last executing test programs: 38.925516436s ago: executing program 3 (id=21): r0 = io_uring_setup(0xcc9, &(0x7f0000000040)={0x0, 0x0, 0x40}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x2) 38.740621358s ago: executing program 3 (id=24): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x32525942}}) 38.530244362s ago: executing program 3 (id=28): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a00000000004e2200"/56, @ANYRES32=0x0, @ANYBLOB="000009000000000000000000000000000800030011000002"], 0x54}}, 0x0) 38.397217078s ago: executing program 3 (id=30): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f00000006c0)=ANY=[@ANYBLOB='allow_utime=00000000000000000000006,umask=00000000000000000000002,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d636f6e74696e75652c696f636861727365743d6b6f69382d722c6e616d65636173653d312c666d61736b3d30303030303030303030303030303030303030303430362c666d61736b3d30303030303030303030303030303030303030303030352c666d61736b3d30303030303030362c666d61736b3d30303030303030303030303030303030303030303030332c696f636861727365743d6370383634236f626a5f726f6c6f72733d636f6e74696e75652c7365636c6162656c2c00bf17f1f57309ade7d0229b5f66a73a427c88c98c5aa9d700e383edf7351cc6c70bb8a196704c1978d95ed9132e6d8ba14558b574", @ANYRES32=0x0], 0x1, 0x1524, &(0x7f00000037c0)="$eJzs3AuYjtXaOPD7Xms9Y0h6m+QwrLXuhzc5LJMkOSTJIUmSJMkpIWmSLQmJIaekIQnJYUgOQ0gOE5PG+Xw+JCRJkyQhOSXrf0342+3a3977233bd31z/67ruaz7Xc+9nvW89/u8z8HMfNdlaM3Gtao1JCL4t+DFf5IAIBYABgLAdQAQAEC5uHJxWf05JSb9exthf65HUq/2DNjVxPXP3rj+2RvXP3vj+mdvXP/sjeufvXH9szeuP2PZ2ebpBa/nJfsu/Pw/O+Pz//8hmaXHfrW29I1dAWL+2RSuf/bG9f8/K/hnVuL6Z29c/+wq9mpPgP0vwMd/dpDj7/Zw/bM3rj9j2dnVfv58tReIZO/34Gp//hhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMZQ9n/BUKAC63r/a8GGOMMcYYY4wx9ufxOa72DBhjjDHGGGOMMfY/D0GABAUBxEAOiIWckAsEAFwLeeA6iMD1EAc3QF64EfJBfigABSEeCkFh0GAgBghCKAJFIQo3QTG4GYpDCSgJpcBBaUiAW6AM3Apl4TYoB7dDebgDKkBFqASV4U6oAndBVbgbqsE9UB1qQE2oBfdCbbgP6sD9UBcegHrwINSHh6ABPAwN4RFoBI9CY3gMmsDj0BSaQXNoAS3/W/kvQQ94GXpCL0iC3tAHXoG+0A/6wwAYCK/CIHgNBsPrkAxDYCi8AcPgTRgOb8EIGAmj4G0YDe/AGBgL42A8pMAEmAjvwiR4DybDFJgK0yAVpsMMeB9mwiyYDR/AHPgQ5sI8mA8LIA0+goWwCNLhY1gMn0AGLIGlsAyWwwpYCatgNayBtbAO1sMG2AibYDNsga2wDbbDDtgJn8Iu+Ax2wx7YC5/DPvjiX8w//Tf5XREQUKBAhQpjMAZjMRZzYS7MjbkxD+bBCEYwDuMwL+bFfJgPC2ABjMd4LIyF0aBBQsIiWASjGMViWAyLY3EsiSXRocMETMAyeCuWxbJYDstheSyPFbAiVsTKWBmrYBWsilWxGlbD6lgda2JNvBfvxd5YB+tgXayL9bDe5cdT2BAbYiNshI2xMTbBJtgUm2JzbI4tsSW2wlbYGltjW2yL7bAdtsf2mIiJ2AE7YEfsiJ2wE3bGztgFu2BX7IbdMl/KAfgyvoy9sLrojX2wD/bF5Bz9cQAOwFdxEL6Gr+HrmIxDcCi+gW/gmzgcT+EIHImjcBRWEe/gGByLJMZjCqbgRJyIk3ASTsYpOAWnYSpOxxk4A2fiLJyFH+Ac/BA/xHk4DxdgGqbhQlyE6ZiOi/E0ZuASXIrLcDmuwOW4ClfjKlyL63AtbsANuAk34RbcgttwG+7AHfgpKgD8DPfgHkzGfbgP9+N+PIAH8CAexEzMxEN4CA/jYTyCR/AoHsVjeBxP4HE8iSfxFJ7GM3gGz+E5PI8vxH/T6NMSa5JBZFFCiRgRI2JFrMglconcIrfII/KIiIiIOBEn8oq8Ip/IJwqIAiJexIvCorAwwggSYQwAiKiIimKimCguiouSoqRwwokEkSDKiDKirCgryonbRXlxh6ggKoo2rrKoLKqItq6quFtUE9VEdVFD1BS1RC1RW9QWdUQdUVfUFfVEPVFfPCQaiN7YHx8RWZVpLIZgEzEUm4pmQl76BmslhmNr0Ua0FU+JkTgC24tWLlE8KzqIMdhR/EWMxedFZzEeu4gXRVfRTXQXL4keorXrKXqJydhb9BHTsK/oJ/qLAWIm1hAf4JycNcXrIlkMEUPFG2IBvimGi7fECDFSjBJvi9HiHTFGjBXjxHiRIiaIieJdMUm8JyaLKWKqmCZSxXQxQ7wvZopZYrb4QMwRH4q5Yp6YLxaINPGRWCgWiXTxsVgsPhEZYolYKpaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Cq2ie1ih9gpPhW7xGdit9gj9orPxT7xhdgvvhQHxFfioPhaZIpvxCHxrTgsvhNHxPfiqPhBHBPHxQnxozgpfhKnxGlxRpwV58TP4rz4RVwQXoBEKaSUSgYyRuaQsTKnzCWvkbllcOndvV7GyRtkXnmjzCfzywKyoIyXhWRhqaWRVpIMZRFZVEblTbKYvFkWlyVkSVlKOllaJshbZBl5qywrb5Pl5O2yvLxDVpAVZSVZWd4pq8i7JEQubqO6rCFrylryXpkE98k68n5ZVz4g68kHZX35kGwgH5YN5SOykXxUNpaPySbycdlUNpPNZQvZUj4hW8knZWvZRraVT8l28mnZXj4jE+WzsoP0lz4iz8vO8gXZRb4ou8pusrv8RV6QXvaUvST0BtlHviL7yn6yvxwgB8pX5SD5mhwsX5fJcogcKt+Qw+Sbcrh8S46QI+Uo+bYcLd+RY+RYOU6Olylygpwo35WT5Htyspwip8ppMlVOl/0vjTRbyn+Y/+4f5A/+deub5Ga5RW6V2+R2uUPulJ/KXXKX3C13y71yr9wn98n9cr88IA/Ig/KgzJSZ8pA8JA/Lw/KIPCKPyqPymDwuz8of5Un5kzwlT8vT8qw8J8/J85feA1CohJJKqUDFqBwqVuVUudQ1Kre6VuVR16mIul7FqRtUXnWjyqfyqwKqoIpXhVRhpZVRVpEKVRFVVEXVTXjpA6NKqlLKqdIqQd3yr+SrYupmVVyV+E3+5fkl/Z35tVQtVSvVSrVWrVVb1Va1U+1Ue9VeJapE1UF1UB1VR9VJdVKdVWfVRXVRXVVX1V11Vz1UD9VT9VRJKkn1Ua+ovqqf6q8GqIHqVTVIDVKD1WCVrJLVUDVUDVPD1HA1XI1QI9QoNUqNVqPVGDVGjVPjVIpKURPVRDVJTVKT1WQ1VU1VqSpVzVAz1Ew1U81Ws9UcNUfNVXPVfDVfpak0tVAtVOkqXS1Wi1WGWqKWqGVqmVqhVqhVapVao9aodWqd2qA2qAy1WW1WW9VWtV1tVzvVTrVL7VK71W61V+1V+9Q+tV/tVwfUAXVQHVSZKlMdUofUYXVYHVFH1FF1VB1Tx9QJdUKdVCfVKXVKnVFn1Dl1Tp1X59UFdSHrsi8QgQhUkHWmjQlig9ggV5AryB3kDvIEeYJIEAnigrggb3BjkC/IHxQICgbxQaGgcKADE9hAXCp6NLgpKBbcHBQPSgQlg1KBC0oHCcEtQZng1qBscFtQLrg9KB/cEVQIKgaVgsrBnUGV4K6ganB3UC24J6ge1AhqBrWCe4PawX1BneD+oG7wQFAveDCoHzwUNAgeDhoGjwSNgkeDxsFjQZPg8aBp0CxoHrQIWv6p43t/Kv+TrqfupZN0b91Hv6L76n66vx6gB+pX9SD9mh6sX9fJeogeqt/Qw/Sberh+S4/QI/Uo/bYerd/RY/RYPU6P1yl6gp6o39WT9Ht6sp6ip+ppOlVP1zP0+3qmnqVn6w/0HP2hnqvn6fl6gU7TH+mFepFO1x/rxfoTnaGX6KV6mV6uV+iVepVerdfotXqdXq836I16k96st+itepvernfonfpTvUt/pnfrPXqv/lzv01/o/fpLfUB/pQ/qr3Wm/kYf0t/qw/o7fUR/r4/qH/QxfVyf0D/qk/onfUqf1mf0WX1O/6zP61/0Be2zLu6zTu9GGWViTIyJNbEml8llcpvcJo/JYyImYuJMnMlr8pp8Jp8pYAqYeBNvCpvCJgsZMkVMERM1UVPMFDPFTXFT0pQ0zjiTYBJMGVPGlDVlTTlTzpQ35U0FU8FUMpXMneZOc5e5y9xt7jb3mHtMDVPD1DK1TG1T29QxdUxdU9fUM/VMfVPfNDANTEPT0DQyjUxj09g0MU1MU9PUNDfNTUvT0rQyrUxr09q0NW1NO9POtDftTaJJNB1MB9PRdDSdTCfT2XQ2XUwX09V0Nd1Nd9PD9DA9TU+TZJJMH9PH9DV9TX/T3ww0A80gM8gMNoNNskk2Q81QM8wMM8PNcDPCjDSjsg4f844ZY8aacWa8STEpZqKZaCaZSWaymWymmqkm1aSaGWaGmWlmmtlmtplj5pi5Zq6Zb+abNJNmFpqFJt2km8VmsckwGWapWWqWm+VmpVlpVpvVZq1Za9bDerPRbDSbzWaz1Ww12812s9PsNLvMLrPb7DZ7zV6zz+wz+81+c8AcMAfNQZNpMs0hc8gcNofNEXPEHDVHzTFzzJwwJ8xJc9KcMqfMGXPGnDP5L50vvYm1OW0ue43Nba+1eex19m/jAragjbeFbGGrbT6b/zexsdYWtyVsSVvKOlvaJthbfhdXsBVtJVvZ3mmr2Lts1d/Fte19to6939a1D9ha9t7fxPXsg7a+fcw2QASwzWwj28I2to/ZJvZx29Q2s81tC9vOPm3b22dson3WdrDP/S5eaBfZ1XaNXWvX2d12jz1jz9rD9jt7zv5se9pedqB91Q6yr9nB9nWbbIf8Lh5l37aj7Tt2jB1rx9nxv4un2mk21U63M+z7dqad9bs4zX5k59h0O9fOs/Ptgl/jrDml24/tYvuJzbABLLXL7HK7wq60q/7/XJfZDXaj3WR32c/sVrvNbrc77M7LF8J2j91rP7f77Bf2kP3WHrBf2YP2iM203/waZ+3fEfu9PWp/sMfscXvC/mhP2p/U5eysff/R/mIvWG+BkIAkKQoohnJQLOWkXHQN5aZrKQ9dRxG6nuLoBspLN1I+yk8FqCDFUyEqTJoMWSIKqQgVpSjdRJenV5JKkaPSlEC3UBm6lcrSbVSObqfydAdVoIpUiSrTnVSF7qKqdDdVo3uoOtWgmlSL7qXadB/VofupLjxA9ehBqk8PUQN6mBrSI9SIHqXG9Bg1ocepKTWj5tSCWtIT1IqepNbUhtrSU9SOnqb29Awl0rPUgZ6jjvQX6kTPU2d6gbrQi9SVulF3eol60MvUk3pREvWmPvQK9aV+1J8G0EB6lQbRazSYXqdkGkJD6Q0aRm/ScHqLRtBIGkVv02h6h8bQWBpH4ymFJtBEepcm0Xs0mabQVJpGqTSdZtD7NJNm0Wz6gObQhzSX5tF8WkBp9BEtpEWUTh/TYvqEMmgJLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nXbQTvqUdtFntJv20F76nPbRF7SfvqQD9BUdpK8pk76hQ/QtHabv6Ah973vRD3SMjtMJ+pFO0k90ik7TGTpL5+hnOk+/0AXyBCGGIpShCoMwJswRxoY5w1zhNWHu8NowT3hdGAmvD+PCG8K84Y1hvjB/WCAsGMaHhcLCoQ5NaEMKw7BIWDSMhjeFxcKbw+JhibBkWCp0YekwIbwlLBPeGpYNbwvLhbeH5cM7wgphxfCxByqHd4ZVwrvCquHdYbXwnrB6WCOsGdYK7w1rh/eFdcL7w7rhA2HZ8MGwfvhQ2CB8OGwYPhI2Ch8NG4ePhU3Cx8OmYbOwedgibBk+EbYKnwxbh23CtuFTYbvw6bB9+EyYGD4bdgif+7X/wUV/vz8p7B32CV8JXwm9v1/Ojy6IpkU/ii6MLoqmRz+OLo5+Es2ILokujS6LLo+uiK6Mroqujq6Jro2ui66PbohujG6Kel8rBzh0wkmnXOBiXA4X63K6XO4al9td6/K461zEXe/i3A0ur7vR5XP5XQFX0MW7Qq6w084468iFrogr6qLuJlfM3eyKuxKupCvlnCvtElwL19K1dK3ck661a+PauqfcU+5p97R7xj3jnnUd3HOuo/uL6+Sed53dC+4F96Lr6rq57u4l18NNyHPxmExyfVwf19f1df1dfzfQDXSD3CA32A12yS7ZDXVD3TA3zA13w90IN8KNcqPcaDfajXFj3Dg3zqW4FDfRTXST3CQ32U12U91Ul+pS3Qw3w810M12VWRe3MtfNdfPdfJfm0txCl3XNmO4Wu8Uuw2W4pW6pW+6Wu5VupVvtVru1bq1b79a7jW6j2+w2u61uq9vutrudbqfb5Xa53f66i4O6fW6/2+8OuAPuoPvaZbpv3CH3rTvsvnNH3PfuqPvBHXPH3Qn3ozvpfnKn3Gl3xp1159zP7rz7xV1w3qVEJkQmRt6NTIq8F5kcmRKZGpkWSY1Mj8yIvB+ZGZkVmR35IDIn8mFkbmReZH5kQSQt8lFkYWRRJD3ycWRx5JNIRmRJZGlkWWR5ZEXE+0JbQ1/EF/VRf5Mv5m/2xX0JX9KX8s6X9gn+Fl/G3+rL+tt8OX+7L+/v8BV8RV/JP+6b+ma+uW/hW/onfCv/pG/t2/i2/infzj/t2/tnfKJ/1nfwz/mO/i++k3/ed/Yv+C7+Rd/Vd/Pd/Uu+h3/Z9/S9fJLv7fv4V3xf38/39wP8QP+qH+Rf84P96z7ZD/FD/Rt+mH/TD/dv+RF+pB8V87YfffkWGcb7FD/BT/Tv+kn+PbjbT/FT/TSf6qf7Gf59P9PP8rP9B36O/9DP9fP8fL/Ap/mP/EK/yKf7j/1i/4nP8EsuP1T2K/0qv9qv8Wv9Or/eb/Ab/Sa/2W/xW/02v93v8Dv9p36X/8zv9nv8Xv+53+e/8Pv9l/6A/8of9F/7TP+NP+S/9Yf9d/6I/94f9T/4Y/64P+F/9Cf9T/6UP+3P+LP+nP/Zn/e/+Av8O2uMMcYYY/+UCVea4rc9Fx/n9/6DHPFXK/cBgGu3Fcz86/6sK8r1+S62+4n4dhEAeLZXl0cuL9WrJyUlXVo3Q0JQdB7A5f8JyhIDV+Il0BaehkRoA2X+cP79RLdz9A/Gj94OkOuvcmLhSnxl/C8BMOkPxn/iqVELy4dn4v6L8ecBFC96JScnXImXQNtfn6+0gbJ/Z/75W/2D+ef8KgWg9V/l5IYr8ZX5J8CT8Bwk/mZNxhhjjDHGGGPson6iUqfL95+Xf+Lzj+7P49WVnBxwJf5H9+eMMcYYY4wxxhi7+p7v1v2ZJxIT23T61xtV/1tZ/3SjCfxPjcyNP2x4D3D5FQUA/+aAAFkN+Z/ciy3/kW0lXzp0/rZr+VkfwP+OUv4Zjav8xcQYY4wxxhj701256P/t6+pqTYgxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMuG/hN/Tuxq7yNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2tf2/AAAA//8BsgGO") mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) 38.003235703s ago: executing program 3 (id=38): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) read(r0, 0x0, 0x0) 37.362784827s ago: executing program 3 (id=43): setreuid(0x0, 0xee00) open_by_handle_at(0xffffffffffffffff, 0x0, 0x224340) 37.186740148s ago: executing program 32 (id=43): setreuid(0x0, 0xee00) open_by_handle_at(0xffffffffffffffff, 0x0, 0x224340) 3.431086304s ago: executing program 5 (id=568): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYBLOB="5333c923ead7d62a1aa7e1ad6926618430329b0ea6e6e24d7310d2249d89707d2a2ee55d187812e2a0109f36ed3b24151208962f1353f76d5dc207c8b61a67695d2e4632e520"], 0x1, 0x182, &(0x7f0000000200)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) 3.068881536s ago: executing program 5 (id=572): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000180)={0x24, @short}, 0xb) 2.697024938s ago: executing program 5 (id=577): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) 2.247564491s ago: executing program 4 (id=586): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000001d80)={'filter\x00', 0x104, 0x2, 0x3a0, 0x1d0, 0x1d0, 0x2b8, 0x2b8, 0x2b8, 0x2b8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00', {}, {}, 0x2}, 0xc0, 0xe8, 0x0, {0xb000000}}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x2}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) 2.094021338s ago: executing program 4 (id=589): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newneigh={0x24, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_VLAN={0x6}]}, 0x24}}, 0x0) 2.064150692s ago: executing program 5 (id=590): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2082) 1.99272346s ago: executing program 1 (id=591): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x38, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x2}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 1.867854724s ago: executing program 4 (id=593): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000880), 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000008c0)={0xdb6, 0x0, 'client1\x00', 0x2, "c087a460a3ff9c63", "c4e00646d00ca6c061e760d1cd2afbac9fab016dd520af802b12381ea1afd856", 0x8, 0x9}) 1.808236081s ago: executing program 5 (id=594): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1200084, &(0x7f0000001c80)=ANY=[@ANYBLOB="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", @ANYBLOB="3db1bd3c9389ce300f92cc8091d7dfbdcfffeed8bb90e543382e29209562d6483c6fcfdf79d0b465e6bc8ea70762049054a683ca4394e098765d85fa3b798fc191119debc7d45cce724609d275eabc974abf88d2270db005808488efc289084aff3069b2b0a78cdfa1f780c10f6c51d7c9ced6ab3e8a7aa716d5ebe1e8cb6255366a32ca4bfad14e3b1315ec", @ANYRESHEX, @ANYRES64, @ANYRES16, @ANYRESHEX=0x0], 0x1, 0x620f, &(0x7f000000cb40)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgCYsmKB8iCLTseAEs2EiirFKqZc8Y1nW73+DJdPT6/nzSu+vpUTZ/yv6svU1V9AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIH/7gx2eqiLj0q3TDsYjPRT+iF7HS1GsRsbJ2LC8/iIgXYrs5no+I4VJElRufjXg9Ij4+GnH33q315qaz++zH9//yzz/85MiP/vGn4an//fVG/41py928+dv//u32o28vAAAAlKiu67pKH/OPp8/3va47BQDMRX79r5N8u3rh6s0F649arVarD2HdVk92u11ExGZ7neY9g8PxAHDIbMYnXXeBDsm/aIOIONJ1J4CFVnXdAQ7E3Xu31quUb9V+PVjbac/nguzJf7Pavb5j2nSW8XNM5vX42op+PDelPytz6sMiyfn3xvO/tNM+SssddP7zMi3/0c6lT8XJ+ffH8x/z9OTfm5h/qXL+g4fKvy9/AAAAAABYYPnv/8c6Pv679Pibsi8POv67Nqc+AAAAAAAAAMCT9rjj/+2qjP8HAAAAi6r5rN743dH7t037Lrbm9otVxDNjywOFSRfLrHbdDwAAAAAAAAAAAAAoyWDnHN6LVcQwIp5ZXa3ruvlpG68f1uOuf9iVvv1Qsq6f5AEAYMfHR8eu5a8iliPiYvquv+Hq6mpdL6+s1qv1ylJ+PztaWq5XWp9r87S5bWm0jzfEg1Hd/LLl1nptsz4vz2of/33NfY3q/j46Nh8dBg4AEbHzanTXK9JTpq6fja7f5XA4TNr/+908bHlC7P/sR9ePUwAAAODg1XVdV+nrvI+nY/69rjsFAMxFfv0fPy6gVqvVarX66avb6slut4uI2Gyv07xnMBw/ABwym/FJ112gQ/Iv2iAiXui6E8BCq7ruAAfi7r1b61XKt2q/HqTx3fO5IHvy36y218vrT5rOMn6OybweX1vRj+em9Of5OfVhkeT8e+P5X9ppH6XlDjr/eZmWf7OdxzroT9dy/v3x/Mc8Pfn3JuZfqpz/4KHy78sfAAAAAAAWWP77/7GFOv47etTNmelBx3/XDuxeAQAAAAAAAOBg3b13az1f95qP/39hwnKu/3w65fwr+Rcp598by/+rY8u1xwO+8/b9/P9z79b6H2/8+/N5ut/8l/JMlR5ZVXpEVOmeqkGaPs7WfdbWsD9q7mlY9fqDdM5PPXw3rsTV2IjTe5btpf+P++1n9rQ3PR1ut9f9nfaze9oHu+15/XN72ofpTKd6JbefjPX4eVyNd7bbm7alGdu/PKO9ntGe8+/b/4uU8x+0fpr8V1N7NTZt3Pmo95n9vj2ddD9vXfnib04f/ObMtBX93W1ra7bvpQ76s/1/cmQUv7y+ce3kzcs3blw7E2my59azkSZPWM5/mH52n/9f3mnPz/vt/fXOR6OHzn9RbMVgav4vt+ab7X1lzn3rQs5/lH5y/u+k9sn7/2HOf/r+/2oH/QEAAAAAAAAAAAAAAIAHqet6+xLRtyLifLr+p6trMwGA+cqv/3WSb59X3X/U9f+8dzu66r9aPee6WrD+zLX+tF6s/qjVh7Fuqyd7s11ExN/b6zTvGX496ZcBAIvs04j4V9edoDPyL1j+vr9meqLrzgBzdf2DD396+erVjWvXu+4JAAAAAAAAAPCo8vifa63xn0/UdX17bLk947++HWuPO/7nIM/sDjA6ZaDq/sNv04Ns9Ub9Xmu48Rdj2vjfw925B43/PZhxf8MZ7aMZ7Usz2pdntE+80KMl5/9ia7zzExFxfGz49RLGfx0f874EOf+XWo/nJv+vjC3Xzr/+/WHOv7cn/1M33v/FqesffPjalfcvv7fx3sbPzp05c/rc+fMXLlw49e6Vqxund/7tsMcHK+efx752HmhZcv45c/mXJef/pVTLvyw5/y+nWv5lyfnn93vyL0vOP3/2kX9Zcv6vpFr+Zcn5fy3V8i9Lzv/VVMu/LDn/r6da/mXJ+b+WavmXJed/MtXyL0vO/1Sq95n/ykH3i/nI+ecjXPb/suT885kN8i9Lzv9squVflpz/uVTLvyw5/9dTLf+y5Py/kWr5lyXnfz7V8i9Lzv+bqZZ/WXL+F1It/7Lk/L+VavmXJef/7VTLvyw5/zdSLf+y5Py/k2r5lyXn/91Uy78sOf/vpVr+Zcn5v5lq+Zfl/vf/mzFjxkye6fqZCQAAAAAAAAAAAAAYN4/TibveRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+D87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsLe3cXIddb3Az+zb147kBgI+Tv5m7B2jDHOJrt+iV9oXUx4bXgrCaHQF2zXuzYLfsNrl0Cj2lGgRMKoqKJtuGgLCLW5qbAqLmgFKBeoVaVKpL2gN4gKlYuoCiggVaIVZKuZ8zzPzszOzqy9482Zcz4fify8M2fmnDnzzOx+bb47AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GzLm2Y/U8uyrFar5RdszLKX1Of6iY2NS17/4h4fAAAAsHq/bPz3+VvSBYdXcKOmbf7pzu9+fWFhYSH7wPCfjn5hYSFdMZFlo+uyrHFddPWHH6w1bxM8no3Xhpq+Huqx++Ee14/0uH60x/VjPa5f1+P68R7XLzkBS6zPaunOtjX+uDE/pdmt2Wjjum0dbvV4bd1Q/dyl22a1xm0WRk9kc9mpbDabbtk+37bW2P6bW+r7ensW9zXUtK/N9RXy00ePx2OohXO8rWVfi/cZ/fiN2cTPfvro8b++8NztnWbP09Byf/lx7thaP85PhUvyY61l69I5icc51HScmzs8J8Mtx1lr3K7+5/bjfH6Fxzm8eJhrqv05H8+GGn9+pnGeRmpZh/O0OVz287uyLLu8eNjt2yzZVzaUbWi5ZGjx+RnPV2T9PupL6eXZyDWt0y0rWKf1ObOtdZ22vybi878l3G5kmWNofpp+/NhY0/P+i4XrWadR/VEv91ppX4P9fq0UZQ3GdfFM40E/0XENbguP/9Hty6/BjmunwxpMj7tpDW7ttQaHxoYbx5yehFrjNotrcFfL9sONPdUa89nt3dfg1IXT56bmP/HJe+ZOHzs5e3L2zJ5du6b37Nt34MCBqRNzp2an8/9e59kuvg3ZUHoNbA3nLr4GXtu2bfNSXfjy2JL33+t9HY53eR1ubNu236/DkfYHV1ubF+TSNZ2/Nt5XP+njV4ayZV5jjedn5+pfh+lxN70OR5pehx2/p3R4HY6s4HVY3+bczpX9zDLS9L9Ox7D894LVrcGNTWuw/eeR9jXY759HirIGx8O6+P7O5b8XbA7H+8Tktf48MrxkDaaHG9576pekn/fHDzRGp3V5R/2Km8ayi/Oz5+995NiFC+d3ZWGsiVc0rZX29bqh6TFlS9br0DWv18Nzdz5xR4fLN4ZzNX5P/T/jyz5X9W323tv9uWp8d+t8Plsu3Z2F0WdrfT47fTevn8+xLPvidx578FuPfvFNy57Pet781NTqfxZPubTp/Xd0mfffmPtfyPeX7urx4dGR/PU7nM7OaMv7cetTNdJ476o19v381Mrej0fD/9b6/fjWLu/Hm9q27ff78Wj7g4vvx7Vef9uxOu3P53hYJ6emu78f17fZtPta1+RI1/fju8KshfP/upAUUi5qWjvLrdu0r5GR0fC4RuIeWtfpnpbt43qr7+up3de3Tnfcld/XcHp0i9ZqnU60bdvvdZr+7mu5dVrr9bdv16f9+RwP6+LWPd3XaX2bp/eu/r1zffxj03vnWK81ODo8Vj/m0bQIG+/32cL6uAbvzY5nZ7NT2Uzj2rHGeqo19jV538rW4Fj431q/V27qsgZ3tG3b7zWYvo8tt/ZqI0sffB+0P5/jYV08eV/3NVjf5s37+/uz645wSdqm6WfX9r9fW+7vvO5oO003aq2MhOP8zv7ufzdb3+bUgWvNmd3P093hkps6nKf21+9yr6mZbG3O06ZwnM8dWP481Y+nvs0XDq5wPR3OsuzSx+5v/H1v+PeVv7v4va+3/LtLp3/TufSx+3/y0hP/eC3HD8DgeyEfG/LvdU3/MrWSf/8HAAAABkLM/UNhJvI/AAAAlEbM/fH/FZ7I/wAAAFAaMfePhJlUJP9vevNzcy9cylIzfyGI16fT8EC+Xey4ToevJxYW1S+//6uz//0Pl1a276Esy37xwB903H7TA/G4chPhOK++pfXyJb5+z4r2ffThS2m/zf31L4X7j49npcugUwV3Osuyb97yucZ+Jj54pTGffuBoYz54+YnH69s8fzD/Ot7+2Vfk2/9FKP8ePnGs5fbPhvPwozCn39H5fMTbfe3K6zbvf//i/uLtaltvbjzsJz+U32/8PTmffzzfPp7n5Y7/W5996mv17R95TefjvzTU+fifCvf71TD/51X59s3PQf3reLtPh+OP+4u3u/cr3+54/Fc/k29/7q35dkfDjPvfEb7e9tbn5prP1yO1Yy2PK3tbvl3c//T3/rhxfby/eP/txz9+5ErL+WhfH0//W34/U23bx8vjfqK/b9t//X6a12fc/1N/dLTlPPfa/9UHn31V/X7b939323bnPrazsf/F+2v9jU1/+enPddxfPJ7Df3uu5fEcfm94HYf9P/mhsB7D9f97Nb+/9t+ucPS9re8/cfsvbbzU8niit/8s3//VN5xszHXj6zfc9JKX3nz51fVzl2XPrMvvr9f+T/7V2Zbj//Jt+fmI18eOfvv+lxP3f/7jk2fOzl+cm0ln9dFbGr8755358cTjvSW8t7Z/feTshQ/Pnp+YnpjOsony/gq96/aVMH+Sj8vdt15Y8g668+HwfN7x59/csP1fPxsv//f35ZdfeUf+feu1YbvPh8s3hufv2va/1JNbbmu8vmtPhyNcWPr7gldj87b/OrCiDcPjb/+5IK73c6/8cOM81K9rfN+Ir+tVHv8PZvL7+UY4rwvhNzNvvW1xf83bx9+NcOWh/PW+6vMX3ubi8/o34fl+14/y+4/HFR/vD8LPMd/e1Pp+F9fHNy4Ntd9/47d4XA7vJ9nl/Pq4VTzfV56/rePhxd9Dkl2+vfH1n6T7uf2aHuZy5j8xP3Vq7szFR6YuzM5fmJr/xCePnD578cyFI43f5XnkI71uv/j+tKHx/jQzu29v1ni3OpuPG+zFPv5zDx+f2T+9fWb2xLGLJy48fG72/Mnj8/PHZ2fmtx87cWL2471uPzdzaNfug3v27548OTdz6MDBg3sOTs6dOVs/jPygetg3/dHJM+ePNG4yf2jvwV333bd3evL02ZnZQ/unpycv9rp943vTZP3Wvz95fvbUsQtzp2cn5+c+OXto18F9+3b3/G2Ap8+dmJ+YOn/xzNTF+dnzU/ljmbjQuLj+va/X7Smn+f/If55tV8t/EV/2nrv3pd/PWvfVx5a9q3yTtl8g+lz4XTT//LJzB1bydcz9o2EmFcn/AAAAUAUx94+Fmcj/AAAAUBox968LM5H/AQAAoDRi7h8PM6lI/i9d/3/TpRXtX/9f/7/5fOn/V6z//1DR+v/5+4X+f3+stn+v/x/o/+v/6//r/+v/0wdF6//H3L8+yyqZ/wEAAKAKYu7fEGYi/wMAAEBpxNx/U5iJ/A8AAAClEXP/S8JMKpL/9f/1//X/9f/1/zvvX/9/MOn/d6f/34P+/1RWrf7/5X4ev/6//j9LFa3/H3P/S8NMKpL/AQAAoApi7r85zET+BwAAgNKIuf+WMBP5HwAAAEoj5v6NYSYVyf/6//r/+v/6//r/nfev/z+Y9P+70//vQf/f5//r/+v/01dF6//H3P+yMJOK5H8AAACogpj7Xx5mIv8DAABA8Yxc381i7n9FmMmS/H+dOwAAAABedDH335q1FcEr8u//+v/6/8Xv/69L1+n/6/9nhez/D2f6/8Wh/9+d/n8P+v/6//r/+v/0VdH6/43cn41nrwwzqUj+BwAAgCqIuf+2MBP5HwAAAEoj5v7/F2Yi/wMAAEBpxNy/KcykIvlf/1//v/j9f5//r/9f9P6/z/8vEv3/7vT/e9D/1//X/9f/p6+K1v+Puf/2MJOK5H8AAACogpj77wgzkf8BAACgNGLu//9hJvI/AAAAlEbM/ZvDTCqS//X/C97/j81R/X/9f/1//X/9/xXR/+9O/78H/X/9f/1//X/6qmj9/5j7XxVmUpH8DwAAAFUQc/+dYSbyPwAAAJRGzP2vDjOR/wEAAKA0Yu6fCDOpSP7X/y94/z/vwY/5/H/9f/1//X/9/5XR/+9O/78H/X/9/770/xcu6f/r/5MrWv8/5v4tYSYVyf8AAABQBTH3bw0zkf8BAACgNGLuvyvMRP4HAACA0oi5f1uYSUXyv/7/QPT/M/1//X/9f/1//f+V0f/vTv+/B/1//X+f/6//T18Vrf8fc/9rwkwqkv8BAACgCmLu3x5mIv8DAABAacTc/9owE/kfAAAASiPm/h1hJhXJ//r/+v/6//r/+v+d96//P5j0/7vT/+9B/1//X/9f/5++Klr/P+b+14WZVCT/AwAAQBXE3L8zzET+BwAAgNKIuf/uMBP5HwAAAEoj5v7JMJOK5H/9f/1//X/9f/3/zvvX/x9M+v/d6f/3oP/fr/78sP6//r/+P1kB+/8x998TZlKR/A8AAABVEHP/vWEm8j8AAACURsz9U2Em8j8AAACURsz902EmFcn/+v/6/6vu/zc9eP3/CvT/X714v/r/Of3/YtH/707/v4f+9f9Hsmr3/33+/3X3/0f1/ymVovX/Y+7fFWZSkfwPAAAAVRBz/+4wE/kfAAAASiPm/j1hJvI/AAAAlEbM/XvDTCqS//X/9f99/r/+v8//77x//f/BpP/fXf/7//Eh6v/7/H/9f5//r//PUkXr/8fcf1+YSUXyPwAAAFRBzP37wkzkfwAAACiNmPv3h5nI/wAAAFAaMfcfCDOpSP7X/9f/1//X/9f/77x//f/BpP/fXdU//39jrwPQ/9f/1//X/2eVHvrD5q+K1v+Puf9gmElF8j8AAABUQcz9rw8zkf8BAACgNGLu/5UwE/kfAAAASiPm/l8NMylL/u/RPNT/1//X/9f/1//vvH/9/8Gk/99d1fv/Pen/6//r/+v/01dF6//H3H8ozKQs+R8AAABIuf/XwkzkfwAAACiNmPvfEGYi/wMAAEBpxNx/OMykIvlf/1//X/9f/1//v/P+17r/PxbvV/9/VfT/u9P/70H/X/9f/1//n74qWv8/5v43hplUJP8DAABAFcTcf3+YifwPAAAApRFz/5vCTOR/AAAAKI2Y+98cZlKR/K//r/+v/6//r//fef8+/38w6f93txb9/2H9f/1//X/9f/1/gqL1/2Puf0uYSUXyPwAAAFRBzP1vDTOR/wEAAKA0Yu5/W5iJ/A8AAAClEXP/28NMKpL/9f/1//X/9f/1/zvvX/9/MOn/d+fz/3vQ/9f/1//X/6evitb/j7n/18NMKpL/AQAAoApi7n8gzET+BwAAgNKIuf8dYSbyPwAAAJRGzP3vDDOpSP7X/9f/1//X/9f/77x//f/BpP/f3YD1/395c7hc/z+n/1/s47/W/v9I29c3pP//w+X6/wvr2m+v/8+NULT+f8z97wozqUj+BwAAgCqIuf/dYSbyPwAAAJRGzP3vCTOR/wEAAKA0Yu7/jTCTiuR//f/6cSy2l/X/y9r/H9L/1//X/68I/f/uBqz/7/P/2+j/F/v4ff6//j9LFa3/H3P/e8NMKpL/AQAAoApi7n8wzET+BwAAgNKIuf+hMBP5HwAAAEoj5v73hZlUJP/r//v8/2r0/33+f6b/r/9fEfr/3en/96D/r/9ftP7/f+r/M9iK1v+Puf/hMJOK5H8AAACogpj73x9mIv8DAABAacTc/5thJvI/AAAAlEbM/R8IM6lI/tf/H5T+/8SA9v8f0/+/gf3/O2/Ot9P/1/9nkf5/d/r/Pej/6/8Xrf/v8/8ZcEXr/8fc/8Ewk5Xn//EVbwkAAAC8KGLu/60wk4r8+z8AAABUQcz9vx1mIv8DAABAacTc/zthJhXJ//r/N6T/3/jS5//7/P/29eHz//X/9f9vvLXr/8d3Hv1//X/9/0j/v0D9/4v6/xRD0fr/Mff/bphJRfI/AAAAVEHM/R8KM5H/AQAAYCB0+ky2djH3Hwkzkf8BAACgNGLuPxpmUpH8r/8/KJ//r/+fVa3//2db/+X733330V36//r/+v/XZE0//7/+4vf5//r/+v+J/n+B+v8+/5+CKFr/P+b+Y2EmFcn/AAAAUAUx9/9emIn8DwAAAKURc//xMBP5HwAAAEoj5v6ZMJOK5H/9f/1//f+C9v8H+PP/4/nQ/2/Vt/5/fNPV/+8o79+nVXRj+//vX+yJ6/9fa/9/rOOl+v/6/4N8/Pr/+v8sVbT+f8z9s2EmFcn/AAAAUAUh9w+dyOfiFfI/AAAAlEbM/SfDTOR/AAAAKI2Y+z8cZlKR/K//r/+v/6//7/P/O++/W/+/NuLz/4sq9e9/3nih6P+3KU7/vzP9f/3/QT5+/X/9f5YqWv8/5v65MJOK5H8AAACogpj7PxJmIv8DAABAacTc/9EwE/kfAAAASiPm/lNhJhXJ//r/+v/6//r/+v+d91/Yz//X/+9qtf17/f9A/1//X/9f/1//nz4oWv8/5v7TYSYVyf8AAABQBTH3nwkzkf8B/o+9O2myqz7vOH47SKVWwSK7LLJJVZZ5CSySdfICssgmi6QqlUVIQhIyIzKPJNjGs43B84AHMBhjGzwP4Akbz2Abz/OAJ4xNyUX38zxS3z59bnfrdvc5///ns+CJOjT3Qqkk/dT6+gAAQDNy918Vt9j/AAAA0Izc/X8at3Sy//X/+v9m+//f1P/v9fr6f/1/y/T/4/T/K+j/9f/6f/0/azW1/j93/5/FLZ3sfwAAAOhB7v4/j1vsfwAAAGhG7v6r4xb7HwAAAJqRu/8v4pZO9v9S/7+xmFj/n33tEff/+TL6/5b6f8//3/P19f/6/5Ydb/9/3ZM/8un/9f/6/6D/31f/f2avz9f/06Kp9f+5+/8ybulk/wMAAEAPcvf/Vdxi/wMAAEAzcvdfE7fY/wAAANCM3P1/Hbd0sv/X9/z/s1sf9/z/C/T/+v/l7x/6f/2//v/oef7/uJ76/6sfvPxPHr3zV+86yOvr//X/nv+v/2e9ptb/5+7/m7ilk/0PAAAAPcjd/7dxi/0PAAAAzcjd/3dxi/0PAAAAzcjd//dxSyf7f339/9E8/z/p//X/C/2//n/p30f/r/8fov8fN/X+/7Tn/+v/Z/z+9f/6f3abWv+fu/8f4pZO9j8AAAD0IHf/P8Yt9j8AAAA0I3f/tXGL/Q8AAADNyN1/Lm7pZP/r/4++/39C/6//j6v/1//r/4+e/n/c1Pv/dT7//zCvr//X/+v/9f+s19T6/9z918Utnex/AAAA6EHu/n+KW+x/AAAAaEbu/n+OW+x/AAAAaEbu/n+JWzrZ//p/z//X/+v/9f/Dr6//nyf9/zj9/wr6/0vt50/r//X/+n8udsD+//GRH7bX0v/n7v/XuKWT/Q8AAAA9yN3/b3GL/Q8AAADNyN3/73GL/Q8AAADNyN3/H3FLJ/tf/6//1//r/w/d/+/+rrdF/z9M/3889P/jJtP/b5wa/HC3/f9j22+0gf7f8//1//p/dpja8/9z9/9n3NLJ/gcAAIAe5O7/r7hlZP8f+DfzAQAAgBOVu/+/4xZf/wcAAIDZy+osd///xC2d7H/9v/5f/6//9/z/4dcf6//vuuj96f+nRf8/bjL9/x667f8XF96v/n++71//r/9nt6n1/7n7/zdu6WT/AwAAQA9y918ft9j/AAAA0Izc/f8Xt9j/AAAA0Izc/f8ft3Sy/4f7/wv/f/3//uj/d75//f/w94919f/5T9T/j/b/v+X5/33S/487/v7/jP5/5z9f/3+ETvr9N97/n131+fp/hkyt/8/df0Pc0sn+BwAAgB7k7n9K3GL/AwAAQDNy9z81brH/AQAAoBm5+58Wt3Sy/z3/X/+v/59f/7/8/P+k/992HM//Xxx7/39K/79P+v9xnv+/gv5f/6//9/x/1mpq/X/u/hvjlk72PwAAAPTgxscWW7v/6YuF/Q8AAABzdPGfHVj+A6Uhd/8z4hb7HwAAAJqRu/+ZcUsn+1//r//X/8+///f8/x76f8//3y/9/zj9/wr6/6Po50811v/ftNfnT6H/v1b/z8Ts6P/vufDxk+r/c/c/K27pZP8DAABAD3L3Pztusf8BAACgGbn7nxO32P8AAADQjNz9z41bOtn/R97/n937tfX/+n/9v/5f/6//Xzf9/zj9/wr6f8//9/x//T9rtaP/v8hJ9f+5+58Xt3Sy/wEAAKAHufufH7fY/wAAANCM3P03xS32PwAAADQjd/8L4pZO9r/n/+v/9f/6f/3/8Ovr/+dJ/z9O/7+C/l//r//X/7NWU+v/c/ffHLd0sv8BAACgB7n7b4lb7H8AAABoRu7+F8Yt9j8AAAA0I3f/i+KWTva//v9o+//8uP5f/7/Q/+v/9f/Hotv+f2PoZ6Ld9uj/7/+jc7+z8yP6f/2//l//r/9nDSbR/5+/8KvL3P0vjls62f8AAADQg9z9L4lb7H8AAABoRu7+l8Yt9j8AAAA0I3f/y+KWA+7/X17ruzo++n/P/9f/6//1/8Ovr/+fp9n1/6d3ftPz//X/+v/5vn/9v/6f3SbR/1/07dz9L49bfP0fAAAAmpG7/xVxi/0PAAAAzcjd/8q4xf4HAACAZuTuf1Xc0sn+1//r//X/+n/9//DrH7b/31wM0/8fj9n1/0v0//p//f9837/+X//PblPr/3P33xq3dLL/AQAAoAe5+18dt9j/AAAA0Izc/a+JW+x/AAAAaEbu/tfGLZ3sf/2//l//r//X/w+/vuf/z5P+f5z+f7FY3DbyBob6//Nn9P/6f/2//p9Dmlr/n7v/dXFLJ/sfAAAAepC7/7a4xf4HAACAZuTuvz1usf8BAACgGbn7Xx+3dLL/9f/6f/2//l//P/z6+v950v+P0/+v4Pn/+n/9v/6ftZpa/5+7/464pZP9DwAAAD3I3X9n3GL/AwAAQDNy978hbrH/AQAAoBm5+++KWzrZ//p//b/+X/9/JP3/Of3/Mv3/8Ti6/n+h/9f/6/9X0P/r//X/LDuu/v/x+PF+Vf+fu/+NcUsn+x8AAAB6kLv/7rjF/gcAAIBm5O5/U9xi/wMAAEAzcve/OW7pZP/r//X/+n/9v+f/D7++/n+ePP9/nP5/Bf2//l//r/9nrY6r/9+r91/+du7+t8Qtnex/AAAA6EHu/nviFvsfAAAAmpG7/964xf4HAACAZuTuf2vc0sn+1//r/3f2/4uF/l//r//fdgz9/+ZC/792+v9x+v8V9P9t9v+/tGio/z+75+fr/5miqfX/ufvfFrd0sv8BAACgB7n73x632P8AAADQjNz974hb7H8AAABoRu7+d8YtLe3/J/ZO3+bf/59Z+kT9/2KxeOgaz//X/4+8vv5/Mv1//VfV/6+P/n+c/n8F/X+b/b/n/+v/OTFT6/9z978rbmlp/wMAAEDncve/O26x/wEAAKAZufvfE7fY/wAAANCM3P3vjVs62f/z7/+XP1H/v7ik5//r/7c+oP/X/+v/Z+tS+/ubN+PnNP2//l//P9jPb+zx656F/l//r/9nwNT6/9z974tbOtn/AAAA0IPc/ffFLfY/AAAANCN3//1xi/0PAAAAzcjd//64pZP9r//X/+v/59n/b+r/9f/6/0F79vdX7O/z1/X8/yuv/O0H9P/6/xb7/zH6f/2//p9lU+v/c/d/IG7pZP8DAABAD3L3fzBusf8BAACgGbn7PxS32P8AAADQjNz9H45bOtn/u/v/04vtQnXbUP8fjZr+/yL6/53vX/8//P3D8//1//r/o3epz99fV//v+f+He//6f/3/nN//gfr/X9v9+fp/WjS1/j93/wNxy8jw2/stAQAAAFOUu/8jcUsnX/8HAACAHuTu/2jcYv8DAABAM3L3Pxi3dLL/Pf9f/6//1//r/4dfX/8/T/r/cfr/FfT/+n/P/7/qDy7T/7M+U+v/c/d/LG7ZGn6/fsUh/zUBAACACcnd//G4pZOv/wMAAEAPcvd/Im6x/wEAAKAZufs/Gbd0sv/1//p//b/+X/8//Pr6/3nS/4/T/6/QT/+/OfTBk+7nL9VJv/9m+n/P/2eNptb/5+7/VNzSyf4HAACAHuTu/3TcYv8DAABAM3L3fyZusf8BAACgGbn7H4pbOtn/+n/9f/v9/+/r/5deX/+v/2+Z/j9/Rh+m/1+hn/5/0En383N///r/sf7/4D8e0oap9f+5+x+OWzrZ/wAAANCD3P2fjVvsfwAAAGhG7v7PxS32PwAAADQjd//n45ZO9r/+v6/+f2PRY//v+f/6f/1/T+bT/99yauijnv+v/9f/z/f96/89/5/dptb/5+5/ZONUl/sfAAAA5up3f+OPH97v3/vI1l83F1+IW+x/AAAAaEbu/i/GLfY/AAAANCN3/5filk72v/6/r/6/z+f/6//1//r/nsyn/x+m/9f/6//n+/71//p/dpta/5+7/8txy0XDb/B/oAcAAACYjdz9X4lbOvn6PwAAAPQgd/9X45Zd+//8Pv9UOwAAADA1ufu/Frd08vV//f/E+//FEfX/8ffp/7fp//X/Q6+v/58n/f+4S+z/z2/o//X/I/T/+n/9P8um1v/n7r/7jkWX+x8AAAAateN3FL6+9dfNxTfiFvsfAAAAmpG7/5txi/0PAAAAzcjd/624pZP9r/+feP9/qOf/n63/y/P/O+//r98cfH39v/6/Zfr/cZ7/v4L+X/+v/9f/s1YH6P+3BulR9/+5+78dt3Sy/wEAAKAHufu/E7fY/wAAANCM3P3fjVvsfwAAAGhG7v7vxS2d7H/9/wn0/zecWSyOtP/fx/P/9f999P97vH47/f+vXH7uvt/7w9tv1f9zwXH2//l9Qf+v/9f/b9P/6//1/yyb2vP/c/d/P27pZP8DAABAD3L3Pxq32P8AAADQjNz9P4hbntz/957UuwIAAADWKXf/D+OWTr7+r/9v8fn/8+z/87/1CfT/5+bX/2dT3Hv/7/n/+v/dPP9/nP5/Bf2//l//r/9nrabW/+fu/1Hc0sn+BwAAgB7k7v9x3JL7f+PAv3UPAAAATEzu/p/ELb7+DwAAAM3I3f9Y3NLJ/tf/6/8P2/+f9fx/z//X/2/R/0+L/n+c/n8F/b/+X/+v/2etptb/5+7/adzSyf4HAACAHuTufzxusf8BAACgGbn7fxa32P8AAADQjNz9P49bOtn/+n/9/1Se/5/0/xc+T/+/Tf+v/z8I/f+4g/T/lw38ukD/r/8fo//X/+v/WTa1/j93/y8CAAD//zJLcR4=") truncate(&(0x7f00000000c0)='./file1\x00', 0xefff) 1.671568167s ago: executing program 4 (id=595): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x1, 0x4, 0xd08b012a, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f1439fae"}, 0x0, 0x2, {0x0}}) 1.637102891s ago: executing program 1 (id=597): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffdc0}]}) pause() 1.511320576s ago: executing program 4 (id=599): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0xc040564b, &(0x7f0000000640)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.367965302s ago: executing program 4 (id=602): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f00000019c0)={[{@part={'part', 0x3d, 0x4}}, {@nls={'nls', 0x3d, 'default'}}, {@session={'session', 0x3d, 0xffffffffffffff7f}}, {@type={'type', 0x3d, "873b7f04"}}, {@creator={'creator', 0x3d, "ddf2bd6c"}}, {}, {@uid}, {@umask={'umask', 0x3d, 0x3}}, {@creator={'creator', 0x3d, "85f19471"}}, {@barrier}, {}, {@umask={'umask', 0x3d, 0x8f}}, {}, {@nodecompose}, {@uid}, {@gid}, {@force}, {@nobarrier}]}, 0x1, 0x6e4, &(0x7f0000000340)="$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") syz_usb_connect(0x0, 0x2d, &(0x7f0000000800)=ANY=[@ANYBLOB="12010000256930108205050088000002030109021b000100000000090402000191baf20509050b"], 0x0) 1.006695194s ago: executing program 2 (id=606): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800010000000000f8dbdf2102200008000000090000000008000100e000000206001c004e20000008000700e000000208000200ffffffff08000100ac1414"], 0x4c}}, 0x0) 909.838935ms ago: executing program 0 (id=607): r0 = syz_io_uring_setup(0x78bc, &(0x7f0000000540)={0x0, 0x5885, 0x2, 0xfff7ffff, 0x3ab}, &(0x7f0000000340), &(0x7f0000000280)) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 886.145808ms ago: executing program 2 (id=608): r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x1f8, 0x0, 0x3f1, 0x148, 0x0, 0x5, 0x160, 0x2a8, 0x2a8, 0x160, 0x2a8, 0x3, 0x0, {[{{@uncond, 0xffffe000, 0x70, 0xd0, 0x0, {0x0, 0x1c030000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x7, 0x2, 0x3, 0x4, 0x6]}, {0xffffffffffffffff}}}}, {{@ip={@empty, @loopback, 0x0, 0x0, 'nicvf0\x00', 'rose0\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258) 781.41025ms ago: executing program 2 (id=609): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000002404000000ffffffd404000040000000b704000010000020620700fe000000008500000088000000340000000a00000095000000000000006458c2c62fca868f0399d909a63396c113943219aab9d607000000cb3924b611f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14bfbe96dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551557f05dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000fe4c16737d50d2a4bfc463450d524eacf2b734b0289c7a3a16eeca71296746681d61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333c460e34caf0806a7e2575a56fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086061d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b3cc034c19cef0d773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea40429b2d49177824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224090000000000000096e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27020198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf03c144f6796920726dcf29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca881a4201588427bb65ed3d5e7a74e9b5ece44067d4a9875a310bc7ec42b844b9eb3c9083560ef5c92b8a01188d615efbf70893d2eaf76517e990021fa5020a71023bca1194ad87cade480ba3dce8f57294e31ca24a8d181210bb6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfaf06574b05cefb2670f30c2d501ee625ce3ffc08f15b53d28ce552c1807bc6866f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13e9c54be60b0a4f979ef7eb216897875946dc6ca1571930b1cf7c93de103f5289f782ae538e02612c717a76c787a873936eb8dcf1bfe581cc8ef965a0424bc140939e3274e251e519d188f6af680402c49458065dccfcb4f0d4f2ec9cf6fb3cf0a1807e34fb8d0108007734c1d2bc6a9d32d2560a88bad976b6000100002b712e632eeca810fb73fc8aaef94acf8bde18b9149cadc688254eabbe91f943592ccf68e717bcc6852828bd621e3a9dcb1cc6f1a6d1915200d95087838c2dc0a002c3aa554f725b965714144652cdc14761b0236f1a05b7f50f4149057e63d713103b5a6c2919161efc165a2e6981d76d29c95ad9f180135fb8962f59495fd33be3a6d35274941790bc1bd9da5e9c67c39de2c9f6fe35b8f528edbd8ea2a77dccdc3fe247feb121d9440a3ea9012a9d23a7e3110b0f25c5f8bf803d688de4d92b5dfdbd69fb8b426b55c10ba01b5f18b10cce8de3369300000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 710.680238ms ago: executing program 0 (id=610): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000100)={'\v\x00', 0x0, 0x6, 0x1, 0x0, 0x0, "f759e10002002e00000000fc6300", '\x00\a@\x00', 'Q\x00', "e859ad13", ["8bada940edff000a00", "c2fed6bf0400000000000040", "200000001a00", "f0ff53b200000000000100"]}) 670.152653ms ago: executing program 1 (id=611): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0xa08006, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0xfe, 0x687, &(0x7f0000000fc0)="$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") removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)=@random={'osx.', 'trusted.overlay.metacopy\x00'}) 600.636551ms ago: executing program 2 (id=612): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5dc}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) 526.70524ms ago: executing program 0 (id=613): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x1412, 0x1}, 0x10}}, 0x0) 402.414414ms ago: executing program 1 (id=614): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)) 402.037804ms ago: executing program 0 (id=615): r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x200000000114, 0x8, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000) 291.794987ms ago: executing program 5 (id=616): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000c04fcff", 0x58}], 0x1) 221.230345ms ago: executing program 0 (id=617): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0xc0185500, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 177.73641ms ago: executing program 1 (id=618): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x10) 177.23392ms ago: executing program 2 (id=619): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8930, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 58.615934ms ago: executing program 1 (id=620): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x20, 0x4, 0xe, 0x3234564e, [0x10001, 0x4], [0x1000, 0x8], 0x13a}}) 403.75µs ago: executing program 0 (id=621): pipe2(&(0x7f0000001440)={0xffffffffffffffff}, 0x80) vmsplice(r0, &(0x7f00000006c0)=[{&(0x7f0000000180)='a', 0x1}], 0x1, 0x0) 0s ago: executing program 2 (id=622): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x16}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x10}}, 0xbc}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.199' (ED25519) to the list of known hosts. syzkaller login: [ 51.822646][ T4231] cgroup: Unknown subsys name 'net' [ 51.919777][ T4231] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.116538][ T4231] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 54.253172][ T4246] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.262580][ T4258] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.271117][ T4258] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.279342][ T4258] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.287262][ T4258] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.292685][ T4259] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.296130][ T4260] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.302245][ T4259] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.309505][ T4260] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.316707][ T4259] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.325076][ T4260] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.330503][ T4259] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.337310][ T4260] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.344330][ T4259] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.351260][ T4260] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.359057][ T4259] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.365538][ T4260] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.379154][ T4259] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.380266][ T4260] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.394555][ T4259] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.394679][ T4260] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.402555][ T4259] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.409825][ T4260] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.417960][ T4259] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.423421][ T4260] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.430061][ T4259] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.436866][ T4260] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.444401][ T4259] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.451478][ T4260] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.459882][ T4261] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.932025][ T4248] chnl_net:caif_netlink_parms(): no params data found [ 54.969967][ T4254] chnl_net:caif_netlink_parms(): no params data found [ 54.985601][ T4256] chnl_net:caif_netlink_parms(): no params data found [ 55.054940][ T4247] chnl_net:caif_netlink_parms(): no params data found [ 55.111874][ T4243] chnl_net:caif_netlink_parms(): no params data found [ 55.167407][ T4254] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.174810][ T4254] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.183366][ T4254] device bridge_slave_0 entered promiscuous mode [ 55.191437][ T4248] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.198545][ T4248] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.207036][ T4248] device bridge_slave_0 entered promiscuous mode [ 55.218796][ T4248] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.226563][ T4248] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.235078][ T4248] device bridge_slave_1 entered promiscuous mode [ 55.242530][ T4256] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.249769][ T4256] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.258113][ T4256] device bridge_slave_0 entered promiscuous mode [ 55.268961][ T4256] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.278736][ T4256] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.286585][ T4256] device bridge_slave_1 entered promiscuous mode [ 55.296387][ T4254] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.303559][ T4254] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.311566][ T4254] device bridge_slave_1 entered promiscuous mode [ 55.366368][ T4256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.386950][ T4248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.403719][ T4256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.427520][ T4248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.436964][ T4247] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.444661][ T4247] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.452429][ T4247] device bridge_slave_0 entered promiscuous mode [ 55.468334][ T4254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.501070][ T4247] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.508506][ T4247] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.517270][ T4247] device bridge_slave_1 entered promiscuous mode [ 55.533282][ T4254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.542506][ T4243] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.549783][ T4243] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.558484][ T4243] device bridge_slave_0 entered promiscuous mode [ 55.582205][ T4256] team0: Port device team_slave_0 added [ 55.596935][ T4243] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.604327][ T4243] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.612270][ T4243] device bridge_slave_1 entered promiscuous mode [ 55.621758][ T4248] team0: Port device team_slave_0 added [ 55.637101][ T4256] team0: Port device team_slave_1 added [ 55.669859][ T4248] team0: Port device team_slave_1 added [ 55.677451][ T4247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.694740][ T4254] team0: Port device team_slave_0 added [ 55.710756][ T4243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.730108][ T4247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.741478][ T4254] team0: Port device team_slave_1 added [ 55.756147][ T4256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.763457][ T4256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.789721][ T4256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.803924][ T4243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.837139][ T4256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.844431][ T4256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.870410][ T4256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.897729][ T4248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.905274][ T4248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.931511][ T4248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.951053][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.958076][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.984516][ T4254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.010461][ T4243] team0: Port device team_slave_0 added [ 56.017122][ T4248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.024350][ T4248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.050696][ T4248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.063862][ T4247] team0: Port device team_slave_0 added [ 56.074528][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.081496][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.107876][ T4254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.126673][ T4243] team0: Port device team_slave_1 added [ 56.152144][ T4247] team0: Port device team_slave_1 added [ 56.182393][ T4243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.189757][ T4243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.215785][ T4243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.247220][ T4254] device hsr_slave_0 entered promiscuous mode [ 56.254248][ T4254] device hsr_slave_1 entered promiscuous mode [ 56.269348][ T4243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.276409][ T4243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.302463][ T4243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.314374][ T4247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.321363][ T4247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.347465][ T4247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.369378][ T4256] device hsr_slave_0 entered promiscuous mode [ 56.376698][ T4256] device hsr_slave_1 entered promiscuous mode [ 56.383622][ T4256] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.391468][ T4256] Cannot create hsr debugfs directory [ 56.408848][ T4247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.416006][ T4247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.442034][ T4247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.460169][ T4248] device hsr_slave_0 entered promiscuous mode [ 56.467339][ T4248] device hsr_slave_1 entered promiscuous mode [ 56.473963][ T4248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.481526][ T4248] Cannot create hsr debugfs directory [ 56.513722][ T4261] Bluetooth: hci1: command tx timeout [ 56.542284][ T4243] device hsr_slave_0 entered promiscuous mode [ 56.549323][ T4243] device hsr_slave_1 entered promiscuous mode [ 56.556076][ T4243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.564475][ T4243] Cannot create hsr debugfs directory [ 56.593112][ T48] Bluetooth: hci0: command tx timeout [ 56.593124][ T4261] Bluetooth: hci2: command tx timeout [ 56.593291][ T4261] Bluetooth: hci4: command tx timeout [ 56.598727][ T48] Bluetooth: hci3: command tx timeout [ 56.628424][ T4247] device hsr_slave_0 entered promiscuous mode [ 56.635182][ T4247] device hsr_slave_1 entered promiscuous mode [ 56.641607][ T4247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.649756][ T4247] Cannot create hsr debugfs directory [ 56.950038][ T4254] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.969365][ T4254] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.981784][ T4254] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.996759][ T4254] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.030773][ T4256] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.039987][ T4256] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.049872][ T4256] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.082181][ T4256] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.140133][ T4248] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.161053][ T4248] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.170568][ T4248] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.181331][ T4248] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.265729][ T4247] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.281475][ T4254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.299385][ T4247] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.308964][ T4247] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.322370][ T4247] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.335944][ T4256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.358503][ T4254] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.377282][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.387522][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.409670][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.418739][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.429100][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.436326][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.449570][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.472057][ T4256] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.481982][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.491079][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.500216][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.507527][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.516894][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.524747][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.552513][ T4243] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.567463][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.576999][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.587533][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.594685][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.603333][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.611889][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.621089][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.631166][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.638321][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.647344][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.656238][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.667730][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.677952][ T4243] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.687926][ T4243] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.705421][ T4248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.718217][ T4243] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.728078][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.738150][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.748629][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.757660][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.767589][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.777025][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.785236][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.813611][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.822410][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.831832][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.841107][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.851215][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.860352][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.870221][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.879764][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.888676][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.896869][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.905065][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.914181][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.925873][ T4248] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.947773][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.959682][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.969944][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.999495][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.014812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.025668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.035191][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.042301][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.051623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.062249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.072772][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.079955][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.096032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.105352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.136422][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.190589][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.218938][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.234422][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.249121][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.258085][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.313422][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.324719][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.347989][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.357660][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.369903][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.389176][ T4247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.426264][ T4243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.447723][ T4256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.465802][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.479572][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.505046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.513540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.521295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.529581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.540432][ T4247] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.561847][ T4243] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.571697][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.580296][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.595049][ T48] Bluetooth: hci1: command tx timeout [ 58.607889][ T4254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.627409][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.638018][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.648324][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.655520][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.663470][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.673244][ T48] Bluetooth: hci4: command tx timeout [ 58.673344][ T4261] Bluetooth: hci0: command tx timeout [ 58.678646][ T48] Bluetooth: hci2: command tx timeout [ 58.690853][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.691322][ T48] Bluetooth: hci3: command tx timeout [ 58.700690][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.714208][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.722587][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.729757][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.738918][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.747793][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.760019][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.768837][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.777640][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.784773][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.805180][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.814367][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.823332][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.832068][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.841001][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.848150][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.882301][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.892112][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.902418][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.910618][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.918900][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.939047][ T4256] device veth0_vlan entered promiscuous mode [ 58.951759][ T4254] device veth0_vlan entered promiscuous mode [ 58.961377][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.970613][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.979358][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.990794][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.000074][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.008833][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.018221][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.026778][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.035578][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.049948][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.058325][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.068137][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.077089][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.085808][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.094225][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.102095][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.111074][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.119706][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.130826][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.150867][ T4248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.168974][ T4254] device veth1_vlan entered promiscuous mode [ 59.186605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.195910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.204784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.213459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.221951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.230709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.249227][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.258894][ T4256] device veth1_vlan entered promiscuous mode [ 59.275506][ T4243] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.287376][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.308010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.318528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.341964][ T4254] device veth0_macvtap entered promiscuous mode [ 59.385049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.404714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.428974][ T4254] device veth1_macvtap entered promiscuous mode [ 59.455223][ T4256] device veth0_macvtap entered promiscuous mode [ 59.462379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.484451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.503784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.516130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.525154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.535047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.574482][ T4256] device veth1_macvtap entered promiscuous mode [ 59.588680][ T4248] device veth0_vlan entered promiscuous mode [ 59.595670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.605428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.615156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.624219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.652201][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.671578][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.683261][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.697350][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.705586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.714801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.722777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.730914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.738643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.747533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.757019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.765812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.785648][ T4247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.796780][ T4248] device veth1_vlan entered promiscuous mode [ 59.818097][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.831319][ T4256] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.841587][ T4256] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.850467][ T4256] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.859755][ T4256] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.871021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.880339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.889781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.898826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.910842][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.921634][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.934109][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.950830][ T4248] device veth0_macvtap entered promiscuous mode [ 59.986182][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.997873][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.007078][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.018317][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.025951][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.037000][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.046245][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.057781][ T4254] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.066984][ T4254] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.076507][ T4254] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.085816][ T4254] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.105514][ T4248] device veth1_macvtap entered promiscuous mode [ 60.133273][ T4243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.147374][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.160034][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.223979][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.238256][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.248937][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.259711][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.271049][ T4248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.297846][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.314031][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.324369][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.332857][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.342801][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.354672][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.365707][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.377364][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.387496][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.403194][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.415222][ T4248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.425634][ T4247] device veth0_vlan entered promiscuous mode [ 60.449444][ T4247] device veth1_vlan entered promiscuous mode [ 60.457884][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.467171][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.481541][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.494312][ T4248] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.504210][ T4248] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.520391][ T4248] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.529735][ T4248] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.581857][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.607147][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.614987][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.624448][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.633390][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.642022][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.650897][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.661249][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.669801][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.683324][ T4261] Bluetooth: hci1: command tx timeout [ 60.694313][ T4247] device veth0_macvtap entered promiscuous mode [ 60.707446][ T4247] device veth1_macvtap entered promiscuous mode [ 60.721227][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.729435][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.737407][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.747001][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.753719][ T4261] Bluetooth: hci0: command tx timeout [ 60.755042][ T48] Bluetooth: hci4: command tx timeout [ 60.759776][ T4261] Bluetooth: hci3: command tx timeout [ 60.765165][ T48] Bluetooth: hci2: command tx timeout [ 60.816422][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.827068][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.836490][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.844969][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.853387][ T4243] device veth0_vlan entered promiscuous mode [ 60.871294][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.896197][ T4299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.897841][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.912218][ T4243] device veth1_vlan entered promiscuous mode [ 60.919284][ T4299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.924039][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.939646][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.946432][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.956985][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.966699][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.975276][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.000382][ T4299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.010562][ T4299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.014305][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.036786][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.047816][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.058884][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.069301][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.080538][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.104250][ T4247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.117915][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.131347][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.142382][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.155168][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.165297][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.175834][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.187291][ T4247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.203084][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.211178][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.220235][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.229423][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.240301][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.259511][ T4243] device veth0_macvtap entered promiscuous mode [ 61.274120][ T4247] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.283786][ T4247] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.292519][ T4247] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.301634][ T4247] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.326502][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.338834][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.349262][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.378510][ T4243] device veth1_macvtap entered promiscuous mode [ 61.469330][ T4243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.509002][ T4243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.512769][ T26] audit: type=1326 audit(1730212881.870:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4329 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211ad7e719 code=0x7ffc0000 [ 61.525108][ T4243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.579166][ T4243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.589497][ T4243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.601629][ T26] audit: type=1326 audit(1730212881.930:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4329 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f211ad7e719 code=0x7ffc0000 [ 61.610803][ T4243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.652425][ T26] audit: type=1326 audit(1730212881.930:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4329 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211ad7e719 code=0x7ffc0000 [ 61.666164][ T4243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.685745][ T4243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.697894][ T4243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.756518][ T4328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 61.778652][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.787499][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.817324][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.843465][ T4243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.883076][ T4243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.898182][ T4243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.930175][ T4243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.964906][ T4243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.979306][ T4243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.002987][ T4243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.021038][ T4243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.058659][ T4243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.076343][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.091931][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.121394][ T4348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14'. [ 62.131589][ T4348] netlink: 48 bytes leftover after parsing attributes in process `syz.3.14'. [ 62.184627][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.201854][ T4243] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.211064][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.220946][ T4243] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.230291][ T4243] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.239087][ T4243] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.261205][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.334133][ T4356] loop0: detected capacity change from 0 to 256 [ 62.363090][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.387066][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.389528][ T4356] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 62.500854][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.594782][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.609419][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.699182][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.718721][ T4299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.730842][ T4299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.753174][ T4261] Bluetooth: hci1: command tx timeout [ 62.834678][ T4261] Bluetooth: hci2: command tx timeout [ 62.840127][ T4261] Bluetooth: hci4: command tx timeout [ 62.845736][ T4258] Bluetooth: hci0: command tx timeout [ 62.845759][ T48] Bluetooth: hci3: command tx timeout [ 62.854701][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.993526][ T4377] device veth1_macvtap left promiscuous mode [ 63.166958][ T26] audit: type=1326 audit(1730212883.530:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4384 comm="syz.4.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73e37e719 code=0x7ffc0000 [ 63.193215][ T4294] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 63.247593][ T26] audit: type=1326 audit(1730212883.550:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4384 comm="syz.4.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fa73e37e719 code=0x7ffc0000 [ 63.268247][ T4389] loop3: detected capacity change from 0 to 256 [ 63.304884][ T4389] exfat: Deprecated parameter 'namecase' [ 63.324423][ T26] audit: type=1326 audit(1730212883.550:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4384 comm="syz.4.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73e37e719 code=0x7ffc0000 [ 63.349821][ T4389] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 63.403965][ T26] audit: type=1326 audit(1730212883.550:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4384 comm="syz.4.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73e37e719 code=0x7ffc0000 [ 63.553980][ T4294] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 63.582743][ T4294] usb 1-1: config 0 has no interface number 0 [ 63.603467][ T4294] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 63.641354][ T4294] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 63.664358][ T4251] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 63.673240][ T4294] usb 1-1: config 0 interface 255 has no altsetting 0 [ 63.691973][ T4294] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 63.708780][ T4294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.717775][ T26] audit: type=1326 audit(1730212884.090:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4402 comm="syz.4.39" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa73e37e719 code=0x0 [ 63.721847][ T4294] usb 1-1: config 0 descriptor?? [ 63.791962][ T4294] ums-realtek 1-1:0.255: USB Mass Storage device detected [ 63.936950][ T4399] loop1: detected capacity change from 0 to 32768 [ 63.945417][ T4399] ======================================================= [ 63.945417][ T4399] WARNING: The mand mount option has been deprecated and [ 63.945417][ T4399] and is ignored by this kernel. Remove the mand [ 63.945417][ T4399] option from the mount to silence this warning. [ 63.945417][ T4399] ======================================================= [ 63.981207][ T4251] usb 3-1: Using ep0 maxpacket: 32 [ 64.082833][ T128] usb 1-1: USB disconnect, device number 2 [ 64.095277][ T4399] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 64.119559][ T4256] syz-executor (4256) used greatest stack depth: 19544 bytes left [ 64.133558][ T4251] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.177677][ T4251] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.223969][ T4251] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 64.240010][ T4415] netlink: 28 bytes leftover after parsing attributes in process `syz.4.42'. [ 64.241637][ T4251] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.314037][ T4251] hub 3-1:4.0: USB hub found [ 64.360160][ T4247] ocfs2: Unmounting device (7,1) on (node local) [ 64.378180][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.499141][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.533493][ T4251] hub 3-1:4.0: 10 ports detected [ 64.553145][ T4251] hub 3-1:4.0: insufficient power available to use all downstream ports [ 64.601721][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.721914][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.755820][ T4251] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 64.762458][ T4251] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 64.786495][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.805136][ T4251] usb 3-1: USB disconnect, device number 2 [ 64.817406][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.837097][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.851105][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.860986][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 64.869274][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.109562][ T4425] chnl_net:caif_netlink_parms(): no params data found [ 65.167092][ T4440] __vm_enough_memory: pid: 4440, comm: syz.1.54, no enough memory for the allocation [ 65.263219][ T128] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 65.647308][ T4425] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.656596][ T4425] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.704253][ T4425] device bridge_slave_0 entered promiscuous mode [ 65.772176][ T4425] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.781737][ T4425] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.788245][ T128] usb 5-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 65.804644][ T4425] device bridge_slave_1 entered promiscuous mode [ 65.814084][ T128] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.832362][ T128] usb 5-1: Product: syz [ 65.850660][ T128] usb 5-1: Manufacturer: syz [ 65.867125][ T128] usb 5-1: SerialNumber: syz [ 65.936933][ T128] usb 5-1: config 0 descriptor?? [ 65.957542][ T4425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.004910][ T128] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 66.095303][ T4425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.177641][ T4479] loop2: detected capacity change from 0 to 512 [ 66.189186][ T4425] team0: Port device team_slave_0 added [ 66.245431][ T4425] team0: Port device team_slave_1 added [ 66.263131][ T4481] loop0: detected capacity change from 0 to 1024 [ 66.282793][ T4479] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 66.324398][ T4479] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 66.346226][ T4479] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a00ee01c, mo2=0006] [ 66.356940][ T4425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.373265][ T4479] System zones: 0-2, 18-18, 34-35 [ 66.395160][ T4479] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 66.402225][ T4460] loop1: detected capacity change from 0 to 32768 [ 66.415583][ T4425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.442552][ T128] sonixb 5-1:0.0: Error writing register 01: -71 [ 66.450057][ T128] sonixb: probe of 5-1:0.0 failed with error -71 [ 66.456846][ T4425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.476460][ T128] usb 5-1: USB disconnect, device number 2 [ 66.518655][ T4460] [ 66.518655][ T4460] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 66.518655][ T4460] [ 66.551650][ T4460] [ 66.551650][ T4460] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 66.551650][ T4460] [ 66.577478][ T4425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.592783][ T4425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.641333][ T4460] [ 66.641333][ T4460] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 66.641333][ T4460] [ 66.643722][ T4425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.675203][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 66.705482][ T107] [ 66.705482][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 66.705482][ T107] [ 66.811706][ T4299] [ 66.811706][ T4299] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 66.811706][ T4299] [ 66.852613][ T4299] [ 66.852613][ T4299] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 66.852613][ T4299] [ 66.876757][ T107] [ 66.876757][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 66.876757][ T107] [ 66.897813][ T4247] [ 66.897813][ T4247] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 66.897813][ T4247] [ 66.913776][ T4261] Bluetooth: hci4: command tx timeout [ 66.915701][ T4425] device hsr_slave_0 entered promiscuous mode [ 66.929279][ T4247] [ 66.929279][ T4247] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 66.929279][ T4247] [ 66.951030][ T4425] device hsr_slave_1 entered promiscuous mode [ 66.969400][ T4425] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.033371][ T4425] Cannot create hsr debugfs directory [ 67.272153][ T4499] loop2: detected capacity change from 0 to 764 [ 67.540017][ T4511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.78'. [ 67.553187][ T4511] netlink: 20 bytes leftover after parsing attributes in process `syz.0.78'. [ 67.564819][ T4515] loop4: detected capacity change from 0 to 64 [ 68.069516][ T9] device hsr_slave_0 left promiscuous mode [ 68.108681][ T9] device hsr_slave_1 left promiscuous mode [ 68.152638][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.197271][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.222694][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.239521][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.256184][ T9] device bridge_slave_1 left promiscuous mode [ 68.287135][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.325803][ T9] device bridge_slave_0 left promiscuous mode [ 68.332084][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.469002][ T9] device veth1_macvtap left promiscuous mode [ 68.478093][ T9] device veth0_macvtap left promiscuous mode [ 68.525123][ T9] device veth1_vlan left promiscuous mode [ 68.531207][ T9] device veth0_vlan left promiscuous mode [ 68.993469][ T48] Bluetooth: hci4: command tx timeout [ 68.999248][ T4569] cgroup: No subsys list or none specified [ 69.217321][ T4575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.104'. [ 69.235728][ T4575] netlink: 31 bytes leftover after parsing attributes in process `syz.2.104'. [ 69.247077][ T4575] netlink: 'syz.2.104': attribute type 2 has an invalid length. [ 69.258295][ T4575] netlink: 'syz.2.104': attribute type 2 has an invalid length. [ 69.266061][ T4575] netlink: 31 bytes leftover after parsing attributes in process `syz.2.104'. [ 69.408243][ T9] team0 (unregistering): Port device team_slave_1 removed [ 69.452537][ T9] team0 (unregistering): Port device team_slave_0 removed [ 69.508042][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.562373][ T4582] netlink: 76 bytes leftover after parsing attributes in process `syz.2.107'. [ 69.576953][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.990686][ T9] bond0 (unregistering): Released all slaves [ 70.056320][ T4535] netlink: 'syz.4.87': attribute type 21 has an invalid length. [ 70.106649][ T4586] netlink: 200 bytes leftover after parsing attributes in process `syz.2.109'. [ 70.232293][ T4425] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 70.257022][ T4593] netlink: 'syz.4.112': attribute type 29 has an invalid length. [ 70.308181][ T4593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.112'. [ 70.336291][ T4425] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 70.376755][ T4593] netlink: 'syz.4.112': attribute type 29 has an invalid length. [ 70.403716][ T4593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.112'. [ 70.419340][ T4425] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 70.459556][ T4425] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 70.492433][ T4588] loop1: detected capacity change from 0 to 8192 [ 70.559722][ T4588] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 70.575817][ T4588] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 70.585502][ T4588] REISERFS (device loop1): using ordered data mode [ 70.592114][ T4588] reiserfs: using flush barriers [ 70.599732][ T4588] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 70.622349][ T4588] REISERFS (device loop1): checking transaction log (loop1) [ 70.646044][ T4588] REISERFS (device loop1): Using tea hash to sort names [ 70.656352][ T4588] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 70.743018][ T4606] netlink: 'syz.4.116': attribute type 10 has an invalid length. [ 70.789802][ T4610] loop0: detected capacity change from 0 to 256 [ 70.815350][ T4606] batman_adv: batadv0: Adding interface: team0 [ 70.821605][ T4606] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.869740][ T4612] loop2: detected capacity change from 0 to 64 [ 70.946665][ T4606] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 71.073177][ T4261] Bluetooth: hci4: command tx timeout [ 71.109653][ T4425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.248831][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.274426][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.285786][ T4425] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.317705][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.324383][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.324453][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.373302][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.409876][ T4627] loop4: detected capacity change from 0 to 2048 [ 71.414281][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.423447][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.521425][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.547159][ T4627] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 71.590270][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.609301][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.638428][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.645698][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.660728][ T4643] loop2: detected capacity change from 0 to 256 [ 71.672110][ T4243] EXT4-fs (loop4): unmounting filesystem. [ 71.687003][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.742767][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.761921][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.797180][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.816913][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.828395][ T4643] FAT-fs (loop2): Directory bread(block 64) failed [ 71.830475][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.848329][ T4643] FAT-fs (loop2): Directory bread(block 65) failed [ 71.872543][ T4643] FAT-fs (loop2): Directory bread(block 66) failed [ 71.888353][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.896022][ T4643] FAT-fs (loop2): Directory bread(block 67) failed [ 71.930112][ T4425] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.978955][ T4643] FAT-fs (loop2): Directory bread(block 68) failed [ 71.999716][ T4643] FAT-fs (loop2): Directory bread(block 69) failed [ 72.028596][ T4425] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.052011][ T4643] FAT-fs (loop2): Directory bread(block 70) failed [ 72.083209][ T4643] FAT-fs (loop2): Directory bread(block 71) failed [ 72.083378][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.089857][ T4643] FAT-fs (loop2): Directory bread(block 72) failed [ 72.119342][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.144186][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.145782][ T4653] loop0: detected capacity change from 0 to 1024 [ 72.169088][ T4643] FAT-fs (loop2): Directory bread(block 73) failed [ 72.174528][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.195641][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.537406][ T4635] loop1: detected capacity change from 0 to 32768 [ 72.645578][ T4668] ERROR: device name not specified. [ 72.661442][ T4635] JBD2: Ignoring recovery information on journal [ 72.788247][ T4635] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 72.918225][ T4681] netlink: 12 bytes leftover after parsing attributes in process `syz.4.141'. [ 72.960657][ T4247] ocfs2: Unmounting device (7,1) on (node local) [ 72.988384][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.039164][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.099145][ T4425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.154267][ T4261] Bluetooth: hci4: command tx timeout [ 73.581954][ T4700] loop0: detected capacity change from 0 to 4096 [ 73.639693][ T4700] ntfs: (device loop0): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 2. [ 73.697301][ T4700] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 73.772162][ T4700] ntfs: volume version 3.1. [ 73.807905][ T4700] ntfs: (device loop0): map_mft_record_page(): Mft record 0x2 is corrupt. Run chkdsk. [ 73.847429][ T4700] ntfs: (device loop0): map_mft_record(): Failed with error code 5. [ 73.877482][ T4700] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 73.933097][ T4700] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 74.028331][ T4727] ieee802154 phy0 wpan0: encryption failed: -22 [ 74.071642][ T4700] ntfs: (device loop0): ntfs_read_locked_inode(): Index block size (0) < NTFS_BLOCK_SIZE (512) is not supported. Sorry. [ 74.103074][ T4700] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -95. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 74.144400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.158551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.246181][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.287743][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.301685][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.311974][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.363688][ T4425] device veth0_vlan entered promiscuous mode [ 74.401770][ T4425] device veth1_vlan entered promiscuous mode [ 74.509134][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.535904][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.588865][ T4747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.166'. [ 74.604397][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.617788][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.664560][ T4425] device veth0_macvtap entered promiscuous mode [ 74.682524][ T4425] device veth1_macvtap entered promiscuous mode [ 74.750633][ T4425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.811821][ T4425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.850725][ T4758] capability: warning: `syz.1.169' uses deprecated v2 capabilities in a way that may be insecure [ 74.872083][ T4425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.938128][ T4425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.958081][ T4425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.978821][ T4425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.997715][ T4425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.041804][ T4425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.088742][ T4425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.114566][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.156085][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.176221][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.196856][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.252318][ T4425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.280042][ T4425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.305075][ T4425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.327304][ T22] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.328555][ T4425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.373917][ T4425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.396766][ T4425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.417797][ T4425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.441057][ T4425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.468954][ T4425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.480033][ T4777] netlink: 20 bytes leftover after parsing attributes in process `syz.0.175'. [ 75.496877][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.513165][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.539330][ T4425] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.570347][ T4425] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.584271][ T22] usb 2-1: Using ep0 maxpacket: 8 [ 75.628190][ T4425] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.651962][ T4425] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.763248][ T22] usb 2-1: unable to get BOS descriptor or descriptor too short [ 75.828200][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.850549][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.858670][ T22] usb 2-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 1023 [ 75.877569][ T4485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.887714][ T22] usb 2-1: config 1 interface 0 has no altsetting 0 [ 75.895337][ T4485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.907290][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.912653][ T4761] infiniband syz1: set active [ 75.921736][ T4761] infiniband syz1: added bond0 [ 75.925216][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.931946][ T4761] rdma_rxe: unable to create cq [ 75.940162][ T4761] infiniband syz1: Couldn't create ib_mad CQ [ 75.948344][ T4761] infiniband syz1: Couldn't open port 1 [ 75.995832][ T4761] RDS/IB: syz1: added [ 76.005652][ T4761] smc: adding ib device syz1 with port count 1 [ 76.020101][ T4761] smc: ib device syz1 port 1 has pnetid [ 76.073339][ T22] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 76.099102][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.108646][ T22] usb 2-1: Product: syz [ 76.114118][ T22] usb 2-1: Manufacturer: aኖ剾ﵴ赅靐⿤볡瀟ꕌ䂠顧⃲դ鱂ꉆ뛼񙑯塌职鮅멁段ꯏམ别䡯嵦⻳ఖﰧ㚵괰蛱㷋苑械倴㊃쟓횽㶀㚍䊸谵쿡躏磠衟ꫡ麕놤秴♲浠ﭥu뮶઎鳈䇅鼯婄≀俄穆䔰辋쉰䧶菊房ᕉ猳먱䍢龻ꍻ潅㏬ힽ፟⒭ᨓꕝ [ 76.185499][ T22] usb 2-1: SerialNumber: syz [ 76.253197][ T4766] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 76.440585][ T126] cfg80211: failed to load regulatory.db [ 76.526797][ T4787] orangefs_mount: mount request failed with -4 [ 76.571839][ T22] usb 2-1: USB disconnect, device number 2 [ 76.637289][ T4807] loop5: detected capacity change from 0 to 4096 [ 76.795051][ T4818] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 77.532585][ T4843] loop5: detected capacity change from 0 to 2048 [ 77.634092][ T4839] loop0: detected capacity change from 0 to 4096 [ 77.662322][ T4839] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 77.679942][ T4843] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 77.855494][ T4839] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 78.188970][ T4860] netlink: 'syz.5.202': attribute type 1 has an invalid length. [ 78.303035][ T4864] netlink: 96 bytes leftover after parsing attributes in process `syz.1.205'. [ 78.622311][ T4882] loop2: detected capacity change from 0 to 16 [ 78.662023][ T4882] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 79.005849][ T4900] netlink: 40 bytes leftover after parsing attributes in process `syz.4.219'. [ 79.043275][ T4900] netlink: 40 bytes leftover after parsing attributes in process `syz.4.219'. [ 79.435555][ T26] audit: type=1326 audit(1730212899.800:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4916 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190737e719 code=0x7ffc0000 [ 79.526123][ T26] audit: type=1326 audit(1730212899.850:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4916 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190737e719 code=0x7ffc0000 [ 79.610611][ T4913] loop4: detected capacity change from 0 to 4096 [ 79.646887][ T26] audit: type=1326 audit(1730212899.850:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4916 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f190737e719 code=0x7ffc0000 [ 79.706514][ T4913] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 79.739188][ T4927] netlink: 68 bytes leftover after parsing attributes in process `syz.1.230'. [ 79.766218][ T26] audit: type=1326 audit(1730212899.850:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4916 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190737e719 code=0x7ffc0000 [ 79.804488][ T4913] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 79.811774][ T4927] netlink: 68 bytes leftover after parsing attributes in process `syz.1.230'. [ 79.821422][ T4913] ntfs3: loop4: Failed to load $Extend. [ 79.873794][ T26] audit: type=1326 audit(1730212899.850:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4916 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190737e719 code=0x7ffc0000 [ 80.488965][ T4961] loop5: detected capacity change from 0 to 512 [ 80.549686][ T4963] netlink: 'syz.1.243': attribute type 30 has an invalid length. [ 80.567609][ T4955] loop4: detected capacity change from 0 to 4096 [ 80.621504][ T4961] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 80.664477][ T4961] System zones: 0-2, 18-18, 34-34 [ 80.669683][ T4969] loop2: detected capacity change from 0 to 2048 [ 80.771442][ T4955] ntfs3: loop4: ino=1e, "file1" attr_set_size [ 80.791378][ T4961] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.242: bg 0: block 248: padding at end of block bitmap is not set [ 80.799058][ T4955] ntfs3: loop4: ino=1e, "file1" attr_set_size [ 80.826013][ T4978] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.864333][ T4969] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=32784, name_len=0 [ 80.891274][ T4961] Quota error (device loop5): write_blk: dquota write failed [ 80.935052][ T4969] Remounting filesystem read-only [ 80.965356][ T4961] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 81.034731][ T4961] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.242: Failed to acquire dquot type 1 [ 81.119716][ T4961] EXT4-fs (loop5): 1 truncate cleaned up [ 81.164015][ T4961] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 81.207189][ T4961] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.289806][ T4996] loop4: detected capacity change from 0 to 256 [ 81.323073][ T4996] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.381462][ T4961] Quota error (device loop5): write_blk: dquota write failed [ 81.416352][ T4996] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf8e2a5da, utbl_chksum : 0xe619d30d) [ 81.428953][ T4961] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 81.486365][ T4961] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.242: Failed to acquire dquot type 1 [ 81.683929][ T4425] EXT4-fs (loop5): unmounting filesystem. [ 81.706587][ T9] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-5 [ 81.751990][ T9] EXT4-fs error (device loop5): ext4_release_dquot:6824: comm kworker/u4:0: Failed to release dquot type 1 [ 82.069924][ T5026] loop2: detected capacity change from 0 to 256 [ 82.123562][ T5028] netlink: 4392 bytes leftover after parsing attributes in process `syz.1.266'. [ 82.190707][ T5026] FAT-fs (loop2): Directory bread(block 64) failed [ 82.222385][ T5026] FAT-fs (loop2): Directory bread(block 65) failed [ 82.279546][ T5026] FAT-fs (loop2): Directory bread(block 66) failed [ 82.312940][ T5026] FAT-fs (loop2): Directory bread(block 67) failed [ 82.319636][ T5026] FAT-fs (loop2): Directory bread(block 68) failed [ 82.364613][ T5035] loop4: detected capacity change from 0 to 16 [ 82.376219][ T5026] FAT-fs (loop2): Directory bread(block 69) failed [ 82.403174][ T5026] FAT-fs (loop2): Directory bread(block 70) failed [ 82.421839][ T5035] erofs: (device loop4): mounted with root inode @ nid 36. [ 82.452453][ T5026] FAT-fs (loop2): Directory bread(block 71) failed [ 82.495149][ T5026] FAT-fs (loop2): Directory bread(block 72) failed [ 82.510044][ T5026] FAT-fs (loop2): Directory bread(block 73) failed [ 82.525822][ T4261] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[9000] [ 82.550107][ T5035] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 82.683310][ T5045] kAFS: unparsable volume name [ 82.716221][ T5035] syz.4.272 (5035) used greatest stack depth: 19360 bytes left [ 83.023112][ T5065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.284'. [ 83.199917][ T5073] sctp: [Deprecated]: syz.5.288 (pid 5073) Use of int in max_burst socket option. [ 83.199917][ T5073] Use struct sctp_assoc_value instead [ 83.336045][ T5081] netlink: 'syz.1.291': attribute type 6 has an invalid length. [ 83.766991][ T5106] __vm_enough_memory: pid: 5106, comm: syz.4.301, no enough memory for the allocation [ 83.846405][ T5109] netlink: 36 bytes leftover after parsing attributes in process `syz.0.305'. [ 83.897757][ T5111] netlink: 'syz.5.306': attribute type 1 has an invalid length. [ 83.926248][ T5111] netlink: 4 bytes leftover after parsing attributes in process `syz.5.306'. [ 84.024156][ T5119] device veth1_macvtap left promiscuous mode [ 84.133268][ T5121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.311'. [ 84.182735][ T5127] loop5: detected capacity change from 0 to 256 [ 84.240467][ T5133] netlink: 'syz.2.317': attribute type 10 has an invalid length. [ 84.248385][ T5133] netlink: 40 bytes leftover after parsing attributes in process `syz.2.317'. [ 84.259413][ T5133] device team0 entered promiscuous mode [ 84.265086][ T5133] device team_slave_0 entered promiscuous mode [ 84.271589][ T5133] device team_slave_1 entered promiscuous mode [ 84.280168][ T5133] bridge0: port 3(team0) entered blocking state [ 84.286760][ T5133] bridge0: port 3(team0) entered disabled state [ 84.295160][ T5133] bridge0: port 3(team0) entered blocking state [ 84.301895][ T5133] bridge0: port 3(team0) entered forwarding state [ 84.342812][ T5127] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 84.608847][ T4294] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 84.620110][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 84.620124][ T26] audit: type=1326 audit(1730212904.990:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5148 comm="syz.0.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211ad7e719 code=0x7ffc0000 [ 84.699029][ T26] audit: type=1326 audit(1730212905.010:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5148 comm="syz.0.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211ad7e719 code=0x7ffc0000 [ 84.794272][ T26] audit: type=1326 audit(1730212905.020:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5148 comm="syz.0.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f211ad7e719 code=0x7ffc0000 [ 84.853000][ T26] audit: type=1326 audit(1730212905.020:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5148 comm="syz.0.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211ad7e719 code=0x7ffc0000 [ 84.863027][ T4294] usb 2-1: Using ep0 maxpacket: 8 [ 84.962684][ T26] audit: type=1326 audit(1730212905.020:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5148 comm="syz.0.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211ad7e719 code=0x7ffc0000 [ 85.053165][ T4294] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 85.214052][ T4294] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 85.243055][ T4294] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 85.251183][ T4294] usb 2-1: Product: syz [ 85.283904][ T4294] usb 2-1: Manufacturer: syz [ 85.288583][ T4294] usb 2-1: SerialNumber: syz [ 85.368835][ T5182] kernel read not supported for file / âW)B (pid: 5182 comm: syz.0.338) [ 85.394990][ T26] audit: type=1800 audit(1730212905.750:25): pid=5182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.338" name=20C3A25729EBC742EB dev="mqueue" ino=36722 res=0 errno=0 [ 85.442543][ T5188] loop4: detected capacity change from 0 to 8 [ 85.535893][ T5188] SQUASHFS error: Failed to read block 0x730: -5 [ 85.558073][ T5188] SQUASHFS error: Unable to read metadata cache entry [72e] [ 85.583051][ T4294] usb 2-1: Invalid connection information received from device [ 85.849548][ T4292] usb 2-1: USB disconnect, device number 3 [ 85.973004][ T4294] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 86.413157][ T4294] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 86.431843][ T4294] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x2 has invalid maxpacket 1024, setting to 8 [ 86.453686][ T5218] loop5: detected capacity change from 0 to 32768 [ 86.455314][ T4294] usb 1-1: config 1 interface 0 has no altsetting 0 [ 86.467288][ T5213] loop2: detected capacity change from 0 to 32768 [ 86.502458][ T5218] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 86.502458][ T5218] [ 86.520173][ T5218] ERROR: (device loop5): remounting filesystem as read-only [ 86.532465][ T5218] xtLookup: xtSearch returned -5 [ 86.564128][ T5213] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 86.668796][ T5218] syz.5.356 (5218) used greatest stack depth: 18640 bytes left [ 86.763292][ T4294] usb 1-1: string descriptor 0 read error: -22 [ 86.769565][ T4294] usb 1-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.40 [ 86.778690][ T4254] ocfs2: Unmounting device (7,2) on (node local) [ 86.857451][ T4294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.903229][ T5197] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 86.906554][ T5233] loop1: detected capacity change from 0 to 2048 [ 86.910470][ T5197] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 86.990416][ T5233] Alternate GPT is invalid, using primary GPT. [ 86.999263][ T5233] loop1: p1 p2 p3 [ 87.244328][ T5197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.251056][ T4235] udevd[4235]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 87.292647][ T5197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.322550][ T4237] udevd[4237]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 87.324434][ T4262] udevd[4262]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 87.463036][ T4294] usbhid 1-1:1.0: can't add hid device: -71 [ 87.469046][ T4294] usbhid: probe of 1-1:1.0 failed with error -71 [ 87.504185][ T4294] usb 1-1: USB disconnect, device number 3 [ 87.547024][ T5253] netlink: 32 bytes leftover after parsing attributes in process `syz.4.369'. [ 87.596874][ T5253] netlink: 32 bytes leftover after parsing attributes in process `syz.4.369'. [ 87.737971][ T5266] netlink: 9 bytes leftover after parsing attributes in process `syz.2.371'. [ 87.802585][ T5269] netlink: 'syz.4.373': attribute type 2 has an invalid length. [ 87.841366][ T5269] netlink: 'syz.4.373': attribute type 1 has an invalid length. [ 87.852140][ T5269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.373'. [ 88.466561][ T5303] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 88.505743][ T5303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.726520][ T52] block nbd5: Attempted send on invalid socket [ 88.733121][ T52] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 88.749336][ T5317] efs: cannot read volume header [ 88.951391][ T5332] netlink: 192 bytes leftover after parsing attributes in process `syz.4.398'. [ 89.120002][ T5340] loop0: detected capacity change from 0 to 256 [ 89.152531][ T5340] FAT-fs (loop0): Directory bread(block 64) failed [ 89.191217][ T5340] FAT-fs (loop0): Directory bread(block 65) failed [ 89.220267][ T5344] netlink: 20 bytes leftover after parsing attributes in process `syz.1.406'. [ 89.243122][ T5340] FAT-fs (loop0): Directory bread(block 66) failed [ 89.284079][ T5340] FAT-fs (loop0): Directory bread(block 67) failed [ 89.290741][ T5340] FAT-fs (loop0): Directory bread(block 68) failed [ 89.308574][ T5340] FAT-fs (loop0): Directory bread(block 69) failed [ 89.364714][ T5340] FAT-fs (loop0): Directory bread(block 70) failed [ 89.371294][ T5340] FAT-fs (loop0): Directory bread(block 71) failed [ 89.414446][ T5340] FAT-fs (loop0): Directory bread(block 72) failed [ 89.441643][ T5340] FAT-fs (loop0): Directory bread(block 73) failed [ 89.460929][ T5356] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 89.548388][ T5356] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 89.597872][ T5356] overlayfs: missing 'lowerdir' [ 89.899683][ T5377] netlink: 'syz.4.421': attribute type 30 has an invalid length. [ 91.053066][ T4291] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 91.304167][ T4291] usb 5-1: Using ep0 maxpacket: 16 [ 91.353414][ T22] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 91.446040][ T4291] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 91.466119][ T4291] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 91.493313][ T5468] loop0: detected capacity change from 0 to 64 [ 91.513043][ T4291] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.604783][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 91.723203][ T4291] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 91.732565][ T22] usb 3-1: config 0 has an invalid interface number: 5 but max is 0 [ 91.753141][ T22] usb 3-1: config 0 has no interface number 0 [ 91.776288][ T4291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.805179][ T4291] usb 5-1: Product: syz [ 91.809390][ T4291] usb 5-1: Manufacturer: syz [ 91.823836][ T4291] usb 5-1: SerialNumber: syz [ 92.004376][ T22] usb 3-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=f0.ff [ 92.033499][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.056986][ T5493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.473'. [ 92.074538][ T22] usb 3-1: Product: syz [ 92.078772][ T22] usb 3-1: Manufacturer: syz [ 92.097437][ T22] usb 3-1: SerialNumber: syz [ 92.134805][ T22] usb 3-1: config 0 descriptor?? [ 92.271125][ T5502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.477'. [ 92.302536][ T5504] device ipip0 entered promiscuous mode [ 92.324627][ T5506] loop1: detected capacity change from 0 to 1024 [ 92.363384][ T4291] usb 5-1: 0:2 : does not exist [ 92.408627][ T4294] usb 3-1: USB disconnect, device number 3 [ 92.453493][ T4291] usb 5-1: USB disconnect, device number 3 [ 92.528957][ T4235] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 92.571107][ T5510] loop5: detected capacity change from 0 to 1764 [ 92.631380][ T5514] loop0: detected capacity change from 0 to 16 [ 92.695350][ T5514] erofs: (device loop0): mounted with root inode @ nid 36. [ 92.778408][ T5520] openvswitch: netlink: Message has 8 unknown bytes. [ 93.059236][ T5532] loop4: detected capacity change from 0 to 512 [ 93.114061][ T5535] netlink: 'syz.5.494': attribute type 6 has an invalid length. [ 93.175841][ T5532] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 93.223043][ T5532] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.290410][ T5543] loop1: detected capacity change from 0 to 512 [ 93.317851][ T5543] EXT4-fs: Ignoring removed orlov option [ 93.404370][ T5543] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 93.417914][ T5543] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 93.419634][ T4243] EXT4-fs (loop4): unmounting filesystem. [ 93.428261][ T5543] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.496: Corrupt directory, running e2fsck is recommended [ 93.484639][ T5543] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 93.505167][ T5543] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.496: corrupted in-inode xattr [ 93.528805][ T5543] EXT4-fs (loop1): Remounting filesystem read-only [ 93.538387][ T5543] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.496: couldn't read orphan inode 15 (err -117) [ 93.574634][ T5543] EXT4-fs (loop1): Remounting filesystem read-only [ 93.601745][ T5560] netlink: 8 bytes leftover after parsing attributes in process `syz.5.504'. [ 93.611155][ T5543] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 93.644470][ T5560] netlink: 12 bytes leftover after parsing attributes in process `syz.5.504'. [ 93.689139][ T5543] EXT4-fs error (device loop1): ext4_xattr_set_entry:1619: inode #2: comm syz.1.496: corrupted xattr entries [ 93.758781][ T5543] EXT4-fs (loop1): Remounting filesystem read-only [ 93.923474][ T4247] EXT4-fs (loop1): unmounting filesystem. [ 94.258840][ T5580] loop4: detected capacity change from 0 to 4096 [ 94.363153][ T4292] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 94.515330][ T5604] Driver unsupported XDP return value 0 on prog (id 27) dev N/A, expect packet loss! [ 94.617924][ T5609] netlink: 'syz.5.523': attribute type 32 has an invalid length. [ 94.697458][ T5611] loop4: detected capacity change from 0 to 1024 [ 94.733363][ T4292] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 94.751703][ T4292] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.775166][ T5614] netlink: 200 bytes leftover after parsing attributes in process `syz.0.524'. [ 94.788068][ T4292] usb 2-1: config 0 has no interface number 0 [ 94.814765][ T4292] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 94.877258][ T4292] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 94.907459][ T4299] hfsplus: b-tree write err: -5, ino 4 [ 94.922155][ T4292] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.998099][ T4292] usb 2-1: config 0 interface 52 has no altsetting 0 [ 95.010394][ T26] audit: type=1400 audit(1730212915.370:26): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5621 comm="syz.5.528" [ 95.119467][ T5627] loop0: detected capacity change from 0 to 64 [ 95.185406][ T4292] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 95.222260][ T4292] usb 2-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 95.242480][ T4292] usb 2-1: Product: syz [ 95.252596][ T4292] usb 2-1: Manufacturer: syz [ 95.262710][ T4292] usb 2-1: SerialNumber: syz [ 95.294198][ T5633] netlink: 4 bytes leftover after parsing attributes in process `syz.5.532'. [ 95.304249][ T4292] usb 2-1: config 0 descriptor?? [ 95.343020][ T4291] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 95.462364][ T5642] netlink: 44 bytes leftover after parsing attributes in process `syz.5.533'. [ 95.574035][ T4292] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 95.595024][ T4292] synaptics_usb: probe of 2-1:0.52 failed with error -5 [ 95.608547][ T4291] usb 5-1: Using ep0 maxpacket: 16 [ 95.817426][ T4292] usb 2-1: USB disconnect, device number 4 [ 95.957991][ T4291] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=dd.d4 [ 95.990139][ T4291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.015051][ T4291] usb 5-1: Product: syz [ 96.031662][ T4291] usb 5-1: Manufacturer: syz [ 96.053796][ T4291] usb 5-1: SerialNumber: syz [ 96.070398][ T4291] usb 5-1: config 0 descriptor?? [ 96.102179][ T5672] loop0: detected capacity change from 0 to 256 [ 96.111739][ T5669] loop2: detected capacity change from 0 to 512 [ 96.126703][ T4291] usb_ehset_test: probe of 5-1:0.0 failed with error -32 [ 96.133926][ T5669] EXT4-fs: Ignoring removed orlov option [ 96.150945][ T5669] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 96.212456][ T5672] FAT-fs (loop0): Directory bread(block 64) failed [ 96.224177][ T5672] FAT-fs (loop0): Directory bread(block 65) failed [ 96.230832][ T5672] FAT-fs (loop0): Directory bread(block 66) failed [ 96.234040][ T5669] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 96.248336][ T5669] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.544: Corrupt directory, running e2fsck is recommended [ 96.263477][ T5672] FAT-fs (loop0): Directory bread(block 67) failed [ 96.270114][ T5672] FAT-fs (loop0): Directory bread(block 68) failed [ 96.278346][ T5672] FAT-fs (loop0): Directory bread(block 69) failed [ 96.287982][ T5672] FAT-fs (loop0): Directory bread(block 70) failed [ 96.294955][ T5672] FAT-fs (loop0): Directory bread(block 71) failed [ 96.301586][ T5672] FAT-fs (loop0): Directory bread(block 72) failed [ 96.308383][ T5672] FAT-fs (loop0): Directory bread(block 73) failed [ 96.342262][ T5669] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 96.350950][ T5669] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.544: corrupted in-inode xattr [ 96.369105][ T5669] EXT4-fs (loop2): Remounting filesystem read-only [ 96.376256][ T5669] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.544: couldn't read orphan inode 15 (err -117) [ 96.384635][ T4291] usb 5-1: USB disconnect, device number 4 [ 96.431775][ T5669] EXT4-fs (loop2): Remounting filesystem read-only [ 96.444302][ T5669] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 96.600136][ T5669] EXT4-fs error (device loop2): ext4_xattr_set_entry:1619: inode #2: comm syz.2.544: corrupted xattr entries [ 96.650601][ T5669] EXT4-fs (loop2): Remounting filesystem read-only [ 96.734301][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 96.754834][ T5694] loop1: detected capacity change from 0 to 16 [ 96.815444][ T5696] netlink: 40 bytes leftover after parsing attributes in process `syz.5.551'. [ 96.817666][ T5694] erofs: (device loop1): mounted with root inode @ nid 36. [ 96.832368][ T5696] netlink: 40 bytes leftover after parsing attributes in process `syz.5.551'. [ 96.922776][ T4261] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[9000] [ 96.938344][ T5694] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 96.997724][ T5701] loop4: detected capacity change from 0 to 764 [ 97.006644][ T26] audit: type=1800 audit(1730212917.370:27): pid=5694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.550" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 97.169086][ T5706] loop2: detected capacity change from 0 to 2048 [ 97.246085][ T5706] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 97.314535][ T5710] loop5: detected capacity change from 0 to 256 [ 97.322753][ T5706] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.578940][ T5722] netlink: 'syz.1.560': attribute type 4 has an invalid length. [ 97.782229][ T4261] Bluetooth: Wrong link type (-71) [ 97.849740][ T5691] loop0: detected capacity change from 0 to 32768 [ 97.937483][ T5691] JBD2: Ignoring recovery information on journal [ 98.038421][ T5691] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 98.232710][ T4248] ocfs2: Unmounting device (7,0) on (node local) [ 98.245908][ T5750] loop5: detected capacity change from 0 to 16 [ 98.342714][ T5750] erofs: (device loop5): mounted with root inode @ nid 36. [ 98.401490][ T4261] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[9000] [ 98.414263][ T5750] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 98.419758][ T5745] loop1: detected capacity change from 0 to 4096 [ 98.432277][ T26] audit: type=1800 audit(1730212918.800:28): pid=5750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.568" name="file3" dev="loop5" ino=89 res=0 errno=0 [ 98.508584][ T5745] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 98.787502][ T5733] loop2: detected capacity change from 0 to 32768 [ 98.852835][ T5733] [ 98.852835][ T5733] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 98.852835][ T5733] [ 98.912391][ T5733] [ 98.912391][ T5733] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 98.912391][ T5733] [ 98.982399][ T5733] [ 98.982399][ T5733] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 98.982399][ T5733] [ 99.002305][ T5771] loop5: detected capacity change from 0 to 128 [ 99.062502][ T106] [ 99.062502][ T106] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 99.062502][ T106] [ 99.160053][ T33] [ 99.160053][ T33] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 99.160053][ T33] [ 99.185265][ T5771] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 99.223114][ T33] [ 99.223114][ T33] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 99.223114][ T33] [ 99.274618][ T5771] ext4 filesystem being mounted at /99/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 99.309000][ T4254] [ 99.309000][ T4254] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 99.309000][ T4254] [ 99.311259][ T5771] EXT4-fs warning (device loop5): __ext4_ioctl:1246: Setting inode version is not supported with metadata_csum enabled. [ 99.344564][ T107] [ 99.344564][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 99.344564][ T107] [ 99.393108][ T4254] [ 99.393108][ T4254] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 99.393108][ T4254] [ 99.498391][ T4425] EXT4-fs (loop5): unmounting filesystem. [ 100.288796][ T5834] loop4: detected capacity change from 0 to 1024 [ 100.334781][ T5834] hfsplus: unable to parse mount options [ 100.415406][ T4235] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 100.567368][ T5847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.606'. [ 100.718048][ T126] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 100.924415][ T5814] loop5: detected capacity change from 0 to 32768 [ 100.972952][ T126] usb 5-1: Using ep0 maxpacket: 16 [ 100.984905][ T5814] [ 100.984905][ T5814] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.984905][ T5814] [ 100.994056][ T5863] loop1: detected capacity change from 0 to 1024 [ 101.053339][ T5814] [ 101.053339][ T5814] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.053339][ T5814] [ 101.074701][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.103611][ T5814] [ 101.103611][ T5814] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.103611][ T5814] [ 101.123887][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.131697][ T126] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 101.142977][ T126] usb 5-1: config 0 has no interface number 0 [ 101.145850][ T107] [ 101.145850][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.145850][ T107] [ 101.159713][ T126] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid maxpacket 62119, setting to 1024 [ 101.159747][ T126] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 101.285740][ T126] usb 5-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 101.295020][ T75] [ 101.295020][ T75] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.295020][ T75] [ 101.331945][ T126] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 101.345095][ T75] [ 101.345095][ T75] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.345095][ T75] [ 101.368101][ T126] usb 5-1: Product: syz [ 101.372316][ T126] usb 5-1: SerialNumber: syz [ 101.386372][ T4425] [ 101.386372][ T4425] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.386372][ T4425] [ 101.428491][ T126] usb 5-1: config 0 descriptor?? [ 101.429711][ T4425] [ 101.429711][ T4425] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.429711][ T4425] [ 101.483198][ T5834] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 101.511669][ T106] [ 101.511669][ T106] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.511669][ T106] [ 101.571894][ T106] ================================================================== [ 101.580008][ T106] BUG: KASAN: use-after-free in txEnd+0x350/0x560 [ 101.586441][ T106] Write of size 8 at addr ffff8880765a6040 by task jfsCommit/106 [ 101.594165][ T106] [ 101.596498][ T106] CPU: 1 PID: 106 Comm: jfsCommit Not tainted 6.1.114-syzkaller #0 [ 101.604422][ T106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 101.614472][ T106] Call Trace: [ 101.617740][ T106] [ 101.620660][ T106] dump_stack_lvl+0x1e3/0x2cb [ 101.625336][ T106] ? nf_tcp_handle_invalid+0x642/0x642 [ 101.630802][ T106] ? panic+0x764/0x764 [ 101.634877][ T106] ? _printk+0xd1/0x111 [ 101.639026][ T106] ? __virt_addr_valid+0x17f/0x530 [ 101.644129][ T106] ? __virt_addr_valid+0x17f/0x530 [ 101.649228][ T106] print_report+0x15f/0x4f0 [ 101.653736][ T106] ? __virt_addr_valid+0x17f/0x530 [ 101.658871][ T106] ? __virt_addr_valid+0x17f/0x530 [ 101.663988][ T106] ? __virt_addr_valid+0x45b/0x530 [ 101.669099][ T106] ? __phys_addr+0xb6/0x170 [ 101.673617][ T106] ? txEnd+0x350/0x560 [ 101.677697][ T106] kasan_report+0x136/0x160 [ 101.682205][ T106] ? txEnd+0x350/0x560 [ 101.686271][ T106] kasan_check_range+0x27f/0x290 [ 101.691200][ T106] txEnd+0x350/0x560 [ 101.695086][ T106] jfs_lazycommit+0x610/0xb60 [ 101.699752][ T106] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 101.705639][ T106] ? lockdep_hardirqs_on+0x94/0x130 [ 101.710829][ T106] ? txFreelock+0x580/0x580 [ 101.715323][ T106] ? do_task_dead+0xd0/0xd0 [ 101.720343][ T106] ? _raw_spin_unlock+0x40/0x40 [ 101.725194][ T106] ? __kthread_parkme+0x168/0x1c0 [ 101.730215][ T106] kthread+0x28d/0x320 [ 101.734272][ T106] ? txFreelock+0x580/0x580 [ 101.738762][ T106] ? kthread_blkcg+0xd0/0xd0 [ 101.743341][ T106] ret_from_fork+0x1f/0x30 [ 101.747762][ T106] [ 101.750765][ T106] [ 101.753074][ T106] Allocated by task 5814: [ 101.757387][ T106] kasan_set_track+0x4b/0x70 [ 101.761989][ T106] __kasan_kmalloc+0x97/0xb0 [ 101.766562][ T106] lmLogOpen+0x314/0x1030 [ 101.770880][ T106] jfs_mount_rw+0xe3/0x640 [ 101.775288][ T106] jfs_fill_super+0x67d/0xc40 [ 101.779950][ T106] mount_bdev+0x2c9/0x3f0 [ 101.784269][ T106] legacy_get_tree+0xeb/0x180 [ 101.788933][ T106] vfs_get_tree+0x88/0x270 [ 101.793348][ T106] do_new_mount+0x2ba/0xb40 [ 101.797839][ T106] __se_sys_mount+0x2d5/0x3c0 [ 101.802502][ T106] do_syscall_64+0x3b/0xb0 [ 101.806903][ T106] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.812787][ T106] [ 101.815096][ T106] Freed by task 4425: [ 101.819065][ T106] kasan_set_track+0x4b/0x70 [ 101.823648][ T106] kasan_save_free_info+0x27/0x40 [ 101.828658][ T106] ____kasan_slab_free+0xd6/0x120 [ 101.833668][ T106] __kmem_cache_free+0x25c/0x3c0 [ 101.838591][ T106] lmLogClose+0x29d/0x530 [ 101.842993][ T106] jfs_umount+0x298/0x370 [ 101.847307][ T106] jfs_put_super+0x86/0x180 [ 101.851798][ T106] generic_shutdown_super+0x130/0x340 [ 101.857156][ T106] kill_block_super+0x7a/0xe0 [ 101.861826][ T106] deactivate_locked_super+0xa0/0x110 [ 101.867186][ T106] cleanup_mnt+0x490/0x520 [ 101.871593][ T106] task_work_run+0x246/0x300 [ 101.876171][ T106] exit_to_user_mode_loop+0xde/0x100 [ 101.881442][ T106] exit_to_user_mode_prepare+0xb1/0x140 [ 101.886972][ T106] syscall_exit_to_user_mode+0x60/0x270 [ 101.892509][ T106] do_syscall_64+0x47/0xb0 [ 101.896926][ T106] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.902826][ T106] [ 101.905144][ T106] The buggy address belongs to the object at ffff8880765a6000 [ 101.905144][ T106] which belongs to the cache kmalloc-1k of size 1024 [ 101.919187][ T106] The buggy address is located 64 bytes inside of [ 101.919187][ T106] 1024-byte region [ffff8880765a6000, ffff8880765a6400) [ 101.932455][ T106] [ 101.934765][ T106] The buggy address belongs to the physical page: [ 101.941169][ T106] page:ffffea0001d96800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x765a0 [ 101.951301][ T106] head:ffffea0001d96800 order:3 compound_mapcount:0 compound_pincount:0 [ 101.959627][ T106] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 101.967633][ T106] raw: 00fff00000010200 ffffea00006ba000 dead000000000002 ffff888017c41dc0 [ 101.976207][ T106] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 101.984772][ T106] page dumped because: kasan: bad access detected [ 101.991178][ T106] page_owner tracks the page as allocated [ 101.996876][ T106] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4254, tgid 4254 (syz-executor), ts 55693548660, free_ts 55580922709 [ 102.018222][ T106] post_alloc_hook+0x18d/0x1b0 [ 102.022987][ T106] get_page_from_freelist+0x322e/0x33b0 [ 102.028519][ T106] __alloc_pages+0x28d/0x770 [ 102.033097][ T106] alloc_slab_page+0x6a/0x150 [ 102.037762][ T106] new_slab+0x84/0x2d0 [ 102.041818][ T106] ___slab_alloc+0xc20/0x1270 [ 102.046481][ T106] __kmem_cache_alloc_node+0x19f/0x260 [ 102.051927][ T106] __kmalloc_node+0xa2/0x230 [ 102.056503][ T106] qdisc_alloc+0x93/0xa30 [ 102.060824][ T106] qdisc_create_dflt+0x5d/0x500 [ 102.065662][ T106] dev_activate+0x3b4/0x1200 [ 102.070245][ T106] __dev_open+0x3f3/0x510 [ 102.074559][ T106] dev_open+0xa9/0x260 [ 102.078630][ T106] team_add_slave+0x96e/0x2760 [ 102.083386][ T106] do_setlink+0xe99/0x3de0 [ 102.087792][ T106] rtnl_newlink+0x172c/0x2050 [ 102.092480][ T106] page last free stack trace: [ 102.097150][ T106] free_unref_page_prepare+0xf63/0x1120 [ 102.102684][ T106] free_unref_page+0x33/0x3e0 [ 102.107434][ T106] __unfreeze_partials+0x1b7/0x210 [ 102.112530][ T106] put_cpu_partial+0x17b/0x250 [ 102.117282][ T106] qlist_free_all+0x76/0xe0 [ 102.121771][ T106] kasan_quarantine_reduce+0x156/0x170 [ 102.127217][ T106] __kasan_slab_alloc+0x1f/0x70 [ 102.132052][ T106] slab_post_alloc_hook+0x52/0x3a0 [ 102.137150][ T106] __kmem_cache_alloc_node+0x137/0x260 [ 102.142600][ T106] kmalloc_trace+0x26/0xe0 [ 102.147007][ T106] netdevice_event+0x3eb/0xa00 [ 102.151763][ T106] raw_notifier_call_chain+0xd0/0x170 [ 102.157120][ T106] __netdev_upper_dev_link+0x579/0x750 [ 102.162564][ T106] netdev_master_upper_dev_link+0xad/0xf0 [ 102.168275][ T106] team_add_slave+0xe8c/0x2760 [ 102.173027][ T106] do_setlink+0xe99/0x3de0 [ 102.177431][ T106] [ 102.179746][ T106] Memory state around the buggy address: [ 102.185396][ T106] ffff8880765a5f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 102.193450][ T106] ffff8880765a5f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 102.201497][ T106] >ffff8880765a6000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.209540][ T106] ^ [ 102.215677][ T106] ffff8880765a6080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.223720][ T106] ffff8880765a6100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.231774][ T106] ================================================================== [ 102.297399][ T126] usb 5-1: invalid MIDI in EP 0 [ 102.403590][ T106] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 102.410913][ T106] CPU: 0 PID: 106 Comm: jfsCommit Not tainted 6.1.114-syzkaller #0 [ 102.418821][ T106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 102.428888][ T106] Call Trace: [ 102.432184][ T106] [ 102.435135][ T106] dump_stack_lvl+0x1e3/0x2cb [ 102.439832][ T106] ? nf_tcp_handle_invalid+0x642/0x642 [ 102.445313][ T106] ? panic+0x764/0x764 [ 102.449417][ T106] ? vscnprintf+0x59/0x80 [ 102.453769][ T106] panic+0x318/0x764 [ 102.457687][ T106] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 102.463865][ T106] ? check_panic_on_warn+0x1d/0xa0 [ 102.468997][ T106] ? memcpy_page_flushcache+0xfc/0xfc [ 102.474386][ T106] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 102.480389][ T106] ? _raw_spin_unlock+0x40/0x40 [ 102.480915][ T126] snd-usb-audio: probe of 5-1:0.2 failed with error -22 [ 102.492194][ T106] check_panic_on_warn+0x7e/0xa0 [ 102.497154][ T106] ? txEnd+0x350/0x560 [ 102.501238][ T106] end_report+0x66/0x110 [ 102.505498][ T106] kasan_report+0x143/0x160 [ 102.508838][ T126] usb 5-1: USB disconnect, device number 5 [ 102.515804][ T106] ? txEnd+0x350/0x560 [ 102.519890][ T106] kasan_check_range+0x27f/0x290 [ 102.524837][ T106] txEnd+0x350/0x560 [ 102.528758][ T106] jfs_lazycommit+0x610/0xb60 [ 102.533450][ T106] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 102.539365][ T106] ? lockdep_hardirqs_on+0x94/0x130 [ 102.544589][ T106] ? txFreelock+0x580/0x580 [ 102.549107][ T106] ? do_task_dead+0xd0/0xd0 [ 102.553631][ T106] ? _raw_spin_unlock+0x40/0x40 [ 102.558499][ T106] ? __kthread_parkme+0x168/0x1c0 [ 102.563544][ T106] kthread+0x28d/0x320 [ 102.567618][ T106] ? txFreelock+0x580/0x580 [ 102.572130][ T106] ? kthread_blkcg+0xd0/0xd0 [ 102.576726][ T106] ret_from_fork+0x1f/0x30 [ 102.581164][ T106] [ 102.584601][ T106] Kernel Offset: disabled [ 102.588914][ T106] Rebooting in 86400 seconds..