystem. [ 107.221689][ T5082] loop0: detected capacity change from 0 to 128 [ 107.222026][ T5083] loop3: detected capacity change from 0 to 64 [ 107.345336][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.595880][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.757617][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.866976][ T5088] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.876598][ T5090] input: syz0 as /devices/virtual/input/input5 [ 108.010890][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.320015][ T5079] loop2: detected capacity change from 0 to 40427 [ 108.393712][ T5079] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 108.420320][ T4297] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.469153][ T5079] F2FS-fs (loop2): invalid crc value [ 108.506947][ T5079] F2FS-fs (loop2): Found nat_bits in checkpoint [ 108.638162][ T4297] usb 4-1: Using ep0 maxpacket: 8 [ 108.645623][ T4297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.671215][ T5079] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 108.698235][ T4297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.729873][ T4252] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 108.741074][ T4252] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 108.741074][ T4297] usb 4-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 108.741104][ T4297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.767281][ T4252] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 108.779243][ T4252] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 108.786990][ T4252] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 108.803553][ T4252] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.880185][ T5079] syz.2.278: attempt to access beyond end of device [ 108.880185][ T5079] loop2: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 108.967598][ T4297] usb 4-1: config 0 descriptor?? [ 109.143859][ T5114] loop1: detected capacity change from 0 to 1024 [ 109.155902][ T4255] syz-executor: attempt to access beyond end of device [ 109.155902][ T4255] loop2: rw=2049, sector=45224, nr_sectors = 8 limit=40427 [ 109.245307][ T5114] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 109.374573][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 109.413165][ T4297] playstation 0003:054C:0CE6.0003: unknown main item tag 0x0 [ 109.448196][ T4297] playstation 0003:054C:0CE6.0003: unknown main item tag 0x0 [ 109.457892][ T4297] playstation 0003:054C:0CE6.0003: unknown main item tag 0x0 [ 109.466966][ T4297] playstation 0003:054C:0CE6.0003: unknown main item tag 0x0 [ 109.481534][ T4297] playstation 0003:054C:0CE6.0003: unknown main item tag 0x0 [ 109.504541][ T4297] playstation 0003:054C:0CE6.0003: unknown main item tag 0x0 [ 109.533239][ T4297] playstation 0003:054C:0CE6.0003: unknown main item tag 0x0 [ 109.573445][ T4297] playstation 0003:054C:0CE6.0003: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.3-1/input0 [ 109.706591][ T4297] playstation 0003:054C:0CE6.0003: Invalid reportID received, expected 9 got 119 [ 109.766020][ T4297] playstation 0003:054C:0CE6.0003: Failed to retrieve DualSense pairing info: -22 [ 109.818578][ T4297] playstation 0003:054C:0CE6.0003: Failed to get MAC address from DualSense [ 109.878359][ T4297] playstation 0003:054C:0CE6.0003: Failed to create dualsense. [ 109.953781][ T4297] playstation: probe of 0003:054C:0CE6.0003 failed with error -22 [ 110.025575][ T4297] usb 4-1: USB disconnect, device number 2 [ 110.222458][ T5117] loop0: detected capacity change from 0 to 32768 [ 110.258606][ T5117] XFS: ikeep mount option is deprecated. [ 110.280453][ T5117] XFS: noikeep mount option is deprecated. [ 110.383702][ T5105] chnl_net:caif_netlink_parms(): no params data found [ 110.394933][ T5117] XFS (loop0): Mounting V5 Filesystem [ 110.604864][ T5117] XFS (loop0): Ending clean mount [ 110.667475][ T5117] XFS (loop0): Quotacheck needed: Please wait. [ 110.726741][ T5117] XFS (loop0): Quotacheck: Done. [ 110.858234][ T4252] Bluetooth: hci3: command 0x0409 tx timeout [ 110.921258][ T4256] XFS (loop0): Unmounting Filesystem [ 110.931476][ T11] device hsr_slave_0 left promiscuous mode [ 110.962841][ T11] device hsr_slave_1 left promiscuous mode [ 111.008735][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.097038][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.162051][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.193902][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.231711][ T11] device bridge_slave_1 left promiscuous mode [ 111.254586][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.304579][ T11] device bridge_slave_0 left promiscuous mode [ 111.317884][ T5169] loop1: detected capacity change from 0 to 512 [ 111.339527][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.463805][ T5169] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 111.484309][ T5169] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.531613][ T11] device veth1_macvtap left promiscuous mode [ 111.563279][ T11] device veth0_macvtap left promiscuous mode [ 111.578664][ T5169] EXT4-fs error (device loop1): ext4_get_first_dir_block:3591: inode #12: block 32: comm syz.1.304: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 111.615135][ T11] device veth1_vlan left promiscuous mode [ 111.621348][ T11] device veth0_vlan left promiscuous mode [ 111.714153][ T5169] EXT4-fs error (device loop1): ext4_get_first_dir_block:3594: inode #12: comm syz.1.304: directory missing '.' [ 111.857936][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 112.737411][ T5201] fuse: Invalid user_id [ 112.938334][ T4252] Bluetooth: hci3: command 0x041b tx timeout [ 113.312714][ T11] team0 (unregistering): Port device team_slave_1 removed [ 113.451705][ T11] team0 (unregistering): Port device team_slave_0 removed [ 113.497877][ T5215] loop2: detected capacity change from 0 to 2048 [ 113.537299][ T5215] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 113.561174][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.586057][ T5215] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 113.607274][ T5215] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 113.620150][ T5215] EXT4-fs (loop2): This should not happen!! Data will be lost [ 113.620150][ T5215] [ 113.631603][ T5215] EXT4-fs (loop2): Total free blocks count 0 [ 113.640032][ T5215] EXT4-fs (loop2): Free/Dirty block details [ 113.649325][ T5215] EXT4-fs (loop2): free_blocks=2415919504 [ 113.655240][ T5215] EXT4-fs (loop2): dirty_blocks=16 [ 113.661096][ T5215] EXT4-fs (loop2): Block reservation details [ 113.667653][ T5215] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 113.745723][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.749459][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 114.322148][ T11] bond0 (unregistering): Released all slaves [ 114.454647][ T5105] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.530719][ T5105] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.563119][ T5105] device bridge_slave_0 entered promiscuous mode [ 114.650915][ T5105] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.673222][ T5105] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.699419][ T5105] device bridge_slave_1 entered promiscuous mode [ 114.846600][ T5105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.874640][ T5105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.008401][ T4252] Bluetooth: hci3: command 0x040f tx timeout [ 115.082712][ T5105] team0: Port device team_slave_0 added [ 115.172132][ T5105] team0: Port device team_slave_1 added [ 115.212641][ T5246] loop2: detected capacity change from 0 to 512 [ 115.261837][ T5246] EXT4-fs (loop2): Test dummy encryption mode enabled [ 115.305525][ T5105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.343368][ T5246] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 115.349148][ T5105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.382416][ T5246] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 115.405628][ T5246] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002] [ 115.421999][ T5246] System zones: 1-12 [ 115.435053][ T5246] EXT4-fs (loop2): 1 truncate cleaned up [ 115.444818][ T5246] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 115.482304][ T5105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.549230][ T5105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.556239][ T5105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.661464][ T5105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.674962][ T4296] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 115.760017][ T5234] loop3: detected capacity change from 0 to 32768 [ 115.833261][ T5234] [ 115.833261][ T5234] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.833261][ T5234] [ 115.857295][ T5105] device hsr_slave_0 entered promiscuous mode [ 115.872747][ T4296] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 115.894135][ T4296] usb 2-1: New USB device found, idVendor=1b96, idProduct=0007, bcdDevice= 0.00 [ 115.913609][ T4296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.942287][ T5105] device hsr_slave_1 entered promiscuous mode [ 115.963887][ T4296] usb 2-1: config 0 descriptor?? [ 115.986200][ T5105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.998211][ T5105] Cannot create hsr debugfs directory [ 116.013894][ T5234] ERROR: (device loop3): diWrite: ixpxd invalid [ 116.013894][ T5234] [ 116.081054][ T5234] ERROR: (device loop3): txCommit: [ 116.081054][ T5234] [ 116.262846][ T5246] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 116.278998][ T4263] [ 116.278998][ T4263] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 116.278998][ T4263] [ 116.315413][ T4263] [ 116.315413][ T4263] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 116.315413][ T4263] [ 116.391749][ T4296] ntrig 0003:1B96:0007.0004: unknown main item tag 0x0 [ 116.429733][ T4296] ntrig 0003:1B96:0007.0004: unknown main item tag 0x0 [ 116.457380][ T4296] ntrig 0003:1B96:0007.0004: unknown main item tag 0x0 [ 116.477624][ T4296] ntrig 0003:1B96:0007.0004: unknown main item tag 0x0 [ 116.498789][ T4296] ntrig 0003:1B96:0007.0004: unknown main item tag 0x0 [ 116.523364][ T4296] ntrig 0003:1B96:0007.0004: unknown main item tag 0x0 [ 116.542001][ T4296] ntrig 0003:1B96:0007.0004: unknown main item tag 0x0 [ 116.577971][ T4296] ntrig 0003:1B96:0007.0004: hidraw0: USB HID vff.fc Device [HID 1b96:0007] on usb-dummy_hcd.1-1/input0 [ 116.579150][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 116.604399][ T4296] ntrig 0003:1B96:0007.0004: Firmware version: 7.1.10.5.5 (451f b558) [ 116.624167][ T5105] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 116.690626][ T5105] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 116.739370][ T5105] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 116.783487][ T5105] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 116.817374][ T4296] usb 2-1: USB disconnect, device number 3 [ 117.078832][ T5105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.098176][ T4252] Bluetooth: hci3: command 0x0419 tx timeout [ 117.174597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.209840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.222992][ T5105] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.264470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.283715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.300767][ T5290] loop3: detected capacity change from 0 to 128 [ 117.314800][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.322021][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.344765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 117.372714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.407019][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.414251][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.472288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 117.514397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 117.577682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 117.626096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 117.662422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 117.700935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 117.759702][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 117.781372][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 117.854715][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 117.895689][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 117.918995][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 117.959147][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 117.986533][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 118.382424][ T5325] netlink: 24 bytes leftover after parsing attributes in process `syz.1.348'. [ 118.395051][ T5321] loop2: detected capacity change from 0 to 8192 [ 118.459495][ T5321] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 118.491304][ T5321] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 118.501942][ T5321] REISERFS (device loop2): using ordered data mode [ 118.508879][ T5321] reiserfs: using flush barriers [ 118.524212][ T5321] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 118.542889][ T5321] REISERFS (device loop2): checking transaction log (loop2) [ 118.562836][ T5321] REISERFS (device loop2): Using r5 hash to sort names [ 118.583173][ T5321] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 118.607679][ T5321] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 118.736815][ T5105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.805875][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.821519][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.231100][ T5351] loop0: detected capacity change from 0 to 64 [ 119.980633][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 119.999199][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.055033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 120.079495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.133932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.148982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.212343][ T5105] device veth0_vlan entered promiscuous mode [ 120.254438][ T5105] device veth1_vlan entered promiscuous mode [ 120.326327][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 120.346332][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 120.373392][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 120.388187][ T4997] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 120.404111][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.432252][ T5105] device veth0_macvtap entered promiscuous mode [ 120.452730][ T5354] loop2: detected capacity change from 0 to 32768 [ 120.459934][ T5105] device veth1_macvtap entered promiscuous mode [ 120.470289][ T5354] XFS (loop2): Invalid device [./file0], error=-15 [ 120.531496][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.558207][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.588213][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.601311][ T4997] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.624858][ T4997] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 120.644866][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.666304][ T4997] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.674610][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.689445][ T4997] usb 4-1: Product: syz [ 120.693678][ T4997] usb 4-1: Manufacturer: syz [ 120.710031][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.725697][ T4997] usb 4-1: SerialNumber: syz [ 120.751736][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.762452][ T4997] usb 4-1: config 0 descriptor?? [ 120.776093][ T4997] ati_remote 4-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 120.788211][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.814769][ T5105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.830199][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 120.844866][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 120.883471][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 120.912436][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.961754][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.997592][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.012607][ T4242] usb 4-1: USB disconnect, device number 3 [ 121.027103][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.072467][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.098562][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.115301][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.126448][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.144053][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.174834][ T5105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.205868][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 121.233376][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.281796][ T5105] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.308300][ T5105] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.323756][ T5105] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.341582][ T5105] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.499931][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.520773][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.572400][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 121.597328][ T4316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.616134][ T4316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.687410][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 122.074956][ T5419] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 122.155609][ T5419] overlayfs: overlapping lowerdir path [ 122.276773][ T5424] loop3: detected capacity change from 0 to 1024 [ 122.321250][ T5402] loop0: detected capacity change from 0 to 32768 [ 122.481007][ T5402] XFS (loop0): Mounting V5 Filesystem [ 122.540250][ T4316] hfsplus: b-tree write err: -5, ino 4 [ 122.655333][ T5402] XFS (loop0): Ending clean mount [ 122.847174][ T4256] XFS (loop0): Unmounting Filesystem [ 123.244213][ T5421] loop5: detected capacity change from 0 to 32768 [ 123.323352][ T5421] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.371 (5421) [ 123.438124][ T5421] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 123.478294][ T5421] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 123.524033][ T5421] BTRFS info (device loop5): force clearing of disk cache [ 123.579471][ T5461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.381'. [ 123.603952][ T5421] BTRFS info (device loop5): setting nodatacow, compression disabled [ 123.620508][ T5421] BTRFS info (device loop5): enabling auto defrag [ 123.627301][ T5421] BTRFS info (device loop5): max_inline at 0 [ 123.678105][ T5421] BTRFS info (device loop5): enabling disk space caching [ 123.685215][ T5421] BTRFS info (device loop5): disk space caching is enabled [ 123.871281][ T5473] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 123.878567][ T5473] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 123.888915][ T5473] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 123.896806][ T5473] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 123.905471][ T5473] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 123.911955][ T5473] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 123.920235][ T5473] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 123.926901][ T5473] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 123.936153][ T5473] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 123.942648][ T5473] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 123.990514][ T5421] BTRFS info (device loop5): enabling ssd optimizations [ 124.015964][ T5421] BTRFS info (device loop5): rebuilding free space tree [ 124.133029][ T5421] BTRFS info (device loop5): disabling free space tree [ 124.154673][ T5421] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 124.208551][ T5421] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 124.313540][ T5489] loop1: detected capacity change from 0 to 1024 [ 124.481190][ T27] audit: type=1800 audit(1743578086.436:107): pid=5421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.371" name="file2" dev="loop5" ino=261 res=0 errno=0 [ 124.694321][ T5454] loop2: detected capacity change from 0 to 32768 [ 124.781852][ T5489] loop1: detected capacity change from 0 to 4096 [ 124.858607][ T5454] XFS (loop2): Mounting V5 Filesystem [ 124.877235][ T5105] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 125.096960][ T5454] XFS (loop2): Ending clean mount [ 125.362336][ T5454] XFS (loop2): Quotacheck needed: Please wait. [ 125.453124][ T4997] kernel write not supported for file /amidi2 (pid: 4997 comm: kworker/0:15) [ 125.491510][ T5454] XFS (loop2): Quotacheck: Done. [ 125.781135][ T4255] XFS (loop2): Unmounting Filesystem [ 126.378321][ T5549] loop5: detected capacity change from 0 to 1024 [ 126.419620][ T5549] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 126.489811][ T5549] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 126.767226][ T5105] EXT4-fs (loop5): unmounting filesystem. [ 126.878553][ T129] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 127.078583][ T129] usb 1-1: Using ep0 maxpacket: 16 [ 127.087448][ T129] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 127.106458][ T129] usb 1-1: config 0 has no interface number 0 [ 127.121895][ T129] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 127.158574][ T129] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 127.175896][ T5572] loop5: detected capacity change from 0 to 1024 [ 127.199679][ T129] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 127.237933][ T5572] EXT4-fs: Ignoring removed orlov option [ 127.247359][ T5572] EXT4-fs: Ignoring removed orlov option [ 127.249790][ T129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.292291][ T129] usb 1-1: Product: syz [ 127.302435][ T129] usb 1-1: Manufacturer: syz [ 127.307279][ T129] usb 1-1: SerialNumber: syz [ 127.330277][ T5572] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 127.355166][ T129] usb 1-1: config 0 descriptor?? [ 127.375445][ T5556] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 127.395108][ T5556] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 127.488139][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 127.525038][ T5579] loop3: detected capacity change from 0 to 4096 [ 127.643931][ T5556] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 127.688449][ T5556] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 127.702078][ T5105] EXT4-fs (loop5): unmounting filesystem. [ 128.234940][ T5567] loop2: detected capacity change from 0 to 32768 [ 128.308274][ T129] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 128.343530][ T129] asix 1-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 128.355443][ T5567] ialloc: diAlloc returned -5! [ 128.375465][ T129] asix: probe of 1-1:0.251 failed with error -71 [ 128.415711][ T129] usb 1-1: USB disconnect, device number 3 [ 129.222666][ T5627] loop1: detected capacity change from 0 to 22 [ 129.281118][ T5629] netlink: 56 bytes leftover after parsing attributes in process `syz.2.421'. [ 129.288490][ T5627] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 129.318010][ T5627] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 129.670974][ T5638] block nbd2: shutting down sockets [ 130.253309][ T5657] loop5: detected capacity change from 0 to 512 [ 130.334816][ T5657] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.442: inode #1: comm syz.5.442: iget: illegal inode # [ 130.388226][ T5657] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.442: error while reading EA inode 1 err=-117 [ 130.411141][ T5657] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 130.476825][ T5657] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.442: inode #1: comm syz.5.442: iget: illegal inode # [ 130.498678][ T5657] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.442: error while reading EA inode 1 err=-117 [ 130.518213][ T5657] EXT4-fs (loop5): 1 orphan inode deleted [ 130.524312][ T5657] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 130.659097][ T5105] EXT4-fs (loop5): unmounting filesystem. [ 130.753796][ T5674] loop5: detected capacity change from 0 to 8 [ 131.315856][ T5685] loop3: detected capacity change from 0 to 8192 [ 131.365419][ T5685] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 131.386534][ T5685] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 131.388493][ T4997] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 131.396105][ T5685] REISERFS (device loop3): using ordered data mode [ 131.410372][ T5685] reiserfs: using flush barriers [ 131.416881][ T5685] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 131.438705][ T5685] REISERFS (device loop3): checking transaction log (loop3) [ 131.460808][ T5685] REISERFS (device loop3): Using r5 hash to sort names [ 131.473453][ T5685] REISERFS (device loop3): using 3.5.x disk format [ 131.482426][ T5685] REISERFS warning (device loop3): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 131.496981][ T5685] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 131.676322][ T4997] usb 6-1: config 0 interface 0 altsetting 183 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 131.697983][ T4997] usb 6-1: config 0 interface 0 altsetting 183 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.757149][ T4997] usb 6-1: config 0 interface 0 has no altsetting 0 [ 131.785483][ T4997] usb 6-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.00 [ 131.817673][ T4997] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.837232][ T4997] usb 6-1: config 0 descriptor?? [ 131.877221][ T4997] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input7 [ 131.888391][ T5700] netem: incorrect gi model size [ 131.919314][ T5700] netem: change failed [ 132.070187][ T3608] bcm5974 6-1:0.0: could not read from device [ 132.093452][ T3608] bcm5974 6-1:0.0: could not read from device [ 132.104115][ T4997] usb 6-1: USB disconnect, device number 2 [ 132.133658][ T3608] bcm5974 6-1:0.0: could not read from device [ 132.220636][ T5709] loop1: detected capacity change from 0 to 512 [ 132.238196][ T4995] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 132.305070][ T5709] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.464: inode #1: comm syz.1.464: iget: illegal inode # [ 132.341531][ T5709] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.464: error while reading EA inode 1 err=-117 [ 132.374099][ T5709] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.464: inode #1: comm syz.1.464: iget: illegal inode # [ 132.389810][ T5709] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.464: error while reading EA inode 1 err=-117 [ 132.403807][ T5709] EXT4-fs (loop1): 1 orphan inode deleted [ 132.409857][ T5709] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 132.425458][ T5714] loop0: detected capacity change from 0 to 512 [ 132.460981][ T4995] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.476373][ T5714] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 132.485766][ T4995] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.499480][ T5714] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 132.511199][ T4995] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 132.538213][ T4995] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 132.557629][ T4995] usb 4-1: SerialNumber: syz [ 132.568239][ T5714] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 132.598945][ T5714] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0102] [ 132.608618][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 132.615116][ T5714] System zones: 0-2, 18-18, 34-34 [ 132.625575][ T5714] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 132.679071][ T5714] EXT4-fs (loop0): 1 truncate cleaned up [ 132.685652][ T5714] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 132.790435][ T27] audit: type=1800 audit(1743578094.746:108): pid=5714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.467" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 132.816320][ T4995] usb 4-1: 0:2 : does not exist [ 132.854080][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.860476][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.923284][ T4995] usb 4-1: USB disconnect, device number 4 [ 132.934433][ T27] audit: type=1800 audit(1743578094.756:109): pid=5714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.467" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 133.010153][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 133.253604][ T4245] udevd[4245]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.373925][ T5716] loop2: detected capacity change from 0 to 32768 [ 133.375212][ T5731] loop1: detected capacity change from 0 to 8192 [ 133.465873][ T5731] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 133.507278][ T5731] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 133.516507][ T5716] XFS (loop2): Mounting V5 Filesystem [ 133.537279][ T5743] loop5: detected capacity change from 0 to 1024 [ 133.545224][ T5731] REISERFS (device loop1): using ordered data mode [ 133.554886][ T5731] reiserfs: using flush barriers [ 133.568491][ T5731] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 133.596456][ T5731] REISERFS (device loop1): checking transaction log (loop1) [ 133.612660][ T5731] REISERFS (device loop1): Using r5 hash to sort names [ 133.620428][ T5731] REISERFS (device loop1): using 3.5.x disk format [ 133.627667][ T5731] REISERFS warning (device loop1): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 133.650307][ T5731] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 133.726850][ T5716] XFS (loop2): Ending clean mount [ 133.811324][ T4316] hfsplus: b-tree write err: -5, ino 4 [ 133.875862][ T4255] XFS (loop2): Unmounting Filesystem [ 134.520025][ T5767] program syz.1.483 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.026311][ T5751] loop5: detected capacity change from 0 to 32768 [ 135.041102][ T5751] XFS: ikeep mount option is deprecated. [ 135.056429][ T5751] XFS: noikeep mount option is deprecated. [ 135.106051][ T5751] XFS (loop5): Mounting V5 Filesystem [ 135.171826][ T5751] XFS (loop5): Ending clean mount [ 135.184996][ T5751] XFS (loop5): Quotacheck needed: Please wait. [ 135.233741][ T5751] XFS (loop5): Quotacheck: Done. [ 135.384120][ T5105] XFS (loop5): Unmounting Filesystem [ 135.489104][ T5793] loop3: detected capacity change from 0 to 1024 [ 135.642039][ T4316] hfsplus: b-tree write err: -5, ino 4 [ 135.738325][ T4296] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 135.939592][ T4296] usb 2-1: Using ep0 maxpacket: 16 [ 135.956723][ T4296] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 135.987055][ T4296] usb 2-1: config 0 has no interface number 0 [ 136.006941][ T4296] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 136.032635][ T4296] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 136.075936][ T4296] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 136.106129][ T4296] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.128491][ T4296] usb 2-1: Product: syz [ 136.132743][ T4296] usb 2-1: Manufacturer: syz [ 136.137378][ T4296] usb 2-1: SerialNumber: syz [ 136.159424][ T4296] usb 2-1: config 0 descriptor?? [ 136.167168][ T5792] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 136.168237][ T4997] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 136.191829][ T5792] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 136.234433][ T5805] loop5: detected capacity change from 0 to 8192 [ 136.256537][ T5805] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 136.278341][ T5805] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 136.298347][ T5805] REISERFS (device loop5): using ordered data mode [ 136.305002][ T5805] reiserfs: using flush barriers [ 136.320621][ T5805] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 136.337799][ T5805] REISERFS (device loop5): checking transaction log (loop5) [ 136.350590][ T5805] REISERFS (device loop5): Using r5 hash to sort names [ 136.357648][ T5805] REISERFS (device loop5): using 3.5.x disk format [ 136.365439][ T5805] REISERFS warning (device loop5): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 136.382669][ T5805] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 136.408186][ T4997] usb 3-1: Using ep0 maxpacket: 8 [ 136.431213][ T5792] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 136.433511][ T4997] usb 3-1: unable to get BOS descriptor or descriptor too short [ 136.441170][ T5792] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 136.476797][ T4997] usb 3-1: no configurations [ 136.492468][ T4997] usb 3-1: can't read configurations, error -22 [ 137.089109][ T4296] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 137.134498][ T4296] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 137.176133][ T4296] asix: probe of 2-1:0.251 failed with error -71 [ 137.213794][ T4296] usb 2-1: USB disconnect, device number 4 [ 137.427394][ T5808] loop3: detected capacity change from 0 to 32768 [ 137.665261][ T5808] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 137.872398][ T5808] (syz.3.507,5808,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=16, inode=65, rec_len=16, name_len=64 [ 137.972900][ T5808] (syz.3.507,5808,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 138.003197][ T5808] (syz.3.507,5808,1):ocfs2_mknod:298 ERROR: status = -2 [ 138.023735][ T5808] (syz.3.507,5808,1):ocfs2_mknod:502 ERROR: status = -2 [ 138.074773][ T5808] (syz.3.507,5808,1):ocfs2_create:676 ERROR: status = -2 [ 138.233528][ T4263] ocfs2: Unmounting device (7,3) on (node local) [ 138.509553][ T5846] loop5: detected capacity change from 0 to 2048 [ 138.521727][ T5847] loop1: detected capacity change from 0 to 1024 [ 138.571594][ T5846] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.740771][ T5829] loop2: detected capacity change from 0 to 32768 [ 138.747931][ T5829] XFS: ikeep mount option is deprecated. [ 138.780706][ T75] hfsplus: b-tree write err: -5, ino 4 [ 138.825936][ T5829] XFS: noikeep mount option is deprecated. [ 139.034670][ T5829] XFS (loop2): Mounting V5 Filesystem [ 139.142525][ T5829] XFS (loop2): Ending clean mount [ 139.181670][ T5829] XFS (loop2): Quotacheck needed: Please wait. [ 139.221452][ T4997] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 139.316450][ T5875] loop5: detected capacity change from 0 to 256 [ 139.326031][ T5829] XFS (loop2): Quotacheck: Done. [ 139.440865][ T4997] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.448744][ T5875] FAT-fs (loop5): Directory bread(block 64) failed [ 139.458383][ T5880] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 139.461498][ T4997] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.497383][ T5875] FAT-fs (loop5): Directory bread(block 65) failed [ 139.512440][ T5875] FAT-fs (loop5): Directory bread(block 66) failed [ 139.532271][ T5875] FAT-fs (loop5): Directory bread(block 67) failed [ 139.540931][ T4997] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 139.541756][ T5875] FAT-fs (loop5): Directory bread(block 68) failed [ 139.568544][ T4997] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 139.570290][ T5880] overlayfs: overlapping lowerdir path [ 139.582301][ T4255] XFS (loop2): Unmounting Filesystem [ 139.590089][ T4997] usb 2-1: SerialNumber: syz [ 139.604903][ T5875] FAT-fs (loop5): Directory bread(block 69) failed [ 139.618690][ T5875] FAT-fs (loop5): Directory bread(block 70) failed [ 139.642585][ T5875] FAT-fs (loop5): Directory bread(block 71) failed [ 139.681843][ T5875] FAT-fs (loop5): Directory bread(block 72) failed [ 139.699802][ T5875] FAT-fs (loop5): Directory bread(block 73) failed [ 139.821176][ T4997] usb 2-1: 0:2 : does not exist [ 139.876222][ T4997] usb 2-1: USB disconnect, device number 5 [ 140.166895][ T4245] udevd[4245]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.397216][ T5900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.515'. [ 141.721626][ T5906] loop1: detected capacity change from 0 to 32768 [ 141.770320][ T5906] [ 141.770320][ T5906] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 141.770320][ T5906] [ 141.849669][ T5906] ERROR: (device loop1): diWrite: ixpxd invalid [ 141.849669][ T5906] [ 141.899364][ T5906] ERROR: (device loop1): txCommit: [ 141.899364][ T5906] [ 142.165932][ T4251] [ 142.165932][ T4251] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 142.165932][ T4251] [ 142.188285][ T4251] [ 142.188285][ T4251] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 142.188285][ T4251] [ 142.648350][ T4297] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 142.798976][ T5934] loop3: detected capacity change from 0 to 32768 [ 142.832471][ T5934] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.526 (5934) [ 142.847345][ T4297] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 142.873021][ T4297] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 142.926743][ T4297] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 142.948723][ T5934] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 142.980232][ T4297] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.008197][ T5934] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 143.040671][ T5944] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 143.047500][ T5934] BTRFS info (device loop3): force clearing of disk cache [ 143.074065][ T5934] BTRFS info (device loop3): setting nodatacow, compression disabled [ 143.121553][ T5934] BTRFS info (device loop3): enabling auto defrag [ 143.172018][ T5934] BTRFS info (device loop3): max_inline at 0 [ 143.210919][ T5934] BTRFS info (device loop3): enabling disk space caching [ 143.268205][ T5934] BTRFS info (device loop3): disk space caching is enabled [ 143.352297][ T5971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.536'. [ 143.378302][ T5971] bridge: RTM_NEWNEIGH with invalid ether address [ 143.402746][ T4997] usb 6-1: USB disconnect, device number 3 [ 143.538420][ T5934] BTRFS info (device loop3): enabling ssd optimizations [ 143.546471][ T5934] BTRFS info (device loop3): rebuilding free space tree [ 143.680927][ T5934] BTRFS info (device loop3): disabling free space tree [ 143.687913][ T5934] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 143.728118][ T5934] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 143.903709][ T27] audit: type=1800 audit(1743578105.856:110): pid=5934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.526" name="file2" dev="loop3" ino=261 res=0 errno=0 [ 144.030944][ T4263] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 144.253799][ T27] audit: type=1326 audit(1743578106.206:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.1.541" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e6f58d169 code=0x0 [ 145.022736][ T6019] can0: slcan on ttyS3. [ 145.067425][ T5993] loop2: detected capacity change from 0 to 40427 [ 145.091998][ T6021] can0 (unregistered): slcan off ttyS3. [ 145.126013][ T5993] F2FS-fs (loop2): invalid crc value [ 145.209689][ T5993] F2FS-fs (loop2): Found nat_bits in checkpoint [ 145.399546][ T5993] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 145.496742][ T6009] loop0: detected capacity change from 0 to 32768 [ 145.537189][ T6009] [ 145.537189][ T6009] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 145.537189][ T6009] [ 145.617150][ T6009] ERROR: (device loop0): diWrite: ixpxd invalid [ 145.617150][ T6009] [ 145.679010][ T6009] ERROR: (device loop0): txCommit: [ 145.679010][ T6009] [ 145.695522][ T5993] syz.2.537: attempt to access beyond end of device [ 145.695522][ T5993] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 145.835092][ T4256] [ 145.835092][ T4256] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 145.835092][ T4256] [ 145.863512][ T4256] [ 145.863512][ T4256] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 145.863512][ T4256] [ 145.874992][ T4255] syz-executor: attempt to access beyond end of device [ 145.874992][ T4255] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 146.315362][ T6029] loop1: detected capacity change from 0 to 32768 [ 146.452861][ T6029] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 146.624774][ T6029] OCFS2: ERROR (device loop1): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 146.678538][ T6029] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 146.716998][ T6029] OCFS2: File system is now read-only. [ 146.727135][ T6029] (syz.1.544,6029,0):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 146.770955][ T6058] OCFS2: ERROR (device loop1): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 146.828647][ T6058] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 146.869095][ T6058] (syz.1.544,6058,0):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 146.899215][ T6065] loop3: detected capacity change from 0 to 128 [ 147.007234][ T4251] ocfs2: Unmounting device (7,1) on (node local) [ 252.698018][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 252.705110][ C1] rcu: 0-...!: (1 GPs behind) idle=c8b4/1/0x4000000000000000 softirq=17198/17200 fqs=15 [ 252.716229][ C1] (detected by 1, t=10502 jiffies, g=21541, q=303 ncpus=2) [ 252.723560][ C1] Sending NMI from CPU 1 to CPUs 0: [ 252.728797][ C0] NMI backtrace for cpu 0 [ 252.728817][ C0] CPU: 0 PID: 6091 Comm: dhcpcd-run-hook Not tainted 6.1.132-syzkaller #0 [ 252.728835][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 252.728854][ C0] RIP: 0010:__lock_acquire+0xdcd/0x1f80 [ 252.728890][ C0] Code: 84 c0 0f 85 62 0c 00 00 8b 1b 48 8b 44 24 30 0f b6 04 38 84 c0 0f 85 76 0c 00 00 48 8b 44 24 08 33 18 f7 c3 00 60 00 00 74 0d <41> bd 01 00 00 00 49 c7 c7 ff ff ff ff 48 8b 44 24 30 0f b6 04 38 [ 252.728904][ C0] RSP: 0018:ffffc90000007a80 EFLAGS: 00000006 [ 252.728919][ C0] RAX: ffff888020abe4e0 RBX: 000000000008404f RCX: ffff888020abe420 [ 252.728931][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: dffffc0000000000 [ 252.728942][ C0] RBP: ffff888020abe4c0 R08: dffffc0000000000 R09: fffffbfff225764e [ 252.728955][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888020abe418 [ 252.728967][ C0] R13: 0000000000000000 R14: ffff888020abe4e0 R15: 85c357eb5e4a956c [ 252.728979][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 252.728994][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 252.729005][ C0] CR2: 00007f69bcb8bb10 CR3: 00000000557d8000 CR4: 00000000003506f0 [ 252.729021][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 252.729030][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 252.729041][ C0] Call Trace: [ 252.729047][ C0] [ 252.729054][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 252.729073][ C0] ? read_lock_is_recursive+0x10/0x10 [ 252.729100][ C0] ? nmi_trigger_cpumask_backtrace+0x430/0x430 [ 252.729125][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 252.729141][ C0] ? nmi_handle+0x12e/0x440 [ 252.729167][ C0] ? nmi_handle+0x25/0x440 [ 252.729192][ C0] ? __lock_acquire+0xdcd/0x1f80 [ 252.729216][ C0] ? default_do_nmi+0x62/0x150 [ 252.729236][ C0] ? exc_nmi+0xa8/0x100 [ 252.729252][ C0] ? end_repeat_nmi+0x16/0x31 [ 252.729278][ C0] ? __lock_acquire+0xdcd/0x1f80 [ 252.729304][ C0] ? __lock_acquire+0xdcd/0x1f80 [ 252.729329][ C0] ? __lock_acquire+0xdcd/0x1f80 [ 252.729354][ C0] [ 252.729358][ C0] [ 252.729370][ C0] lock_acquire+0x1f8/0x5a0 [ 252.729394][ C0] ? __hrtimer_run_queues+0x6d3/0xe50 [ 252.729419][ C0] ? read_lock_is_recursive+0x10/0x10 [ 252.729444][ C0] ? advance_sched+0x6d0/0x970 [ 252.729470][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 252.729497][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 252.729516][ C0] ? advance_sched+0x6d0/0x970 [ 252.729543][ C0] _raw_spin_lock_irq+0xcf/0x110 [ 252.729560][ C0] ? __hrtimer_run_queues+0x6d3/0xe50 [ 252.729582][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 252.729604][ C0] __hrtimer_run_queues+0x6d3/0xe50 [ 252.729633][ C0] ? hrtimer_interrupt+0x980/0x980 [ 252.729654][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 252.729683][ C0] hrtimer_interrupt+0x392/0x980 [ 252.729713][ C0] __sysvec_apic_timer_interrupt+0x158/0x5b0 [ 252.729739][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 252.729761][ C0] [ 252.729772][ C0] [ 252.729777][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 252.729799][ C0] RIP: 0010:lock_acquire+0x26f/0x5a0 [ 252.729825][ C0] Code: 2b 00 74 08 4c 89 f7 e8 af 54 77 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 252.729838][ C0] RSP: 0018:ffffc9000c27f220 EFLAGS: 00000206 [ 252.729852][ C0] RAX: 0000000000000001 RBX: 1ffff9200184fe50 RCX: ffffffff816b7272 [ 252.729864][ C0] RDX: dffffc0000000000 RSI: ffffffff8b0c2f40 RDI: ffffffff8b5f70e0 [ 252.729877][ C0] RBP: ffffc9000c27f378 R08: dffffc0000000000 R09: fffffbfff225764d [ 252.729890][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff9200184fe4c [ 252.729902][ C0] R13: dffffc0000000000 R14: ffffc9000c27f280 R15: 0000000000000246 [ 252.729917][ C0] ? validate_chain+0x112/0x5950 [ 252.729939][ C0] ? read_lock_is_recursive+0x10/0x10 [ 252.729964][ C0] ? unmap_page_range+0x2190/0x2740 [ 252.729986][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 252.730011][ C0] ? __might_sleep+0xb0/0xb0 [ 252.730030][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 252.730048][ C0] ? mm_trace_rss_stat+0xb5/0x280 [ 252.730069][ C0] _raw_spin_lock+0x2a/0x40 [ 252.730085][ C0] ? unmap_page_range+0xacc/0x2740 [ 252.730105][ C0] unmap_page_range+0xacc/0x2740 [ 252.730129][ C0] ? mas_next_node+0x64d/0x950 [ 252.730150][ C0] ? copy_page_range+0x4660/0x4660 [ 252.730170][ C0] ? uprobe_munmap+0x17c/0x400 [ 252.730193][ C0] ? unmap_single_vma+0x1af/0x290 [ 252.730216][ C0] unmap_vmas+0x48b/0x640 [ 252.730236][ C0] ? unmap_vmas+0x3d0/0x640 [ 252.730256][ C0] ? unmap_page_range+0x2740/0x2740 [ 252.730277][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 252.730307][ C0] ? tlb_gather_mmu_fullmm+0x159/0x200 [ 252.730330][ C0] exit_mmap+0x249/0x980 [ 252.730348][ C0] ? vm_brk+0x20/0x20 [ 252.730364][ C0] ? memset+0x1f/0x40 [ 252.730394][ C0] ? uprobe_clear_state+0x271/0x280 [ 252.730413][ C0] ? mm_update_next_owner+0x51b/0x640 [ 252.730440][ C0] __mmput+0x115/0x3c0 [ 252.730456][ C0] exec_mmap+0x4fa/0x5b0 [ 252.730476][ C0] ? acct_arg_size+0xf0/0xf0 [ 252.730492][ C0] ? bpf_lsm_inode_permission+0x5/0x10 [ 252.730514][ C0] ? rcu_is_watching+0x11/0xb0 [ 252.730531][ C0] ? mm_trace_rss_stat+0xb5/0x280 [ 252.730552][ C0] begin_new_exec+0xb65/0x2090 [ 252.730571][ C0] ? common_file_perm+0x17d/0x1d0 [ 252.730590][ C0] ? fsnotify_perm+0x472/0x590 [ 252.730615][ C0] load_elf_binary+0x955/0x2720 [ 252.730643][ C0] ? bprm_execve+0x93f/0x18a0 [ 252.730660][ C0] ? apparmor_current_getsecid_subj+0xac/0x110 [ 252.730680][ C0] ? load_script+0x810/0x810 [ 252.730695][ C0] ? _raw_read_unlock+0x24/0x40 [ 252.730712][ C0] ? load_misc_binary+0x5f9/0xb60 [ 252.730743][ C0] bprm_execve+0x96a/0x18a0 [ 252.730772][ C0] ? alloc_bprm+0x790/0x790 [ 252.730788][ C0] ? copy_strings+0x438/0x480 [ 252.730810][ C0] do_execveat_common+0x580/0x720 [ 252.730833][ C0] __x64_sys_execve+0x8e/0xa0 [ 252.730852][ C0] do_syscall_64+0x3b/0xb0 [ 252.730867][ C0] ? clear_bhb_loop+0x45/0xa0 [ 252.730888][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.730909][ C0] RIP: 0033:0x7f69bca96ef7 [ 252.730953][ C0] Code: Unable to access opcode bytes at 0x7f69bca96ecd. [ 252.730960][ C0] RSP: 002b:00007ffdb2cc9578 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 252.730977][ C0] RAX: ffffffffffffffda RBX: 0000555f1a9e4110 RCX: 00007f69bca96ef7 [ 252.730989][ C0] RDX: 0000555f1a9e4138 RSI: 0000555f1a9e4110 RDI: 0000555f1a9da388 [ 252.731001][ C0] RBP: 0000555f1a9da388 R08: 0000555f1a9da391 R09: 00007ffdb2ccde08 [ 252.731013][ C0] R10: 000000000000002f R11: 0000000000000246 R12: 0000555f1a9e4138 [ 252.731024][ C0] R13: 00007f69bcc44904 R14: 0000555f1a9e4138 R15: 0000000000000000 [ 252.731041][ C0] [ 252.731785][ C1] rcu: rcu_preempt kthread starved for 10470 jiffies! g21541 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 253.412511][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 253.422759][ C1] rcu: RCU grace-period kthread stack dump: [ 253.428829][ C1] task:rcu_preempt state:R running task stack:26200 pid:16 ppid:2 flags:0x00004000 [ 253.439653][ C1] Call Trace: [ 253.442944][ C1] [ 253.445894][ C1] __schedule+0x143f/0x4570 [ 253.450458][ C1] ? _raw_spin_unlock+0x40/0x40 [ 253.455536][ C1] ? __mod_timer+0x956/0xee0 [ 253.460157][ C1] ? release_firmware_map_entry+0x18b/0x18b [ 253.466086][ C1] ? lockdep_softirqs_off+0x420/0x420 [ 253.471484][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 253.477400][ C1] ? _raw_spin_unlock+0x40/0x40 [ 253.482278][ C1] schedule+0xbf/0x180 [ 253.486462][ C1] schedule_timeout+0x1b9/0x300 [ 253.491335][ C1] ? console_conditional_schedule+0x40/0x40 [ 253.497248][ C1] ? update_process_times+0x1b0/0x1b0 [ 253.502647][ C1] ? prepare_to_swait_event+0x329/0x350 [ 253.508229][ C1] rcu_gp_fqs_loop+0x2d2/0x1150 [ 253.513112][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 253.519293][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 253.524517][ C1] ? rcu_gp_init+0x15f0/0x15f0 [ 253.529303][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 253.535404][ C1] ? finish_swait+0xcf/0x1e0 [ 253.540030][ C1] rcu_gp_kthread+0xa3/0x3b0 [ 253.544645][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 253.549802][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 253.555743][ C1] ? __kthread_parkme+0x168/0x1c0 [ 253.560890][ C1] kthread+0x28d/0x320 [ 253.564977][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 253.570108][ C1] ? kthread_blkcg+0xd0/0xd0 [ 253.574839][ C1] ret_from_fork+0x1f/0x30 [ 253.579294][ C1] [ 253.582342][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 253.588674][ C1] CPU: 1 PID: 6095 Comm: syz.1.560 Not tainted 6.1.132-syzkaller #0 [ 253.596677][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 253.606748][ C1] RIP: 0010:smp_call_function_many_cond+0x1fae/0x3460 [ 253.613540][ C1] Code: 2f 44 89 ee 83 e6 01 31 ff e8 2e 4b 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 0a e8 b9 47 0b 00 e9 1b ff ff ff f3 90 <42> 0f b6 04 2b 84 c0 75 14 41 f7 07 01 00 00 00 0f 84 fe fe ff ff [ 253.633185][ C1] RSP: 0018:ffffc9000c37f9c0 EFLAGS: 00000246 [ 253.639273][ C1] RAX: ffffffff817f62b9 RBX: 1ffff110171c858d RCX: 0000000000080000 [ 253.647260][ C1] RDX: ffffc9000d7e1000 RSI: 000000000007ffff RDI: 0000000000080000 [ 253.655264][ C1] RBP: ffffc9000c37fd88 R08: ffffffff817f6282 R09: fffffbfff2257672 [ 253.663284][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000800000000 [ 253.671289][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880b8e42c68 [ 253.679291][ C1] FS: 00007f2e703f16c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 253.688259][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 253.694870][ C1] CR2: 0000001b2d91fffc CR3: 00000000316e6000 CR4: 00000000003526e0 [ 253.702954][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 253.711003][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 253.719027][ C1] Call Trace: [ 253.722343][ C1] [ 253.725212][ C1] ? rcu_check_gp_kthread_starvation+0x1b8/0x220 [ 253.731599][ C1] ? print_other_cpu_stall+0x150c/0x1640 [ 253.737332][ C1] ? print_cpu_stall+0x5f0/0x5f0 [ 253.742343][ C1] ? rcu_sched_clock_irq+0xaf6/0x1200 [ 253.747757][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 253.752657][ C1] ? hrtimer_run_queues+0x163/0x450 [ 253.757898][ C1] ? acct_account_cputime+0xdd/0x270 [ 253.763300][ C1] ? update_process_times+0x147/0x1b0 [ 253.768699][ C1] ? tick_sched_timer+0x386/0x550 [ 253.773762][ C1] ? tick_setup_sched_timer+0x2f0/0x2f0 [ 253.779327][ C1] ? __hrtimer_run_queues+0x5a7/0xe50 [ 253.784743][ C1] ? hrtimer_interrupt+0x980/0x980 [ 253.789875][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 253.795976][ C1] ? hrtimer_interrupt+0x392/0x980 [ 253.801134][ C1] ? __sysvec_apic_timer_interrupt+0x158/0x5b0 [ 253.807316][ C1] ? sysvec_apic_timer_interrupt+0x9b/0xc0 [ 253.813145][ C1] [ 253.816089][ C1] [ 253.819033][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 253.825219][ C1] ? smp_call_function_many_cond+0x1f92/0x3460 [ 253.831394][ C1] ? smp_call_function_many_cond+0x1fc9/0x3460 [ 253.837574][ C1] ? smp_call_function_many_cond+0x1fae/0x3460 [ 253.843756][ C1] ? mark_lock+0x9a/0x340 [ 253.848121][ C1] ? kvm_guest_get_ip+0xe0/0xe0 [ 253.853001][ C1] ? smp_call_function_many+0x30/0x30 [ 253.858418][ C1] ? __lock_acquire+0x125b/0x1f80 [ 253.863525][ C1] ? read_lock_is_recursive+0x10/0x10 [ 253.868941][ C1] ? lockdep_init_map_type+0x9d/0x900 [ 253.874349][ C1] ? do_raw_spin_lock+0x14a/0x370 [ 253.879394][ C1] ? free_zapped_rcu+0x2b0/0x2b0 [ 253.884365][ C1] ? __rwlock_init+0x140/0x140 [ 253.889146][ C1] ? __raw_spin_lock_init+0x41/0x100 [ 253.894449][ C1] ? kvm_guest_get_ip+0xe0/0xe0 [ 253.899321][ C1] on_each_cpu_cond_mask+0x3b/0x80 [ 253.904461][ C1] hardware_enable_all+0x77/0x120 [ 253.909505][ C1] kvm_dev_ioctl+0x10db/0x1860 [ 253.914385][ C1] ? __fget_files+0x28/0x4a0 [ 253.918996][ C1] ? kvm_reboot+0x40/0x40 [ 253.923346][ C1] ? bpf_lsm_file_ioctl+0x5/0x10 [ 253.928392][ C1] ? security_file_ioctl+0x7d/0xa0 [ 253.933528][ C1] ? kvm_reboot+0x40/0x40 [ 253.937879][ C1] __se_sys_ioctl+0xf1/0x160 [ 253.942559][ C1] do_syscall_64+0x3b/0xb0 [ 253.946990][ C1] ? clear_bhb_loop+0x45/0xa0 [ 253.952228][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.958158][ C1] RIP: 0033:0x7f2e6f58d169 [ 253.962592][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.982235][ C1] RSP: 002b:00007f2e703f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.990704][ C1] RAX: ffffffffffffffda RBX: 00007f2e6f7a5fa0 RCX: 00007f2e6f58d169 [ 253.998711][ C1] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 254.006712][ C1] RBP: 00007f2e6f60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 254.014826][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.022833][ C1] R13: 0000000000000000 R14: 00007f2e6f7a5fa0 R15: 00007ffcb04f9e28 [ 254.030881][ C1]