last executing test programs: 13.678639651s ago: executing program 2 (id=340): syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCXONC(r1, 0x540a, 0x0) 13.503233576s ago: executing program 2 (id=342): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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") r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x50007a2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r1, 0x0, 0x15180) 13.09814804s ago: executing program 2 (id=345): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x0, 0x0, @ioapic={0xf000, 0x9, 0xffffffff, 0x7, 0x0, [{0x0, 0x2}, {0x0, 0x0, 0x0, '\x00', 0x6}, {0x0, 0xff}, {0x0, 0x0, 0x4, '\x00', 0xd}, {}, {0x0, 0x8}, {}, {}, {0x2, 0x0, 0x0, '\x00', 0x40}, {}, {}, {}, {0x0, 0xff}, {0x0, 0xe}, {}, {}, {0xfe, 0x0, 0x4}, {0x80}, {0xff}, {}, {0x0, 0x0, 0x0, '\x00', 0x3}]}}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000040)={0x1, 0x2}) 12.63117626s ago: executing program 2 (id=351): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000300)={[{@noinline_xattr}, {@four_active_logs}, {@four_active_logs}, {@jqfmt_vfsv1}, {@noinline_data}, {@user_xattr}, {@checkpoint_diasble}, {@fastboot}, {@fsync_mode_strict}, {@discard_unit_section}]}, 0x21, 0x552d, &(0x7f000000abc0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 11.92282565s ago: executing program 0 (id=356): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x17, &(0x7f0000000200)=@sack_info={r1}, 0xc) 11.740138565s ago: executing program 0 (id=358): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0) 11.507798545s ago: executing program 0 (id=361): r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) 11.442975489s ago: executing program 0 (id=363): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file4\x00', 0x0, &(0x7f0000005800)={[{@noinline_xattr}, {@four_active_logs}, {@discard}, {@fault_injection={'fault_injection', 0x3d, 0xa0c8}}, {@fault_type={'fault_type', 0x3d, 0x6}}, {@user_xattr}, {@inline_data}, {@fastboot}, {@fsync_mode_strict}, {@discard_unit_section}]}, 0x21, 0x5548, &(0x7f00000058c0)="$eJzs3E1vG1UXAOBjp2nffrwlQizYdVCFlEi1Vacfgl2BVny2qgosWIFju5Zb2xPFrhu66oIlYsE/QSCxYslvYMGaHWIBYocE8txJoS2VKsWOSfM80vjMvXPnzL2jJNKZiRzAgbWS/f5rJU7G0YhYiogTEcV+pdwKl1J4MSJORUT1H1ul7H/QcTgijkXEyWnylLNSHvryzOT0hV/e+e27H44cOv7Vtz8ubtXAor0cEYPNtH93kGLeTfFW2d+c9Io4OD8pYzowuF228xTvdjaKDHebO+OaRTzXTePzzTujabzZb7amsdu7WfRvDtMFR5PuTp7ihFvNraLd7mwUsTfKi9i9l+a1fS/9bbs3Gqc87TLfp0X6GI93YurvbHfSejZvF7E1HJf9KW/e7mxP46SM5eWilffbxTw2dnOn/9Neeq83vLOdTTpbo14+zC7UG6/UGxdrja283Rl3zteag/bF89lqtz8dVht3moNL3Tzv9jv1Vj5Yy1a7rVat0chWL3c2es3h/Uajfq5+tnZhLUt7Z7I3r32Y9dvZ6jS+3hveGff6o+xmvpWlM9ay9fq5V9ey043s/avXs+s3rly5ev2Djy9/dO21q2+/UQ56bFrZ6vrZ9fVa42xtvbG2uxsw0/Vnc17/Z+WkZ7h+2JXKoicAsP+o/4FFmF/9v3Uj4vH6vzrj+j/U/zOxr+rfg17/z2H9sCvqfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAA+un5a/fKnZWUvt42f//suv5sl2JiGpE/PkvluLwQzmXyjzLTxi//Mgcvq9EkWF6jSPldiwiLpXbH8/N+y4AAADAs+ub+6e+SNV6+lh5qrOOznlW7JH00KZ64pMZ5atExPLKzzPKVp1+vDCjZMXP96HYnlG24gHW/2aULD1yOzSrbE+l+HV/N4UHKylCJYXqo2fMbLUAAMDCLD0U9rYKAQAAYC99/sQjt/d0HuyxSuy8ytx5F1z85/3fL/uOprZXfwAAALB/VRY9AQAAAGDuivrf9/8BAADAsy19/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBf7NxNbtpAGAbgz8Yu9E9FVfe9SndwjB6hyy4rDtBLcAR6hV6AM5BdjhBBhMdBISIJxGNQoueR7MGWeT3mZzEz0gcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECfrurF9N+f73+75qw33eR5GgAAAOCQVb2YNi/G6fhje/5ze+pre1xERBkRh8bug3i3lzloc+pHrq8f9OF/RJOwvcew3T5ExI+0beJL358CAAAAvEnVdreczSdptJ5240v3is5O+A7TpE356WemWxcRUY+vM6WV27xvmcKa33cVvzOlNRNYo0xhacqtypV2lObvvpu1G91ritSUT78/27MDAABnNNhrzjsKAQAA4Jx+XboD9OH9s1cUcbeUuVsKHKZmtBdhsQ8AAABer+LSHQAAAAB614z/T6n/F8fU/6uy1/+LG/X/AAAA4MVS/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6tKoX0+VsPumas950k+dpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALhlf95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmf7Q8U1yh4iouBBL3a7ra29iQclePBPEEK6rbFbf7Q52FKEXLxJzr2IHkUEJd76D3jqTWihl3rrYQ8VRPCyMrMz2UkTcGPIzJp8PvDmfXcymfd9MxDynTcJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURu9M4yTbdCZxXOy79/jWStbff6LP3Nl4sJi1LI7qTPr/4aXqh6jbXCIAAAAcHUlZ34cQHqabS1kfd/L6Py2PyWr+b5+ZxGU9/2TdX/Zl7Z+1X35+9MLWQJ3JONlJL60OB6d3ptI6uFnOt2f/9YhWfuXzZy9JfkPi99efH6X59Yy+vnv33XYeHqsjWwDgvzhV9kVQ/j6U9f0mEwPgyGhVCu+i/v8r6TScFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEANRuvhqTKOQgiLrWmcuf/41spu/Z2NB4tlO3/79kb1nNkp0hDCpdXh4HSNc5l312/cvLI8HA6u1R+8HEJoavS3i+lf+XCGg0No5PocVPD3eDze03cdbz7nfQVxcbNnOLg9Lzk3HzT4QwkAgEMpLVpW1z9MN5eyfdFCCOPvttf/r1XiMGP9/+ij8/eqY1Xr/35tM5x/vbWrn/Wu37j5xurV5cuDy4NP3jzTf6t/9sK5cxd6+bOSnicmAAAA7E+7aNX6P17Yuf5/shKHGev/z7/pfzkd6bd8q/7fabro13QmAAAAR9tzr/z5R7TL/qjdDl8sr61d60+2W5/PTLYNpLpnx4pWrf+ThaazAgAAAOowWo+2rf9frMRhxvX/p79/8cfqOZMQwoli/f/UyqfDi/VNZ67V8efETc8RAACAZp0oWnX9P83f/4+3XnmIQwivvzqJi38DOFP9n7z31Q/VsZLK+/9n65viXIq7k+uR990QWt1tX/61scQAAAA4lI4XLSv2f083lz7+6eQHbe//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANTtnwAAAP//gQBD5A==") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 10.808022513s ago: executing program 2 (id=364): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c790"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4140aecd, &(0x7f0000000040)) 9.684093958s ago: executing program 0 (id=369): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000340)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_STATUS_CODE={0x6}]}, 0x2c}}, 0x0) 9.383894903s ago: executing program 2 (id=372): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x0) 8.22787271s ago: executing program 0 (id=376): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0xb, &(0x7f0000001fc0)=ANY=[], 0x0) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x40085507, &(0x7f00000000c0)={{r1}, "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"}) 2.739613277s ago: executing program 4 (id=405): r0 = syz_io_uring_setup(0x40f, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000180)=r2, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x80000004, 0x0, 0x4) io_uring_enter(r0, 0x1469, 0x0, 0x0, 0x0, 0x0) 2.499989827s ago: executing program 4 (id=407): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000100000000000000000000000001"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000", @ANYRES64=r0], 0xb8}}, 0x0) 2.340586171s ago: executing program 4 (id=410): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) 2.247886979s ago: executing program 1 (id=411): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x693, &(0x7f0000000880)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000480)=ANY=[], 0x700, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000004c0)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000180)=ANY=[], 0x841, 0x0) setxattr$incfs_metadata(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000280)='./file1\x00', 0x0, 0x0) 2.242920149s ago: executing program 4 (id=413): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e24, @dev}, 0x10) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x102) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20) 1.957500554s ago: executing program 1 (id=414): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{}, {0x77359400}}, 0x0) 1.810721566s ago: executing program 1 (id=416): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@acl}, {@debug}]}, 0xfc, 0x564, &(0x7f0000000940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000380), 0xb14c) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x800, 0xfffffbfe}) 1.679706587s ago: executing program 3 (id=417): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff0000000212a700008e3dea6325ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff50100000010000100050c100000000068a3000000", 0x58}], 0x1) 1.512099042s ago: executing program 3 (id=418): r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x9004}, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0008004500001400000002"], 0x0) 1.507294112s ago: executing program 3 (id=419): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0xff, 0x0, @time={0x6, 0x7fff}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x38) read$snapshot(r1, 0x0, 0xffffffbf) poll(&(0x7f0000000000)=[{r1, 0x421}], 0x1, 0x3) 1.438569988s ago: executing program 3 (id=420): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xefff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}]}, 0x48}}, 0x0) 1.355971065s ago: executing program 1 (id=421): syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x2810880, &(0x7f00000004c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="fb270d546bcf83ef0b1ac397e70cecce18f99c075b5a7dba1c3e62b1ba8d4e6d17d00ef7b5514fb9be0f3537ea1870bbff68f870f5651fb45afc4ed82e667e11c7e27e90134a4052e1750d7e0370b13b29293dec5b1acdeaa6e99641491aef9aee5e2baa41d42c360f8e72bd4a2b0235d2cb1aec9ef23d7326bfa9", @ANYRES8, @ANYRES64], 0x8b, 0x299, &(0x7f0000000780)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x81000) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r1, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.339385666s ago: executing program 4 (id=422): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f00000001c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',discard=0x0000000000000009,gid=', @ANYRESHEX=0x0, @ANYBLOB=',integrity,errors=continue,discard,noquota\x00iocharset=iso8859-1,grpquota,resize=0x0000000000009c5c,uid=', @ANYRESHEX=0x0, @ANYRES16, @ANYRESHEX=0x0, @ANYBLOB="2c6e6f71756f74612c6572726f72733d72656d06000000000000006572726f72733d636f6e74696e75652c6e6f71756f74612c7375626a5f747970653d2b2d5d7b2e26512e2c7375626a5f726f6c653d6769642c7375626a5f747970653d676b64d8db59889794042463bdc37f04946fe8824a7bf833c974d344bec12ea1f6c47d3da69398f9092b5d04669018a79d0d91d46ff21748c58f23cddc6dfcc0a1d56d376a8228ae91637768b79e28fd6f5e313993b1054cae1bfc7946f3d662fb622cb21edce6c8c03fd7f6494cf4cafd862c00"], 0x5, 0x60ea, &(0x7f000000c4c0)="$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") r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) ftruncate(r0, 0x4000000) 1.148956052s ago: executing program 3 (id=423): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000064c0)='./bus\x00', 0x28108c0, &(0x7f0000006980)=ANY=[@ANYBLOB="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"], 0xfe, 0x6180, &(0x7f000000df40)="$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") chdir(&(0x7f00000001c0)='./file0\x00') r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.027889243s ago: executing program 1 (id=424): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0xfffffffffffffffc, 0x5, 0x0, 0x33, 0x6, 0x6c}, {0x0, 0x0, 0x101}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x6c}, 0x2, @in=@dev, 0x0, 0x1, 0x0, 0x2, 0x0, 0xfb}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) 870.247916ms ago: executing program 1 (id=425): unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x200000000003, 0x87) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000002000010300006744a50d0000020014000000000110000000080002"], 0x3b}}, 0x0) 156.956197ms ago: executing program 4 (id=426): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x60, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @sit={{0x8}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_ENCAP_FLAGS={0x6}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6}, @IFLA_IPTUN_TOS={0x5}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8}, @IFLA_IPTUN_ENCAP_SPORT={0x6}]}}}]}, 0x60}}, 0x0) 0s ago: executing program 3 (id=427): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountstats\x00') sendfile(r1, r2, 0x0, 0x1d) kernel console output (not intermixed with test programs): ANGE): veth1: link becomes ready [ 59.012573][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.023315][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.056944][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.064997][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.073812][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.083790][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.093261][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.100334][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.108690][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.117457][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.126558][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.133680][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.149036][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.167179][ T3575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.186883][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.204210][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.215692][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 59.226011][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.235003][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.244199][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.253599][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.262818][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.271941][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.285026][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.293672][ T3617] Bluetooth: hci4: command 0x041b tx timeout [ 59.299865][ T3617] Bluetooth: hci3: command 0x041b tx timeout [ 59.301104][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.306757][ T3617] Bluetooth: hci1: command 0x041b tx timeout [ 59.315702][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.320936][ T3617] Bluetooth: hci2: command 0x041b tx timeout [ 59.345971][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.362669][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.374628][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.390548][ T3569] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.402423][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.419548][ T3570] device veth0_vlan entered promiscuous mode [ 59.438733][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.449579][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.466587][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.477716][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.492721][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.502653][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.511243][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.519524][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.538525][ T3577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.576721][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.588308][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.597750][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.608388][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.628252][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.636441][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.655222][ T3576] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.669862][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.683993][ T3570] device veth1_vlan entered promiscuous mode [ 59.703956][ T3577] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.711918][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.720379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.755586][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.770799][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.782926][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.790477][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.805411][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.814605][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.823847][ T1193] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.830928][ T1193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.838984][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.847182][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.856624][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.867284][ T3575] device veth0_vlan entered promiscuous mode [ 59.897157][ T3569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.906039][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.925898][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.939771][ T1245] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.946962][ T1245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.956276][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.965217][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.988733][ T3575] device veth1_vlan entered promiscuous mode [ 60.000173][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.010945][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.021731][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.041989][ T3570] device veth0_macvtap entered promiscuous mode [ 60.057229][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.065895][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.074531][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.084214][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.093620][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.104198][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.113052][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.122674][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.131232][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.147656][ T3570] device veth1_macvtap entered promiscuous mode [ 60.170621][ T3577] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.182535][ T3577] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.197891][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.206395][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.215547][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.223980][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.232671][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.241272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.250288][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.266017][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.281225][ T3576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.298899][ T3569] device veth0_vlan entered promiscuous mode [ 60.329682][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.338930][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.355100][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.365810][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.379135][ T3570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.399542][ T3570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.412013][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.420636][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.431333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.445853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.455928][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.465619][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.477420][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.486757][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.499249][ T3570] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.509713][ T3570] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.519241][ T3570] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.528061][ T3570] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.540673][ T3569] device veth1_vlan entered promiscuous mode [ 60.552294][ T3575] device veth0_macvtap entered promiscuous mode [ 60.608472][ T3575] device veth1_macvtap entered promiscuous mode [ 60.624539][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.633784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.642318][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.650366][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.659993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.675195][ T3576] device veth0_vlan entered promiscuous mode [ 60.700325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.708587][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.731213][ T3576] device veth1_vlan entered promiscuous mode [ 60.751441][ T3575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.768081][ T3575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.781413][ T3575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.795241][ T3575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.807485][ T3575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.822607][ T3575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.843365][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.852416][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.861108][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.870940][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.888063][ T3577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.926131][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.934899][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.945981][ T3575] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.955334][ T3575] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.964645][ T3575] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.973724][ T3575] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.998687][ T1193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.008626][ T1193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.009012][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.026960][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.035941][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.069218][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.078469][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.095507][ T3569] device veth0_macvtap entered promiscuous mode [ 61.105435][ T3576] device veth0_macvtap entered promiscuous mode [ 61.116917][ T3576] device veth1_macvtap entered promiscuous mode [ 61.142779][ T1245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.150974][ T1245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.164133][ T3569] device veth1_macvtap entered promiscuous mode [ 61.196717][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.205403][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.215229][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.223828][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.232537][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.240487][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.249876][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.279649][ T3577] device veth0_vlan entered promiscuous mode [ 61.292112][ T3614] Bluetooth: hci0: command 0x040f tx timeout [ 61.312706][ T3576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.330882][ T3576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.349137][ T3576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.368279][ T3576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.379769][ T3615] Bluetooth: hci2: command 0x040f tx timeout [ 61.383901][ T3576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.392431][ T3615] Bluetooth: hci1: command 0x040f tx timeout [ 61.396669][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.399217][ T3615] Bluetooth: hci3: command 0x040f tx timeout [ 61.410679][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.427771][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.428292][ T3615] Bluetooth: hci4: command 0x040f tx timeout [ 61.438739][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.457199][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.468473][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.480551][ T3569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.488324][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.496966][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.506002][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.515103][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.524455][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.534182][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.572899][ T3576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.590619][ T3576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.602775][ T3576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.631738][ T3576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.644118][ T3576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.679428][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.688717][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.712830][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.728169][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.737865][ T1245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.763665][ T3577] device veth1_vlan entered promiscuous mode [ 61.770377][ T1245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.796268][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.811354][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.828519][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.839251][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.849152][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.860303][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.873258][ T3569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.884396][ T3576] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.894962][ T3576] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.904401][ T3576] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.913504][ T3576] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.948309][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.958804][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.972679][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.020798][ T3569] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.049277][ T3569] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.060164][ T3569] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.069279][ T3569] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.098565][ T3656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.109385][ T3656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.119811][ T3656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.130505][ T3656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.140468][ T3656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.151409][ T3656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.162600][ T3656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.173538][ T3656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.211962][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.220711][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.281808][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.325961][ T3577] device veth0_macvtap entered promiscuous mode [ 62.356931][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.374586][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.414522][ T3577] device veth1_macvtap entered promiscuous mode [ 62.463650][ T3660] loop1: detected capacity change from 0 to 8192 [ 62.471657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.479893][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.524548][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.542946][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.556719][ T3660] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 62.561150][ T3577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.593363][ T3577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.606197][ T3577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.614726][ T3660] REISERFS (device loop1): using ordered data mode [ 62.617401][ T3577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.633539][ T3577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.646906][ T3577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.657303][ T3577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.668188][ T3577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.677724][ T3660] reiserfs: using flush barriers [ 62.680519][ T3577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.694917][ T3577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.705777][ T3660] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 62.708852][ T3577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.735177][ T3660] REISERFS (device loop1): checking transaction log (loop1) [ 62.739132][ T3577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.754035][ T3577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.764770][ T3577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.775355][ T3577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.785520][ T3577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.796725][ T3577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.808789][ T3577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.823830][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.833454][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.843256][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.854423][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.864751][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.895873][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.908521][ T3577] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.910417][ T3660] REISERFS (device loop1): Using tea hash to sort names [ 62.928594][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.940481][ T3577] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.956043][ T3577] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.964137][ T3660] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 62.974696][ T3577] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.008727][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.021962][ T3660] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 63.104688][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.116286][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.150583][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.161617][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.174738][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.226199][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.352239][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.372616][ T3614] Bluetooth: hci0: command 0x0419 tx timeout [ 63.388342][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.441184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.452764][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 63.458949][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 63.466769][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 63.492655][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 63.510690][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.528646][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.562911][ T3676] netlink: 'syz.4.15': attribute type 4 has an invalid length. [ 63.631256][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.669635][ T3679] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 63.821673][ T3612] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 63.926395][ T3688] loop4: detected capacity change from 0 to 2048 [ 63.993463][ T3688] ======================================================= [ 63.993463][ T3688] WARNING: The mand mount option has been deprecated and [ 63.993463][ T3688] and is ignored by this kernel. Remove the mand [ 63.993463][ T3688] option from the mount to silence this warning. [ 63.993463][ T3688] ======================================================= [ 64.130331][ T3688] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 64.187893][ T3688] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 64.255236][ T3612] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 64.264852][ C1] Illegal XDP return value 16128, expect packet loss! [ 64.274438][ T3612] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.320181][ T3612] usb 3-1: config 0 has no interface number 0 [ 64.359841][ T3612] usb 3-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 64.387264][ T3696] loop3: detected capacity change from 0 to 4096 [ 64.401813][ T3612] usb 3-1: config 0 interface 186 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 64.626274][ T3612] usb 3-1: New USB device found, idVendor=05ac, idProduct=8600, bcdDevice=d0.28 [ 64.651096][ T3612] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.663262][ T3696] ntfs: volume version 3.1. [ 64.679212][ T3698] loop4: detected capacity change from 0 to 256 [ 64.701919][ T3612] usb 3-1: Product: syz [ 64.711303][ T3612] usb 3-1: Manufacturer: syz [ 64.719066][ T3680] loop1: detected capacity change from 0 to 32768 [ 64.751581][ T3612] usb 3-1: SerialNumber: syz [ 64.780114][ T3612] usb 3-1: config 0 descriptor?? [ 64.841067][ T3705] loop0: detected capacity change from 0 to 256 [ 64.865652][ T3612] usb 3-1: Found UVC 0.00 device syz (05ac:8600) [ 64.873002][ T3680] XFS (loop1): Mounting V5 Filesystem [ 64.883183][ T3612] usb 3-1: No valid video chain found. [ 64.994419][ T3705] FAT-fs (loop0): Directory bread(block 64) failed [ 65.015394][ T3680] XFS (loop1): Ending clean mount [ 65.053627][ T3705] FAT-fs (loop0): Directory bread(block 65) failed [ 65.061155][ T3705] FAT-fs (loop0): Directory bread(block 66) failed [ 65.108998][ T3705] FAT-fs (loop0): Directory bread(block 67) failed [ 65.142222][ T3705] FAT-fs (loop0): Directory bread(block 68) failed [ 65.148820][ T3705] FAT-fs (loop0): Directory bread(block 69) failed [ 65.148848][ T3617] usb 3-1: USB disconnect, device number 2 [ 65.208111][ T3705] FAT-fs (loop0): Directory bread(block 70) failed [ 65.248415][ T3705] FAT-fs (loop0): Directory bread(block 71) failed [ 65.252911][ T3680] syz.1.13 (3680) used greatest stack depth: 18520 bytes left [ 65.261869][ T3705] FAT-fs (loop0): Directory bread(block 72) failed [ 65.271023][ T3705] FAT-fs (loop0): Directory bread(block 73) failed [ 65.309598][ T3570] XFS (loop1): Unmounting Filesystem [ 65.942003][ T3743] capability: warning: `syz.4.39' uses deprecated v2 capabilities in a way that may be insecure [ 66.497971][ T3760] loop1: detected capacity change from 0 to 512 [ 66.501080][ T3761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.48'. [ 66.565842][ T3736] loop2: detected capacity change from 0 to 32768 [ 66.600260][ T3760] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 66.640227][ T3767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.51'. [ 66.711096][ T3760] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.47: invalid indirect mapped block 4294967295 (level 1) [ 66.765518][ T3736] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 66.765518][ T3736] [ 66.779825][ T3743] loop4: detected capacity change from 0 to 32768 [ 66.782398][ T3736] ERROR: (device loop2): remounting filesystem as read-only [ 66.795892][ T3760] EXT4-fs (loop1): Remounting filesystem read-only [ 66.803914][ T3760] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.47: invalid indirect mapped block 4294967295 (level 1) [ 66.829045][ T3760] EXT4-fs (loop1): 2 truncates cleaned up [ 66.837256][ T3736] ERROR: (device loop2): jfs_unlink: [ 66.837256][ T3736] [ 66.846695][ T3760] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,dioread_nolock,. Quota mode: writeback. [ 66.888101][ T3614] kernel write not supported for file /21/attr/fscreate (pid: 3614 comm: kworker/0:4) [ 66.956673][ T3776] loop0: detected capacity change from 0 to 64 [ 67.024289][ T3776] hfs: unable to parse mount options [ 67.039206][ T3736] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 67.039206][ T3736] [ 67.221235][ T3782] sg_write: process 25 (syz.3.58) changed security contexts after opening file descriptor, this is not allowed. [ 67.294903][ T3783] program syz.3.58 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.569085][ T3793] netlink: 'syz.4.63': attribute type 3 has an invalid length. [ 67.659430][ T3790] loop3: detected capacity change from 0 to 4096 [ 67.777798][ T3799] loop2: detected capacity change from 0 to 256 [ 67.891796][ T3617] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 68.056756][ T3787] loop0: detected capacity change from 0 to 32768 [ 68.172393][ T3614] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 68.271978][ T3617] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.299114][ T3617] usb 2-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.00 [ 68.325589][ T3617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.358063][ T3617] usb 2-1: config 0 descriptor?? [ 68.411813][ T3614] usb 5-1: Using ep0 maxpacket: 8 [ 68.449667][ T3560] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 68.459390][ T3809] ptrace attach of "./syz-executor exec"[3569] was attempted by "./syz-executor exec"[3809] [ 68.532434][ T3614] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.546819][ T3614] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.557210][ T3614] usb 5-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 68.566889][ T3614] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.585488][ T3614] usb 5-1: config 0 descriptor?? [ 68.655485][ T3813] loop0: detected capacity change from 0 to 256 [ 68.678978][ T3806] loop2: detected capacity change from 0 to 40427 [ 68.701901][ T3617] usbhid 2-1:0.0: can't add hid device: -71 [ 68.718721][ T3813] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 68.726961][ T3617] usbhid: probe of 2-1:0.0 failed with error -71 [ 68.750451][ T3806] F2FS-fs (loop2): invalid crc value [ 68.766508][ T3806] F2FS-fs (loop2): Found nat_bits in checkpoint [ 68.787394][ T3617] usb 2-1: USB disconnect, device number 2 [ 68.802187][ T3813] exFAT-fs (loop0): error, invalid size(size(4096) > aligned(9223372036854777344) [ 68.802187][ T3813] [ 68.841946][ T3560] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.851275][ T3813] exFAT-fs (loop0): Filesystem has been set read-only [ 68.873878][ T3560] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 68.880853][ T3806] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 68.883246][ T3560] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.928367][ T3560] usb 4-1: config 0 descriptor?? [ 69.001583][ T3576] attempt to access beyond end of device [ 69.001583][ T3576] loop2: rw=2049, want=45104, limit=40427 [ 69.076418][ T3614] cherry 0003:046A:0027.0001: unknown main item tag 0x0 [ 69.103854][ T3614] cherry 0003:046A:0027.0001: unknown main item tag 0x6 [ 69.127087][ T3614] cherry 0003:046A:0027.0001: unknown main item tag 0x5 [ 69.141338][ T3614] cherry 0003:046A:0027.0001: unknown main item tag 0x4 [ 69.149503][ T3614] cherry 0003:046A:0027.0001: unknown main item tag 0x0 [ 69.181719][ T3614] cherry 0003:046A:0027.0001: unknown main item tag 0x0 [ 69.194299][ T3614] cherry 0003:046A:0027.0001: unknown main item tag 0x0 [ 69.226110][ T3614] cherry 0003:046A:0027.0001: unknown main item tag 0x0 [ 69.240751][ T3614] cherry 0003:046A:0027.0001: unknown main item tag 0x0 [ 69.263903][ T3614] cherry 0003:046A:0027.0001: unknown main item tag 0x0 [ 69.289472][ T3614] cherry 0003:046A:0027.0001: unknown global tag 0xd [ 69.311041][ T3614] cherry 0003:046A:0027.0001: item 0 4 1 13 parsing failed [ 69.339472][ T3614] cherry: probe of 0003:046A:0027.0001 failed with error -22 [ 69.380259][ T3614] usb 5-1: USB disconnect, device number 2 [ 69.424544][ T3560] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 69.464912][ T3560] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0002/input/input5 [ 69.549952][ T3832] loop1: detected capacity change from 0 to 2048 [ 69.622304][ T3832] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 69.675278][ T3560] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 69.677705][ T1293] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 69.757227][ T3835] netlink: 'syz.2.74': attribute type 2 has an invalid length. [ 69.941559][ T1293] usb 1-1: Using ep0 maxpacket: 32 [ 70.062074][ T1293] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 70.071316][ T21] usb 4-1: USB disconnect, device number 2 [ 70.097075][ T1293] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 70.169186][ T3846] loop1: detected capacity change from 0 to 4096 [ 70.247431][ T3846] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 70.295450][ T1293] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 70.309970][ T1293] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.355998][ T1293] usb 1-1: Product: syz [ 70.360416][ T1293] usb 1-1: Manufacturer: syz [ 70.365150][ T1293] usb 1-1: SerialNumber: syz [ 70.404276][ T3846] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 70.561943][ T3844] loop2: detected capacity change from 0 to 40427 [ 70.564898][ T3842] loop4: detected capacity change from 0 to 32768 [ 70.627664][ T3844] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 70.642123][ T3844] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 70.664676][ T1293] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 70.712385][ T3842] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.83 (3842) [ 70.743665][ T3844] F2FS-fs (loop2): Found nat_bits in checkpoint [ 70.848549][ T3842] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 70.881082][ T3844] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 70.891751][ T3844] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 70.896846][ T3842] BTRFS info (device loop4): using free space tree [ 70.912935][ T3842] BTRFS info (device loop4): has skinny extents [ 70.945786][ T3614] usb 1-1: USB disconnect, device number 2 [ 70.961561][ T3617] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 70.982465][ T3614] usblp0: removed [ 71.132340][ T3842] BTRFS info (device loop4): enabling ssd optimizations [ 71.212949][ T3617] usb 2-1: Using ep0 maxpacket: 16 [ 71.342040][ T3617] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 71.378218][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.394630][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.531988][ T3617] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 71.548560][ T3617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.572030][ T3617] usb 2-1: Product: syz [ 71.577024][ T3617] usb 2-1: Manufacturer: syz [ 71.583549][ T3617] usb 2-1: SerialNumber: syz [ 71.590102][ T3617] usb 2-1: config 0 descriptor?? [ 71.634611][ T3617] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 71.660938][ T3617] usb 2-1: Detected FT232RL [ 71.700056][ T3891] loop3: detected capacity change from 0 to 256 [ 71.741812][ T1293] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 71.808435][ T3891] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 71.828969][ T3891] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 71.868803][ T3617] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 71.878915][ T26] audit: type=1800 audit(1729107785.066:2): pid=3891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.95" name="file2" dev="loop3" ino=1048599 res=0 errno=0 [ 72.111815][ T1293] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 72.143166][ T3617] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 72.167273][ T1293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.175993][ T3909] loop3: detected capacity change from 0 to 1024 [ 72.213011][ T1293] usb 3-1: config 0 descriptor?? [ 72.253032][ T1293] cp210x 3-1:0.0: cp210x converter detected [ 72.336033][ T3909] hfsplus: request for non-existent node 3 in B*Tree [ 72.352000][ T3909] hfsplus: request for non-existent node 3 in B*Tree [ 72.366643][ T3613] usb 2-1: USB disconnect, device number 3 [ 72.409765][ T3613] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 72.461339][ T3613] ftdi_sio 2-1:0.0: device disconnected [ 72.500566][ T3917] netlink: 'syz.4.102': attribute type 33 has an invalid length. [ 72.520527][ T3917] netlink: 'syz.4.102': attribute type 13 has an invalid length. [ 72.530088][ T3917] netlink: 152 bytes leftover after parsing attributes in process `syz.4.102'. [ 72.550119][ T3917] netlink: 'syz.4.102': attribute type 33 has an invalid length. [ 72.775234][ T3907] loop0: detected capacity change from 0 to 32768 [ 72.884065][ T3907] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 72.884065][ T3907] [ 72.911752][ T1293] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 72.919700][ T1293] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 72.943195][ T1293] usb 3-1: cp210x converter now attached to ttyUSB0 [ 72.955225][ T3907] ERROR: (device loop0): remounting filesystem as read-only [ 72.969853][ T1293] usb 3-1: USB disconnect, device number 3 [ 72.976023][ T3907] xtLookup: xtSearch returned -5 [ 72.995455][ T3907] add_index: get/read_metapage failed! [ 73.009211][ T1293] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 73.021643][ T3907] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 73.021643][ T3907] [ 73.038655][ T1293] cp210x 3-1:0.0: device disconnected [ 73.054290][ T3907] xtLookup: xtSearch returned -5 [ 73.071770][ T3907] free_index: error reading directory table [ 73.098476][ T3907] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 73.098476][ T3907] [ 73.121860][ T3907] xtLookup: xtSearch returned -5 [ 73.141132][ T3907] free_index: error reading directory table [ 73.158026][ T3907] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 73.158026][ T3907] [ 73.190384][ T3907] xtLookup: xtSearch returned -5 [ 73.209144][ T3907] free_index: error reading directory table [ 73.228468][ T3944] loop3: detected capacity change from 0 to 1024 [ 73.244789][ T3907] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 73.244789][ T3907] [ 73.272350][ T3907] xtLookup: xtSearch returned -5 [ 73.287625][ T3907] free_index: error reading directory table [ 73.309833][ T3907] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 73.309833][ T3907] [ 73.371514][ T3907] xtLookup: xtSearch returned -5 [ 73.376581][ T3907] free_index: error reading directory table [ 73.453185][ T3944] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,noblock_validity,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 73.650185][ T3963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.122'. [ 73.700807][ T3965] loop2: detected capacity change from 0 to 8 [ 73.725102][ T3967] process 'syz.4.125' launched './file1' with NULL argv: empty string added [ 73.832636][ T3972] device veth0_to_team entered promiscuous mode [ 73.988232][ T3978] loop4: detected capacity change from 0 to 1024 [ 74.003731][ T3980] loop2: detected capacity change from 0 to 128 [ 74.041048][ T3980] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 74.154375][ T3980] sysv_free_block: flc_count > flc_size [ 74.160503][ T3980] sysv_free_block: flc_count > flc_size [ 74.209370][ T3980] sysv_free_block: flc_count > flc_size [ 74.251861][ T3980] sysv_free_block: flc_count > flc_size [ 74.257488][ T3980] sysv_free_block: flc_count > flc_size [ 74.289929][ T3980] sysv_free_block: flc_count > flc_size [ 74.307856][ T3980] sysv_free_block: flc_count > flc_size [ 74.332058][ T3980] sysv_free_block: flc_count > flc_size [ 74.354687][ T3980] sysv_free_block: flc_count > flc_size [ 74.360307][ T3980] sysv_free_block: flc_count > flc_size [ 74.412101][ T3980] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 74.450280][ T154] hfsplus: b-tree write err: -5, ino 4 [ 74.832524][ T3992] loop1: detected capacity change from 0 to 4096 [ 74.917365][ T3992] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 74.993876][ T3992] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 75.158956][ T3570] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 75.207542][ T3982] loop3: detected capacity change from 0 to 32768 [ 75.294570][ T3982] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 75.351580][ T3982] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 75.417983][ T3986] loop0: detected capacity change from 0 to 32768 [ 75.474336][ T3982] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 75.485134][ T3990] loop4: detected capacity change from 0 to 32768 [ 75.500977][ T3615] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 75.509241][ T3615] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 75.554634][ T3994] loop2: detected capacity change from 0 to 32768 [ 75.601751][ T3613] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 75.605093][ T3615] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 95ms [ 75.631745][ T3615] gfs2: fsid=syz:syz.0: jid=0: Done [ 75.638559][ T3982] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 75.673829][ T3994] XFS (loop2): Mounting V5 Filesystem [ 75.684791][ T3986] XFS (loop0): Mounting V5 Filesystem [ 75.692119][ T3990] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 75.717497][ T3990] JBD2: Ignoring recovery information on journal [ 75.798634][ T3994] XFS (loop2): Ending clean mount [ 75.827653][ T3990] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 75.882693][ T3986] XFS (loop0): Ending clean mount [ 75.905236][ T3576] XFS (loop2): Unmounting Filesystem [ 76.002788][ T3569] XFS (loop0): Unmounting Filesystem [ 76.034649][ T3613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.080019][ T3613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.091885][ T3613] usb 2-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 76.101152][ T3613] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.140797][ T3613] usb 2-1: config 0 descriptor?? [ 76.263009][ T3575] ocfs2: Unmounting device (7,4) on (node local) [ 76.580523][ T4020] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 76.629719][ T4022] loop4: detected capacity change from 0 to 128 [ 76.644574][ T3613] apple 0003:05AC:0262.0003: unbalanced delimiter at end of report description [ 76.664917][ T3613] apple 0003:05AC:0262.0003: parse failed [ 76.670704][ T3613] apple: probe of 0003:05AC:0262.0003 failed with error -22 [ 76.679832][ T4022] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 76.689598][ T4020] sock: sock_timestamping_bind_phc: sock not bind to device [ 76.848383][ T3612] usb 2-1: USB disconnect, device number 4 [ 77.061728][ T3613] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 77.481960][ T3613] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.501543][ T3613] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 77.615365][ T3613] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 77.635568][ T3613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 77.656214][ T3613] usb 3-1: SerialNumber: syz [ 77.742636][ T4048] loop4: detected capacity change from 0 to 32768 [ 77.784478][ T4048] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.150 (4048) [ 77.842257][ T3612] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 77.861157][ T4048] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 77.884580][ T4048] BTRFS info (device loop4): using free space tree [ 77.911544][ T4048] BTRFS info (device loop4): has skinny extents [ 77.914968][ T4071] loop1: detected capacity change from 0 to 512 [ 77.967494][ T3613] usb 3-1: 0:2 : does not exist [ 78.011068][ T4071] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 78.014972][ T3613] usb 3-1: USB disconnect, device number 4 [ 78.049130][ T4071] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 78.144896][ T3837] udevd[3837]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 78.173341][ T4071] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.160: invalid indirect mapped block 512 (level 0) [ 78.205301][ T4048] BTRFS info (device loop4): enabling ssd optimizations [ 78.266768][ T4071] EXT4-fs (loop1): Remounting filesystem read-only [ 78.281685][ T3612] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 78.290836][ T3612] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 78.306055][ T3612] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x32, skipping [ 78.319994][ T4071] EXT4-fs (loop1): 1 orphan inode deleted [ 78.326123][ T4071] EXT4-fs (loop1): 1 truncate cleaned up [ 78.332447][ T4071] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,jqfmt=vfsold,inode_readahead_blks=0x0000000000200000,block_validity,quota,. Quota mode: writeback. [ 78.398760][ T4071] EXT4-fs (loop1): can't change dax mount option while remounting [ 78.418885][ T3612] usb 1-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 78.424430][ T4068] loop3: detected capacity change from 0 to 32768 [ 78.428977][ T3612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 78.443181][ T3612] usb 1-1: SerialNumber: syz [ 78.453755][ T3612] usb 1-1: config 0 descriptor?? [ 78.490412][ T4059] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 78.538625][ T4059] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 78.592526][ T3612] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 78.671802][ T3570] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 78.775568][ T3570] EXT4-fs (loop1): Remounting filesystem read-only [ 78.810853][ T3570] EXT4-fs error (device loop1): ext4_lookup:1860: inode #2: comm syz-executor: deleted inode referenced: 17 [ 78.849794][ T3570] EXT4-fs error (device loop1): ext4_lookup:1860: inode #2: comm syz-executor: deleted inode referenced: 17 [ 78.869982][ T4097] loop2: detected capacity change from 0 to 32768 [ 78.898614][ T4097] XFS: ikeep mount option is deprecated. [ 78.913588][ T4068] XFS (loop3): Mounting V5 Filesystem [ 78.915509][ T3617] usb 1-1: USB disconnect, device number 3 [ 78.935261][ T4097] XFS: ikeep mount option is deprecated. [ 79.081630][ T4068] XFS (loop3): Ending clean mount [ 79.090733][ T4097] XFS (loop2): Mounting V5 Filesystem [ 79.232319][ T4123] loop4: detected capacity change from 0 to 512 [ 79.271365][ T4097] XFS (loop2): Ending clean mount [ 79.366181][ T4097] XFS (loop2): Quotacheck needed: Please wait. [ 79.366856][ T4123] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #3: comm syz.4.167: corrupted inode contents [ 79.406178][ T3577] XFS (loop3): Unmounting Filesystem [ 79.411066][ T4123] EXT4-fs error (device loop4): ext4_dirty_inode:6007: inode #3: comm syz.4.167: mark_inode_dirty error [ 79.431896][ T1193] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.479499][ T4097] XFS (loop2): Quotacheck: Done. [ 79.504435][ T4097] XFS (loop2): User initiated shutdown received. [ 79.511417][ T4097] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 79.526427][ T4097] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 79.557222][ T4123] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #3: comm syz.4.167: corrupted inode contents [ 79.576691][ T3576] XFS (loop2): Unmounting Filesystem [ 79.619409][ T4123] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #3: comm syz.4.167: mark_inode_dirty error [ 79.669991][ T4123] Quota error (device loop4): write_blk: dquota write failed [ 79.678450][ T1193] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.679772][ T4123] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 79.766194][ T4123] EXT4-fs error (device loop4): ext4_acquire_dquot:6196: comm syz.4.167: Failed to acquire dquot type 0 [ 79.813610][ T4130] loop0: detected capacity change from 0 to 128 [ 79.830286][ T4123] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #16: comm syz.4.167: corrupted inode contents [ 79.855660][ T4123] EXT4-fs error (device loop4): ext4_dirty_inode:6007: inode #16: comm syz.4.167: mark_inode_dirty error [ 79.877888][ T4123] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #16: comm syz.4.167: corrupted inode contents [ 79.887323][ T1193] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.911877][ T4123] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #16: comm syz.4.167: mark_inode_dirty error [ 79.924196][ T4123] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #16: comm syz.4.167: corrupted inode contents [ 79.944559][ T4123] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 79.955655][ T4130] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 80.000109][ T4123] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #16: comm syz.4.167: corrupted inode contents [ 80.026552][ T4123] EXT4-fs error (device loop4): ext4_truncate:4272: inode #16: comm syz.4.167: mark_inode_dirty error [ 80.069283][ T4123] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 80.115942][ T3569] sysv_free_block: trying to free block not in datazone [ 80.129676][ T4123] EXT4-fs (loop4): 1 truncate cleaned up [ 80.142663][ T4123] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 80.150505][ T1193] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.172834][ T3569] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 80.190584][ T4123] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038 (0x7fffffff) [ 80.454814][ T4146] loop0: detected capacity change from 0 to 128 [ 80.573785][ T4146] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 80.618124][ T4146] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038 (0x7fffffff) [ 80.699713][ T4159] fscrypt (loop0, inode 12): Mutually exclusive encryption flags (0x0c) [ 80.712095][ T4155] loop2: detected capacity change from 0 to 1024 [ 80.840032][ T4156] loop4: detected capacity change from 0 to 4096 [ 80.849851][ T4155] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000006,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,nodiscard,,errors=continue. Quota mode: none. [ 80.938369][ T4156] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 80.984530][ T4131] chnl_net:caif_netlink_parms(): no params data found [ 81.050419][ T4156] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 81.228442][ T4175] loop0: detected capacity change from 0 to 256 [ 81.480099][ T4175] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 81.564548][ T4131] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.582949][ T4131] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.591177][ T4131] device bridge_slave_0 entered promiscuous mode [ 81.614094][ T1073] cfg80211: failed to load regulatory.db [ 81.673996][ T4131] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.731085][ T4186] loop2: detected capacity change from 0 to 4096 [ 81.748908][ T4131] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.771060][ T4131] device bridge_slave_1 entered promiscuous mode [ 81.931871][ T3892] Bluetooth: hci1: command 0x0409 tx timeout [ 82.014847][ T4200] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.035283][ T4131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.193885][ T4131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.257539][ T4205] loop0: detected capacity change from 0 to 512 [ 82.337160][ T4171] loop3: detected capacity change from 0 to 32768 [ 82.438028][ T4171] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.185 (4171) [ 82.507230][ T4131] team0: Port device team_slave_0 added [ 82.529493][ T4171] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 82.610653][ T4171] BTRFS info (device loop3): using free space tree [ 82.633428][ T4131] team0: Port device team_slave_1 added [ 82.663427][ T4205] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 82.727607][ T4171] BTRFS info (device loop3): has skinny extents [ 82.754816][ T4205] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038 (0x7fffffff) [ 82.923721][ T4131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.930711][ T4131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.043639][ T4131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.056912][ T4131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.064281][ T4131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.083539][ T3569] EXT4-fs error (device loop0): ext4_empty_dir:3137: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 83.111758][ T4131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.125218][ T3569] EXT4-fs error (device loop0): ext4_empty_dir:3137: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 83.181427][ T3569] EXT4-fs error (device loop0): ext4_empty_dir:3137: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 83.188726][ T4191] loop4: detected capacity change from 0 to 32768 [ 83.238586][ T3569] EXT4-fs error (device loop0): ext4_empty_dir:3137: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 83.283572][ T3569] EXT4-fs error (device loop0): ext4_empty_dir:3137: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 83.308062][ T4171] BTRFS info (device loop3): enabling ssd optimizations [ 83.320122][ T4131] device hsr_slave_0 entered promiscuous mode [ 83.335201][ T4131] device hsr_slave_1 entered promiscuous mode [ 83.383763][ T3569] EXT4-fs error (device loop0): ext4_empty_dir:3137: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 83.410508][ T4131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.411139][ T26] audit: type=1800 audit(1729107796.586:3): pid=4171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.185" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 83.441878][ T3569] EXT4-fs error (device loop0): ext4_empty_dir:3137: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 83.451268][ T4131] Cannot create hsr debugfs directory [ 83.457115][ T3569] EXT4-fs error (device loop0): ext4_empty_dir:3137: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 83.475897][ T3569] EXT4-fs error (device loop0): ext4_empty_dir:3137: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 83.490813][ T3569] EXT4-fs error (device loop0): ext4_empty_dir:3137: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 83.562331][ T4191] XFS (loop4): Mounting V5 Filesystem [ 83.724883][ T4191] XFS (loop4): Ending clean mount [ 83.885738][ T4191] XFS (loop4): Quotacheck needed: Please wait. [ 84.012529][ T3613] Bluetooth: hci1: command 0x041b tx timeout [ 84.086845][ T4191] XFS (loop4): Quotacheck: Done. [ 84.312181][ T4278] loop3: detected capacity change from 0 to 8192 [ 84.346772][ T3575] XFS (loop4): Unmounting Filesystem [ 84.611794][ T3560] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 84.622341][ T1193] device hsr_slave_0 left promiscuous mode [ 84.642732][ T1193] device hsr_slave_1 left promiscuous mode [ 84.722213][ T1193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.730567][ T1193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.749374][ T1193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.771613][ T1193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.783427][ T1193] device bridge_slave_1 left promiscuous mode [ 84.793379][ T1193] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.831826][ T1193] device bridge_slave_0 left promiscuous mode [ 84.856205][ T1193] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.907645][ T1193] device veth1_macvtap left promiscuous mode [ 84.916391][ T1193] device veth0_macvtap left promiscuous mode [ 84.923185][ T1193] device veth1_vlan left promiscuous mode [ 84.929811][ T1193] device veth0_vlan left promiscuous mode [ 85.032651][ T3560] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 85.050323][ T3560] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.081981][ T3560] usb 3-1: config 0 descriptor?? [ 85.137875][ T3560] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 85.141656][ T1304] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 85.229760][ T1193] team0 (unregistering): Port device team_slave_1 removed [ 85.248351][ T1193] team0 (unregistering): Port device team_slave_0 removed [ 85.270224][ T1193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.287488][ T1193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.381961][ T1304] usb 5-1: Using ep0 maxpacket: 8 [ 85.387354][ T1193] bond0 (unregistering): Released all slaves [ 85.511344][ T1304] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 85.531566][ T1304] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 85.551916][ T1304] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 85.564063][ T3560] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 85.587154][ T1304] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 85.621703][ T1304] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.647127][ T1304] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 85.658851][ T4297] ax25_connect(): syz.3.205 uses autobind, please contact jreuter@yaina.de [ 85.689941][ T1304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.924128][ T4305] netlink: 24 bytes leftover after parsing attributes in process `syz.3.206'. [ 85.991845][ T1304] usb 5-1: GET_CAPABILITIES returned 0 [ 85.997219][ T3560] gspca_cpia1: usb_control_msg 02, error -71 [ 85.997377][ T1304] usbtmc 5-1:16.0: can't read capabilities [ 86.041809][ T3560] gspca_cpia1: usb_control_msg 05, error -71 [ 86.063021][ T3560] cpia1 3-1:0.0: unexpected systemstate: 00 [ 86.089660][ T3560] usb 3-1: USB disconnect, device number 5 [ 86.135060][ T3612] Bluetooth: hci1: command 0x040f tx timeout [ 86.174654][ T4291] chnl_net:caif_netlink_parms(): no params data found [ 86.207738][ T3892] usb 5-1: USB disconnect, device number 3 [ 86.574212][ T4291] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.598928][ T4291] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.608042][ T3612] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.626300][ T4291] device bridge_slave_0 entered promiscuous mode [ 86.664927][ T4291] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.673703][ T4291] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.682779][ T4291] device bridge_slave_1 entered promiscuous mode [ 86.844134][ T4291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.878384][ T4291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.891736][ T3612] usb 4-1: Using ep0 maxpacket: 16 [ 86.938116][ T4131] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.007066][ T4131] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.034579][ T4131] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.051710][ T3898] Bluetooth: hci0: command 0x0409 tx timeout [ 87.053294][ T3612] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.081698][ T3892] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 87.099056][ T4291] team0: Port device team_slave_0 added [ 87.116684][ T4131] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.116838][ T3612] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 87.127379][ T4338] loop2: detected capacity change from 0 to 512 [ 87.155310][ T4291] team0: Port device team_slave_1 added [ 87.161787][ T3612] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 87.270156][ T4291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.290008][ T4338] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 87.314056][ T4291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.356905][ T4338] ext4 filesystem being mounted at /33/bus supports timestamps until 2038 (0x7fffffff) [ 87.401715][ T3612] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 87.411882][ T4291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.412110][ T3892] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 87.422634][ T3612] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.441018][ T3612] usb 4-1: Product: syz [ 87.445942][ T4291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.455538][ T4291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.493530][ T3612] usb 4-1: Manufacturer: 碐鑪驗⇞᭢৶ [ 87.507411][ T3612] usb 4-1: SerialNumber: syz [ 87.521145][ T4291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.525044][ T3892] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 87.637386][ T4291] device hsr_slave_0 entered promiscuous mode [ 87.651964][ T3892] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 87.682092][ T4291] device hsr_slave_1 entered promiscuous mode [ 87.771838][ T3892] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 87.860708][ T3612] cdc_ncm 4-1:1.0: bind() failure [ 87.872991][ T3612] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 87.891786][ T3892] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 87.918684][ T3612] cdc_ncm 4-1:1.1: bind() failure [ 87.975906][ T3612] usb 4-1: USB disconnect, device number 3 [ 87.994419][ T4131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.013386][ T3892] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 88.075161][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.083581][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.117254][ T4131] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.126900][ T4364] sctp: [Deprecated]: syz.2.219 (pid 4364) Use of struct sctp_assoc_value in delayed_ack socket option. [ 88.126900][ T4364] Use struct sctp_sack_info instead [ 88.143554][ T3892] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 88.173880][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 88.185831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.209359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.245861][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.252169][ T3892] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 88.253015][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.313172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.328426][ T4371] Zero length message leads to an empty skb [ 88.361762][ T3892] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 88.394106][ T3892] usb 5-1: New USB device found, idVendor=046d, idProduct=08b8, bcdDevice=ee.8d [ 88.424418][ T4291] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.433808][ T3892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.536769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.563865][ T3892] pwc: Logitech QuickCam detected (reserved ID). [ 88.580761][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.600954][ T3892] pwc: Warning: more than 1 configuration available. [ 88.620811][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.627978][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.654927][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.672640][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.692714][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.715598][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.736236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.789329][ T4291] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.819510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.842997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.895898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.919672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.962602][ T4291] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.001768][ T3892] pwc: send_video_command error -71 [ 89.007683][ T3892] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 89.023197][ T3892] Philips webcam: probe of 5-1:250.0 failed with error -71 [ 89.043139][ T3892] usb 5-1: USB disconnect, device number 4 [ 89.076839][ T4131] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.120313][ T4387] loop2: detected capacity change from 0 to 2048 [ 89.130723][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.131619][ T3617] Bluetooth: hci0: command 0x041b tx timeout [ 89.234640][ T4291] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.279372][ T4387] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.345662][ T4387] EXT4-fs error (device loop2): ext4_ext_precache:608: inode #2: comm syz.2.225: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 89.381834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.390414][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.600074][ T4374] loop3: detected capacity change from 0 to 40427 [ 89.671665][ T4291] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.696693][ T4291] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.727118][ T4291] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.792761][ T4001] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.800378][ T4001] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.810359][ T4374] F2FS-fs (loop3): Found nat_bits in checkpoint [ 89.845831][ T4131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.874532][ T4291] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.081189][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.100728][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.116484][ T4374] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 90.209150][ T4429] loop2: detected capacity change from 0 to 1024 [ 90.220070][ T4131] device veth0_vlan entered promiscuous mode [ 90.264099][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.282287][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.307468][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.342934][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.365981][ T4429] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 90.395651][ T4131] device veth1_vlan entered promiscuous mode [ 90.460952][ T4291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.512904][ T4429] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 90.622610][ T4429] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,noinit_itable,dioread_nolock,dioread_nolock,bsdgroups,min_batch_time=0x0000000000005c0a,inode_readahead_blks=0x0000000000000001,max_dir_size_kb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 90.684583][ T4291] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.700302][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.723256][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.763610][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.817741][ T4429] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 90.824607][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.849436][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.860251][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.888290][ T4131] device veth0_macvtap entered promiscuous mode [ 90.923688][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.940819][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.994820][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.003586][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.010704][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.019822][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.028932][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.042326][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.049436][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.059449][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.111370][ T4131] device veth1_macvtap entered promiscuous mode [ 91.160055][ T4428] loop4: detected capacity change from 0 to 32768 [ 91.168652][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.182875][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.198530][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.210685][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.230715][ T3892] Bluetooth: hci0: command 0x040f tx timeout [ 91.246772][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.255127][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.287122][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.307350][ T4428] ERROR: (device loop4): diWrite: ixpxd invalid [ 91.307350][ T4428] [ 91.329356][ T4428] ERROR: (device loop4): remounting filesystem as read-only [ 91.340180][ T4428] ERROR: (device loop4): txCommit: [ 91.340180][ T4428] [ 91.410532][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.421964][ T3613] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 91.444765][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.511385][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.529396][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.543893][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.573908][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.594816][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.612549][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.625065][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.639844][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.653348][ T4131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.660762][ T4291] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.673396][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.683750][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.693654][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.709399][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.728890][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.781691][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.818150][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.837443][ T4462] loop4: detected capacity change from 0 to 256 [ 91.838150][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.846037][ T3613] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 91.864507][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.864527][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.864546][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.864559][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.864574][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.869248][ T4131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.891619][ T3613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.936026][ T3613] usb 3-1: config 0 descriptor?? [ 91.956076][ T4464] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 91.965630][ T4462] exfat: Deprecated parameter 'utf8' [ 91.969031][ T4001] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.004372][ T4001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.033352][ T4462] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xc61f63e4, utbl_chksum : 0xe619d30d) [ 92.097854][ T4131] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.121011][ T4131] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.149057][ T4131] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.160912][ T4131] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.209657][ T4471] netlink: 136 bytes leftover after parsing attributes in process `syz.3.245'. [ 92.221808][ T4471] netlink: 17 bytes leftover after parsing attributes in process `syz.3.245'. [ 92.270795][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.297288][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.360765][ T4291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.455012][ T4001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.475023][ T4001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.486323][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.511738][ T3616] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 92.523025][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.531935][ T3613] [drm:udl_init] *ERROR* Selecting channel failed [ 92.566647][ T3613] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 92.585529][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.598459][ T3613] [drm] Initialized udl on minor 2 [ 92.605172][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.614288][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.629114][ T4291] device veth0_vlan entered promiscuous mode [ 92.641788][ T3613] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 92.661651][ T3613] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 92.674180][ T3613] usb 3-1: USB disconnect, device number 6 [ 92.700301][ T4133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.700530][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.733585][ T4133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.748392][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.774288][ T3616] usb 5-1: Using ep0 maxpacket: 32 [ 92.787565][ T4291] device veth1_vlan entered promiscuous mode [ 92.807172][ T4001] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.828090][ T4001] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.922115][ T3616] usb 5-1: config 0 has an invalid interface number: 64 but max is 1 [ 92.938645][ T3616] usb 5-1: config 0 has no interface number 1 [ 92.948603][ T3616] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 92.984492][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 92.996214][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.006038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.020846][ T4291] device veth0_macvtap entered promiscuous mode [ 93.115560][ T1193] device hsr_slave_0 left promiscuous mode [ 93.142518][ T3616] usb 5-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=1c.a5 [ 93.143263][ T1193] device hsr_slave_1 left promiscuous mode [ 93.165874][ T3616] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.176384][ T1193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.191658][ T3616] usb 5-1: Product: syz [ 93.196281][ T3616] usb 5-1: Manufacturer: syz [ 93.200942][ T3616] usb 5-1: SerialNumber: syz [ 93.218169][ T4477] loop3: detected capacity change from 0 to 32768 [ 93.218437][ T3616] usb 5-1: config 0 descriptor?? [ 93.225398][ T1193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.238748][ T1193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.259809][ T1193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.270374][ T1193] device bridge_slave_1 left promiscuous mode [ 93.277567][ T1193] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.293158][ T3617] Bluetooth: hci0: command 0x0419 tx timeout [ 93.299329][ T4477] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.247 (4477) [ 93.310671][ T4491] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 93.348869][ T1193] device bridge_slave_0 left promiscuous mode [ 93.358335][ T1193] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.367242][ T4477] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 93.378583][ T4477] BTRFS info (device loop3): using free space tree [ 93.386773][ T4477] BTRFS info (device loop3): has skinny extents [ 93.399052][ T1193] device veth1_macvtap left promiscuous mode [ 93.410245][ T1193] device veth0_macvtap left promiscuous mode [ 93.416973][ T1193] device veth1_vlan left promiscuous mode [ 93.425651][ T1193] device veth0_vlan left promiscuous mode [ 93.566315][ T4477] BTRFS info (device loop3): enabling ssd optimizations [ 93.598333][ T3616] usb 5-1: bad CDC descriptors [ 93.638794][ T3616] usb 5-1: bad CDC descriptors [ 93.704014][ T3616] usb 5-1: USB disconnect, device number 5 [ 94.276334][ T1193] team0 (unregistering): Port device team_slave_1 removed [ 94.371716][ T1193] team0 (unregistering): Port device team_slave_0 removed [ 94.452990][ T1193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.482780][ T1193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.759679][ T1193] bond0 (unregistering): Released all slaves [ 94.830214][ T4291] device veth1_macvtap entered promiscuous mode [ 94.862422][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 94.873450][ T4537] loop4: detected capacity change from 0 to 4096 [ 94.938241][ T4291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.954514][ T4537] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 95.000520][ T4291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.041197][ T4291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.091718][ T4291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.147872][ T4291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.189165][ T4291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.207039][ T4291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.221268][ T4291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.239019][ T4291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.268745][ T4291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.279905][ T4291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.300461][ T4291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.331754][ T4291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.349786][ T4532] loop3: detected capacity change from 0 to 32768 [ 95.351525][ T4291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.383393][ T4291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.403834][ T4291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.431625][ T4291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.453424][ T4291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.463016][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.482315][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.493222][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.523508][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.586392][ T4291] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.646589][ T4291] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.656273][ T4532] XFS (loop3): Mounting V5 Filesystem [ 95.687183][ T4291] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.750477][ T4291] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.767004][ T4541] loop2: detected capacity change from 0 to 32768 [ 95.882341][ T4532] XFS (loop3): Ending clean mount [ 95.930392][ T4541] XFS (loop2): Mounting V5 Filesystem [ 95.935880][ T4532] XFS (loop3): Quotacheck needed: Please wait. [ 95.989756][ T4540] loop1: detected capacity change from 0 to 32768 [ 96.088544][ T4540] XFS (loop1): Mounting V5 Filesystem [ 96.094990][ T4532] XFS (loop3): Quotacheck: Done. [ 96.109708][ T4532] XFS (loop3): User initiated shutdown received. [ 96.117212][ T4541] XFS (loop2): Ending clean mount [ 96.124496][ T4532] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:487). Shutting down filesystem. [ 96.138802][ T4532] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 96.175221][ T3577] XFS (loop3): Unmounting Filesystem [ 96.243790][ T4133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.279001][ T4133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.289979][ T3576] XFS (loop2): Unmounting Filesystem [ 96.373309][ T4540] XFS (loop1): Ending clean mount [ 96.441905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 96.496837][ T4133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.553664][ T4131] XFS (loop1): Unmounting Filesystem [ 96.569175][ T4133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.649106][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 97.121765][ T4544] loop4: detected capacity change from 0 to 32768 [ 97.365058][ T4583] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 97.418042][ T4544] JBD2: Ignoring recovery information on journal [ 97.766719][ T4544] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 97.951647][ T1304] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 98.136600][ T3575] ocfs2: Unmounting device (7,4) on (node local) [ 98.211470][ C1] sched: RT throttling activated [ 98.273981][ T4593] loop0: detected capacity change from 0 to 1024 [ 98.283791][ T4580] loop2: detected capacity change from 0 to 131072 [ 98.311907][ T1304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.334536][ T1304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.371583][ T1304] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 98.434001][ T4580] F2FS-fs (loop2): invalid crc value [ 98.473699][ T4580] F2FS-fs (loop2): Found nat_bits in checkpoint [ 98.482217][ T1304] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.536154][ T4580] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 98.572346][ T4593] hfsplus: xattr searching failed [ 98.597016][ T1304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.652337][ T1304] usb 2-1: config 0 descriptor?? [ 98.718762][ T154] hfsplus: b-tree write err: -5, ino 3 [ 98.720873][ T4578] loop3: detected capacity change from 0 to 40427 [ 98.746363][ T4291] hfsplus: node 4:3 still has 1 user(s)! [ 98.815490][ T4578] F2FS-fs (loop3): Invalid segment/section count (458776 != 24 * 1) [ 98.866958][ T4578] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 98.922000][ T4578] F2FS-fs (loop3): invalid crc value [ 98.932855][ T4607] loop0: detected capacity change from 0 to 256 [ 98.995193][ T4578] F2FS-fs (loop3): Found nat_bits in checkpoint [ 99.071026][ T4607] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 99.128381][ T4607] FAT-fs (loop0): Filesystem has been set read-only [ 99.172119][ T1304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.194832][ T4578] F2FS-fs (loop3): recover fsync data on readonly fs [ 99.200941][ T1304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.217758][ T1304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.227469][ T1304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.230196][ T4615] loop4: detected capacity change from 0 to 512 [ 99.243770][ T4578] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30 [ 99.250470][ T1304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.251002][ T4578] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 99.285978][ T1304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.306253][ T1304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.326203][ T1304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.352735][ T1304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.353185][ T4615] EXT4-fs (loop4): Ignoring removed bh option [ 99.408653][ T1304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.419382][ T4615] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 99.455155][ T1304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.484722][ T1304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.493628][ T4615] EXT4-fs error (device loop4): __ext4_iget:4872: inode #11: block 393240: comm syz.4.282: invalid block [ 99.526228][ T1304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.546849][ T1304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.557581][ T4615] EXT4-fs (loop4): Remounting filesystem read-only [ 99.585135][ T4615] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.282: couldn't read orphan inode 11 (err -117) [ 99.600581][ T1304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.624155][ T1304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.642553][ T4615] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,min_batch_time=0x0000000000000001,errors=remount-ro,sb=0x0000000000000008,bh. Quota mode: none. [ 99.655160][ T1304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.684008][ T1304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.699188][ T4615] EXT4-fs (loop4): shut down requested (2) [ 99.712276][ T4615] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #2: comm syz.4.282: directory missing '.' [ 99.724384][ T1304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.744255][ T1304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.763910][ T1304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.771410][ T1304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.811595][ T1304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.819108][ T1304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.841563][ T1304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.849004][ T1304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.857200][ T1304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.865002][ T1304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.872784][ T1304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.904829][ T1304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.914756][ T1304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.922749][ T1304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.937033][ T1304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.951597][ T1304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.959456][ T1304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 99.991737][ T1304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 100.008106][ T1304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 100.027258][ T1304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 100.072092][ T1304] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 100.141052][ T1304] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 100.167819][ T4630] ebt_among: src integrity fail: 300 [ 100.212161][ T1304] usb 2-1: USB disconnect, device number 5 [ 100.310328][ T4634] syz.4.285 uses obsolete (PF_INET,SOCK_PACKET) [ 100.369965][ T4633] loop0: detected capacity change from 0 to 2048 [ 100.532841][ T4633] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.837504][ T4661] loop3: detected capacity change from 0 to 512 [ 100.871907][ T23] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 100.915963][ T4661] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 100.976898][ T4661] EXT4-fs (loop3): 1 truncate cleaned up [ 101.001566][ T4661] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.127245][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 101.143931][ T4672] loop1: detected capacity change from 0 to 64 [ 101.251951][ T23] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.269637][ T23] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.300531][ T23] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 101.350367][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.379465][ T4676] loop2: detected capacity change from 0 to 2048 [ 101.433679][ T23] hub 5-1:4.0: USB hub found [ 101.506125][ T4680] loop0: detected capacity change from 0 to 1024 [ 101.644412][ T4676] EXT4-fs (loop2): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 101.671966][ T23] hub 5-1:4.0: 2 ports detected [ 101.676900][ T23] usb 5-1: selecting invalid altsetting 1 [ 101.716064][ T23] hub 5-1:4.0: Using single TT (err -22) [ 101.748750][ T26] audit: type=1800 audit(1729107814.926:4): pid=4676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.307" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 101.766911][ T4676] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, [ 101.768954][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.783944][ T4676] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 101.887416][ T23] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 101.907607][ T1193] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.910935][ T23] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 102.018159][ T1193] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.051362][ T23] usb 5-1: USB disconnect, device number 6 [ 102.064180][ T7] kernel read not supported for file /rfkill (pid: 7 comm: kworker/0:0) [ 102.163865][ T4693] loop0: detected capacity change from 0 to 128 [ 102.208792][ T1193] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.303208][ T1193] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.484103][ T4703] netlink: 40 bytes leftover after parsing attributes in process `syz.0.320'. [ 102.549431][ T4705] loop1: detected capacity change from 0 to 64 [ 102.802859][ T4711] loop0: detected capacity change from 0 to 1024 [ 102.883421][ T4711] hfsplus: bad catalog entry type [ 102.930064][ T4690] chnl_net:caif_netlink_parms(): no params data found [ 102.941608][ T4695] infiniband syz1: set down [ 102.946718][ T4695] infiniband syz1: added syzkaller0 [ 103.264120][ T4695] RDS/IB: syz1: added [ 103.288928][ T4695] smc: adding ib device syz1 with port count 1 [ 103.311680][ T4732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.329'. [ 103.322018][ T4695] smc: ib device syz1 port 1 has pnetid [ 103.343483][ T4133] smc: removing ib device syz1 [ 103.359703][ T4732] device bond_slave_0 entered promiscuous mode [ 103.366473][ T4732] device bond_slave_1 entered promiscuous mode [ 103.375032][ T4732] device macsec1 entered promiscuous mode [ 103.381064][ T4732] device bond0 entered promiscuous mode [ 103.726663][ T4690] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.736738][ T4690] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.771629][ T4690] device bridge_slave_0 entered promiscuous mode [ 103.821132][ T4690] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.843133][ T4690] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.873311][ T4690] device bridge_slave_1 entered promiscuous mode [ 103.890866][ T26] audit: type=1326 audit(1729107817.066:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4758 comm="syz.1.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d9fd4ff9 code=0x7ffc0000 [ 103.901236][ T4695] rdma_rxe: rxe_register_device failed with error -19 [ 103.920683][ T4695] rdma_rxe: failed to add syzkaller0 [ 103.951697][ T26] audit: type=1326 audit(1729107817.106:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4758 comm="syz.1.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d9fd4ff9 code=0x7ffc0000 [ 103.987274][ T26] audit: type=1326 audit(1729107817.106:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4758 comm="syz.1.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f85d9fd4ff9 code=0x7ffc0000 [ 104.042950][ T4690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.076054][ T4690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.117369][ T26] audit: type=1326 audit(1729107817.106:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4758 comm="syz.1.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d9fd4ff9 code=0x7ffc0000 [ 104.139362][ T4764] loop2: detected capacity change from 0 to 64 [ 104.171587][ T1304] Bluetooth: hci4: command 0x0409 tx timeout [ 104.216357][ T26] audit: type=1326 audit(1729107817.106:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4758 comm="syz.1.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d9fd4ff9 code=0x7ffc0000 [ 104.249900][ T4690] team0: Port device team_slave_0 added [ 104.268960][ T4764] gfs2: path_lookup on c::: returned error -2 [ 104.347748][ T4690] team0: Port device team_slave_1 added [ 104.617396][ T4779] loop2: detected capacity change from 0 to 16 [ 104.617899][ T4757] loop4: detected capacity change from 0 to 32768 [ 104.635898][ T4690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.664172][ T4690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.697227][ T4690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.775717][ T4779] erofs: (device loop2): mounted with root inode @ nid 36. [ 104.807725][ T4690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.835569][ T4690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.839764][ T4757] XFS (loop4): Mounting V5 Filesystem [ 104.872349][ T4690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.130923][ T4757] XFS (loop4): Ending clean mount [ 105.217745][ T4809] loop1: detected capacity change from 0 to 256 [ 105.244773][ T4690] device hsr_slave_0 entered promiscuous mode [ 105.286121][ T4690] device hsr_slave_1 entered promiscuous mode [ 105.350075][ T4690] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.373194][ T4690] Cannot create hsr debugfs directory [ 105.465580][ T1193] device hsr_slave_0 left promiscuous mode [ 105.497011][ T3575] XFS (loop4): Unmounting Filesystem [ 105.505067][ T1193] device hsr_slave_1 left promiscuous mode [ 105.594734][ T1193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.608508][ T1193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.652943][ T1193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.683414][ T1193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.721254][ T1193] device bridge_slave_1 left promiscuous mode [ 105.750863][ T1193] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.784254][ T1193] device bridge_slave_0 left promiscuous mode [ 105.819744][ T1193] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.849055][ T1193] device veth1_macvtap left promiscuous mode [ 105.865448][ T1193] device veth0_macvtap left promiscuous mode [ 105.897575][ T4820] loop0: detected capacity change from 0 to 64 [ 105.913636][ T1193] device veth1_vlan left promiscuous mode [ 105.933689][ T1193] device veth0_vlan left promiscuous mode [ 106.053960][ T26] audit: type=1800 audit(1729107819.236:10): pid=4820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.355" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 106.251687][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 106.655494][ T4812] loop2: detected capacity change from 0 to 40427 [ 106.731690][ T4812] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 106.760319][ T1193] team0 (unregistering): Port device team_slave_1 removed [ 106.765289][ T4812] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 106.792196][ T1193] team0 (unregistering): Port device team_slave_0 removed [ 106.799175][ T4812] F2FS-fs (loop2): invalid crc value [ 106.829204][ T1193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.851160][ T4812] F2FS-fs (loop2): Found nat_bits in checkpoint [ 106.880471][ T1193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.942564][ T4812] F2FS-fs (loop2): Start checkpoint disabled! [ 107.018595][ T4812] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 107.041716][ T4812] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 107.178200][ T1193] bond0 (unregistering): Released all slaves [ 107.217668][ T3576] attempt to access beyond end of device [ 107.217668][ T3576] loop2: rw=524288, want=45072, limit=40427 [ 107.249680][ T3576] attempt to access beyond end of device [ 107.249680][ T3576] loop2: rw=0, want=45072, limit=40427 [ 107.397576][ T4839] loop4: detected capacity change from 0 to 32768 [ 107.529402][ T154] attempt to access beyond end of device [ 107.529402][ T154] loop2: rw=2049, want=41088, limit=40427 [ 107.728895][ T4841] loop0: detected capacity change from 0 to 40427 [ 107.806822][ T4841] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 107.848113][ T4841] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 107.909806][ T4841] F2FS-fs (loop0): invalid crc value [ 107.940121][ T4841] F2FS-fs (loop0): Found nat_bits in checkpoint [ 108.159372][ T4841] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 108.197449][ T4841] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 108.332162][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 108.405234][ T4291] attempt to access beyond end of device [ 108.405234][ T4291] loop0: rw=524288, want=45072, limit=40427 [ 108.454326][ T4291] attempt to access beyond end of device [ 108.454326][ T4291] loop0: rw=0, want=45072, limit=40427 [ 108.610016][ T4876] loop1: detected capacity change from 0 to 512 [ 108.716255][ T154] attempt to access beyond end of device [ 108.716255][ T154] loop0: rw=2049, want=41088, limit=40427 [ 108.859723][ T4876] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.371: casefold flag without casefold feature [ 108.921037][ T4690] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 108.943160][ T4876] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.371: couldn't read orphan inode 15 (err -117) [ 108.981916][ T4876] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 109.004190][ T4690] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 109.033656][ T4690] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 109.086803][ T4690] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 109.557027][ T4690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.623572][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.656034][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.697536][ T4690] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.764368][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 109.787593][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 109.812220][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.819463][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.860040][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 109.903103][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 109.949358][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 109.966356][ T1245] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.973530][ T1245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.019873][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 110.049857][ T4905] usb usb9: usbfs: process 4905 (syz.4.378) did not claim interface 0 before use [ 110.090410][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 110.120017][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 110.179680][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.210888][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 110.265792][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.411806][ T3898] Bluetooth: hci4: command 0x0419 tx timeout [ 110.502687][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 110.511091][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 110.544148][ T26] audit: type=1326 audit(1729107823.726:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.4.383" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb108e55ff9 code=0x0 [ 110.572488][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.612025][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 110.641899][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.703249][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 110.715642][ T4883] chnl_net:caif_netlink_parms(): no params data found [ 111.070111][ T4883] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.081991][ T4883] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.109376][ T4883] device bridge_slave_0 entered promiscuous mode [ 111.177770][ T4883] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.196358][ T4883] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.227716][ T4883] device bridge_slave_1 entered promiscuous mode [ 111.278580][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.304301][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.411958][ T4883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.457148][ T3898] Bluetooth: hci0: command 0x0409 tx timeout [ 111.467697][ T4916] chnl_net:caif_netlink_parms(): no params data found [ 111.489145][ T4690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.505527][ T4883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.262838][ T4883] team0: Port device team_slave_0 added [ 112.277850][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.287239][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.336955][ T4883] team0: Port device team_slave_1 added [ 112.411756][ T3892] Bluetooth: hci2: command 0x0409 tx timeout [ 112.483456][ T4690] device veth0_vlan entered promiscuous mode [ 112.494350][ T4883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.517955][ T4883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.544493][ T4883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.579889][ T4916] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.587881][ T4916] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.596902][ T4916] device bridge_slave_0 entered promiscuous mode [ 112.607116][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.618140][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.628884][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.636984][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.682002][ T4883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.709367][ T4883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.746980][ T4883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.763417][ T4916] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.770658][ T4916] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.779643][ T4916] device bridge_slave_1 entered promiscuous mode [ 112.807127][ T4690] device veth1_vlan entered promiscuous mode [ 112.875254][ T26] audit: type=1326 audit(1729107826.056:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5005 comm="syz.1.397" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f85d9fd4ff9 code=0x0 [ 112.927830][ T4916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.955567][ T4883] device hsr_slave_0 entered promiscuous mode [ 112.970793][ T4883] device hsr_slave_1 entered promiscuous mode [ 112.978566][ T4883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.987054][ T4883] Cannot create hsr debugfs directory [ 112.997963][ T4916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.077912][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 113.097670][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 113.109360][ T5012] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 113.136011][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 113.155194][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 113.184727][ T5014] loop4: detected capacity change from 0 to 256 [ 113.198905][ T4690] device veth0_macvtap entered promiscuous mode [ 113.238183][ T4916] team0: Port device team_slave_0 added [ 113.267764][ T4916] team0: Port device team_slave_1 added [ 113.285506][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 113.299952][ T4690] device veth1_macvtap entered promiscuous mode [ 113.358228][ T1193] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.414572][ T4916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.429003][ T4916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.461719][ T4916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.487389][ T4916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.502300][ T4916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.528866][ T4916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.550958][ T3894] Bluetooth: hci0: command 0x041b tx timeout [ 113.601934][ T1193] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.651033][ T4690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.670790][ T4690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.689914][ T4690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.716163][ T4690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.760847][ T4690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.791644][ T4690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.810491][ T4690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.832334][ T5016] loop4: detected capacity change from 0 to 32768 [ 113.836172][ T4690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.859018][ T4690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.886606][ T5016] XFS: noikeep mount option is deprecated. [ 113.887507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 113.906631][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 113.925700][ T1193] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.943496][ T4916] device hsr_slave_0 entered promiscuous mode [ 113.960451][ T4916] device hsr_slave_1 entered promiscuous mode [ 113.967656][ T4916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.968644][ T5016] XFS (loop4): Mounting V5 Filesystem [ 113.975874][ T4916] Cannot create hsr debugfs directory [ 113.991911][ T4690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.004006][ T4690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.015422][ T4690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.026374][ T4690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.041003][ T4690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.051595][ T1304] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 114.061800][ T4690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.064229][ T5016] XFS (loop4): Ending clean mount [ 114.079417][ T5016] XFS (loop4): Quotacheck needed: Please wait. [ 114.079539][ T4690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.103231][ T4690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.115312][ T4690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.126398][ T4690] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.135515][ T4690] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.144694][ T4690] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.153684][ T4690] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.179449][ T5016] XFS (loop4): Quotacheck: Done. [ 114.186461][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.202211][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.243163][ T1193] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.254829][ T3575] XFS (loop4): Unmounting Filesystem [ 114.421815][ T1304] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 114.430953][ T1304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.458119][ T1304] usb 2-1: config 0 descriptor?? [ 114.490573][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.491651][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 114.507921][ T1304] cp210x 2-1:0.0: cp210x converter detected [ 114.510894][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.545772][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 114.660372][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.680141][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.702333][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 114.727020][ T1193] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.808805][ T5030] loop4: detected capacity change from 0 to 64 [ 114.825100][ T1193] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.924228][ T5018] udc-core: couldn't find an available UDC or it's busy [ 114.927783][ T5031] loop3: detected capacity change from 0 to 4096 [ 114.937666][ T5018] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 114.943041][ T1304] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 114.970363][ T1193] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.017291][ T1304] usb 2-1: cp210x converter now attached to ttyUSB0 [ 115.050041][ T5031] ntfs3: loop3: ino=3, Correct links count -> 2. [ 115.147423][ T1193] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.196150][ T5031] ntfs3: loop3: failed to convert "0080" to cp874 [ 115.217382][ T1304] usb 2-1: USB disconnect, device number 6 [ 115.232342][ T1304] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 115.326592][ T1304] cp210x 2-1:0.0: device disconnected [ 115.612670][ T1304] Bluetooth: hci0: command 0x040f tx timeout [ 115.885498][ T5061] loop1: detected capacity change from 0 to 1024 [ 115.971254][ T5066] loop3: detected capacity change from 0 to 2048 [ 116.046065][ T5066] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.115120][ T4001] hfsplus: b-tree write err: -5, ino 8 [ 116.306222][ T5080] loop1: detected capacity change from 0 to 1024 [ 116.428673][ T5080] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000c118, mo2=0002] [ 116.445285][ T5080] System zones: 0-1, 3-12 [ 116.482870][ T5080] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,acl,debug,,errors=continue. Quota mode: none. [ 116.571785][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 116.694198][ T5098] device team_slave_0 entered promiscuous mode [ 116.700727][ T5098] device team_slave_1 entered promiscuous mode [ 116.747668][ T5098] device macvlan2 entered promiscuous mode [ 116.757644][ T5098] device team0 entered promiscuous mode [ 116.774064][ T5098] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 116.843688][ T5103] loop1: detected capacity change from 0 to 64 [ 117.637484][ T4916] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 117.691822][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 117.713108][ T4916] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 117.726691][ T5101] loop4: detected capacity change from 0 to 32768 [ 117.830178][ T5108] loop3: detected capacity change from 0 to 32768 [ 117.840946][ T4916] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 117.874133][ T4916] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 117.993630][ T4883] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 118.069362][ T4883] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 118.081068][ T4883] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 118.117501][ T4273] ------------[ cut here ]------------ [ 118.127291][ T4273] WARNING: CPU: 1 PID: 4273 at net/wireless/core.h:220 disconnect_work+0x236/0x320 [ 118.140718][ T4273] Modules linked in: [ 118.148923][ T4273] CPU: 1 PID: 4273 Comm: kworker/1:19 Not tainted 5.15.167-syzkaller #0 [ 118.157922][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 118.168765][ T4273] Workqueue: events disconnect_work [ 118.174723][ T4273] RIP: 0010:disconnect_work+0x236/0x320 [ 118.180544][ T4273] Code: 08 48 89 df e8 8b ae 18 f8 48 8b 1b 4c 39 fb 74 75 e8 5e e4 ce f7 e9 77 fe ff ff e8 54 e4 ce f7 e9 5e ff ff ff e8 4a e4 ce f7 <0f> 0b e9 d1 fe ff ff e8 3e e4 ce f7 0f 0b eb b1 48 c7 c1 44 94 e9 [ 118.203506][ T4273] RSP: 0018:ffffc90003ec7c10 EFLAGS: 00010293 [ 118.210275][ T4273] RAX: ffffffff89b17626 RBX: ffff8880725bcca0 RCX: ffff888073f0d940 [ 118.219288][ T4273] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.229684][ T4273] RBP: 0000000000000000 R08: ffffffff89b174ea R09: fffffbfff1b463a6 [ 118.273270][ T4273] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880725bcc90 [ 118.290507][ T4273] R13: ffff8880228fbe28 R14: dffffc0000000000 R15: ffff88807e8c8cf0 [ 118.309150][ T4273] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 118.331900][ T4273] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.344290][ T4273] CR2: 00007f44d587df98 CR3: 00000000227b2000 CR4: 00000000003506e0 [ 118.358739][ T4273] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 118.367572][ T4273] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 118.376621][ T4273] Call Trace: [ 118.380125][ T4273] [ 118.383706][ T4273] ? __warn+0x15b/0x300 [ 118.388045][ T4273] ? disconnect_work+0x236/0x320 [ 118.393667][ T4273] ? report_bug+0x1b7/0x2e0 [ 118.398369][ T4273] ? handle_bug+0x3d/0x70 [ 118.412141][ T4273] ? exc_invalid_op+0x16/0x40 [ 118.417044][ T4273] ? asm_exc_invalid_op+0x16/0x20 [ 118.423223][ T4273] ? disconnect_work+0xfa/0x320 [ 118.428227][ T4273] ? disconnect_work+0x236/0x320 [ 118.433904][ T4273] ? disconnect_work+0x236/0x320 [ 118.439044][ T4273] process_one_work+0x8a1/0x10c0 [ 118.444752][ T4273] ? worker_detach_from_pool+0x260/0x260 [ 118.450524][ T4273] ? _raw_spin_lock_irqsave+0x120/0x120 [ 118.456846][ T4273] ? kthread_data+0x4e/0xc0 [ 118.461841][ T4273] ? wq_worker_running+0x97/0x170 [ 118.467097][ T4273] worker_thread+0xaca/0x1280 [ 118.476183][ T4273] kthread+0x3f6/0x4f0 [ 118.480460][ T4273] ? rcu_lock_release+0x20/0x20 [ 118.485935][ T4273] ? kthread_blkcg+0xd0/0xd0 [ 118.490844][ T4273] ret_from_fork+0x1f/0x30 [ 118.496007][ T4273] [ 118.499090][ T4273] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 118.506375][ T4273] CPU: 1 PID: 4273 Comm: kworker/1:19 Not tainted 5.15.167-syzkaller #0 [ 118.514818][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 118.524983][ T4273] Workqueue: events disconnect_work [ 118.530242][ T4273] Call Trace: [ 118.533532][ T4273] [ 118.536564][ T4273] dump_stack_lvl+0x1e3/0x2d0 [ 118.541246][ T4273] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 118.546898][ T4273] ? panic+0x860/0x860 [ 118.550976][ T4273] ? disconnect_work+0x210/0x320 [ 118.555921][ T4273] ? disconnect_work+0x210/0x320 [ 118.560978][ T4273] panic+0x318/0x860 [ 118.564891][ T4273] ? __warn+0x16a/0x300 [ 118.569064][ T4273] ? fb_is_primary_device+0xd0/0xd0 [ 118.574282][ T4273] ? ret_from_fork+0x1f/0x30 [ 118.578904][ T4273] ? disconnect_work+0x236/0x320 [ 118.583858][ T4273] __warn+0x2b2/0x300 [ 118.587878][ T4273] ? disconnect_work+0x236/0x320 [ 118.592844][ T4273] report_bug+0x1b7/0x2e0 [ 118.597214][ T4273] handle_bug+0x3d/0x70 [ 118.601525][ T4273] exc_invalid_op+0x16/0x40 [ 118.606064][ T4273] asm_exc_invalid_op+0x16/0x20 [ 118.610947][ T4273] RIP: 0010:disconnect_work+0x236/0x320 [ 118.616510][ T4273] Code: 08 48 89 df e8 8b ae 18 f8 48 8b 1b 4c 39 fb 74 75 e8 5e e4 ce f7 e9 77 fe ff ff e8 54 e4 ce f7 e9 5e ff ff ff e8 4a e4 ce f7 <0f> 0b e9 d1 fe ff ff e8 3e e4 ce f7 0f 0b eb b1 48 c7 c1 44 94 e9 [ 118.636321][ T4273] RSP: 0018:ffffc90003ec7c10 EFLAGS: 00010293 [ 118.642951][ T4273] RAX: ffffffff89b17626 RBX: ffff8880725bcca0 RCX: ffff888073f0d940 [ 118.651504][ T4273] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.651722][ T3617] Bluetooth: hci2: command 0x0419 tx timeout [ 118.659727][ T4273] RBP: 0000000000000000 R08: ffffffff89b174ea R09: fffffbfff1b463a6 [ 118.673941][ T4273] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880725bcc90 [ 118.681977][ T4273] R13: ffff8880228fbe28 R14: dffffc0000000000 R15: ffff88807e8c8cf0 [ 118.690252][ T4273] ? disconnect_work+0xfa/0x320 [ 118.695292][ T4273] ? disconnect_work+0x236/0x320 [ 118.700378][ T4273] process_one_work+0x8a1/0x10c0 [ 118.705348][ T4273] ? worker_detach_from_pool+0x260/0x260 [ 118.711016][ T4273] ? _raw_spin_lock_irqsave+0x120/0x120 [ 118.716889][ T4273] ? kthread_data+0x4e/0xc0 [ 118.721545][ T4273] ? wq_worker_running+0x97/0x170 [ 118.726604][ T4273] worker_thread+0xaca/0x1280 [ 118.731325][ T4273] kthread+0x3f6/0x4f0 [ 118.735405][ T4273] ? rcu_lock_release+0x20/0x20 [ 118.740289][ T4273] ? kthread_blkcg+0xd0/0xd0 [ 118.744903][ T4273] ret_from_fork+0x1f/0x30 [ 118.749375][ T4273] [ 118.752510][ T4273] Kernel Offset: disabled [ 118.757139][ T4273] Rebooting in 86400 seconds..