last executing test programs:

1m45.435416708s ago: executing program 1 (id=399):
r0 = io_uring_setup(0x67f6, &(0x7f00000002c0)={0x0, 0x51af, 0x400, 0x21, 0x28c})
openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m45.356849619s ago: executing program 1 (id=403):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d8005"], 0x2c}}, 0x0)

1m45.292611006s ago: executing program 1 (id=405):
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)

1m44.159395674s ago: executing program 1 (id=412):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@grpquota}, {@bh}]}, 0xfe, 0x55b, &(0x7f0000000980)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x17e)
getdents64(r0, &(0x7f0000000200)=""/179, 0xb3)

1m43.972213739s ago: executing program 1 (id=413):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb1, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m43.49239225s ago: executing program 1 (id=418):
r0 = io_uring_setup(0x6ecd, &(0x7f0000000380)={0x0, 0x49fd, 0x10003, 0x20002, 0x185})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
creat(&(0x7f0000000080)='./file0\x00', 0xa)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m43.267966346s ago: executing program 32 (id=418):
r0 = io_uring_setup(0x6ecd, &(0x7f0000000380)={0x0, 0x49fd, 0x10003, 0x20002, 0x185})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
creat(&(0x7f0000000080)='./file0\x00', 0xa)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

44.066353007s ago: executing program 3 (id=1045):
r0 = syz_io_uring_setup(0x1da1, &(0x7f00000000c0)={0x0, 0xe874, 0x40, 0x2000000, 0x2d4}, &(0x7f0000000d40), &(0x7f0000000080))
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x22, &(0x7f0000000380)={&(0x7f0000002000), 0x0, 0x1}, 0x1)

44.010390089s ago: executing program 3 (id=1046):
r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r0}, 0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)={'sha3-512-generic\x00'}})

44.010113567s ago: executing program 3 (id=1047):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x20, 0x127c, &(0x7f0000000580)="$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")
statx(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4000, 0x4, 0x0)
mount$nfs(&(0x7f0000000100)='...', 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)

43.853993354s ago: executing program 3 (id=1048):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x10, 0x0)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0xa0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00')
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

43.848370999s ago: executing program 3 (id=1049):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}}, @NFT_MSG_NEWFLOWTABLE={0x74, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

43.552618675s ago: executing program 3 (id=1050):
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x3, 0x1, 0x900}})

43.459252938s ago: executing program 33 (id=1050):
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x3, 0x1, 0x900}})

13.385083973s ago: executing program 2 (id=1307):
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0)
ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000000840)={{}, 0xb})

13.298522989s ago: executing program 2 (id=1309):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x5, 0x7fc00007}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x2007})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x20000018})
epoll_pwait2(r1, &(0x7f0000000080)=[{}], 0x1, &(0x7f0000001500), 0x0, 0x0)

12.380477398s ago: executing program 2 (id=1311):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x2, 0x100000000, 0x6})
fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x1, 0x1, 0x7, 0x10})

12.27338687s ago: executing program 2 (id=1314):
syz_mount_image$jfs(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x101c002, &(0x7f0000000a00)=ANY=[@ANYBLOB='discard,discard=0x0000000000020001,discard,iocharset=cp857,errors=remount-ro,iocharset=iso8859-2,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c6572726f72733d72656d6f756e742d726f2c696f636861727365743d69736f383835392d342c00fb8602bc827d678ff4d12dba8652b9d39b4b4ff5657dd6ec1c923fb62ce2b91d41de0069a0e4d9cc00c46db0687686104197b53eeedda4d051ba690ba658ce6beb"], 0x23, 0x61c3, &(0x7f000000c9c0)="$eJzs3c1vHGcdB/Df7JtfQtOoh6pECLlteCmleS0hUKDtAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFEiCMn/oAeuHLjDyBSggTqAXXQ2M/jjKe7XjuJd3Yzn4/kzPz2mfE+k+/uzq5nZp8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOKHP/jxuSIirvwq3XAi4nPRj+hFrFT1WkSsrJ2or/NCbDfH8xExXIqo1t/+59mI1yPi4+MR9x/cWa9uPn/Afnz/z//4w0+O/ejvfxqe+e9fbvXfmLTc7du//c9f7z769gIAAEAXlWVZFulj/smIGKTP9gDA0y/v/8sk366eu3pzzvqjVqvV6gWs68rx7taLiNisr1O9Z3A4HgAWzGZ80nYXaJH8O20QEcfa7gQw14q2O8CRuP/gznqR8i3q+4O1nfZ8Lsie/DeL3es7Jk2naZ5jMqvH11b047kJ/VmZUR/mSc6/18z/yk77KC131PnPyqT8RzuXPnVOzr/fzL/h6cm/Nzb/rsr5Dw6Vf1/+AAAAAAAwx/Lf/0+0fPx36fE35UD2O/67NqM+AAAAAAAAAMCTdtjx/waN8f92Gf8PAAAA5lb1Wb3yu+MPb5v0XWzV7ZeLiGcaywMdky6WWW27HwAAAAAAAAAAAADQJYOdc3gvFxHDiHhmdbUsy+qnrlkf1uOuv+i6vv3QZW2/yAMAwI6Pjzeu5S8iliPicvquv+Hq6mpZLq+slqvlylJ+PztaWi5Xap9r87S6bWl0gDfEg1FZ/bLl2np10z4vT2tv/r7qvkZl/wAdm40WAweAiNjZG92ftEf6n/3VYirLZ6PlNzksiH2e/ywoz38Oou3HKQAAAHD0yrIsi/R13ifTMf9e250CAGYi7/+bxwXUarVarVY/fXVdOd7dehERm/V1qvcMhuMHgAWzGZ+03QVaJP9OG0TEC213AphrRdsd4Ejcf3BnvUj5FvX9QRrfPZ8Lsif/zWJ7vbz+uOk0zXNMZvX42op+PDehP8/PqA/zJOffa+Z/Zad9lJY76vxnZVL+1XaeaKE/bcv595v5Nzw9+ffG5t9VOf/BofLvyx8AAAAAAOZY/vv/ibk6/jt61M2Zar/jv2tj1zi6vgAAAAAAAADAk3L/wZ31fN1rPv7/hTHLuf7z6ZTzL+TfSTn/XiP/rzaW69fm7739MP9/P7iz/sdb//p8nh40/6U8U6RHVpEeEUW6p2KQpo+zdZ+1NeyPqnsaFr3+IJ3zUw7fjWtxPTbi7J5le+n/42H7uT3tVU+H2+1lf6f9/J72wW57Xv/CnvZhOruoXMntp2M9fh7X453t9qptacr2L09pL6e05/z7nv+dlPMf1H6q/FdTe9GYVu591PvM874+HXc/b1374m/OHv3mTLUV/d1tq6u276UW+rP9f3JsFL+8uXHj9O2rt27dOBdpsufW85EmT1jOf5h+dl//X95pz6/79efrvY9Gh86/Nf295VYMJub/cm2+2t5XZtG/luX8R+kn5/9Oah///F+g/Bv2e/6/2kJ/AAAAAAAAAAAAAAAAYD9lWW5fIvpWRFxM1/+0dW0mADBbef9fJvn2WdX9Gd+fWr3gdTFn/Zlp/Wk5X/1RqxexrivHe7NeRMTf6utU7xl+Pe6XAQDz7NOI+GfbnaA18u+w/H1/1fRU250BZurmBx/+9Or16xs3brbdEwAAAAAAAADgUeXxP9dq4z+fKsvybmO5PeO/vh1rjzv+5yDP7A4wOmGg6v7ht2k/W71Rv1cbbvzFmDT+93B3br/xvwdT7m84pX00pX1pSvvylPaxF3rU5PxfrI13fioiTjaGX+/C+K/NMe+7IOf/Uu3xXOX/lcZy9fzL3y9y/r09+Z+59f4vztz84MPXrr1/9b2N9zZ+duHcubMXLl68dOnSmXevXd84u/Nviz0+Wjn/PPa180C7JeefM5d/t+T8v5Rq+XdLzv/LqZZ/t+T88/s9+XdLzj9/9pF/t+T8X0m1/Lsl5/+1VMu/W3L+r6Za/t2S8/96quXfLTn/11It/27J+Z9Otfy7Jed/JtUHzH/lqPvFbOT88xEuz/9uyfnnMxvk3y05//Opln+35PwvpFr+3ZLzfz3V8u+WnP83Ui3/bsn5X0y1/Lsl5//NVMu/W3L+l1It/27J+X8r1fLvlpz/t1Mt/27J+b+Ravl3S87/O6mWf7fk/L+bavl3S87/e6mWf7fk/N9Mtfy75eH3/5sxY8ZMnmn7lQkAAAAAAAAAAAAAaJrF6cRtbyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9nBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYu7cYue76DuBnr147kBgIqZMaWDvGGGeTXV/iC62LCdeGWwmEQi/YrndtFnyL1y5JGsmOAiUSRkUVbcNDW0BRm5cKP+SBVgHlAbVCqkTaB/qCqFB5iCqDEqRKaQXZas75//87Mzs7s2tP1jPnfD5S/PPOnJlz5syZs/td5zsDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1Nv0zpkvDmRZVvsv/2N9lr2q9ve14+vzy952vbcQAAAAuFa/yv984aZ0wcFl3KhumX954w+enp+fn88+MfQXI1+dn09XjGfZyJosy6+LLv/kkwP1ywSPZWMDg3VfD3ZY/VCH64c7XD/S4frRDtev6XD9WIfrF+2ARdYWv4/J72xL/tf1xS7Nbs5G8uu2tLjVYwNrBgfj73JyA/lt5keOZbPZiWwmm2pYvlh2IF/+mU21db0vi+sarFvXxtoR8uIjR+M2DIR9vKVhXQv3Gf3sHdn4L1585Ojfnbtya6vZcTc03F+xnds217bz8+GSYlsHsjVpn8TtHKzbzo0tnpOhhu0cyG9X+3vzdr6wzO0cWtjMVdX8nI9lg/nfn8v303D9r/XSftoYLnvp9izLLi5sdvMyi9aVDWbrGi4ZXHh+xoojsnYftUPptdnwio7TTcs4Tmtzekvjcdr8mojP/6Zwu+EltqH+afrZo6N1z/sv56/mOI1qj3qp10rzMdjt10qvHIPxuHguf9CPtzwGt4TH/8jWpY/BlsdOi2MwPe66Y3Bzp2NwcHQo3+b0JAzkt1k4Bnc0LD+Ur2kgn89vbX8MTp47eWZy7qGH75w9eeT4zPGZU7t27JjatWfPvn37Jo/NnpiZKv68yr3d+9Zlg+k1sDnsu/gaeEvTsvWH6vw3Rhedf6/2dTjW5nW4vmnZbr8Oh5sf3MDqvCAXH9PFa+NjtZ0+dmkwW+I1lj8/26/9dZged93rcLjuddjye0qL1+HwMl6HtWXObF/ezyzDdf+12oalvxdc2zG4vu4YbP55pPkY7PbPI71yDI6F4+JH25f+XrAxbO/jEyv9eWRo0TGYHm4499QuST/vj+3LR6vj8rbaFTeMZufnZs7e9eCRc+fO7sjCWBWvqztWmo/XdXWPKVt0vA6u+Hg9OPvGx29rcfn6sK/G7qz9Mbbkc1VbZvdd7Z+r/Ltb6/3ZcOnOLIwuW+392eq7eW1/jmbZ17736H3feeRr71xyf9by5ucnr/1n8ZRL686/I0ucf2Puf7lYX7qrx4ZGhovX71DaOyMN5+PGp2o4P3cN5Ot+YXJ55+OR8N9qn49vbnM+3tC0bLfPxyPNDy6ejwc6/bbj2jQ/n2PhODkx1f58XFtmw86VHpPDbc/Ht4c5EPb/W0NSSLmo7thZ6rhN6xoeHgmPaziuofE43dWw/EjIZrV1PbXzKo7TF7Ns2+3FfQ2lR7dgtY7T8aZlu32cpt99LXWcDnT67dvVaX4+x8JxcfOu9sdpbZlnd1/7uXNt/GvduXO00zE4MjRa2+aRdBDm5/tsfm08Bu/KjmansxPZdH7taH48DeTrmrh7ecfgaPhvtc+VG9ocg9ualu32MZi+jy117A0ML37wXdD8fI6F4+KJu9sfg7Vl3rW3uz+7bguXpGXqfnZt/v3aUr/zuq1pN71Sx8pw2M7v7W3/u9naMif2rTRntt9Pd4RLbmixn5pfv0u9pqaz1dlPG8J2Xtm39H6qbU9tma/uX+bxdDDLsgsP3JP/vjf8+8qF8z98uuHfXVr9m86FB+75+auP/fNKth+A/vdyMdYV3+vq/mVqOf/+DwAAAPSFmPsHw0zkfwAAACiNmPvj/xWeyP8AAABQGjH3D4eZVCT/b3jXldmXL2SpmT8fxOvTbri3WC52XKfC1+PzC2qX3/PkzP/804XlrXswy7Jf3vsnLZffcG/crsJ42M7L7268fJGn71zWug/ffyGtt76//vVw//HxLPcwaFXBncqy7JmbvpyvZ/yTl/L57L2H83nfxccfqy3zwv7i63j7519XLP/Xofx78NiRhts/H/bDT8Ocen/r/RFv961Lb9249+ML64u3G9h8Y/6wn/hUcb/xfXK+8lixfNzPS23/d7701Ldqyz/45tbbf2Gw9fY/Fe73yTD/9w3F8vXPQe3reLsvhO2P64u3u+ub3225/Ze/WCx/5j3FcofDjOvfFr7e8p4rs/X768GBIw2PK3tvsVxc/9QP/yy/Pt5fvP/m7R87dKlhfzQfH8/+e3E/k03Lx8vjeqJ/bFp/7X7qj8+4/qf+9HDDfu60/sv3Pf+G2v02r/+OpuXOPLA9X//C/TW+Y9PffOHLLdcXt+fgP5xpeDwHPxJex2H9T3wqHI/h+v+7XNxf87srHP5I4/knLv/19RcaHk/0vl8U67/89uP5XDO2dt0Nr3r1jRffVNt3WfbcmuL+Oq3/+N+ebtj+b9xS7I94fezoN69/KXH9Zz83cer03PnZ6bRXH7kpf++cDxTbE7f3pnBubf760Olzn545Oz41PpVl4+V9C72r9s0wf16Mi+2Xnl90Bt1+f3g+b/urZ9Zt/bcvxcv/42PF5ZfeX3zfektY7ivh8vXh+VvZ+hd7YtMt+et74NmwhfOL3y/4Wmzc8t/7lrVgePzNPxfE4/3M6z+d74fadfn3jfi6vsbt//F0cT/fDvt1Prwz8+ZbFtZXv3x8b4RLHy1e79e8/8JpLj6vfx+e7w/+tLj/uF3x8f44/Bzz3Q2N57t4fHz7wmDz/efv4nExnE+yi8X1cam4vy+9cEvLzYvvQ5JdvDX/+s/T/dy6ooe5lLmH5iZPzJ46/+DkuZm5c5NzDz186OTp86fOHcrfy/PQZzrdfuH8tC4/P03P7Nmd5Wer08V4hV3v7T9z/9HpvVNbp2eOHTl/7Nz9Z2bOHj86N3d0Znpu65Fjx2Y+1+n2s9MHduzcv2vvzonjs9MH9u3fv2v/xOyp07XNKDaqgz1Tn504dfZQfpO5A7v377j77t1TEydPT88c2Ds1NXG+0+3z700TtVv/8cTZmRNHzs2enJmYm3145sCO/Xv27Oz4boAnzxybG588e/7U5Pm5mbOTxWMZP5dfXPve1+n2lNPcfxY/zzYbKN6IL/vwHXvS+7PWPPnokndVLNL0BqJXwnvRfP81Z/Yt5+uY+0fCTCqS/wEAAKAKYu4fDTOR/wEAAKA0Yu5fE2Yi/wMAAEBpxNw/Fmb6XwIqkv9L1//fcGFZ69f/1/+v31/6/xXr/3+01/r/xflC/787rrV/r/8f6P/r/+v/6//r/9MFvdb/j7l/bZb5938AAAAoqZj714WZyP8AAABQGjH33xBmIv8DAABAacTc/6owk4rkf/1//X/9/1L2/8farV//X/+/zPT/29P/70D/fzKrVv//Yje3X/9f/5/Feq3/H3P/q8NMKpL/AQAAoApi7r8xzET+BwAAgNKIuf+mMBP5HwAAAEoj5v71YSYVyf/6//r/+v+l7P+3Xb/+v/5/men/t6f/34H+v8//1//X/6ereq3/H3P/a8JMKpL/AQAAoApi7n9tmIn8DwAAAL1n+OpuFnP/68JMFuX/q1wBAAAAcN3F3H9z1lQEr8i//+v/6//r/+v/6/+3Xv/y+/9Dmf5/79D/b0//vwP9/xX150eavtb/1//X/6dZr/X/89yfjWWvDzOpSP4HAACAKoi5/5YwE/kfAAAASiPm/l8LM5H/AQAAoDRi7t8QZlKR/K//X5r+/0v1T53+/5XZl19a6OsP6f83rF//3+f/l5n+f3v6/x3o//v8f/1//X+6qtf6/zH33xpmUpH8DwAAAFUQc/9tYSbyPwAAAPSJwY5LxNz/62Em8j8AAACURsz9G8NMKpL/9f97vP8fm6M+/9/n/+v/92T/f0z/v+fo/7en/9+B/r/+v/6//j9d1Wv9/5j73xBmUpH8DwAAAFUQc/8bw0zkfwAAACiNmPvfFGYi/wMAAEBpxNw/HmZSkfyv/9/j/f+iBz+6jM//b6D/r//fbv36/z7/v8z0/9vT/+9A/1//X/9f/5+u6rX+f8z9m8JMKpL/AQAAoApi7t8cZiL/AwAAQGnE3H97mIn8DwAAAKURc/+WMJOK5H/9/77o/2f6//r/+v/6//r/y6P/357+fwf6//r/+v/6/3RVr/X/Y+5/c5hJRfI/AAAAVEHM/VvDTOR/AAAAKI2Y+98SZiL/AwAAQGnE3L8tzKQi+V//X/9f/1//X/+/9fr1//uT/n97+v8d6P/r/+v/6//TVb3W/4+5/61hJhXJ/wAAAFAFMfdvDzOR/wEAAKA0Yu6/I8xE/gcAAIDSiLl/IsykIvlf/1//X/9f/1//v/X69f/7k/5/e/r/Hej/6//r/+v/01W91v+Puf/OMJOK5H8AAACogpj77wozkf8BAACgNGLunwwzkf8BAACgNGLunwozqUj+1//X/9f/1/9fUf//TQv3q/9f0P/vLfr/7en/d6D/r/9/3fv/I/r/lEqv9f9j7t8RZlKR/A8AAABVEHP/zjAT+R8AAABKI+b+XWEm8j8AAACURsz9u8NMKpL/9f/1//X/9f99/n/r9ev/9yf9//a63/+PD1H/X/9f/9/n/+v/s1iv9f9j7r87zKQi+R8AAACqIOb+PWEm8j8AAACURsz9e8NM5H8AAAAojZj794WZVCT/6//r/+v/6//r/7dev/5/f9L/b8/n/3eg/6//38f9/9qxpf9Pr+m1/n/M/fvDTCqS/wEAAKAKYu5/W5iJ/A8AAAClEXP/b4SZyP8AAABQGjH3/2aYSUXyv/6//n+v9/+LS0fzP/X/q9n/H9X/1/9fAf3/9vT/O9D/1//v4/6/z/+nF/Va/z/m/gNhJhXJ/wAAAFAFMff/VpiJ/A8AAAClEXP/28NM5H8AAAAojZj7D4aZVCT/6/+vUv8/Xqj/7/P/K9X/X9Nwuc//1/9fDfr/7en/d6D/r/+v/6//T1f1Wv8/5v53hJlUJP8DAABAFcTcf0+YifwPAAAApRFz/zvDTOR/AAAAKI2Y+98VZlKR/K//7/P/r3//f6Rh2/X/F27X//3/7nz+v/6//v9K6P+3p//fgf6//r/+v/4/XdVr/f+Y+98dZlKR/A8AAABVEHP/e8JM5H8AAAAojZj73xtmIv8DAABAacTc/74wk4rkf/1//f/r3//3+f/6/wX9f/3/btD/b0//vwP9f/1//X/9f7pqFfv/a7Nl9P9j7v/tMJOK5H8AAACogpj77w0zkf8BAACgNGLuf3+YifwPAAAApRFz/wfCTCqS//X/9f/1//X/9f9br1//vz/p/7fXZ/3/X90YLtf/L+j/9/b2r7T/P9z09SvS///JUv3/+TXNt9f/55Wwiv3/ln3/5q9j7v9gmElF8j8AAABUQcz9Hwozkf8BAACgNGLu/3CYifwPAAAApRFz/++EmVQk/+v/17Zjob2s/6//n1+g/6//r//ft/T/2+uz/r/P/2+i/9/b2+/z//X/WazX+v8x938kzKQi+R8AAACqIOb++8JM5H8AAAAojZj7PxpmIv8DAABAacTc/7Ewk4rkf/1/n/+v/6//r//fev36//1J/789/f8O9P/1/3ut//9f+v/0t17r/8fcf3+YSUXyPwAAAFRBzP0fDzOR/wEAAKA0Yu7/3TAT+R8AAABKI+b+T4SZVCT/6//3S/9/XP9f/1//v+nx6P/r/7ei/9+e/n8H+v/6/73W//f5//S5Xuv/x9z/yTCT5ef/sWUvCQAAAFwXMff/XphJRf79HwAAAKog5v7fDzOR/wEAAKA0Yu7/gzCTiuR//f9+6f/7/P9M/1//v+nx6P/r/7eyev3/eObR/9f/1/+P9P/1//X/adZr/f+Y+/8wzKQi+R8AAACqIOb+T4WZyP8AAADQF1r9P9nNYu4/FGYi/wMAAEBpxNx/OMykIvlf/1//X/+/R/v/f7n5X3/0gw8d3qH/r/+v/78iq/r5/7UXv8//1//X/0/0/1fe/6//Hqr/Txn1Wv8/5v4jYSYLwe8DPuAfAAAA+lvM/X8UZlKRf/8HAACAKoi5/2iYifwPAAAApRFz/3SYSUXyv/6//r/+f4/2//v48//j/uin/v/Emj7q/8eTrv5/S6va///4Qk9c/3+l/f/RlpdWqP8/kOn/d12L7f9+lmU93f+vp/9PGfVa/z/m/pkwk4rkfwAAAKiCkPsHjxVz4Qr5HwAAAEoj5v7jYSbyPwAAAJRGzP2fDjOpSP7X/9f/1//X//f5/63X37P9f5//35b+f3u90/9vrUL9f5///wq43tuv/6//z2K91v+PuX82zKQi+R8AAACqIOb+z4SZyP8AAABQGjH3fzbMRP4HAACA0oi5/0SYSUXyv/6//r/+v/6//n/r9ev/9yf9//b0/zvQ/9f/1//X/6ereq3/H3P/yTCTiuR/AAD+n737aLKsPu84fgcPxUyx8c4LL+y9XwILe22/AC+88cZVLi9wwDkxOEecowLKQgEFkBBKKAdACQllIQnlHFBGUo1K9PM80z19+tzumdvd5/6fz2ehBzWMzpVqCvjR89UBoIPc/TfGLfY/AAAADCN3/2/GLfY/AAAADCN3/2/FLU32v/5f/z9s///z+v+Dnq//1/+PTP8/T/+/hv5f/6//1/+zUUvr/3P3/3bc0mT/AwAAQAe5+38nbrH/AQAAYBi5+2+KW+x/AAAAGEbu/t+NW5rs/8v6/zOrnv1/Zrz6/5H6f+//P/D5+n/9/8hOtv+/5cd/5tP/6//1/0H/r//X/3O5pfX/uft/L25psv8BAACgg9z9vx+32P8AAAAwjNz9fxC32P8AAAAwjNz9fxi3NNn/3v/v/f/6f/2//n/6+fr/7eT9//M69f83PXT9jY/e/dP3HOX5+n/9v/5f/89mLa3/z93/R3FLk/0PAAAAHeTu/+O4xf4HAACAYeTu/5O4xf4HAACALXR+8qu5+/80bmmy//X/+n/9v/5f/z/9fP3/dtL/z+vU/1/J8/X/+n/9v/6fzVpa/5+7/8/ilib7HwAAADrI3f/ncYv9DwAAAMPI3X9z3GL/AwAAwDBy91+IW5rsf/3/8ff/P9T/6//j6v/1//r/46f/n6f/X0P/r//X/+v/2ail9f+5+2+JW5rsfwAAAOggd/9fxC32PwAAAAwjd/9fxi32PwAAAAwjd/9fxS1N9r/+3/v/9f/6f/3/9PP1/9tJ/z9P/7+G/v9q+/lr9f/6f/0/ux2x/39s5k/bG+n/c/f/ddzSZP8DAABAB7n7/yZusf8BAABgGLn7/zZusf8BAABgGLn7/y5uabL/9f/6f/2//v+K+//9P/Uep/+fpv8/GZvs/3f/uUn/v2Nj/f+Zs5Nf1v9vff/v/f/6f/0/eyzt/f+5+/8+bmmy/wEAAKCD3P3/ELfM7P8j/8N8AAAA4FTl7v/HuMX3/wEAAGDrZXWWu/+f4pYm+1//r//X/+v/vf9/+vlz/f89uz6f/n9ZvP9/3rH0/+dXq5X3/+v/9f/6f/0/E5bW/+fu/+e4pcn+BwAAgA5y998at9j/AAAAMIzc/f8St9j/AAAAMIzc/f8atzTZ/9P9/6Xfr/8/HP3/3s+v/5/++bGp/j//E6+2/19d9vXB+v9f8P7/nvT/8xbz/v8D6P/1/9v8+Qfv/8+v+/H6f6Ysrf/P3f9vcUuT/Q8AAAAd5O7/97jF/gcAAIBh5O7/j7jF/gcAAIBh5O7/z7ilyf73/n/9v/5/+/p/7//fcZrv/1+deP9/Vv9/SPr/efr/NfT/+n/9//z7/2f+XwD0/0xZWv+fu/+/4pYm+x8AAAA6yN3/33GL/Q8AAADbYfevHbj8F5SG3P3/E7fY/wAAADCM3P3/G7c02f/6f/2//l//r/+ffv6y+n/v/z8s/f88/f8a+v/j6OfPDtb/33bQj19C/3/zcff/M/T/TNnT/9976eun1f/n7v+/uKXJ/gcAAIAOcvf/f9xi/wMAAMAwcvc/IW6x/wEAAGAYufufGLc02f/H3v/PvCNU/6//1//r//X/+v9N0//P0/+vof/3/n/v/9f/s1F7+v9dTqv/z93/pLilyf4HAACADnL3Pzlusf8BAABgGLn7b4ubrjm1TwQAAABsWu7+p8QtTb7/7/3/+n/9v/5f/z/9fP3/dtL/z9P/r6H/1//r//X/bNTS+v/c/U+NW5rsfwAAAOggd//T4hb7HwAAAIaRu//pcYv9DwAAAMPI3f+MuKXJ/tf/H2//n1/X/+v/V/p//b/+/0S07f/PTP2VaL8D+v8Hfv3CL+39iv5f/6//1//r/zmkn5z5fYvo/y9e+rvL3P3PjFua7H8AAADoIHf/s+IW+x8AAACGkbv/2XGL/Q8AAADDyN1/e9xyxP0/1zwsmf7f+//1//p//f/08/X/26lt/39I3v+/hv5f/6//1/+zUYvo/3f9+9z9z4lbfP8fAAAAhpG7/7lxi/0PAAAAw8jd/7y4xf4HAACAYeTuf37c0mT/6//1//p//b/+f/r5+v/tpP+fp/9fY5v6/9v1/1f4+e87rs+v/9f/s9/S+v/c/XfELU32PwAAAHSQu/8FcYv9DwAAAMPI3f/CuMX+BwAAgGHk7n9R3NJk/+v/9f/6f/2//n/6+fr/7aT/nzdA/39u9x9/Rf3/nTMfYKr/v3jdMvt/7/9f3OfX/+v/2W9p/X/u/hfHLU32PwAAAHSQu//OuMX+BwAAgGHk7r8rbrH/AQAAYBi5+18StzTZ//p//b/+X/+v/59+vv5/O+n/5w3Q/3v//0r/v9TPr//X/7Pf0vr/3P0vjVua7H8AAADoIHf/3XGL/Q8AAADDyN3/srjF/gcAAIBh5O6/J25psv/1//p//b/+X/8//Xz9/3Y6vv5/pf/X/+v/19D/6//1/1xuaf1/7v6Xxy1N9j8AAAB0kLv/FXGL/Q8AAADDyN3/yrjF/gcAAIBh5O5/VdzSZP/r//X/+n/9v/5/+vn6/+3k/f/z9P9r6P/1//p//T8bNd3/33xq/X/u/lfHLU32PwAAAHSQu//euMX+BwAAgGHk7n9N3GL/AwAAwDBy9782bmmy//X/+v+9/f9qpf/X/+v/d5xA/39upf/fOP3/PP3/Gvr/Mfv/a1YD9f/nD/zx+n+WaGnv/8/d/7q4pcn+BwAAgA5y978+brH/AQAAYBi5+98Qt9j/AAAAMIzc/W+MW5rsf/2//t/7//X/+v/p53v//3bS/8/T/6+h/x+z//f+f/0/p2Zp/X/u/jfFLU32PwAAAHSQu//NcYv9DwAAAMPI3f+WuMX+BwAAgGHk7n9r3NJk/+v/9f/6f/2//n/6+fr/7aT/n6f/X0P/r//X/+v/2ail9f+5+++LW5rsfwAAAOggd//9cYv9DwAAAMPI3f9A3GL/AwAAwDBy978tbmmy//X/+n/9/3b2/+f0//p//f+kpfT/N9zwiw/q//X/+n/9v/5f/9/d0vr/3P1vj1ua7H8AAADoIHf/O+IW+x8AAACGkbv/nXGL/Q8AAADDyN3/rrilyf7f3/9fu9opVHdM9f/RqOn/d9H/7/38+v/pnx/e/6//1/8fv6X0/97/f2WfX/+v/9/mz3+k/v9n9/94/T8jWlr/n7v/wbilyf4HAACADnL3vztusf8BAABgGLn73xO32P8AAAAwjNz9D8UtTfa/9//r//X/+n/9//Tz9f/b6fj6/52/R9D/6//1/wfT/w/y/v+f0P+zOUvr/3P3vzduabL/AQAAoIPc/e+LW+x/AAAAGEbu/vfHLfY/AAAADCN3/wfilib7X/+v/9f/6//1/9PP1/9vJ+//n6f/X6NP/39u6oun3c9frdP+/MP0/97/zwYtrf/P3f/BuKXJ/gcAAIAOcvd/KG6x/wEAAGAYufs/HLfY/wAAADCM3P0fiVua7H/9v/5//P7/V/X/lz1f/6//H5n+P/+KPk3/v0af/n/Saffz2/759f/6f/ZbWv+fu//huKXJ/gcAAIAOcvd/NG6x/wEAAGAYufs/FrfY/wAAADCM3P0fj1ua7H/9f6/+/8yqY//v/f/6f/1/J/r/efr/NfT/+n/9v/6fjVpa/5+7/5EzZ1vufwAAANhWv/xzv/HwYf/YRx7/13OrT8Qt9j8AAAAMI3f/J+MW+x8AAACGkbv/U3FLk/2v/+/V//d8/7/+X/+v/+9E/z9P/7+G/l//r//X/7NRS+v/c/d/Om7ZNfzOHvm/JQAAALAkufs/E7c0+f4/AAAAdJC7/7Nxy779f/GQv6odAAAAWJrc/Z+LW5p8/1//v/D+f3VM/X/8cfr/Hfp//f/U8/X/20n/P+8q+/+LZ/T/+v8Z+n/9v/6fyy2t/8/d//m4pcn+BwAAgEHt+ScKufu/ELfY/wAAADCM3P1fjFvsfwAAABhG7v4vxS1N9r/+/8T7/0zVj/H9/+frt7z/v3n/f+u5yefr//X/I9P/z/P+/zX0/6P0/9fp//X/LMPS+v/c/V+OW5rsfwAAAOggd/9X4hb7HwAAAIaRu/+rcYv9DwAAAMPI3f+1uKXJ/tf/L/z9/1fU/x/i/f/6/x79/wHPH6f//6nrL9z/K7921x36fy45yf4/fy7o//X/+v8dC+r/vf9f/89CbL7/P7vni0ft/3P3fz1uabL/AQAAoIPc/Y/GLfY/AAAADCN3/zfiFvsfAAAAhpG7/5txS5P9r//X/y+l/8//rU+h/7+wff1/NsXd+3/v/9f/7+f9//P0/2vo//X/+n/9Pxu1+f5/7xeP2v/n7v9W3NJk/wMAAEAHufu/Hbfk/j9z5H90DwAAACxM7v7vxC2+/w8AAADDyN3/3bilyf7X/+v/l9L/J+//v/TjvP9/xxj9/8/Ub+n/j9eV9Pe7fw7r/4P+X/+v/9f/6//ZgKX1/7n7vxe3NNn/AAAA0EHu/sfiFvsfAAAAhpG7//txi/0PAAAAw8jd/4O4pcn+1/+P2v9nEa//1//r/5fR/3v//0nx/v95+v819P/6f/2//p+NWlr/n7v/RwEAAP//auBn+g==")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000001c0)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x187842, 0x0)

11.888142869s ago: executing program 2 (id=1320):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20)

11.295389593s ago: executing program 2 (id=1324):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1a852a3ac0122d51000000000800000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1000, &(0x7f0000001cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19c00}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, 0x94)

11.004316185s ago: executing program 34 (id=1324):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1a852a3ac0122d51000000000800000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1000, &(0x7f0000001cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19c00}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, 0x94)

1.557591205s ago: executing program 5 (id=1390):
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000008100)="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", 0x2000, &(0x7f0000000340)={&(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x5040a, 0x7fff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f000000a100)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0xfffffffffffffc25, {0x6, 0x0, 0x0, {0xfffffffffffffffc, 0x8e, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x13ccfb7b182bf51a, 0x7, 0x0, 0x0, 0x0, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.485960218s ago: executing program 4 (id=1392):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)

1.420357619s ago: executing program 5 (id=1393):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000000000000061110c0000000000851000000200"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x440, 0xff, {}, 0x0, 0x0, 0xfb})

1.25886804s ago: executing program 4 (id=1396):
r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2)
read(r0, &(0x7f0000000280)=""/149, 0x95)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0xb, @vbi={0x38305542, 0xeb, 0x0, 0x3136564e, [0xfffffffb], [0x7b5], 0x1}})

1.200264366s ago: executing program 5 (id=1397):
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file0\x00', 0x3a0c050, &(0x7f0000000380)={[{@shortname_mixed}, {@numtail}, {@numtail}, {@shortname_lower}, {@shortname_lower}, {@utf8}, {@rodir}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@shortname_winnt}, {@shortname_lower}, {@utf8no}]}, 0x3, 0x35e, &(0x7f0000000900)="$eJzs3U9oY1UXAPCTeWnSDszXLj4YFISnO0HLzIgLXbUMHRjMRiX4ZyEG21FJ6kCDwXbRtG7EpeBSV+5c6MLFrEVQxJ0Lt44go+JCZzfg4JMkr81Lk9aOkBmLv98inJ57z7v3No/m9bW5eXkpmqszceXmzRsxO1uK8tLFpbhVioVIYs9OjKtMyAEAJ8OtLIvfs4FjlpSmPCUAYMr6r/+vnilk3v7yqP6ZV38AOPHy3//njuoze1jD1alMCQCYsrH7/w+NNFdG/9RfLvxXAABwUj37wotPLdcinknT2Yj1dzr1Tj2eHLYvX4nXoxVrcS7m43bE4EKh91DqP166XFs5l6ZpN35aiHqvolOPWO926oMrheWkX1+N8zEfC3l9frWRZVly6bPayvm0LyJ2uv3xY73Uqc/E6Xz870/HWlyINP4/Vh9xubZyIc0PUF/fq+9G7A7vW/Tmvxjz8e0rcTVasRq92r3LmtrK9vk0vZjVRuo79WqsRjXvc+gdEAAAAAAAAAAAAAAAAAAAAAAA+EcW030L+/vfZMP9exYXJ7T398cZ1Of7A+0O9gfKqllk2W9vPVp/N4mR/YEO7s/TqZfj1L1dOgAAAAAAAAAAAAAAAAAAAPxrtDcr0Wi11jbam1vNYtDdaG+eiohe5o2vP/liLsb7/E1QzscoNKV5aqvZyJK9zlky0icPkt7ge5mPr+3PuNinur+KidOoHt7Uap158McPhpkHkv6RF7aafw77JDF5gcmBaRSD9f8NpnQn36j94EIxMzc++vUsyw4r335p/IBRiijf+RN3dJD1gq9uvHbfY+2zj/czn2cDDz8y/9z19z/6pdlo9UaO/jNY2WjfzpqN/OvJJ9vhQVI4f0oxCErFM6F8VPnuaKaRfPfr8/e/983xRs+KmTcn9EkGy/n0YFNlEPSmeaBpbtJYMxNO/ikEZz9calzb/uHn41YVfkjYqAMAAAAAAAAAAAAAAAAAAO6KwnvFc/mbfWeOqnri6enPDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADunuHn/xeC3UImdjYm9hkP/ujGeFN1baMdUbnXywQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4D/urwAAAP//c7ds/g==")
r0 = open(&(0x7f00000000c0)='.\x00', 0x800, 0x50)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

1.111564252s ago: executing program 4 (id=1398):
syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB='journal_transaction_names,backgrond_compression=gzip,read_only,move_bytes_in_flight=0.0000000000+00002,inodes_32bit,btree_node_prefetch,recovery_pass_last=set_may_go_rw,btree_node_prefetch,version_upgrade=none,\x00'], 0x1, 0x593f, &(0x7f0000007bc0)="$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")

1.025377831s ago: executing program 5 (id=1401):
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000240)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@test_dummy_encryption}]}, 0x3, 0x45c, &(0x7f0000000580)="$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")

766.32709ms ago: executing program 0 (id=1405):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000180)={0x18, 0x0, {0x4, @remote, 'batadv_slave_1\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r0, 0x40047452, &(0x7f0000000040)={0x18, 0x0, {0x2, @empty, 'veth1_to_hsr\x00'}})

764.390127ms ago: executing program 5 (id=1406):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000380)='./bus\x00', 0x1004080, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x0)

751.378801ms ago: executing program 0 (id=1407):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota')
r0 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188)
quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0x8, 0x8, 0x0, 0x1})

685.103973ms ago: executing program 0 (id=1408):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@discard}]}, 0x1, 0x512, &(0x7f0000000380)="$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")

684.826905ms ago: executing program 5 (id=1409):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
io_setup(0x30, &(0x7f0000000600)=<r3=>0x0)
r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x60a, r4, 0x0}])
socket$netlink(0x10, 0x3, 0x0)
io_getevents(r3, 0x1, 0x0, &(0x7f0000000480), &(0x7f0000000180)={0x77359400})

588.373099ms ago: executing program 4 (id=1410):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0)

588.113286ms ago: executing program 4 (id=1411):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000000000010000000a000000090002008d001f106f194eb3050001"], 0x30}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0)

529.181296ms ago: executing program 4 (id=1412):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0)
socket$packet(0x11, 0x3, 0x300)
fanotify_init(0x200, 0x40000)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$6lowpan_control(r1, &(0x7f0000000500)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
write$6lowpan_control(r1, &(0x7f0000000540)='connect aa:aa:aa:aa:aa:10 0', 0x1b)
r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
write$6lowpan_control(r2, &(0x7f00000006c0)='connect aa:aa:aa:aa:aa:10 0', 0x1b)

131.714938ms ago: executing program 0 (id=1413):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000008c0)={0xc, {0x2, 0x0, 0x5150, 0x3a}})

254.878µs ago: executing program 0 (id=1414):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000040000000800000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000180), &(0x7f00000002c0)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r1, &(0x7f0000000340), 0x0}, 0x20)

0s ago: executing program 0 (id=1415):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f30216000000000000000000000002001b0008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0)

kernel console output (not intermixed with test programs):

  124.337389][   T47] usbhid 1-1:1.0: can't add hid device: -71
[  124.340014][   T47] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  124.348869][   T47] usb 1-1: USB disconnect, device number 8
[  124.377811][ T5991] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.390138][ T5991] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00
[  124.393868][ T5991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.411015][ T5991] usb 4-1: config 0 descriptor??
[  124.833982][ T7503] loop2: detected capacity change from 0 to 512
[  124.839101][ T7503] EXT4-fs: Ignoring removed oldalloc option
[  124.859939][ T5991] playstation 0003:054C:0BA0.0004: unknown main item tag 0x0
[  124.872388][ T7503] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.877684][ T7503] ext4 filesystem being mounted at /202/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  124.891404][ T5991] playstation 0003:054C:0BA0.0004: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.3-1/input0
[  124.927146][ T7503] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.640: bg 0: block 217: padding at end of block bitmap is not set
[  124.979602][ T5927] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.058534][ T7511] binder: 7510:7511 ioctl c00c6211 ffffffffffffffff returned -14
[  125.070746][ T5991] playstation 0003:054C:0BA0.0004: Invalid reportID received, expected 18 got 158
[  125.089257][ T5991] playstation 0003:054C:0BA0.0004: Failed to retrieve DualShock4 pairing info: -22
[  125.099246][ T5991] playstation 0003:054C:0BA0.0004: Failed to get MAC address from DualShock4
[  125.103107][ T5991] playstation 0003:054C:0BA0.0004: Failed to create dualshock4.
[  125.125598][ T5991] playstation 0003:054C:0BA0.0004: probe with driver playstation failed with error -22
[  125.299279][ T5991] usb 4-1: USB disconnect, device number 4
[  125.452701][ T7528] loop2: detected capacity change from 0 to 128
[  125.986621][ T7554] netlink: 'syz.3.663': attribute type 5 has an invalid length.
[  126.150299][   T33] audit: type=1326 audit(1755269208.030:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.3.667" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92d598ebe9 code=0x0
[  126.349421][ T7575] loop3: detected capacity change from 0 to 256
[  126.623736][ T7587] loop0: detected capacity change from 0 to 2048
[  126.645470][ T7587] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  126.680239][ T7590] netlink: 'syz.3.679': attribute type 30 has an invalid length.
[  126.697460][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.679'.
[  126.705325][ T7590] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  127.069489][ T7604] netlink: 48 bytes leftover after parsing attributes in process `syz.0.685'.
[  127.197090][ T7609] veth0_macvtap: left promiscuous mode
[  127.220296][ T7608] loop0: detected capacity change from 0 to 2048
[  127.270760][ T7608] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  127.472261][ T7612] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  127.485990][ T7612] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 432 with error 28
[  127.496543][ T7612] EXT4-fs (loop0): This should not happen!! Data will be lost
[  127.496543][ T7612] 
[  127.501298][ T7612] EXT4-fs (loop0): Total free blocks count 0
[  127.503995][ T7612] EXT4-fs (loop0): Free/Dirty block details
[  127.506676][ T7612] EXT4-fs (loop0): free_blocks=2415919104
[  127.518244][ T7612] EXT4-fs (loop0): dirty_blocks=448
[  127.520851][ T7612] EXT4-fs (loop0): Block reservation details
[  127.528407][ T7612] EXT4-fs (loop0): i_reserved_data_blocks=28
[  127.593101][ T7621] loop3: detected capacity change from 0 to 4096
[  127.621975][ T7622] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  127.842002][ T7628] loop2: detected capacity change from 0 to 2048
[  127.873666][ T5926] Dev loop2: RDB in block 1 has bad checksum
[  127.879501][ T7628] Dev loop2: RDB in block 1 has bad checksum
[  127.904789][   T47] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  128.066853][   T47] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  128.070987][   T47] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  128.076528][   T40] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 16 with max blocks 16 with error 28
[  128.085827][   T47] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  128.090176][   T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.093669][   T47] usb 4-1: Product: syz
[  128.095500][   T47] usb 4-1: Manufacturer: syz
[  128.101733][   T47] usb 4-1: SerialNumber: syz
[  128.332930][   T47] usb 4-1: 0:2 : does not exist
[  128.339658][   T47] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  128.357123][   T47] usb 4-1: USB disconnect, device number 5
[  128.382483][ T5926] udevd[5926]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  128.569196][   T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  128.751467][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.756072][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.760732][   T10] usb 1-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[  128.764567][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.769983][   T10] usb 1-1: config 0 descriptor??
[  129.026695][ T7654] netlink: 32 bytes leftover after parsing attributes in process `syz.3.708'.
[  129.071609][   T33] audit: type=1326 audit(1755269210.771:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.3.709" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f92d592add9 code=0x7ffc0000
[  129.080518][   T33] audit: type=1326 audit(1755269210.771:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.3.709" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f92d592add9 code=0x7ffc0000
[  129.112888][   T33] audit: type=1326 audit(1755269210.771:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.3.709" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f92d592add9 code=0x7ffc0000
[  129.132467][   T33] audit: type=1326 audit(1755269210.771:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.3.709" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f92d592add9 code=0x7ffc0000
[  129.141317][   T33] audit: type=1326 audit(1755269210.771:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.3.709" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f92d592add9 code=0x7ffc0000
[  129.155701][   T33] audit: type=1326 audit(1755269210.771:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.3.709" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f92d592add9 code=0x7ffc0000
[  129.164487][   T33] audit: type=1326 audit(1755269210.771:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.3.709" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f92d592add9 code=0x7ffc0000
[  129.178967][   T33] audit: type=1326 audit(1755269210.771:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.3.709" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f92d592add9 code=0x7ffc0000
[  129.186796][   T33] audit: type=1326 audit(1755269210.771:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.3.709" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f92d592add9 code=0x7ffc0000
[  129.214802][   T10] samsung 0003:0419:0600.0005: collection stack underflow
[  129.226276][   T10] samsung 0003:0419:0600.0005: item 0 0 0 12 parsing failed
[  129.229245][   T10] samsung 0003:0419:0600.0005: parse failed
[  129.241345][   T10] samsung 0003:0419:0600.0005: probe with driver samsung failed with error -22
[  129.433284][   T47] usb 1-1: USB disconnect, device number 9
[  129.599569][ T7668] loop3: detected capacity change from 0 to 32768
[  129.686417][ T7668] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  129.686436][ T7668]   allowing incompatible features above 0.0: (unknown version)
[  129.686443][ T7668]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  129.705231][ T7668] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  129.708622][ T7668] bcachefs (loop3): initializing new filesystem
[  129.719365][ T7668] bcachefs (loop3): going read-write
[  129.724693][ T7668] bcachefs (loop3): marking superblocks
[  129.733400][ T7668] bcachefs (loop3): initializing freespace
[  129.738573][ T7668] bcachefs (loop3): done initializing freespace
[  129.743225][ T7668] bcachefs (loop3): reading snapshots table
[  129.745968][ T7668] bcachefs (loop3): reading snapshots done
[  129.765256][ T7668] bcachefs (loop3): done starting filesystem
[  129.786299][ T5976] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  129.952592][ T5976] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  129.956962][ T5976] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  129.969651][ T5976] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  129.973623][ T5976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.977036][ T5976] usb 3-1: Product: syz
[  129.979195][ T5976] usb 3-1: Manufacturer: syz
[  129.981942][ T5976] usb 3-1: SerialNumber: syz
[  130.108264][ T7681] loop0: detected capacity change from 0 to 256
[  130.229469][ T5976] usb 3-1: 0:2 : does not exist
[  130.263062][ T5976] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  130.333757][ T5976] usb 3-1: USB disconnect, device number 6
[  130.429401][ T5926] udevd[5926]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  131.160949][ T7668] syz.3.715 (7668) used greatest stack depth: 16056 bytes left
[  131.182708][ T6839] bcachefs (loop3): shutting down
[  131.184360][ T6839] bcachefs (loop3): going read-only
[  131.195187][ T6839] bcachefs (loop3): finished waiting for writes to stop
[  131.220682][ T6839] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3
[  131.243405][ T6839] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 4
[  131.248205][ T6839] bcachefs (loop3): clean shutdown complete, journal seq 5
[  131.253177][ T6839] bcachefs (loop3): marking filesystem clean
[  131.310513][ T6839] bcachefs (loop3): shutdown complete
[  131.314212][ T7704] sp0: Synchronizing with TNC
[  131.370018][ T7703] [U] 
[  131.455311][ T7711] loop2: detected capacity change from 0 to 512
[  131.465942][ T7711] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  131.521678][ T7711] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #17: comm syz.2.731: iget: bad i_size value: -6917529027641081756
[  131.527385][ T7711] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.731: couldn't read orphan inode 17 (err -117)
[  131.533987][ T7711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.576685][ T5927] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.726793][ T7726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.737'.
[  132.174196][   T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  132.337039][   T24] usb 1-1: Using ep0 maxpacket: 8
[  132.346791][   T24] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  132.350215][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.359288][   T24] usb 1-1: Product: syz
[  132.360945][   T24] usb 1-1: Manufacturer: syz
[  132.364306][   T24] usb 1-1: SerialNumber: syz
[  132.372281][   T24] usb 1-1: config 0 descriptor??
[  132.382489][   T24] gspca_main: sq905-2.14.0 probing 2770:9120
[  132.558622][ T7742] loop3: detected capacity change from 0 to 1024
[  132.576627][ T7742] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.626964][ T6839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.764359][ T7753] netlink: 'syz.3.749': attribute type 1 has an invalid length.
[  132.767632][ T7753] netlink: 184 bytes leftover after parsing attributes in process `syz.3.749'.
[  132.972303][ T5976] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  133.100356][ T5235] Bluetooth: hci2: command 0x0406 tx timeout
[  133.141201][ T5976] usb 3-1: config 8 interface 0 has no altsetting 0
[  133.144418][ T5976] usb 3-1: New USB device found, idVendor=046d, idProduct=08b8, bcdDevice=fb.bc
[  133.148167][ T5976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.172689][ T7765] loop3: detected capacity change from 0 to 40427
[  133.183431][ T7765] F2FS-fs (loop3): build fault injection rate: 771
[  133.187701][ T7765] F2FS-fs (loop3): invalid crc value
[  133.226268][ T7765] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  133.233504][ T7765] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  133.260180][ T7765] bio_check_eod: 101 callbacks suppressed
[  133.260195][ T7765] syz.3.755: attempt to access beyond end of device
[  133.260195][ T7765] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  133.275212][ T7765] overlayfs: failed to resolve './bus': -2
[  133.297492][ T6839] syz-executor: attempt to access beyond end of device
[  133.297492][ T6839] loop3: rw=2049, sector=45112, nr_sectors = 16 limit=40427
[  133.306702][ T6839] CPU: 0 UID: 0 PID: 6839 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  133.306723][ T6839] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  133.306732][ T6839] Call Trace:
[  133.306738][ T6839]  <TASK>
[  133.306743][ T6839]  dump_stack_lvl+0x189/0x250
[  133.306767][ T6839]  ? __pfx_dump_stack_lvl+0x10/0x10
[  133.306780][ T6839]  ? __pfx_queue_work_on+0x10/0x10
[  133.306790][ T6839]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  133.306805][ T6839]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  133.306827][ T6839]  f2fs_handle_critical_error+0x37c/0x540
[  133.306848][ T6839]  f2fs_write_end_io+0x886/0xb60
[  133.306873][ T6839]  __submit_merged_bio+0x27a/0x6a0
[  133.306895][ T6839]  __submit_merged_write_cond+0x255/0x530
[  133.306917][ T6839]  f2fs_write_data_pages+0x261d/0x3000
[  133.306962][ T6839]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  133.307013][ T6839]  ? check_path+0x21/0x40
[  133.307024][ T6839]  ? check_noncircular+0xe0/0x160
[  133.307074][ T6839]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  133.307094][ T6839]  do_writepages+0x32e/0x550
[  133.307143][ T6839]  ? do_raw_spin_unlock+0x4d/0x240
[  133.307160][ T6839]  filemap_fdatawrite+0x199/0x240
[  133.307174][ T6839]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  133.307224][ T6839]  ? do_raw_spin_unlock+0x4d/0x240
[  133.307242][ T6839]  f2fs_sync_dirty_inodes+0x31f/0x830
[  133.307266][ T6839]  f2fs_write_checkpoint+0x95a/0x1df0
[  133.307298][ T6839]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  133.307341][ T6839]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  133.307351][ T6839]  ? kfree+0x18e/0x440
[  133.307364][ T6839]  ? kill_f2fs_super+0x298/0x6c0
[  133.307379][ T6839]  kill_f2fs_super+0x2c3/0x6c0
[  133.307394][ T6839]  ? __pfx_kill_f2fs_super+0x10/0x10
[  133.307404][ T6839]  ? radix_tree_delete_item+0x2b6/0x400
[  133.307426][ T6839]  ? shrinker_free+0x2ce/0x3e0
[  133.307442][ T6839]  deactivate_locked_super+0xbc/0x130
[  133.307458][ T6839]  cleanup_mnt+0x425/0x4c0
[  133.307471][ T6839]  ? lockdep_hardirqs_on+0x9c/0x150
[  133.307486][ T6839]  task_work_run+0x1d4/0x260
[  133.307503][ T6839]  ? __pfx_task_work_run+0x10/0x10
[  133.307514][ T6839]  ? __x64_sys_umount+0x122/0x160
[  133.307532][ T6839]  ? exit_to_user_mode_loop+0x40/0x110
[  133.307549][ T6839]  exit_to_user_mode_loop+0xec/0x110
[  133.307563][ T6839]  do_syscall_64+0x2bd/0x3b0
[  133.307579][ T6839]  ? lockdep_hardirqs_on+0x9c/0x150
[  133.307593][ T6839]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.307606][ T6839]  ? exc_page_fault+0x9f/0xf0
[  133.307623][ T6839]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.307632][ T6839] RIP: 0033:0x7f92d598ff17
[  133.307643][ T6839] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  133.307656][ T6839] RSP: 002b:00007ffc6ba5b7d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  133.307668][ T6839] RAX: 0000000000000000 RBX: 00007f92d5a11c05 RCX: 00007f92d598ff17
[  133.307674][ T6839] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6ba5b890
[  133.307680][ T6839] RBP: 00007ffc6ba5b890 R08: 0000000000000000 R09: 0000000000000000
[  133.307686][ T6839] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc6ba5c920
[  133.307693][ T6839] R13: 00007f92d5a11c05 R14: 000000000001ff2a R15: 00007ffc6ba5c960
[  133.307713][ T6839]  </TASK>
[  133.307717][ T6839] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  133.383680][ T5976] usb 3-1: string descriptor 0 read error: -71
[  133.386517][ T6839] CPU: 0 UID: 0 PID: 6839 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  133.386535][ T6839] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  133.386543][ T6839] Call Trace:
[  133.386548][ T6839]  <TASK>
[  133.386552][ T6839]  dump_stack_lvl+0x189/0x250
[  133.386574][ T6839]  ? __pfx_dump_stack_lvl+0x10/0x10
[  133.386588][ T6839]  ? __pfx_queue_work_on+0x10/0x10
[  133.386599][ T6839]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  133.386614][ T6839]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  133.386639][ T6839]  f2fs_handle_critical_error+0x37c/0x540
[  133.386669][ T6839]  f2fs_write_end_io+0x886/0xb60
[  133.386696][ T6839]  __submit_merged_bio+0x27a/0x6a0
[  133.386718][ T6839]  __submit_merged_write_cond+0x255/0x530
[  133.386740][ T6839]  f2fs_write_data_pages+0x261d/0x3000
[  133.386784][ T6839]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  133.386836][ T6839]  ? check_path+0x21/0x40
[  133.386845][ T6839]  ? check_noncircular+0xe0/0x160
[  133.386895][ T6839]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  133.386911][ T6839]  do_writepages+0x32e/0x550
[  133.386934][ T6839]  ? do_raw_spin_unlock+0x4d/0x240
[  133.386950][ T6839]  filemap_fdatawrite+0x199/0x240
[  133.386964][ T6839]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  133.387014][ T6839]  ? do_raw_spin_unlock+0x4d/0x240
[  133.387029][ T6839]  f2fs_sync_dirty_inodes+0x31f/0x830
[  133.387052][ T6839]  f2fs_write_checkpoint+0x95a/0x1df0
[  133.387082][ T6839]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  133.387157][ T6839]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  133.387169][ T6839]  ? kfree+0x18e/0x440
[  133.387182][ T6839]  ? kill_f2fs_super+0x298/0x6c0
[  133.387196][ T6839]  kill_f2fs_super+0x2c3/0x6c0
[  133.387211][ T6839]  ? __pfx_kill_f2fs_super+0x10/0x10
[  133.387219][ T6839]  ? radix_tree_delete_item+0x2b6/0x400
[  133.387238][ T6839]  ? shrinker_free+0x2ce/0x3e0
[  133.387251][ T6839]  deactivate_locked_super+0xbc/0x130
[  133.387265][ T6839]  cleanup_mnt+0x425/0x4c0
[  133.387277][ T6839]  ? lockdep_hardirqs_on+0x9c/0x150
[  133.387293][ T6839]  task_work_run+0x1d4/0x260
[  133.387309][ T6839]  ? __pfx_task_work_run+0x10/0x10
[  133.387320][ T6839]  ? __x64_sys_umount+0x122/0x160
[  133.387336][ T6839]  ? exit_to_user_mode_loop+0x40/0x110
[  133.387356][ T6839]  exit_to_user_mode_loop+0xec/0x110
[  133.387370][ T6839]  do_syscall_64+0x2bd/0x3b0
[  133.387386][ T6839]  ? lockdep_hardirqs_on+0x9c/0x150
[  133.387401][ T6839]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.387412][ T6839]  ? exc_page_fault+0x9f/0xf0
[  133.387429][ T6839]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.387439][ T6839] RIP: 0033:0x7f92d598ff17
[  133.387450][ T6839] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  133.387458][ T6839] RSP: 002b:00007ffc6ba5b7d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  133.387469][ T6839] RAX: 0000000000000000 RBX: 00007f92d5a11c05 RCX: 00007f92d598ff17
[  133.387475][ T6839] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6ba5b890
[  133.387481][ T6839] RBP: 00007ffc6ba5b890 R08: 0000000000000000 R09: 0000000000000000
[  133.387486][ T6839] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc6ba5c920
[  133.387492][ T6839] R13: 00007f92d5a11c05 R14: 000000000001ff2a R15: 00007ffc6ba5c960
[  133.387512][ T6839]  </TASK>
[  133.387516][ T6839] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  133.413461][ T5976] pwc: Logitech QuickCam detected (reserved ID).
[  133.584951][   T24] gspca_sq905: bulk read fail (-22) len 0/4
[  133.587058][   T24] sq905 1-1:0.0: probe with driver sq905 failed with error -5
[  133.592221][ T5976] pwc: Failed to set LED on/off time (-71)
[  133.594836][ T5976] pwc: send_video_command error -71
[  133.596789][ T5976] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  133.599567][ T5976] Philips webcam 3-1:8.0: probe with driver Philips webcam failed with error -71
[  133.608733][ T5976] usb 3-1: USB disconnect, device number 7
[  133.704332][ T5991] usb 1-1: USB disconnect, device number 10
[  134.062663][ T5976] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  134.193961][ T7786] loop2: detected capacity change from 0 to 512
[  134.217612][ T7786] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  134.224988][ T5976] usb 4-1: Using ep0 maxpacket: 32
[  134.230726][ T5976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.235911][ T5976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.240558][ T5976] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  134.244957][ T5976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.257049][ T5976] usb 4-1: config 0 descriptor??
[  134.312984][ T5927] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.653841][ T7802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  134.708581][ T5976] ft260 0003:0403:6030.0006: unknown main item tag 0x7
[  134.916158][ T5976] ft260 0003:0403:6030.0006: chip code: 6424 8183
[  134.986545][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  134.989378][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  135.131737][ T5976] ft260 0003:0403:6030.0006: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0
[  135.355819][ T5976] ft260 0003:0403:6030.0006: failed to retrieve status: -32, no wakeup
[  135.360662][ T5976] ft260 0003:0403:6030.0006: failed to retrieve status: -32
[  135.580410][ T5976] usb 4-1: USB disconnect, device number 6
[  135.728776][ T7820] loop0: detected capacity change from 0 to 32768
[  135.736292][ T7820] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  135.736292][ T7820] clean (size 2912):
[  135.736292][ T7820] flags:          0
[  135.736292][ T7820] journal_seq:    8
[  135.736292][ T7820] usage: type=inodes v=8
[  135.736292][ T7820] usage: type=key_version v=0
[  135.736292][ T7820] usage: type=reserved v=0
[  135.736292][ T7820] usage: type=reserved v=0
[  135.736292][ T7820] usage: type=reserved v=0
[  135.736292][ T7820] usage: type=(unknown fs_usage_type 3) v=0
[  135.736292][ T7820] data_usage: btree: 1/1 [0]=2816
[  135.736292][ T7820] data_usage: journal: 1/1 [0]=0
[  135.736292][ T7820] data_usage: user: 1/1 [0]=32
[  135.736292][ T7820] dev_usage: dev=0  
[  135.736292][ T7820]   free: buckets=83 sectors=0 fragmented=0
[  135.736292][ T7820]   sb: buckets=25 sectors=6152 fragmented=248
[  135.736292][ T7820]   journal: buckets=8 sectors=2048 fragmented=0
[  135.736292][ T7820]   btree: buckets=11 sectors=2816 fragmented=0
[  135.736292][ T7820]   user: buckets=1 sectors=32 fragmented=224
[  135.736292][ T7820]   cached: buckets=0 sectors=0 fragmented=0
[  135.736292][ T7820]   parity: buckets=0 sectors=0 fragmented=0
[  135.736292][ T7820]   stripe: buckets=0 sectors=0 fragmented=0
[  135.736292][ T7820]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  135.736292][ T7820]   need_discard: buckets=0 sectors=0 fragmented=0
[  135.736292][ T7820] clock: read=0
[  135.736292][ T7820] clock: write=1288
[  135.736292][ T7820] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 720575940379
[  135.736445][ T7820] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  135.792854][    C0] vkms_vblank_simulate: vblank timer overrun
[  136.230243][   T53] Bluetooth: (null): Invalid header checksum
[  136.234918][   T36] Bluetooth: (null): Invalid header checksum
[  136.353858][   T53] Bluetooth: (null): Invalid header checksum
[  136.369610][ T7841] loop2: detected capacity change from 0 to 8
[  136.375321][ T7841] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  136.469932][   T40] Bluetooth: (null): Invalid header checksum
[  136.597750][   T36] Bluetooth: (null): Invalid header checksum
[  136.672403][ T7857] loop3: detected capacity change from 0 to 4096
[  136.724717][   T53] Bluetooth: (null): Invalid header checksum
[  136.825393][ T7861] loop3: detected capacity change from 0 to 4096
[  136.844101][ T2322] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  137.036630][ T2322] usb 3-1: Using ep0 maxpacket: 32
[  137.043985][ T2322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.051271][ T7867] loop0: detected capacity change from 0 to 4096
[  137.054322][ T2322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.060099][ T2322] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  137.063234][ T2322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.088463][ T2322] usb 3-1: config 0 descriptor??
[  137.095321][ T2322] hub 3-1:0.0: USB hub found
[  137.115754][ T7867] ntfs3(loop0): failed to convert "0080" to koi8-ru
[  137.123572][ T7867] ntfs3(loop0): failed to convert name for inode 1e.
[  137.126021][ T7867] ntfs3(loop0): ino=1f, mi_enum_attr
[  137.127784][ T7867] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  137.166246][ T5962] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  137.311383][ T2322] hub 3-1:0.0: 31 ports detected
[  137.314363][ T2322] hub 3-1:0.0: insufficient power available to use all downstream ports
[  137.336771][ T5962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.342261][ T5962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.347317][ T5962] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  137.354580][ T5962] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  137.358709][ T5962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.374731][ T5962] usb 4-1: config 0 descriptor??
[  137.451611][   T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  137.526897][ T2322] hub 3-1:0.0: hub_hub_status failed (err = -71)
[  137.530094][ T2322] hub 3-1:0.0: config failed, can't get hub status (err -71)
[  137.536395][ T2322] usbhid 3-1:0.0: can't add hid device: -71
[  137.541107][ T2322] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  137.559550][ T2322] usb 3-1: USB disconnect, device number 8
[  137.622475][   T10] usb 1-1: Using ep0 maxpacket: 32
[  137.627127][   T10] usb 1-1: config 0 has an invalid interface number: 9 but max is 0
[  137.630463][   T10] usb 1-1: config 0 has no interface number 0
[  137.638156][   T10] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  137.641836][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.645217][   T10] usb 1-1: Product: syz
[  137.647030][   T10] usb 1-1: Manufacturer: syz
[  137.648961][   T10] usb 1-1: SerialNumber: syz
[  137.654195][   T10] usb 1-1: config 0 descriptor??
[  137.665488][   T10] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  137.816637][ T5962] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x3
[  137.819799][ T5962] plantronics 0003:047F:FFFF.0007: unbalanced collection at end of report description
[  137.824512][ T5962] plantronics 0003:047F:FFFF.0007: parse failed
[  137.827423][ T5962] plantronics 0003:047F:FFFF.0007: probe with driver plantronics failed with error -22
[  137.878571][   T10] gspca_topro: reg_w err -71
[  137.913365][   T10] gspca_topro: Sensor soi763a
[  137.925768][   T10] usb 1-1: USB disconnect, device number 11
[  138.028587][ T2322] usb 4-1: USB disconnect, device number 7
[  138.768325][ T7893] loop0: detected capacity change from 0 to 32768
[  138.798288][ T7893] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  138.847565][ T7911] loop3: detected capacity change from 0 to 1024
[  138.913938][ T7893] XFS (loop0): Ending clean mount
[  138.989941][ T5930] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  139.186168][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.824'.
[  139.189824][ T7921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.824'.
[  139.193660][ T7921] netlink: 'syz.2.824': attribute type 6 has an invalid length.
[  139.384398][ T7927] loop0: detected capacity change from 0 to 4096
[  139.433165][ T7927] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  139.460613][ T7927] ntfs3(loop0): Failed to load $Extend (-22).
[  139.464419][ T7927] ntfs3(loop0): Failed to initialize $Extend.
[  139.608784][ T7934] netlink: 'syz.0.828': attribute type 10 has an invalid length.
[  139.616753][ T7934] netlink: 40 bytes leftover after parsing attributes in process `syz.0.828'.
[  139.620508][   T33] kauditd_printk_skb: 511 callbacks suppressed
[  139.620519][   T33] audit: type=1400 audit(1755269220.630:533): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=7935 comm="syz.2.829"
[  139.622047][ T7934] dummy0: entered promiscuous mode
[  139.657681][ T7934] dummy0: entered allmulticast mode
[  139.661473][ T7934] bridge0: port 3(dummy0) entered blocking state
[  139.675219][ T7934] bridge0: port 3(dummy0) entered disabled state
[  139.679466][ T7934] bridge0: port 3(dummy0) entered blocking state
[  139.681621][ T7934] bridge0: port 3(dummy0) entered forwarding state
[  139.747228][ T7940] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  139.755999][ T7940] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[  139.759565][ T7940] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  139.763660][ T7940] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[  140.290147][ T7950] loop0: detected capacity change from 0 to 32768
[  140.294135][ T7950] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section members_v2: device 0: not enough buckets (got 0, max 64)
[  140.294135][ T7950] members_v2 (size 152):
[  140.294135][ T7950] nr_devices mismatch: have 17 entries, should be 1Device:0
[  140.294135][ T7950]   Label:                       (none)
[  140.294135][ T7950]   UUID:                        7af6772b-00de-4159-0000-000000000000
[  140.294135][ T7950]   Size:                        0
[  140.294135][ T7950]   read errors:                 0
[  140.294135][ T7950]   write errors:                0
[  140.294135][ T7950]   checksum errors:             0
[  140.294135][ T7950]   seqread iops:                0
[  140.294135][ T7950]   seqwrite iops:               0
[  140.294135][ T7950]   randread iops:               0
[  140.294135][ T7950]   randwrite iops:              0
[  140.294135][ T7950]   Bucket size:                 0
[  140.294135][ T7950]   First bucket:                0
[  140.294135][ T7950]   Buckets:                     0
[  140.294135][ T7950]   Last mount:                  (never)
[  140.294135][ T7950]   Last superblock write:       0
[  140.294135][ T7950]   State:                       rw
[  140.294135][ T7950]   Data allowed:                (none)
[  140.294135][ T7950]   Has data:                    btree,user
[  140.294135][ T7950]   Btree allocated bitmap blocksize:1
[  140.294135][ T7950]   Btree allocated bitmap:      0000000000000000000000000000000000000000000000000000000000000000
[  140.294135][ T7950]   Durability:   
[  140.294210][ T7950] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  140.413846][ T2322] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  140.558917][ T7964] Bluetooth: MGMT ver 1.23
[  140.581460][ T2322] usb 3-1: unable to get BOS descriptor or descriptor too short
[  140.598186][ T2322] usb 3-1: not running at top speed; connect to a high speed hub
[  140.614307][ T2322] usb 3-1: config 129 has an invalid interface number: 135 but max is 1
[  140.622777][ T2322] usb 3-1: config 129 has no interface number 1
[  140.624994][ T2322] usb 3-1: config 129 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  140.631129][ T2322] usb 3-1: config 129 interface 135 has no altsetting 0
[  140.634088][ T2322] usb 3-1: config 129 interface 0 has no altsetting 0
[  140.643392][ T2322] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[  140.646596][ T2322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.651655][ T2322] usb 3-1: Product: syz
[  140.653346][ T2322] usb 3-1: Manufacturer: syz
[  140.655303][ T2322] usb 3-1: SerialNumber: syz
[  140.726928][ T7971] netlink: 148 bytes leftover after parsing attributes in process `syz.3.846'.
[  140.744280][ T7971] netlink: 116 bytes leftover after parsing attributes in process `syz.3.846'.
[  140.936992][ T2322] au0828: au0828: Device initialization failed.
[  140.939717][ T2322] au0828: au0828: Device must be connected to a high-speed USB 2.0 port.
[  140.964827][ T2322] usb 3-1: USB disconnect, device number 9
[  141.151818][ T7968] loop0: detected capacity change from 0 to 32768
[  142.037925][ T7982] loop2: detected capacity change from 0 to 512
[  142.106320][ T7982] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  142.111856][ T7982] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.187904][ T5927] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  142.259414][ T7995] loop3: detected capacity change from 0 to 256
[  142.267566][ T7995] exfat: Deprecated parameter 'namecase'
[  142.269856][ T7995] exfat: Deprecated parameter 'utf8'
[  142.293910][ T7995] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  142.421895][ T8004] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  142.558394][ T8002] loop3: detected capacity change from 0 to 32768
[  142.865186][ T8018] netlink: 'syz.3.866': attribute type 1 has an invalid length.
[  142.868302][ T8018] netlink: 184 bytes leftover after parsing attributes in process `syz.3.866'.
[  142.875506][ T8018] netlink: 'syz.3.866': attribute type 1 has an invalid length.
[  142.913678][ T8020] loop3: detected capacity change from 0 to 64
[  143.026223][ T8026] loop3: detected capacity change from 0 to 1024
[  143.037494][ T8026] EXT4-fs: Ignoring removed orlov option
[  143.041814][ T8028] loop0: detected capacity change from 0 to 764
[  143.062618][ T8026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.091792][   T33] audit: type=1800 audit(1755269223.876:534): pid=8026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.870" name="file1" dev="loop3" ino=15 res=0 errno=0
[  143.181296][ T6839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.264899][ T8041] loop3: detected capacity change from 0 to 256
[  143.284423][ T8041] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  143.297997][ T8043] overlayfs: conflicting options: userxattr,redirect_dir=follow
[  143.400485][ T8049] loop3: detected capacity change from 0 to 2048
[  143.420354][ T8049] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  143.607851][ T8060] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  143.614483][ T8058] IPVS: stopping master sync thread 8060 ...
[  143.766513][ T8059] loop3: detected capacity change from 0 to 32768
[  143.773413][ T8059] XFS: ikeep mount option is deprecated.
[  143.788737][ T8059] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  143.809886][ T8059] XFS (loop3): Ending clean mount
[  143.817765][ T8059] XFS (loop3): Quotacheck needed: Please wait.
[  143.855236][ T8059] XFS (loop3): Quotacheck: Done.
[  143.901473][ T6839] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  144.347128][   T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  144.512847][   T10] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  144.517547][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.556237][   T10] usb 4-1: config 0 descriptor??
[  144.687477][ T8088] loop0: detected capacity change from 0 to 2048
[  144.722685][ T8088] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  144.739094][ T8088] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  145.253384][ T8110] loop2: detected capacity change from 0 to 32768
[  145.274245][ T8110] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.905 (8110)
[  145.285922][ T8110] BTRFS info (device loop2): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  145.291445][ T8110] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  145.294978][ T8110] BTRFS info (device loop2): using free-space-tree
[  145.448257][   T10] usb 4-1: Cannot set autoneg
[  145.450457][   T10] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  145.482200][   T10] usb 4-1: USB disconnect, device number 8
[  145.537367][ T5927] BTRFS info (device loop2): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  146.460763][ T8146] loop2: detected capacity change from 0 to 32768
[  146.473623][ T8146] XFS: ikeep mount option is deprecated.
[  146.523129][ T8146] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  146.596797][ T8146] XFS (loop2): Ending clean mount
[  146.621937][ T8146] XFS (loop2): Quotacheck needed: Please wait.
[  146.713112][ T8146] XFS (loop2): Quotacheck: Done.
[  146.883900][ T5927] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  147.586204][   T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  147.749047][ T5962] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  147.754583][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  147.763205][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  147.769066][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  147.774398][   T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  147.780853][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.788279][   T10] usb 4-1: config 0 descriptor??
[  147.796468][   T10] hub 4-1:0.0: USB hub found
[  147.902504][ T8201] loop0: detected capacity change from 0 to 8
[  147.907024][ T5962] usb 3-1: Using ep0 maxpacket: 8
[  147.918194][ T5962] usb 3-1: unable to get BOS descriptor or descriptor too short
[  147.924942][ T5962] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  147.932094][ T5962] usb 3-1: config 8 interface 0 altsetting 7 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  147.940970][ T5962] usb 3-1: config 8 interface 0 altsetting 7 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  147.947950][ T5962] usb 3-1: config 8 interface 0 altsetting 7 endpoint 0x8F has invalid wMaxPacketSize 0
[  147.956353][ T5962] usb 3-1: config 8 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  147.962106][ T5962] usb 3-1: config 8 interface 0 has no altsetting 0
[  147.968316][ T5962] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[  147.973458][ T5962] usb 3-1: New USB device strings: Mfr=1, Product=66, SerialNumber=3
[  147.976631][ T5962] usb 3-1: Product: syz
[  147.978379][ T5962] usb 3-1: Manufacturer: syz
[  147.981313][ T5962] usb 3-1: SerialNumber: syz
[  148.010782][   T10] hub 4-1:0.0: 14 ports detected
[  148.014671][   T10] hub 4-1:0.0: insufficient power available to use all downstream ports
[  148.216182][ T5962] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  148.219600][ T5962] usb 3-1: selecting invalid altsetting 0
[  148.226351][   T10] hub 4-1:0.0: hub_hub_status failed (err = -71)
[  148.232800][   T10] hub 4-1:0.0: config failed, can't get hub status (err -71)
[  148.262153][   T10] usb 4-1: USB disconnect, device number 9
[  148.282032][ T5991] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  148.290892][ T5962] snd-usb-audio 3-1:8.0: probe with driver snd-usb-audio failed with error -12
[  148.297413][ T5962] usb 3-1: USB disconnect, device number 10
[  148.316604][ T6306] udevd[6306]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  148.463956][ T5991] usb 1-1: Using ep0 maxpacket: 8
[  148.468465][ T5991] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  148.475145][ T5991] usb 1-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a
[  148.478822][ T5991] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.482261][ T5991] usb 1-1: Product: syz
[  148.484110][ T5991] usb 1-1: Manufacturer: syz
[  148.486086][ T5991] usb 1-1: SerialNumber: syz
[  148.489719][ T5991] usb 1-1: config 0 descriptor??
[  148.496266][ T5991] ttusb_dec_send_command: command bulk message failed: error -22
[  148.500333][ T5991] ttusb-dec 1-1:0.0: probe with driver ttusb-dec failed with error -22
[  148.713526][ T5991] usb 1-1: USB disconnect, device number 12
[  148.883594][ T8210] loop2: detected capacity change from 0 to 2048
[  148.934135][ T8213] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  148.969424][ T8210] NILFS (loop2): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3)
[  148.973328][ T8210] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=16)
[  148.982534][ T8210] Remounting filesystem read-only
[  148.984114][ T8210] NILFS (loop2): error -5 truncating bmap (ino=16)
[  149.021793][ T5927] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[  149.332400][ T8229] loop2: detected capacity change from 0 to 2048
[  149.339002][ T8217] loop3: detected capacity change from 0 to 32768
[  149.355331][ T8217] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.943 (8217)
[  149.380871][ T8231] loop0: detected capacity change from 0 to 2048
[  149.396045][ T8217] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  149.400217][ T8217] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  149.422474][ T8217] BTRFS info (device loop3): disk space caching is enabled
[  149.429046][ T8217] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  149.436825][ T8231] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.562436][ T8217] BTRFS info (device loop3): rebuilding free space tree
[  149.566014][ T5930] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.631900][ T8217] BTRFS info (device loop3): disabling free space tree
[  149.634892][ T8217] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  149.647559][ T8217] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  149.750319][ T6839] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  150.205628][ T2322] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  150.280639][ T8272] loop0: detected capacity change from 0 to 32768
[  150.292680][ T8272] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  150.371481][ T5930] ocfs2: Unmounting device (7,0) on (node local)
[  150.372706][ T2322] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  150.387212][ T2322] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  150.400156][ T2322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.413395][ T2322] usb 3-1: Product: syz
[  150.415111][ T2322] usb 3-1: Manufacturer: syz
[  150.429674][ T2322] usb 3-1: SerialNumber: syz
[  150.434197][ T2322] usb 3-1: config 0 descriptor??
[  150.488289][ T2322] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22
[  150.530891][ T5926] udevd[5926]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  150.677863][ T2322] usb 3-1: USB disconnect, device number 11
[  151.062352][ T8316] netlink: 28 bytes leftover after parsing attributes in process `syz.3.976'.
[  151.071448][ T5962] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  151.099082][ T8318] netlink: 28 bytes leftover after parsing attributes in process `syz.3.977'.
[  151.349353][ T5962] usb 1-1: Using ep0 maxpacket: 8
[  151.362771][ T5962] usb 1-1: config 0 has no interfaces?
[  151.376243][ T5962] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  151.382504][ T5962] usb 1-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3
[  151.385992][ T5962] usb 1-1: Product: syz
[  151.388193][ T5962] usb 1-1: Manufacturer: syz
[  151.390268][ T5962] usb 1-1: SerialNumber: syz
[  151.413818][ T8326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.978'.
[  151.454600][ T5962] usb 1-1: config 0 descriptor??
[  151.691299][ T2322] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  151.739290][   T95] usb 1-1: USB disconnect, device number 13
[  151.865664][ T2322] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  151.868978][ T2322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.871828][ T2322] usb 3-1: Product: syz
[  151.874087][ T2322] usb 3-1: Manufacturer: syz
[  151.875828][ T2322] usb 3-1: SerialNumber: syz
[  151.879052][ T2322] usb 3-1: config 0 descriptor??
[  152.134864][ T2322] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  152.394340][ T8334] netlink: 16 bytes leftover after parsing attributes in process `syz.0.984'.
[  152.461238][ T5962] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  152.639018][ T5962] usb 4-1: config 0 interface 0 has no altsetting 0
[  152.641978][ T5962] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  152.647172][ T5962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.655640][ T5962] usb 4-1: config 0 descriptor??
[  152.704265][   T95] IPVS: starting estimator thread 0...
[  152.807116][ T8342] IPVS: using max 85 ests per chain, 204000 per kthread
[  152.977197][ T2322] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  152.986336][ T2322] usb 3-1: USB disconnect, device number 12
[  153.345022][ T5962] video4linux radio48: keene_cmd_set failed (-71)
[  153.351695][ T5962] radio-keene 4-1:0.0: V4L2 device registered as radio48
[  153.388158][ T5962] usb 4-1: USB disconnect, device number 10
[  153.676625][   T33] audit: type=1326 audit(1755269233.782:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8345 comm="syz.2.988" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f03e818ebe9 code=0x0
[  154.057631][ T8353] netlink: 20 bytes leftover after parsing attributes in process `syz.3.991'.
[  154.342624][ T5962] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  154.470885][ T8204] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  154.513617][ T5962] usb 4-1: Using ep0 maxpacket: 32
[  154.517182][ T5962] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  154.520604][ T5962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.526404][ T5962] usb 4-1: config 0 descriptor??
[  154.633321][ T8204] usb 1-1: Using ep0 maxpacket: 32
[  154.645571][ T8204] usb 1-1: New USB device found, idVendor=04cb, idProduct=013d, bcdDevice=a4.42
[  154.648598][ T8204] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.654504][ T8204] usb 1-1: config 0 descriptor??
[  154.658905][ T8204] gspca_main: finepix-2.14.0 probing 04cb:013d
[  154.758967][ T5962] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  154.772408][ T5962] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  154.776800][ T5962] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  154.780063][ T5962] usb 4-1: media controller created
[  154.792736][ T5962] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  154.878858][ T2322] usb 1-1: USB disconnect, device number 14
[  154.973817][ T5962] az6027: usb out operation failed. (-71)
[  154.978737][ T5962] az6027: usb out operation failed. (-71)
[  154.980991][ T5962] stb0899_attach: Driver disabled by Kconfig
[  154.983698][ T5962] az6027: no front-end attached
[  154.983698][ T5962] 
[  154.987887][ T5962] az6027: usb out operation failed. (-71)
[  154.990279][ T5962] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  154.995319][ T5962] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6
[  155.006594][ T5962] dvb-usb: schedule remote query interval to 400 msecs.
[  155.009577][ T5962] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  155.014886][ T5962] usb 4-1: USB disconnect, device number 11
[  155.052113][ T5962] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  156.150031][ T5294] udevd[5294]: worker [5926] terminated by signal 33 (Unknown signal 33)
[  156.153497][ T5294] udevd[5294]: worker [5926] failed while handling '/devices/virtual/block/loop2'
[  156.294478][ T8389] loop0: detected capacity change from 0 to 256
[  156.297305][ T8389] exfat: Deprecated parameter 'utf8'
[  156.326808][ T8389] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  157.287448][ T8408] 9pnet_fd: p9_fd_create_unix (8408): problem connecting socket: ./bus: -1
[  157.340337][ T8410] loop3: detected capacity change from 0 to 512
[  157.373502][ T8410] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  157.381091][ T8410] EXT4-fs (loop3): mount failed
[  157.398659][   T33] audit: type=1326 audit(1755269237.261:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.2.1015" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e818ebe9 code=0x7fc00000
[  157.407995][   T33] audit: type=1326 audit(1755269237.261:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.2.1015" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e818ebe9 code=0x7fc00000
[  157.417751][   T33] audit: type=1326 audit(1755269237.261:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.2.1015" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e818ebe9 code=0x7fc00000
[  157.433759][   T33] audit: type=1326 audit(1755269237.261:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.2.1015" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e818ebe9 code=0x7fc00000
[  157.441513][   T33] audit: type=1326 audit(1755269237.280:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.2.1015" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e818ebe9 code=0x7fc00000
[  157.452129][   T33] audit: type=1326 audit(1755269237.280:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.2.1015" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e818ebe9 code=0x7fc00000
[  157.463220][   T33] audit: type=1326 audit(1755269237.280:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.2.1015" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e818ebe9 code=0x7fc00000
[  157.474036][   T33] audit: type=1326 audit(1755269237.280:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.2.1015" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e818ebe9 code=0x7fc00000
[  157.484057][   T33] audit: type=1326 audit(1755269237.280:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.2.1015" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e818ebe9 code=0x7fc00000
[  157.601664][ T8406] loop0: detected capacity change from 0 to 32768
[  157.613474][ T8406] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1012 (8406)
[  157.623138][ T8406] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  157.627468][ T8406] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  157.630848][ T8406] BTRFS info (device loop0): using free-space-tree
[  157.677596][ T5930] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  157.742989][ T8204] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  157.813165][ T8437] sp0: Synchronizing with TNC
[  157.905273][ T8204] usb 4-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66
[  157.913239][ T8204] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.924822][ T8204] usb 4-1: config 0 descriptor??
[  157.942407][ T8204] usb 4-1: invalid MIDI EP
[  157.944610][ T8204] usb 4-1: snd-bcd2000: error during probing
[  157.953799][ T8204] snd-bcd2000 4-1:0.0: probe with driver snd-bcd2000 failed with error -22
[  158.146683][ T2322] usb 4-1: USB disconnect, device number 12
[  158.211860][ T8445] loop0: detected capacity change from 0 to 32768
[  158.234833][ T8445] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  158.287543][ T8445] XFS (loop0): Ending clean mount
[  158.302241][ T8445] XFS (loop0): Quotacheck needed: Please wait.
[  158.318029][ T8445] XFS (loop0): Quotacheck: Done.
[  158.375430][ T5930] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  158.504202][ T8457] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  160.059286][ T8490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1036'.
[  160.361512][ T2322] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  160.542056][ T2322] usb 3-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00
[  160.548345][ T2322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.585056][ T2322] usb 3-1: config 0 descriptor??
[  160.731856][ T8504] loop3: detected capacity change from 0 to 8192
[  160.753237][ T8504] FAT-fs (loop3): error, corrupted directory (invalid entries)
[  160.756606][ T8504] FAT-fs (loop3): Filesystem has been set read-only
[  160.983035][ T8514] loop3: detected capacity change from 0 to 8192
[  160.990538][ T8514] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  161.035134][   T95] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  161.057764][ T2322] viewsonic 0003:2133:0018.0008: unknown main item tag 0x0
[  161.060320][ T2322] viewsonic 0003:2133:0018.0008: item fetching failed at offset 3/5
[  161.063477][ T2322] viewsonic 0003:2133:0018.0008: probe with driver viewsonic failed with error -22
[  161.195256][   T95] usb 1-1: Using ep0 maxpacket: 32
[  161.198726][   T95] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  161.201402][   T95] usb 1-1: config 0 has no interface number 0
[  161.205477][   T95] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  161.208417][   T95] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.210839][   T95] usb 1-1: Product: syz
[  161.212222][   T95] usb 1-1: Manufacturer: syz
[  161.213638][   T95] usb 1-1: SerialNumber: syz
[  161.217098][   T95] usb 1-1: config 0 descriptor??
[  161.223068][   T95] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  161.357995][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.406655][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.442511][   T95] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  161.449444][   T95] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  161.470857][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.550486][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.693070][   T12] bridge_slave_1: left allmulticast mode
[  161.695545][   T12] bridge_slave_1: left promiscuous mode
[  161.700421][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.706250][   T12] bridge_slave_0: left allmulticast mode
[  161.712740][   T12] bridge_slave_0: left promiscuous mode
[  161.715690][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.745228][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  161.752510][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  161.757779][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  161.770548][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  161.778110][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  161.881213][    C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  161.881443][ T8204] usb 1-1: USB disconnect, device number 15
[  161.898867][ T8204] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  161.913996][ T8204] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  161.918407][ T8204] quatech2 1-1:0.51: device disconnected
[  162.038809][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  162.045122][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  162.048769][   T12] bond0 (unregistering): Released all slaves
[  162.248584][ T8519] chnl_net:caif_netlink_parms(): no params data found
[  162.391404][   T12] hsr_slave_0: left promiscuous mode
[  162.395579][   T12] hsr_slave_1: left promiscuous mode
[  162.398372][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  162.401331][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  162.405248][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  162.408431][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  162.425102][   T12] veth1_macvtap: left promiscuous mode
[  162.427382][   T12] veth1_vlan: left promiscuous mode
[  162.429647][   T12] veth0_vlan: left promiscuous mode
[  162.638008][ T8537] loop0: detected capacity change from 0 to 2048
[  162.654016][ T8537] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  163.007925][ T8541] loop0: detected capacity change from 0 to 32768
[  163.014491][ T8541] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1055 (8541)
[  163.029143][ T8541] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  163.033369][ T8541] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  163.038674][ T8541] BTRFS info (device loop0): disk space caching is enabled
[  163.039324][   T12] team0 (unregistering): Port device team_slave_1 removed
[  163.041718][ T8541] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  163.099788][   T12] team0 (unregistering): Port device team_slave_0 removed
[  163.145334][ T8541] BTRFS info (device loop0): rebuilding free space tree
[  163.159704][ T8541] BTRFS info (device loop0): disabling free space tree
[  163.162736][ T8541] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  163.166947][ T8541] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  163.288188][ T5930] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  163.309528][ T8204] usb 3-1: USB disconnect, device number 13
[  163.844610][ T8519] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.847335][ T8519] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.849756][ T8519] bridge_slave_0: entered allmulticast mode
[  163.852687][ T8519] bridge_slave_0: entered promiscuous mode
[  163.856103][ T8519] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.859723][ T8519] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.862699][ T8519] bridge_slave_1: entered allmulticast mode
[  163.865723][ T8519] bridge_slave_1: entered promiscuous mode
[  163.889454][ T8519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  163.896238][ T8519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  163.911073][   T95] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  163.957935][ T8519] team0: Port device team_slave_0 added
[  163.960963][ T8566] loop2: detected capacity change from 0 to 256
[  163.962523][ T8519] team0: Port device team_slave_1 added
[  163.965523][ T8566] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  163.965541][ T8566] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  163.968318][ T8566] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  163.986306][ T5235] Bluetooth: hci2: command tx timeout
[  164.026941][ T8519] batman_adv: batadv0: Adding interface: batadv_slave_0
[  164.038994][ T8519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.047605][ T8519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  164.064704][ T8519] batman_adv: batadv0: Adding interface: batadv_slave_1
[  164.065899][ T8568] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1060'.
[  164.067025][ T8519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.083610][ T8519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  164.098411][   T95] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  164.102042][   T95] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  164.108096][   T95] usb 1-1: Product: syz
[  164.110133][   T95] usb 1-1: Manufacturer: syz
[  164.112000][   T95] usb 1-1: SerialNumber: syz
[  164.126328][   T95] usb 1-1: config 0 descriptor??
[  164.137238][   T95] ch341 1-1:0.0: ch341-uart converter detected
[  164.215593][ T8571] loop2: detected capacity change from 0 to 512
[  164.227341][ T8519] hsr_slave_0: entered promiscuous mode
[  164.237983][ T8519] hsr_slave_1: entered promiscuous mode
[  164.246422][ T8519] debugfs: 'hsr0' already exists in 'hsr'
[  164.248889][ T8519] Cannot create hsr debugfs directory
[  164.275015][ T8571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.299806][ T8571] ext4 filesystem being mounted at /349/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  164.313209][ T8571] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.1061: corrupted xattr block 33: invalid header
[  164.352832][ T8571] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.1061: corrupted xattr block 33: invalid header
[  164.364958][ T8571] fscrypt (loop2, inode 15): Error -117 getting encryption context
[  164.422183][ T5927] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.047831][ T8519] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  165.057950][ T8519] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  165.065875][ T8519] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  165.075647][ T8519] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  165.209639][ T8519] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.239523][ T8519] 8021q: adding VLAN 0 to HW filter on device team0
[  165.251151][  T683] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.254169][  T683] bridge0: port 1(bridge_slave_0) entered forwarding state
[  165.269423][  T683] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.272304][  T683] bridge0: port 2(bridge_slave_1) entered forwarding state
[  165.356985][   T95] usb 1-1: ch341-uart converter now attached to ttyUSB0
[  165.527793][ T8519] 8021q: adding VLAN 0 to HW filter on device batadv0
[  165.581410][   T95] usb 1-1: USB disconnect, device number 16
[  165.598277][   T95] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0
[  165.618370][   T95] ch341 1-1:0.0: device disconnected
[  165.839363][ T8519] veth0_vlan: entered promiscuous mode
[  165.849611][ T8519] veth1_vlan: entered promiscuous mode
[  165.894481][ T8519] veth0_macvtap: entered promiscuous mode
[  165.900003][ T8621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1066'.
[  165.901764][ T8519] veth1_macvtap: entered promiscuous mode
[  165.929935][ T8519] batman_adv: batadv0: Interface activated: batadv_slave_0
[  165.961022][ T8519] batman_adv: batadv0: Interface activated: batadv_slave_1
[  165.981724][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.986981][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.989801][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.992597][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.058390][  T683] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.061359][  T683] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.091379][  T683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.095252][  T683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.174175][ T8635] loop4: detected capacity change from 0 to 256
[  166.191678][ T8635] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  166.210210][ T5235] Bluetooth: hci2: command tx timeout
[  166.213155][ T8635] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  166.235456][ T8635] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  166.561360][ T8661] loop0: detected capacity change from 0 to 256
[  166.571213][ T8661] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  166.592991][ T8661] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  166.599152][ T8661] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  166.602444][ T8661] UDF-fs: Scanning with blocksize 512 failed
[  166.609555][ T8661] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  166.615224][ T8661] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  166.630004][   T33] kauditd_printk_skb: 116 callbacks suppressed
[  166.630018][   T33] audit: type=1800 audit(1755269245.905:661): pid=8661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1079" name="file1" dev="loop0" ino=55 res=0 errno=0
[  166.775884][ T5962] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  166.946999][ T5962] usb 5-1: Using ep0 maxpacket: 16
[  166.953198][ T5962] usb 5-1: config 0 has an invalid interface number: 131 but max is 0
[  166.965339][ T8667] loop0: detected capacity change from 0 to 32768
[  166.967997][ T5962] usb 5-1: config 0 has no interface number 0
[  166.979234][ T5962] usb 5-1: config 0 interface 131 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  166.984016][ T5962] usb 5-1: New USB device found, idVendor=0856, idProduct=ac29, bcdDevice=b6.9e
[  166.995226][ T5962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.010273][ T8667] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  167.026104][ T5962] usb 5-1: config 0 descriptor??
[  167.136547][ T8667] XFS (loop0): Ending clean mount
[  167.158593][ T8667] XFS (loop0): Quotacheck needed: Please wait.
[  167.203526][ T8667] XFS (loop0): Quotacheck: Done.
[  167.252086][ T8696] loop2: detected capacity change from 0 to 1024
[  167.266075][ T5962] mos7840 5-1:0.131: missing endpoints
[  167.278782][ T5962] usb 5-1: USB disconnect, device number 2
[  167.286819][ T5930] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  167.361279][   T40] hfsplus: b-tree write err: -5, ino 4
[  167.501070][ T8707] loop0: detected capacity change from 0 to 256
[  167.523987][ T8707] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d)
[  167.851356][ T8731] loop4: detected capacity change from 0 to 512
[  167.880886][ T8731] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.886101][ T8731] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  167.910631][ T5962] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  167.936386][ T8519] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.984256][  T792] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  168.070671][ T5962] usb 3-1: Using ep0 maxpacket: 32
[  168.081144][ T5962] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  168.085140][ T5962] usb 3-1: config 0 has no interface number 0
[  168.099983][ T5962] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  168.106801][ T5962] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.120478][ T5962] usb 3-1: Product: syz
[  168.124205][ T5962] usb 3-1: Manufacturer: syz
[  168.128969][ T5962] usb 3-1: SerialNumber: syz
[  168.133124][ T5962] usb 3-1: config 0 descriptor??
[  168.141916][ T5962] smsc95xx v2.0.0
[  168.158124][  T792] usb 1-1: config 201 has an invalid interface number: 249 but max is 0
[  168.164422][  T792] usb 1-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config
[  168.169065][  T792] usb 1-1: config 201 has no interface number 0
[  168.171885][  T792] usb 1-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81
[  168.177869][  T792] usb 1-1: config 201 interface 249 altsetting 4 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  168.182816][  T792] usb 1-1: config 201 interface 249 altsetting 4 endpoint 0x3 has invalid maxpacket 255, setting to 64
[  168.187448][  T792] usb 1-1: config 201 interface 249 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  168.193158][  T792] usb 1-1: config 201 interface 249 has no altsetting 0
[  168.200117][  T792] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df
[  168.204117][  T792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.207773][  T792] usb 1-1: Product: syz
[  168.213674][  T792] usb 1-1: Manufacturer: syz
[  168.215985][  T792] usb 1-1: SerialNumber: syz
[  168.222938][ T8724] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  168.343770][ T8742] loop4: detected capacity change from 0 to 32768
[  168.351754][ T8742] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section members_v2: device 0: not enough buckets (got 0, max 64)
[  168.351754][ T8742] members_v2 (size 152):
[  168.351754][ T8742] Device:                        0
[  168.351754][ T8742]   Label:                       (none)
[  168.351754][ T8742]   UUID:                        7af6772b-00de-4159-84cd-1faead7f0000
[  168.351754][ T8742]   Size:                        0
[  168.351754][ T8742]   read errors:                 0
[  168.351754][ T8742]   write errors:                0
[  168.351754][ T8742]   checksum errors:             0
[  168.351754][ T8742]   seqread iops:                0
[  168.351754][ T8742]   seqwrite iops:               0
[  168.351754][ T8742]   randread iops:               0
[  168.351754][ T8742]   randwrite iops:              0
[  168.351754][ T8742]   Bucket size:                 131072
[  168.351754][ T8742]   First bucket:                0
[  168.351754][ T8742]   Buckets:                     0
[  168.351754][ T8742]   Last mount:                  1714681267
[  168.351754][ T8742]   Last superblock write:       83886122
[  168.351754][ T8742]   State:                       rw
[  168.351754][ T8742]   Data allowed:                journal,btree,user
[  168.351754][ T8742]   Has data:                    (none)
[  168.351754][ T8742]   Btree allocated bitmap blocksize:256
[  168.351754][ T8742]   Btree allocated bitmap:      0000000000000000000001000010000010011000000000000000000000000000
[  168.351754][ T8742]   Durability:   
[  168.351923][ T8742] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  168.404114][    C1] vkms_vblank_simulate: vblank timer overrun
[  168.422726][ T5235] Bluetooth: hci2: command tx timeout
[  168.462510][  T792] ath6kl: Failed to submit usb control message: -71
[  168.465411][  T792] ath6kl: unable to send the bmi data to the device: -71
[  168.474662][  T792] ath6kl: Unable to send get target info: -71
[  168.486431][  T792] ath6kl: Failed to init ath6kl core: -71
[  168.499633][  T792] ath6kl_usb 1-1:201.249: probe with driver ath6kl_usb failed with error -71
[  168.518615][  T792] usb 1-1: USB disconnect, device number 17
[  168.716406][ T5962] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  168.724382][ T5962] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  169.077476][ T8754] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  169.238615][ T8762] netlink: 'syz.0.1098': attribute type 1 has an invalid length.
[  169.301699][ T8764] loop0: detected capacity change from 0 to 1024
[  169.382379][   T40] hfsplus: bad catalog file entry
[  169.388347][   T40] hfsplus: b-tree write err: -5, ino 3
[  169.444457][ T8768] loop0: detected capacity change from 0 to 512
[  169.452519][ T8768] EXT4-fs: inline encryption not supported
[  169.459545][ T8768] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  169.483662][ T8768] EXT4-fs (loop0): 1 truncate cleaned up
[  169.487259][ T8768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  169.541984][ T5930] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.596394][ T5962] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  169.611552][ T5962] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[  169.632928][ T5962] usb 3-1: USB disconnect, device number 14
[  169.787551][ T8787] loop4: detected capacity change from 0 to 2048
[  169.792879][ T8787] UDF-fs: warning (device loop4): udf_verify_domain_identifier: Not OSTA UDF compliant logical volume descriptor.
[  169.800737][ T8787] UDF-fs: warning (device loop4): udf_fill_super: No fileset found
[  169.868066][ T8789] loop4: detected capacity change from 0 to 256
[  169.877775][ T5976] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  169.879803][ T8789] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d)
[  169.900255][   T33] audit: type=1800 audit(1755269248.963:662): pid=8789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1109" name="file2" dev="loop4" ino=1048725 res=0 errno=0
[  169.907764][   T33] audit: type=1800 audit(1755269248.963:663): pid=8789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1109" name="file2" dev="loop4" ino=1048725 res=0 errno=0
[  170.037841][ T5976] usb 1-1: Using ep0 maxpacket: 16
[  170.043335][ T5976] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  170.047716][ T5976] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22
[  170.054333][ T5976] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  170.058151][ T5976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  170.061419][ T5976] usb 1-1: SerialNumber: syz
[  170.066014][ T5976] cdc_acm 1-1:1.0: skipping garbage
[  170.284024][ T5976] usb 1-1: USB disconnect, device number 18
[  170.519181][ T8803] loop2: detected capacity change from 0 to 32768
[  170.529599][ T8803] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  170.577776][ T8803] XFS (loop2): Ending clean mount
[  170.582964][ T8803] XFS (loop2): Quotacheck needed: Please wait.
[  170.609100][ T8803] XFS (loop2): Quotacheck: Done.
[  170.646158][ T5235] Bluetooth: hci2: command tx timeout
[  170.661652][ T5927] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  170.820332][ T8813] loop2: detected capacity change from 0 to 1024
[  170.834179][ T8813] EXT4-fs: Ignoring removed oldalloc option
[  170.841108][ T8813] EXT4-fs: Ignoring removed bh option
[  170.875112][ T8813] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.916465][ T8813] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.1116: Allocating blocks 385-513 which overlap fs metadata
[  170.960325][ T8813] EXT4-fs (loop2): pa ffff8881035179f8: logic 16, phys. 129, len 24
[  170.963980][ T8813] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[  171.065336][ T5927] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.596798][ T8842] netlink: 'syz.2.1127': attribute type 1 has an invalid length.
[  171.645346][ T8842] 8021q: adding VLAN 0 to HW filter on device bond2
[  171.808472][ T8842] 8021q: adding VLAN 0 to HW filter on device batadv1
[  171.828129][ T8842] bond2: (slave batadv1): making interface the new active one
[  171.834411][ T8842] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  173.003016][ T8868] loop0: detected capacity change from 0 to 256
[  173.211082][ T8878] bridge0: port 3(macsec1) entered blocking state
[  173.215265][ T8878] bridge0: port 3(macsec1) entered disabled state
[  173.219288][ T8878] macsec1: entered allmulticast mode
[  173.221885][ T8878] bridge0: entered allmulticast mode
[  173.317203][ T8878] macsec1: left allmulticast mode
[  173.324127][ T8878] bridge0: left allmulticast mode
[  173.671232][ T5962] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  174.389724][ T5962] usb 5-1: config 3 has an invalid interface number: 71 but max is 0
[  174.419803][ T5962] usb 5-1: config 3 has no interface number 0
[  174.432629][ T5962] usb 5-1: config 3 interface 71 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  174.439349][ T5962] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice=a7.ac
[  174.507052][ T5962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.571734][ T5962] ati_remote 5-1:3.71: ati_remote_probe: Unexpected endpoint_in
[  174.794362][ T5962] usb 5-1: USB disconnect, device number 3
[  174.876104][ T8902] loop2: detected capacity change from 0 to 32768
[  174.892214][ T8902] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  174.945975][ T5927] ocfs2: Unmounting device (7,2) on (node local)
[  175.167007][ T8916] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1153'.
[  175.170857][ T8916] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1153'.
[  175.268317][ T8923] input: syz0 as /devices/virtual/input/input7
[  175.270755][ T8923] input: failed to attach handler leds to device input7, error: -6
[  175.355906][ T8927] loop0: detected capacity change from 0 to 2048
[  175.373219][ T8928] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  175.499340][ T5962] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  175.504285][ T8936] loop4: detected capacity change from 0 to 4096
[  175.537999][ T8936] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  175.569650][ T8519] ntfs3(loop4): ino=9, ntfs_sync_fs failed, -22.
[  175.619531][ T8944] loop4: detected capacity change from 0 to 128
[  175.623000][ T8944] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  175.670625][ T5962] usb 3-1: Using ep0 maxpacket: 16
[  175.675998][ T5962] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  175.687736][ T5962] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  175.703272][ T5962] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  175.706924][ T5962] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.710242][ T5962] usb 3-1: Product: syz
[  175.712046][ T5962] usb 3-1: Manufacturer: syz
[  175.715273][ T5962] usb 3-1: SerialNumber: syz
[  176.184822][ T2322] usb 5-1: new low-speed USB device number 4 using dummy_hcd
[  176.245042][ T5962] usb 3-1: cannot find UAC_HEADER
[  176.271986][ T5962] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  176.277234][ T5962] usb 3-1: USB disconnect, device number 15
[  176.278224][ T6610] udevd[6610]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  176.370113][ T2322] usb 5-1: unable to get BOS descriptor or descriptor too short
[  176.374674][ T2322] usb 5-1: config 7 has an invalid interface number: 252 but max is 0
[  176.378530][ T2322] usb 5-1: config 7 has no interface number 0
[  176.381315][ T2322] usb 5-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid wMaxPacketSize 0
[  176.385573][ T2322] usb 5-1: config 7 interface 252 has no altsetting 0
[  176.392032][ T2322] usb 5-1: string descriptor 0 read error: -22
[  176.394862][ T2322] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0
[  176.398866][ T2322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.410095][ T2322] idmouse 5-1:7.252: Unable to find bulk-in endpoint.
[  176.642746][ T2322] usb 5-1: USB disconnect, device number 4
[  176.915637][ T8960] loop0: detected capacity change from 0 to 32768
[  176.927208][ T8960] XFS: ikeep mount option is deprecated.
[  176.942332][ T8960] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  176.969082][ T8960] XFS (loop0): Ending clean mount
[  176.971814][ T8960] XFS (loop0): Quotacheck needed: Please wait.
[  176.992547][ T8960] XFS (loop0): Quotacheck: Done.
[  177.020640][ T5930] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  177.135629][ T5962] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  177.224811][ T8976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1177'.
[  177.279485][ T8978] netlink: 'syz.4.1178': attribute type 1 has an invalid length.
[  177.307934][ T5962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  177.318113][ T5962] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  177.322409][ T5962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  177.326285][ T5962] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  177.335667][ T5962] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  177.341572][ T5962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.347798][ T5962] usb 3-1: config 0 descriptor??
[  177.575336][ T5962] hdpvr 3-1:0.0: firmware version 0x8 dated )˟=J+noKܐo5foɠObL
[  177.760020][ T8987] loop4: detected capacity change from 0 to 32768
[  177.790241][ T5962] hdpvr 3-1:0.0: device init failed
[  177.795109][ T5962] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12
[  177.796643][ T8987] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  177.822585][ T5962] usb 3-1: USB disconnect, device number 16
[  177.866144][ T8987] XFS (loop4): Ending clean mount
[  177.869978][ T9008] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1188'.
[  177.884236][   T33] audit: type=1800 audit(1755269256.428:664): pid=8987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1182" name="file1" dev="loop4" ino=9286 res=0 errno=0
[  177.932432][   T33] audit: type=1800 audit(1755269256.428:665): pid=8987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1182" name="file1" dev="loop4" ino=9286 res=0 errno=0
[  178.435147][ T8519] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  179.020294][ T9057] sock: sock_timestamping_bind_phc: sock not bind to device
[  179.051171][ T9059] loop0: detected capacity change from 0 to 128
[  179.085461][ T9059] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  179.098705][ T9059] ext4 filesystem being mounted at /387/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  179.143909][ T9059] EXT4-fs (loop0): shut down requested (1)
[  179.148382][ T9059] fscrypt (loop0, inode 12): Error -5 getting encryption context
[  179.199585][ T5930] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  180.542465][ T9067] loop0: detected capacity change from 0 to 40427
[  180.577198][ T9067] F2FS-fs (loop0): invalid crc value
[  180.913474][ T9067] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  180.930724][ T9067] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  180.994663][ T5962] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  181.165560][ T5962] usb 5-1: Using ep0 maxpacket: 16
[  181.172872][ T5962] usb 5-1: config 0 has an invalid interface number: 214 but max is 0
[  181.179485][ T5962] usb 5-1: config 0 has no interface number 0
[  181.182194][ T5962] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[  181.213376][ T5962] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  181.217129][ T5962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.244386][ T5962] usb 5-1: Product: syz
[  181.246128][ T5962] usb 5-1: Manufacturer: syz
[  181.248033][ T5962] usb 5-1: SerialNumber: syz
[  181.289866][ T5962] usb 5-1: config 0 descriptor??
[  181.338906][ T9111] loop0: detected capacity change from 0 to 128
[  181.514563][ T5962] usbtouchscreen 5-1:0.214: Failed to read FW rev: -71
[  181.524278][ T5962] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71
[  181.543779][ T5962] usb 5-1: USB disconnect, device number 5
[  181.927121][ T9130] ALSA: mixer_oss: invalid OSS volume 'T'
[  181.985928][ T9136] loop2: detected capacity change from 0 to 256
[  182.079780][ T9134] loop0: detected capacity change from 0 to 32768
[  182.175562][ T9134] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  182.175582][ T9134]   allowing incompatible features above 0.0: (unknown version)
[  182.175590][ T9134]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  182.192822][ T9134] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  182.196409][ T9134] bcachefs (loop0): initializing new filesystem
[  182.205435][ T9134] bcachefs (loop0): going read-write
[  182.214286][ T9134] bcachefs (loop0): marking superblocks
[  182.222767][ T9134] bcachefs (loop0): initializing freespace
[  182.228197][ T9134] bcachefs (loop0): done initializing freespace
[  182.232748][ T9134] bcachefs (loop0): reading snapshots table
[  182.235366][ T9150] input: syz1 as /devices/virtual/input/input9
[  182.238351][ T9134] bcachefs (loop0): reading snapshots done
[  182.271387][ T9134] bcachefs (loop0): done starting filesystem
[  182.318952][   T33] audit: type=1800 audit(1755269260.572:666): pid=9134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1216" name="bus" dev="loop0" ino=4098 res=0 errno=0
[  182.377207][ T5930] bcachefs (loop0): shutting down
[  182.379423][ T5930] bcachefs (loop0): going read-only
[  182.381560][ T5930] bcachefs (loop0): finished waiting for writes to stop
[  182.397005][ T9156] loop4: detected capacity change from 0 to 512
[  182.403051][ T9156] EXT4-fs: Ignoring removed bh option
[  182.431972][ T5930] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2
[  182.436382][ T9156] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  182.475635][ T5930] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3
[  182.479037][ T9156] EXT4-fs (loop4): 1 truncate cleaned up
[  182.481884][ T5930] bcachefs (loop0): clean shutdown complete, journal seq 4
[  182.484552][ T5930] bcachefs (loop0): marking filesystem clean
[  182.489159][ T9156] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.510293][ T5930] bcachefs (loop0): shutdown complete
[  182.864205][ T5991] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  183.164656][ T5991] usb 3-1: Using ep0 maxpacket: 8
[  183.170890][ T5991] usb 3-1: unable to get BOS descriptor or descriptor too short
[  183.175677][ T5991] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  183.181019][ T5991] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  183.185059][ T5991] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  183.189875][ T5991] usb 3-1: config 1 has no interface number 1
[  183.193848][ T5991] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  183.203004][ T5991] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  183.210328][ T5991] usb 3-1: config 1 interface 2 has no altsetting 0
[  183.216957][ T5991] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  183.221688][ T5991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.225375][ T5991] usb 3-1: Product: syz
[  183.227216][ T5991] usb 3-1: Manufacturer: syz
[  183.229379][ T5991] usb 3-1: SerialNumber: syz
[  183.406180][ T8519] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.462189][ T5991] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  183.470012][ T5991] usb 3-1: MIDIStreaming interface descriptor not found
[  183.505363][ T5991] usb 3-1: USB disconnect, device number 17
[  183.555093][ T5932] udevd[5932]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  183.780410][ T9189] team_slave_0: entered promiscuous mode
[  183.782942][ T9189] team_slave_1: entered promiscuous mode
[  183.787376][ T9189] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  183.790804][ T9189] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  184.061602][ T9200] input: syz1 as /devices/virtual/input/input10
[  184.068859][ T9200] input: failed to attach handler leds to device input10, error: -6
[  184.357348][ T9213] loop4: detected capacity change from 0 to 128
[  184.405106][ T9213] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  184.415598][ T9213] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.533506][ T8519] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  184.800889][ T9208] loop2: detected capacity change from 0 to 32768
[  184.809690][ T9208] 
[  184.809690][ T9208]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  184.809690][ T9208] 
[  184.825222][ T9208] ERROR: (device loop2): diWrite: ixpxd invalid
[  184.825222][ T9208] 
[  184.831679][ T9208] ERROR: (device loop2): txCommit: 
[  184.831679][ T9208] 
[  184.866813][ T5927] 
[  184.866813][ T5927]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  184.866813][ T5927] 
[  184.876734][ T5927] 
[  184.876734][ T5927]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  184.876734][ T5927] 
[  184.905460][ T9221] loop4: detected capacity change from 0 to 512
[  184.933769][ T9221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.965042][ T9221] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  185.022342][ T8519] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.430332][ T9241] loop2: detected capacity change from 0 to 2048
[  185.528285][ T9241] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1247: bad orphan inode 8192
[  185.537928][ T9241] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  185.922679][ T5962] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  186.006651][ T9239] loop0: detected capacity change from 0 to 40427
[  186.012636][ T9239] F2FS-fs (loop0): build fault injection rate: 690
[  186.020962][ T9239] F2FS-fs (loop0): invalid crc value
[  186.081835][ T9239] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  186.087335][ T9239] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  186.093762][ T5962] usb 5-1: Using ep0 maxpacket: 16
[  186.099246][ T5962] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  186.103816][ T5962] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  186.108039][ T5962] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  186.111710][ T5962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.118459][ T5962] usb 5-1: config 0 descriptor??
[  186.120820][ T9239] syz.0.1248: attempt to access beyond end of device
[  186.120820][ T9239] loop0: rw=34817, sector=77824, nr_sectors = 880 limit=40427
[  186.149411][ T5930] syz-executor: attempt to access beyond end of device
[  186.149411][ T5930] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  186.165403][ T5930] CPU: 0 UID: 0 PID: 5930 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  186.165424][ T5930] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  186.165431][ T5930] Call Trace:
[  186.165436][ T5930]  <TASK>
[  186.165441][ T5930]  dump_stack_lvl+0x189/0x250
[  186.165482][ T5930]  ? __pfx_dump_stack_lvl+0x10/0x10
[  186.165504][ T5930]  ? __pfx_queue_work_on+0x10/0x10
[  186.165515][ T5930]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  186.165531][ T5930]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  186.165553][ T5930]  f2fs_handle_critical_error+0x37c/0x540
[  186.165575][ T5930]  f2fs_write_end_io+0x886/0xb60
[  186.165598][ T5930]  __submit_merged_bio+0x27a/0x6a0
[  186.165619][ T5930]  __submit_merged_write_cond+0x255/0x530
[  186.165640][ T5930]  f2fs_write_data_pages+0x261d/0x3000
[  186.165679][ T5930]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  186.165770][ T5930]  ? __lock_acquire+0xab9/0xd20
[  186.165793][ T5930]  ? do_raw_spin_lock+0x121/0x290
[  186.165812][ T5930]  ? do_raw_spin_unlock+0x4d/0x240
[  186.165826][ T5930]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  186.165844][ T5930]  do_writepages+0x32e/0x550
[  186.165868][ T5930]  ? do_raw_spin_unlock+0x4d/0x240
[  186.165885][ T5930]  filemap_fdatawrite+0x199/0x240
[  186.165900][ T5930]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  186.165950][ T5930]  ? do_raw_spin_unlock+0x4d/0x240
[  186.165966][ T5930]  f2fs_sync_dirty_inodes+0x31f/0x830
[  186.165989][ T5930]  f2fs_write_checkpoint+0x95a/0x1df0
[  186.166015][ T5930]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  186.166057][ T5930]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  186.166068][ T5930]  ? kfree+0x18e/0x440
[  186.166083][ T5930]  ? kill_f2fs_super+0x298/0x6c0
[  186.166098][ T5930]  kill_f2fs_super+0x2c3/0x6c0
[  186.166115][ T5930]  ? __pfx_kill_f2fs_super+0x10/0x10
[  186.166124][ T5930]  ? radix_tree_delete_item+0x2b6/0x400
[  186.166144][ T5930]  ? shrinker_free+0x2ce/0x3e0
[  186.166160][ T5930]  deactivate_locked_super+0xbc/0x130
[  186.166174][ T5930]  cleanup_mnt+0x425/0x4c0
[  186.166186][ T5930]  ? lockdep_hardirqs_on+0x9c/0x150
[  186.166203][ T5930]  task_work_run+0x1d4/0x260
[  186.166220][ T5930]  ? __pfx_task_work_run+0x10/0x10
[  186.166234][ T5930]  ? __x64_sys_umount+0x122/0x160
[  186.166252][ T5930]  ? exit_to_user_mode_loop+0x40/0x110
[  186.166271][ T5930]  exit_to_user_mode_loop+0xec/0x110
[  186.166288][ T5930]  do_syscall_64+0x2bd/0x3b0
[  186.166303][ T5930]  ? lockdep_hardirqs_on+0x9c/0x150
[  186.166317][ T5930]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.166329][ T5930]  ? exc_page_fault+0x9f/0xf0
[  186.166345][ T5930]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.166356][ T5930] RIP: 0033:0x7f537f18ff17
[  186.166368][ T5930] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  186.166378][ T5930] RSP: 002b:00007ffd8524b088 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  186.166392][ T5930] RAX: 0000000000000000 RBX: 00007f537f211c05 RCX: 00007f537f18ff17
[  186.166400][ T5930] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd8524b140
[  186.166407][ T5930] RBP: 00007ffd8524b140 R08: 0000000000000000 R09: 0000000000000000
[  186.166414][ T5930] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd8524c1d0
[  186.166421][ T5930] R13: 00007f537f211c05 R14: 000000000002c051 R15: 00007ffd8524c210
[  186.166442][ T5930]  </TASK>
[  186.166518][ T5930] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  186.356981][ T5927] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.579553][ T5962] hid-multitouch 0003:1FD2:6007.0009: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0
[  186.604219][ T9252] netlink: 'syz.0.1251': attribute type 23 has an invalid length.
[  186.672736][ T2322] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  186.736456][ T9256] loop0: detected capacity change from 0 to 4096
[  186.740627][ T9256] ntfs3(loop0): Failed to load $LogFile (-22).
[  186.792622][ T9258] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1254'.
[  186.802325][ T5962] usb 5-1: USB disconnect, device number 6
[  186.831917][ T2322] usb 3-1: Using ep0 maxpacket: 16
[  186.838015][ T2322] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  186.846469][ T2322] usb 3-1: config 0 interface 0 has no altsetting 0
[  186.855817][ T2322] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  186.863851][ T2322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.872512][ T2322] usb 3-1: config 0 descriptor??
[  186.984563][ T9263] loop0: detected capacity change from 0 to 16
[  186.993945][ T9263] erofs (device loop0): mounted with root inode @ nid 36.
[  187.320268][ T2322] nzxt-smart2 0003:1E71:2009.000A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0
[  187.712800][ T9283] loop6: detected capacity change from 0 to 2560
[  187.717658][ T6610] Buffer I/O error on dev loop6, logical block 0, async page read
[  187.725483][ T6610] Buffer I/O error on dev loop6, logical block 0, async page read
[  187.729064][ T6610] Buffer I/O error on dev loop6, logical block 0, async page read
[  187.732905][ T6610] Buffer I/O error on dev loop6, logical block 0, async page read
[  187.736452][ T6610] Buffer I/O error on dev loop6, logical block 0, async page read
[  187.739849][ T6610] Buffer I/O error on dev loop6, logical block 0, async page read
[  187.746311][ T6610] Buffer I/O error on dev loop6, logical block 0, async page read
[  187.749700][ T6610] Buffer I/O error on dev loop6, logical block 0, async page read
[  187.753525][ T6610] ldm_validate_partition_table(): Disk read failed.
[  187.756386][ T6610] Buffer I/O error on dev loop6, logical block 0, async page read
[  187.760065][ T6610] Buffer I/O error on dev loop6, logical block 0, async page read
[  187.761025][ T5976] usb 3-1: USB disconnect, device number 18
[  187.763612][ T6610] Dev loop6: unable to read RDB block 0
[  187.768749][ T6610]  loop6: unable to read partition table
[  187.783185][ T9283] ldm_validate_partition_table(): Disk read failed.
[  187.790651][ T9283] Dev loop6: unable to read RDB block 0
[  187.793347][ T9283]  loop6: unable to read partition table
[  187.808389][ T9283] loop_reread_partitions: partition scan of loop6 (3) failed (rc=-5)
[  188.073869][ T9292] loop0: detected capacity change from 0 to 512
[  188.095062][ T9292] EXT4-fs: Ignoring removed i_version option
[  188.097569][ T9292] EXT4-fs: Ignoring removed nobh option
[  188.104565][ T9292] EXT4-fs (loop0): Test dummy encryption mode enabled
[  188.107407][ T9292] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  188.144189][ T9292] EXT4-fs (loop0): 1 truncate cleaned up
[  188.148295][ T9292] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  188.164283][ T9286] loop4: detected capacity change from 0 to 32768
[  188.169535][ T9286] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1266 (9286)
[  188.182527][ T9286] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  188.199193][ T9286] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  188.203129][ T9286] BTRFS info (device loop4): using free-space-tree
[  188.227894][ T5930] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.375469][ T5235] Bluetooth: hci1: Unknown advertising packet type: 0x7f
[  188.375510][ T5235] Bluetooth: hci1: Unknown advertising packet type: 0x5d
[  188.379583][ T5235] Bluetooth: hci1: Unknown advertising packet type: 0x7f
[  188.382723][ T5235] Bluetooth: hci1: Unknown advertising packet type: 0x7f
[  188.385606][ T5235] Bluetooth: hci1: Malformed LE Event: 0x0d
[  188.434015][ T8519] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  188.786019][ T9322] loop2: detected capacity change from 0 to 1764
[  190.225497][ T9345] orangefs_devreq_open: device cannot be opened in blocking mode
[  190.472597][ T9349] loop2: detected capacity change from 0 to 512
[  190.516151][ T9349] EXT4-fs (loop2): required journal recovery suppressed and not mounted read-only
[  190.857607][ T9360] loop2: detected capacity change from 0 to 2048
[  190.867886][ T9360] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  190.939784][ T9362] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1292'.
[  191.092902][ T9366] loop0: detected capacity change from 0 to 128
[  191.124603][ T9366] FAT-fs (loop0): Directory bread(block 11554) failed
[  191.128053][ T9366] FAT-fs (loop0): Directory bread(block 11555) failed
[  191.147848][ T9366] FAT-fs (loop0): Directory bread(block 11556) failed
[  191.151565][ T9369] loop2: detected capacity change from 0 to 256
[  191.161929][ T9366] FAT-fs (loop0): Directory bread(block 11557) failed
[  191.169473][ T9366] FAT-fs (loop0): Directory bread(block 11558) failed
[  191.189274][ T9366] FAT-fs (loop0): Directory bread(block 11559) failed
[  191.189372][ T9369] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  191.206881][ T9366] FAT-fs (loop0): Directory bread(block 11560) failed
[  191.209726][ T9366] FAT-fs (loop0): Directory bread(block 11561) failed
[  191.211763][ T9369] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  191.212762][ T9366] FAT-fs (loop0): Directory bread(block 11562) failed
[  191.222963][ T9366] FAT-fs (loop0): Directory bread(block 11563) failed
[  191.231610][ T9369] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  191.285738][ T9374] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1298'.
[  191.343962][ T9376] netlink: 'syz.0.1299': attribute type 21 has an invalid length.
[  191.374977][ T9376] netlink: 'syz.0.1299': attribute type 4 has an invalid length.
[  191.466558][   T33] audit: type=1326 audit(1755269269.131:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9383 comm="syz.2.1303" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e818ebe9 code=0x7ffc0000
[  191.476057][   T33] audit: type=1326 audit(1755269269.131:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9383 comm="syz.2.1303" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e818ebe9 code=0x7ffc0000
[  191.490550][   T33] audit: type=1326 audit(1755269269.149:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9383 comm="syz.2.1303" exe="/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f03e818ebe9 code=0x7ffc0000
[  191.523202][   T33] audit: type=1326 audit(1755269269.149:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9383 comm="syz.2.1303" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e818ebe9 code=0x7ffc0000
[  191.537617][   T33] audit: type=1326 audit(1755269269.149:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9383 comm="syz.2.1303" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e818ebe9 code=0x7ffc0000
[  191.855280][ T9402] ALSA: mixer_oss: invalid OSS volume 'DI'
[  192.586035][ T9407] loop4: detected capacity change from 0 to 64
[  192.951969][ T9410] loop2: detected capacity change from 0 to 32768
[  193.003685][ T5927] read_mapping_page failed!
[  193.006047][ T5927] ERROR: (device loop2): txCommit: 
[  193.006047][ T5927] 
[  193.014835][ T5927] ERROR: (device loop2): remounting filesystem as read-only
[  193.736884][ T5923] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.905701][ T5923] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.014449][ T5923] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.238348][ T5923] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.796950][ T5923] bridge_slave_1: left allmulticast mode
[  194.802009][ T5923] bridge_slave_1: left promiscuous mode
[  194.804644][ T5923] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.832935][ T5923] bridge_slave_0: left allmulticast mode
[  194.846762][ T5923] bridge_slave_0: left promiscuous mode
[  194.859130][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.929508][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  194.935727][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  194.940652][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  194.948722][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  194.952289][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  195.147911][ T5923] bond1 (unregistering): (slave gretap1): Releasing active interface
[  195.148850][ T9441] loop0: detected capacity change from 0 to 32768
[  195.168926][ T9441] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  195.215784][ T9441] XFS (loop0): Ending clean mount
[  195.250480][ T5923] team0: Port device geneve0 removed
[  195.293966][ T5930] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  195.482098][ T5923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  195.490555][ T5923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  195.494603][ T5923] bond0 (unregistering): Released all slaves
[  195.508015][ T5923] bond1 (unregistering): Released all slaves
[  195.602982][ T5923] bond2 (unregistering): (slave batadv1): Releasing active interface
[  195.607535][ T5923] bond2 (unregistering): Released all slaves
[  195.614942][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1332'.
[  195.620941][ T9457] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1334'.
[  195.624237][ T9457] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1334'.
[  195.774844][ T9466] pim6reg: entered allmulticast mode
[  195.807610][ T9466] pim6reg: left allmulticast mode
[  195.910286][ T9470] block nbd0: shutting down sockets
[  196.037724][ T9444] chnl_net:caif_netlink_parms(): no params data found
[  196.236024][ T9444] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.247260][ T9444] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.273492][ T9444] bridge_slave_0: entered allmulticast mode
[  196.277454][ T9444] bridge_slave_0: entered promiscuous mode
[  196.277999][ T9497] loop4: detected capacity change from 0 to 512
[  196.286672][ T9497] EXT4-fs: journaled quota format not specified
[  196.307198][ T9444] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.323282][ T9444] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.335170][ T9444] bridge_slave_1: entered allmulticast mode
[  196.355476][ T9444] bridge_slave_1: entered promiscuous mode
[  196.470584][ T9444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  196.487895][ T9444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  196.491575][ T9506] netlink: 'syz.4.1349': attribute type 153 has an invalid length.
[  196.526128][ T9444] team0: Port device team_slave_0 added
[  196.537718][ T9444] team0: Port device team_slave_1 added
[  196.612410][ T9444] batman_adv: batadv0: Adding interface: batadv_slave_0
[  196.616557][ T9444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.628925][ T9444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  196.640483][ T9444] batman_adv: batadv0: Adding interface: batadv_slave_1
[  196.643470][ T9444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.659701][ T9444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  196.710821][ T9444] hsr_slave_0: entered promiscuous mode
[  196.718446][ T5976] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  196.719850][ T9444] hsr_slave_1: entered promiscuous mode
[  196.740264][ T9444] debugfs: 'hsr0' already exists in 'hsr'
[  196.743974][ T9444] Cannot create hsr debugfs directory
[  196.917599][ T5976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  196.937780][ T5976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  196.956065][ T5976] usb 1-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00
[  196.972658][ T5976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.035742][ T5976] usb 1-1: config 0 descriptor??
[  197.158810][ T5235] Bluetooth: hci0: command tx timeout
[  197.241371][ T9444] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  197.249945][ T9444] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  197.258743][ T9444] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  197.265256][ T9444] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  197.336269][ T9444] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.356417][ T9444] 8021q: adding VLAN 0 to HW filter on device team0
[  197.364050][  T683] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.366712][  T683] bridge0: port 1(bridge_slave_0) entered forwarding state
[  197.377825][  T683] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.380329][  T683] bridge0: port 2(bridge_slave_1) entered forwarding state
[  197.455870][ T5923] : left promiscuous mode
[  197.519427][ T5976] itetech 0003:06CB:2968.000B: hidraw0: USB HID v0.00 Device [HID 06cb:2968] on usb-dummy_hcd.0-1/input0
[  197.586779][ T9444] 8021q: adding VLAN 0 to HW filter on device batadv0
[  197.730418][ T5976] usb 1-1: USB disconnect, device number 19
[  197.895999][ T9550] loop4: detected capacity change from 0 to 512
[  198.038036][ T5923] hsr_slave_0: left promiscuous mode
[  198.049530][ T5923] hsr_slave_1: left promiscuous mode
[  198.053292][ T5923] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  198.060400][ T5923] batman_adv: batadv0: Removing interface: batadv_slave_0
[  198.064193][ T5923] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  198.070386][ T5923] batman_adv: batadv0: Removing interface: batadv_slave_1
[  198.096874][ T5923] veth1_macvtap: left promiscuous mode
[  198.099683][ T5923] veth0_macvtap: left promiscuous mode
[  198.102187][ T5923] veth1_vlan: left promiscuous mode
[  198.104346][ T5923] veth0_vlan: left promiscuous mode
[  198.297588][   T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  198.416098][ T9563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1359'.
[  198.486254][   T24] usb 5-1: config 0 has an invalid interface number: 101 but max is 0
[  198.496989][   T24] usb 5-1: config 0 has no interface number 0
[  198.499882][   T24] usb 5-1: config 0 interface 101 has no altsetting 0
[  198.508498][   T24] usb 5-1: New USB device found, idVendor=12d1, idProduct=1c1f, bcdDevice=ef.18
[  198.512494][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.516288][   T24] usb 5-1: Product: syz
[  198.518120][   T24] usb 5-1: Manufacturer: syz
[  198.521119][   T24] usb 5-1: SerialNumber: syz
[  198.531311][   T24] usb 5-1: config 0 descriptor??
[  198.542681][   T24] usb 5-1: bad CDC descriptors
[  198.561149][   T24] option 5-1:0.101: GSM modem (1-port) converter detected
[  198.762484][ T5962] usb 5-1: USB disconnect, device number 7
[  198.775414][ T5962] option 5-1:0.101: device disconnected
[  198.927353][ T5923] team0 (unregistering): Port device team_slave_1 removed
[  198.985396][ T5923] team0 (unregistering): Port device team_slave_0 removed
[  199.382337][ T5235] Bluetooth: hci0: command tx timeout
[  200.104972][ T9444] veth0_vlan: entered promiscuous mode
[  200.403697][ T9444] veth1_vlan: entered promiscuous mode
[  200.648036][ T9444] veth0_macvtap: entered promiscuous mode
[  200.695332][ T9444] veth1_macvtap: entered promiscuous mode
[  200.697117][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  200.727745][ T9444] batman_adv: batadv0: Interface activated: batadv_slave_0
[  200.735519][ T9444] batman_adv: batadv0: Interface activated: batadv_slave_1
[  200.782868][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  200.822663][ T5937] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  200.894051][ T5937] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  200.898778][ T5937] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  200.906395][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  200.912166][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  200.917705][ T5937] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  200.951286][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  200.956041][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.111471][ T9583] loop4: detected capacity change from 0 to 32768
[  201.167784][ T8204] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  201.339012][   T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  201.340043][ T8204] usb 1-1: Using ep0 maxpacket: 32
[  201.345909][ T8204] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  201.354048][ T8204] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  201.358107][ T8204] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  201.363863][ T8204] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.373165][ T8204] usb 1-1: config 0 descriptor??
[  201.522898][   T24] usb 6-1: Using ep0 maxpacket: 32
[  201.526703][   T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  201.532934][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  201.545167][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  201.549057][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  201.568974][   T24] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  201.573107][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.585621][   T24] usb 6-1: Product: syz
[  201.586984][   T24] usb 6-1: Manufacturer: syz
[  201.588403][   T24] usb 6-1: SerialNumber: syz
[  201.594123][   T24] usb 6-1: config 0 descriptor??
[  201.606167][ T5929] Bluetooth: hci0: command tx timeout
[  201.721342][ T9609] loop4: detected capacity change from 0 to 256
[  201.741550][ T9609] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d)
[  201.756903][   T33] audit: type=1800 audit(1755269278.756:672): pid=9609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1370" name="file1" dev="loop4" ino=1048734 res=0 errno=0
[  201.829600][ T5962] usb 6-1: USB disconnect, device number 2
[  201.962775][ T9617] batadv0: entered promiscuous mode
[  201.965970][ T9617] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  202.069760][ T8204] ft260 0003:0403:6030.000C: failed to retrieve chip version
[  202.079960][ T8204] ft260 0003:0403:6030.000C: probe with driver ft260 failed with error -71
[  202.095141][ T8204] usb 1-1: USB disconnect, device number 20
[  202.889052][ T5929] Bluetooth: hci1: command 0x0406 tx timeout
[  202.938610][ T9638] loop0: detected capacity change from 0 to 4096
[  202.946318][ T9638] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  202.979099][ T9638] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  202.982815][ T9638] ntfs3(loop0): Failed to load $Extend (-22).
[  202.999008][ T9638] ntfs3(loop0): Failed to initialize $Extend.
[  203.219208][ T9653] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1386'.
[  203.294451][ T9659] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1388'.
[  203.500447][ T9669] loop4: detected capacity change from 0 to 1024
[  203.511954][ T9669] EXT4-fs: Ignoring removed nomblk_io_submit option
[  203.530987][ T9671] loop0: detected capacity change from 0 to 256
[  203.542867][ T9669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.555902][ T9671] FAT-fs (loop0): Directory bread(block 64) failed
[  203.558639][ T9671] FAT-fs (loop0): Directory bread(block 65) failed
[  203.561476][ T9671] FAT-fs (loop0): Directory bread(block 66) failed
[  203.565338][ T9671] FAT-fs (loop0): Directory bread(block 67) failed
[  203.569613][ T9671] FAT-fs (loop0): Directory bread(block 68) failed
[  203.572406][ T9671] FAT-fs (loop0): Directory bread(block 69) failed
[  203.575404][ T9671] FAT-fs (loop0): Directory bread(block 70) failed
[  203.578119][ T9671] FAT-fs (loop0): Directory bread(block 71) failed
[  203.580850][ T9671] FAT-fs (loop0): Directory bread(block 72) failed
[  203.584955][ T9671] FAT-fs (loop0): Directory bread(block 73) failed
[  203.639747][ T8519] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.745624][ T9684] loop5: detected capacity change from 0 to 256
[  203.774897][ T9684] FAT-fs (loop5): Directory bread(block 64) failed
[  203.783377][ T9684] FAT-fs (loop5): Directory bread(block 65) failed
[  203.785843][ T9684] FAT-fs (loop5): Directory bread(block 66) failed
[  203.791045][ T9684] FAT-fs (loop5): Directory bread(block 67) failed
[  203.793250][ T9684] FAT-fs (loop5): Directory bread(block 68) failed
[  203.795580][ T9684] FAT-fs (loop5): Directory bread(block 69) failed
[  203.797774][ T9684] FAT-fs (loop5): Directory bread(block 70) failed
[  203.800166][ T9684] FAT-fs (loop5): Directory bread(block 71) failed
[  203.802732][ T9684] FAT-fs (loop5): Directory bread(block 72) failed
[  203.805403][ T9684] FAT-fs (loop5): Directory bread(block 73) failed
[  203.829609][ T5235] Bluetooth: hci0: command tx timeout
[  203.959760][ T9693] loop5: detected capacity change from 0 to 512
[  203.972212][ T9693] EXT4-fs (loop5): Test dummy encryption mode enabled
[  204.006691][ T9693] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  204.019289][ T9698] netlink: 'syz.0.1403': attribute type 5 has an invalid length.
[  204.039388][ T9693] EXT4-fs error (device loop5): xattr_find_entry:333: inode #15: comm syz.5.1401: corrupted xattr entries
[  204.051832][ T9693] EXT4-fs (loop5): 1 orphan inode deleted
[  204.072302][ T9693] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.086752][ T9687] loop4: detected capacity change from 0 to 32768
[  204.089406][ T9687] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  204.114786][ T9444] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.229494][ T9711] loop0: detected capacity change from 0 to 512
[  204.386321][ T9711] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  204.389646][ T9711] EXT4-fs (loop0): orphan cleanup on readonly fs
[  204.414622][ T9711] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1408: corrupted inode contents
[  204.425675][ T9711] EXT4-fs (loop0): Remounting filesystem read-only
[  204.429237][ T9711] EXT4-fs (loop0): 1 truncate cleaned up
[  204.727586][   T26] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  204.731987][   T26] Quota error (device loop0): write_blk: dquota write failed
[  204.734871][   T26] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries
[  204.738422][   T26] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  204.742248][   T26] Quota error (device loop0): write_blk: dquota write failed
[  204.744931][   T26] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list
[  204.749138][   T26] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[  204.753169][   T26] Quota error (device loop0): v2_write_file_info: Can't write info structure
[  204.757215][   T26] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  204.765596][ T9711] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  204.804176][ T5930] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.932499][ T9731] ==================================================================
[  204.935979][ T9731] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  204.939289][ T9731] Read of size 2 at addr ffff8880309185c2 by task syz.0.1415/9731
[  204.943498][ T9731] 
[  204.944578][ T9731] CPU: 0 UID: 0 PID: 9731 Comm: syz.0.1415 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  204.944597][ T9731] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  204.944605][ T9731] Call Trace:
[  204.944612][ T9731]  <TASK>
[  204.944617][ T9731]  dump_stack_lvl+0x189/0x250
[  204.944638][ T9731]  ? __kasan_check_byte+0x12/0x40
[  204.944657][ T9731]  ? __pfx_dump_stack_lvl+0x10/0x10
[  204.944669][ T9731]  ? lock_release+0x4b/0x3e0
[  204.944685][ T9731]  ? __virt_addr_valid+0x4a5/0x5c0
[  204.944701][ T9731]  print_report+0xca/0x240
[  204.944711][ T9731]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  204.944722][ T9731]  kasan_report+0x118/0x150
[  204.944738][ T9731]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  204.944752][ T9731]  __xfrm_state_lookup+0x6ad/0x8d0
[  204.944763][ T9731]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  204.944777][ T9731]  xfrm_state_add+0x27d/0xc40
[  204.944791][ T9731]  pfkey_add+0x1edd/0x2e00
[  204.944807][ T9731]  ? __pfx_pfkey_add+0x10/0x10
[  204.944816][ T9731]  ? kmem_cache_free+0x18f/0x400
[  204.944835][ T9731]  pfkey_sendmsg+0xbfe/0x1090
[  204.944852][ T9731]  ? trace_sched_exit_tp+0x36/0x110
[  204.944869][ T9731]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  204.944890][ T9731]  ? aa_sock_msg_perm+0xf1/0x1d0
[  204.944900][ T9731]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  204.944913][ T9731]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  204.944931][ T9731]  __sock_sendmsg+0x21c/0x270
[  204.944947][ T9731]  ____sys_sendmsg+0x505/0x830
[  204.944960][ T9731]  ? __pfx_____sys_sendmsg+0x10/0x10
[  204.944974][ T9731]  ? import_iovec+0x74/0xa0
[  204.944988][ T9731]  ___sys_sendmsg+0x21f/0x2a0
[  204.944999][ T9731]  ? __pfx____sys_sendmsg+0x10/0x10
[  204.945020][ T9731]  ? __fget_files+0x2a/0x420
[  204.945030][ T9731]  ? __fget_files+0x3a0/0x420
[  204.945044][ T9731]  __x64_sys_sendmsg+0x19b/0x260
[  204.945053][ T9731]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  204.945067][ T9731]  ? rcu_is_watching+0x15/0xb0
[  204.945081][ T9731]  ? do_syscall_64+0xbe/0x3b0
[  204.945098][ T9731]  do_syscall_64+0xfa/0x3b0
[  204.945113][ T9731]  ? lockdep_hardirqs_on+0x9c/0x150
[  204.945129][ T9731]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.945141][ T9731]  ? exc_page_fault+0x9f/0xf0
[  204.945157][ T9731]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.945168][ T9731] RIP: 0033:0x7f537f18ebe9
[  204.945179][ T9731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  204.945189][ T9731] RSP: 002b:00007f538007f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  204.945202][ T9731] RAX: ffffffffffffffda RBX: 00007f537f3b5fa0 RCX: 00007f537f18ebe9
[  204.945211][ T9731] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  204.945219][ T9731] RBP: 00007f537f211e19 R08: 0000000000000000 R09: 0000000000000000
[  204.945226][ T9731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  204.945233][ T9731] R13: 00007f537f3b6038 R14: 00007f537f3b5fa0 R15: 00007ffd8524bdf8
[  204.945247][ T9731]  </TASK>
[  204.945251][ T9731] 
[  205.054626][ T9731] Allocated by task 7726:
[  205.056092][ T9731]  kasan_save_track+0x3e/0x80
[  205.057565][ T9731]  __kasan_slab_alloc+0x6c/0x80
[  205.059502][ T9731]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  205.061442][ T9731]  xfrm_state_alloc+0x24/0x2f0
[  205.063257][ T9731]  __find_acq_core+0x8a7/0x1c00
[  205.065265][ T9731]  xfrm_find_acq+0x78/0xa0
[  205.066836][ T9731]  xfrm_alloc_userspi+0x6b3/0xc90
[  205.068475][ T9731]  xfrm_user_rcv_msg+0x7a3/0xab0
[  205.070004][ T9731]  netlink_rcv_skb+0x208/0x470
[  205.071630][ T9731]  xfrm_netlink_rcv+0x79/0x90
[  205.073270][ T9731]  netlink_unicast+0x82f/0x9e0
[  205.074885][ T9731]  netlink_sendmsg+0x805/0xb30
[  205.076885][ T9731]  __sock_sendmsg+0x21c/0x270
[  205.078927][ T9731]  ____sys_sendmsg+0x505/0x830
[  205.081015][ T9731]  ___sys_sendmsg+0x21f/0x2a0
[  205.082859][ T9731]  __x64_sys_sendmsg+0x19b/0x260
[  205.084497][ T9731]  do_syscall_64+0xfa/0x3b0
[  205.086282][ T9731]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.088714][ T9731] 
[  205.089459][ T9731] Freed by task 8204:
[  205.091097][ T9731]  kasan_save_track+0x3e/0x80
[  205.092740][ T9731]  kasan_save_free_info+0x46/0x50
[  205.094703][ T9731]  __kasan_slab_free+0x5b/0x80
[  205.096689][ T9731]  kmem_cache_free+0x18f/0x400
[  205.098560][ T9731]  xfrm_state_gc_task+0x52d/0x6b0
[  205.100270][ T9731]  process_scheduled_works+0xae1/0x17b0
[  205.102032][ T9731]  worker_thread+0x8a0/0xda0
[  205.103917][ T9731]  kthread+0x711/0x8a0
[  205.105660][ T9731]  ret_from_fork+0x3fc/0x770
[  205.107399][ T9731]  ret_from_fork_asm+0x1a/0x30
[  205.109279][ T9731] 
[  205.110275][ T9731] The buggy address belongs to the object at ffff888030918480
[  205.110275][ T9731]  which belongs to the cache xfrm_state of size 928
[  205.115079][ T9731] The buggy address is located 322 bytes inside of
[  205.115079][ T9731]  freed 928-byte region [ffff888030918480, ffff888030918820)
[  205.119806][ T9731] 
[  205.120774][ T9731] The buggy address belongs to the physical page:
[  205.122849][ T9731] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888030918480 pfn:0x30918
[  205.125996][ T9731] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  205.129347][ T9731] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  205.132187][ T9731] page_type: f5(slab)
[  205.133754][ T9731] raw: 00fff00000000040 ffff88801abeb780 dead000000000122 0000000000000000
[  205.137146][ T9731] raw: ffff888030918480 00000000800e000c 00000000f5000000 0000000000000000
[  205.140382][ T9731] head: 00fff00000000040 ffff88801abeb780 dead000000000122 0000000000000000
[  205.143566][ T9731] head: ffff888030918480 00000000800e000c 00000000f5000000 0000000000000000
[  205.146652][ T9731] head: 00fff00000000002 ffffea0000c24601 00000000ffffffff 00000000ffffffff
[  205.149717][ T9731] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  205.153046][ T9731] page dumped because: kasan: bad access detected
[  205.155317][ T9731] page_owner tracks the page as allocated
[  205.157153][ T9731] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6019, tgid 6017 (syz.0.82), ts 73111977598, free_ts 73102571157
[  205.163418][ T9731]  post_alloc_hook+0x240/0x2a0
[  205.165086][ T9731]  get_page_from_freelist+0x21e4/0x22c0
[  205.167313][ T9731]  __alloc_frozen_pages_noprof+0x181/0x370
[  205.169306][ T9731]  alloc_pages_mpol+0x232/0x4a0
[  205.170954][ T9731]  allocate_slab+0x8a/0x370
[  205.172811][ T9731]  ___slab_alloc+0xbeb/0x1410
[  205.174743][ T9731]  kmem_cache_alloc_noprof+0x283/0x3c0
[  205.176935][ T9731]  xfrm_state_alloc+0x24/0x2f0
[  205.178884][ T9731]  xfrm_add_acquire+0xf7/0xb20
[  205.181065][ T9731]  xfrm_user_rcv_msg+0x7a3/0xab0
[  205.182966][ T9731]  netlink_rcv_skb+0x208/0x470
[  205.184942][ T9731]  xfrm_netlink_rcv+0x79/0x90
[  205.186845][ T9731]  netlink_unicast+0x82f/0x9e0
[  205.188720][ T9731]  netlink_sendmsg+0x805/0xb30
[  205.190925][ T9731]  __sock_sendmsg+0x21c/0x270
[  205.192821][ T9731]  ____sys_sendmsg+0x505/0x830
[  205.194690][ T9731] page last free pid 6017 tgid 6017 stack trace:
[  205.197162][ T9731]  __free_frozen_pages+0xbc4/0xd30
[  205.199179][ T9731]  __put_partials+0x156/0x1a0
[  205.201071][ T9731]  put_cpu_partial+0x17c/0x250
[  205.202931][ T9731]  __slab_free+0x2d5/0x3c0
[  205.204714][ T9731]  qlist_free_all+0x97/0x140
[  205.206574][ T9731]  kasan_quarantine_reduce+0x148/0x160
[  205.208894][ T9731]  __kasan_slab_alloc+0x22/0x80
[  205.210852][ T9731]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  205.212986][ T9731]  ptlock_alloc+0x20/0x70
[  205.214745][ T9731]  pte_alloc_one+0x7d/0x170
[  205.216576][ T9731]  __handle_mm_fault+0x2795/0x5450
[  205.218654][ T9731]  handle_mm_fault+0x40a/0x8e0
[  205.220658][ T9731]  do_user_addr_fault+0xa81/0x1390
[  205.222897][ T9731]  exc_page_fault+0x76/0xf0
[  205.224891][ T9731]  asm_exc_page_fault+0x26/0x30
[  205.227033][ T9731] 
[  205.228113][ T9731] Memory state around the buggy address:
[  205.230428][ T9731]  ffff888030918480: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  205.233787][ T9731]  ffff888030918500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  205.237059][ T9731] >ffff888030918580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  205.240332][ T9731]                                            ^
[  205.242905][ T9731]  ffff888030918600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  205.246289][ T9731]  ffff888030918680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  205.249729][ T9731] ==================================================================
[  205.253155][ T9731] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  205.256246][ T9731] CPU: 0 UID: 0 PID: 9731 Comm: syz.0.1415 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  205.261341][ T9731] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  205.265584][ T9731] Call Trace:
[  205.266775][ T9731]  <TASK>
[  205.267872][ T9731]  dump_stack_lvl+0x99/0x250
[  205.269480][ T9731]  ? __asan_memcpy+0x40/0x70
[  205.271265][ T9731]  ? __pfx_dump_stack_lvl+0x10/0x10
[  205.273191][ T9731]  ? __pfx__printk+0x10/0x10
[  205.274795][ T9731]  vpanic+0x281/0x750
[  205.276490][ T9731]  ? __pfx_vpanic+0x10/0x10
[  205.278403][ T9731]  ? irqentry_exit+0x74/0x90
[  205.280323][ T9731]  panic+0xb9/0xc0
[  205.281846][ T9731]  ? __pfx_panic+0x10/0x10
[  205.283719][ T9731]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  205.286160][ T9731]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  205.288574][ T9731]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  205.290359][ T9731]  check_panic_on_warn+0x89/0xb0
[  205.291999][ T9731]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  205.293780][ T9731]  end_report+0x78/0x160
[  205.295214][ T9731]  kasan_report+0x129/0x150
[  205.296676][ T9731]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  205.298879][ T9731]  __xfrm_state_lookup+0x6ad/0x8d0
[  205.300940][ T9731]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  205.303249][ T9731]  xfrm_state_add+0x27d/0xc40
[  205.305110][ T9731]  pfkey_add+0x1edd/0x2e00
[  205.306575][ T9731]  ? __pfx_pfkey_add+0x10/0x10
[  205.308173][ T9731]  ? kmem_cache_free+0x18f/0x400
[  205.310115][ T9731]  pfkey_sendmsg+0xbfe/0x1090
[  205.312064][ T9731]  ? trace_sched_exit_tp+0x36/0x110
[  205.314259][ T9731]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  205.316375][ T9731]  ? aa_sock_msg_perm+0xf1/0x1d0
[  205.318328][ T9731]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  205.320112][ T9731]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  205.321963][ T9731]  __sock_sendmsg+0x21c/0x270
[  205.323873][ T9731]  ____sys_sendmsg+0x505/0x830
[  205.325589][ T9731]  ? __pfx_____sys_sendmsg+0x10/0x10
[  205.327508][ T9731]  ? import_iovec+0x74/0xa0
[  205.329356][ T9731]  ___sys_sendmsg+0x21f/0x2a0
[  205.331309][ T9731]  ? __pfx____sys_sendmsg+0x10/0x10
[  205.333507][ T9731]  ? __fget_files+0x2a/0x420
[  205.335436][ T9731]  ? __fget_files+0x3a0/0x420
[  205.337413][ T9731]  __x64_sys_sendmsg+0x19b/0x260
[  205.339465][ T9731]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  205.341726][ T9731]  ? rcu_is_watching+0x15/0xb0
[  205.343670][ T9731]  ? do_syscall_64+0xbe/0x3b0
[  205.345600][ T9731]  do_syscall_64+0xfa/0x3b0
[  205.347428][ T9731]  ? lockdep_hardirqs_on+0x9c/0x150
[  205.349602][ T9731]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.352065][ T9731]  ? exc_page_fault+0x9f/0xf0
[  205.353994][ T9731]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.356462][ T9731] RIP: 0033:0x7f537f18ebe9
[  205.358294][ T9731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  205.366254][ T9731] RSP: 002b:00007f538007f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  205.369629][ T9731] RAX: ffffffffffffffda RBX: 00007f537f3b5fa0 RCX: 00007f537f18ebe9
[  205.372836][ T9731] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  205.376018][ T9731] RBP: 00007f537f211e19 R08: 0000000000000000 R09: 0000000000000000
[  205.379492][ T9731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  205.383000][ T9731] R13: 00007f537f3b6038 R14: 00007f537f3b5fa0 R15: 00007ffd8524bdf8
[  205.386419][ T9731]  </TASK>
[  205.388467][ T9731] Kernel Offset: disabled
[  205.390269][ T9731] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:48:08  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000006b RBX=000000000000006b RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000140b RDI=000000000000140c RBP=00000000000003f8 RSP=ffffc9000333ed90
R8 =ffff88801f170237 R9 =1ffff11003e2e046 R10=dffffc0000000000 R11=ffffffff854f1730
R12=dffffc0000000000 R13=ffffffff99afa906 R14=ffffffff99def3a0 R15=0000000000000000
RIP=ffffffff854f17ac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f538007f6c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f538007efc8 CR3=0000000122026000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f537f387498 00007f537f387470 XMM03=00007f537f3874a8 00007f537f3874a0
XMM04=00007f537feed100 00007f537f387460 XMM05=00007f537f387478 00007f537f3874c0
XMM06=00007f537f3874b8 00007f537f3874b0 XMM07=00007f537f3874a8 00007f537f3874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f537f212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=2e4cbf46ef2dbe00 RBX=ffffffff81968308 RCX=2e4cbf46ef2dbe00 RDX=0000000000000001
RSI=ffffffff8d9b6e5e RDI=ffffffff8be33400 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa37f30 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d4000
RIP=ffffffff8b7953f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000557ded7b9000 CR3=000000010f756000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fa038987498 00007fa038987470 XMM03=00007fa0389874a8 00007fa0389874a0
XMM04=00007fa0394ed100 00007fa038987460 XMM05=00007fa038987478 00007fa0389874c0
XMM06=00007fa0389874b8 00007fa0389874b0 XMM07=00007fa0389874a8 00007fa0389874a0
XMM08=0000000000000000 00007fa038812ee7 XMM09=0000000000000000 00007fa038812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
