last executing test programs: 5.459743577s ago: executing program 2 (id=238): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x4031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') symlinkat(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f0000001300)=""/4096, 0x1000) 5.307793797s ago: executing program 2 (id=239): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x10012, &(0x7f0000001e80)=ANY=[@ANYBLOB='codepage=cp775,umask=00000000007777,iocharset=koi8-ru,\x00'/64, @ANYBLOB="7b467be6d3ffd5dbc39d475a3efbcc1a8227f7877fce1eaf2d016780277d325666f07a12652e81e75be5e881b521fcda9e61566e2b548201f553091a16ad9bb6888f170e5d63f7a84c585f22f2397bf6c9fe0ad346d27e428fa6322e2a05eddacbf8af7162ea449789312db3927438", @ANYRES16], 0x4, 0x345, &(0x7f00000007c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x204401, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) rmdir(&(0x7f0000000040)='./file1\x00') open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x12a1400, 0x0, 0x7, 0x0, &(0x7f0000000140)) 4.516283692s ago: executing program 2 (id=243): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x4, 0x7f, 0x4232, 0x0, 0x81, 0x9c1, 0x8001, 0x5, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xdddd1000, 0x80300}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.987482555s ago: executing program 2 (id=250): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x85, 0x0, 0x0, 0xc7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 3.563558518s ago: executing program 4 (id=259): timer_create(0x3, 0x0, &(0x7f0000000280)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") timer_gettime(r0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) rt_sigaction(0xe, &(0x7f0000000180)={&(0x7f0000000040)="f30f1efc66450f2832c482adbcaf07000000c4e1e050000daa9c43713ef2400f1ed3c4c2e93be7f2262e669f8f88a4a2e100430f12957b280000653ed9fa", 0x8000000, 0x0, {[0x8000]}}, 0x0, 0x8, &(0x7f0000000200)) 3.107909861s ago: executing program 4 (id=262): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c03010902120001040020000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f00000002c0)={0x40, 0x7, 0x7, "ad596d52a2a05c"}, 0x0, 0x0}) 3.083454751s ago: executing program 2 (id=263): open(&(0x7f0000000240)='./file2\x00', 0x145142, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b1b", @ANYRES64=r0]) 2.666764974s ago: executing program 3 (id=269): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000fffd29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000223803001c0012800c0001006d6163766c616e000c000280080009000800000008000500", @ANYRES32=r0, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 2.505271465s ago: executing program 3 (id=271): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0xffffffffffffffe7, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0x2, 0x2}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x10, 0xffffff81, 0x70180000}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x8800) 2.412337625s ago: executing program 0 (id=272): r0 = io_uring_setup(0x75c0, &(0x7f0000000ac0)={0x0, 0x9de6, 0x40, 0x2, 0x4800020}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) write$FUSE_GETXATTR(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 2.260340696s ago: executing program 3 (id=273): writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000280)="550227b8b1248a34b40fbd1afc9c47e52bd232c9ebd1c12409c147f26d4883bd48afa89181bd9fb35412efbe4421fa751bfe0c9492d95b13e34d388ec6ec98b42e9fa90a86fc647ced25408754ebc0ed19c1eab6a0c05bfb03a9203f4ff5c3e5d96ce132bbe715d6e7e8c73706781b78d3ca10c2e8d4336930582aa188b20875d4c1", 0x82}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000008c0)={r2, &(0x7f0000000300), 0x0}, 0x20) 2.147929207s ago: executing program 3 (id=274): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, 0x0) 2.135791157s ago: executing program 0 (id=275): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="70000000140009050000000000000000020100ff", @ANYRES32=r3, @ANYBLOB="1400060006000000000000f0000000000000000008000200ac4193091a75e5aa0bdb5979c316b2f59867f3fe61f9f302caa4763121445657ea63c33cd641c7cbf21cf42b18840e9b9b3d02ab43721f508d139d427aeac0f8a35babeba527599da378424c53ff5fa654bfc28cbf07231f04005925729c792e4cec58abcd6c8b8e936484a60b73f5c9b7f26034cbe3741893ef483d748078a04b527c7b5c8a71deafa90a3a675a74d131084776ce644c995c87c53890c8d85b18c673b0e34a0596f3fb4ce3df245c2b139c8bd18acb0b0ae3248c8ea1a52fa97c6cb39a676baae4e5b2a5e676a38a9e78acd1042cf9718f09a6c3fa6e7441d2ed6397fead7b"], 0x70}}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20}, {0x6, 0xfd, 0x0, 0x1ff}]}) setsockopt$inet_opts(r0, 0x0, 0x6, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000100)) r5 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000700)={0x1, 0x1, 0x2, "09b2263f84b90f39020b13bbeb3ad94b26418b38a7bfb85c9b1b7acf08bc60aa", 0x34343459}) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x80, 0x4) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0xe3000, 0x0, 0xfffffeda, 0x0, 0x0, 0x0) 2.013794387s ago: executing program 3 (id=276): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/81, 0x51}], 0x1) 1.375901182s ago: executing program 1 (id=279): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x380004, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c) 1.337338642s ago: executing program 1 (id=280): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 1.256313522s ago: executing program 1 (id=281): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x1, 0x0, @pic={0xd8, 0xff, 0x40, 0x40, 0x7f, 0xff, 0x7, 0x7f, 0x4, 0x8, 0x8, 0x3, 0x4, 0x7f, 0x9, 0xe2}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000400)={0x0, 0x0, @pic={0x94, 0x68, 0x0, 0x8, 0x1, 0xca, 0xc0, 0x40, 0x7, 0x2, 0x1, 0x7b, 0x80, 0xf3, 0x20, 0x5}}) 1.063826143s ago: executing program 3 (id=282): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902"], 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) userfaultfd(0x1) pipe(&(0x7f00000000c0)) socket$inet6_sctp(0xa, 0x1, 0x84) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x4, 0x4, 0x9}, 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, r3, 0x25, 0x2, @val=@netfilter={0x3, 0x1, 0x0, 0x1}}, 0x20) syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[], 0x0) 1.052710183s ago: executing program 1 (id=283): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000780)='netlink_extack\x00', r0, 0x0, 0xb0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000440)=ANY=[@ANYBLOB="dc0000002d00010027bd7000fcdbdf2504000000040012800a0009"], 0xdc}}, 0x8004) 1.026580484s ago: executing program 0 (id=284): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) syz_emit_ethernet(0x76, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000aaaaaaaaaaaa08004500006800000000002c"], 0x0) 948.540534ms ago: executing program 0 (id=285): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0xa42802, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x306, &(0x7f0000000240)="$eJzs3U9v00gYx/HfOEmbdquut+1qpb3sqruV4FJR4IC4BKFcuXNClCaVqlpFtEUCLgTEEfECuPMCuPAOuHAB8QbgxIkX0JvRTOzETmwnbZOmf74fqdFkPON5Btv1PJaKBeDCul3/9u7aD/tjpJJKkm5KnqSqVJb0p/6qPt7Z39oPmo2iHZVcD/tj1O5p+tps7DSzutp+rkfEt9/KmkvWYTzCMLz1fdJBYOLc1Z/Bk6aj69Btr55wXOPSkv6ZdAwnLXmAzYEO9ETzEwwHAHAKRPd/L7pNzLkqI8+TVqLb/rm6/x9MOoDRuh70VYWFHRL3f7e6C409vr+7Td18z6VwdrsXZ4nDBFPp+T6l9pmVWmCaQVmli8Wb2dwqa3XjhRqeXqoWSTRbcp+N9qkbS0Y7Ff1zJEZfzshNC+TPvaI7s+3ZuBVlrzikza2gOW0LGfEvDjHi1GGiHcR8Ml/MPePrrRqd9V85NHYUN5Dfc6S8io3/Sv4ef3O9bCtFaX+tVvNSTf5wg/ydnsqAc6qanZEk9xk/IGh1IiiK0429oPRjhfbs1gb0Wszq5Xe+5fRaSvUqRWfC6sbDoPBRynjEUzRvzF2zrJ/6oHpi/e/Z+FbUvTJ7r+IU41pGZ0Z7Pjknadm19PvuHN3L5d9OBJHpw04Nkg75tOy1HuiG5veePtsuBUFz1xbiQ7S9HtesB4/mdo0rBM3Kq/SmdKFg0/ELJcU1M1GMiTZqdRuH1vMwHHbP4fhiDoLLI92h/f3RqWkp+1jYQ9ip8cY0rwtfqH+WTkEYxy+EoZSzaeS/n3AK7Zn4oLuvZc1MOiKcMLvuMu38z63ko1WdS5Hsh1+wTi9OMpXa41ong0svBRfc52x+Bpe529wMLjHi1Zyc0eVc/12S/k9UGhWO6EdxnhOmrq+6z/N/AAAAAAAAAAAAAAAAAACAs+ZIfzzw8X3RHwL1FSY9RwAAAAAAAAAAAAAAAAAAAAAAzrojvf836/+Id+//9TPf/zsbF0b1/t/i9wIBGNKvAAAA//+VVHHB") sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0205fc090900000027bd7000070000000500060000000e000a004e24fffffffdfc010000000000000000000000000000988500000000000002000100"], 0x48}, 0x1, 0x400000000000000}, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) read$FUSE(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) 940.834274ms ago: executing program 4 (id=286): ioperm(0x23d, 0x59, 0x1000) r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000100)='./control\x00', 0xa0) mount$afs(&(0x7f0000000480)=ANY=[@ANYBLOB='%syz1:'], &(0x7f00000000c0)='./control\x00', &(0x7f0000000000), 0x200000, 0x0) 819.890355ms ago: executing program 1 (id=287): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r0 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x17b}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe) 788.308995ms ago: executing program 4 (id=288): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={0x24, r1, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x18) 745.875985ms ago: executing program 1 (id=289): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) 639.767916ms ago: executing program 0 (id=290): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) io_setup(0x25dc, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000c00)={0x0, 0x0, 0x4, 0x4e9b, 0x0, 0xf0}) 636.185476ms ago: executing program 4 (id=291): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000000)={0x1, 0x0, {0x4, 0x7, 0x26, 0x7, 0x3, 0x9, 0x1, 0x6}}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r2, 0x40, 0x75, 0x100}, &(0x7f0000000080)=0x10) 536.646886ms ago: executing program 4 (id=292): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/81, 0x51}], 0x1) 447.852147ms ago: executing program 0 (id=293): setresuid(0x0, 0xee01, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) process_madvise(r2, 0x0, 0x0, 0x3, 0x0) 0s ago: executing program 2 (id=294): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3200004, &(0x7f0000000140)=ANY=[@ANYBLOB='nls=macinuit,decompose,umask=00000000000000000010000,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00\x00\x00\x00'], 0x3, 0x6b9, &(0x7f0000000a00)="$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") llistxattr(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0xf8) truncate(0x0, 0x42d9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.29' (ED25519) to the list of known hosts. [ 51.223114][ T4251] cgroup: Unknown subsys name 'net' [ 51.327831][ T4251] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.547732][ T4251] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 54.445287][ T4278] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.445286][ T4277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.446849][ T4277] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.453177][ T4278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.461630][ T4277] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.468620][ T4278] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.475421][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.481897][ T4278] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.488774][ T4277] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.496452][ T4278] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.502704][ T4277] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.509296][ T4278] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.524345][ T4277] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.530860][ T4278] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.537860][ T4277] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.546191][ T4278] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.551754][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.558409][ T4278] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.565297][ T4277] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.572111][ T4278] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.579242][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.585545][ T4278] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.593055][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.609481][ T4273] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.615724][ T4277] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.618064][ T4278] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.633899][ T4277] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.641391][ T4277] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.649003][ T4277] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.652964][ T4274] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.996669][ T4269] chnl_net:caif_netlink_parms(): no params data found [ 55.081308][ T4263] chnl_net:caif_netlink_parms(): no params data found [ 55.206294][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 55.215542][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.222805][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.231102][ T4269] device bridge_slave_0 entered promiscuous mode [ 55.242609][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.249696][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.257509][ T4269] device bridge_slave_1 entered promiscuous mode [ 55.284624][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 55.329245][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 55.340441][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.349821][ T4263] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.357004][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.365111][ T4263] device bridge_slave_0 entered promiscuous mode [ 55.377189][ T4263] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.384433][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.392361][ T4263] device bridge_slave_1 entered promiscuous mode [ 55.411286][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.467712][ T4263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.496483][ T4263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.505826][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.513162][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.521208][ T4264] device bridge_slave_0 entered promiscuous mode [ 55.531168][ T4269] team0: Port device team_slave_0 added [ 55.558090][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.565241][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.573403][ T4264] device bridge_slave_1 entered promiscuous mode [ 55.581823][ T4269] team0: Port device team_slave_1 added [ 55.638124][ T4263] team0: Port device team_slave_0 added [ 55.645901][ T4263] team0: Port device team_slave_1 added [ 55.665710][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.672981][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.680618][ T4265] device bridge_slave_0 entered promiscuous mode [ 55.690216][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.697577][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.705747][ T4266] device bridge_slave_0 entered promiscuous mode [ 55.721557][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.731512][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.738577][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.764740][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.776779][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.784221][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.792275][ T4265] device bridge_slave_1 entered promiscuous mode [ 55.799149][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.807030][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.814768][ T4266] device bridge_slave_1 entered promiscuous mode [ 55.828382][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.837901][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.845066][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.871043][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.899533][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.906573][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.932810][ T4263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.945295][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.952613][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.978760][ T4263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.039509][ T4264] team0: Port device team_slave_0 added [ 56.047073][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.058277][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.085064][ T4264] team0: Port device team_slave_1 added [ 56.094163][ T4269] device hsr_slave_0 entered promiscuous mode [ 56.100887][ T4269] device hsr_slave_1 entered promiscuous mode [ 56.109831][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.120587][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.157886][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.164969][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.196337][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.224200][ T4263] device hsr_slave_0 entered promiscuous mode [ 56.231617][ T4263] device hsr_slave_1 entered promiscuous mode [ 56.238525][ T4263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.246396][ T4263] Cannot create hsr debugfs directory [ 56.261039][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.268103][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.294064][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.313089][ T4266] team0: Port device team_slave_0 added [ 56.348218][ T4265] team0: Port device team_slave_0 added [ 56.355678][ T4266] team0: Port device team_slave_1 added [ 56.362510][ T4265] team0: Port device team_slave_1 added [ 56.444026][ T4264] device hsr_slave_0 entered promiscuous mode [ 56.451849][ T4264] device hsr_slave_1 entered promiscuous mode [ 56.458429][ T4264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.466227][ T4264] Cannot create hsr debugfs directory [ 56.472921][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.479869][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.506837][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.518314][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.525432][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.551448][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.580686][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.587706][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.613722][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.625421][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.632543][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.658917][ T4267] Bluetooth: hci3: command 0x0409 tx timeout [ 56.659480][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.732438][ T4273] Bluetooth: hci1: command 0x0409 tx timeout [ 56.734494][ T4267] Bluetooth: hci2: command 0x0409 tx timeout [ 56.738622][ T4273] Bluetooth: hci0: command 0x0409 tx timeout [ 56.744740][ T4277] Bluetooth: hci4: command 0x0409 tx timeout [ 56.794701][ T4266] device hsr_slave_0 entered promiscuous mode [ 56.801397][ T4266] device hsr_slave_1 entered promiscuous mode [ 56.808029][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.815986][ T4266] Cannot create hsr debugfs directory [ 56.836994][ T4265] device hsr_slave_0 entered promiscuous mode [ 56.843889][ T4265] device hsr_slave_1 entered promiscuous mode [ 56.850374][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.858368][ T4265] Cannot create hsr debugfs directory [ 57.018956][ T4263] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.043228][ T4263] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.075867][ T4263] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.088460][ T4263] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.128931][ T4269] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.143167][ T4269] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.159108][ T4269] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.171975][ T4269] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.209376][ T4264] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.221290][ T4264] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.254507][ T4264] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.268033][ T4264] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.327654][ T4263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.339885][ T4266] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.349329][ T4266] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.382703][ T4266] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.403575][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.415113][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.426299][ T4263] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.437280][ T4266] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.473024][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.482531][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.491363][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.498672][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.507753][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.521470][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.531087][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.539825][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.547063][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.556610][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.567191][ T4265] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.578783][ T4265] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.603157][ T4265] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.614284][ T4265] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.627548][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.655151][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.674190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.686773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.695759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.715466][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.727754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.735968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.745251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.754299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.776367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.785649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.795333][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.802467][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.810734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.820852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.829581][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.836749][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.858335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.866542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.875744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.887352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.895798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.905318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.916749][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.934756][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.948444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.978440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.989024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.022223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.030030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.047005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.057750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.070068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.085293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.096306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.108600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.117259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.135309][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.149907][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.178536][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.186921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.197656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.222995][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.230110][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.238884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.247192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.283956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.300551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.310463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.324237][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.331349][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.347252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.356353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.365635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.374533][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.381629][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.390086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.398877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.407473][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.414577][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.423149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.431670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.445364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.468518][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.479810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.497138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.508046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.521955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.533564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.554046][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.570183][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.580963][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.603373][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.610832][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.618642][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.627369][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.648214][ T4263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.659081][ T4264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.674180][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.687728][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.695140][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.705877][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.714642][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.723436][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.731741][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.732369][ T4277] Bluetooth: hci3: command 0x041b tx timeout [ 58.741169][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.754561][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.763948][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.772604][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.780018][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.789525][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.799528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.808581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.812384][ T4277] Bluetooth: hci4: command 0x041b tx timeout [ 58.822525][ T4276] Bluetooth: hci2: command 0x041b tx timeout [ 58.822632][ T4267] Bluetooth: hci0: command 0x041b tx timeout [ 58.828518][ T4276] Bluetooth: hci1: command 0x041b tx timeout [ 58.839652][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.868068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.883185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.891848][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.899029][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.910224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.919400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.927998][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.935133][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.943547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.961731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.979793][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.002573][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.062485][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.071176][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.107466][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.140518][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.203846][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.218611][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.241914][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.250603][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.259864][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.276249][ T4265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.287601][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.339717][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.362973][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.371480][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.393357][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.401962][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.422726][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.430257][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.450236][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.460734][ T4263] device veth0_vlan entered promiscuous mode [ 59.479497][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.498164][ T4263] device veth1_vlan entered promiscuous mode [ 59.555759][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.569299][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.602487][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.609983][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.633246][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.652441][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.670179][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.713205][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.721572][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.737102][ T4263] device veth0_macvtap entered promiscuous mode [ 59.755056][ T4264] device veth0_vlan entered promiscuous mode [ 59.778622][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.787036][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.796947][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.808089][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.817222][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.826464][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.838131][ T4263] device veth1_macvtap entered promiscuous mode [ 59.862814][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.871268][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.879954][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.889270][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.898195][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.906827][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.916546][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.925683][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.937275][ T4264] device veth1_vlan entered promiscuous mode [ 59.953184][ T4269] device veth0_vlan entered promiscuous mode [ 59.961426][ T4266] device veth0_vlan entered promiscuous mode [ 59.972655][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.981049][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.990589][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.999719][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.008405][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.023360][ T4269] device veth1_vlan entered promiscuous mode [ 60.031241][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.039703][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.049167][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.056912][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.071285][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.089372][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.107280][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.115144][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.123718][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.132348][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.141002][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.150941][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.164925][ T4266] device veth1_vlan entered promiscuous mode [ 60.185699][ T4263] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.196286][ T4263] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.205162][ T4263] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.214903][ T4263] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.239745][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.247970][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.257454][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.266974][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.276698][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.285223][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.296794][ T4264] device veth0_macvtap entered promiscuous mode [ 60.316583][ T4264] device veth1_macvtap entered promiscuous mode [ 60.357563][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.371857][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.381457][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.391564][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.400522][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.409988][ T4269] device veth0_macvtap entered promiscuous mode [ 60.424714][ T4266] device veth0_macvtap entered promiscuous mode [ 60.455976][ T4269] device veth1_macvtap entered promiscuous mode [ 60.469463][ T4266] device veth1_macvtap entered promiscuous mode [ 60.495875][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.507268][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.518839][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.531112][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.542012][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.555113][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.575741][ T4265] device veth0_vlan entered promiscuous mode [ 60.584797][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.594064][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.602510][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.610579][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.619966][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.629036][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.638192][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.646834][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.656049][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.664807][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.673032][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.688672][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.699383][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.709659][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.720404][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.731962][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.743092][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.754303][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.765023][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.776262][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.787550][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.801342][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.812320][ T4276] Bluetooth: hci3: command 0x040f tx timeout [ 60.819180][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.829172][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.839814][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.849792][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.860314][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.871432][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.879547][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.888497][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.897086][ T4276] Bluetooth: hci1: command 0x040f tx timeout [ 60.897124][ T4276] Bluetooth: hci4: command 0x040f tx timeout [ 60.903052][ T4267] Bluetooth: hci0: command 0x040f tx timeout [ 60.904842][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.909251][ T4267] Bluetooth: hci2: command 0x040f tx timeout [ 60.916075][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.938250][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.947091][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.956915][ T4264] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.965794][ T4264] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.975232][ T4264] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.985936][ T4264] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.002415][ T4266] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.011118][ T4266] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.019948][ T4266] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.028941][ T4266] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.043720][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.054765][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.064937][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.075630][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.085902][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.096694][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.107769][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.117826][ T4265] device veth1_vlan entered promiscuous mode [ 61.130582][ T4343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.141699][ T4343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.163879][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.171911][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.185014][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.193548][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.214425][ T4269] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.223568][ T4269] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.233224][ T4269] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.241919][ T4269] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.281630][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.309097][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.319973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.330952][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.334721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.386971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.395085][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.411562][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.422493][ T4265] device veth0_macvtap entered promiscuous mode [ 61.460829][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.469507][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.542063][ T4265] device veth1_macvtap entered promiscuous mode [ 61.556741][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.579041][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.585594][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.594582][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.629617][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.641204][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.649788][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.658508][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.671745][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.683740][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.695335][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.705325][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.715838][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.726047][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.736508][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.747894][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.761594][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.782951][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.791164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.805920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.815752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.825048][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.836196][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.846438][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.857051][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.875617][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.886325][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.896381][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.906995][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.918877][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.936314][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.944733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.955180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.963825][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.985828][ T4265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.018276][ T4265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.027256][ T126] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 62.027818][ T4265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.044686][ T4265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.059136][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.077083][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.078244][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.126945][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.210126][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.232684][ T126] usb 4-1: Using ep0 maxpacket: 16 [ 62.246742][ T126] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.266764][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.280174][ T126] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 62.283282][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.305302][ T126] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 62.318986][ T4380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.325061][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.328393][ T4380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.342176][ T126] usb 4-1: Product: syz [ 62.347372][ T126] usb 4-1: Manufacturer: syz [ 62.353555][ T126] usb 4-1: SerialNumber: syz [ 62.355649][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.380830][ T4385] loop2: detected capacity change from 0 to 2048 [ 62.461182][ T4385] loop2: p3 < > p4 < > [ 62.473484][ T4385] loop2: partition table partially beyond EOD, truncated [ 62.500208][ T4385] loop2: p3 start 4284289 is beyond EOD, truncated [ 62.595836][ T126] usb 4-1: 0:2 : does not exist [ 62.633302][ T126] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 62.719357][ T126] usb 4-1: USB disconnect, device number 2 [ 62.823216][ T4396] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 62.828702][ T4394] loop4: detected capacity change from 0 to 2048 [ 62.898105][ T4267] Bluetooth: hci3: command 0x0419 tx timeout [ 62.909117][ T4398] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 62.932386][ T4341] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 62.972505][ T4267] Bluetooth: hci2: command 0x0419 tx timeout [ 62.973771][ T4276] Bluetooth: hci0: command 0x0419 tx timeout [ 62.978524][ T4267] Bluetooth: hci4: command 0x0419 tx timeout [ 62.986043][ T4277] Bluetooth: hci1: command 0x0419 tx timeout [ 63.016481][ T4394] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5 [ 63.097893][ T4394] Remounting filesystem read-only [ 63.145134][ T4341] usb 1-1: unable to get BOS descriptor or descriptor too short [ 63.153107][ T4407] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5 [ 63.161789][ T4341] usb 1-1: not running at top speed; connect to a high speed hub [ 63.181511][ T4404] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5 [ 63.198186][ T4341] usb 1-1: config 128 has an invalid interface number: 225 but max is 0 [ 63.211431][ T4394] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5 [ 63.222327][ T4341] usb 1-1: config 128 has no interface number 0 [ 63.256034][ T4394] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5 [ 63.275354][ T4341] usb 1-1: New USB device found, idVendor=0424, idProduct=cf18, bcdDevice=38.13 [ 63.286346][ T4394] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5 [ 63.301979][ T4341] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.302002][ T4341] usb 1-1: Product: syz [ 63.302016][ T4341] usb 1-1: Manufacturer: syz [ 63.334427][ T4341] usb 1-1: SerialNumber: syz [ 63.513660][ T4413] loop3: detected capacity change from 0 to 128 [ 63.545552][ T4413] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 63.635661][ T4413] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 63.948795][ T4420] loop2: detected capacity change from 0 to 40427 [ 63.956098][ T4420] ======================================================= [ 63.956098][ T4420] WARNING: The mand mount option has been deprecated and [ 63.956098][ T4420] and is ignored by this kernel. Remove the mand [ 63.956098][ T4420] option from the mount to silence this warning. [ 63.956098][ T4420] ======================================================= [ 63.997004][ T4420] F2FS-fs (loop2): Unrecognized mount option "errors=remount-ro" or missing value [ 64.349223][ T4423] loop3: detected capacity change from 0 to 32768 [ 64.375566][ T4423] [ 64.375566][ T4423] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 64.375566][ T4423] [ 64.399579][ T4423] [ 64.399579][ T4423] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 64.399579][ T4423] [ 64.410510][ T4423] [ 64.410510][ T4423] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 64.410510][ T4423] [ 64.431021][ T108] [ 64.431021][ T108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 64.431021][ T108] [ 64.558807][ T4263] [ 64.558807][ T4263] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 64.558807][ T4263] [ 64.601748][ T4263] [ 64.601748][ T4263] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 64.601748][ T4263] [ 65.206048][ T4441] loop3: detected capacity change from 0 to 32768 [ 65.221309][ T4441] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.21 (4441) [ 65.245847][ T4441] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 65.256320][ T4441] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 65.265125][ T4441] BTRFS info (device loop3): turning on flush-on-commit [ 65.272194][ T4441] BTRFS info (device loop3): use zlib compression, level 3 [ 65.279409][ T4441] BTRFS info (device loop3): disabling free space tree [ 65.286416][ T4441] BTRFS info (device loop3): enabling disk space caching [ 65.294551][ T4441] BTRFS info (device loop3): setting nodatasum [ 65.300734][ T4441] BTRFS info (device loop3): turning off barriers [ 65.307441][ T4441] BTRFS info (device loop3): force clearing of disk cache [ 65.314735][ T4441] BTRFS info (device loop3): disk space caching is enabled [ 65.344641][ T4445] loop4: detected capacity change from 0 to 512 [ 65.364315][ T4445] EXT4-fs: Ignoring removed nobh option [ 65.540229][ T4441] BTRFS info (device loop3): enabling ssd optimizations [ 65.550929][ T51] BTRFS warning (device loop3): checksum verify failed on logical 5267456 mirror 1 wanted 0x22fa3277 found 0x509a505b level 0 [ 65.603067][ T4441] BTRFS warning (device loop3): failed to read fs tree: -5 [ 65.613907][ T4341] usb 1-1: USB disconnect, device number 2 [ 65.644620][ T4441] BTRFS error (device loop3): open_ctree failed: -5 [ 65.743971][ T4257] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (4257) [ 65.941310][ T4485] syz.3.28 uses obsolete (PF_INET,SOCK_PACKET) [ 65.998007][ T4445] EXT4-fs (loop4): Test dummy encryption mode enabled [ 66.049237][ T4489] loop0: detected capacity change from 0 to 128 [ 66.089234][ T4445] EXT4-fs error (device loop4): __ext4_iget:5091: inode #11: block 1: comm syz.4.22: invalid block [ 66.122266][ T26] audit: type=1804 audit(1762500012.999:2): pid=4489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.26" name="/newroot/2/file0/file1" dev="loop0" ino=1048595 res=1 errno=0 [ 66.193935][ T4445] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.22: couldn't read orphan inode 11 (err -117) [ 66.261886][ T4445] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 66.569403][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 66.598583][ T4439] loop1: detected capacity change from 0 to 65536 [ 66.755936][ T4503] tipc: Started in network mode [ 66.761064][ T4503] tipc: Node identity ac14141b, cluster identity 4711 [ 66.771090][ T4503] tipc: New replicast peer: 255.255.255.255 [ 66.779310][ T4503] tipc: Enabled bearer , priority 10 [ 66.921292][ T4341] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 67.332901][ T4439] XFS (loop1): Mounting V5 Filesystem [ 67.465576][ T4439] XFS (loop1): Ending clean mount [ 67.502121][ T4341] usb 3-1: Using ep0 maxpacket: 32 [ 67.517708][ T4439] XFS (loop1): Metadata CRC error detected at xfs_agfl_read_verify+0x184/0x240, xfs_agfl block 0x3 [ 67.518609][ T4341] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.539742][ T4341] usb 3-1: config 1 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 67.552825][ T4341] usb 3-1: config 1 interface 0 has no altsetting 0 [ 67.561801][ T4341] usb 3-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.40 [ 67.571234][ T4439] XFS (loop1): Unmount and run xfs_repair [ 67.582108][ T4439] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 67.611394][ T4341] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.620898][ T4522] Zero length message leads to an empty skb [ 67.621119][ T4439] 00000000: 58 41 46 4c 00 00 00 00 d6 f6 9d bd 8c 5d 46 be XAFL.........]F. [ 67.642976][ T4341] usb 3-1: Product: syz [ 67.656311][ T4341] usb 3-1: Manufacturer: syz [ 67.662372][ T4341] usb 3-1: SerialNumber: syz [ 67.686964][ T4439] 00000010: b8 8e 92 c0 ae 88 ce b2 00 00 00 00 00 00 00 00 ................ [ 67.713457][ T4524] loop4: detected capacity change from 0 to 128 [ 67.781471][ T4524] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 67.783200][ T126] tipc: Node number set to 2886997019 [ 67.805110][ T4439] 00000020: 35 fc 5c 25 ff 00 ff ff 00 00 00 05 00 00 00 06 5.\%............ [ 67.855041][ T4524] hpfs: filesystem error: improperly stopped [ 67.861154][ T4439] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff ................ [ 67.884372][ T4524] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 67.893603][ T4341] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 67.901396][ T4439] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 67.931762][ T4341] usb 3-1: USB disconnect, device number 2 [ 67.936778][ T4524] hpfs: You really don't want any checks? You are crazy... [ 67.950215][ T4439] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 67.967117][ T4524] hpfs: hpfs_map_sector(): read error [ 67.985642][ T4439] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 67.998175][ T4524] hpfs: code page support is disabled [ 68.019811][ T4524] hpfs: hpfs_map_4sectors(): unaligned read [ 68.029790][ T4439] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 68.049577][ T4524] hpfs: hpfs_map_4sectors(): unaligned read [ 68.051750][ T4439] XFS (loop1): metadata I/O error in "xfs_alloc_read_agfl+0x1e7/0x3a0" at daddr 0x3 len 1 error 74 [ 68.058974][ T4524] hpfs: filesystem error: unable to find root dir [ 68.075747][ T4439] XFS (loop1): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1784/0x1e50 (fs/xfs/libxfs/xfs_defer.c:580). Shutting down filesystem. [ 68.099292][ T4439] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 68.136074][ T4264] XFS (loop1): Unmounting Filesystem [ 68.358241][ T75] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.469854][ T75] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.492154][ T4341] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 68.558254][ T75] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.645320][ T4536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.46'. [ 68.658262][ T75] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.697002][ T4341] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 68.731709][ T4341] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 68.751998][ T4341] usb 5-1: Product: syz [ 68.756703][ T4341] usb 5-1: Manufacturer: syz [ 68.782270][ T4341] usb 5-1: SerialNumber: syz [ 68.800456][ T4341] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 69.066634][ T75] tipc: Disabling bearer [ 69.089585][ T75] tipc: Left network mode [ 69.393222][ T4341] vp7045: USB control message 'in' went wrong. [ 69.446921][ T4341] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 69.753521][ T4549] loop1: detected capacity change from 0 to 1024 [ 69.780392][ T4341] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 69.832888][ T4341] usb 5-1: USB disconnect, device number 2 [ 69.907650][ T4550] tipc: Started in network mode [ 69.913286][ T4550] tipc: Node identity ac14141b, cluster identity 4711 [ 69.920781][ T4550] tipc: New replicast peer: 255.255.255.255 [ 69.928050][ T4550] tipc: Enabled bearer , priority 10 [ 69.995000][ T4276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.005321][ T4267] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.015722][ T4276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.047356][ T4267] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.061766][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.097420][ T4267] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.362260][ T4505] hfsplus: b-tree write err: -5, ino 4 [ 70.422288][ T4476] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 70.616051][ T4476] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.646637][ T4476] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 70.691248][ T4476] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 70.718314][ T4570] loop4: detected capacity change from 0 to 40427 [ 70.732267][ T4570] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x3ffff [ 70.783886][ T4476] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.858702][ T4476] usb 3-1: config 0 descriptor?? [ 71.002970][ T4379] tipc: Node number set to 2886997019 [ 71.106833][ T4476] Bluetooth: Can't get state to change to load ram patch err [ 71.142144][ T4476] Bluetooth: Loading patch file failed [ 71.166970][ T4476] ath3k: probe of 3-1:0.0 failed with error -71 [ 71.216544][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.223128][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.230093][ T4476] usb 3-1: USB disconnect, device number 3 [ 71.480859][ T4555] chnl_net:caif_netlink_parms(): no params data found [ 71.593933][ T4593] loop4: detected capacity change from 0 to 1764 [ 71.643586][ T4593] ISOFS: unable to read i-node block [ 71.673325][ T4593] isofs_fill_super: get root inode failed [ 71.927550][ T4555] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.968551][ T4555] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.007180][ T4555] device bridge_slave_0 entered promiscuous mode [ 72.011135][ T4593] loop4: detected capacity change from 0 to 32768 [ 72.039336][ T4593] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 72.087554][ T4593] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 72.109026][ T4593] BTRFS info (device loop4): turning on flush-on-commit [ 72.123943][ T4593] BTRFS info (device loop4): use zlib compression, level 3 [ 72.139106][ T4593] BTRFS info (device loop4): disabling free space tree [ 72.153933][ T4593] BTRFS info (device loop4): enabling disk space caching [ 72.168906][ T4593] BTRFS info (device loop4): setting nodatasum [ 72.190491][ T4593] BTRFS info (device loop4): turning off barriers [ 72.198626][ T4593] BTRFS info (device loop4): enabling ssd optimizations [ 72.213928][ T4593] BTRFS info (device loop4): force clearing of disk cache [ 72.238645][ T4593] BTRFS info (device loop4): disk space caching is enabled [ 72.252495][ T4555] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.260508][ T4555] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.297996][ T4555] device bridge_slave_1 entered promiscuous mode [ 72.512285][ T4593] BTRFS info (device loop4): rebuilding free space tree [ 72.659947][ T4555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.703472][ T4555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.750293][ T4574] loop1: detected capacity change from 0 to 65536 [ 72.801873][ T4555] team0: Port device team_slave_0 added [ 72.824859][ T4593] BTRFS info (device loop4): disabling free space tree [ 72.848326][ T4555] team0: Port device team_slave_1 added [ 72.860298][ T4626] loop2: detected capacity change from 0 to 32768 [ 72.865506][ T4593] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 72.906833][ T4626] jfs_unlink: dtDelete returned -2 [ 72.950713][ T4574] XFS (loop1): Mounting V5 Filesystem [ 73.035226][ T4574] XFS (loop1): Ending clean mount [ 73.041933][ T4593] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 73.052597][ T4379] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 73.087401][ T75] device hsr_slave_0 left promiscuous mode [ 73.125358][ T75] device hsr_slave_1 left promiscuous mode [ 73.154556][ T4341] XFS (loop1): Metadata CRC error detected at xfs_agfl_read_verify+0x184/0x240, xfs_agfl block 0x3 [ 73.194139][ T4341] XFS (loop1): Unmount and run xfs_repair [ 73.220255][ T4341] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 73.250619][ T4341] 00000000: 58 41 46 4c 00 00 00 00 d6 f6 9d bd 8c 5d 46 be XAFL.........]F. [ 73.276596][ T4379] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 73.288528][ T4341] 00000010: b8 8e 92 c0 ae 88 ce b2 00 00 00 00 00 00 00 00 ................ [ 73.302125][ T4379] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 73.330619][ T4341] 00000020: 35 fc 5c 25 ff 00 ff ff 00 00 00 05 00 00 00 06 5.\%............ [ 73.339895][ T4379] usb 1-1: Product: syz [ 73.344426][ T4379] usb 1-1: Manufacturer: syz [ 73.352513][ T4379] usb 1-1: SerialNumber: syz [ 73.360296][ T4341] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff ................ [ 73.370795][ T4341] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 73.385171][ T4379] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 73.394388][ T4341] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 73.403841][ T4341] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 73.413172][ T4341] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 73.424987][ T4641] XFS (loop1): metadata I/O error in "xfs_alloc_read_agfl+0x1e7/0x3a0" at daddr 0x3 len 1 error 74 [ 73.432439][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.467387][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.498996][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.520477][ T4641] XFS (loop1): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1784/0x1e50 (fs/xfs/libxfs/xfs_defer.c:580). Shutting down filesystem. [ 73.522440][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.602470][ T4641] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 73.636935][ T75] device bridge_slave_1 left promiscuous mode [ 73.649412][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.665571][ T4269] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 73.703854][ T75] device bridge_slave_0 left promiscuous mode [ 73.714626][ T4264] XFS (loop1): Unmounting Filesystem [ 73.730788][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.788306][ T4379] vp7045: USB control message 'in' went wrong. [ 73.814060][ T4379] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 73.837169][ T4379] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 73.872566][ T4379] usb 1-1: USB disconnect, device number 3 [ 73.913382][ T26] audit: type=1326 audit(1762500020.799:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4654 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b99f8f6c9 code=0x7ffc0000 [ 73.982560][ T26] audit: type=1326 audit(1762500020.829:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4654 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b99f8f6c9 code=0x7ffc0000 [ 74.117207][ T26] audit: type=1326 audit(1762500020.829:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4654 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f7b99f8f6c9 code=0x7ffc0000 [ 74.173658][ T26] audit: type=1326 audit(1762500020.829:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4654 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b99f8f6c9 code=0x7ffc0000 [ 74.202650][ T26] audit: type=1326 audit(1762500020.849:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4654 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b99f8f6c9 code=0x7ffc0000 [ 74.238770][ T4666] loop2: detected capacity change from 0 to 1024 [ 74.239949][ T26] audit: type=1326 audit(1762500020.849:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4654 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7b99f8f6c9 code=0x7ffc0000 [ 74.273807][ T4666] EXT4-fs: Ignoring removed orlov option [ 74.363102][ T26] audit: type=1326 audit(1762500020.849:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4654 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b99f8f6c9 code=0x7ffc0000 [ 74.385328][ T26] audit: type=1326 audit(1762500020.849:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4654 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b99f8f6c9 code=0x7ffc0000 [ 74.407646][ T26] audit: type=1326 audit(1762500020.849:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4654 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b99f8f6c9 code=0x7ffc0000 [ 74.434885][ T26] audit: type=1326 audit(1762500020.849:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4654 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b99f8f6c9 code=0x7ffc0000 [ 74.459562][ T75] device veth1_macvtap left promiscuous mode [ 74.501139][ T75] device veth0_macvtap left promiscuous mode [ 74.509282][ T4666] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 74.512264][ T4662] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 74.546909][ T75] device veth1_vlan left promiscuous mode [ 74.592014][ T75] device veth0_vlan left promiscuous mode [ 74.703671][ T4662] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.760925][ T4662] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.792108][ T4662] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 74.848965][ T4662] usb 5-1: New USB device found, idVendor=1430, idProduct=07bb, bcdDevice= 0.00 [ 74.875049][ T4662] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.929720][ T4662] usb 5-1: config 0 descriptor?? [ 74.930751][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 75.128681][ T4683] loop1: detected capacity change from 0 to 736 [ 75.280200][ T4683] rock: directory entry would overflow storage [ 75.288257][ T4683] rock: sig=0x3b10, size=4, remaining=3 [ 75.384663][ T4662] sony 0003:1430:07BB.0001: hidraw0: USB HID v0.00 Device [HID 1430:07bb] on usb-dummy_hcd.4-1/input0 [ 75.417799][ T4662] sony 0003:1430:07BB.0001: failed to claim input [ 75.553763][ T126] usb 5-1: USB disconnect, device number 3 [ 75.714523][ T4691] fido_id[4691]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 75.741652][ T4693] loop1: detected capacity change from 0 to 8192 [ 75.810542][ T4693] loop1: p1 < > p2 p3 p4 < > [ 75.826836][ T4693] loop1: partition table partially beyond EOD, truncated [ 75.859052][ T4693] loop1: p1 start 134217728 is beyond EOD, truncated [ 75.866064][ T4693] loop1: p2 size 591360 extends beyond EOD, truncated [ 75.881765][ T4693] loop1: p3 start 655105 is beyond EOD, truncated [ 76.056086][ T4697] loop2: detected capacity change from 0 to 1764 [ 76.126480][ T4697] ISOFS: unable to read i-node block [ 76.128812][ T4257] udevd[4257]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 76.131821][ T4697] isofs_fill_super: get root inode failed [ 76.149693][ T75] team0 (unregistering): Port device team_slave_1 removed [ 76.161113][ T4543] udevd[4543]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 76.320592][ T75] team0 (unregistering): Port device team_slave_0 removed [ 76.334965][ T1169] cfg80211: failed to load regulatory.db [ 76.671860][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.024077][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.276352][ T4697] loop2: detected capacity change from 0 to 32768 [ 77.325042][ T4697] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.77 (4697) [ 77.549828][ T4711] loop0: detected capacity change from 0 to 40427 [ 77.561400][ T4711] F2FS-fs (loop0): build fault injection attr: rate: 14, type: 0x3ffff [ 77.600861][ T4697] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 77.637545][ T4697] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 77.684368][ T4697] BTRFS info (device loop2): turning on flush-on-commit [ 77.736115][ T4697] BTRFS info (device loop2): use zlib compression, level 3 [ 77.760969][ T4714] usb usb8: usbfs: process 4714 (syz.0.84) did not claim interface 0 before use [ 77.789252][ T4697] BTRFS info (device loop2): disabling free space tree [ 77.817325][ T4697] BTRFS info (device loop2): enabling disk space caching [ 77.866384][ T4697] BTRFS info (device loop2): setting nodatasum [ 77.866588][ T4699] loop1: detected capacity change from 0 to 65536 [ 77.884146][ T4697] BTRFS info (device loop2): turning off barriers [ 77.890617][ T4697] BTRFS info (device loop2): enabling ssd optimizations [ 77.989604][ T4697] BTRFS info (device loop2): force clearing of disk cache [ 78.027067][ T4697] BTRFS info (device loop2): disk space caching is enabled [ 78.142341][ T4699] XFS (loop1): Mounting V5 Filesystem [ 78.250948][ T4699] XFS (loop1): Ending clean mount [ 78.307817][ T4699] XFS (loop1): Metadata CRC error detected at xfs_agfl_read_verify+0x184/0x240, xfs_agfl block 0x3 [ 78.398685][ T4699] XFS (loop1): Unmount and run xfs_repair [ 78.422192][ T4699] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 78.457719][ T4739] loop4: detected capacity change from 0 to 32768 [ 78.466256][ T4699] 00000000: 58 41 46 4c 00 00 00 00 d6 f6 9d bd 8c 5d 46 be XAFL.........]F. [ 78.475240][ T4699] 00000010: b8 8e 92 c0 ae 88 ce b2 00 00 00 00 00 00 00 00 ................ [ 78.484303][ T4739] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.87 (4739) [ 78.495771][ T4699] 00000020: 35 fc 5c 25 ff 00 ff ff 00 00 00 05 00 00 00 06 5.\%............ [ 78.552724][ T4476] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 78.584746][ T4699] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff ................ [ 78.636992][ T4699] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 78.643262][ T4697] BTRFS info (device loop2): rebuilding free space tree [ 78.674449][ T4699] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 78.708169][ T4699] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 78.718400][ T4697] BTRFS info (device loop2): disabling free space tree [ 78.744363][ T4699] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 78.753564][ T4699] XFS (loop1): metadata I/O error in "xfs_alloc_read_agfl+0x1e7/0x3a0" at daddr 0x3 len 1 error 74 [ 78.754191][ T4476] usb 1-1: config 0 has an invalid interface number: 168 but max is 0 [ 78.765598][ T4697] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 78.783298][ T4697] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 78.793646][ T4699] XFS (loop1): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1784/0x1e50 (fs/xfs/libxfs/xfs_defer.c:580). Shutting down filesystem. [ 78.844072][ T4476] usb 1-1: config 0 has no interface number 0 [ 78.851329][ T4476] usb 1-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 78.857931][ T4699] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 78.919336][ T4476] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.987917][ T4476] usb 1-1: config 0 descriptor?? [ 78.997646][ T4387] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (4387) [ 79.000818][ T4264] XFS (loop1): Unmounting Filesystem [ 79.016669][ T4266] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 79.225084][ T4476] usb 1-1: string descriptor 0 read error: -71 [ 79.226245][ T4277] Bluetooth: hci1: adv larger than maximum supported [ 79.231459][ T4277] Bluetooth: hci1: Malformed LE Event: 0x0d [ 79.247572][ T4476] usb-storage 1-1:0.168: USB Mass Storage device detected [ 79.311774][ T4257] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 12 /dev/loop2 scanned by udevd (4257) [ 79.358039][ T4476] usb-storage 1-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 79.358131][ T4751] loop4: detected capacity change from 0 to 64 [ 79.459918][ T4476] usb 1-1: USB disconnect, device number 4 [ 79.824252][ T75] bond0 (unregistering): Released all slaves [ 80.137048][ T4555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.177979][ T4555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.232102][ T4555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.267802][ T4769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.97'. [ 80.282292][ T4475] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 80.327276][ T4555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.367909][ T4555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.428270][ T4555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.448091][ T4475] usb 3-1: device descriptor read/64, error -71 [ 80.548794][ T4779] loop1: detected capacity change from 0 to 1764 [ 80.578749][ T4555] device hsr_slave_0 entered promiscuous mode [ 80.586177][ T4779] ISOFS: unable to read i-node block [ 80.591556][ T4779] isofs_fill_super: get root inode failed [ 80.600144][ T4555] device hsr_slave_1 entered promiscuous mode [ 80.635872][ T4555] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.663229][ T4555] Cannot create hsr debugfs directory [ 80.742153][ T4475] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 80.822303][ T4341] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 80.902213][ T4475] usb 3-1: device descriptor read/64, error -71 [ 81.026737][ T4341] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 81.029216][ T4475] usb usb3-port1: attempt power cycle [ 81.047233][ T4341] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 81.072157][ T4341] usb 1-1: Product: syz [ 81.086600][ T4341] usb 1-1: Manufacturer: syz [ 81.091231][ T4341] usb 1-1: SerialNumber: syz [ 81.139712][ T4341] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 81.453888][ T4475] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 81.510629][ T4779] loop1: detected capacity change from 0 to 32768 [ 81.513521][ T4475] usb 3-1: device descriptor read/8, error -71 [ 81.543473][ T4341] vp7045: USB control message 'in' went wrong. [ 81.568750][ T4779] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 81.570089][ T4341] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 81.621363][ T4341] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 81.678579][ T4341] usb 1-1: USB disconnect, device number 5 [ 81.805940][ T4475] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 81.835418][ T4387] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 81.854026][ T4475] usb 3-1: device descriptor read/8, error -71 [ 81.937452][ T4555] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.972266][ T4475] usb usb3-port1: unable to enumerate USB device [ 81.997389][ T4555] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.037404][ T4555] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.055546][ T4555] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.190162][ T4277] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 82.200301][ T4277] CPU: 1 PID: 4277 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 82.207869][ T4277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 82.217940][ T4277] Workqueue: hci1 hci_rx_work [ 82.222664][ T4277] Call Trace: [ 82.225954][ T4277] [ 82.228896][ T4277] dump_stack_lvl+0x168/0x22e [ 82.233594][ T4277] ? show_regs_print_info+0x12/0x12 [ 82.238818][ T4277] ? load_image+0x3b0/0x3b0 [ 82.243355][ T4277] sysfs_create_dir_ns+0x252/0x280 [ 82.248482][ T4277] ? hci_rx_work+0x3eb/0xd40 [ 82.253096][ T4277] ? sysfs_warn_dup+0xa0/0xa0 [ 82.257790][ T4277] ? do_raw_spin_unlock+0x11d/0x230 [ 82.263017][ T4277] kobject_add_internal+0x6b8/0xc80 [ 82.268244][ T4277] kobject_add+0x152/0x210 [ 82.272687][ T4277] ? kobject_init+0x1d0/0x1d0 [ 82.277384][ T4277] ? klist_children_get+0x50/0x50 [ 82.282423][ T4277] ? get_device_parent+0x121/0x3f0 [ 82.287558][ T4277] device_add+0x483/0xfb0 [ 82.291911][ T4277] ? kmem_cache_free+0xf7/0x290 [ 82.296775][ T4277] hci_conn_add_sysfs+0xd1/0x1e0 [ 82.301712][ T4277] le_conn_complete_evt+0xfec/0x15d0 [ 82.306997][ T4277] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 82.313230][ T4277] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 82.318857][ T4277] ? skb_pull_data+0xf7/0x200 [ 82.323532][ T4277] hci_le_conn_complete_evt+0x183/0x440 [ 82.329103][ T4277] ? hci_remote_host_features_evt+0x270/0x270 [ 82.335167][ T4277] hci_event_packet+0x791/0x1210 [ 82.340116][ T4277] ? bis_list+0x280/0x280 [ 82.344449][ T4277] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 82.350340][ T4277] ? kcov_remote_start+0x4c7/0x7e0 [ 82.355443][ T4277] ? nf_l4proto_log_invalid+0x1f9/0x26e [ 82.360985][ T4277] ? hci_send_to_monitor+0x9c/0x4a0 [ 82.366173][ T4277] hci_rx_work+0x3eb/0xd40 [ 82.370591][ T4277] ? _raw_spin_unlock+0x40/0x40 [ 82.375438][ T4277] ? process_one_work+0x7a1/0x1160 [ 82.380536][ T4277] process_one_work+0x898/0x1160 [ 82.385477][ T4277] ? worker_detach_from_pool+0x240/0x240 [ 82.391097][ T4277] ? _raw_spin_lock_irq+0xab/0xe0 [ 82.396234][ T4277] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 82.401595][ T4277] ? kthread_data+0x4b/0xc0 [ 82.406092][ T4277] worker_thread+0xaa2/0x1250 [ 82.410793][ T4277] kthread+0x29d/0x330 [ 82.414861][ T4277] ? worker_clr_flags+0x1a0/0x1a0 [ 82.419875][ T4277] ? kthread_blkcg+0xd0/0xd0 [ 82.424460][ T4277] ret_from_fork+0x1f/0x30 [ 82.428878][ T4277] [ 82.438103][ T4277] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 82.452203][ T4277] Bluetooth: hci1: failed to register connection device [ 82.489346][ T4555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.507854][ T4379] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.524584][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.581635][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.598164][ T4555] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.613646][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.623430][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.631895][ T4380] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.636118][ T4475] libceph: connect (1)[c::]:6789 error -101 [ 82.639008][ T4380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.654860][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.664189][ T4475] libceph: mon0 (1)[c::]:6789 connect error [ 82.674587][ T4475] libceph: connect (1)[c::]:6789 error -101 [ 82.679544][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.680636][ T4475] libceph: mon0 (1)[c::]:6789 connect error [ 82.699848][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.715865][ T4380] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.723022][ T4380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.747460][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.749053][ T4379] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 82.756939][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.774101][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.778920][ T4379] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 82.784178][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.795096][ T4379] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.811580][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.820190][ T4379] usb 2-1: config 0 descriptor?? [ 82.835213][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.856505][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.875263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.887931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.911248][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.920335][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.936856][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.953401][ T4476] libceph: connect (1)[c::]:6789 error -101 [ 82.965161][ T4476] libceph: mon0 (1)[c::]:6789 connect error [ 83.384205][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.414186][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.438060][ T4555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.446922][ T4817] ceph: No mds server is up or the cluster is laggy [ 83.501331][ T4475] libceph: connect (1)[c::]:6789 error -101 [ 83.508888][ T4475] libceph: mon0 (1)[c::]:6789 connect error [ 83.547026][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.584012][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.654713][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.672569][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.694436][ T4555] device veth0_vlan entered promiscuous mode [ 83.717470][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.729105][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.754720][ T4555] device veth1_vlan entered promiscuous mode [ 83.795858][ T4857] loop2: detected capacity change from 0 to 64 [ 83.811145][ T4852] loop4: detected capacity change from 0 to 1764 [ 83.824533][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.833647][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.852604][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.863411][ T4852] ISOFS: unable to read i-node block [ 83.869551][ T4852] isofs_fill_super: get root inode failed [ 83.885165][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.898130][ T4857] hfs: get root inode failed [ 83.909645][ T4555] device veth0_macvtap entered promiscuous mode [ 83.943542][ T4555] device veth1_macvtap entered promiscuous mode [ 84.046410][ T4555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.097022][ T4555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.141910][ T4555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.172808][ T4555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.201173][ T4555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.224004][ T4555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.245031][ T4555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.266773][ T4555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.323643][ T4555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.342620][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.360249][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.397424][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.425047][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.459299][ T4555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.480076][ T4555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.518855][ T4555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.625762][ T4555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.689019][ T4555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.751658][ T4555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.792265][ T4876] loop0: detected capacity change from 0 to 32768 [ 84.800403][ T4876] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.119 (4876) [ 84.815113][ T4555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.830428][ T4879] loop2: detected capacity change from 0 to 1024 [ 84.837182][ T4876] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 84.847484][ T4876] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 84.857002][ T4876] BTRFS info (device loop0): using free space tree [ 84.863850][ T4555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.875544][ T4555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.888308][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.915281][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.934824][ T4879] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002] [ 84.944014][ T4879] System zones: 0-1, 3-8 [ 84.960880][ T4555] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.000027][ T4879] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 85.007505][ T4555] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.018110][ T4879] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.031112][ T4852] loop4: detected capacity change from 0 to 32768 [ 85.044980][ T26] kauditd_printk_skb: 40 callbacks suppressed [ 85.044993][ T26] audit: type=1800 audit(1762500031.929:53): pid=4879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.120" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 85.072431][ T4555] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.084502][ T4555] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.088261][ T4852] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12 [ 85.307420][ T4876] BTRFS info (device loop0): enabling ssd optimizations [ 85.375089][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 85.476000][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.513937][ T4265] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 85.540119][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.576282][ T4379] usb 2-1: USB disconnect, device number 2 [ 85.596113][ T4543] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12 [ 85.611806][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.720880][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.762274][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.792191][ T4909] loop4: detected capacity change from 0 to 512 [ 85.816819][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.861112][ T4909] EXT4-fs: Ignoring removed oldalloc option [ 85.977116][ T4909] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 86.003325][ T4909] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.107073][ T1169] libceph: connect (1)[c::]:6789 error -101 [ 86.113534][ T1169] libceph: mon0 (1)[c::]:6789 connect error [ 86.318657][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 86.387587][ T1169] libceph: connect (1)[c::]:6789 error -101 [ 86.409324][ T1169] libceph: mon0 (1)[c::]:6789 connect error [ 86.582406][ T1169] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.664175][ T4946] loop4: detected capacity change from 0 to 1764 [ 86.698158][ T4946] ISOFS: unable to read i-node block [ 86.721582][ T4946] isofs_fill_super: get root inode failed [ 86.743151][ T4914] ceph: No mds server is up or the cluster is laggy [ 86.795900][ T1169] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.807232][ T1169] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.909992][ T4951] tipc: Started in network mode [ 86.915047][ T4951] tipc: Node identity ac14141b, cluster identity 4711 [ 86.922858][ T4951] tipc: New replicast peer: 255.255.255.255 [ 86.929939][ T4951] tipc: Enabled bearer , priority 10 [ 87.410870][ T1169] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 87.424273][ T1169] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.463471][ T1169] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.505121][ T1169] usb 4-1: config 0 descriptor?? [ 87.593102][ T4471] libceph: connect (1)[c::]:6789 error -101 [ 87.609348][ T4471] libceph: mon0 (1)[c::]:6789 connect error [ 87.931273][ T4956] loop2: detected capacity change from 0 to 32768 [ 87.943977][ T4657] tipc: Node number set to 2886997019 [ 88.025731][ T4958] loop1: detected capacity change from 0 to 40427 [ 88.033319][ T4958] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(512) [ 88.041594][ T4958] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 88.049936][ T4958] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x3ffff [ 88.058365][ T4958] F2FS-fs (loop1): old and new quota format mixing [ 88.091028][ T4956] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 88.102456][ T4956] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 88.111187][ T4956] BTRFS info (device loop2): turning on flush-on-commit [ 88.118198][ T4956] BTRFS info (device loop2): use zlib compression, level 3 [ 88.125468][ T4956] BTRFS info (device loop2): disabling free space tree [ 88.132372][ T4956] BTRFS info (device loop2): enabling disk space caching [ 88.139430][ T4956] BTRFS info (device loop2): setting nodatasum [ 88.145638][ T4956] BTRFS info (device loop2): turning off barriers [ 88.152114][ T4956] BTRFS info (device loop2): enabling ssd optimizations [ 88.159078][ T4956] BTRFS info (device loop2): force clearing of disk cache [ 88.166307][ T4956] BTRFS info (device loop2): disk space caching is enabled [ 88.211012][ T4963] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 88.272377][ T1169] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 88.369299][ T1169] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 88.485803][ T4946] loop4: detected capacity change from 0 to 32768 [ 88.521567][ T4946] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.132 (4946) [ 88.539642][ T4956] BTRFS info (device loop2): rebuilding free space tree [ 88.553604][ T4956] BTRFS info (device loop2): disabling free space tree [ 88.561303][ T4956] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 88.571078][ T4956] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 89.026413][ T4989] loop1: detected capacity change from 0 to 32768 [ 89.086547][ T4989] (syz.1.139,4989,1):ocfs2_clear_journal_error:1114 ERROR: File system error 65536 recorded in journal 0. [ 89.098344][ T4989] (syz.1.139,4989,1):ocfs2_clear_journal_error:1116 ERROR: File system on device loop1 needs checking. [ 89.113933][ T4989] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 89.134190][ T4360] (kworker/u4:7,4360,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=16, inode=17179869250, rec_len=0, name_len=0 [ 89.139097][ T4545] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (4545) [ 89.295956][ T4264] ocfs2: Unmounting device (7,1) on (node local) [ 89.399393][ T4266] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 89.432519][ T1169] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 89.681355][ C0] plantronics 0003:047F:FFFF.0002: usb_submit_urb(ctrl) failed: -1 [ 89.715836][ T1169] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 89.746263][ T1169] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 89.785336][ T1169] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 89.817652][ T1169] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.836060][ T1169] usb 5-1: Product: syz [ 89.840368][ T1169] usb 5-1: Manufacturer: syz [ 89.875818][ T1169] usb 5-1: SerialNumber: syz [ 89.906495][ T1169] usb 5-1: config 0 descriptor?? [ 89.952576][ T4993] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 89.970703][ T4993] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 90.013582][ T1169] usb 5-1: ucan: probing device on interface #0 [ 90.032147][ T1169] usb 5-1: ucan: invalid EP count (1) [ 90.050805][ T1169] usb 5-1: ucan: probe failed; try to update the device firmware [ 90.196797][ T5017] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 90.251547][ T5019] loop0: detected capacity change from 0 to 1764 [ 90.296600][ T5019] ISOFS: unable to read i-node block [ 90.301974][ T5019] isofs_fill_super: get root inode failed [ 90.548376][ T4471] usb 4-1: USB disconnect, device number 3 [ 90.708448][ T5031] loop1: detected capacity change from 0 to 128 [ 90.736452][ T5031] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 90.765217][ T5031] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.808642][ T5019] loop0: detected capacity change from 0 to 32768 [ 90.845157][ T5019] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.150 (5019) [ 90.866838][ T5019] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 90.891270][ T5019] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 90.900783][ T5019] BTRFS info (device loop0): turning on flush-on-commit [ 90.907889][ T5019] BTRFS info (device loop0): use zlib compression, level 3 [ 90.916989][ T5019] BTRFS info (device loop0): disabling free space tree [ 90.926309][ T5019] BTRFS info (device loop0): enabling disk space caching [ 90.934525][ T5019] BTRFS info (device loop0): setting nodatasum [ 90.955729][ T5019] BTRFS info (device loop0): turning off barriers [ 90.982695][ T5019] BTRFS info (device loop0): enabling ssd optimizations [ 91.023258][ T5019] BTRFS info (device loop0): force clearing of disk cache [ 91.064174][ T5019] BTRFS info (device loop0): disk space caching is enabled [ 91.291817][ T5019] BTRFS info (device loop0): rebuilding free space tree [ 91.380517][ T5019] BTRFS info (device loop0): disabling free space tree [ 91.388228][ T5060] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 91.405945][ T5019] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 91.419306][ T5019] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 91.586708][ T4265] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 92.122181][ T1169] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 92.177633][ T5001] usb 5-1: USB disconnect, device number 4 [ 92.316706][ T1169] usb 3-1: Using ep0 maxpacket: 32 [ 92.326243][ T1169] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 92.348757][ T1169] usb 3-1: config 0 has no interface number 0 [ 92.364689][ T1169] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 92.378719][ T4471] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 92.388324][ T1169] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.400366][ T1169] usb 3-1: Product: syz [ 92.422803][ T1169] usb 3-1: Manufacturer: syz [ 92.427431][ T1169] usb 3-1: SerialNumber: syz [ 92.442193][ T1169] usb 3-1: config 0 descriptor?? [ 92.449359][ T1169] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 92.597911][ T4471] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 92.612729][ T4471] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 92.621686][ T4471] usb 4-1: Product: syz [ 92.631543][ T4471] usb 4-1: Manufacturer: syz [ 92.639268][ T4471] usb 4-1: SerialNumber: syz [ 92.658349][ T1169] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 92.679290][ T5096] loop1: detected capacity change from 0 to 32768 [ 92.692831][ T5096] (syz.1.176,5096,1):ocfs2_verify_volume:2379 ERROR: Superblock slots found greater than file system maximum: found 2560, max 255 [ 92.706296][ T5096] (syz.1.176,5096,1):ocfs2_verify_volume:2388 ERROR: status = -22 [ 92.714160][ T5096] (syz.1.176,5096,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 92.722396][ T4471] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 92.722685][ T5096] (syz.1.176,5096,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 92.769084][ T1169] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 92.859037][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 92.867345][ T1169] usb 3-1: USB disconnect, device number 8 [ 92.895176][ T1169] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 92.917999][ T1169] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 92.937838][ T1169] quatech2 3-1:0.51: device disconnected [ 93.113950][ T4471] vp7045: USB control message 'in' went wrong. [ 93.132560][ T4471] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 93.183573][ T4471] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 93.272946][ T5108] loop0: detected capacity change from 0 to 1024 [ 93.322420][ T4471] usb 4-1: USB disconnect, device number 4 [ 93.876644][ T5119] loop0: detected capacity change from 0 to 40427 [ 93.884455][ T1169] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 93.918395][ T5119] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x1f52010) [ 93.926774][ T5119] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 93.935188][ T5119] F2FS-fs (loop0): Unrecognized mount option "fault_injection=-0000000000000001262" or missing value [ 94.042145][ T4471] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 94.078728][ T1169] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.100304][ T1169] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.132470][ T1169] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.156176][ T1169] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.207160][ T1169] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.234909][ T4471] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.253253][ T1169] usb 5-1: config 0 descriptor?? [ 94.259813][ T4471] usb 2-1: config 0 has no interfaces? [ 94.273232][ T4471] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 94.294819][ T4471] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.333838][ T4471] usb 2-1: config 0 descriptor?? [ 94.583329][ T4475] usb 2-1: USB disconnect, device number 3 [ 94.679470][ T1169] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 94.690907][ T1169] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 94.700009][ T1169] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 94.711847][ T1169] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 94.720575][ T1169] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 94.736870][ T1169] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 94.749127][ T1169] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 94.832206][ T4471] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 94.895380][ T5128] loop2: detected capacity change from 0 to 65536 [ 94.916049][ T5128] XFS (loop2): Mounting V5 Filesystem [ 94.949084][ T5128] XFS (loop2): Ending clean mount [ 94.973074][ T5001] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x184/0x240, xfs_agfl block 0x3 [ 94.985390][ T5001] XFS (loop2): Unmount and run xfs_repair [ 94.991140][ T5001] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 94.998775][ T5001] 00000000: 58 41 46 4c 00 00 00 00 d6 f6 9d bd 8c 5d 46 be XAFL.........]F. [ 95.008094][ T5001] 00000010: b8 8e 92 c0 ae 88 ce b2 00 00 00 00 00 00 00 00 ................ [ 95.017179][ T5001] 00000020: 35 fc 5c 25 ff 00 ff ff 00 00 00 05 00 00 00 06 5.\%............ [ 95.026132][ T5001] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff ................ [ 95.032117][ T4471] usb 1-1: Using ep0 maxpacket: 32 [ 95.035394][ T5001] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 95.050299][ T5001] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 95.053325][ T4471] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 95.063450][ T5001] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 95.078455][ T5001] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 95.087883][ T5128] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x1e7/0x3a0" at daddr 0x3 len 1 error 74 [ 95.104659][ T5128] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1784/0x1e50 (fs/xfs/libxfs/xfs_defer.c:580). Shutting down filesystem. [ 95.117946][ T4471] usb 1-1: config 0 has no interface number 0 [ 95.132545][ T5128] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 95.179848][ T4471] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 95.224798][ T4266] XFS (loop2): Unmounting Filesystem [ 95.235373][ T4471] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.244355][ T4471] usb 1-1: Product: syz [ 95.248749][ T4471] usb 1-1: Manufacturer: syz [ 95.254093][ T4471] usb 1-1: SerialNumber: syz [ 95.261507][ T4471] usb 1-1: config 0 descriptor?? [ 95.285562][ T4471] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 95.473724][ T4471] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 95.518419][ T4471] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 95.536286][ T5159] loop1: detected capacity change from 0 to 32768 [ 95.600715][ T5159] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 95.681578][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 95.689813][ T4471] usb 1-1: USB disconnect, device number 6 [ 95.770611][ T4471] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 95.844066][ T4471] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 95.883030][ T4471] quatech2 1-1:0.51: device disconnected [ 95.895666][ T4264] ocfs2: Unmounting device (7,1) on (node local) [ 95.985834][ T5112] usb 5-1: string descriptor 0 read error: -71 [ 96.132158][ T4334] usb 5-1: reset high-speed USB device number 5 using dummy_hcd [ 96.272277][ T4478] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 96.292424][ T4334] usb 5-1: device descriptor read/64, error -32 [ 96.352414][ T5172] loop3: detected capacity change from 0 to 32768 [ 96.433846][ T5172] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 96.489089][ T4478] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 96.511105][ T4478] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.513059][ T5172] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 96.577408][ T4334] usb 5-1: reset high-speed USB device number 5 using dummy_hcd [ 96.590548][ T4478] usb 2-1: config 0 descriptor?? [ 96.612146][ T4471] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 96.697009][ T4555] ocfs2: Unmounting device (7,3) on (node local) [ 96.821745][ T4471] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 96.841229][ T4471] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 96.859803][ T4471] usb 1-1: Product: syz [ 96.869903][ T4471] usb 1-1: Manufacturer: syz [ 96.885267][ T4471] usb 1-1: SerialNumber: syz [ 96.902726][ T4471] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 97.079070][ T5187] loop3: detected capacity change from 0 to 512 [ 97.094040][ T5187] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 97.118791][ T5187] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 97.153809][ T5187] EXT4-fs (loop3): 1 truncate cleaned up [ 97.159499][ T5187] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 97.251345][ T4555] EXT4-fs (loop3): unmounting filesystem. [ 97.305053][ T4471] vp7045: USB control message 'in' went wrong. [ 97.311293][ T4471] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 97.329504][ T4471] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 97.436860][ T4318] usb 5-1: USB disconnect, device number 5 [ 97.531278][ T1169] usb 1-1: USB disconnect, device number 7 [ 97.560612][ T5205] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.637808][ T4478] pegasus: probe of 2-1:0.0 failed with error -71 [ 97.658890][ T4478] usb 2-1: USB disconnect, device number 4 [ 97.675910][ T5205] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.775949][ T5205] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.857024][ T5205] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.988297][ T5205] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.027030][ T5205] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.082988][ T5205] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.152929][ T5205] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.599544][ T5229] loop1: detected capacity change from 0 to 128 [ 98.628867][ T5231] netlink: 96 bytes leftover after parsing attributes in process `syz.4.227'. [ 98.683968][ T26] audit: type=1800 audit(1762500045.569:54): pid=5229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.226" name="bus" dev="loop1" ino=1048599 res=0 errno=0 [ 99.365034][ T4478] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 99.574443][ T4478] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 99.618173][ T4478] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 99.652367][ T4478] usb 4-1: Product: syz [ 99.674500][ T4478] usb 4-1: Manufacturer: syz [ 99.679136][ T4478] usb 4-1: SerialNumber: syz [ 99.709736][ T4478] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 99.721683][ T5257] loop1: detected capacity change from 0 to 2048 [ 99.792562][ T5257] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 99.794548][ T5264] loop2: detected capacity change from 0 to 64 [ 99.869235][ T5265] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 99.935365][ T5265] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 256 with error 28 [ 99.959971][ T5265] EXT4-fs (loop1): This should not happen!! Data will be lost [ 99.959971][ T5265] [ 99.976320][ T5265] EXT4-fs (loop1): Total free blocks count 0 [ 99.982617][ T5265] EXT4-fs (loop1): Free/Dirty block details [ 99.988734][ T5265] EXT4-fs (loop1): free_blocks=2415919504 [ 99.994920][ T5265] EXT4-fs (loop1): dirty_blocks=272 [ 100.000281][ T5265] EXT4-fs (loop1): Block reservation details [ 100.009774][ T5265] EXT4-fs (loop1): i_reserved_data_blocks=17 [ 100.101093][ T5264] hfs: request for non-existent node 131072 in B*Tree [ 100.130564][ T5264] hfs: request for non-existent node 131072 in B*Tree [ 100.161511][ T5264] hfs: request for non-existent node 131072 in B*Tree [ 100.181349][ T5264] hfs: request for non-existent node 131072 in B*Tree [ 100.219958][ T5264] hfs: request for non-existent node 131072 in B*Tree [ 100.239540][ T5264] hfs: request for non-existent node 131072 in B*Tree [ 100.272360][ T5264] hfs: request for non-existent node 131072 in B*Tree [ 100.288857][ T5264] hfs: request for non-existent node 131072 in B*Tree [ 100.311921][ T5264] hfs: request for non-existent node 131072 in B*Tree [ 100.334490][ T5264] hfs: request for non-existent node 131072 in B*Tree [ 100.336082][ T4318] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 100.350401][ T4478] vp7045: USB control message 'in' went wrong. [ 100.357555][ T4478] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 100.368753][ T4478] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 100.407303][ T5264] hfs: request for non-existent node 131072 in B*Tree [ 100.447803][ T5264] hfs: request for non-existent node 131072 in B*Tree [ 100.461196][ T5268] hfs: request for non-existent node 12 in B*Tree [ 100.485006][ T5268] hfs: request for non-existent node 12 in B*Tree [ 100.533449][ T4318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 100.552072][ T4318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.557772][ T4327] usb 4-1: USB disconnect, device number 5 [ 100.572169][ T4318] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 100.589422][ T4318] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 100.601287][ T4318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.619734][ T4318] usb 1-1: config 0 descriptor?? [ 100.636038][ T9] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 256 with max blocks 2048 with error 28 [ 100.909900][ T5274] kvm: pic: non byte write [ 101.035603][ T4318] hid-generic 0003:0457:07DA.0004: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.0-1/input0 [ 101.271132][ T4478] usb 1-1: USB disconnect, device number 8 [ 101.442531][ T4318] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 101.633794][ T4318] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.644471][ T4318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 101.655940][ T4318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 101.667921][ T4318] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 101.682605][ T4318] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 101.691941][ T4318] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 101.701091][ T4318] usb 2-1: Manufacturer: syz [ 101.717033][ T4318] usb 2-1: config 0 descriptor?? [ 102.055882][ T4318] rc_core: IR keymap rc-hauppauge not found [ 102.061891][ T4318] Registered IR keymap rc-empty [ 102.068932][ T4318] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 102.104272][ T4318] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 102.133986][ T4318] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 102.160037][ T4318] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 102.190977][ T4318] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 102.222337][ T4318] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 102.252643][ T4318] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 102.282444][ T4318] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 102.313466][ T4318] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 102.332142][ T4334] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 102.348758][ T4318] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 102.363497][ T4327] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 102.396560][ T4318] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 102.432433][ T4318] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 102.475502][ T4318] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 102.489162][ T5336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.269'. [ 102.522407][ T4318] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 102.539306][ T4334] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 102.552308][ T4327] usb 3-1: Using ep0 maxpacket: 32 [ 102.557961][ T4318] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 102.560034][ T4327] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 102.567463][ T4334] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 102.602193][ T4318] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 102.607911][ T4327] usb 3-1: config 0 has no interface number 0 [ 102.625854][ T4327] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 102.639700][ T4334] usb 5-1: Product: syz [ 102.647099][ T4327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.663074][ T4327] usb 3-1: Product: syz [ 102.667280][ T4327] usb 3-1: Manufacturer: syz [ 102.670763][ T4318] usb 2-1: USB disconnect, device number 5 [ 102.671872][ T4327] usb 3-1: SerialNumber: syz [ 102.678003][ T4334] usb 5-1: Manufacturer: syz [ 102.707398][ T4334] usb 5-1: SerialNumber: syz [ 102.721314][ T4327] usb 3-1: config 0 descriptor?? [ 102.741000][ T4334] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 102.742987][ T4327] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 103.039125][ T5351] netlink: 60 bytes leftover after parsing attributes in process `syz.0.275'. [ 103.076993][ T26] audit: type=1326 audit(1762500049.959:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.0.275" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d6278f6c9 code=0x0 [ 103.141177][ T4334] vp7045: USB control message 'in' went wrong. [ 103.160669][ T4334] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 103.177379][ T4334] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 103.564474][ T5358] loop1: detected capacity change from 0 to 32768 [ 103.617710][ T4668] usb 5-1: USB disconnect, device number 6 [ 103.639942][ T5358] ea_get: invalid extended attribute [ 103.646166][ T5358] ffff8880757d3ab0: 04 00 00 00 .... [ 104.242414][ T5378] loop0: detected capacity change from 0 to 64 [ 104.342758][ T4318] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 104.536682][ T4318] usb 4-1: config 0 has no interfaces? [ 104.547260][ T4318] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 104.570580][ T4318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.587324][ T4318] usb 4-1: config 0 descriptor?? [ 104.682190][ T4478] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 104.826858][ T4318] usb 4-1: USB disconnect, device number 6 [ 104.868600][ T4478] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 104.878274][ T4478] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.886870][ T4478] usb 2-1: Product: syz [ 104.891079][ T4478] usb 2-1: Manufacturer: syz [ 104.897294][ T4478] usb 2-1: SerialNumber: syz [ 104.920667][ T4478] usb 2-1: config 0 descriptor?? [ 105.108912][ T4327] usb 3-1: qt2_attach - failed to power on unit: -71 [ 105.117439][ T4327] quatech2: probe of 3-1:0.51 failed with error -71 [ 105.156321][ T4327] usb 3-1: USB disconnect, device number 9 [ 105.163530][ T4478] usb 2-1: USB disconnect, device number 6 [ 105.203785][ T5399] loop2: detected capacity change from 0 to 1024 [ 105.238085][ T5399] hfsplus: invalid length 256 has been corrected to 255 [ 105.245507][ T5399] ================================================================== [ 105.253668][ T5399] BUG: KASAN: slab-out-of-bounds in hfsplus_uni2asc+0x5b9/0x1240 [ 105.261422][ T5399] Read of size 2 at addr ffff88807d501a18 by task syz.2.294/5399 [ 105.269179][ T5399] [ 105.271506][ T5399] CPU: 0 PID: 5399 Comm: syz.2.294 Not tainted syzkaller #0 [ 105.278782][ T5399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 105.288844][ T5399] Call Trace: [ 105.292133][ T5399] [ 105.295068][ T5399] dump_stack_lvl+0x168/0x22e [ 105.299773][ T5399] ? read_lock_is_recursive+0x10/0x10 [ 105.305157][ T5399] ? show_regs_print_info+0x12/0x12 [ 105.310350][ T5399] ? load_image+0x3b0/0x3b0 [ 105.314845][ T5399] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 105.320211][ T5399] ? __virt_addr_valid+0x188/0x540 [ 105.325310][ T5399] ? __virt_addr_valid+0x465/0x540 [ 105.330411][ T5399] ? hfsplus_uni2asc+0x5b9/0x1240 [ 105.335437][ T5399] print_report+0xa8/0x210 [ 105.339840][ T5399] kasan_report+0x10b/0x140 [ 105.344331][ T5399] ? hfsplus_uni2asc+0x5b9/0x1240 [ 105.349340][ T5399] hfsplus_uni2asc+0x5b9/0x1240 [ 105.354264][ T5399] hfsplus_listxattr+0x58b/0xb80 [ 105.359185][ T5399] ? __stack_depot_save+0x421/0x460 [ 105.364372][ T5399] ? hfsplus_getxattr+0x110/0x110 [ 105.369378][ T5399] ? kasan_save_free_info+0x2d/0x50 [ 105.374668][ T5399] ? slab_free_freelist_hook+0x131/0x1a0 [ 105.380286][ T5399] ? user_path_at_empty+0x48/0x60 [ 105.385302][ T5399] ? bpf_lsm_inode_listxattr+0x5/0x10 [ 105.390666][ T5399] listxattr+0x283/0x2e0 [ 105.394898][ T5399] ? hfsplus_getxattr+0x110/0x110 [ 105.399906][ T5399] path_listxattr+0xd9/0x1b0 [ 105.404484][ T5399] ? path_getxattr+0x400/0x400 [ 105.409234][ T5399] ? lockdep_hardirqs_on+0x94/0x140 [ 105.414424][ T5399] do_syscall_64+0x4c/0xa0 [ 105.418822][ T5399] ? clear_bhb_loop+0x60/0xb0 [ 105.423483][ T5399] ? clear_bhb_loop+0x60/0xb0 [ 105.428142][ T5399] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.434021][ T5399] RIP: 0033:0x7f7b99f8f6c9 [ 105.438434][ T5399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.458028][ T5399] RSP: 002b:00007f7b9adef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3 [ 105.466432][ T5399] RAX: ffffffffffffffda RBX: 00007f7b9a1e5fa0 RCX: 00007f7b99f8f6c9 [ 105.474388][ T5399] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 105.482343][ T5399] RBP: 00007f7b9a011f91 R08: 0000000000000000 R09: 0000000000000000 [ 105.490301][ T5399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.498253][ T5399] R13: 00007f7b9a1e6038 R14: 00007f7b9a1e5fa0 R15: 00007fff1dcd9018 [ 105.506214][ T5399] [ 105.509214][ T5399] [ 105.511518][ T5399] Allocated by task 5399: [ 105.515824][ T5399] kasan_set_track+0x4b/0x70 [ 105.520405][ T5399] __kasan_kmalloc+0x8e/0xa0 [ 105.524988][ T5399] __kmalloc+0xb0/0x240 [ 105.529127][ T5399] hfsplus_find_init+0x85/0x1c0 [ 105.533965][ T5399] hfsplus_listxattr+0x38c/0xb80 [ 105.538885][ T5399] listxattr+0x283/0x2e0 [ 105.543113][ T5399] path_listxattr+0xd9/0x1b0 [ 105.547684][ T5399] do_syscall_64+0x4c/0xa0 [ 105.552082][ T5399] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.557955][ T5399] [ 105.560259][ T5399] The buggy address belongs to the object at ffff88807d501800 [ 105.560259][ T5399] which belongs to the cache kmalloc-1k of size 1024 [ 105.574293][ T5399] The buggy address is located 536 bytes inside of [ 105.574293][ T5399] 1024-byte region [ffff88807d501800, ffff88807d501c00) [ 105.587632][ T5399] [ 105.589938][ T5399] The buggy address belongs to the physical page: [ 105.596339][ T5399] page:ffffea0001f54000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d500 [ 105.606469][ T5399] head:ffffea0001f54000 order:3 compound_mapcount:0 compound_pincount:0 [ 105.614772][ T5399] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 105.622748][ T5399] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff888017441dc0 [ 105.631312][ T5399] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 105.639870][ T5399] page dumped because: kasan: bad access detected [ 105.646272][ T5399] page_owner tracks the page as allocated [ 105.651961][ T5399] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 4356, tgid 4356 (kworker/u4:6), ts 63091172233, free_ts 57964825419 [ 105.672605][ T5399] post_alloc_hook+0x173/0x1a0 [ 105.677354][ T5399] get_page_from_freelist+0x1a26/0x1ac0 [ 105.682884][ T5399] __alloc_pages+0x1df/0x4e0 [ 105.687555][ T5399] alloc_slab_page+0x5d/0x160 [ 105.692238][ T5399] new_slab+0x87/0x2c0 [ 105.696287][ T5399] ___slab_alloc+0xbc6/0x1230 [ 105.700943][ T5399] __kmem_cache_alloc_node+0x1a0/0x260 [ 105.706393][ T5399] __kmalloc+0xa0/0x240 [ 105.710533][ T5399] ieee802_11_parse_elems_full+0xb2/0x1230 [ 105.716323][ T5399] ieee80211_bss_info_update+0x7ed/0xbc0 [ 105.721942][ T5399] ieee80211_ibss_rx_queued_mgmt+0x17b4/0x2b10 [ 105.728081][ T5399] ieee80211_iface_work+0x726/0xc80 [ 105.733269][ T5399] process_one_work+0x898/0x1160 [ 105.738189][ T5399] worker_thread+0xaa2/0x1250 [ 105.742846][ T5399] kthread+0x29d/0x330 [ 105.746899][ T5399] ret_from_fork+0x1f/0x30 [ 105.751298][ T5399] page last free stack trace: [ 105.755948][ T5399] free_unref_page_prepare+0x8b4/0x9a0 [ 105.761404][ T5399] free_unref_page+0x2e/0x3f0 [ 105.766061][ T5399] qlist_free_all+0x76/0xe0 [ 105.770542][ T5399] kasan_quarantine_reduce+0x144/0x160 [ 105.775979][ T5399] __kasan_slab_alloc+0x1e/0x80 [ 105.780811][ T5399] slab_post_alloc_hook+0x4b/0x480 [ 105.785932][ T5399] kmem_cache_alloc+0x123/0x2f0 [ 105.790762][ T5399] mas_alloc_nodes+0x2ec/0x890 [ 105.795612][ T5399] mas_preallocate+0x161/0x3c0 [ 105.800367][ T5399] __vma_adjust+0x2e2/0x1c60 [ 105.804944][ T5399] setup_arg_pages+0x98e/0xab0 [ 105.809691][ T5399] load_elf_binary+0xb97/0x26d0 [ 105.814522][ T5399] bprm_execve+0xb10/0x18a0 [ 105.819005][ T5399] kernel_execve+0x8b9/0x9c0 [ 105.823577][ T5399] call_usermodehelper_exec_async+0x207/0x350 [ 105.829632][ T5399] ret_from_fork+0x1f/0x30 [ 105.834032][ T5399] [ 105.836343][ T5399] Memory state around the buggy address: [ 105.841950][ T5399] ffff88807d501900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 105.849992][ T5399] ffff88807d501980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 105.858029][ T5399] >ffff88807d501a00: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 105.866070][ T5399] ^ [ 105.870899][ T5399] ffff88807d501a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 105.878938][ T5399] ffff88807d501b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 105.886975][ T5399] ================================================================== [ 105.900653][ T4343] hfsplus: b-tree write err: -5, ino 4 [ 105.928260][ T5399] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 105.935488][ T5399] CPU: 1 PID: 5399 Comm: syz.2.294 Not tainted syzkaller #0 [ 105.942780][ T5399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 105.952846][ T5399] Call Trace: [ 105.956133][ T5399] [ 105.959065][ T5399] dump_stack_lvl+0x168/0x22e [ 105.963755][ T5399] ? memcpy+0x3c/0x60 [ 105.967749][ T5399] ? show_regs_print_info+0x12/0x12 [ 105.972956][ T5399] ? load_image+0x3b0/0x3b0 [ 105.977563][ T5399] panic+0x2c9/0x710 [ 105.981501][ T5399] ? bpf_jit_dump+0xd0/0xd0 [ 105.986021][ T5399] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 105.991928][ T5399] ? _raw_spin_unlock+0x40/0x40 [ 105.996877][ T5399] check_panic_on_warn+0x80/0xa0 [ 106.001805][ T5399] ? hfsplus_uni2asc+0x5b9/0x1240 [ 106.006817][ T5399] end_report+0x66/0x110 [ 106.011051][ T5399] kasan_report+0x118/0x140 [ 106.015544][ T5399] ? hfsplus_uni2asc+0x5b9/0x1240 [ 106.020645][ T5399] hfsplus_uni2asc+0x5b9/0x1240 [ 106.025484][ T5399] hfsplus_listxattr+0x58b/0xb80 [ 106.030628][ T5399] ? __stack_depot_save+0x421/0x460 [ 106.035831][ T5399] ? hfsplus_getxattr+0x110/0x110 [ 106.040857][ T5399] ? kasan_save_free_info+0x2d/0x50 [ 106.046600][ T5399] ? slab_free_freelist_hook+0x131/0x1a0 [ 106.052228][ T5399] ? user_path_at_empty+0x48/0x60 [ 106.057242][ T5399] ? bpf_lsm_inode_listxattr+0x5/0x10 [ 106.062619][ T5399] listxattr+0x283/0x2e0 [ 106.066850][ T5399] ? hfsplus_getxattr+0x110/0x110 [ 106.071858][ T5399] path_listxattr+0xd9/0x1b0 [ 106.076436][ T5399] ? path_getxattr+0x400/0x400 [ 106.081183][ T5399] ? lockdep_hardirqs_on+0x94/0x140 [ 106.086369][ T5399] do_syscall_64+0x4c/0xa0 [ 106.090770][ T5399] ? clear_bhb_loop+0x60/0xb0 [ 106.095432][ T5399] ? clear_bhb_loop+0x60/0xb0 [ 106.100093][ T5399] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.105973][ T5399] RIP: 0033:0x7f7b99f8f6c9 [ 106.110372][ T5399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.129974][ T5399] RSP: 002b:00007f7b9adef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3 [ 106.138387][ T5399] RAX: ffffffffffffffda RBX: 00007f7b9a1e5fa0 RCX: 00007f7b99f8f6c9 [ 106.146350][ T5399] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 106.154308][ T5399] RBP: 00007f7b9a011f91 R08: 0000000000000000 R09: 0000000000000000 [ 106.162262][ T5399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.170217][ T5399] R13: 00007f7b9a1e6038 R14: 00007f7b9a1e5fa0 R15: 00007fff1dcd9018 [ 106.178177][ T5399] [ 106.181427][ T5399] Kernel Offset: disabled [ 106.185740][ T5399] Rebooting in 86400 seconds..