last executing test programs: 3.356726253s ago: executing program 0 (id=223): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000009c0)={0x34, &(0x7f00000007c0)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.063697352s ago: executing program 2 (id=240): syz_usb_connect$cdc_ecm(0x2, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109025100010100000309040000ff02020000052406000005240000000d240f01000000000000000000042413050524010208042413000905810320000000000905820220000002000905030208"], 0x0) 2.231914506s ago: executing program 2 (id=258): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x1, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xc010}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0xfff}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x8000) 2.165247283s ago: executing program 2 (id=260): add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) setreuid(0x0, 0xee01) 2.165138082s ago: executing program 2 (id=261): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 1.605435269s ago: executing program 1 (id=268): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, r1}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) 1.593847149s ago: executing program 1 (id=269): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1a00040, &(0x7f0000000180)={[{@utf8}, {@rodir}, {@rodir}, {@uni_xlate}, {@shortname_win95}, {@uni_xlateno}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@utf8no}, {@utf8no}]}, 0x3, 0x350, &(0x7f0000000900)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.234908315s ago: executing program 0 (id=272): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0x40000, 0x120, 0x0, 0x0) 1.234733216s ago: executing program 4 (id=273): connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) preadv(r0, &(0x7f0000001200)=[{&(0x7f0000000c00)=""/113, 0x71}], 0x1, 0x4, 0xb) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 1.224910557s ago: executing program 2 (id=274): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xcc0, &(0x7f00000002c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c000c204e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0", @ANYRES64], 0x1, 0x442a, &(0x7f0000008940)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffa) sendfile(r0, r0, 0x0, 0x1001) r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1.114878338s ago: executing program 0 (id=275): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002dc0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x9}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1.113071058s ago: executing program 1 (id=276): setresuid(0xffffffffffffffff, 0x0, 0xee00) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = dup3(r4, r1, 0x0) setns(r5, 0x20000000) 1.024889837s ago: executing program 4 (id=277): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x7ffffffe, r0, &(0x7f0000000000)={0x30000011}) 1.024705997s ago: executing program 1 (id=278): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x17, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40000}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x500}}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x3}, 0x94) 979.345571ms ago: executing program 4 (id=279): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, r1}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x30}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, 0x0) 979.137642ms ago: executing program 0 (id=280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x0) 978.252672ms ago: executing program 4 (id=281): r0 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x4, 0x0, 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x800, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20, &(0x7f0000000040)=ANY=[@ANYBLOB='gid=', @ANYRESDEC=r0]) 897.40202ms ago: executing program 1 (id=282): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) write$UHID_INPUT(r0, &(0x7f00000029c0)={0x9, {"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", 0x1000}}, 0x1006) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/108) 897.25958ms ago: executing program 4 (id=283): r0 = fsopen(&(0x7f00000001c0)='bdev\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='debugfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40100, 0x18) getdents64(r4, 0x0, 0x0) 783.387451ms ago: executing program 0 (id=285): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x20, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x4, 0x700000000000000, 0x0, 0x20000010}, 0x0) 437.424986ms ago: executing program 1 (id=286): r0 = io_uring_setup(0x7534, &(0x7f00000003c0)={0x0, 0x48c7, 0x80, 0x0, 0xffffffff}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 422.801467ms ago: executing program 0 (id=289): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000700)={[{@journal_async_commit}, {@heartbeat_none}, {@localalloc={'localalloc', 0x3d, 0x85f}}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzJ6vZpMl2P9ImafoxSQQXLcumT9X6ENeqjabNh7bVVFlnN9vN6uzMujujBYPUIIiCoARBxQ+qQulLLYiBvtQiFPxAWoVSUbS+iBSq4INBG+jKzNybnXtntneyk7S0/f2gnb3n3nPumf3vPXfOPZNCrHZqYaW4sFIsVYrV2ftXbil+rlquL86FwqvktT4/vbkSOcn+tXPkfR/4yD23hPCHY1/70Orq6mpoGA5dHWj7+fy/T8+2vyYKmTqNdru31vLH+iMv/fwtr3REnhMhhB0d/WrYFEL42C9C2BxCGInLRuPXLSGEbSGEKITw6G/+9ePBfrrQ5uy9Lzx37MzhfWemHn/smQvzR9c9MArhu+XdN88vvrh/023Pv+MynR4AAF7RB48fufvo5IHwZBSGzg10fl7fGb8mn4/vfNun7np4YG3/Kr3Z9CqGCgAAABlr8//h6OUu63XJylqyJPjEAyfufipa229i+/p26K4jt79/8kC8/ht17L81Lvrnezc111Cz677Z9d+RTP3u679r53n4q8/+svLWjfc/6V9y3uEQFSZS24XCxEQIx6Za27uirYVydaX2zvur9crJjZ/3jSKdf3b1fm1Bv9f8RzPV89b/d3/i8z/bMtDPOxgL2b/axnax80+ZLtL5rz+W/+RLUU/5j2Xq5eV/x9Pbz/9qcz/vIHtGLkU6/9aFuK/9gGJrAGjk/82B/Px3ZNrPy//7U+cePbGB7/80xpnhqNHXwdQI8HJcvs5XmMhI598KIjV0xr/I9a7//2XyvybTfl7+d1b/8bu/9XH/X2/8H5/qp803j3T+rSCKqSPWrv+RQv71f22m/bz8f3vqz89+sq97dWf+jf6Pu//3JJ1/fCNOD57N32Sv4//OTPt5+e8au++hhQ30+8Nb4n4ORWGs7Vun5xq3sKG19ermlKaxe2kDJ3kTSOff+q2lLp2h1kvz+h/OH/93ZdrPy/+hPV9/z+m+vv/bffyfNP73JJ3/lmbZpeT/Uib/3Zn28/L/4em//+W+yzz+N7YPyr8n6fy3duxfe/5T6Gn+d12mft7zn32jTz3y1z7m/0n/kvMmz3+S5xDjUev5D92l879q3eN6vf/vydTLu/6/9Z/nn97fz/gfDXoC0Id0/ttahV0mgL3mf32m/bz8v3DPlz/+pw3M/5qf+AaT/Nvm/5tb5UeN/z1J57+9VZj6x1APNv/fvP9Hnbn/N5P/DZn28/K/cGhi4CuX+f7f6P94l0fZdErnP7TucY38f9/D/f/GTL28/L+496cv3tzX5/8QJs31Nyyd/9XrHte8/gfz878pUy8v/+9849dPPNhH/9/eR12y+bfu9anLKf5s3uv8v5hpPy//H42fP7v/Csz/bnX/70k6/9aq+aXkn53/7820n5f/9478YHngCjz/uUP+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzIavw6HqDCR2i4UJiZCGIu3d4Wt0Uzp5PRMuTr7mZUQdsTlxTAazZerM6Xy9EKlenJuulQuV2dDuCbevyMMRivlam16sbR07cW2tkSn5krLtZm5Ui2EsDMuvz5sT9qaWagtlpaaxyZ1ropKn61Xa6WJ+srccth9sXxbUj6/XK0vXXexrasL1eWlU6XK9MmF5XdPTk5Ohj0X+zwSzT1Qm6vUWr1t7W3USeoOR21vprn7hrbzfbpaX66Uys3yG9vqlKuzpXJbnZvazldbrldmS7W56XJ1Pjlfsa1u23tr7t4b7xsPI6n3l9TNOhi/3n7o+EePHz7Qsb8YpfOu1BfnJrd3/5sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I3rydve9e0QwkBrqxBCOJj8EMX/pZy994Xnjp05vO/M1OOPPXNh/mi3YwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYuZ+XKro4DsBnxve+FkgpbYRcBoaI6E7Cgn4RSeU1smWb1kGtEjIoCgwjWhYEQVC7qCBoFVT+BVELl62qTS1aGERQMTqTlzvCDS90zHkeGM4Mc++ZLwzcO3M+hwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+nN2x2JW1l3ZtXtq6+0PozM/9H0IYTZb3P+/tCD0hhK9fZk6HVdpCT1P/bybnxstXTX7v7R9/eH00WXv9xXeL63aHJB1qON6ZpOnQ0Nr736juDD6bHkxCSGMXQhQLY0/O1EIIHbELIYqfH+cvZr/v/8UuhCj6P9ztyu5/LXYhRLF196e+Wv6MR/Wcr18YbPzvb/UI3sYjOuvQ25NX3qVuauW9zN//k3zzPlgNsyeOvH8euwiimZ2bOhq7BgAA4O861yL/D1uW9+9fTkJPdzn3/9aU//c29b96/r/i3vYbYzNthRDbSmOT2fHwvnb63PhODVy9/bpmvKeq5P/VJv+vNvl/tcn/q03+X23yfzKv5P+V9PjmnsUXsYsgGvk/AABUz6HjE1P14ZHs5X/Tj85yXt+Xt/U8T39wa3rgUcO4kfzw33b42MSBg8Mj+X0vDwiurP+QLp39ns/3aG4Lk03zLlqt/9D7dGH+Wmf5E/U/nL9R1Fdc1/oPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAvdueehkEwCsPod1sRtdGqaMLCT4IPNDAiACnMaEAHEwZgIAQUMJBzlnuTZ3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5/tXeV18f2mM9Foj0lR22bV/jqfZz9y3w/I+e9y4FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZ24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//8Oayzs=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) 379.688702ms ago: executing program 3 (id=290): r0 = open(&(0x7f0000000000)='./file1\x00', 0x1c1441, 0x75) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x1, 0xbe08, 0x8000}) 297.44348ms ago: executing program 3 (id=291): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x48, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffffffff}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x2000000}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x48}, 0x4, 0x700000000000000}, 0x0) 297.29679ms ago: executing program 3 (id=292): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000a80)=[{0x1d, 0x0, 0x3, 0xfff00002}]}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) 187.342401ms ago: executing program 2 (id=293): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0xf) syz_emit_ethernet(0x80, &(0x7f0000000180)=ANY=[], 0x0) 167.683913ms ago: executing program 3 (id=294): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xa, 0x0, 0xec0}}, 0x14}}, 0x0) 29.424117ms ago: executing program 3 (id=295): syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 8.727259ms ago: executing program 4 (id=296): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000000)='$@\x00', 0x40, 0x2b4, 0x0) fcntl$setlease(r1, 0x400, 0x0) mq_open(&(0x7f0000000140)='$@\x005gM\xfb\xa3\xabt\xb8\x97\xa2`\xcc\xfb&\r.\x97TM&\x93\xd3\xd2\x17[\x89}\xd2j\xd6\xee\xf4\'@\xff\x00\x00\x00\x00\x00\x00\x00\x00\xcd.,\xfb\xab\xb9\x00r\voG\x9d\xaa\x86\xe9\xff\x1b\xa20\x16\t\x05\xa4\x97\xfah\xe9u\xbb\xad~\xb3\x83\xb9\xa3\xe7\xa4\xea\xe6x\xd8H\xa9\xa89\x1a\xfeZ0+\x18\xe9\xc7\x87\\\x05\xbf`!Q\xf2\xcc\xbc4\xbc|s\xbdZY1\x02r\xac\x805\x06\x18\xb5\x88gx\xac\xd6\xc7.\xa6Z\x84X:{II>~<\xa4x\'\xd0\xdc\xf5`\x1a\x1dI:\x8b\xc6v/;U\xac\x12\xed\xed\x86W\xf4\xcb\xf4\xdd\x89w<\xd2d\xc0\x17\xf3\x9f\xdf\xd2', 0x1, 0x0, 0x0) close(0x3) 0s ago: executing program 3 (id=297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x40000) unshare(0x64000600) kernel console output (not intermixed with test programs): [ 9.061349][ T3990] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: [ 9.094712][ T9] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 9.100630][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.65' (ED25519) to the list of known hosts. syzkaller login: [ 24.823092][ T4306] cgroup: Unknown subsys name 'net' [ 25.074192][ T4306] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 25.371159][ T4306] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 26.089111][ T4322] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 26.090837][ T4322] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 26.092167][ T4320] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 26.094537][ T4320] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 26.096338][ T4320] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 26.104925][ T4325] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 26.106402][ T4325] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 26.113619][ T4334] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 26.117881][ T4335] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 26.117920][ T47] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 26.119209][ T4335] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 26.121165][ T47] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 26.121568][ T4335] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 26.122721][ T4336] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 26.127748][ T4336] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 26.127880][ T4335] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 26.129014][ T4336] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 26.130611][ T4335] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 26.132545][ T4336] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 26.133324][ T4335] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 26.134804][ T4336] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 26.135312][ T4335] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 26.138249][ T4336] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 26.152981][ T4334] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 26.154136][ T4335] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 26.155875][ T4334] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 26.157116][ T4334] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 26.158340][ T4334] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 26.162362][ T4334] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 26.163587][ T4334] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 26.267743][ T4319] chnl_net:caif_netlink_parms(): no params data found [ 26.296189][ T4323] chnl_net:caif_netlink_parms(): no params data found [ 26.300704][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 26.332620][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.333845][ T4319] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.335411][ T4319] device bridge_slave_0 entered promiscuous mode [ 26.339563][ T4327] chnl_net:caif_netlink_parms(): no params data found [ 26.348056][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.349227][ T4319] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.350686][ T4319] device bridge_slave_1 entered promiscuous mode [ 26.365632][ T4326] chnl_net:caif_netlink_parms(): no params data found [ 26.367475][ T4323] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.368656][ T4323] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.370103][ T4323] device bridge_slave_0 entered promiscuous mode [ 26.382503][ T4319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.383879][ T4323] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.385031][ T4323] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.386451][ T4323] device bridge_slave_1 entered promiscuous mode [ 26.388031][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.389181][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.390672][ T4328] device bridge_slave_0 entered promiscuous mode [ 26.397069][ T4319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.403354][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.404520][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.405928][ T4328] device bridge_slave_1 entered promiscuous mode [ 26.409461][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.410650][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.414171][ T4327] device bridge_slave_0 entered promiscuous mode [ 26.424470][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.425537][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.427041][ T4327] device bridge_slave_1 entered promiscuous mode [ 26.429532][ T4319] team0: Port device team_slave_0 added [ 26.431323][ T4323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.433719][ T4323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.442189][ T4319] team0: Port device team_slave_1 added [ 26.449391][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.454551][ T4327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.463978][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.465148][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.466518][ T4326] device bridge_slave_0 entered promiscuous mode [ 26.468628][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.470020][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.471147][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.474542][ T4326] device bridge_slave_1 entered promiscuous mode [ 26.476424][ T4327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.478830][ T4323] team0: Port device team_slave_0 added [ 26.483004][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.484021][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.487905][ T4319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.500876][ T4323] team0: Port device team_slave_1 added [ 26.502862][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.503886][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.507627][ T4319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.513597][ T4328] team0: Port device team_slave_0 added [ 26.516384][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.524409][ T4328] team0: Port device team_slave_1 added [ 26.526194][ T4327] team0: Port device team_slave_0 added [ 26.527925][ T4327] team0: Port device team_slave_1 added [ 26.529610][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.533801][ T4323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.534857][ T4323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.538537][ T4323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.540764][ T4323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.541868][ T4323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.545176][ T4323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.563249][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.564312][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.568037][ T4327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.573897][ T4326] team0: Port device team_slave_0 added [ 26.575877][ T4326] team0: Port device team_slave_1 added [ 26.579121][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.580123][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.584291][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.586415][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.587449][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.591113][ T4327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.598518][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.599550][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.603520][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.632650][ T4319] device hsr_slave_0 entered promiscuous mode [ 26.671802][ T4319] device hsr_slave_1 entered promiscuous mode [ 26.713493][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.714628][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.718493][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.782646][ T4323] device hsr_slave_0 entered promiscuous mode [ 26.821679][ T4323] device hsr_slave_1 entered promiscuous mode [ 26.861489][ T4323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.862746][ T4323] Cannot create hsr debugfs directory [ 26.865116][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.866212][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.870092][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.932495][ T4327] device hsr_slave_0 entered promiscuous mode [ 26.971657][ T4327] device hsr_slave_1 entered promiscuous mode [ 27.031472][ T4327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.032527][ T4327] Cannot create hsr debugfs directory [ 27.082508][ T4328] device hsr_slave_0 entered promiscuous mode [ 27.121623][ T4328] device hsr_slave_1 entered promiscuous mode [ 27.161569][ T4328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.162682][ T4328] Cannot create hsr debugfs directory [ 27.212488][ T4326] device hsr_slave_0 entered promiscuous mode [ 27.271626][ T4326] device hsr_slave_1 entered promiscuous mode [ 27.331567][ T4326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.332762][ T4326] Cannot create hsr debugfs directory [ 27.426268][ T4323] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.493254][ T4323] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.545484][ T4323] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.582812][ T4323] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.654364][ T4327] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.692696][ T4327] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.722611][ T4327] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.773932][ T4319] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.822620][ T4327] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.864041][ T4319] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.912954][ T4319] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.957969][ T4319] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.009200][ T4328] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.059113][ T4328] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.095002][ T4328] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.143718][ T4328] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.171913][ T4329] Bluetooth: hci4: command 0x0409 tx timeout [ 28.171982][ T4334] Bluetooth: hci1: command 0x0409 tx timeout [ 28.172954][ T4329] Bluetooth: hci3: command 0x0409 tx timeout [ 28.173824][ T4334] Bluetooth: hci0: command 0x0409 tx timeout [ 28.181691][ T4334] Bluetooth: hci2: command 0x0409 tx timeout [ 28.200557][ T4323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.207938][ T4326] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.233944][ T4326] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.277922][ T4326] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.338675][ T4326] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.397774][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.399609][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.407001][ T4327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.415599][ T4323] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.417247][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.418834][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.423862][ T4327] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.429749][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.431273][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.435786][ T218] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.436915][ T218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.443260][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.444739][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.446146][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.447461][ T218] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.448491][ T218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.456593][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.458010][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.459461][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.460881][ T218] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.462024][ T218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.463543][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.465112][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.471349][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.472967][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.474301][ T452] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.475314][ T452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.481823][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.483466][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.485224][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.490391][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.501226][ T4319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.503702][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.504855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.506445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.507819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.515693][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.517240][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.521168][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.523374][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.524715][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.526337][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.527845][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.534910][ T4319] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.536903][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.539741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.541165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.549118][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.551920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.553184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.554599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.556283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.557678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.559294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.560672][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.561751][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.566630][ T4327] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.568236][ T4327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.577555][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.584881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.586310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.587645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.589250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.590697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.595129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.596672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.597933][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.598884][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.600199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.602482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.603892][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.605355][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.606684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.608395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.609853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.611202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.619484][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.627259][ T4328] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.628874][ T4328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.636237][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.637704][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.638988][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.640464][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.642781][ T452] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.643850][ T452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.645574][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.647194][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.648640][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.650143][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.652761][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.654219][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.655715][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.657218][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.658803][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.660315][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.666471][ T452] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.667503][ T452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.674777][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.676175][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.677609][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.679008][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.680475][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.684286][ T452] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.685401][ T452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.686805][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.688468][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.692515][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.693671][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.698823][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.701833][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.703079][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.704336][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.705868][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.710039][ T4323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.712283][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.713709][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.718076][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.727142][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.728726][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.730242][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.736149][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.737699][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.739118][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.740899][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.750197][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.751880][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.759038][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.760536][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.762432][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.763843][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.765225][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.767134][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.773017][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.775203][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.776756][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.778190][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.779804][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.788650][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.790951][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.793530][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.798188][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.806793][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.808317][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.809834][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.811139][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.818576][ T4323] device veth0_vlan entered promiscuous mode [ 28.820585][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.822158][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.823967][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.825379][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.828381][ T4327] device veth0_vlan entered promiscuous mode [ 28.833618][ T4327] device veth1_vlan entered promiscuous mode [ 28.839929][ T4327] device veth0_macvtap entered promiscuous mode [ 28.842061][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.843523][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.844921][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.847343][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.865496][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.867076][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.868521][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.869972][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.871271][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.875046][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.876390][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.879006][ T4328] device veth0_vlan entered promiscuous mode [ 28.883554][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.884696][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.887884][ T4323] device veth1_vlan entered promiscuous mode [ 28.891924][ T4328] device veth1_vlan entered promiscuous mode [ 28.895781][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.897661][ T4327] device veth1_macvtap entered promiscuous mode [ 28.909308][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.910849][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.913378][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.914852][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.917612][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.919283][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.920810][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.935648][ T4323] device veth0_macvtap entered promiscuous mode [ 28.938834][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.940425][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.943561][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.946248][ T4328] device veth0_macvtap entered promiscuous mode [ 28.949145][ T4328] device veth1_macvtap entered promiscuous mode [ 28.955977][ T4319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.958195][ T4323] device veth1_macvtap entered promiscuous mode [ 28.960739][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.962522][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.963820][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.965135][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.966201][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.969576][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.975247][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.976866][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.980258][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.982354][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.984551][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.988169][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.989813][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.995750][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.006231][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.007771][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.009188][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.010649][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.017766][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.019386][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.020979][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.023815][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.025929][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.027176][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.028802][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.030772][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.033072][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.034526][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.036018][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.037519][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.039046][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.040581][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.043648][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.045043][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.047222][ T4319] device veth0_vlan entered promiscuous mode [ 29.048895][ T4327] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.050149][ T4327] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.051371][ T4327] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.053484][ T4327] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.057660][ T4328] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.058920][ T4328] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.060218][ T4328] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.061936][ T4328] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.065417][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.066832][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.068230][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.069654][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.072923][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.083771][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.085238][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.095550][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.097124][ T218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.099064][ T4319] device veth1_vlan entered promiscuous mode [ 29.105745][ T4323] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.107033][ T4323] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.108375][ T4323] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.109626][ T4323] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.115033][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 29.116575][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.118013][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.119514][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.120854][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.138827][ T4326] device veth0_vlan entered promiscuous mode [ 29.151214][ T4326] device veth1_vlan entered promiscuous mode [ 29.169530][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.170911][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.177376][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 29.177688][ T4419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.178906][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 29.179640][ T4419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.181108][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 29.184447][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.187887][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.196385][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.198504][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.205065][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.213120][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.214390][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.216359][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.225182][ T4319] device veth0_macvtap entered promiscuous mode [ 29.229844][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.231355][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.233981][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.236175][ T4319] device veth1_macvtap entered promiscuous mode [ 29.237911][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.239241][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.240610][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.243879][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.245188][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.246797][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.248142][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.249645][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.252925][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.255991][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.257421][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.258909][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.259681][ T4419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.260677][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.261294][ T4419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.265787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.267193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.268690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.274979][ T4326] device veth0_macvtap entered promiscuous mode [ 29.278575][ T4326] device veth1_macvtap entered promiscuous mode [ 29.283733][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.285263][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.286780][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.288219][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.289640][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.291092][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.294217][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.295686][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.299513][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.302274][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.303893][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.305422][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.306919][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.308297][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.309824][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.313115][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.314354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.315940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.317277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.318750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.320276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.323075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.326680][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.328241][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.329662][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.331104][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.333968][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.335612][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.337089][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.338638][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.340696][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.342686][ T4319] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.343943][ T4319] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.345275][ T4319] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.346583][ T4319] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.353872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.355465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.360799][ T4326] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.362996][ T4326] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.364318][ T4326] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.365737][ T4326] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.419415][ T4433] loop3: detected capacity change from 0 to 4096 [ 29.421998][ T4434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.423307][ T4434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.437923][ T4433] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 29.455071][ T452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.456258][ T452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.458050][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.464121][ T4433] ntfs: volume version 3.1. [ 29.483418][ T4436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.484864][ T4436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.493346][ T452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.494564][ T452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.496235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.504441][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.505824][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.508068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.513455][ T4433] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 29.516324][ T4433] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 29.519123][ T4433] ntfs: (device loop3): ntfs_cluster_alloc(): Failed to map page. [ 29.520225][ T4433] ntfs: (device loop3): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 29.529598][ T452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.529807][ T4433] ntfs: (device loop3): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the conversion from resident to non-resident attribute failed with error code -5. [ 29.530845][ T452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.534771][ T4433] ntfs: (device loop3): ntfs_prepare_file_for_write(): Cannot perform write to inode 0x43, attribute type 0x80, because extending the allocation failed (error 5). [ 29.540478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.586039][ T4440] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1'. [ 29.727072][ T4454] loop4: detected capacity change from 0 to 512 [ 29.730686][ T4454] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 29.738523][ T4454] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 29.767809][ T4454] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.12: bg 0: block 384: padding at end of block bitmap is not set [ 29.779581][ T4454] EXT4-fs (loop4): Remounting filesystem read-only [ 29.780646][ T4454] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 29.783303][ T4454] EXT4-fs (loop4): Remounting filesystem read-only [ 29.784345][ T4454] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.12: attempt to clear invalid blocks 983260 len 1 [ 29.786947][ T4454] EXT4-fs (loop4): Remounting filesystem read-only [ 29.788167][ T4454] EXT4-fs error (device loop4): __ext4_get_inode_loc:4513: comm syz.4.12: Invalid inode table block 0 in block_group 0 [ 29.790831][ T4454] EXT4-fs (loop4): Remounting filesystem read-only [ 29.792243][ T4454] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 29.793978][ T4454] EXT4-fs (loop4): Remounting filesystem read-only [ 29.795054][ T4454] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 29.796479][ T4454] EXT4-fs (loop4): Remounting filesystem read-only [ 29.797639][ T4454] EXT4-fs error (device loop4): __ext4_get_inode_loc:4513: comm syz.4.12: Invalid inode table block 0 in block_group 0 [ 29.799601][ T4454] EXT4-fs (loop4): Remounting filesystem read-only [ 29.800676][ T4454] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 29.805024][ T4454] EXT4-fs (loop4): Remounting filesystem read-only [ 29.806068][ T4454] EXT4-fs error (device loop4): ext4_truncate:4318: inode #11: comm syz.4.12: mark_inode_dirty error [ 29.808149][ T4454] EXT4-fs (loop4): Remounting filesystem read-only [ 29.809194][ T4454] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 29.815924][ T4454] EXT4-fs (loop4): Remounting filesystem read-only [ 30.069842][ T4454] EXT4-fs (loop4): 1 truncate cleaned up [ 30.070794][ T4454] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 30.084813][ T4454] EXT4-fs error (device loop4): __ext4_get_inode_loc:4513: comm syz.4.12: Invalid inode table block 0 in block_group 0 [ 30.087354][ T4454] EXT4-fs (loop4): Remounting filesystem read-only [ 30.104504][ T4326] EXT4-fs (loop4): unmounting filesystem. [ 30.145885][ T4466] loop4: detected capacity change from 0 to 512 [ 30.147249][ T4466] EXT4-fs: Ignoring removed nobh option [ 30.166950][ T4466] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.14: iget: bad i_size value: 38620345925642 [ 30.169780][ T4466] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.14: couldn't read orphan inode 15 (err -117) [ 30.184552][ T4466] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 30.251561][ T4334] Bluetooth: hci0: command 0x041b tx timeout [ 30.253221][ T4472] loop2: detected capacity change from 0 to 4096 [ 30.254742][ T4472] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 30.264133][ T4322] Bluetooth: hci2: command 0x041b tx timeout [ 30.265121][ T4322] Bluetooth: hci3: command 0x041b tx timeout [ 30.266121][ T4322] Bluetooth: hci1: command 0x041b tx timeout [ 30.267104][ T4322] Bluetooth: hci4: command 0x041b tx timeout [ 30.267852][ T4466] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.14: bg 0: block 5: invalid block bitmap [ 30.440961][ T4466] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 28 [ 30.520058][ T4466] EXT4-fs (loop4): This should not happen!! Data will be lost [ 30.520058][ T4466] [ 30.526279][ T4466] EXT4-fs (loop4): Total free blocks count 0 [ 30.533924][ T4472] ntfs: volume version 3.1. [ 30.534797][ T4466] EXT4-fs (loop4): Free/Dirty block details [ 30.546861][ T4466] EXT4-fs (loop4): free_blocks=0 [ 30.554598][ T4466] EXT4-fs (loop4): dirty_blocks=3068 [ 30.555435][ T4466] EXT4-fs (loop4): Block reservation details [ 30.611035][ T4466] EXT4-fs (loop4): i_reserved_data_blocks=3068 [ 30.636209][ T4478] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 16 with max blocks 2048 with error 28 [ 30.746812][ T4493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.748234][ T4493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.750232][ T4492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.755690][ T4491] tmpfs: Unknown parameter 'usrquota_inode_hardlimit' [ 30.768688][ T4492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.546363][ T4512] hub 8-0:1.0: USB hub found [ 31.547776][ T4512] hub 8-0:1.0: 8 ports detected [ 32.331989][ T4334] Bluetooth: hci4: command 0x040f tx timeout [ 32.332925][ T4334] Bluetooth: hci1: command 0x040f tx timeout [ 32.333927][ T4334] Bluetooth: hci3: command 0x040f tx timeout [ 32.334805][ T4334] Bluetooth: hci2: command 0x040f tx timeout [ 32.335698][ T4334] Bluetooth: hci0: command 0x040f tx timeout [ 32.440773][ T4529] tipc: Started in network mode [ 32.447597][ T4529] tipc: Node identity 4246, cluster identity 4711 [ 32.449606][ T4529] tipc: Node number set to 16966 [ 32.452166][ T4529] tipc: Cannot configure node identity twice [ 32.486557][ T4531] loop3: detected capacity change from 0 to 64 [ 32.493815][ T4531] ======================================================= [ 32.493815][ T4531] WARNING: The mand mount option has been deprecated and [ 32.493815][ T4531] and is ignored by this kernel. Remove the mand [ 32.493815][ T4531] option from the mount to silence this warning. [ 32.493815][ T4531] ======================================================= [ 32.500607][ T4531] hfs: unable to read volume bitmap [ 32.504833][ T4531] hfs: can't find a HFS filesystem on dev loop3 [ 32.641027][ T4313] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 32.727243][ T4545] loop0: detected capacity change from 0 to 8192 [ 32.741900][ T4545] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 32.743981][ T4545] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 32.745361][ T4545] REISERFS (device loop0): using ordered data mode [ 32.746316][ T4545] reiserfs: using flush barriers [ 32.754117][ T4545] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 32.756655][ T4545] REISERFS (device loop0): checking transaction log (loop0) [ 32.765205][ T4545] REISERFS (device loop0): Using r5 hash to sort names [ 32.766762][ T4545] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 32.861199][ T4558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.51'. [ 32.938555][ T4564] team0: Device ip6tnl1 is of different type [ 32.967638][ T4542] loop4: detected capacity change from 0 to 40427 [ 32.973527][ T4542] F2FS-fs (loop4): invalid crc value [ 32.981146][ T4542] F2FS-fs (loop4): Found nat_bits in checkpoint [ 32.995457][ T4542] F2FS-fs (loop4): Start checkpoint disabled! [ 33.010765][ T4542] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 33.052316][ T9] kworker/u4:0: attempt to access beyond end of device [ 33.052316][ T9] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 33.155030][ T4588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.157645][ T4588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.337167][ T4604] loop3: detected capacity change from 0 to 4096 [ 33.348599][ T4604] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 33.366169][ T4604] ntfs: volume version 3.1. [ 33.398834][ T4594] loop2: detected capacity change from 0 to 40427 [ 33.404890][ T4594] F2FS-fs (loop2): invalid crc value [ 33.415709][ T4594] F2FS-fs (loop2): Found nat_bits in checkpoint [ 33.419537][ T4611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.420911][ T4611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.433319][ T4594] F2FS-fs (loop2): Start checkpoint disabled! [ 33.441145][ T4594] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 33.736376][ T4632] capability: warning: `syz.3.86' uses 32-bit capabilities (legacy support in use) [ 33.738204][ T4631] loop4: detected capacity change from 0 to 8192 [ 33.749730][ T4631] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 33.752133][ T4631] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 33.753421][ T4631] REISERFS (device loop4): using ordered data mode [ 33.754341][ T4631] reiserfs: using flush barriers [ 33.755713][ T4631] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 33.758421][ T4631] REISERFS (device loop4): checking transaction log (loop4) [ 33.805782][ T4631] REISERFS (device loop4): Using tea hash to sort names [ 33.807953][ T4639] capability: warning: `syz.3.90' uses deprecated v2 capabilities in a way that may be insecure [ 33.812422][ T4637] loop2: detected capacity change from 0 to 4096 [ 33.813817][ T4637] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 33.816400][ T4631] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 33.849225][ T4637] ntfs: volume version 3.1. [ 34.198318][ T4661] loop1: detected capacity change from 0 to 128 [ 34.208975][ T4661] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 34.228469][ T4661] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 34.374487][ T4666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.384454][ T4666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.415831][ T4669] loop2: detected capacity change from 0 to 128 [ 34.422420][ T4322] Bluetooth: hci0: command 0x0419 tx timeout [ 34.423384][ T4322] Bluetooth: hci2: command 0x0419 tx timeout [ 34.423530][ T4669] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 34.424334][ T4322] Bluetooth: hci3: command 0x0419 tx timeout [ 34.426356][ T4322] Bluetooth: hci1: command 0x0419 tx timeout [ 34.427267][ T4322] Bluetooth: hci4: command 0x0419 tx timeout [ 34.464953][ T4328] sysv_free_block: flc_count > flc_size [ 34.466254][ T4328] sysv_free_block: flc_count > flc_size [ 34.468299][ T4328] sysv_free_block: flc_count > flc_size [ 34.470372][ T4328] sysv_free_block: flc_count > flc_size [ 34.475403][ T4328] sysv_free_block: flc_count > flc_size [ 34.476249][ T4328] sysv_free_block: flc_count > flc_size [ 34.479752][ T4328] sysv_free_block: flc_count > flc_size [ 34.482005][ T4328] sysv_free_block: flc_count > flc_size [ 34.482915][ T4328] sysv_free_block: flc_count > flc_size [ 34.486513][ T4328] sysv_free_block: flc_count > flc_size [ 34.490318][ T4328] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 34.649995][ T4675] loop2: detected capacity change from 0 to 4096 [ 34.663576][ T4675] __ntfs_warning: 1 callbacks suppressed [ 34.663583][ T4675] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 34.691019][ T4675] ntfs: volume version 3.1. [ 34.833865][ T4685] nvme_fabrics: missing parameter 'transport=%s' [ 34.835008][ T4685] nvme_fabrics: missing parameter 'nqn=%s' [ 34.914246][ T4692] Zero length message leads to an empty skb [ 34.927017][ T4515] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.940479][ T4696] loop3: detected capacity change from 0 to 64 [ 34.987607][ T4698] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 34.988952][ T4698] IPv6: NLM_F_CREATE should be set when creating new route [ 35.096854][ T4720] tipc: Failed to remove unknown binding: 66,1,1/0:2531328409/2531328411 [ 35.098891][ T4720] tipc: Failed to remove unknown binding: 66,1,1/0:2531328409/2531328411 [ 35.106965][ T4714] nvme_fabrics: missing parameter 'transport=%s' [ 35.108044][ T4714] nvme_fabrics: missing parameter 'nqn=%s' [ 35.214130][ T4731] loop2: detected capacity change from 0 to 128 [ 35.219504][ T4731] EXT4-fs: Ignoring removed nobh option [ 35.461359][ T4731] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 35.538936][ T4742] loop1: detected capacity change from 0 to 2048 [ 35.548960][ T4742] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 35.549339][ T4744] loop0: detected capacity change from 0 to 512 [ 35.565578][ T4742] syz.1.133: attempt to access beyond end of device [ 35.565578][ T4742] loop1: rw=524288, sector=65534, nr_sectors = 2 limit=2048 [ 35.569081][ T4745] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 35.636796][ T4313] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 35.953514][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 36.031292][ T4754] nvme_fabrics: missing parameter 'transport=%s' [ 36.032391][ T4754] nvme_fabrics: missing parameter 'nqn=%s' [ 36.068472][ T4764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.070011][ T4764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.104334][ T4763] loop0: detected capacity change from 0 to 8192 [ 36.141693][ T4763] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 36.146983][ T4763] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 36.149101][ T4763] REISERFS (device loop0): using journaled data mode [ 36.153204][ T4763] reiserfs: using flush barriers [ 36.155839][ T4763] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 36.159441][ T4763] REISERFS (device loop0): checking transaction log (loop0) [ 36.166564][ T4419] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.169257][ T4763] REISERFS (device loop0): Using r5 hash to sort names [ 36.170583][ T4763] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 36.173896][ T4763] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 36.187538][ T4763] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 36.489332][ T4763] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 36.504992][ T4775] loop2: detected capacity change from 0 to 512 [ 36.509725][ T4763] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 36.561333][ T4775] EXT4-fs (loop2): 1 orphan inode deleted [ 36.563487][ T4779] loop1: detected capacity change from 0 to 164 [ 36.565414][ T4775] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 36.574670][ T27] audit: type=1326 audit(36.560:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4778 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93f5b9e8 code=0x7ffc0000 [ 36.578788][ T27] audit: type=1326 audit(36.560:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4778 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffff93f5b9e8 code=0x7ffc0000 [ 36.588298][ T27] audit: type=1326 audit(36.560:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4778 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93f5b9e8 code=0x7ffc0000 [ 36.592382][ T27] audit: type=1326 audit(36.560:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4778 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=201 compat=0 ip=0xffff93f5b9e8 code=0x7ffc0000 [ 36.595495][ T27] audit: type=1326 audit(36.560:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4778 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93f5b9e8 code=0x7ffc0000 [ 36.598658][ T27] audit: type=1326 audit(36.560:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4778 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=3 compat=0 ip=0xffff93f5b9e8 code=0x7ffc0000 [ 36.603219][ T27] audit: type=1326 audit(36.560:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4778 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93f5b9e8 code=0x7ffc0000 [ 36.606685][ T27] audit: type=1326 audit(36.560:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4778 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=265 compat=0 ip=0xffff93f5b9e8 code=0x7ffc0000 [ 36.609846][ T27] audit: type=1326 audit(36.560:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4778 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff93f5b9e8 code=0x7ffc0000 [ 36.622482][ T4419] EXT4-fs error (device loop2): ext4_release_dquot:6845: comm kworker/u4:5: Failed to release dquot type 1 [ 36.628894][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 36.710885][ T4791] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 36.714568][ T4791] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 36.774783][ T4419] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.924102][ T4801] loop1: detected capacity change from 0 to 8192 [ 36.954096][ T4801] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 36.961814][ T4801] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 36.963319][ T4801] REISERFS (device loop1): using ordered data mode [ 36.964306][ T4801] reiserfs: using flush barriers [ 36.965517][ T4801] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 36.967868][ T4801] REISERFS (device loop1): checking transaction log (loop1) [ 37.006200][ T4812] tipc: Started in network mode [ 37.007254][ T4812] tipc: Node identity f6d8020544d3, cluster identity 4711 [ 37.009136][ T4812] tipc: Enabled bearer , priority 0 [ 37.027214][ T4815] loop4: detected capacity change from 0 to 256 [ 37.042493][ T4812] sch_tbf: burst 5 is lower than device syzkaller0 mtu (1514) ! [ 37.069184][ T4815] FAT-fs (loop4): Directory bread(block 64) failed [ 37.085042][ T4815] FAT-fs (loop4): Directory bread(block 65) failed [ 37.098404][ T4815] FAT-fs (loop4): Directory bread(block 66) failed [ 37.103689][ T4801] REISERFS (device loop1): Using tea hash to sort names [ 37.106076][ T4801] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 37.108702][ T4815] FAT-fs (loop4): Directory bread(block 67) failed [ 37.111995][ T4815] FAT-fs (loop4): Directory bread(block 68) failed [ 37.112975][ T4815] FAT-fs (loop4): Directory bread(block 69) failed [ 37.121837][ T4815] FAT-fs (loop4): Directory bread(block 70) failed [ 37.122936][ T4815] FAT-fs (loop4): Directory bread(block 71) failed [ 37.123859][ T4815] FAT-fs (loop4): Directory bread(block 72) failed [ 37.124820][ T4815] FAT-fs (loop4): Directory bread(block 73) failed [ 37.183147][ T4811] tipc: Disabling bearer [ 37.203074][ T4818] netlink: 35 bytes leftover after parsing attributes in process `syz.1.161'. [ 37.240000][ T4822] loop2: detected capacity change from 0 to 24 [ 37.241371][ T4822] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 37.255127][ T4822] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 37.268905][ T4822] VFS: Lookup of 'file0' in romfs loop2 would have caused loop [ 37.324261][ T4419] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.354673][ T4831] binder: 4828 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 37.354696][ T4831] binder: 4828:4831 ioctl c018620c 20000380 returned -22 [ 37.388765][ T4835] netlink: 28 bytes leftover after parsing attributes in process `syz.1.168'. [ 37.402553][ T4835] netlink: 36 bytes leftover after parsing attributes in process `syz.1.168'. [ 37.449276][ T4839] netlink: 40 bytes leftover after parsing attributes in process `syz.4.170'. [ 37.610087][ T4837] loop2: detected capacity change from 0 to 32768 [ 37.624870][ T4837] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.169 (4837) [ 37.645752][ T4837] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 37.649701][ T4837] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 37.654408][ T4837] BTRFS info (device loop2): enabling auto defrag [ 37.656655][ T4837] BTRFS info (device loop2): turning on sync discard [ 37.658192][ T4837] BTRFS info (device loop2): force clearing of disk cache [ 37.660568][ T4837] BTRFS warning (device loop2): excessive commit interval 4194304 [ 37.663899][ T4837] BTRFS info (device loop2): max_inline at 2 [ 37.667175][ T4837] BTRFS info (device loop2): disabling free space tree [ 37.685261][ T4861] netlink: 16 bytes leftover after parsing attributes in process `syz.0.179'. [ 37.764505][ T4875] netlink: 40 bytes leftover after parsing attributes in process `syz.0.181'. [ 37.801569][ T4837] BTRFS info (device loop2): enabling ssd optimizations [ 37.807290][ T4837] BTRFS info (device loop2): rebuilding free space tree [ 37.826010][ T4837] BTRFS info (device loop2): disabling free space tree [ 37.827217][ T4837] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 37.830767][ T4837] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 37.878308][ T4863] loop1: detected capacity change from 0 to 32768 [ 37.922626][ T4328] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 37.947173][ T4863] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 37.992168][ T4899] netlink: 36 bytes leftover after parsing attributes in process `syz.0.187'. [ 38.000778][ T4477] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop2 scanned by udevd (4477) [ 38.014872][ T4327] ocfs2: Unmounting device (7,1) on (node local) [ 38.139851][ T4915] nft_compat: unsupported protocol 1 [ 38.204146][ T4920] netlink: 40 bytes leftover after parsing attributes in process `syz.0.193'. [ 38.309032][ T4919] loop1: detected capacity change from 0 to 32768 [ 38.313901][ T4919] (syz.1.195,4919,0):ocfs2_verify_volume:2360 ERROR: found superblock with bad version: found 3.90, should be 0.90 [ 38.316170][ T4919] (syz.1.195,4919,0):ocfs2_verify_volume:2388 ERROR: status = -22 [ 38.319569][ T4919] (syz.1.195,4919,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 38.325472][ T4919] (syz.1.195,4919,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 38.418529][ T4926] fuse: root generation should be zero [ 38.523376][ T4941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.198'. [ 38.779750][ T4940] device syzkaller0 entered promiscuous mode [ 38.857323][ T4953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.206'. [ 38.869625][ T4516] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.990755][ T4962] loop3: detected capacity change from 0 to 1024 [ 38.997982][ T4962] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 38.999537][ T4962] EXT4-fs (loop3): orphan cleanup on readonly fs [ 39.000993][ T4962] EXT4-fs error (device loop3): ext4_free_blocks:6205: comm syz.3.208: Freeing blocks not in datazone - block = 0, count = 4096 [ 39.013952][ T4962] EXT4-fs (loop3): 1 orphan inode deleted [ 39.014878][ T4962] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 39.029175][ T4323] EXT4-fs (loop3): unmounting filesystem. [ 39.067677][ T4969] loop0: detected capacity change from 0 to 128 [ 39.071207][ T4969] EXT4-fs: Ignoring removed nobh option [ 39.090555][ T4969] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 39.122594][ T4969] fscrypt (loop0, inode 12): Can't use IV_INO_LBLK_32 policy on filesystem 'loop0' because it doesn't have stable inode numbers [ 39.171847][ T4319] EXT4-fs (loop0): unmounting filesystem. [ 39.198814][ T4981] loop3: detected capacity change from 0 to 4096 [ 39.581680][ T1517] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 39.637835][ T5036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.639671][ T5036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.715075][ T5046] loop3: detected capacity change from 0 to 256 [ 39.743955][ T4334] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 39.766114][ T1517] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 39.767874][ T1517] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 39.769184][ T1517] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.775919][ T1517] usb 1-1: config 0 descriptor?? [ 39.787468][ T1517] pwc: Askey VC010 type 2 USB webcam detected. [ 39.793621][ T5052] loop3: detected capacity change from 0 to 1024 [ 39.796407][ T5052] EXT4-fs: Ignoring removed orlov option [ 39.825312][ T5052] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 39.840499][ T4323] EXT4-fs (loop3): unmounting filesystem. [ 39.979627][ T5061] loop3: detected capacity change from 0 to 32768 [ 39.988938][ T5061] XFS: ikeep mount option is deprecated. [ 39.990768][ T5061] XFS (loop3): sunit and swidth options incompatible with the noalign option [ 40.093417][ T5075] syz.4.256 uses obsolete (PF_INET,SOCK_PACKET) [ 40.144537][ T5079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.146065][ T5079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.433842][ T1517] pwc: recv_control_msg error -32 req 02 val 2b00 [ 40.435578][ T1517] pwc: recv_control_msg error -32 req 02 val 2700 [ 40.436971][ T1517] pwc: recv_control_msg error -32 req 02 val 2c00 [ 40.438395][ T1517] pwc: recv_control_msg error -32 req 04 val 1000 [ 40.439770][ T1517] pwc: recv_control_msg error -32 req 04 val 1300 [ 40.441357][ T1517] pwc: recv_control_msg error -32 req 04 val 1400 [ 40.443906][ T1517] pwc: recv_control_msg error -32 req 02 val 2000 [ 40.445750][ T1517] pwc: recv_control_msg error -32 req 02 val 2100 [ 40.454984][ T1517] pwc: recv_control_msg error -32 req 04 val 1500 [ 40.527909][ T5091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.529484][ T5091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.657005][ T1517] pwc: recv_control_msg error -71 req 02 val 2400 [ 40.658412][ T1517] pwc: recv_control_msg error -71 req 02 val 2600 [ 40.661972][ T1517] pwc: recv_control_msg error -71 req 02 val 2900 [ 40.663263][ T1517] pwc: recv_control_msg error -71 req 02 val 2800 [ 40.665370][ T1517] pwc: recv_control_msg error -71 req 04 val 1100 [ 40.666780][ T1517] pwc: recv_control_msg error -71 req 04 val 1200 [ 40.670142][ T1517] pwc: Registered as video11. [ 40.672435][ T1517] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input2 [ 40.683240][ T1517] usb 1-1: USB disconnect, device number 2 [ 40.989155][ T5102] loop3: detected capacity change from 0 to 1024 [ 40.999905][ T5102] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 41.027663][ T5102] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 41.110083][ T5113] loop1: detected capacity change from 0 to 256 [ 41.125036][ T5113] FAT-fs (loop1): Directory bread(block 64) failed [ 41.126089][ T5113] FAT-fs (loop1): Directory bread(block 65) failed [ 41.127093][ T5113] FAT-fs (loop1): Directory bread(block 66) failed [ 41.128131][ T5113] FAT-fs (loop1): Directory bread(block 67) failed [ 41.129085][ T5113] FAT-fs (loop1): Directory bread(block 68) failed [ 41.130075][ T5113] FAT-fs (loop1): Directory bread(block 69) failed [ 41.131031][ T5113] FAT-fs (loop1): Directory bread(block 70) failed [ 41.422797][ T5113] FAT-fs (loop1): Directory bread(block 71) failed [ 41.430884][ T5113] FAT-fs (loop1): Directory bread(block 72) failed [ 41.433145][ T5113] FAT-fs (loop1): Directory bread(block 73) failed [ 41.493115][ T5120] vivid-000: ================= START STATUS ================= [ 41.494406][ T5120] vivid-000: Test Pattern: 75% Colorbar [ 41.495238][ T5120] vivid-000: Fill Percentage of Frame: 100 [ 41.496043][ T5120] vivid-000: Horizontal Movement: No Movement [ 41.496867][ T5120] vivid-000: Vertical Movement: No Movement [ 41.497687][ T5120] vivid-000: OSD Text Mode: All [ 41.508651][ T5120] vivid-000: Show Border: false [ 41.511714][ T5120] vivid-000: Show Square: false [ 41.512459][ T5120] vivid-000: Sensor Flipped Horizontally: false [ 41.513397][ T5120] vivid-000: Sensor Flipped Vertically: false [ 41.514292][ T5120] vivid-000: Insert SAV Code in Image: false [ 41.515173][ T5120] vivid-000: Insert EAV Code in Image: false [ 41.516076][ T5120] vivid-000: Insert Video Guard Band: false [ 41.516973][ T5120] vivid-000: Reduced Framerate: false [ 41.517785][ T5120] vivid-000: Enable Capture Cropping: true grabbed [ 41.544681][ T5120] vivid-000: Enable Capture Composing: true grabbed [ 41.545710][ T5120] vivid-000: Enable Capture Scaler: true grabbed [ 41.546637][ T5120] vivid-000: Timestamp Source: End of Frame [ 41.547507][ T5120] vivid-000: Colorspace: sRGB [ 41.548208][ T5120] vivid-000: Transfer Function: Default [ 41.549074][ T5120] vivid-000: Y'CbCr Encoding: Default [ 41.549837][ T5120] vivid-000: HSV Encoding: Hue 0-179 [ 41.550613][ T5120] vivid-000: Quantization: Default [ 41.551373][ T5120] vivid-000: Apply Alpha To Red Only: false [ 41.564189][ T5120] vivid-000: Standard Aspect Ratio: 4x3 [ 41.565721][ T5120] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 41.573158][ T5120] vivid-000: DV Timings: 640x480p59 inactive [ 41.574100][ T5120] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 41.578648][ T5120] vivid-000: Maximum EDID Blocks: 2 [ 41.579497][ T5120] vivid-000: Limited RGB Range (16-235): false [ 41.580747][ T5120] vivid-000: Rx RGB Quantization Range: Automatic [ 41.582744][ T5120] vivid-000: Power Present: 0x00000001 [ 41.588326][ T5120] tpg source WxH: 640x360 (R'G'B) [ 41.591759][ T5120] tpg field: 1 [ 41.592444][ T5120] tpg crop: 640x360@0x0 [ 41.593173][ T5120] tpg compose: 640x360@0x0 [ 41.593913][ T5120] tpg colorspace: 8 [ 41.595427][ T5120] tpg transfer function: 0/2 [ 41.596268][ T5120] tpg quantization: 0/1 [ 41.596976][ T5120] tpg RGB range: 0/2 [ 41.597638][ T5120] vivid-000: ================== END STATUS ================== [ 41.709250][ T5123] loop2: detected capacity change from 0 to 32768 [ 41.753874][ T5123] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 41.853606][ T4323] EXT4-fs (loop3): unmounting filesystem. [ 42.392233][ T5157] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 42.393468][ T5157] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 42.443915][ T5157] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 42.450974][ T5157] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 42.455380][ T5157] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 42.505459][ T5157] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 42.506742][ T5157] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 42.530381][ T5157] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 42.549792][ T5159] loop0: detected capacity change from 0 to 32768 [ 42.554403][ T5157] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 42.555692][ T5157] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 42.557791][ T5157] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 42.577830][ T5159] (syz.0.289,5159,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 42.582208][ T5159] (syz.0.289,5159,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 42.589398][ T5157] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 42.590771][ T5157] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 42.608905][ T5157] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 42.615088][ T5159] JBD2: Ignoring recovery information on journal [ 42.711281][ T5157] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 42.745529][ T5159] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 42.747116][ T4328] ocfs2: Unmounting device (7,2) on (node local) [ 42.804957][ T5159] [ 42.805381][ T5159] ====================================================== [ 42.806370][ T5159] WARNING: possible circular locking dependency detected [ 42.807358][ T5159] syzkaller #0 Not tainted [ 42.807985][ T5159] ------------------------------------------------------ [ 42.809033][ T5159] syz.0.289/5159 is trying to acquire lock: [ 42.809933][ T5159] ffff0000e22b5108 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0xf8/0x278c [ 42.811818][ T5159] [ 42.811818][ T5159] but task is already holding lock: [ 42.812946][ T5159] ffff0000e22aea20 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1a8/0x22c [ 42.814582][ T5159] [ 42.814582][ T5159] which lock already depends on the new lock. [ 42.814582][ T5159] [ 42.816047][ T5159] [ 42.816047][ T5159] the existing dependency chain (in reverse order) is: [ 42.817286][ T5159] [ 42.817286][ T5159] -> #7 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 42.818656][ T5159] down_write+0x5c/0x88 [ 42.819363][ T5159] ocfs2_lock_global_qf+0x1a8/0x22c [ 42.820247][ T5159] ocfs2_acquire_dquot+0x268/0xac4 [ 42.821117][ T5159] dqget+0x654/0xccc [ 42.821761][ T5159] ocfs2_setattr+0xd9c/0x18d4 [ 42.822555][ T5159] notify_change+0xb0c/0xdcc [ 42.823258][ T5159] chown_common+0x414/0x574 [ 42.823986][ T5159] ksys_fchown+0xe0/0x158 [ 42.824679][ T5159] __arm64_sys_fchown+0x7c/0x94 [ 42.825435][ T5159] invoke_syscall+0x98/0x2bc [ 42.826224][ T5159] el0_svc_common+0x138/0x258 [ 42.826939][ T5159] do_el0_svc+0x58/0x13c [ 42.827628][ T5159] el0_svc+0x58/0x138 [ 42.828229][ T5159] el0t_64_sync_handler+0x84/0xf0 [ 42.829071][ T5159] el0t_64_sync+0x18c/0x190 [ 42.829831][ T5159] [ 42.829831][ T5159] -> #6 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}: [ 42.831343][ T5159] down_write+0x5c/0x88 [ 42.832023][ T5159] ocfs2_lock_global_qf+0x18c/0x22c [ 42.832895][ T5159] ocfs2_acquire_dquot+0x268/0xac4 [ 42.833712][ T5159] dqget+0x654/0xccc [ 42.834419][ T5159] ocfs2_setattr+0xd9c/0x18d4 [ 42.835178][ T5159] notify_change+0xb0c/0xdcc [ 42.835934][ T5159] chown_common+0x414/0x574 [ 42.836647][ T5159] ksys_fchown+0xe0/0x158 [ 42.837342][ T5159] __arm64_sys_fchown+0x7c/0x94 [ 42.838147][ T5159] invoke_syscall+0x98/0x2bc [ 42.838991][ T5159] el0_svc_common+0x138/0x258 [ 42.839822][ T5159] do_el0_svc+0x58/0x13c [ 42.840551][ T5159] el0_svc+0x58/0x138 [ 42.841178][ T5159] el0t_64_sync_handler+0x84/0xf0 [ 42.841971][ T5159] el0t_64_sync+0x18c/0x190 [ 42.842710][ T5159] [ 42.842710][ T5159] -> #5 (&dquot->dq_lock){+.+.}-{3:3}: [ 42.843858][ T5159] __mutex_lock_common+0x190/0x1f38 [ 42.844666][ T5159] mutex_lock_nested+0x38/0x44 [ 42.845406][ T5159] dquot_commit+0x50/0x1c4 [ 42.846127][ T5159] ext4_write_dquot+0x1b4/0x31c [ 42.846935][ T5159] ext4_mark_dquot_dirty+0xe8/0x140 [ 42.847734][ T5159] mark_all_dquot_dirty+0x1f8/0x424 [ 42.848563][ T5159] __dquot_free_space+0x744/0xa80 [ 42.849313][ T5159] ext4_free_blocks+0x18c8/0x23cc [ 42.850176][ T5159] ext4_ext_remove_space+0x1698/0x39c4 [ 42.851068][ T5159] ext4_ext_truncate+0x164/0x20c [ 42.851798][ T5159] ext4_truncate+0x9dc/0x1078 [ 42.852539][ T5159] ext4_evict_inode+0xc04/0x1270 [ 42.853365][ T5159] evict+0x3c8/0x810 [ 42.854018][ T5159] iput+0x764/0x7f4 [ 42.854653][ T5159] ext4_process_orphan+0x240/0x2b4 [ 42.855437][ T5159] ext4_orphan_cleanup+0x908/0x104c [ 42.856239][ T5159] ext4_fill_super+0x6440/0x68a8 [ 42.856996][ T5159] get_tree_bdev+0x358/0x544 [ 42.857735][ T5159] ext4_get_tree+0x28/0x38 [ 42.858444][ T5159] vfs_get_tree+0x90/0x274 [ 42.859122][ T5159] do_new_mount+0x228/0x810 [ 42.859854][ T5159] path_mount+0x5b4/0xe78 [ 42.860563][ T5159] __arm64_sys_mount+0x49c/0x584 [ 42.861312][ T5159] invoke_syscall+0x98/0x2bc [ 42.862044][ T5159] el0_svc_common+0x138/0x258 [ 42.862822][ T5159] do_el0_svc+0x58/0x13c [ 42.863478][ T5159] el0_svc+0x58/0x138 [ 42.864256][ T5159] el0t_64_sync_handler+0x84/0xf0 [ 42.865089][ T5159] el0t_64_sync+0x18c/0x190 [ 42.865869][ T5159] [ 42.865869][ T5159] -> #4 (&ei->i_data_sem){++++}-{3:3}: [ 42.866999][ T5159] down_write+0x5c/0x88 [ 42.867678][ T5159] ext4_map_blocks+0x7c4/0x1770 [ 42.868470][ T5159] ext4_writepages+0xd8c/0x284c [ 42.869193][ T5159] do_writepages+0x2c0/0x4fc [ 42.869958][ T5159] __writeback_single_inode+0x164/0x157c [ 42.870803][ T5159] writeback_sb_inodes+0x824/0x1404 [ 42.871637][ T5159] __writeback_inodes_wb+0x110/0x394 [ 42.872553][ T5159] wb_writeback+0x414/0xfb0 [ 42.873332][ T5159] wb_workfn+0xac0/0xd98 [ 42.874083][ T5159] process_one_work+0x7f4/0x13a8 [ 42.874877][ T5159] worker_thread+0x8c8/0xfbc [ 42.875625][ T5159] kthread+0x250/0x2d8 [ 42.876376][ T5159] ret_from_fork+0x10/0x20 [ 42.877065][ T5159] [ 42.877065][ T5159] -> #3 (jbd2_handle){++++}-{0:0}: [ 42.878088][ T5159] start_this_handle+0xfe0/0x122c [ 42.878914][ T5159] jbd2__journal_start+0x288/0x51c [ 42.879710][ T5159] jbd2_journal_start+0x3c/0x4c [ 42.880450][ T5159] ocfs2_start_trans+0x380/0x6c4 [ 42.881303][ T5159] ocfs2_shutdown_local_alloc+0x1ac/0x7e4 [ 42.882272][ T5159] ocfs2_dismount_volume+0x1f0/0x93c [ 42.883056][ T5159] ocfs2_put_super+0x108/0x390 [ 42.883828][ T5159] generic_shutdown_super+0x130/0x324 [ 42.884654][ T5159] kill_block_super+0x70/0xdc [ 42.885445][ T5159] deactivate_locked_super+0xac/0x124 [ 42.886320][ T5159] deactivate_super+0xe8/0x108 [ 42.887128][ T5159] cleanup_mnt+0x37c/0x404 [ 42.887853][ T5159] __cleanup_mnt+0x20/0x30 [ 42.888610][ T5159] task_work_run+0x1ec/0x270 [ 42.889290][ T5159] do_notify_resume+0x2038/0x2b28 [ 42.890092][ T5159] el0_svc+0x98/0x138 [ 42.890709][ T5159] el0t_64_sync_handler+0x84/0xf0 [ 42.891522][ T5159] el0t_64_sync+0x18c/0x190 [ 42.892252][ T5159] [ 42.892252][ T5159] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 42.893501][ T5159] down_read+0x64/0x304 [ 42.894208][ T5159] ocfs2_start_trans+0x374/0x6c4 [ 42.895016][ T5159] ocfs2_shutdown_local_alloc+0x1ac/0x7e4 [ 42.895915][ T5159] ocfs2_dismount_volume+0x1f0/0x93c [ 42.896765][ T5159] ocfs2_put_super+0x108/0x390 [ 42.897512][ T5159] generic_shutdown_super+0x130/0x324 [ 42.898332][ T5159] kill_block_super+0x70/0xdc [ 42.899124][ T5159] deactivate_locked_super+0xac/0x124 [ 42.899967][ T5159] deactivate_super+0xe8/0x108 [ 42.900764][ T5159] cleanup_mnt+0x37c/0x404 [ 42.901555][ T5159] __cleanup_mnt+0x20/0x30 [ 42.902348][ T5159] task_work_run+0x1ec/0x270 [ 42.903184][ T5159] do_notify_resume+0x2038/0x2b28 [ 42.904050][ T5159] el0_svc+0x98/0x138 [ 42.904741][ T5159] el0t_64_sync_handler+0x84/0xf0 [ 42.905566][ T5159] el0t_64_sync+0x18c/0x190 [ 42.906353][ T5159] [ 42.906353][ T5159] -> #1 (sb_internal#4){.+.+}-{0:0}: [ 42.907408][ T5159] ocfs2_start_trans+0x20c/0x6c4 [ 42.908172][ T5159] ocfs2_mknod+0xc7c/0x1f18 [ 42.908933][ T5159] ocfs2_create+0x19c/0x4f0 [ 42.909673][ T5159] path_openat+0x112c/0x2680 [ 42.910426][ T5159] do_filp_open+0x174/0x344 [ 42.911181][ T5159] do_sys_openat2+0x128/0x3d8 [ 42.911987][ T5159] __arm64_sys_openat+0x120/0x154 [ 42.912845][ T5159] invoke_syscall+0x98/0x2bc [ 42.913568][ T5159] el0_svc_common+0x138/0x258 [ 42.914273][ T5159] do_el0_svc+0x58/0x13c [ 42.915004][ T5159] el0_svc+0x58/0x138 [ 42.915703][ T5159] el0t_64_sync_handler+0x84/0xf0 [ 42.916526][ T5159] el0t_64_sync+0x18c/0x190 [ 42.917294][ T5159] [ 42.917294][ T5159] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 42.918826][ T5159] __lock_acquire+0x293c/0x6544 [ 42.919665][ T5159] lock_acquire+0x20c/0x644 [ 42.920411][ T5159] down_write+0x5c/0x88 [ 42.921083][ T5159] ocfs2_reserve_local_alloc_bits+0xf8/0x278c [ 42.922047][ T5159] ocfs2_reserve_clusters_with_limit+0x198/0x9e0 [ 42.923033][ T5159] ocfs2_lock_allocators+0x27c/0x518 [ 42.923934][ T5159] ocfs2_extend_allocation+0x328/0x15ec [ 42.924754][ T5159] ocfs2_extend_no_holes+0x1a8/0x424 [ 42.925649][ T5159] ocfs2_acquire_dquot+0x550/0xac4 [ 42.926443][ T5159] dqget+0x654/0xccc [ 42.927096][ T5159] ocfs2_setattr+0xd9c/0x18d4 [ 42.927895][ T5159] notify_change+0xb0c/0xdcc [ 42.928671][ T5159] chown_common+0x414/0x574 [ 42.929513][ T5159] ksys_fchown+0xe0/0x158 [ 42.930266][ T5159] __arm64_sys_fchown+0x7c/0x94 [ 42.931058][ T5159] invoke_syscall+0x98/0x2bc [ 42.931828][ T5159] el0_svc_common+0x138/0x258 [ 42.932568][ T5159] do_el0_svc+0x58/0x13c [ 42.933289][ T5159] el0_svc+0x58/0x138 [ 42.933940][ T5159] el0t_64_sync_handler+0x84/0xf0 [ 42.934758][ T5159] el0t_64_sync+0x18c/0x190 [ 42.935514][ T5159] [ 42.935514][ T5159] other info that might help us debug this: [ 42.935514][ T5159] [ 42.937022][ T5159] Chain exists of: [ 42.937022][ T5159] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7 --> &ocfs2_quota_ip_alloc_sem_key [ 42.937022][ T5159] [ 42.940042][ T5159] Possible unsafe locking scenario: [ 42.940042][ T5159] [ 42.941187][ T5159] CPU0 CPU1 [ 42.942023][ T5159] ---- ---- [ 42.942823][ T5159] lock(&ocfs2_quota_ip_alloc_sem_key); [ 42.943628][ T5159] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7); [ 42.944936][ T5159] lock(&ocfs2_quota_ip_alloc_sem_key); [ 42.946132][ T5159] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 42.947214][ T5159] [ 42.947214][ T5159] *** DEADLOCK *** [ 42.947214][ T5159] [ 42.948368][ T5159] 5 locks held by syz.0.289/5159: [ 42.949088][ T5159] #0: ffff0000d116a460 (sb_writers#23){.+.+}-{0:0}, at: mnt_want_write_file+0x64/0x1e8 [ 42.950515][ T5159] #1: ffff0000e22a9808 (&type->i_mutex_dir_key#17){++++}-{3:3}, at: chown_common+0x2ac/0x574 [ 42.952071][ T5159] #2: ffff0000f667a0a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x25c/0xac4 [ 42.953624][ T5159] #3: ffff0000e22aed88 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x18c/0x22c [ 42.955565][ T5159] #4: ffff0000e22aea20 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1a8/0x22c [ 42.957277][ T5159] [ 42.957277][ T5159] stack backtrace: [ 42.958135][ T5159] CPU: 1 PID: 5159 Comm: syz.0.289 Not tainted syzkaller #0 [ 42.959140][ T5159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 42.960584][ T5159] Call trace: [ 42.961005][ T5159] dump_backtrace+0x1c8/0x1f4 [ 42.961685][ T5159] show_stack+0x2c/0x3c [ 42.962288][ T5159] __dump_stack+0x30/0x40 [ 42.962902][ T5159] dump_stack_lvl+0xf8/0x160 [ 42.963573][ T5159] dump_stack+0x1c/0x5c [ 42.964123][ T5159] print_circular_bug+0x148/0x1b0 [ 42.964872][ T5159] check_noncircular+0x240/0x2d4 [ 42.965525][ T5159] __lock_acquire+0x293c/0x6544 [ 42.966247][ T5159] lock_acquire+0x20c/0x644 [ 42.966959][ T5159] down_write+0x5c/0x88 [ 42.967610][ T5159] ocfs2_reserve_local_alloc_bits+0xf8/0x278c [ 42.968526][ T5159] ocfs2_reserve_clusters_with_limit+0x198/0x9e0 [ 42.969439][ T5159] ocfs2_lock_allocators+0x27c/0x518 [ 42.970190][ T5159] ocfs2_extend_allocation+0x328/0x15ec [ 42.971017][ T5159] ocfs2_extend_no_holes+0x1a8/0x424 [ 42.971847][ T5159] ocfs2_acquire_dquot+0x550/0xac4 [ 42.972649][ T5159] dqget+0x654/0xccc [ 42.973240][ T5159] ocfs2_setattr+0xd9c/0x18d4 [ 42.973955][ T5159] notify_change+0xb0c/0xdcc [ 42.974625][ T5159] chown_common+0x414/0x574 [ 42.975265][ T5159] ksys_fchown+0xe0/0x158 [ 42.975901][ T5159] __arm64_sys_fchown+0x7c/0x94 [ 42.976640][ T5159] invoke_syscall+0x98/0x2bc [ 42.977287][ T5159] el0_svc_common+0x138/0x258 [ 42.977914][ T5159] do_el0_svc+0x58/0x13c [ 42.978573][ T5159] el0_svc+0x58/0x138 [ 42.979161][ T5159] el0t_64_sync_handler+0x84/0xf0 [ 42.979919][ T5159] el0t_64_sync+0x18c/0x190 [ 43.013019][ T4319] ocfs2: Unmounting device (7,0) on (node local) [ 44.411439][ T4334] Bluetooth: hci0: command 0x0c1a tx timeout [ 44.571464][ T4322] Bluetooth: hci3: command 0x0c1a tx timeout [ 44.572439][ T4322] Bluetooth: hci2: command 0x0c1a tx timeout [ 44.573347][ T4322] Bluetooth: hci1: command 0x0c1a tx timeout [ 44.651759][ T4329] Bluetooth: hci4: command 0x0c1a tx timeout [ 46.491427][ T4334] Bluetooth: hci0: command 0x0406 tx timeout [ 46.651437][ T4329] Bluetooth: hci1: command 0x0406 tx timeout [ 46.651461][ T4334] Bluetooth: hci2: command 0x0406 tx timeout [ 46.661500][ T4322] Bluetooth: hci3: command 0x0406 tx timeout [ 46.731435][ T4322] Bluetooth: hci4: command 0x0406 tx timeout