last executing test programs: 11.470851229s ago: executing program 2 (id=66): r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408106050000010000000109021900010100803209040000010a00000007058102"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 8.177966721s ago: executing program 1 (id=91): write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @ib={0x1b, 0x1, 0x2, {"ce3cfaf2dfb0c941a526e69804763191"}, 0x4, 0x2, 0x2}, @ib={0x1b, 0x7, 0x7, {"21a952e43f48f17f51295753296288e4"}, 0x800, 0x5, 0x1c3}}}, 0x118) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4000003, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 8.139725373s ago: executing program 4 (id=92): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) r1 = dup(r0) r2 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d1) 7.98503334s ago: executing program 1 (id=93): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x16) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) 7.834786787s ago: executing program 1 (id=94): mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./proc\x00', &(0x7f0000000b00)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rxrpc/conns\x00', 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @mcast1, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=[{0x18, 0x110, 0x1, '\x00'}], 0x18}, 0xfc40) lseek(r0, 0xfff, 0x1) 7.515382952s ago: executing program 1 (id=95): openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setns(0xc9, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)="e9", 0x2f}, 0x1, 0x0, 0x0, 0x810}, 0x24004014) 7.494148403s ago: executing program 2 (id=96): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)={[{@nls={'nls', 0x3d, 'koi8-u'}}, {@nobarrier}, {@gid}, {@umask={'umask', 0x3d, 0x552}}, {@force}, {@nodecompose}]}, 0x1, 0x5e6, &(0x7f0000000f40)="$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") mknod(&(0x7f0000000080)='./bus\x00', 0x1024, 0x1000000) openat(0xffffffffffffff9c, 0x0, 0x103802, 0x20) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80d800, 0x0, 0x0, 0x0, &(0x7f0000000240)) rmdir(&(0x7f0000000040)='./file0\x00') 7.209133147s ago: executing program 4 (id=97): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @local}], 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty, 0x8}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000005, 0xdb}, 0x9c) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x42, @loopback, 0x8000}}, 0xabb6, 0x67, 0xa4f, 0xc4, 0xa, 0x0, 0xa9}, 0x9c) 7.032126344s ago: executing program 2 (id=99): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRES8], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) dup3(r1, r2, 0x80000) syz_usb_disconnect(r0) 6.817769585s ago: executing program 1 (id=100): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0xac) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='+p', 0x2) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'], 0x1, 0x226, &(0x7f0000000300)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file2\x00', 0x0, 0x76) 6.808198365s ago: executing program 4 (id=101): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x1, 0x8, 0x3ff, 0x5, {{0x8, 0x4, 0x1, 0x3f, 0x20, 0x67, 0x0, 0xf, 0x868c1ab12eb57982, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0xa5, 0x3, 0x8, [{@broadcast}]}]}}}}}) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r0, &(0x7f0000000080), 0x10) 6.507447879s ago: executing program 3 (id=102): socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x120) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="ebfa0e80ceb3dc4c43c215dc4dade38ff8c84ace0200bebe5b179f12cf39c48c2d4b61ce76443644c1dc73113bee39b5796edc2a8f551d6fa7", 0x39}], 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd05, &(0x7f0000000000)="0400000002000000000000007e0100003801") 6.386645214s ago: executing program 4 (id=103): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="18"], 0x18, 0x20000001}, 0x20008000) sendto$l2tp6(r0, &(0x7f0000000640)="910fa4ad", 0x4, 0x0, &(0x7f0000000740)={0xa, 0x0, 0x9, @private0, 0x24d, 0x2}, 0x20) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000002c0)={r2, 0x3}, 0x8) 6.242635021s ago: executing program 3 (id=104): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x54}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000200)="84c1", 0x2}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000006c0)="9a", 0x1}], 0x1}}], 0x2, 0x4000840) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002e80)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0}}], 0x1, 0x41) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={r2, 0x4}, 0xc) 5.724720145s ago: executing program 3 (id=105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x20600, 0x0) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000009b80)={0x40000012}) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x2, 0x0, 0x0) 5.62475864s ago: executing program 0 (id=106): r0 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000000200)={0x2}, 0x8, 0x0) msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYRES8], 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000380)={{0x2, 0x0, 0x0, 0x0, 0xee01, 0x10, 0x9981}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x1000ff, 0x20000002, 0x4, 0x0, 0x4}) 5.545122463s ago: executing program 3 (id=107): syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@nogc_merge}, {@noflush_merge}, {@four_active_logs}, {@alloc_mode_reuse}, {@checkpoint_diasble}, {@disable_roll_forward}, {@nobarrier}, {@background_gc_off}, {@fsync_mode_posix}, {@user_xattr}, {@data_flush}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") r0 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x2000000000006) io_setup(0x6, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x1c3) 5.3857157s ago: executing program 4 (id=108): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4428, &(0x7f0000008940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) pwrite64(r0, &(0x7f0000000000)='2Y', 0x2, 0xf) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x100000}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) copy_file_range(r1, 0x0, r1, &(0x7f00000000c0)=0x100012, 0xf000, 0x0) 4.625993346s ago: executing program 0 (id=109): openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x321300, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x400, &(0x7f00000008c0)=ANY=[@ANYBLOB='nostrict,umask=00000000000000000000010,unhide,longad,utf8,lastblock=00000000000000002304,anchor=18446744073709551615,gid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=forget,uid=forget,noadinicb,shortad,iocharset=ascii,lastblock=00000000000000000009,iocharset=cp950,fileset=00000000000000000001,undelete,anchor=00000000000000000006,partition=00000000000000000008,anchor=00000000000008421375,session=00000000000000000001,anchor=00000000000000000005,gid=', @ANYRESDEC, @ANYBLOB="2c66fefbe2000000000e0f725c", @ANYRES8, @ANYRESOCT, @ANYRESDEC=0x0, @ANYBLOB="2c736d61636b66736465663d233f9d1abf59c53229ddd780b162f44a0e44f3436d598025e596d23078a3e733e07b480ad2f41c3ccd7956530c3be5c0d1833ad4954140d857bb924e0f613fe32a0c1461263f77581d8ed8b341959c53a341493644534a4b27223d1faac6bf7df530d100a57452b6a3abc826bb0f0b82809ca1e13376959935f589115abe267b25f42757304b4d6c7ffaec13f3079a4658933152fe693cc762ce82776b4003c4ac3d9d3478da3da1f79ad788d3b25f59422ba668e32c00"], 0x9, 0xc2a, &(0x7f0000002ac0)="$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") request_key(0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001019, r0, 0x0) getdents64(r0, &(0x7f00000001c0)=""/163, 0xba974ed140df4995) 4.267165412s ago: executing program 2 (id=110): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r1}, &(0x7f00000008c0), &(0x7f0000000940)=r0}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) 3.929663628s ago: executing program 2 (id=111): syz_mount_image$f2fs(&(0x7f00000002c0), &(0x7f0000000000)='./file0\x00', 0x2000000, &(0x7f0000002d00)=ANY=[@ANYBLOB="7768696e745f6d6f64653d757365722d62617365642c6e6f666c7573685f6d657267652c646973636172645f756e69743d626c6f636b2c636f6d70726573735f63616368652c646973636172642c636f6d70726573735f636163686500636f6d70726573735f63616368652c6e6f646973636172642c6e04000000000000006b67726f756e645f67633d6f66662c6673796e635f6d6f64653d7374726963742c617467632c636865636b706f696e743d64697361626c652c6661756c745f747970653d30303030303030303030303030303030303030362c000bfd62d218a444a68c74f026d4ccec66093eece27fe167b75e67ed0f3b3a51c2b8d1857ec135096f87f1bea6b5fea173b82a6a331ed6a20e7966a79114d49d58aca09dc4cbc08f2ce2ad2c6d576d3babdbc296014f0cb17e6a9d720beaf7459568b858cba1b2d201000000594ac14b0b6d4b160405a05c9b7a14f6b9a37c8ffc9f9b20987a60171b9e5541d7eadf86a1d102cb83caeaf0ff064bd27bb32db4263cfc9821d083fc479cf94b113fa6156274d93a6530b84a92d125ac10ffae140b80ad0569bf76f43d8d490968f8fb5798875bfab54caf996afbd97d0b93b9626acf1b881c6f5d55072164d2e3eff342bb846739c949e100"/473, @ANYRES16=0x0], 0xfd, 0x554b, &(0x7f0000009440)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x4020) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, 0x0, 0x8004) read$FUSE(r0, &(0x7f0000000740)={0x2020}, 0x2020) 3.6620134s ago: executing program 0 (id=112): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {0x8000}, 0x0, [0x9, 0x0, 0x5, 0x0, 0x0, 0xa5b0e763, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x487, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xd, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1000, 0x14], [0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x9, 0x41, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x27], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x400, 0x40, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffff, 0x0, 0x0, 0xfffffffb, 0x806, 0x0, 0x0, 0x0, 0x0, 0xfffffbfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0x0, 0x0, 0x0, 0x2000000], [0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000, 0x7, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 3.219854971s ago: executing program 4 (id=113): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f000000d680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffe82) open(&(0x7f0000000340)='./file1\x00', 0x14b27e, 0x6) openat$nullb(0xffffffffffffff9c, 0x0, 0x2000, 0x0) 3.089217786s ago: executing program 0 (id=114): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001500)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000000)={0x0, 0x30, 0x8, {0x8, 0x22, "59a1b95388e8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) 2.460635915s ago: executing program 3 (id=115): socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) userfaultfd(0x801) 1.450687692s ago: executing program 1 (id=116): r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x27}, @in=@private=0xa010102, 0x4e62, 0x0, 0x0, 0x0, 0xa, 0x0, 0x100}, {0x0, 0x4, 0x0, 0x5000007ffffffc, 0x0, 0x9, 0x0, 0x3ff7}, {0x7fffffffffffffff, 0x400, 0x100000000c, 0x1f}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@remote, 0x800, 0x32}, 0x2, @in=@broadcast, 0x3501, 0x4, 0x2, 0x0, 0x0, 0x2, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @empty, 0xfffffffc}, 0x1c) 268.218717ms ago: executing program 0 (id=117): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000000c00)="$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") setresgid(0x0, 0xee00, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000006c0)={{}, {}, [], {0x4, 0x1}, [], {0x10, 0x5}}, 0x24, 0x1) setreuid(0xffffffffffffffff, 0xee01) chdir(&(0x7f00000000c0)='./file0\x00') 260.998868ms ago: executing program 3 (id=118): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @loopback, 0x4000008}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002140)='$|', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="1e", 0x1}], 0x1}}], 0x2, 0x400c851) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000002100)=0x40) 96.408725ms ago: executing program 2 (id=119): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x2, 0x1000) 0s ago: executing program 0 (id=120): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xdddd1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0x1}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.250' (ED25519) to the list of known hosts. [ 58.967531][ T4172] cgroup: Unknown subsys name 'net' [ 59.069769][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.531356][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.384155][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 62.421022][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 62.521191][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 62.563828][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 62.579167][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.586850][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.594981][ T4185] device bridge_slave_0 entered promiscuous mode [ 62.632213][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.639653][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.647568][ T4185] device bridge_slave_1 entered promiscuous mode [ 62.658928][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.666130][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.677144][ T4192] device bridge_slave_0 entered promiscuous mode [ 62.703836][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.711660][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.720078][ T4192] device bridge_slave_1 entered promiscuous mode [ 62.749330][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.763833][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 62.784673][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.823484][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.848583][ T4185] team0: Port device team_slave_0 added [ 62.854595][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.862617][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.870930][ T4184] device bridge_slave_0 entered promiscuous mode [ 62.885061][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.892621][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.901043][ T4184] device bridge_slave_1 entered promiscuous mode [ 62.910137][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.919548][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.926779][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.934849][ T4194] device bridge_slave_0 entered promiscuous mode [ 62.943635][ T4185] team0: Port device team_slave_1 added [ 62.981227][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.988425][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.996214][ T4194] device bridge_slave_1 entered promiscuous mode [ 63.021553][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.031794][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.058404][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.071878][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.090403][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.110369][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.117726][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.144617][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.158311][ T4192] team0: Port device team_slave_0 added [ 63.171652][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.191312][ T4192] team0: Port device team_slave_1 added [ 63.206718][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.242741][ T4184] team0: Port device team_slave_0 added [ 63.253752][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.261564][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.269664][ T4186] device bridge_slave_0 entered promiscuous mode [ 63.277989][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.285132][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.311615][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.330922][ T4184] team0: Port device team_slave_1 added [ 63.341155][ T4185] device hsr_slave_0 entered promiscuous mode [ 63.349210][ T4185] device hsr_slave_1 entered promiscuous mode [ 63.362717][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.370331][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.378243][ T4186] device bridge_slave_1 entered promiscuous mode [ 63.385563][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.392929][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.419574][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.451476][ T4194] team0: Port device team_slave_0 added [ 63.486699][ T4194] team0: Port device team_slave_1 added [ 63.516152][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.523263][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.549588][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.567778][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.584875][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.597736][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.604712][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.631871][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.653791][ T4192] device hsr_slave_0 entered promiscuous mode [ 63.660831][ T4192] device hsr_slave_1 entered promiscuous mode [ 63.667997][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.675781][ T4192] Cannot create hsr debugfs directory [ 63.696012][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.703029][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.729130][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.741763][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.748824][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.774766][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.823165][ T4186] team0: Port device team_slave_0 added [ 63.845351][ T4184] device hsr_slave_0 entered promiscuous mode [ 63.853447][ T4184] device hsr_slave_1 entered promiscuous mode [ 63.860541][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.868438][ T4184] Cannot create hsr debugfs directory [ 63.876019][ T4186] team0: Port device team_slave_1 added [ 63.960559][ T4194] device hsr_slave_0 entered promiscuous mode [ 63.968188][ T4194] device hsr_slave_1 entered promiscuous mode [ 63.974848][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.982736][ T4194] Cannot create hsr debugfs directory [ 64.022547][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.029929][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.056704][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.068320][ T4199] Bluetooth: hci0: command 0x0409 tx timeout [ 64.111505][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.118695][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.145126][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.155992][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 64.167607][ T4199] Bluetooth: hci1: command 0x0409 tx timeout [ 64.177047][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 64.183523][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 64.248880][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.260595][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.272683][ T4186] device hsr_slave_0 entered promiscuous mode [ 64.279634][ T4186] device hsr_slave_1 entered promiscuous mode [ 64.286617][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.294506][ T4186] Cannot create hsr debugfs directory [ 64.308056][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.319308][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.474847][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.486404][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.496504][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.521042][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.560798][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.572340][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.590815][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.601679][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.611099][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.641743][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.652020][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.663098][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.701672][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.711104][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.720703][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.727949][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.736493][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.746295][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.755774][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.762892][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.771427][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.783999][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.816366][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.828281][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.841126][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.850452][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.861126][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.870400][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.879485][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.889342][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.899118][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.907933][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.916372][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.925255][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.934613][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.943868][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.956301][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.964679][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.975935][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.075953][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.102809][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.133679][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.144248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.160219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.173273][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.182875][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.191158][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.202496][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.228621][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.239732][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.248861][ T399] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.256152][ T399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.265454][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.275834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.287894][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.296377][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.303496][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.318302][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.326314][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.354724][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.365030][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.374573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.382537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.390702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.405140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.438632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.451413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.460242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.469869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.478967][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.486227][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.494747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.503558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.515738][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.537023][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.548448][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.571438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.581389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.606274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.622396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.631623][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.638801][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.647644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.656185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.665114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.674230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.685268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.694014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.703311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.712396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.721429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.752287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.761894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.772274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.806312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.815833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.825909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.843548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.853544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.862851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.871906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.883080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.894780][ T4185] device veth0_vlan entered promiscuous mode [ 65.904939][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.920915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.929889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.943185][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.955236][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.969166][ T4185] device veth1_vlan entered promiscuous mode [ 65.985187][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.995865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.005238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.013970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.023058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.032716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.071891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.088967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.098500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.107238][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.115200][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.124702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.134842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.143919][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.148394][ T4228] Bluetooth: hci0: command 0x041b tx timeout [ 66.151652][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.167924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.186439][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.222436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.227869][ T4228] Bluetooth: hci2: command 0x041b tx timeout [ 66.237247][ T4228] Bluetooth: hci4: command 0x041b tx timeout [ 66.239216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.244043][ T4228] Bluetooth: hci3: command 0x041b tx timeout [ 66.258291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.265048][ T4228] Bluetooth: hci1: command 0x041b tx timeout [ 66.268035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.317432][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.334917][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.344227][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.353279][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.361895][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.370159][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.379553][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.390150][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.399404][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.408468][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.416906][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.426666][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.444733][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.456799][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.483673][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.493591][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.510515][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.526350][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.536343][ T4236] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.543573][ T4236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.553049][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.562104][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.575538][ T4185] device veth0_macvtap entered promiscuous mode [ 66.585164][ T4184] device veth0_vlan entered promiscuous mode [ 66.599889][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.609281][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.618010][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.625907][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.636487][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.650175][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.665148][ T4236] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.672444][ T4236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.680602][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.688603][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.698767][ T4185] device veth1_macvtap entered promiscuous mode [ 66.709966][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.734564][ T4184] device veth1_vlan entered promiscuous mode [ 66.747223][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.757044][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.766142][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.779471][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.790015][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.817471][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.826258][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.835368][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.844369][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.853392][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.862714][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.880943][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.888792][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.899426][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.907109][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.916667][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.930395][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.943088][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.961073][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.986287][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.996721][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.026971][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.038312][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.047114][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.058013][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.069460][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.085726][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.105896][ T4184] device veth0_macvtap entered promiscuous mode [ 67.126930][ T4184] device veth1_macvtap entered promiscuous mode [ 67.137154][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.146907][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.157065][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.165499][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.174055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.183091][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.192381][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.203926][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.212235][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.220102][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.230016][ T4192] device veth0_vlan entered promiscuous mode [ 67.272452][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.284163][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.302789][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.322177][ T4192] device veth1_vlan entered promiscuous mode [ 67.343895][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.353374][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.363236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.372455][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.381271][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.394100][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.404860][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.416396][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.445991][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.458902][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.466728][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.474705][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.484448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.500271][ T4194] device veth0_vlan entered promiscuous mode [ 67.509973][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.519283][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.529262][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.538311][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.571613][ T4230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.585066][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.592728][ T4230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.602866][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.615446][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.633710][ T4194] device veth1_vlan entered promiscuous mode [ 67.654102][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.690999][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.707926][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.729767][ T4192] device veth0_macvtap entered promiscuous mode [ 67.753149][ T4236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.761934][ T4192] device veth1_macvtap entered promiscuous mode [ 67.774180][ T4236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.797928][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.810162][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.819420][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.845240][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.869314][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.879949][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.890891][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.903524][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.958976][ T4194] device veth0_macvtap entered promiscuous mode [ 67.972607][ T4194] device veth1_macvtap entered promiscuous mode [ 67.984313][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.015976][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.033105][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.045642][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.062583][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.072159][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.091705][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.102830][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.108669][ T4230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.119393][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.123388][ T4230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.132012][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.150122][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.162723][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.174927][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.186499][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.201096][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.210995][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.221597][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.231902][ T4253] Bluetooth: hci0: command 0x040f tx timeout [ 68.239678][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.257119][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.268214][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.278542][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.289625][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.299768][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.308107][ T4253] Bluetooth: hci1: command 0x040f tx timeout [ 68.311896][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.319930][ T4253] Bluetooth: hci3: command 0x040f tx timeout [ 68.327889][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.342298][ T4253] Bluetooth: hci4: command 0x040f tx timeout [ 68.355566][ T4253] Bluetooth: hci2: command 0x040f tx timeout [ 68.371369][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.384396][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.402166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.413436][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.429123][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.443231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.453894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.483424][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.494488][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.510854][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.520231][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.530742][ C1] hrtimer: interrupt took 1621918 ns [ 68.564995][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.575503][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.584919][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.594675][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.667975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.682224][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.709966][ T4236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.741209][ T4236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.803582][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.824289][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.834721][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.851265][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.862473][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.922772][ T4186] device veth0_vlan entered promiscuous mode [ 69.012601][ T4186] device veth1_vlan entered promiscuous mode [ 69.137855][ T4230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.145992][ T4230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.239189][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.261868][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.294854][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.325351][ T4186] device veth0_macvtap entered promiscuous mode [ 69.361533][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.378141][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.386557][ T4236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.429530][ T4236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.470294][ T4186] device veth1_macvtap entered promiscuous mode [ 69.497027][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.506354][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.530590][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.553317][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.576325][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.585477][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.640445][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.652437][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.693919][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.713799][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.724066][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.736426][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.751530][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.765689][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.783176][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.799801][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.817742][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.839724][ T4236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.845568][ T4279] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 69.854819][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.873945][ T4236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.883677][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.903926][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.923608][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.935776][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.952987][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.963016][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.979888][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.011083][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.023778][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.046445][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.055807][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.081880][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.097964][ T4279] usb 2-1: Using ep0 maxpacket: 32 [ 70.107705][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.116551][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.145922][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.209334][ T4293] loop3: detected capacity change from 0 to 136 [ 70.238738][ T4279] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 70.278122][ T4279] usb 2-1: config 0 has no interface number 0 [ 70.299783][ T4293] Attempt to read inode for relocated directory [ 70.307747][ T3516] Bluetooth: hci0: command 0x0419 tx timeout [ 70.409410][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 70.423105][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 70.454374][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 70.488196][ T4279] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 70.491844][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 70.503870][ T4279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.514290][ T4279] usb 2-1: Product: syz [ 70.514570][ T4230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.534905][ T4279] usb 2-1: Manufacturer: syz [ 70.554499][ T4230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.554628][ T4279] usb 2-1: SerialNumber: syz [ 70.600064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.666594][ T4279] usb 2-1: config 0 descriptor?? [ 70.678654][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.686954][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.730108][ T4279] smsc95xx v2.0.0 [ 70.738366][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.956790][ T4300] loop3: detected capacity change from 0 to 1024 [ 71.114612][ T4300] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 71.218039][ T4279] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 71.266981][ T4300] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 71.278920][ T4279] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 71.308580][ T4300] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 71.568104][ T4279] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 71.600913][ T4279] smsc95xx: probe of 2-1:0.67 failed with error -61 [ 71.673263][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.681928][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.193788][ T4321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21'. [ 72.583751][ T4332] process 'syz.4.26' launched '/dev/fd/4' with NULL argv: empty string added [ 72.663565][ T4309] loop2: detected capacity change from 0 to 32768 [ 72.771827][ T4339] loop4: detected capacity change from 0 to 512 [ 72.798120][ T4339] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 72.816754][ T4309] XFS (loop2): Mounting V5 Filesystem [ 72.888312][ T4339] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 72.976912][ T4339] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.28: bg 0: block 384: padding at end of block bitmap is not set [ 73.005682][ T4339] EXT4-fs (loop4): Remounting filesystem read-only [ 73.014072][ T4339] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 73.026593][ T4339] EXT4-fs (loop4): Remounting filesystem read-only [ 73.035118][ T4339] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.28: attempt to clear invalid blocks 983260 len 1 [ 73.052129][ T4339] EXT4-fs (loop4): Remounting filesystem read-only [ 73.067589][ T4339] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.28: Invalid inode table block 0 in block_group 0 [ 73.095536][ T4309] XFS (loop2): Ending clean mount [ 73.104086][ T4339] EXT4-fs (loop4): Remounting filesystem read-only [ 73.115754][ T4339] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 73.127740][ T4339] EXT4-fs (loop4): Remounting filesystem read-only [ 73.152257][ T4339] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 73.189076][ T4339] EXT4-fs (loop4): Remounting filesystem read-only [ 73.217539][ T4339] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.28: Invalid inode table block 0 in block_group 0 [ 73.240859][ T13] usb 2-1: USB disconnect, device number 2 [ 73.244239][ T4339] EXT4-fs (loop4): Remounting filesystem read-only [ 73.255167][ T4339] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 73.278346][ T4339] EXT4-fs (loop4): Remounting filesystem read-only [ 73.317119][ T4339] EXT4-fs error (device loop4): ext4_truncate:4286: inode #11: comm syz.4.28: mark_inode_dirty error [ 73.366761][ T4192] XFS (loop2): Unmounting Filesystem [ 73.422961][ T4339] EXT4-fs (loop4): Remounting filesystem read-only [ 73.469988][ T4339] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 73.470182][ T4353] FAULT_INJECTION: forcing a failure. [ 73.470182][ T4353] name failslab, interval 1, probability 0, space 0, times 1 [ 73.480888][ T4339] EXT4-fs (loop4): Remounting filesystem read-only [ 73.502855][ T4339] EXT4-fs (loop4): 1 truncate cleaned up [ 73.509800][ T4339] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,noblock_validity,. Quota mode: none. [ 73.533238][ T4353] CPU: 1 PID: 4353 Comm: syz.1.30 Not tainted syzkaller #0 [ 73.540598][ T4353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 73.550896][ T4353] Call Trace: [ 73.554210][ T4353] [ 73.557157][ T4353] dump_stack_lvl+0x188/0x250 [ 73.561955][ T4353] ? show_regs_print_info+0x20/0x20 [ 73.567298][ T4353] ? load_image+0x410/0x410 [ 73.571836][ T4353] ? __might_sleep+0xf0/0xf0 [ 73.576462][ T4353] ? __lock_acquire+0x7b50/0x7b50 [ 73.581514][ T4353] ? do_futex+0xdc2/0x12b0 [ 73.586069][ T4353] should_fail+0x383/0x4b0 [ 73.590528][ T4353] should_failslab+0x5/0x20 [ 73.595164][ T4353] slab_pre_alloc_hook+0x51/0xc0 [ 73.600148][ T4353] ? copy_fs_struct+0x4b/0x270 [ 73.604959][ T4353] kmem_cache_alloc+0x3d/0x280 [ 73.609773][ T4353] copy_fs_struct+0x4b/0x270 [ 73.614472][ T4353] ksys_unshare+0x397/0x8e0 [ 73.619132][ T4353] ? __lock_acquire+0x7b50/0x7b50 [ 73.624207][ T4353] ? sighand_ctor+0x40/0x40 [ 73.628745][ T4353] ? lock_chain_count+0x20/0x20 [ 73.633733][ T4353] ? syscall_enter_from_user_mode+0x21/0x70 [ 73.639761][ T4353] __x64_sys_unshare+0x34/0x40 [ 73.644656][ T4353] do_syscall_64+0x4c/0xa0 [ 73.649120][ T4353] ? clear_bhb_loop+0x30/0x80 [ 73.653916][ T4353] ? clear_bhb_loop+0x30/0x80 [ 73.658624][ T4353] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.664806][ T4353] RIP: 0033:0x7fceba52a159 [ 73.669357][ T4353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.688998][ T4353] RSP: 002b:00007fceb8782028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 73.697449][ T4353] RAX: ffffffffffffffda RBX: 00007fceba7b1fa0 RCX: 00007fceba52a159 [ 73.705463][ T4353] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000600 [ 73.713552][ T4353] RBP: 00007fceba5c106b R08: 0000000000000000 R09: 0000000000000000 [ 73.721558][ T4353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.729564][ T4353] R13: 00007fceba7b2038 R14: 00007fceba7b1fa0 R15: 00007fff7cbe6298 [ 73.737585][ T4353] [ 74.237530][ T3516] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.283472][ T4362] loop1: detected capacity change from 0 to 512 [ 74.370078][ T4362] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #15: comm syz.1.36: iget: bad i_size value: 38620345925642 [ 74.404863][ T4362] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.36: couldn't read orphan inode 15 (err -117) [ 74.418817][ T4362] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 74.505884][ T4360] capability: warning: `syz.3.35' uses 32-bit capabilities (legacy support in use) [ 74.607746][ T3516] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 74.648052][ T3516] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.690142][ T3516] usb 5-1: config 0 descriptor?? [ 74.753034][ T3516] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 75.096996][ T4373] loop1: detected capacity change from 0 to 128 [ 75.129502][ T4373] ======================================================= [ 75.129502][ T4373] WARNING: The mand mount option has been deprecated and [ 75.129502][ T4373] and is ignored by this kernel. Remove the mand [ 75.129502][ T4373] option from the mount to silence this warning. [ 75.129502][ T4373] ======================================================= [ 75.141552][ T4375] loop3: detected capacity change from 0 to 164 [ 75.196180][ T4373] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 75.219212][ T4373] hpfs: filesystem error: improperly stopped [ 75.225665][ T4373] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 75.236579][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a2fe000: rx timeout, send abort [ 75.246569][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802a2fe000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 75.278570][ T4373] hpfs: You really don't want any checks? You are crazy... [ 75.296118][ T4373] hpfs: Code page index out of array [ 75.314778][ T4373] hpfs: code page support is disabled [ 75.335686][ T4373] hpfs: hpfs_map_4sectors(): unaligned read [ 75.346261][ T4373] hpfs: hpfs_map_4sectors(): unaligned read [ 75.356718][ T4373] hpfs: filesystem error: unable to find root dir [ 75.397462][ T3516] gspca_cpia1: usb_control_msg 01, error -71 [ 75.406065][ T3516] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 75.506905][ T3516] usb 5-1: USB disconnect, device number 2 [ 75.787563][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 76.058209][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 76.197623][ T7] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.240893][ T7] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 76.331349][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 76.371832][ T7] usb 1-1: New USB device found, idVendor=045e, idProduct=00dc, bcdDevice= 0.00 [ 76.433542][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.459012][ T4397] loop3: detected capacity change from 0 to 256 [ 76.502169][ T7] usb 1-1: config 0 descriptor?? [ 76.652877][ T4397] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 76.807486][ T3516] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 76.923314][ T4404] jffs2: notice: (4404) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 77.066390][ T7] input: HID 045e:00dc as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:00DC.0001/input/input5 [ 77.207637][ T3516] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 77.230307][ T7] microsoft 0003:045E:00DC.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 045e:00dc] on usb-dummy_hcd.0-1/input0 [ 77.248653][ T3516] usb 5-1: config 0 interface 0 has no altsetting 0 [ 77.271727][ T4411] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 77.288094][ T4411] syzkaller0: owner set to 0 [ 77.316054][ T4413] Illegal XDP return value 4294967262, expect packet loss! [ 77.364857][ T7] usb 1-1: USB disconnect, device number 2 [ 77.447662][ T3516] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 77.478953][ T3516] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 77.527220][ T3516] usb 5-1: Product: syz [ 77.542334][ T3516] usb 5-1: Manufacturer: syz [ 77.546993][ T3516] usb 5-1: SerialNumber: syz [ 77.592809][ T3516] usb 5-1: config 0 descriptor?? [ 77.656959][ T3516] usb 5-1: selecting invalid altsetting 0 [ 77.659073][ T4414] fido_id[4414]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 77.991361][ T4399] usb 5-1: selecting invalid altsetting 0 [ 78.037590][ T4399] usb 5-1: 0:0: usb_set_interface failed (-22) [ 78.092086][ T4399] usb 5-1: selecting invalid altsetting 0 [ 78.094865][ T4279] usb 5-1: USB disconnect, device number 3 [ 78.139151][ T4399] usb 5-1: 0:0: usb_set_interface failed (-22) [ 78.255275][ T4433] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.263524][ T4432] loop0: detected capacity change from 0 to 1024 [ 78.655615][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 78.742152][ T4441] loop1: detected capacity change from 0 to 32768 [ 78.751948][ T3516] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.799960][ T4441] (syz.1.68,4441,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 78.816076][ T4441] (syz.1.68,4441,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 78.851448][ T4441] JBD2: Ignoring recovery information on journal [ 78.953254][ T4448] binder: 4447:4448 ioctl 4018620d 0 returned -22 [ 79.013881][ T4450] binder: 4447:4450 ioctl c0306201 0 returned -14 [ 79.026239][ T4441] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 79.117689][ T3516] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.161921][ T3516] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 79.184764][ T4452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71'. [ 79.209838][ T3516] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 79.298113][ T4454] ieee802154 phy0 wpan0: encryption failed: -22 [ 79.304994][ T3516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.362754][ T3516] idmouse 3-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 79.372551][ T4452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71'. [ 79.749475][ T4457] loop4: detected capacity change from 0 to 1024 [ 79.821651][ T4184] ocfs2: Unmounting device (7,1) on (node local) [ 79.859764][ T4457] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 79.939538][ T4457] EXT4-fs error (device loop4): ext4_get_journal_inode:5187: inode #32: comm syz.4.74: iget: special inode unallocated [ 80.010647][ T4457] EXT4-fs (loop4): no journal found [ 80.017066][ T4457] EXT4-fs (loop4): can't get journal size [ 80.146437][ T4457] EXT4-fs (loop4): filesystem is read-only [ 80.153906][ T4457] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,noload,noblock_validity,noblock_validity,grpjquota=,,errors=continue. Quota mode: none. [ 80.439894][ T4480] loop1: detected capacity change from 0 to 64 [ 80.587403][ T3516] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.754921][ T4480] overlayfs: upper fs needs to support d_type. [ 80.857526][ T3516] usb 4-1: Using ep0 maxpacket: 8 [ 80.872996][ T4480] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 80.904102][ T4480] overlayfs: failed to set xattr on upper [ 80.923906][ T4480] overlayfs: ...falling back to index=off,metacopy=off. [ 80.936759][ T4480] overlayfs: conflicting lowerdir path [ 80.977671][ T3516] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 81.028651][ T3516] usb 4-1: config 0 interface 0 has no altsetting 0 [ 81.060820][ T3516] usb 4-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 81.091602][ T3516] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.110286][ T3516] usb 4-1: config 0 descriptor?? [ 81.128582][ T4260] attempt to access beyond end of device [ 81.128582][ T4260] loop1: rw=1, want=268435470, limit=64 [ 81.172897][ T4260] Buffer I/O error on dev loop1, logical block 134217734, lost async page write [ 81.247673][ T4279] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 81.521458][ T4279] usb 1-1: Using ep0 maxpacket: 8 [ 81.620407][ T3516] lenovo 0003:17EF:60B5.0002: unknown main item tag 0x0 [ 81.643622][ T3516] lenovo 0003:17EF:60B5.0002: unknown main item tag 0x0 [ 81.678286][ T4279] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 81.697447][ T3516] lenovo 0003:17EF:60B5.0002: unknown main item tag 0x0 [ 81.702049][ T4279] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 81.721573][ T3516] lenovo 0003:17EF:60B5.0002: unknown main item tag 0x0 [ 81.755544][ T3516] lenovo 0003:17EF:60B5.0002: unknown main item tag 0x0 [ 81.763756][ T4189] usb 3-1: USB disconnect, device number 2 [ 81.781771][ T4279] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 81.786091][ T3516] lenovo 0003:17EF:60B5.0002: unknown main item tag 0x0 [ 81.840201][ T4189] idmouse 3-1:1.0: disconnected [ 81.843204][ T3516] lenovo 0003:17EF:60B5.0002: unknown main item tag 0x6 [ 81.848553][ T4279] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.887522][ T3516] lenovo 0003:17EF:60B5.0002: collection stack underflow [ 81.916138][ T3516] lenovo 0003:17EF:60B5.0002: item 0 4 0 12 parsing failed [ 81.933696][ T4279] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 81.943724][ T3516] lenovo 0003:17EF:60B5.0002: hid_parse failed [ 81.943796][ T3516] lenovo: probe of 0003:17EF:60B5.0002 failed with error -22 [ 81.975440][ T4279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.305361][ T4515] loop2: detected capacity change from 0 to 1024 [ 82.327903][ T4279] usb 1-1: GET_CAPABILITIES returned 0 [ 82.334575][ T4279] usbtmc 1-1:16.0: can't read capabilities [ 82.413557][ T4518] ieee802154 phy0 wpan0: encryption failed: -22 [ 82.753644][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 82.763654][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 82.772957][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 82.782247][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 82.791627][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 82.800979][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 82.810445][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 82.819751][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 82.829180][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 82.838538][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 82.847940][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 83.055109][ T4532] loop1: detected capacity change from 0 to 8 [ 83.157780][ T4189] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 83.287429][ T4534] device-mapper: ioctl: Unable to rename non-existent device, to § [ 83.618246][ T4189] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 83.647579][ T4189] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.667470][ T4189] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 83.697607][ T4189] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.855473][ T4540] syz.3.104 (4540) used greatest stack depth: 19216 bytes left [ 83.888064][ T4189] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 83.907465][ T4189] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 83.937582][ T4189] usb 3-1: Product: syz [ 83.977523][ T4189] usb 3-1: Manufacturer: syz [ 84.039093][ T3516] usb 1-1: USB disconnect, device number 3 [ 84.110237][ T4189] cdc_wdm 3-1:1.0: skipping garbage [ 84.133763][ T4189] cdc_wdm 3-1:1.0: skipping garbage [ 84.173843][ T4189] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 84.197797][ T4189] cdc_wdm 3-1:1.0: Unknown control protocol [ 84.620519][ T3516] usb 3-1: USB disconnect, device number 3 [ 84.637727][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 84.644987][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 84.651075][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 85.285119][ T4554] loop0: detected capacity change from 0 to 2048 [ 85.366740][ T4551] loop4: detected capacity change from 0 to 32768 [ 85.447762][ T4554] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 85.520853][ T4554] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.583646][ T4551] JBD2: Ignoring recovery information on journal [ 85.706577][ T4547] loop3: detected capacity change from 0 to 40427 [ 85.747189][ T4554] UDF-fs: unknown compression code (112) [ 85.821146][ T4547] F2FS-fs (loop3): invalid crc value [ 85.920010][ T4547] F2FS-fs (loop3): Found nat_bits in checkpoint [ 85.948246][ T4551] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 86.206180][ T4563] input: syz1 as /devices/virtual/input/input6 [ 86.248730][ T4547] F2FS-fs (loop3): Start checkpoint disabled! [ 86.350869][ T4547] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 86.523019][ T4186] ocfs2: Unmounting device (7,4) on (node local) [ 87.017485][ T1108] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 87.031590][ T1323] cfg80211: failed to load regulatory.db [ 87.377599][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.414353][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.442110][ T144] attempt to access beyond end of device [ 87.442110][ T144] loop3: rw=2049, want=45104, limit=40427 [ 87.472952][ T1108] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 87.518257][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.574349][ T1108] usb 1-1: config 0 descriptor?? [ 87.864558][ T4559] loop2: detected capacity change from 0 to 40427 [ 87.971147][ T4559] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 88.018026][ T4559] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 88.070151][ T1108] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x2 [ 88.131749][ T4559] F2FS-fs (loop2): invalid crc value [ 88.137560][ T1108] pyra 0003:1E7D:2CF6.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 88.206425][ T4559] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 88.288074][ T1108] pyra 0003:1E7D:2CF6.0003: couldn't init struct pyra_device [ 88.311725][ T1108] pyra 0003:1E7D:2CF6.0003: couldn't install mouse [ 88.438290][ T1108] pyra: probe of 0003:1E7D:2CF6.0003 failed with error -71 [ 88.531564][ T1108] usb 1-1: USB disconnect, device number 4 [ 88.682946][ T4569] loop4: detected capacity change from 0 to 32768 [ 88.711918][ T4578] FAULT_INJECTION: forcing a failure. [ 88.711918][ T4578] name failslab, interval 1, probability 0, space 0, times 0 [ 88.802605][ T4569] JBD2: Ignoring recovery information on journal [ 88.840106][ T4578] CPU: 0 PID: 4578 Comm: syz.3.115 Not tainted syzkaller #0 [ 88.847466][ T4578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.857558][ T4578] Call Trace: [ 88.860875][ T4578] [ 88.863826][ T4578] dump_stack_lvl+0x188/0x250 [ 88.863858][ T4578] ? show_regs_print_info+0x20/0x20 [ 88.863880][ T4578] ? load_image+0x410/0x410 [ 88.863904][ T4578] ? __lock_acquire+0x7b50/0x7b50 [ 88.863932][ T4578] should_fail+0x383/0x4b0 [ 88.863957][ T4578] should_failslab+0x5/0x20 [ 88.863973][ T4578] slab_pre_alloc_hook+0x51/0xc0 [ 88.863991][ T4578] ? __alloc_file+0x25/0x240 [ 88.864009][ T4578] kmem_cache_alloc+0x3d/0x280 [ 88.864028][ T4578] __alloc_file+0x25/0x240 [ 88.882712][ T4577] fido_id[4577]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 88.883826][ T4578] alloc_empty_file+0x90/0x180 [ 88.883859][ T4578] alloc_file+0x5c/0x510 [ 88.883879][ T4578] ? do_raw_spin_unlock+0x11d/0x230 [ 88.883906][ T4578] alloc_file_pseudo+0x180/0x200 [ 88.883931][ T4578] ? alloc_empty_file_noaccount+0x80/0x80 [ 88.883954][ T4578] ? alloc_anon_inode+0x22e/0x300 [ 88.883976][ T4578] ? memcpy+0x3c/0x60 [ 88.883994][ T4578] ? bpf_lsm_inode_init_security_anon+0x5/0x10 [ 88.884015][ T4578] ? security_inode_init_security_anon+0x7e/0xa0 [ 88.884039][ T4578] __anon_inode_getfd+0x26b/0x3d0 [ 88.884064][ T4578] ? anon_inode_getfd+0x40/0x40 [ 88.884083][ T4578] ? __se_sys_userfaultfd+0xc2/0x380 [ 88.884102][ T4578] ? kmem_cache_alloc+0x189/0x280 [ 88.884125][ T4578] __se_sys_userfaultfd+0x21c/0x380 [ 88.907737][ T4578] do_syscall_64+0x4c/0xa0 [ 88.907767][ T4578] ? clear_bhb_loop+0x30/0x80 [ 88.907788][ T4578] ? clear_bhb_loop+0x30/0x80 [ 88.907811][ T4578] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.907834][ T4578] RIP: 0033:0x7f2943d4a159 [ 88.907855][ T4578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.907873][ T4578] RSP: 002b:00007f2941fa2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 88.907898][ T4578] RAX: ffffffffffffffda RBX: 00007f2943fd1fa0 RCX: 00007f2943d4a159 [ 88.907913][ T4578] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000801 [ 88.907927][ T4578] RBP: 00007f2943de106b R08: 0000000000000000 R09: 0000000000000000 [ 88.907940][ T4578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.907954][ T4578] R13: 00007f2943fd2038 R14: 00007f2943fd1fa0 R15: 00007ffe33b4ddb8 [ 88.907986][ T4578] [ 89.299720][ T4586] loop0: detected capacity change from 0 to 2048 [ 89.517656][ T4569] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 89.600611][ T4586] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.912146][ T26] audit: type=1800 audit(1790065647.668:2): pid=4569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.113" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 90.167234][ T4569] [ 90.169741][ T4569] ====================================================== [ 90.173484][ T4607] async_waiting @ 4607 [ 90.176867][ T4569] WARNING: possible circular locking dependency detected [ 90.176878][ T4569] syzkaller #0 Not tainted [ 90.176889][ T4569] ------------------------------------------------------ [ 90.176896][ T4569] syz.4.113/4569 is trying to acquire lock: [ 90.176906][ T4569] ffff88802c7c4990 (jbd2_handle){++++}-{0:0}, at: wait_transaction_locked+0x19f/0x270 [ 90.176964][ T4569] [ 90.176964][ T4569] but task is already holding lock: [ 90.176970][ T4569] ffff888025fb1ce8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a6/0x6f0 [ 90.177017][ T4569] [ 90.177017][ T4569] which lock already depends on the new lock. [ 90.177017][ T4569] [ 90.177023][ T4569] [ 90.177023][ T4569] the existing dependency chain (in reverse order) is: [ 90.177030][ T4569] [ 90.177030][ T4569] -> #5 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 90.177066][ T4569] down_read+0x44/0x2e0 [ 90.177084][ T4569] ocfs2_start_trans+0x3a6/0x6f0 [ 90.177103][ T4569] ocfs2_modify_bh+0xe0/0x4c0 [ 90.177122][ T4569] ocfs2_local_read_info+0x1499/0x1820 [ 90.177140][ T4569] dquot_load_quota_sb+0x72f/0xa80 [ 90.187659][ T4608] kcov: kcov_start: t = ffff88807dab5940, size = 524288, area = ffffc90005872000 [ 90.188250][ T4569] dquot_load_quota_inode+0x2d3/0x5c0 [ 90.199305][ T4607] async_continuing @ 4607 after 1 usec [ 90.199687][ T4569] ocfs2_enable_quotas+0x1c0/0x4a0 [ 90.199714][ T4569] ocfs2_fill_super+0x3c84/0x50a0 [ 90.199731][ T4569] mount_bdev+0x28a/0x3c0 [ 90.324745][ T4569] legacy_get_tree+0xe6/0x180 [ 90.329982][ T4569] vfs_get_tree+0x88/0x270 [ 90.334930][ T4569] do_new_mount+0x247/0xa40 [ 90.340155][ T4569] __se_sys_mount+0x2e3/0x3d0 [ 90.345472][ T4569] do_syscall_64+0x4c/0xa0 [ 90.350416][ T4569] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.356834][ T4569] [ 90.356834][ T4569] -> #4 (sb_internal#2){.+.+}-{0:0}: [ 90.364316][ T4569] ocfs2_start_trans+0x2a7/0x6f0 [ 90.369951][ T4569] ocfs2_acquire_dquot+0x6c0/0xb30 [ 90.375767][ T4569] dqget+0x713/0xbb0 [ 90.380186][ T4569] __dquot_initialize+0x3a9/0xd00 [ 90.385737][ T4569] ocfs2_get_init_inode+0x144/0x1b0 [ 90.391468][ T4569] ocfs2_mknod+0x93c/0x25f0 [ 90.396495][ T4569] ocfs2_create+0x192/0x420 [ 90.401523][ T4569] path_openat+0x120a/0x2fb0 [ 90.407428][ T4569] do_filp_open+0x1df/0x400 [ 90.412481][ T4569] do_sys_openat2+0x14b/0x500 [ 90.417768][ T4569] __x64_sys_creat+0x8c/0xb0 [ 90.422876][ T4569] do_syscall_64+0x4c/0xa0 [ 90.427812][ T4569] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.434258][ T4569] [ 90.434258][ T4569] -> #3 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 90.443208][ T4569] down_write+0x38/0x60 [ 90.447985][ T4569] ocfs2_create_local_dquot+0x199/0x18d0 [ 90.454144][ T4569] ocfs2_acquire_dquot+0x822/0xb30 [ 90.459891][ T4569] dqget+0x713/0xbb0 [ 90.464451][ T4569] __dquot_initialize+0x3a9/0xd00 [ 90.470011][ T4569] ocfs2_get_init_inode+0x144/0x1b0 [ 90.475743][ T4569] ocfs2_mknod+0x93c/0x25f0 [ 90.480854][ T4569] ocfs2_create+0x192/0x420 [ 90.485878][ T4569] path_openat+0x120a/0x2fb0 [ 90.491081][ T4569] do_filp_open+0x1df/0x400 [ 90.496199][ T4569] do_sys_openat2+0x14b/0x500 [ 90.501486][ T4569] __x64_sys_creat+0x8c/0xb0 [ 90.506603][ T4569] do_syscall_64+0x4c/0xa0 [ 90.513984][ T4569] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.520431][ T4569] [ 90.520431][ T4569] -> #2 (&dquot->dq_lock){+.+.}-{3:3}: [ 90.528084][ T4569] __mutex_lock_common+0x1e5/0x2400 [ 90.533892][ T4569] mutex_lock_nested+0x17/0x20 [ 90.539176][ T4569] dquot_commit+0x5a/0x410 [ 90.544118][ T4569] ext4_write_dquot+0x1f0/0x360 [ 90.549497][ T4569] mark_all_dquot_dirty+0xf9/0x400 [ 90.555131][ T4569] __dquot_alloc_space+0x5cb/0xe10 [ 90.560763][ T4569] ext4_mb_new_blocks+0xf80/0x47c0 [ 90.566400][ T4569] ext4_ext_map_blocks+0x17d1/0x63d0 [ 90.572205][ T4569] ext4_map_blocks+0x97f/0x1a50 [ 90.577575][ T4569] ext4_convert_inline_data_nolock+0x435/0xcd0 [ 90.584423][ T4569] ext4_convert_inline_data+0x470/0x5b0 [ 90.590492][ T4569] ext4_set_context+0x179/0x5a0 [ 90.595961][ T4569] set_encryption_policy+0x394/0x600 [ 90.601796][ T4569] fscrypt_ioctl_set_policy+0x435/0x4d0 [ 90.607951][ T4569] ext4_ioctl+0x15a8/0x3840 [ 90.612985][ T4569] __se_sys_ioctl+0xfa/0x170 [ 90.618192][ T4569] do_syscall_64+0x4c/0xa0 [ 90.623135][ T4569] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.629646][ T4569] [ 90.629646][ T4569] -> #1 (&ei->i_data_sem){++++}-{3:3}: [ 90.637337][ T4569] down_read+0x44/0x2e0 [ 90.642029][ T4569] ext4_map_blocks+0x350/0x1a50 [ 90.647520][ T4569] ext4_append+0x22d/0x560 [ 90.652488][ T4569] ext4_init_new_dir+0x2a7/0x910 [ 90.657963][ T4569] ext4_mkdir+0x4c3/0xc90 [ 90.662819][ T4569] vfs_mkdir+0x386/0x570 [ 90.667670][ T4569] do_mkdirat+0x1dd/0x5c0 [ 90.672520][ T4569] __x64_sys_mkdir+0x6a/0x80 [ 90.677718][ T4569] do_syscall_64+0x4c/0xa0 [ 90.682653][ T4569] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.689079][ T4569] [ 90.689079][ T4569] -> #0 (jbd2_handle){++++}-{0:0}: [ 90.696383][ T4569] __lock_acquire+0x2c66/0x7b50 [ 90.701756][ T4569] lock_acquire+0x19e/0x400 [ 90.706784][ T4569] wait_transaction_locked+0x1bb/0x270 [ 90.712762][ T4569] add_transaction_credits+0x104/0xcb0 [ 90.718743][ T4569] start_this_handle+0x723/0x1560 [ 90.724292][ T4569] jbd2__journal_start+0x2b7/0x5a0 [ 90.729924][ T4569] jbd2_journal_start+0x26/0x30 [ 90.735300][ T4569] ocfs2_start_trans+0x3b2/0x6f0 [ 90.740851][ T4569] ocfs2_del_inode_from_orphan+0x169/0x7b0 [ 90.747269][ T4569] ocfs2_dio_end_io+0x10ed/0x1400 [ 90.752819][ T4569] dio_complete+0x255/0x700 [ 90.757843][ T4569] __blockdev_direct_IO+0x2eb0/0x3b20 [ 90.763735][ T4569] ocfs2_direct_IO+0x233/0x2a0 [ 90.769025][ T4569] generic_file_direct_write+0x222/0x470 [ 90.775188][ T4569] __generic_file_write_iter+0x2b2/0x4e0 [ 90.781346][ T4569] ocfs2_file_write_iter+0x171a/0x1ee0 [ 90.787415][ T4569] do_iter_readv_writev+0x47d/0x5f0 [ 90.793143][ T4569] do_iter_write+0x1f8/0x7a0 [ 90.798896][ T4569] iter_file_splice_write+0x6be/0xcf0 [ 90.804809][ T4569] direct_splice_actor+0xe1/0x130 [ 90.810354][ T4569] splice_direct_to_actor+0x4e8/0xc00 [ 90.816429][ T4569] do_splice_direct+0x1d4/0x2f0 [ 90.821812][ T4569] do_sendfile+0x524/0xe30 [ 90.826837][ T4569] __se_sys_sendfile64+0x141/0x1a0 [ 90.832476][ T4569] do_syscall_64+0x4c/0xa0 [ 90.837415][ T4569] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.843929][ T4569] [ 90.843929][ T4569] other info that might help us debug this: [ 90.843929][ T4569] [ 90.854335][ T4569] Chain exists of: [ 90.854335][ T4569] jbd2_handle --> sb_internal#2 --> &journal->j_trans_barrier [ 90.854335][ T4569] [ 90.867746][ T4569] Possible unsafe locking scenario: [ 90.867746][ T4569] [ 90.875465][ T4569] CPU0 CPU1 [ 90.880832][ T4569] ---- ---- [ 90.886494][ T4569] lock(&journal->j_trans_barrier); [ 90.891787][ T4569] lock(sb_internal#2); [ 90.898558][ T4569] lock(&journal->j_trans_barrier); [ 90.906404][ T4569] lock(jbd2_handle); [ 90.910478][ T4569] [ 90.910478][ T4569] *** DEADLOCK *** [ 90.910478][ T4569] [ 90.921356][ T4569] 5 locks held by syz.4.113/4569: [ 90.926390][ T4569] #0: ffff888077332460 (sb_writers#17){.+.+}-{0:0}, at: do_sendfile+0x4ff/0xe30 [ 90.935581][ T4569] #1: ffff8880626da648 (&sb->s_type->i_mutex_key#24){+.+.}-{3:3}, at: ocfs2_file_write_iter+0x437/0x1ee0 [ 90.947078][ T4569] #2: ffff8880626bc2c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]){+.+.}-{3:3}, at: ocfs2_del_inode_from_orphan+0x12b/0x7b0 [ 90.960473][ T4569] #3: ffff888077332650 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_del_inode_from_orphan+0x169/0x7b0 [ 90.971033][ T4569] #4: ffff888025fb1ce8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a6/0x6f0 [ 90.981734][ T4569] [ 90.981734][ T4569] stack backtrace: [ 90.987618][ T4569] CPU: 0 PID: 4569 Comm: syz.4.113 Not tainted syzkaller #0 [ 90.995141][ T4569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.005301][ T4569] Call Trace: [ 91.008603][ T4569] [ 91.011540][ T4569] dump_stack_lvl+0x188/0x250 [ 91.016223][ T4569] ? load_image+0x410/0x410 [ 91.020727][ T4569] ? show_regs_print_info+0x20/0x20 [ 91.026033][ T4569] ? print_circular_bug+0x12b/0x1a0 [ 91.031236][ T4569] check_noncircular+0x296/0x330 [ 91.036184][ T4569] ? add_chain_block+0x9b0/0x9b0 [ 91.041307][ T4569] ? lockdep_lock+0xf1/0x1f0 [ 91.045907][ T4569] ? mark_lock+0x94/0x320 [ 91.050250][ T4569] ? _find_first_zero_bit+0xd1/0xf0 [ 91.055542][ T4569] __lock_acquire+0x2c66/0x7b50 [ 91.060405][ T4569] ? __lock_acquire+0x13dc/0x7b50 [ 91.065433][ T4569] ? verify_lock_unused+0x140/0x140 [ 91.070635][ T4569] ? mark_lock+0x94/0x320 [ 91.075066][ T4569] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 91.081061][ T4569] lock_acquire+0x19e/0x400 [ 91.085576][ T4569] ? wait_transaction_locked+0x19f/0x270 [ 91.091236][ T4569] ? wait_transaction_locked+0x17c/0x270 [ 91.096970][ T4569] ? __lock_acquire+0x7b50/0x7b50 [ 91.102005][ T4569] ? read_lock_is_recursive+0x10/0x10 [ 91.107386][ T4569] wait_transaction_locked+0x1bb/0x270 [ 91.112856][ T4569] ? wait_transaction_locked+0x19f/0x270 [ 91.118588][ T4569] ? add_transaction_credits+0xcb0/0xcb0 [ 91.124227][ T4569] ? init_wait_entry+0xd0/0xd0 [ 91.128996][ T4569] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 91.134893][ T4569] ? lockdep_hardirqs_on+0x94/0x140 [ 91.140096][ T4569] add_transaction_credits+0x104/0xcb0 [ 91.145572][ T4569] ? jbd2_journal_begin_ordered_truncate+0x150/0x150 [ 91.152369][ T4569] ? read_lock_is_recursive+0x10/0x10 [ 91.157748][ T4569] ? __kasan_slab_alloc+0xa9/0xc0 [ 91.162863][ T4569] ? __kasan_slab_alloc+0x92/0xc0 [ 91.167891][ T4569] ? slab_post_alloc_hook+0x4c/0x380 [ 91.173382][ T4569] ? jbd2__journal_start+0x13c/0x5a0 [ 91.178672][ T4569] ? jbd2_journal_start+0x26/0x30 [ 91.183801][ T4569] ? ocfs2_start_trans+0x3b2/0x6f0 [ 91.189025][ T4569] ? ocfs2_dio_end_io+0x10ed/0x1400 [ 91.194251][ T4569] ? dio_complete+0x255/0x700 [ 91.198930][ T4569] ? __blockdev_direct_IO+0x2eb0/0x3b20 [ 91.204489][ T4569] ? generic_file_direct_write+0x222/0x470 [ 91.210299][ T4569] start_this_handle+0x723/0x1560 [ 91.215421][ T4569] ? do_syscall_64+0x4c/0xa0 [ 91.220020][ T4569] ? jbd2__journal_start+0x5a0/0x5a0 [ 91.225309][ T4569] ? slab_post_alloc_hook+0x68/0x380 [ 91.230601][ T4569] ? jbd2__journal_start+0x13c/0x5a0 [ 91.235893][ T4569] ? rcu_is_watching+0x11/0xa0 [ 91.241021][ T4569] ? jbd2__journal_start+0x13c/0x5a0 [ 91.246832][ T4569] ? kmem_cache_alloc+0x189/0x280 [ 91.251947][ T4569] jbd2__journal_start+0x2b7/0x5a0 [ 91.257070][ T4569] jbd2_journal_start+0x26/0x30 [ 91.261929][ T4569] ocfs2_start_trans+0x3b2/0x6f0 [ 91.267394][ T4569] ? ocfs2_recovery_exit+0x50/0x50 [ 91.272538][ T4569] ocfs2_del_inode_from_orphan+0x169/0x7b0 [ 91.278375][ T4569] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 91.283871][ T4569] ? ocfs2_add_inode_to_orphan+0x7b0/0x7b0 [ 91.289683][ T4569] ? __lock_acquire+0x7b50/0x7b50 [ 91.294717][ T4569] ? sb_end_intwrite+0xe9/0x1c0 [ 91.299595][ T4569] ? ocfs2_commit_trans+0x130/0x240 [ 91.304799][ T4569] ? sb_end_intwrite+0x1c0/0x1c0 [ 91.309848][ T4569] ? up_write+0x1b6/0x410 [ 91.314191][ T4569] ocfs2_dio_end_io+0x10ed/0x1400 [ 91.319308][ T4569] ? ocfs2_dio_wr_get_block+0x1810/0x1810 [ 91.325269][ T4569] ? ocfs2_file_write_iter+0x171a/0x1ee0 [ 91.330927][ T4569] ? iter_file_splice_write+0x6be/0xcf0 [ 91.336484][ T4569] ? direct_splice_actor+0xe1/0x130 [ 91.341696][ T4569] ? ocfs2_allocate_extend_trans+0x5d0/0x5d0 [ 91.347945][ T4569] ? mark_lock+0x94/0x320 [ 91.352366][ T4569] ? mark_lock+0x94/0x320 [ 91.356695][ T4569] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 91.362861][ T4569] ? lock_chain_count+0x20/0x20 [ 91.367910][ T4569] ? __rwlock_init+0x140/0x140 [ 91.372685][ T4569] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 91.378682][ T4569] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 91.384757][ T4569] ? lockdep_hardirqs_on+0x94/0x140 [ 91.389963][ T4569] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 91.395860][ T4569] ? _raw_spin_unlock+0x40/0x40 [ 91.400805][ T4569] ? ocfs2_dio_wr_get_block+0x1810/0x1810 [ 91.406528][ T4569] dio_complete+0x255/0x700 [ 91.411068][ T4569] __blockdev_direct_IO+0x2eb0/0x3b20 [ 91.416482][ T4569] ? sb_init_dio_done_wq+0x80/0x80 [ 91.421692][ T4569] ? ocfs2_lock_get_block+0x50/0x50 [ 91.426937][ T4569] ? invalidate_mapping_pagevec+0x30/0x30 [ 91.432757][ T4569] ? filemap_write_and_wait_range+0x2b0/0x3b0 [ 91.438917][ T4569] ? rcu_is_watching+0x11/0xa0 [ 91.443679][ T4569] ? __mark_inode_dirty+0x7c7/0xc90 [ 91.448878][ T4569] ? ocfs2_lock_get_block+0x50/0x50 [ 91.454075][ T4569] ocfs2_direct_IO+0x233/0x2a0 [ 91.458859][ T4569] generic_file_direct_write+0x222/0x470 [ 91.464500][ T4569] __generic_file_write_iter+0x2b2/0x4e0 [ 91.470235][ T4569] ? ocfs2_inode_unlock+0x11a/0x140 [ 91.475431][ T4569] ocfs2_file_write_iter+0x171a/0x1ee0 [ 91.480899][ T4569] ? ocfs2_file_read_iter+0xa80/0xa80 [ 91.486283][ T4569] ? rcu_lock_release+0x5/0x20 [ 91.491053][ T4569] ? __lock_acquire+0x7b50/0x7b50 [ 91.496273][ T4569] ? aa_file_perm+0x38b/0xe80 [ 91.500953][ T4569] ? __kasan_kmalloc+0xaf/0xe0 [ 91.505722][ T4569] ? splice_direct_to_actor+0x4e8/0xc00 [ 91.511359][ T4569] do_iter_readv_writev+0x47d/0x5f0 [ 91.516647][ T4569] ? aa_path_link+0x8a0/0x8a0 [ 91.521324][ T4569] ? generic_file_rw_checks+0x280/0x280 [ 91.526870][ T4569] ? common_file_perm+0x171/0x1c0 [ 91.531894][ T4569] ? fsnotify_perm+0x5d/0x560 [ 91.536574][ T4569] ? security_file_permission+0x75/0xa0 [ 91.542125][ T4569] do_iter_write+0x1f8/0x7a0 [ 91.546729][ T4569] ? memset+0x1e/0x40 [ 91.550710][ T4569] ? iov_iter_bvec+0xb4/0x170 [ 91.555388][ T4569] iter_file_splice_write+0x6be/0xcf0 [ 91.560773][ T4569] ? splice_from_pipe+0x180/0x180 [ 91.565799][ T4569] ? generic_file_splice_read+0x463/0x5f0 [ 91.571519][ T4569] ? splice_shrink_spd+0xc0/0xc0 [ 91.576463][ T4569] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 91.583073][ T4569] ? splice_from_pipe+0x180/0x180 [ 91.588095][ T4569] direct_splice_actor+0xe1/0x130 [ 91.593661][ T4569] splice_direct_to_actor+0x4e8/0xc00 [ 91.599041][ T4569] ? direct_file_splice_eof+0xa0/0xa0 [ 91.604416][ T4569] ? pipe_to_sendpage+0x320/0x320 [ 91.609488][ T4569] ? common_file_perm+0x171/0x1c0 [ 91.614609][ T4569] ? fsnotify_perm+0x5d/0x560 [ 91.619373][ T4569] ? security_file_permission+0x75/0xa0 [ 91.625017][ T4569] do_splice_direct+0x1d4/0x2f0 [ 91.629890][ T4569] ? splice_direct_to_actor+0xc00/0xc00 [ 91.635437][ T4569] ? rcu_read_lock_any_held+0xb0/0x130 [ 91.640998][ T4569] ? do_splice_direct+0x2f0/0x2f0 [ 91.646058][ T4569] ? common_file_perm+0x171/0x1c0 [ 91.651088][ T4569] do_sendfile+0x524/0xe30 [ 91.655513][ T4569] ? do_pwritev+0x3a0/0x3a0 [ 91.660021][ T4569] ? __lock_acquire+0x7b50/0x7b50 [ 91.665146][ T4569] __se_sys_sendfile64+0x141/0x1a0 [ 91.670260][ T4569] ? lock_chain_count+0x20/0x20 [ 91.675201][ T4569] ? __x64_sys_sendfile64+0xa0/0xa0 [ 91.680490][ T4569] ? lockdep_hardirqs_on+0x94/0x140 [ 91.685700][ T4569] do_syscall_64+0x4c/0xa0 [ 91.690120][ T4569] ? clear_bhb_loop+0x30/0x80 [ 91.694805][ T4569] ? clear_bhb_loop+0x30/0x80 [ 91.699495][ T4569] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.705397][ T4569] RIP: 0033:0x7f357beec159 [ 91.709820][ T4569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.729603][ T4569] RSP: 002b:00007f357a144028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 91.738118][ T4569] RAX: ffffffffffffffda RBX: 00007f357c173fa0 RCX: 00007f357beec159 [ 91.746338][ T4569] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 91.754359][ T4569] RBP: 00007f357bf8306b R08: 0000000000000000 R09: 0000000000000000 [ 91.762345][ T4569] R10: 0000000000fffe82 R11: 0000000000000246 R12: 0000000000000000 [ 91.770318][ T4569] R13: 00007f357c174038 R14: 00007f357c173fa0 R15: 00007ffd37e84968 [ 91.778306][ T4569] [ 91.781466][ C0] virtqueue callback for ffff888022cd2100 (ffffffff85491a80) [ 91.784306][ T1323] cfg80211: Timeout while waiting for CRDA to reply, restoring regulatory settings [ 91.788916][ C0] virtqueue callback for ffff888146a27400 (ffffffff8444ab50) [ 91.788969][ C0] virtqueue interrupt with no work for ffff888146a27300 [ 91.788980][ C0] virtqueue interrupt with no work for ffff888146a27200 [ 91.794331][ T4575] kcov: kcov_task_exit: t = ffff88801f159dc0, kcov->t = ffff88801f159dc0 [ 91.801373][ T1323] cfg80211: Restoring regulatory settings [ 91.805926][ C0] No more buffers in queue [ 91.805982][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 91.806016][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 91.806041][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 91.806067][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 91.806082][ C0] No more buffers in queue [ 91.806124][ C0] tcp_in_window: START [ 91.806132][ C0] tcp_in_window: [ 91.806140][ C0] seq=883668497 ack=1197973374+(0) sack=1197973374+(0) win=24567 end=883668498 [ 91.806171][ C0] tcp_in_window: sender end=883668497 maxend=886812049 maxwin=3144576 scale=7 receiver end=1197973374 maxend=1201117950 maxwin=3143552 scale=7 [ 91.806197][ C0] tcp_in_window: [ 91.813728][ T1323] cfg80211: Kicking the queue [ 91.820122][ C0] seq=883668497 ack=1197973374+(0) sack=1197973374+(0) win=24567 end=883668498 [ 91.820155][ C0] tcp_in_window: sender end=883668497 maxend=886812049 maxwin=3144576 scale=7 receiver end=1197973374 maxend=1201117950 maxwin=3143552 scale=7 [ 91.820181][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 91.820196][ C0] tcp_in_window: res=1 sender end=883668498 maxend=886812049 maxwin=3144576 receiver end=1197973374 maxend=1201117950 maxwin=3143552 [ 91.820220][ C0] tcp_conntracks: [ 91.820228][ C0] syn=0 ack=1 fin=1 rst=0 old=3 new=4 [ 91.820256][ C0] tcp_in_window: START [ 91.820264][ C0] tcp_in_window: [ 91.820271][ C0] seq=883668497 ack=1197973374+(0) sack=1197973374+(0) win=24567 end=883668498 [ 91.820293][ C0] tcp_in_window: sender end=883668498 maxend=886812049 maxwin=3144576 scale=7 receiver end=1197973374 maxend=1201117950 maxwin=3143552 scale=7 [ 91.820319][ C0] tcp_in_window: [ 91.820326][ C0] seq=883668497 ack=1197973374+(0) sack=1197973374+(0) win=24567 end=883668498 [ 91.820347][ C0] tcp_in_window: sender end=883668498 maxend=886812049 maxwin=3144576 scale=7 receiver end=1197973374 maxend=1201117950 maxwin=3143552 scale=7 [ 91.820372][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 91.820385][ C0] tcp_in_window: res=1 sender end=883668498 maxend=886812049 maxwin=3144576 receiver end=1197973374 maxend=1201117950 maxwin=3143552 [ 91.820410][ C0] tcp_conntracks: [ 91.820417][ C0] syn=0 ack=1 fin=1 rst=0 old=4 new=6 [ 91.820437][ C0] tcp_in_window: START [ 91.820444][ C0] tcp_in_window: [ 91.820451][ C0] seq=883668497 ack=1197973374+(0) sack=1197973374+(0) win=24567 end=883668498 [ 91.820472][ C0] tcp_in_window: sender end=883668498 maxend=886812049 maxwin=3144576 scale=7 receiver end=1197973374 maxend=1201117950 maxwin=3143552 scale=7 [ 91.820497][ C0] tcp_in_window: [ 91.820504][ C0] seq=883668497 ack=1197973374+(0) sack=1197973374+(0) win=24567 end=883668498 [ 91.820525][ C0] tcp_in_window: sender end=883668498 maxend=886812049 maxwin=3144576 scale=7 receiver end=1197973374 maxend=1201117950 maxwin=3143552 scale=7 [ 91.820549][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 91.820563][ C0] tcp_in_window: res=1 sender end=883668498 maxend=886812049 maxwin=3144576 receiver end=1197973374 maxend=1201117950 maxwin=3143552 [ 91.820586][ C0] tcp_conntracks: [ 91.820592][ C0] syn=0 ack=1 fin=1 rst=0 old=6 new=6 [ 91.820611][ C0] tcp_in_window: START [ 91.820619][ C0] tcp_in_window: [ 91.820626][ C0] seq=883668497 ack=1197973374+(0) sack=1197973374+(0) win=24567 end=883668498 [ 91.832309][ T4189] cfg80211: Calling CRDA to update world regulatory domain [ 91.834919][ C0] tcp_in_window: sender end=883668498 maxend=886812049 maxwin=3144576 scale=7 receiver end=1197973374 maxend=1201117950 maxwin=3143552 scale=7 [ 91.834954][ C0] tcp_in_window: [ 91.834961][ C0] seq=883668497 ack=1197973374+(0) sack=1197973374+(0) win=24567 end=883668498 [ 91.834984][ C0] tcp_in_window: sender end=883668498 maxend=886812049 maxwin=3144576 scale=7 receiver end=1197973374 maxend=1201117950 maxwin=3143552 scale=7 [ 91.835011][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 91.835034][ C0] tcp_in_window: res=1 sender end=883668498 maxend=886812049 maxwin=3144576 receiver end=1197973374 maxend=1201117950 maxwin=3143552 [ 91.835058][ C0] tcp_conntracks: [ 91.835066][ C0] syn=0 ack=1 fin=1 rst=0 old=6 new=6 [ 91.835251][ C0] nf_conntrack: normal packet for ffff888078d90300 [ 91.936154][ C0] virtqueue callback for ffff888022cd2100 (ffffffff85491a80) [ 92.240563][ C0] tcp_in_window: START [ 92.244646][ C0] tcp_in_window: [ 92.244654][ C0] seq=1197973374 ack=883668498+(0) sack=883668498+(0) win=24559 end=1197973374 [ 92.257339][ C0] tcp_in_window: sender end=1197973374 maxend=1201117950 maxwin=3143552 scale=7 receiver end=883668498 maxend=886812049 maxwin=3144576 scale=7 [ 92.271940][ C0] tcp_in_window: [ 92.271948][ C0] seq=1197973374 ack=883668498+(0) sack=883668498+(0) win=24559 end=1197973374 [ 92.284738][ C0] tcp_in_window: sender end=1197973374 maxend=1201117950 maxwin=3143552 scale=7 receiver end=883668498 maxend=886812049 maxwin=3144576 scale=7 [ 92.299346][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 92.304632][ C0] tcp_in_window: res=1 sender end=1197973374 maxend=1201117950 maxwin=3143552 receiver end=883668498 maxend=886812050 maxwin=3144576 [ 92.318272][ C0] tcp_conntracks: [ 92.318282][ C0] syn=0 ack=1 fin=0 rst=0 old=6 new=7 [ 92.327502][ C0] No more buffers in queue [ 92.331918][ C0] eth0: xmit ffff888076ef6dc0 42:01:0a:80:00:01 [ 92.338183][ C0] Added buffer head 8 to ffff888022cd2200 [ 92.343903][ C0] virtqueue callback for ffff888022cd2200 (ffffffff85491b70) [ 92.352127][ C0] net_ratelimit: 47 callbacks suppressed [ 92.352141][ C0] wireguard: wg1: Sending keepalive packet to peer 22 (127.0.0.1:20003) [ 92.355010][ T4588] tcp_in_window: START [ 92.357873][ C0] wireguard: wg2: Sending keepalive packet to peer 18 (127.0.0.1:20002) [ 92.358901][ C0] Sent skb ffff888076ef6dc0 [ 92.366865][ T4588] tcp_in_window: [ 92.370468][ C0] No more buffers in queue [ 92.370485][ C0] No more buffers in queue [ 92.370510][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 92.370532][ C0] No more buffers in queue [ 92.370564][ C0] tcp_in_window: START [ 92.370572][ C0] tcp_in_window: [ 92.370580][ C0] seq=883668497 ack=1197973374+(0) sack=1197973374+(0) win=24567 end=883668498 [ 92.370604][ C0] tcp_in_window: sender end=883668498 maxend=886812050 maxwin=3144576 scale=7 receiver end=1197973374 maxend=1201117950 maxwin=3143552 scale=7 [ 92.370631][ C0] tcp_in_window: [ 92.370639][ C0] seq=883668497 ack=1197973374+(0) sack=1197973374+(0) win=24567 end=883668498 [ 92.370662][ C0] tcp_in_window: sender end=883668498 maxend=886812050 maxwin=3144576 scale=7 receiver end=1197973374 maxend=1201117950 maxwin=3143552 scale=7 [ 92.370687][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 92.370711][ C0] tcp_in_window: res=1 sender end=883668498 maxend=886812050 maxwin=3144576 receiver end=1197973374 maxend=1201117950 maxwin=3143552 [ 92.379555][ T4588] seq=151951688 ack=151951688+(0) sack=151951688+(0) win=512 end=151951689 [ 92.383548][ C0] tcp_conntracks: [ 92.383559][ C0] syn=0 ack=1 fin=1 rst=0 old=7 new=7 [ 92.383811][ T1108] Added buffer head 0 to ffff888146a27400 [ 92.387684][ T4588] tcp_in_window: sender end=151951688 maxend=151951688 maxwin=65476 scale=7 receiver end=151951688 maxend=152017164 maxwin=65476 scale=7 [ 92.401941][ C0] virtqueue callback for ffff888146a27400 (ffffffff8444ab50) [ 92.403206][ T4588] tcp_in_window: [ 92.407247][ C0] virtqueue interrupt with no work for ffff888146a27300 [ 92.407267][ C0] virtqueue interrupt with no work for ffff888146a27200 [ 92.411480][ T3516] nf_conntrack: normal packet for ffff8880245b1380 [ 92.411821][ T4588] seq=151951688 ack=151951688+(0) sack=151951688+(0) win=512 end=151951689 [ 92.415314][ T3516] nf_conntrack: normal packet for ffff888078d90d80 [ 92.415398][ T3516] nf_conntrack: normal packet for ffff8880245b0f00 [ 92.415475][ T3516] nf_conntrack: normal packet for ffff8880245b0f00 [ 92.424914][ T4588] tcp_in_window: sender end=151951689 maxend=151951689 maxwin=512 scale=0 receiver end=151951688 maxend=152017164 maxwin=65476 scale=7 [ 92.439133][ T7] nf_conntrack: normal packet for ffff888078d91080 [ 92.439398][ T7] Added buffer head 0 to ffff888146a27400 [ 92.439492][ T7] nf_conntrack: normal packet for ffff888079392600 [ 92.439583][ T7] nf_conntrack: normal packet for ffff8880245b1800 [ 92.444322][ C0] wireguard: wg2: Receiving keepalive packet from peer 17 ([::1]:20001/0%0) [ 92.453271][ T4588] tcp_in_window: I=1 II=1 III=1 IV=1 [ 92.469610][ C0] wireguard: wg2: Receiving keepalive packet from peer 18 (127.0.0.1:20002) [ 92.473805][ T4588] tcp_in_window: res=1 sender end=151951689 maxend=151951689 maxwin=512 receiver end=151951688 maxend=152017164 maxwin=65476 [ 92.487611][ C0] wireguard: wg2: Receiving keepalive packet from peer 11 ([::1]:20001/0%0) [ 92.487663][ C0] wireguard: wg2: Receiving keepalive packet from peer 12 (127.0.0.1:20002) [ 92.487700][ C0] wireguard: wg2: Receiving keepalive packet from peer 12 (127.0.0.1:20002) [ 92.488056][ T4589] kcov: kcov_task_exit: t = ffff888026c83b80, kcov->t = ffff888026c83b80 [ 92.490287][ T4608] kcov: kcov_task_exit: t = ffff88807dab5940, kcov->t = ffff88807dab5940 [ 92.497780][ T4588] tcp_conntracks: [ 92.508982][ T4192] send_to_group: group=ffff888016e53000 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff88807626b910 data_type=1 dir=0000000000000000 cookie=0 [ 92.513117][ T4588] syn=0 ack=1 fin=1 rst=0 old=2 new=4 [ 92.513780][ C1] No more buffers in queue [ 92.527906][ T4599] kcov: kcov_task_exit: t = ffff888023d8d940, kcov->t = ffff888023d8d940 [ 92.536305][ T4588] tcp_in_window: START [ 92.536321][ T4588] tcp_in_window: [ 92.536330][ T4588] seq=151951689 ack=151951688+(0) sack=151951688+(0) win=512 end=151951689 [ 92.536357][ T4588] tcp_in_window: sender end=151951689 maxend=151951689 maxwin=512 scale=0 receiver end=151951688 maxend=152017164 maxwin=65476 scale=7 [ 92.536385][ T4588] tcp_in_window: [ 92.536393][ T4588] seq=151951689 ack=151951688+(0) sack=151951688+(0) win=512 end=151951689 [ 92.536417][ T4588] tcp_in_window: sender end=151951689 maxend=151951689 maxwin=512 scale=0 receiver end=151951688 maxend=152017164 maxwin=65476 scale=7 [ 92.536445][ T4588] tcp_in_window: I=1 II=1 III=1 IV=1 [ 92.536462][ T4588] tcp_in_window: res=1 sender end=151951689 maxend=151951689 maxwin=512 receiver end=151951688 maxend=152017164 maxwin=65476 [ 92.536487][ T4588] tcp_conntracks: [ 92.536495][ T4588] syn=0 ack=1 fin=0 rst=0 old=4 new=5 [ 92.536627][ T4588] kcov: kcov_task_exit: t = ffff888023885940, kcov->t = ffff888023885940 [ 92.540414][ C1] eth0: xmit ffff88807e396dc0 ff:ff:ff:ff:ff:ff [ 92.551793][ T4185] send_to_group: group=ffff888016e53000 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff88807f049410 data_type=1 dir=0000000000000000 cookie=0 [ 92.554962][ C1] Added buffer head 25 to ffff888022cd2400 [ 92.554997][ C1] virtqueue callback for ffff888022cd2400 (ffffffff85491b70) [ 92.593248][ T4185] inotify_handle_inode_event: group=ffff888016e53000 mark=ffff8880728aa640 mask=8 [ 92.614300][ T4194] send_to_group: group=ffff888016e53000 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff88807f049690 data_type=1 dir=0000000000000000 cookie=0 [ 92.616597][ C1] wireguard: wg2: Sending keepalive packet to peer 17 ([::1]:20001/0%0) [ 92.629372][ T4192] inotify_handle_inode_event: group=ffff888016e53000 mark=ffff8880728aa578 mask=8 [ 92.630562][ C1] wireguard: wg2: Sending keepalive packet to peer 29 ([::1]:20001/0%0) [ 92.654636][ T4194] inotify_handle_inode_event: group=ffff888016e53000 mark=ffff888060bf9a28 mask=8 [ 92.668285][ C1] wireguard: wg2: Sending keepalive packet to peer 23 ([::1]:20001/0%0) [ 92.678532][ T4192] fsnotify_insert_event: group=ffff888016e53000 event=ffff88805f17b8c0 [ 92.687222][ C1] Sent skb ffff88807e396dc0 [ 92.703807][ T4185] fsnotify_insert_event: group=ffff888016e53000 event=ffff88805f17b880 [ 92.718564][ T4194] fsnotify_insert_event: group=ffff888016e53000 event=ffff88805f17b840 [ 92.732635][ C1] No more buffers in queue [ 92.737823][ T3557] get_one_event: group=ffff888016e53000 event=ffff88805f17b880 [ 92.742434][ T4189] kobject: 'regulatory.0' (ffff88801dcb1010): kobject_uevent_env [ 92.750408][ T3557] fsnotify_remove_first_event: group=ffff888016e53000 event=ffff88805f17b880 [ 92.751976][ T4573] kcov: kcov_task_exit: t = ffff88801e365940, kcov->t = ffff88801e365940 [ 92.755194][ T4189] kobject: 'regulatory.0' (ffff88801dcb1010): fill_kobj_path: path = '/devices/platform/regulatory.0' [ 92.767366][ T4622] async_waiting @ 4622 [ 92.768318][ T1323] nf_conntrack: normal packet for ffff888078d90f00 [ 92.783719][ T4621] async_waiting @ 4621 [ 92.791660][ T4172] nf_conntrack: normal packet for ffff888078d90300 [ 92.794984][ T3516] nf_conntrack: normal packet for ffff8880245b1200 [ 92.822336][ T4172] tcp_in_window: START [ 92.827825][ T1108] nf_conntrack: normal packet for ffff8880245b0780 [ 92.831208][ T4172] tcp_in_window: [ 92.836688][ T4226] nf_conntrack: normal packet for ffff888079392900 [ 92.836985][ T4620] async_waiting @ 4620 [ 92.845696][ T4172] seq=1197973374 ack=883668498+(0) sack=883668498+(0) win=24559 end=1197973374 [ 92.853884][ T4619] async_waiting @ 4619 [ 92.867947][ T4172] tcp_in_window: sender end=1197973374 maxend=1201117950 maxwin=3143552 scale=7 receiver end=883668498 maxend=886812050 maxwin=3144576 scale=7 [ 92.875377][ T4624] async_waiting @ 4624 [ 92.881316][ T4172] tcp_in_window: [ 92.918654][ T3557] inotify_read: group=ffff888016e53000 kevent=ffff88805f17b880 [ 92.925450][ T4172] seq=1197973374 ack=883668498+(0) sack=883668498+(0) win=24559 end=1197973374 [ 92.945539][ T4184] send_to_group: group=ffff888016e53000 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff88807a307190 data_type=1 dir=0000000000000000 cookie=0 [ 92.953525][ T4172] tcp_in_window: sender end=1197973374 maxend=1201117950 maxwin=3143552 scale=7 receiver end=883668498 maxend=886812050 maxwin=3144576 scale=7 [ 92.963521][ T4621] async_continuing @ 4621 after 1 usec [ 92.966639][ T4172] tcp_in_window: I=1 II=1 III=1 IV=1 [ 92.981174][ T4622] async_continuing @ 4622 after 1 usec [ 92.984248][ T4172] tcp_in_window: res=1 sender end=1197973374 maxend=1201117950 maxwin=3143552 receiver end=883668498 maxend=886812050 maxwin=3144576 [ 92.989432][ T4620] async_continuing @ 4620 after 1 usec [ 92.996463][ T4172] tcp_conntracks: [ 93.005216][ T4624] async_continuing @ 4624 after 1 usec [ 93.013692][ T4172] syn=0 ack=1 fin=0 rst=0 old=7 new=7 [ 93.032631][ T4619] async_continuing @ 4619 after 1 usec [ 93.036375][ T4184] inotify_handle_inode_event: group=ffff888016e53000 mark=ffff88801f961320 mask=8 [ 93.052338][ T4628] async_waiting @ 4628 [ 93.056702][ T3557] copy_event_to_user: group=ffff888016e53000 event=ffff88805f17b880 [ 93.067434][ T4628] async_continuing @ 4628 after 1 usec [ 93.088144][ T4625] async_waiting @ 4625 [ 93.102240][ T4629] async_waiting @ 4629 [ 93.117410][ T4627] async_waiting @ 4627 [ 93.120595][ T4631] async_waiting @ 4631 [ 93.120612][ T4631] async_continuing @ 4631 after 1 usec [ 93.126087][ T4629] async_continuing @ 4629 after 1 usec [ 93.177357][ T4184] fsnotify_insert_event: group=ffff888016e53000 event=ffff88801bbfe880 [ 93.186504][ T1092] sd 0:0:1:0: cmd ffff888023bbfd28 CDB: 0x2a [ 93.217030][ T4633] async_waiting @ 4633 [ 93.221509][ T1092] Added buffer head 31 to ffff888020aa1e00 [ 93.237346][ T4633] async_continuing @ 4633 after 1 usec [ 93.238884][ T1092] sd 0:0:1:0: cmd ffff888023bb0128 CDB: 0x2a [ 93.243337][ T4634] async_waiting @ 4634 [ 93.250269][ T1092] Added buffer head 201 to ffff888020aa1e00 [ 93.250312][ T1092] sd 0:0:1:0: cmd ffff888023bb0528 CDB: 0x2a [ 93.250331][ T1092] Added buffer head 160 to ffff888020aa1e00 [ 93.250354][ T1092] sd 0:0:1:0: cmd ffff888023bb0928 CDB: 0x2a [ 93.250371][ T1092] Added buffer head 141 to ffff888020aa1e00 [ 93.250393][ T1092] sd 0:0:1:0: cmd ffff888023bb0d28 CDB: 0x2a [ 93.250410][ T1092] Added buffer head 170 to ffff888020aa1e00 [ 93.250433][ T1092] sd 0:0:1:0: cmd ffff888023bb1128 CDB: 0x2a [ 93.250450][ T1092] Added buffer head 36 to ffff888020aa1e00 [ 93.250472][ T1092] sd 0:0:1:0: cmd ffff888023bb1528 CDB: 0x2a [ 93.250489][ T1092] Added buffer head 188 to ffff888020aa1e00 [ 93.250511][ T1092] sd 0:0:1:0: cmd ffff888023bb1928 CDB: 0x2a [ 93.250528][ T1092] Added buffer head 119 to ffff888020aa1e00 [ 93.250642][ T3557] get_one_event: group=ffff888016e53000 event=ffff88805f17b840 [ 93.250658][ T3557] fsnotify_remove_first_event: group=ffff888016e53000 event=ffff88805f17b840 [ 93.250674][ T3557] inotify_read: group=ffff888016e53000 kevent=ffff88805f17b840 [ 93.250690][ T3557] copy_event_to_user: group=ffff888016e53000 event=ffff88805f17b840 [ 93.250711][ T3557] get_one_event: group=ffff888016e53000 event=ffff88805f17b8c0 [ 93.250725][ T3557] fsnotify_remove_first_event: group=ffff888016e53000 event=ffff88805f17b8c0 [ 93.250740][ T3557] inotify_read: group=ffff888016e53000 kevent=ffff88805f17b8c0 [ 93.250754][ T3557] copy_event_to_user: group=ffff888016e53000 event=ffff88805f17b8c0 [ 93.250774][ T3557] inotify_read: group=ffff888016e53000 kevent=0000000000000000 [ 93.255498][ T3557] kobject: 'loop0' (ffff8880170a46c0): kobject_uevent_env [ 93.256718][ C1] virtqueue callback for ffff888020aa1e00 (ffffffff85068310) [ 93.260575][ T3557] kobject: 'loop0' (ffff8880170a46c0): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 93.264509][ C1] sd 0:0:1:0: cmd ffff888023bb0528 response 0 status 0x0 sense_len 0 [ 93.273354][ T3557] kobject: 'loop3' (ffff8880170a6a00): kobject_uevent_env [ 93.278091][ C1] sd 0:0:1:0: cmd ffff888023bb1528 response 0 status 0x0 sense_len 0 [ 93.278121][ C1] sd 0:0:1:0: cmd ffff888023bb1128 response 0 status 0x0 sense_len 0 [ 93.283586][ T3557] kobject: 'loop3' (ffff8880170a6a00): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 93.291800][ C1] sd 0:0:1:0: cmd ffff888023bb1928 response 0 status 0x0 sense_len 0 [ 93.291820][ C1] sd 0:0:1:0: cmd ffff888023bb0d28 response 0 status 0x0 sense_len 0 [ 93.291839][ C1] sd 0:0:1:0: cmd ffff888023bbfd28 response 0 status 0x0 sense_len 0 [ 93.291855][ C1] sd 0:0:1:0: cmd ffff888023bb0128 response 0 status 0x0 sense_len 0 [ 93.298488][ T1092] sd 0:0:1:0: cmd ffff888023bb1d28 CDB: 0x2a [ 93.301903][ C1] sd 0:0:1:0: cmd ffff888023bb0928 response 0 status 0x0 sense_len 0 [ 93.584593][ C1] No more buffers in queue [ 93.589048][ T1092] Added buffer head 141 to ffff888020aa1e00 [ 93.595025][ C0] virtqueue callback for ffff888146a27400 (ffffffff8444ab50) [ 93.602718][ C0] virtqueue interrupt with no work for ffff888146a27300 [ 93.609665][ C0] virtqueue interrupt with no work for ffff888146a27200 [ 93.610824][ C1] tcp_in_window: START [ 93.618170][ T3516] Added buffer head 0 to ffff888146a27400 [ 93.620794][ C1] tcp_in_window: [ 93.626510][ C1] seq=151951689 ack=151951689+(0) sack=151951689+(0) win=512 end=151951689 [ 93.632121][ T1092] sd 0:0:1:0: cmd ffff888023bb2128 CDB: 0x2a [ 93.640991][ C1] tcp_in_window: sender end=151951689 maxend=151951689 maxwin=512 scale=0 receiver end=151951688 maxend=152017164 maxwin=65476 scale=7 [ 93.641033][ C1] tcp_in_window: [ 93.641055][ C1] seq=151951689 ack=151951689+(0) sack=151951689+(0) win=512 end=151951689 [ 93.641091][ C1] tcp_in_window: sender end=151951689 maxend=151951689 maxwin=512 scale=0 receiver end=151951688 maxend=152017164 maxwin=65476 scale=7 [ 93.647390][ T1092] Added buffer head 201 to ffff888020aa1e00 [ 93.647428][ T1092] sd 0:0:1:0: cmd ffff888023bb2528 CDB: 0x2a [ 93.647447][ T1092] Added buffer head 31 to ffff888020aa1e00 [ 93.647470][ T1092] sd 0:0:1:0: cmd ffff888023bb2928 CDB: 0x2a [ 93.647488][ T1092] Added buffer head 170 to ffff888020aa1e00 [ 93.647510][ T1092] sd 0:0:1:0: cmd ffff888023bb2d28 CDB: 0x2a [ 93.647528][ T1092] Added buffer head 119 to ffff888020aa1e00 [ 93.647552][ T1092] sd 0:0:1:0: cmd ffff888023bb3128 CDB: 0x2a [ 93.647569][ T1092] Added buffer head 36 to ffff888020aa1e00 [ 93.647591][ T1092] sd 0:0:1:0: cmd ffff888023bb3528 CDB: 0x2a [ 93.647608][ T1092] Added buffer head 188 to ffff888020aa1e00 [ 93.647632][ T1092] sd 0:0:1:0: cmd ffff888023bb3928 CDB: 0x2a [ 93.647650][ T1092] Added buffer head 160 to ffff888020aa1e00 [ 93.647739][ T1092] sd 0:0:1:0: cmd ffff888023bb3d28 CDB: 0x2a [ 93.647756][ T1092] Added buffer head 175 to ffff888020aa1e00 [ 93.647779][ T1092] sd 0:0:1:0: cmd ffff888023bb4128 CDB: 0x2a [ 93.647796][ T1092] Added buffer head 178 to ffff888020aa1e00 [ 93.647817][ T1092] sd 0:0:1:0: cmd ffff888023bb4528 CDB: 0x2a [ 93.662498][ C1] virtqueue callback for ffff888020aa1e00 (ffffffff85068310) [ 93.665601][ T1092] Added buffer head 171 to ffff888020aa1e00 [ 93.808435][ C1] sd 0:0:1:0: cmd ffff888023bb2928 response 0 status 0x0 sense_len 0 [ 93.809568][ T29] sd 0:0:1:0: cmd ffff888023bb9928 CDB: 0x2a [ 93.816545][ C1] sd 0:0:1:0: cmd ffff888023bb1d28 response 0 status 0x0 sense_len 0 [ 93.830597][ C1] sd 0:0:1:0: cmd ffff888023bb2128 response 0 status 0x0 sense_len 0 [ 93.838670][ C1] sd 0:0:1:0: cmd ffff888023bb2528 response 0 status 0x0 sense_len 0 [ 93.846987][ C1] sd 0:0:1:0: cmd ffff888023bb2d28 response 0 status 0x0 sense_len 0 [ 93.855050][ C1] sd 0:0:1:0: cmd ffff888023bb3928 response 0 status 0x0 sense_len 0 [ 93.863095][ C1] sd 0:0:1:0: cmd ffff888023bb3528 response 0 status 0x0 sense_len 0 [ 93.871516][ C1] sd 0:0:1:0: cmd ffff888023bb3128 response 0 status 0x0 sense_len 0 [ 93.879582][ C1] sd 0:0:1:0: cmd ffff888023bb4128 response 0 status 0x0 sense_len 0 [ 93.887829][ C1] sd 0:0:1:0: cmd ffff888023bb3d28 response 0 status 0x0 sense_len 0 [ 93.895907][ C1] No more buffers in queue [ 93.900451][ T29] Added buffer head 175 to ffff888020aa1e00 [ 93.906457][ T29] sd 0:0:1:0: cmd ffff888023bb9d28 CDB: 0x2a [ 93.912478][ T29] Added buffer head 178 to ffff888020aa1e00 [ 93.914625][ C1] tcp_in_window: I=1 II=1 III=0 IV=1 [ 93.918522][ T29] sd 0:0:1:0: cmd ffff888023bba128 CDB: 0x2a [ 93.923843][ C1] tcp_in_window: res=0 sender end=151951689 maxend=151951689 maxwin=512 receiver end=151951688 maxend=152017164 maxwin=65476 [ 93.929922][ T29] Added buffer head 36 to ffff888020aa1e00 [ 93.929952][ T29] sd 0:0:1:0: cmd ffff888023bba528 CDB: 0x2a [ 93.929970][ T29] Added buffer head 188 to ffff888020aa1e00 [ 93.929993][ T29] sd 0:0:1:0: cmd ffff888023bba928 CDB: 0x2a [ 93.930011][ T29] Added buffer head 160 to ffff888020aa1e00 [ 93.932149][ T3519] sd 0:0:1:0: cmd ffff888023bbad28 CDB: 0x2a [ 93.944638][ C1] virtqueue callback for ffff888020aa1e00 (ffffffff85068310) [ 93.949788][ T3519] Added buffer head 119 to ffff888020aa1e00 [ 93.993320][ C1] sd 0:0:1:0: cmd ffff888023bb9d28 response 0 status 0x0 sense_len 0 [ 94.001520][ C1] sd 0:0:1:0: cmd ffff888023bb4528 response 0 status 0x0 sense_len 0 [ 94.004966][ T1092] sd 0:0:1:0: cmd ffff888023bb4928 CDB: 0x2a [ 94.009702][ C1] sd 0:0:1:0: cmd ffff888023bba928 response 0 status 0x0 sense_len 0 [ 94.009725][ C1] sd 0:0:1:0: cmd ffff888023bba128 response 0 status 0x0 sense_len 0 [ 94.009743][ C1] sd 0:0:1:0: cmd ffff888023bba528 response 0 status 0x0 sense_len 0 [ 94.009761][ C1] sd 0:0:1:0: cmd ffff888023bb9928 response 0 status 0x0 sense_len 0 [ 94.009781][ C1] sd 0:0:1:0: cmd ffff888023bbad28 response 0 status 0x0 sense_len 0 [ 94.009798][ C1] No more buffers in queue [ 94.013752][ C1] virtqueue callback for ffff888022cd2300 (ffffffff85491a80) [ 94.015992][ T1092] Added buffer head 119 to ffff888020aa1e00 [ 94.024712][ C1] nf_conntrack: nf_conntrack_in: Can't track with proto module [ 94.032206][ T1092] sd 0:0:1:0: cmd ffff888023bb4d28 CDB: 0x2a [ 94.032228][ T1092] Added buffer head 31 to ffff888020aa1e00 [ 94.032253][ T1092] sd 0:0:1:0: cmd ffff888023bb5128 CDB: 0x2a [ 94.032271][ T1092] Added buffer head 176 to ffff888020aa1e00 [ 94.032293][ T1092] sd 0:0:1:0: cmd ffff888023bb5528 CDB: 0x2a [ 94.032311][ T1092] Added buffer head 189 to ffff888020aa1e00 [ 94.032332][ T1092] sd 0:0:1:0: cmd ffff888023bb5928 CDB: 0x2a [ 94.032350][ T1092] Added buffer head 5 to ffff888020aa1e00 [ 94.032371][ T1092] sd 0:0:1:0: cmd ffff888023bb5d28 CDB: 0x2a [ 94.032388][ T1092] Added buffer head 161 to ffff888020aa1e00 [ 94.032411][ T1092] sd 0:0:1:0: cmd ffff888023bb6128 CDB: 0x2a [ 94.032428][ T1092] Added buffer head 28 to ffff888020aa1e00 [ 94.032449][ T1092] sd 0:0:1:0: cmd ffff888023bb6528 CDB: 0x2a [ 94.032467][ T1092] Added buffer head 179 to ffff888020aa1e00 [ 94.032489][ T1092] sd 0:0:1:0: cmd ffff888023bb6928 CDB: 0x2a [ 94.032506][ T1092] Added buffer head 201 to ffff888020aa1e00 [ 94.032528][ T1092] sd 0:0:1:0: cmd ffff888023bb6d28 CDB: 0x2a [ 94.032545][ T1092] Added buffer head 141 to ffff888020aa1e00 [ 94.032567][ T1092] sd 0:0:1:0: cmd ffff888023bb7128 CDB: 0x2a [ 94.032584][ T1092] Added buffer head 170 to ffff888020aa1e00 [ 94.032606][ T1092] sd 0:0:1:0: cmd ffff888023bb7528 CDB: 0x2a [ 94.032622][ T1092] Added buffer head 172 to ffff888020aa1e00 [ 94.032647][ T1092] sd 0:0:1:0: cmd ffff888023bb7928 CDB: 0x2a [ 94.042248][ C1] No more buffers in queue [ 94.052725][ T1092] Added buffer head 167 to ffff888020aa1e00 [ 94.057909][ C1] Receiving skb proto 0x0806 len 28 type 1 [ 94.061852][ T1092] sd 0:0:1:0: cmd ffff888023bb7d28 CDB: 0x2a [ 94.061874][ T1092] Added buffer head 184 to ffff888020aa1e00 [ 94.061898][ T1092] sd 0:0:1:0: cmd ffff888023bb8128 CDB: 0x2a [ 94.061916][ T1092] Added buffer head 181 to ffff888020aa1e00 [ 94.061938][ T1092] sd 0:0:1:0: cmd ffff888023bb8528 CDB: 0x2a [ 94.061955][ T1092] Added buffer head 194 to ffff888020aa1e00 [ 94.061977][ T1092] sd 0:0:1:0: cmd ffff888023bb8928 CDB: 0x2a [ 94.061994][ T1092] Added buffer head 197 to ffff888020aa1e00 [ 94.062016][ T1092] sd 0:0:1:0: cmd ffff888023bb8d28 CDB: 0x2a [ 94.062034][ T1092] Added buffer head 117 to ffff888020aa1e00 [ 94.062057][ T1092] sd 0:0:1:0: cmd ffff888023bb9128 CDB: 0x2a [ 94.062074][ T1092] Added buffer head 60 to ffff888020aa1e00 [ 94.069886][ C1] No more buffers in queue [ 94.076824][ T1092] sd 0:0:1:0: cmd ffff888023bb9528 CDB: 0x2a [ 94.084063][ C1] No more buffers in queue [ 94.089454][ T1092] Added buffer head 166 to ffff888020aa1e00 [ 94.092808][ T4636] async_waiting @ 4636 [ 94.095992][ C1] virtqueue callback for ffff888020aa1e00 (ffffffff85068310) [ 94.102103][ T4627] async_continuing @ 4627 after 1 usec [ 94.107464][ C1] sd 0:0:1:0: cmd ffff888023bb7d28 response 0 status 0x0 sense_len 0 [ 94.107491][ C1] sd 0:0:1:0: cmd ffff888023bb8128 response 0 status 0x0 sense_len 0 [ 94.107511][ C1] sd 0:0:1:0: cmd ffff888023bb7528 response 0 status 0x0 sense_len 0 [ 94.126153][ T3557] kobject: 'loop2' (ffff8880170a5e40): kobject_uevent_env [ 94.131587][ C1] sd 0:0:1:0: cmd ffff888023bb7928 response 0 status 0x0 sense_len 0 [ 94.131612][ C1] sd 0:0:1:0: cmd ffff888023bb9128 response 0 status 0x0 sense_len 0 [ 94.131629][ C1] sd 0:0:1:0: cmd ffff888023bb9528 response 0 status 0x0 sense_len 0 [ 94.131650][ C1] sd 0:0:1:0: cmd ffff888023bb8528 response 0 status 0x0 sense_len 0 [ 94.141253][ T4636] async_continuing @ 4636 after 1 usec [ 94.143871][ C1] sd 0:0:1:0: cmd ffff888023bb4928 response 0 status 0x0 sense_len 0 [ 94.149949][ T4625] async_continuing @ 4625 after 1 usec [ 94.155818][ C1] sd 0:0:1:0: cmd ffff888023bb4d28 response 0 status 0x0 sense_len 0 [ 94.155839][ C1] sd 0:0:1:0: cmd ffff888023bb5d28 response 0 status 0x0 sense_len 0 [ 94.155857][ C1] sd 0:0:1:0: cmd ffff888023bb8928 response 0 status 0x0 sense_len 0 [ 94.155874][ C1] sd 0:0:1:0: cmd ffff888023bb5528 response 0 status 0x0 sense_len 0 [ 94.155894][ C1] sd 0:0:1:0: cmd ffff888023bb6d28 response 0 status 0x0 sense_len 0 [ 94.155913][ C1] sd 0:0:1:0: cmd ffff888023bb6128 response 0 status 0x0 sense_len 0 [ 94.155931][ C1] sd 0:0:1:0: cmd ffff888023bb8d28 response 0 status 0x0 sense_len 0 [ 94.155965][ C1] sd 0:0:1:0: cmd ffff888023bb5128 response 0 status 0x0 sense_len 0 [ 94.155984][ C1] sd 0:0:1:0: cmd ffff888023bb7128 response 0 status 0x0 sense_len 0 [ 94.156003][ C1] sd 0:0:1:0: cmd ffff888023bb5928 response 0 status 0x0 sense_len 0 [ 94.156022][ C1] sd 0:0:1:0: cmd ffff888023bb6528 response 0 status 0x0 sense_len 0 [ 94.156042][ C1] sd 0:0:1:0: cmd ffff888023bb6928 response 0 status 0x0 sense_len 0 [ 94.156059][ C1] No more buffers in queue [ 94.159660][ C1] eth0: xmit ffff88805f181000 42:01:0a:80:00:01 [ 94.164638][ T3557] kobject: 'loop2' (ffff8880170a5e40): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 94.169461][ C1] Added buffer head 25 to ffff888022cd2400 [ 94.175444][ C1] virtqueue callback for ffff888022cd2400 (ffffffff85491b70) [ 94.187329][ T4634] async_continuing @ 4634 after 1 usec [ 94.192128][ C1] Sent skb ffff88805f181000 [ 94.197010][ T3557] get_one_event: group=ffff888016e53000 event=ffff88801bbfe880 [ 94.200550][ C1] No more buffers in queue [ 94.206303][ T3557] fsnotify_remove_first_event: group=ffff888016e53000 event=ffff88801bbfe880 [ 94.217362][ T3557] inotify_read: group=ffff888016e53000 kevent=ffff88801bbfe880 [ 94.221195][ T4189] nf_conntrack: normal packet for ffff888078d90f00 [ 94.225132][ T3557] copy_event_to_user: group=ffff888016e53000 event=ffff88801bbfe880 [ 94.225164][ T3557] inotify_read: group=ffff888016e53000 kevent=0000000000000000 [ 94.228434][ T4640] async_waiting @ 4640 [ 94.256231][ T4172] No more buffers in queue [ 94.260701][ T3516] nf_conntrack: normal packet for ffff8880245b0780 [ 94.260794][ T3516] nf_conntrack: normal packet for ffff888078d90a80 [ 94.307440][ T4641] async_waiting @ 4641 [ 94.312167][ T4172] eth0: xmit ffff88805abefb40 42:01:0a:80:00:01 [ 94.317952][ T4639] async_waiting @ 4639 [ 94.322629][ T4172] Added buffer head 25 to ffff888022cd2400 [ 94.328709][ T4638] async_waiting @ 4638 [ 94.328726][ T4638] async_continuing @ 4638 after 1 usec [ 94.328835][ C1] virtqueue callback for ffff888022cd2400 (ffffffff85491b70) [ 94.337743][ T4637] async_waiting @ 4637 [ 94.340053][ C1] Sent skb ffff88805abefb40 [ 94.343861][ T4642] async_waiting @ 4642 [ 94.343877][ T4642] async_continuing @ 4642 after 1 usec [ 94.358046][ T4644] async_waiting @ 4644 [ 94.366433][ C1] No more buffers in queue [ 94.374820][ T4569] kcov: kcov_task_exit: t = ffff88801e360000, kcov->t = ffff88801e360000 [ 94.386055][ T4603] kcov: kcov_task_exit: t = ffff888022708000, kcov->t = ffff888022708000 [ 94.389888][ T26] audit: type=1800 audit(1790065652.138:3): pid=4603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.113" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 94.406198][ C0] virtqueue callback for ffff888146a27400 (ffffffff8444ab50) [ 94.406243][ C0] virtqueue interrupt with no work for ffff888146a27300 [ 94.406252][ C0] virtqueue interrupt with no work for ffff888146a27200 [ 94.410670][ T3557] kobject: 'loop1' (ffff8880170a5280): kobject_uevent_env [ 94.415680][ T3516] Added buffer head 0 to ffff888146a27400 [ 94.428830][ T150] sd 0:0:1:0: cmd ffff88802266a928 CDB: 0x35 [ 94.437068][ T4637] async_continuing @ 4637 after 1 usec [ 94.442835][ T150] Added buffer head 201 to ffff888020aa1e00 [ 94.488937][ T4641] async_continuing @ 4641 after 1 usec [ 94.493761][ C1] virtqueue callback for ffff888020aa1e00 (ffffffff85068310) [ 94.499140][ T4639] async_continuing @ 4639 after 1 usec [ 94.506916][ C1] sd 0:0:1:0: cmd ffff88802266a928 response 0 status 0x0 sense_len 0 [ 94.834587][ C1] No more buffers in queue [ 94.847101][ T3557] kobject: 'loop1' (ffff8880170a5280): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 94.863304][ T150] sd 0:0:1:0: cmd ffff888023be0d28 CDB: 0x2a [ 94.869438][ T150] Added buffer head 201 to ffff888020aa1e00 [ 94.872284][ T4644] async_continuing @ 4644 after 2 usec [ 94.875439][ T4640] async_continuing @ 4640 after 1 usec [ 94.880805][ C1] virtqueue callback for ffff888020aa1e00 (ffffffff85068310) [ 94.880827][ C1] sd 0:0:1:0: cmd ffff888023be0d28 response 0 status 0x0 sense_len 0 [ 94.880849][ C1] No more buffers in queue [ 94.896646][ T4174] inotify_handle_inode_event: group=ffff888016e53000 mark=ffff888060bf9a28 mask=8000 [ 94.896680][ T4174] fsnotify_insert_event: group=ffff888016e53000 event=ffff88805f17b4c0 [ 94.903441][ T4174] inotify_handle_inode_event: group=ffff888016e53000 mark=ffff8880728aa578 mask=8000 [ 94.905456][ T150] sd 0:0:1:0: cmd ffff88802266a928 CDB: 0x35 [ 94.909428][ T3557] get_one_event: group=ffff888016e53000 event=ffff88805f17b4c0 [ 94.909450][ T3557] fsnotify_remove_first_event: group=ffff888016e53000 event=ffff88805f17b4c0 [ 94.909466][ T3557] inotify_read: group=ffff888016e53000 kevent=ffff88805f17b4c0 [ 94.909491][ T3557] copy_event_to_user: group=ffff888016e53000 event=ffff88805f17b4c0 [ 94.909515][ T3557] inotify_read: group=ffff888016e53000 kevent=0000000000000000 [ 94.910425][ T4177] inotify_handle_inode_event: group=ffff888016e53000 mark=ffff88801f961320 mask=8000 [ 94.919742][ T150] Added buffer head 201 to ffff888020aa1e00 [ 94.938494][ T4178] inotify_handle_inode_event: group=ffff888016e53000 mark=ffff8880728aa640 mask=8000 [ 94.946578][ C1] virtqueue callback for ffff888020aa1e00 (ffffffff85068310) [ 94.978600][ T4174] fsnotify_insert_event: group=ffff888016e53000 event=ffff88805f17b400 [ 94.984388][ C1] sd 0:0:1:0: cmd ffff88802266a928 response 0 status 0x0 sense_len 0 [ 95.008862][ T4178] fsnotify_insert_event: group=ffff888016e53000 event=ffff88805f17b380 [ 95.009177][ C1] No more buffers in queue [ 95.016694][ T3557] get_one_event: group=ffff888016e53000 event=ffff88805f17b380 [ 95.030995][ T4172] nf_conntrack: normal packet for ffff888078d90300 [ 95.033602][ T3557] fsnotify_remove_first_event: group=ffff888016e53000 event=ffff88805f17b380 [ 95.042299][ T4172] tcp_in_window: START [ 95.057366][ T4177] fsnotify_insert_event: group=ffff888016e53000 event=ffff88805f17b300 [ 95.061328][ T4172] tcp_in_window: [ 95.083756][ T4172] seq=1197973374 ack=883668498+(0) sack=883668498+(0) win=24559 end=1197973374 [ 95.090783][ T3557] inotify_read: group=ffff888016e53000 kevent=ffff88805f17b380 [ 95.097178][ T4172] tcp_in_window: sender end=1197973374 maxend=1201117950 maxwin=3143552 scale=7 receiver end=883668498 maxend=886812050 maxwin=3144576 scale=7 [ 95.104607][ T3557] copy_event_to_user: group=ffff888016e53000 event=ffff88805f17b380 [ 95.104635][ T3557] get_one_event: group=ffff888016e53000 event=ffff88805f17b400 [ 95.104651][ T3557] fsnotify_remove_first_event: group=ffff888016e53000 event=ffff88805f17b400 [ 95.104667][ T3557] inotify_read: group=ffff888016e53000 kevent=ffff88805f17b400 [ 95.104682][ T3557] copy_event_to_user: group=ffff888016e53000 event=ffff88805f17b400 [ 95.104703][ T3557] get_one_event: group=ffff888016e53000 event=ffff88805f17b300 [ 95.104718][ T3557] fsnotify_remove_first_event: group=ffff888016e53000 event=ffff88805f17b300 [ 95.104735][ T3557] inotify_read: group=ffff888016e53000 kevent=ffff88805f17b300 [ 95.104750][ T3557] copy_event_to_user: group=ffff888016e53000 event=ffff88805f17b300 [ 95.104771][ T3557] inotify_read: group=ffff888016e53000 kevent=0000000000000000 [ 95.123408][ T4569] syz.4.113 (4569) used greatest stack depth: 16528 bytes left [ 95.129223][ T4172] tcp_in_window: [ 95.211980][ T4172] seq=1197973374 ack=883668498+(0) sack=883668498+(0) win=24559 end=1197973374 [ 95.225388][ T4172] tcp_in_window: sender end=1197973374 maxend=1201117950 maxwin=3143552 scale=7 receiver end=883668498 maxend=886812050 maxwin=3144576 scale=7 [ 95.240506][ T4172] tcp_in_window: I=1 II=1 III=1 IV=1 [ 95.245954][ T4172] tcp_in_window: res=1 sender end=1197973374 maxend=1201117950 maxwin=3143552 receiver end=883668498 maxend=886812050 maxwin=3144576 [ 95.260365][ T4172] tcp_conntracks: [ 95.260375][ T4172] syn=0 ack=1 fin=0 rst=0 old=7 new=7 [ 95.271239][ T4172] No more buffers in queue [ 95.272965][ T1323] nf_conntrack: normal packet for ffff888078d90f00 [ 95.275708][ T4172] eth0: xmit ffff888024831c80 42:01:0a:80:00:01 [ 95.275735][ T4172] Added buffer head 8 to ffff888022cd2200 [ 95.275791][ C0] virtqueue callback for ffff888022cd2200 (ffffffff85491b70) [ 95.275821][ C0] Sent skb ffff888024831c80 [ 95.275855][ C0] No more buffers in queue [ 95.281519][ T4172] nf_conntrack: normal packet for ffff888078d90300 [ 95.289829][ C1] tcp_in_window: START [ 95.299345][ T4172] tcp_in_window: START [ 95.302882][ C1] tcp_in_window: [ 95.306918][ T4172] tcp_in_window: [ 95.306929][ T4172] seq=1197973374 ack=883668498+(0) sack=883668498+(0) win=24559 end=1197973374 [ 95.306953][ T4172] tcp_in_window: sender end=1197973374 maxend=1201117950 maxwin=3143552 scale=7 receiver end=883668498 maxend=886812050 maxwin=3144576 scale=7 [ 95.306981][ T4172] tcp_in_window: [ 95.306989][ T4172] seq=1197973374 ack=883668498+(0) sack=883668498+(0) win=24559 end=1197973374 [ 95.307011][ T4172] tcp_in_window: sender end=1197973374 maxend=1201117950 maxwin=3143552 scale=7 receiver end=883668498 maxend=886812050 maxwin=3144576 scale=7 [ 95.307037][ T4172] tcp_in_window: I=1 II=1 III=1 IV=1 [ 95.307053][ T4172] tcp_in_window: res=1 sender end=1197973374 maxend=1201117950 maxwin=3143552 receiver end=883668498 maxend=886812050 maxwin=3144576 [ 95.307079][ T4172] tcp_conntracks: [ 95.307087][ T4172] syn=0 ack=1 fin=0 rst=0 old=7 new=7 [ 95.307166][ T4172] No more buffers in queue [ 95.307176][ T4172] eth0: xmit ffff88805f800640 42:01:0a:80:00:01 [ 95.307198][ T4172] Added buffer head 8 to ffff888022cd2200 [ 95.311636][ C0] virtqueue callback for ffff888022cd2200 (ffffffff85491b70) [ 95.311884][ C1] seq=151951689 ack=151951689+(0) sack=151951689+(0) win=512 end=151951689 [ 95.318232][ C0] Sent skb ffff88805f800640 [ 95.318261][ C0] No more buffers in queue [ 95.320271][ T4186] kernfs filecheck: removing [ 95.322923][ C1] tcp_in_window: sender end=151951689 maxend=151951689 maxwin=512 scale=0 receiver end=151951688 maxend=152017164 maxwin=65476 scale=7 [ 95.326811][ T4186] kobject: 'filecheck' (ffff88801fd35430): kobject_cleanup, parent 0000000000000000 [ 95.326831][ T4186] kobject: 'filecheck' (ffff88801fd35430): calling ktype release [ 95.326845][ T4186] kobject: 'filecheck': free name [ 95.326865][ T4186] kernfs loop4: removing [ 95.326894][ T4186] kobject: 'loop4' (ffff88813fe21850): kobject_cleanup, parent 0000000000000000 [ 95.326910][ T4186] kobject: 'loop4' (ffff88813fe21850): calling ktype release [ 95.326924][ T4186] kobject: 'loop4' (ffff88813fe21850): kset_release [ 95.326946][ T4186] kobject: 'loop4': free name [ 95.331397][ T4186] ocfs2: Unmounting device (7,4) on (node local) [ 95.335019][ C1] tcp_in_window: [ 95.401997][ C0] virtqueue callback for ffff888146a27400 (ffffffff8444ab50) [ 95.410416][ C1] seq=151951689 ack=151951689+(0) sack=151951689+(0) win=512 end=151951689 [ 95.413417][ C0] virtqueue interrupt with no work for ffff888146a27300 [ 95.413431][ C0] virtqueue interrupt with no work for ffff888146a27200 [ 95.413601][ T1108] Added buffer head 0 to ffff888146a27400 [ 95.419329][ C1] tcp_in_window: sender end=151951689 maxend=151951689 maxwin=512 scale=0 receiver end=151951688 maxend=152017164 maxwin=65476 scale=7 [ 95.599770][ C1] tcp_in_window: I=1 II=1 III=0 IV=1 [ 95.605239][ C1] tcp_in_window: res=0 sender end=151951689 maxend=151951689 maxwin=512 receiver end=151951688 maxend=152017164 maxwin=65476 [ 95.619121][ C1] nf_conntrack: nf_conntrack_in: Can't track with proto module [ 95.627752][ T7] nf_conntrack: normal packet for ffff8880245b0f00 [ 95.639565][ C0] percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 0 [ 95.647965][ T4186] kernfs backing_file: removing [ 95.652955][ T4186] kernfs offset: removing [ 95.665320][ T4186] kernfs sizelimit: removing [ 95.671982][ T4186] kernfs autoclear: removing [ 95.676626][ T4186] kernfs partscan: removing [ 95.681299][ T4186] kernfs dio: removing [ 95.685394][ T4186] kernfs loop: removing [ 95.691112][ T4186] kobject: 'loop4' (ffff8881408c0040): kobject_uevent_env [ 95.698327][ T4186] kobject: 'loop4' (ffff8881408c0040): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 95.709782][ T4186] kobject: 'loop4' (ffff8881408c0040): kobject_uevent_env [ 95.716940][ T4186] kobject: 'loop4' (ffff8881408c0040): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 95.728246][ T4178] inotify_handle_inode_event: group=ffff888016e53000 mark=ffff88801f961000 mask=8000 [ 95.738052][ T4178] fsnotify_insert_event: group=ffff888016e53000 event=ffff88805f17b2c0 [ 95.746815][ T3557] get_one_event: group=ffff888016e53000 event=ffff88805f17b2c0 [ 95.754459][ T3557] fsnotify_remove_first_event: group=ffff888016e53000 event=ffff88805f17b2c0 [ 95.769462][ T3557] inotify_read: group=ffff888016e53000 kevent=ffff88805f17b2c0 [ 95.777074][ T3557] copy_event_to_user: group=ffff888016e53000 event=ffff88805f17b2c0 [ 95.786886][ T3557] inotify_read: group=ffff888016e53000 kevent=0000000000000000 [ 95.799252][ T4178] inotify_handle_inode_event: group=ffff888016e53000 mark=ffff8880728aa960 mask=8000 [ 95.810921][ T4178] fsnotify_insert_event: group=ffff888016e53000 event=ffff88805f17b280 [ 95.819776][ T3557] get_one_event: group=ffff888016e53000 event=ffff88805f17b280 [ 95.827538][ T3557] fsnotify_remove_first_event: group=ffff888016e53000 event=ffff88805f17b280 [ 95.838117][ T7] nf_conntrack: normal packet for ffff888079392600 [ 95.844454][ T4186] send_to_group: group=ffff888016e53000 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff888078a9a790 data_type=1 dir=0000000000000000 cookie=0 [ 95.844761][ T7] nf_conntrack: normal packet for ffff888078d90d80 [ 95.862504][ T4186] inotify_handle_inode_event: group=ffff888016e53000 mark=ffff8880728aa960 mask=8 [ 95.882013][ T3557] inotify_read: group=ffff888016e53000 kevent=ffff88805f17b280 [ 95.891223][ T3557] copy_event_to_user: group=ffff888016e53000 event=ffff88805f17b280 [ 95.901394][ T3557] inotify_read: group=ffff888016e53000 kevent=0000000000000000 [ 95.911381][ T3516] nf_conntrack: normal packet for ffff8880245b1380 [ 95.999877][ T1323] cfg80211: Timeout while waiting for CRDA to reply, restoring regulatory settings [ 96.009860][ T1323] cfg80211: Restoring regulatory settings [ 96.016290][ T1323] cfg80211: Kicking the queue [ 96.021471][ T1323] cfg80211: Calling CRDA to update world regulatory domain [ 96.029171][ T1323] kobject: 'regulatory.0' (ffff88801dcb1010): kobject_uevent_env [ 96.037872][ T1323] kobject: 'regulatory.0' (ffff88801dcb1010): fill_kobj_path: path = '/devices/platform/regulatory.0' [ 96.071896][ T7] nf_conntrack: normal packet for ffff888078d91080 [ 96.319199][ T4199] nf_conntrack: normal packet for ffff888078d90f00 [ 96.402008][ C0] virtqueue callback for ffff888146a27400 (ffffffff8444ab50) [ 96.409530][ C0] virtqueue interrupt with no work for ffff888146a27300 [ 96.416574][ C0] virtqueue interrupt with no work for ffff888146a27200 [ 96.424134][ T7] Added buffer head 0 to ffff888146a27400 [ 96.627959][ C1] geneve1: no route to fc00:0000:0000:0000:0000:0000:0000:0001 [ 96.639596][ T7] nf_conntrack: normal packet for ffff888079392600 [ 97.268874][ T7] nf_conntrack: normal packet for ffff8880245b0780 [ 97.347702][ T4199] nf_conntrack: normal packet for ffff888078d90f00 [ 97.402022][ C0] virtqueue callback for ffff888146a27400 (ffffffff8444ab50) [ 97.409461][ C0] virtqueue interrupt with no work for ffff888146a27300 [ 97.416522][ C0] virtqueue interrupt with no work for ffff888146a27200 [ 97.423663][ T7] Added buffer head 0 to ffff888146a27400 [ 97.907626][ C1] No more buffers in queue [ 97.912787][ C1] eth0: xmit ffff888075a1a280 ff:ff:ff:ff:ff:ff [ 97.919516][ C1] Added buffer head 25 to ffff888022cd2400 [ 97.919553][ C1] virtqueue callback for ffff888022cd2400 (ffffffff85491b70) [ 97.933594][ C1] nf_conntrack: new packet for ffff888078d91e00 [ 97.940388][ C1] nf_nat: Already setup manip DST for ct ffff888078d91e00 (status bits 0x188) [ 97.949728][ C1] nf_nat: Already setup manip SRC for ct ffff888078d91e00 (status bits 0x188) [ 97.960086][ C1] Sent skb ffff888075a1a280 [ 97.964821][ C1] No more buffers in queue [ 97.969590][ C1] nf_nat: Already setup manip DST for ct ffff888078d91e00 (status bits 0x188) [ 97.978976][ C1] nf_nat: Already setup manip SRC for ct ffff888078d91e00 (status bits 0x188) [ 98.387346][ C1] net_ratelimit: 73 callbacks suppressed [ 98.387389][ C1] wireguard: wg0: Sending keepalive packet to peer 13 ([::1]:20002/0%0) [ 98.401993][ C0] virtqueue callback for ffff888146a27400 (ffffffff8444ab50) [ 98.402040][ C0] virtqueue interrupt with no work for ffff888146a27300 [ 98.402051][ C0] virtqueue interrupt with no work for ffff888146a27200 [ 98.403991][ T7] Added buffer head 0 to ffff888146a27400 [ 98.410135][ C1] wireguard: wg0: Sending keepalive packet to peer 1 ([::1]:20002/0%0) [ 98.439660][ C1] wireguard: wg0: Sending keepalive packet to peer 25 ([::1]:20002/0%0) [ 98.449054][ C1] wireguard: wg0: Sending keepalive packet to peer 7 ([::1]:20002/0%0) [ 98.458231][ C1] wireguard: wg0: Sending keepalive packet to peer 19 (127.0.0.1:20002) [ 98.467834][ C0] wireguard: wg1: Receiving keepalive packet from peer 15 ([::1]:20001/0%0) [ 98.469898][ T1323] nf_conntrack: normal packet for ffff888078d90f00 [ 98.476925][ C0] wireguard: wg1: Receiving keepalive packet from peer 3 ([::1]:20001/0%0) [ 98.476975][ C0] wireguard: wg1: Receiving keepalive packet from peer 9 ([::1]:20001/0%0) [ 98.502764][ C0] wireguard: wg1: Receiving keepalive packet from peer 21 (127.0.0.1:20001) [ 98.502791][ C1] wireguard: wg1: Receiving keepalive packet from peer 27 ([::1]:20001/0%0) [ 98.547961][ C0] nf_conntrack: new packet for ffff888079393380 [ 98.554377][ C0] nf_nat: Already setup manip DST for ct ffff888079393380 (status bits 0x188) [ 98.563375][ C0] nf_nat: Already setup manip SRC for ct ffff888079393380 (status bits 0x188) [ 98.573295][ C0] nf_nat: Already setup manip DST for ct ffff888079393380 (status bits 0x188) [ 98.582222][ C0] nf_nat: Already setup manip SRC for ct ffff888079393380 (status bits 0x188) [ 98.592338][ T7] nf_conntrack: normal packet for ffff8880245b1380 [ 98.867938][ T1108] nf_conntrack: normal packet for ffff888078d90d80 [ 99.029429][ T150] sd 0:0:1:0: cmd ffff888023be1128 CDB: 0x2a [ 99.035750][ T150] Added buffer head 201 to ffff888020aa1e00 [ 99.042135][ T150] sd 0:0:1:0: cmd ffff888023be1528 CDB: 0x2a [ 99.048534][ T150] Added buffer head 179 to ffff888020aa1e00 [ 99.054964][ T150] sd 0:0:1:0: cmd ffff888023be2528 CDB: 0x2a [ 99.073939][ T150] Added buffer head 197 to ffff888020aa1e00 [ 99.080344][ T150] sd 0:0:1:0: cmd ffff888023be2928 CDB: 0x2a [ 99.086561][ T150] Added buffer head 161 to ffff888020aa1e00 [ 99.092963][ T150] sd 0:0:1:0: cmd ffff888023be2d28 CDB: 0x2a [ 99.099586][ T150] Added buffer head 31 to ffff888020aa1e00 [ 99.105646][ T150] sd 0:0:1:0: cmd ffff888023be1928 CDB: 0x2a [ 99.112109][ T150] Added buffer head 119 to ffff888020aa1e00 [ 99.117472][ T1108] nf_conntrack: normal packet for ffff888078d91080 [ 99.118505][ T150] sd 0:0:1:0: cmd ffff888023be1d28 CDB: 0x2a [ 99.131256][ T150] Added buffer head 194 to ffff888020aa1e00 [ 99.137532][ T150] sd 0:0:1:0: cmd ffff888023be2128 CDB: 0x2a [ 99.143876][ T150] Added buffer head 166 to ffff888020aa1e00 [ 99.150317][ T150] sd 0:0:1:0: cmd ffff888023bbb128 CDB: 0x2a [ 99.156625][ C1] virtqueue callback for ffff888020aa1e00 (ffffffff85068310) [ 99.156646][ C1] sd 0:0:1:0: cmd ffff888023be1928 response 0 status 0x0 sense_len 0 [ 99.156663][ C1] sd 0:0:1:0: cmd ffff888023be1d28 response 0 status 0x0 sense_len 0 [ 99.156674][ C1] sd 0:0:1:0: cmd ffff888023be2128 response 0 status 0x0 sense_len 0 [ 99.156684][ C1] sd 0:0:1:0: cmd ffff888023be1128 response 0 status 0x0 sense_len 0 [ 99.156695][ C1] sd 0:0:1:0: cmd ffff888023be2528 response 0 status 0x0 sense_len 0 [ 99.156711][ C1] No more buffers in queue [ 99.164858][ C1] virtqueue callback for ffff888020aa1e00 (ffffffff85068310) [ 99.164888][ C1] sd 0:0:1:0: cmd ffff888023be2928 response 0 status 0x0 sense_len 0 [ 99.164913][ C1] sd 0:0:1:0: cmd ffff888023be2d28 response 0 status 0x0 sense_len 0 [ 99.164936][ C1] sd 0:0:1:0: cmd ffff888023be1528 response 0 status 0x0 sense_len 0 [ 99.164953][ C1] No more buffers in queue [ 99.251089][ C1] nf_conntrack: new packet for ffff8880782a4480 [ 99.257829][ C1] nf_nat: Already setup manip DST for ct ffff8880782a4480 (status bits 0x188) [ 99.267094][ C1] nf_nat: Already setup manip SRC for ct ffff8880782a4480 (status bits 0x188) [ 99.276968][ C1] geneve1: no route to fc00:0000:0000:0000:0000:0000:0000:0001 [ 99.285978][ T399] sd 0:0:1:0: cmd ffff888023bb7128 CDB: 0x2a [ 99.286380][ C1] nf_nat: Already setup manip DST for ct ffff8880782a4480 (status bits 0x188) [ 99.292329][ T399] Added buffer head 179 to ffff888020aa1e00 [ 99.292404][ T399] sd 0:0:1:0: cmd ffff888023bb7528 CDB: 0x2a [ 99.292427][ T399] Added buffer head 5 to ffff888020aa1e00 [ 99.301790][ C1] virtqueue callback for ffff888020aa1e00 (ffffffff85068310) [ 99.301816][ C1] sd 0:0:1:0: cmd ffff888023bb7528 response 0 status 0x0 sense_len 0 [ 99.301842][ C1] sd 0:0:1:0: cmd ffff888023bb7128 response 0 status 0x0 sense_len 0 [ 99.301859][ C1] No more buffers in queue [ 99.349524][ C1] nf_nat: Already setup manip SRC for ct ffff8880782a4480 (status bits 0x188) [ 99.359578][ T150] Added buffer head 179 to ffff888020aa1e00 [ 99.365728][ T150] sd 0:0:1:0: cmd ffff888023bb6d28 CDB: 0x2a [ 99.372125][ T150] Added buffer head 5 to ffff888020aa1e00 [ 99.378347][ T150] sd 0:0:1:0: cmd ffff888023bbc528 CDB: 0x2a [ 99.384622][ T150] Added buffer head 170 to ffff888020aa1e00 [ 99.390898][ T150] sd 0:0:1:0: cmd ffff888023bb6928 CDB: 0x2a [ 99.397098][ T150] Added buffer head 176 to ffff888020aa1e00 [ 99.402010][ C0] virtqueue callback for ffff888146a27400 (ffffffff8444ab50) [ 99.403399][ T150] sd 0:0:1:0: cmd ffff888023bbc128 CDB: 0x2a [ 99.410393][ C0] virtqueue interrupt with no work for ffff888146a27300 [ 99.410407][ C0] virtqueue interrupt with no work for ffff888146a27200 [ 99.410588][ T1108] Added buffer head 0 to ffff888146a27400 [ 99.437603][ T150] Added buffer head 117 to ffff888020aa1e00 [ 99.444084][ T150] sd 0:0:1:0: cmd ffff888023bbb528 CDB: 0x2a [ 99.450744][ T150] Added buffer head 28 to ffff888020aa1e00 [ 99.456826][ T150] sd 0:0:1:0: cmd ffff888023bbb928 CDB: 0x2a [ 99.463266][ T150] Added buffer head 141 to ffff888020aa1e00 [ 99.469626][ T150] sd 0:0:1:0: cmd ffff888023bbbd28 CDB: 0x2a [ 99.476204][ T150] Added buffer head 189 to ffff888020aa1e00 [ 99.483600][ T4199] cfg80211: Timeout while waiting for CRDA to reply, restoring regulatory settings [ 99.483620][ T1108] nf_conntrack: normal packet for ffff888078d91080 [ 99.483775][ T1108] nf_conntrack: normal packet for ffff8880245b1800 [ 99.494191][ C1] virtqueue callback for ffff888020aa1e00 (ffffffff85068310) [ 99.514659][ C1] sd 0:0:1:0: cmd ffff888023bbc128 response 0 status 0x0 sense_len 0 [ 99.522734][ C1] sd 0:0:1:0: cmd ffff888023bbbd28 response 0 status 0x0 sense_len 0 [ 99.530907][ C1] sd 0:0:1:0: cmd ffff888023bbc528 response 0 status 0x0 sense_len 0 [ 99.538984][ C1] sd 0:0:1:0: cmd ffff888023bb6928 response 0 status 0x0 sense_len 0 [ 99.547501][ C1] sd 0:0:1:0: cmd ffff888023bbb128 response 0 status 0x0 sense_len 0 [ 99.555695][ C1] sd 0:0:1:0: cmd ffff888023bbb928 response 0 status 0x0 sense_len 0 [ 99.563853][ C1] sd 0:0:1:0: cmd ffff888023bbb528 response 0 status 0x0 sense_len 0 [ 99.572203][ C1] sd 0:0:1:0: cmd ffff888023bb6d28 response 0 status 0x0 sense_len 0 [ 99.580259][ C1] No more buffers in queue [ 99.589843][ T4199] cfg80211: Restoring regulatory settings [ 99.596197][ T4199] cfg80211: Kicking the queue [ 99.602496][ T1323] nf_conntrack: normal packet for ffff888078d90f00 [ 99.610334][ T1323] cfg80211: Calling CRDA to update world regulatory domain [ 99.618229][ T1323] kobject: 'regulatory.0' (ffff88801dcb1010): kobject_uevent_env [ 99.626770][ T1323] kobject: 'regulatory.0' (ffff88801dcb1010): fill_kobj_path: path = '/devices/platform/regulatory.0' [ 99.667624][ T1108] nf_conntrack: normal packet for ffff888079392600 [ 99.829776][ T3516] nf_conntrack: normal packet for ffff888079392900 [ 99.837099][ T3516] nf_conntrack: normal packet for ffff888078d90d80 [ 99.973957][ C1] virtqueue callback for ffff888022cd2300 (ffffffff85491a80) [ 99.982264][ C1] No more buffers in queue [ 99.986870][ C1] Receiving skb proto 0x0806 len 28 type 1 [ 99.993096][ C1] No more buffers in queue [ 99.998016][ C1] No more buffers in queue [ 100.002609][ C1] eth0: xmit ffff8880729d4640 42:01:0a:80:00:01 [ 100.009286][ C1] Added buffer head 25 to ffff888022cd2400 [ 100.015309][ C1] virtqueue callback for ffff888022cd2400 (ffffffff85491b70) [ 100.023483][ C1] Sent skb ffff8880729d4640 [ 100.028463][ C1] No more buffers in queue