last executing test programs:

55.048102624s ago: executing program 0 (id=15):
syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x752f)

53.6204879s ago: executing program 0 (id=27):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10)
bind$tipc(r0, 0x0, 0x0)

53.364402967s ago: executing program 0 (id=30):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0xc0900, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
unshare(0x20400)
inotify_add_watch(r1, 0x0, 0x4000002)
pipe(&(0x7f0000000340))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000500)=0x5, 0x9)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x40}}, 0x40000)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1a00000000", @ANYRES32, @ANYBLOB="383e63b3497e105f3726c6c3b19637a3623dace0e0c87b3a104fcf27c29df899dd6de2456a8e45e5eac6028e667c00abb3889d09c2e0a57719cd51dd5567e7", @ANYRES64=0x0], 0x20)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xab)
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1a4, &(0x7f0000000440)="$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")
execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0)
close(r0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

51.32013729s ago: executing program 0 (id=33):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0xffffffff, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x80}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x3, 0x4, 0x0, 0x81}]}]}, 0x1bc}}, 0x0)

51.306766603s ago: executing program 0 (id=35):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

51.21760759s ago: executing program 0 (id=37):
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000200)='./file1\x00', 0x10000, &(0x7f0000000100)=ANY=[], 0x1, 0x14fe, &(0x7f0000001580)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @c}})
mknod(&(0x7f00000004c0)='./bus\x00', 0x8000, 0x0)

35.968237029s ago: executing program 32 (id=37):
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000200)='./file1\x00', 0x10000, &(0x7f0000000100)=ANY=[], 0x1, 0x14fe, &(0x7f0000001580)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @c}})
mknod(&(0x7f00000004c0)='./bus\x00', 0x8000, 0x0)

24.963218157s ago: executing program 1 (id=236):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r2, 0x2, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)

24.962834967s ago: executing program 1 (id=237):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001"], 0x23c}}, 0x0)

24.281972791s ago: executing program 1 (id=240):
syz_usb_connect$cdc_ecm(0x2, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109025100010100000309040000ff02020000052406000005240000000d240f01000000000000000000042413050524010208042413000905810320000000000905820220000002000905030208"], 0x0)

19.65344173s ago: executing program 1 (id=240):
syz_usb_connect$cdc_ecm(0x2, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109025100010100000309040000ff02020000052406000005240000000d240f01000000000000000000042413050524010208042413000905810320000000000905820220000002000905030208"], 0x0)

11.282229977s ago: executing program 1 (id=240):
syz_usb_connect$cdc_ecm(0x2, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109025100010100000309040000ff02020000052406000005240000000d240f01000000000000000000042413050524010208042413000905810320000000000905820220000002000905030208"], 0x0)

4.364374176s ago: executing program 1 (id=240):
syz_usb_connect$cdc_ecm(0x2, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109025100010100000309040000ff02020000052406000005240000000d240f01000000000000000000042413050524010208042413000905810320000000000905820220000002000905030208"], 0x0)

3.624615746s ago: executing program 3 (id=385):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3)

3.564314219s ago: executing program 3 (id=387):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000005600)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x99)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x7a680000)

3.015024078s ago: executing program 3 (id=394):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0}, 0x94)
fsopen(&(0x7f0000000000)='sysfs\x00', 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
socket(0x10, 0x3, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota')
socket$nl_crypto(0x10, 0x3, 0x15)
mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000040)={{@local, 0x200001}, @local, 0x8, 0x6, 0x347, 0x80000004, 0x24b, 0x10001, 0x9})

1.54215528s ago: executing program 3 (id=403):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000080000850000001800000085000000a000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

1.541863768s ago: executing program 2 (id=404):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
clock_gettime(0x0, &(0x7f00000002c0)={<r0=>0x0, <r1=>0x0})
clock_settime(0x0, &(0x7f0000000380)={r0, r1+60000000})

1.413818813s ago: executing program 2 (id=405):
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x3, 0x4, 0x4, 0xb00, 0x3a427, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50)

1.413373867s ago: executing program 3 (id=406):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x244, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0)
r0 = io_uring_setup(0x4ba, &(0x7f00000001c0)={0x0, 0xc988, 0x2, 0x3, 0x315})
openat$mice(0xffffffffffffff9c, &(0x7f0000000dc0), 0x103041)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0)
dup3(r1, r0, 0x80000)

1.413292542s ago: executing program 2 (id=407):
r0 = socket$alg(0x26, 0x5, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x28, &(0x7f0000000640)=""/239, &(0x7f0000000740)=0xef)

1.303535843s ago: executing program 2 (id=408):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811)
setsockopt$sock_attach_bpf(r0, 0x6, 0x25, &(0x7f0000000040), 0x4)

431.449997ms ago: executing program 2 (id=409):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xb)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='mpol=prefer:0'])
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x101000, 0x0, 0x22}, 0x18)
mknodat$null(r0, &(0x7f00000000c0)='./file0\x00', 0x2, 0x103)

368.089757ms ago: executing program 2 (id=410):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzJ6vZpMl2P9ImafoxSQQXLcumT9X6ENeqjabNh7bVVFlnN9vN6uzMujujBYPUIIiCoARBxQ+qQulLLYiBvtQiFPxAWoVSUbS+iBSq4INBG+jKzNybnXtntneyk7S0/f2gnb3n3nPumf3vPXfOPZNCrHZqYaW4sFIsVYrV2ftXbil+rlquL86FwqvktT4/vbkSOcn+tXPkfR/4yD23hPCHY1/70Orq6mpoGA5dHWj7+fy/T8+2vyYKmTqNdru31vLH+iMv/fwtr3REnhMhhB0d/WrYFEL42C9C2BxCGInLRuPXLSGEbSGEKITw6G/+9ePBfrrQ5uy9Lzx37MzhfWemHn/smQvzR9c9MArhu+XdN88vvrh/023Pv+MynR4AAF7RB48fufvo5IHwZBSGzg10fl7fGb8mn4/vfNun7np4YG3/Kr3Z9CqGCgAAABlr8//h6OUu63XJylqyJPjEAyfufipa229i+/p26K4jt79/8kC8/ht17L81Lvrnezc111Cz677Z9d+RTP3u679r53n4q8/+svLWjfc/6V9y3uEQFSZS24XCxEQIx6Za27uirYVydaX2zvur9crJjZ/3jSKdf3b1fm1Bv9f8RzPV89b/d3/i8z/bMtDPOxgL2b/axnax80+ZLtL5rz+W/+RLUU/5j2Xq5eV/x9Pbz/9qcz/vIHtGLkU6/9aFuK/9gGJrAGjk/82B/Px3ZNrPy//7U+cePbGB7/80xpnhqNHXwdQI8HJcvs5XmMhI598KIjV0xr/I9a7//2XyvybTfl7+d1b/8bu/9XH/X2/8H5/qp803j3T+rSCKqSPWrv+RQv71f22m/bz8f3vqz89+sq97dWf+jf6Pu//3JJ1/fCNOD57N32Sv4//OTPt5+e8au++hhQ30+8Nb4n4ORWGs7Vun5xq3sKG19ermlKaxe2kDJ3kTSOff+q2lLp2h1kvz+h/OH/93ZdrPy/+hPV9/z+m+vv/bffyfNP73JJ3/lmbZpeT/Uib/3Zn28/L/4em//+W+yzz+N7YPyr8n6fy3duxfe/5T6Gn+d12mft7zn32jTz3y1z7m/0n/kvMmz3+S5xDjUev5D92l879q3eN6vf/vydTLu/6/9Z/nn97fz/gfDXoC0Id0/ttahV0mgL3mf32m/bz8v3DPlz/+pw3M/5qf+AaT/Nvm/5tb5UeN/z1J57+9VZj6x1APNv/fvP9Hnbn/N5P/DZn28/K/cGhi4CuX+f7f6P94l0fZdErnP7TucY38f9/D/f/GTL28/L+496cv3tzX5/8QJs31Nyyd/9XrHte8/gfz878pUy8v/+9849dPPNhH/9/eR12y+bfu9anLKf5s3uv8v5hpPy//H42fP7v/Csz/bnX/70k6/9aq+aXkn53/7820n5f/9478YHngCjz/uUP+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzIavw6HqDCR2i4UJiZCGIu3d4Wt0Uzp5PRMuTr7mZUQdsTlxTAazZerM6Xy9EKlenJuulQuV2dDuCbevyMMRivlam16sbR07cW2tkSn5krLtZm5Ui2EsDMuvz5sT9qaWagtlpaaxyZ1ropKn61Xa6WJ+srccth9sXxbUj6/XK0vXXexrasL1eWlU6XK9MmF5XdPTk5Ohj0X+zwSzT1Qm6vUWr1t7W3USeoOR21vprn7hrbzfbpaX66Uys3yG9vqlKuzpXJbnZvazldbrldmS7W56XJ1Pjlfsa1u23tr7t4b7xsPI6n3l9TNOhi/3n7o+EePHz7Qsb8YpfOu1BfnJrd3/5sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I3rydve9e0QwkBrqxBCOJj8EMX/pZy994Xnjp05vO/M1OOPPXNh/mi3YwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYuZ+XKro4DsBnxve+FkgpbYRcBoaI6E7Cgn4RSeU1smWb1kGtEjIoCgwjWhYEQVC7qCBoFVT+BVELl62qTS1aGERQMTqTlzvCDS90zHkeGM4Mc++ZLwzcO3M+hwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+nN2x2JW1l3ZtXtq6+0PozM/9H0IYTZb3P+/tCD0hhK9fZk6HVdpCT1P/bybnxstXTX7v7R9/eH00WXv9xXeL63aHJB1qON6ZpOnQ0Nr736juDD6bHkxCSGMXQhQLY0/O1EIIHbELIYqfH+cvZr/v/8UuhCj6P9ztyu5/LXYhRLF196e+Wv6MR/Wcr18YbPzvb/UI3sYjOuvQ25NX3qVuauW9zN//k3zzPlgNsyeOvH8euwiimZ2bOhq7BgAA4O861yL/D1uW9+9fTkJPdzn3/9aU//c29b96/r/i3vYbYzNthRDbSmOT2fHwvnb63PhODVy9/bpmvKeq5P/VJv+vNvl/tcn/q03+X23yfzKv5P+V9PjmnsUXsYsgGvk/AABUz6HjE1P14ZHs5X/Tj85yXt+Xt/U8T39wa3rgUcO4kfzw33b42MSBg8Mj+X0vDwiurP+QLp39ns/3aG4Lk03zLlqt/9D7dGH+Wmf5E/U/nL9R1Fdc1/oPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAvdueehkEwCsPod1sRtdGqaMLCT4IPNDAiACnMaEAHEwZgIAQUMJBzlnuTZ3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5/tXeV18f2mM9Foj0lR22bV/jqfZz9y3w/I+e9y4FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZ24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//8Oayzs=")
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x1, 0x0, &(0x7f0000000000))
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
chown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0xee00)
fchown(r0, 0x0, 0x0)

0s ago: executing program 3 (id=411):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:40421' (ED25519) to the list of known hosts.
syzkaller login: [   56.466902][ T5809] cgroup: Unknown subsys name 'net'
[   56.552445][ T5809] cgroup: Unknown subsys name 'cpuset'
[   56.558429][ T5809] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.476344][ T5809] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.354322][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.358901][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.360841][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.365836][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.366383][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.370833][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.372841][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.374837][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.377418][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.382439][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.506870][ T5218] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.513509][ T5218] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.517038][ T5218] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.521381][ T5218] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.524187][ T5218] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.586119][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   64.783161][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.786736][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.790643][ T5836] bridge_slave_0: entered allmulticast mode
[   64.794312][ T5836] bridge_slave_0: entered promiscuous mode
[   64.803857][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.806585][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.809937][ T5836] bridge_slave_1: entered allmulticast mode
[   64.813487][ T5836] bridge_slave_1: entered promiscuous mode
[   64.878770][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   64.893846][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.913322][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.941598][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   64.961737][ T5836] team0: Port device team_slave_0 added
[   64.976174][ T5836] team0: Port device team_slave_1 added
[   65.042253][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.045033][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.055620][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.081185][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.083865][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.093826][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.105595][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.109503][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.112630][ T5834] bridge_slave_0: entered allmulticast mode
[   65.116776][ T5834] bridge_slave_0: entered promiscuous mode
[   65.131346][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.134188][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.137038][ T5834] bridge_slave_1: entered allmulticast mode
[   65.141646][ T5834] bridge_slave_1: entered promiscuous mode
[   65.213294][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.216241][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.221091][ T5845] bridge_slave_0: entered allmulticast mode
[   65.224952][ T5845] bridge_slave_0: entered promiscuous mode
[   65.230618][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.233434][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.236420][ T5845] bridge_slave_1: entered allmulticast mode
[   65.242319][ T5845] bridge_slave_1: entered promiscuous mode
[   65.248806][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.281837][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.291524][ T5836] hsr_slave_0: entered promiscuous mode
[   65.294687][ T5836] hsr_slave_1: entered promiscuous mode
[   65.343025][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.362489][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.376173][ T5834] team0: Port device team_slave_0 added
[   65.410061][ T5834] team0: Port device team_slave_1 added
[   65.454365][ T5845] team0: Port device team_slave_0 added
[   65.475875][ T5845] team0: Port device team_slave_1 added
[   65.480478][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.482681][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.493759][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.518637][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.521303][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.532377][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.590222][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.593041][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.604133][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.612474][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.615263][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.625418][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.683903][ T5834] hsr_slave_0: entered promiscuous mode
[   65.686720][ T5834] hsr_slave_1: entered promiscuous mode
[   65.690103][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.692570][ T5834] Cannot create hsr debugfs directory
[   65.756068][ T5845] hsr_slave_0: entered promiscuous mode
[   65.758839][ T5845] hsr_slave_1: entered promiscuous mode
[   65.761072][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.763890][ T5845] Cannot create hsr debugfs directory
[   65.855184][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.875062][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.906510][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.927604][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.099236][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.112067][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.129485][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.155246][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.218726][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.223583][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.233136][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.250075][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.259095][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.293251][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   66.313064][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.316019][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.326893][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.330088][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.449048][ T5838] Bluetooth: hci0: command tx timeout
[   66.450235][ T5218] Bluetooth: hci1: command tx timeout
[   66.507194][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.515523][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.545113][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   66.562311][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   66.585390][ T3720] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.587727][ T3720] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.591230][ T3720] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.593316][ T3720] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.601016][ T5218] Bluetooth: hci2: command tx timeout
[   66.605198][ T3720] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.608137][ T3720] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.622347][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.625162][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.646761][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.765410][ T5836] veth0_vlan: entered promiscuous mode
[   66.782419][ T5836] veth1_vlan: entered promiscuous mode
[   66.819933][ T5836] veth0_macvtap: entered promiscuous mode
[   66.824323][ T5836] veth1_macvtap: entered promiscuous mode
[   66.843704][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.859735][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.865566][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.875772][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.888319][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.891028][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.950245][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.962525][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.993101][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.995692][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.028277][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.030748][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.066375][ T5845] veth0_vlan: entered promiscuous mode
[   67.071810][ T5834] veth0_vlan: entered promiscuous mode
[   67.072741][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.078756][ T5834] veth1_vlan: entered promiscuous mode
[   67.085850][ T5845] veth1_vlan: entered promiscuous mode
[   67.140975][ T5834] veth0_macvtap: entered promiscuous mode
[   67.144730][ T5845] veth0_macvtap: entered promiscuous mode
[   67.157128][ T5834] veth1_macvtap: entered promiscuous mode
[   67.163498][ T5845] veth1_macvtap: entered promiscuous mode
[   67.180408][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.194554][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.199446][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.205595][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.210187][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.212828][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.229139][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.233990][ T5902] =======================================================
[   67.233990][ T5902] WARNING: The mand mount option has been deprecated and
[   67.233990][ T5902]          and is ignored by this kernel. Remove the mand
[   67.233990][ T5902]          option from the mount to silence this warning.
[   67.233990][ T5902] =======================================================
[   67.250886][ T5902] MTD: Attempt to mount non-MTD device "/dev/loop2"
[   67.268928][ T5902] syz.2.4: attempt to access beyond end of device
[   67.268928][ T5902] loop2: rw=0, sector=0, nr_sectors = 2 limit=0
[   67.281139][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.352983][ T5845] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.362262][ T5845] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.364833][ T5845] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.367425][ T5845] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.403558][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.406782][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.492339][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.496298][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.514620][ T3720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.517063][ T3720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.541457][ T5909] loop2: detected capacity change from 0 to 65
[   67.550977][ T5909] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway
[   67.583934][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.593455][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.304028][ T5929] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.520491][ T5218] Bluetooth: hci0: command tx timeout
[   68.528069][ T5218] Bluetooth: hci1: command tx timeout
[   68.637008][  T790] usb 1-1: new low-speed USB device number 2 using dummy_hcd
[   68.678459][ T5218] Bluetooth: hci2: command tx timeout
[   68.696445][ T5942] loop2: detected capacity change from 0 to 8
[   68.704907][ T5942] SQUASHFS error: zlib decompression failed, data probably corrupt
[   68.712531][ T5942] SQUASHFS error: Failed to read block 0x9b: -5
[   68.715011][ T5942] SQUASHFS error: Unable to read metadata cache entry [99]
[   68.719256][ T5942] SQUASHFS error: Unable to read inode 0x127
[   68.818526][  T790] usb 1-1: config index 0 descriptor too short (expected 1307, got 27)
[   68.822053][  T790] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[   68.825184][  T790] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[   68.839144][  T790] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[   68.843395][  T790] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[   68.847192][  T790] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   68.867653][  T790] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[   68.882447][  T790] usb 1-1: string descriptor 0 read error: -22
[   68.885021][  T790] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[   68.889155][  T790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.909289][  T790] usb 1-1: config 0 descriptor??
[   68.925441][  T790] hub 1-1:0.0: bad descriptor, ignoring hub
[   68.937943][  T790] hub 1-1:0.0: probe with driver hub failed with error -5
[   68.968076][  T790] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input4
[   69.191798][  T790] usb 1-1: USB disconnect, device number 2
[   69.234256][ T5948] loop2: detected capacity change from 0 to 32768
[   69.267809][ T5948] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.22 (5948)
[   69.302575][ T5948] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   69.313759][ T5948] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm
[   69.316815][ T5948] BTRFS info (device loop2): using free-space-tree
[   69.444651][ T5972] trusted_key: syz.1.25 sent an empty control message without MSG_MORE.
[   69.489597][ T5836] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   70.599942][ T5838] Bluetooth: hci0: command tx timeout
[   70.601915][ T5218] Bluetooth: hci1: command tx timeout
[   70.758061][ T5218] Bluetooth: hci2: command tx timeout
[   70.880203][ T5985] loop0: detected capacity change from 0 to 8
[   71.063485][ T1358] ieee802154 phy0 wpan0: encryption failed: -22
[   71.065777][ T1358] ieee802154 phy1 wpan1: encryption failed: -22
[   72.452566][ T5987] loop2: detected capacity change from 0 to 32768
[   72.501153][ T5987] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.31 (5987)
[   72.521633][ T5987] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   72.525538][ T5987] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm
[   72.538204][ T5987] BTRFS info (device loop2): disk space caching is enabled
[   72.548406][ T5987] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   72.600101][ T6002] loop1: detected capacity change from 0 to 4096
[   72.641234][ T6014] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   72.671759][ T5987] BTRFS info (device loop2): rebuilding free space tree
[   72.685878][ T5218] Bluetooth: hci1: command tx timeout
[   72.688172][ T5838] Bluetooth: hci0: command tx timeout
[   72.694081][ T5987] BTRFS info (device loop2): disabling free space tree
[   72.696431][ T5987] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   72.702835][ T5987] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   72.736083][ T5987] BTRFS info (device loop2): Snapshot src from another FS
[   72.836945][ T5836] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   72.838216][ T5218] Bluetooth: hci2: command tx timeout
[   73.319529][ T6024] loop2: detected capacity change from 0 to 32768
[   73.359510][ T6024] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[   73.423607][ T6024] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   73.556958][ T5836] ocfs2: Unmounting device (7,2) on (node local)
[   73.714152][ T6042] Zero length message leads to an empty skb
[   73.772886][ T6042] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.777078][ T6042] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.881331][ T6042] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.894251][ T6042] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.983085][ T6042] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.986795][ T6042] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.991798][ T6042] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.995447][ T6042] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.144777][ T6046] loop2: detected capacity change from 0 to 256
[   74.157813][ T6046] exfat: Deprecated parameter 'utf8'
[   74.194534][ T6046] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[   74.453619][ T6048] loop1: detected capacity change from 0 to 32768
[   74.498743][ T6048] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[   74.543774][ T6048] (syz.1.51,6048,1):ocfs2_dio_end_io:2398 ERROR: Direct IO failed, bytes = -14
[   74.586868][ T5834] ocfs2: Unmounting device (7,1) on (node local)
[   74.807000][ T6056] loop1: detected capacity change from 0 to 2048
[   74.881695][ T5840]  loop1: AHDI p1 p2
[   74.883333][ T5840] loop1: p1 start 4278648832 is beyond EOD, truncated
[   74.891554][ T6056]  loop1: AHDI p1 p2
[   74.893459][ T6056] loop1: p1 start 4278648832 is beyond EOD, truncated
[   75.433912][ T6062] loop2: detected capacity change from 0 to 32768
[   75.721994][ T6062] ERROR: (device loop2): dtReadFirst: DT_GETPAGE: dtree page corrupt
[   75.721994][ T6062] 
[   75.733985][ T6062] ERROR: (device loop2): remounting filesystem as read-only
[   75.938950][ T6069] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.58'.
[   76.080185][ T6071] loop2: detected capacity change from 0 to 1024
[   76.288457][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.61'.
[   78.094744][ T6095] libceph: resolve '4' (ret=-3): failed
[   78.223595][ T6099] loop1: detected capacity change from 0 to 4096
[   78.237202][ T6099] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[   78.273239][ T6099] ntfs3(loop1): ino=3, ntfs_set_state failed, -22.
[   78.276938][ T6099] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[   78.428438][ T6101] loop2: detected capacity change from 0 to 4096
[   78.432565][ T6101] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[   78.466494][ T3720] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22.
[   78.470197][ T5834] ntfs3(loop1): ino=3, ntfs_set_state failed, -22.
[   78.472865][ T5834] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   78.475643][ T5834] ntfs3(loop1): ino=3, ntfs_set_state failed, -22.
[   78.481235][ T6101] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   78.496952][ T6101] ntfs3(loop2): ino=19, mi_enum_attr
[   78.514647][   T28] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22.
[   78.605826][ T6104] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0
[   78.720263][ T6112] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   80.036059][ T6141] netlink: 'syz.1.89': attribute type 4 has an invalid length.
[   80.123535][ T6148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.91'.
[   80.481340][ T6169] warning: `syz.2.102' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   80.808104][ T5907] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   80.874589][ T6180] loop2: detected capacity change from 0 to 512
[   80.958269][ T6180] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.107: bad orphan inode 15
[   80.970974][ T5907] usb 2-1: config 0 has an invalid interface number: 176 but max is 2
[   80.973493][ T5907] usb 2-1: config 0 has an invalid interface number: 255 but max is 2
[   80.975839][ T5907] usb 2-1: config 0 has no interface number 0
[   80.977877][ T6180] ext4_test_bit(bit=14, block=5) = 0
[   80.981124][ T6180] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.983628][ T5907] usb 2-1: config 0 has no interface number 1
[   80.987342][ T5907] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[   80.991208][ T5907] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[   81.005635][ T5907] usb 2-1: config 0 interface 255 has no altsetting 0
[   81.009024][ T5907] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[   81.011617][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.028376][ T5907] usb 2-1: config 0 descriptor??
[   81.040062][ T6180] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters
[   81.059315][ T6180] EXT4-fs error (device loop2): ext4_free_inode:354: comm syz.2.107: bit already cleared for inode 13
[   81.102125][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.241724][ T5907] usb 2-1: Could not set interface, error -71
[   81.258491][ T5907] usb 2-1: selecting invalid altsetting 0
[   81.260167][ T5907] usb 2-1: Could not set interface, error -22
[   81.268948][ T5907] usb 2-1: USB disconnect, device number 2
[   81.578437][ T6193] loop2: detected capacity change from 0 to 4096
[   81.637417][ T6193] ntfs3(loop2): ino=1a, mi_enum_attr
[   81.640902][ T6193] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   82.153867][ T6211] netlink: 40 bytes leftover after parsing attributes in process `syz.1.119'.
[   82.242220][ T6213] netlink: 52 bytes leftover after parsing attributes in process `syz.1.120'.
[   83.057129][ T6225] loop2: detected capacity change from 0 to 32768
[   83.125829][ T6225] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   83.168150][ T6225] XFS (loop2): Ending clean mount
[   83.178375][ T6225] XFS (loop2): Quotacheck needed: Please wait.
[   83.214959][ T6225] XFS (loop2): Quotacheck: Done.
[   83.258912][ T5836] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   83.486989][ T6240] netlink: 'syz.2.129': attribute type 1 has an invalid length.
[   83.491490][ T6240] netlink: 72 bytes leftover after parsing attributes in process `syz.2.129'.
[   83.887810][    T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   83.898540][ T5295] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   84.049164][ T5295] usb 2-1: Using ep0 maxpacket: 16
[   84.062267][ T5295] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   84.065115][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   84.066538][ T5295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   84.066574][ T5295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   84.071283][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   84.086364][ T5295] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   84.088208][    T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   84.091642][ T5295] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   84.097877][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   84.104971][ T5295] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   84.109265][    T9] usb 3-1: SerialNumber: syz
[   84.110008][ T5295] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   84.115455][ T5295] usb 2-1: Manufacturer: syz
[   84.129646][ T5295] usb 2-1: config 0 descriptor??
[   84.343311][    T9] usb 3-1: 0:2 : does not exist
[   84.345942][    T9] usb 3-1: unit 5: unexpected type 0x09
[   84.378697][    T9] usb 3-1: USB disconnect, device number 2
[   84.405943][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   84.412782][ T5295] rc_core: IR keymap rc-hauppauge not found
[   84.418257][ T5295] Registered IR keymap rc-empty
[   84.420110][ T5295] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   84.441281][ T5295] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   84.460228][ T5295] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[   84.469049][ T5295] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5
[   84.480198][ T5295] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   84.497963][ T5295] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   84.520783][ T5295] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   84.540200][ T5295] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   84.563332][ T5295] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   84.577842][ T5295] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   84.604623][ T5295] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   84.627824][ T5295] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   84.658842][ T5295] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   84.678075][ T5295] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   84.703015][ T5295] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[   84.706312][ T5295] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[   85.086145][ T5295] usb 2-1: USB disconnect, device number 3
[   85.253419][ T6264] loop2: detected capacity change from 0 to 256
[   85.256225][ T6264] exfat: Unknown parameter 'mocharset'
[   85.684321][ T6274] loop1: detected capacity change from 0 to 256
[   85.846457][ T6282] loop2: detected capacity change from 0 to 512
[   85.880157][ T6282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.883996][ T6282] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   85.904102][   T33] audit: type=1800 audit(1752295148.487:2): pid=6282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.147" name="file2" dev="loop2" ino=16 res=0 errno=0
[   85.935007][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.037932][    T9] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   86.190654][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   86.194054][    T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   86.209527][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   86.212680][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   86.215369][    T9] usb 2-1: SerialNumber: syz
[   86.238659][    T9] cdc_acm 2-1:1.0: Control and data interfaces are not separated!
[   86.244043][    T9] cdc_acm 2-1:1.0: This needs exactly 3 endpoints
[   86.246247][    T9] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22
[   86.247702][ T5295] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   86.360511][   T24] cfg80211: failed to load regulatory.db
[   86.407784][ T5295] usb 3-1: Using ep0 maxpacket: 32
[   86.413837][ T5295] usb 3-1: config 0 has an invalid interface number: 35 but max is 0
[   86.417090][ T5295] usb 3-1: config 0 has no interface number 0
[   86.423888][ T5295] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[   86.428041][ T5295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.431097][ T5295] usb 3-1: Product: syz
[   86.432709][ T5295] usb 3-1: Manufacturer: syz
[   86.434489][ T5295] usb 3-1: SerialNumber: syz
[   86.440391][ T5295] usb 3-1: config 0 descriptor??
[   86.693467][ T5295] radio-si470x 3-1:0.35: this is not a si470x device.
[   86.719314][ T5295] radio-raremono 3-1:0.35: this is not Thanko's Raremono.
[   86.726555][ T5295] usb 3-1: USB disconnect, device number 3
[   87.840804][ T6296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.152'.
[   87.873310][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   87.878093][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   87.881574][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   87.890577][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   87.894121][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   87.937333][ T6300] netlink: 72 bytes leftover after parsing attributes in process `syz.2.153'.
[   88.089921][ T6304] loop2: detected capacity change from 0 to 512
[   88.112236][ T6304] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.155: bad orphan inode 13
[   88.122778][ T6304] ext4_test_bit(bit=12, block=4) = 1
[   88.126927][ T6304] is_bad_inode(inode)=0
[   88.141088][ T6304] NEXT_ORPHAN(inode)=0
[   88.148134][ T6304] max_ino=32
[   88.151899][ T6304] i_nlink=1
[   88.171394][ T5697] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.172878][ T6304] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.196504][ T6304] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.155: Unrecognised inode hash code 20
[   88.216238][ T6304] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.155: Corrupt directory, running e2fsck is recommended
[   88.247473][ T5697] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.262585][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.326225][ T5697] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.341334][ T6297] chnl_net:caif_netlink_parms(): no params data found
[   88.423591][ T5697] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.532696][ T6297] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.541748][ T6297] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.545828][ T6297] bridge_slave_0: entered allmulticast mode
[   88.551266][ T6297] bridge_slave_0: entered promiscuous mode
[   88.565345][ T6297] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.570895][ T6297] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.573764][ T6297] bridge_slave_1: entered allmulticast mode
[   88.587838][ T6297] bridge_slave_1: entered promiscuous mode
[   88.685172][ T6297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.703848][ T6323] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   88.715222][ T6297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.760926][ T6297] team0: Port device team_slave_0 added
[   88.765351][ T6297] team0: Port device team_slave_1 added
[   88.773945][ T5697] bridge_slave_1: left allmulticast mode
[   88.776302][ T5697] bridge_slave_1: left promiscuous mode
[   88.792555][ T5697] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.810904][ T5697] bridge_slave_0: left allmulticast mode
[   88.813198][ T5697] bridge_slave_0: left promiscuous mode
[   88.815590][ T5697] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.899763][ T5295] usb 2-1: USB disconnect, device number 4
[   88.986813][ T6328] netlink: 'syz.2.164': attribute type 1 has an invalid length.
[   88.991716][ T6328] netlink: 'syz.2.164': attribute type 4 has an invalid length.
[   88.994715][ T6328] netlink: 188 bytes leftover after parsing attributes in process `syz.2.164'.
[   88.998810][ T6328] NCSI netlink: No device for ifindex 458760
[   89.338598][ T5295] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   89.366017][ T5697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   89.374548][ T5697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   89.379823][ T5697] bond0 (unregistering): Released all slaves
[   89.432760][ T6297] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.436463][ T6297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.447484][ T6297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.462099][ T6297] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.464740][ T6297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.469490][   T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   89.477396][ T6297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.508019][ T5295] usb 2-1: Using ep0 maxpacket: 8
[   89.518762][ T5295] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[   89.521547][ T5295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.524119][ T5295] usb 2-1: Product: syz
[   89.525701][ T5295] usb 2-1: Manufacturer: syz
[   89.527256][ T5295] usb 2-1: SerialNumber: syz
[   89.533004][ T5295] usb 2-1: config 0 descriptor??
[   89.542594][ T5295] gspca_main: sonixj-2.14.0 probing 0c45:613a
[   89.587040][ T6297] hsr_slave_0: entered promiscuous mode
[   89.598987][ T6297] hsr_slave_1: entered promiscuous mode
[   89.601768][ T6297] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   89.604687][ T6297] Cannot create hsr debugfs directory
[   89.637715][   T24] usb 3-1: Using ep0 maxpacket: 16
[   89.642586][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   89.654889][   T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[   89.664600][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.677013][   T24] usb 3-1: config 0 descriptor??
[   89.701443][   T24] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6
[   89.839910][ T5697] hsr_slave_0: left promiscuous mode
[   89.846669][ T5697] hsr_slave_1: left promiscuous mode
[   89.856942][ T5697] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.860394][ T5697] batman_adv: batadv0: Removing interface: batadv_slave_0
[   89.877190][ T5697] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.887813][ T5697] batman_adv: batadv0: Removing interface: batadv_slave_1
[   89.902022][ T5262] bcm5974 3-1:0.0: could not read from device
[   89.913876][ T5262] bcm5974 3-1:0.0: could not read from device
[   89.919522][ T5262] bcm5974 3-1:0.0: could not read from device
[   89.932910][   T24] bcm5974 3-1:0.0: could not read from device
[   89.946628][ T5697] veth1_macvtap: left promiscuous mode
[   89.952898][ T5697] veth0_macvtap: left promiscuous mode
[   89.956115][   T24] input: failed to attach handler mousedev to device input6, error: -5
[   89.959060][ T5697] veth1_vlan: left promiscuous mode
[   89.959925][ T5218] Bluetooth: hci2: command tx timeout
[   89.961896][ T5697] veth0_vlan: left promiscuous mode
[   89.980973][ T5262] bcm5974 3-1:0.0: could not read from device
[   89.995401][   T24] usb 3-1: USB disconnect, device number 4
[   89.998563][ T6186] bcm5974 3-1:0.0: could not read from device
[   90.002697][ T5262] bcm5974 3-1:0.0: could not read from device
[   90.471708][ T5697] team0 (unregistering): Port device team_slave_1 removed
[   90.563049][ T5697] team0 (unregistering): Port device team_slave_0 removed
[   90.686208][ T6353] loop2: detected capacity change from 0 to 2048
[   90.722622][ T6353] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   90.783201][ T5295] gspca_sonixj: reg_w1 err -71
[   90.858098][ T5295] sonixj 2-1:0.0: probe with driver sonixj failed with error -71
[   90.877052][ T5295] usb 2-1: USB disconnect, device number 5
[   90.984324][ T6355] loop2: detected capacity change from 0 to 4096
[   91.698400][ T6297] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   91.736112][ T6297] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   91.753295][ T6297] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   91.789169][ T6297] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   92.039584][ T5218] Bluetooth: hci2: command tx timeout
[   92.774136][ T6297] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.795328][ T6297] 8021q: adding VLAN 0 to HW filter on device team0
[   92.850929][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.853497][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.869641][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.872174][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.931067][ T6297] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   92.934710][ T6297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   93.003265][ T6421] loop1: detected capacity change from 0 to 512
[   93.006916][ T6421] EXT4-fs: Ignoring removed i_version option
[   93.039904][ T6421] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   93.085394][ T6421] EXT4-fs (loop1): orphan cleanup on readonly fs
[   93.109242][ T6421] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.191: bg 0: block 131: padding at end of block bitmap is not set
[   93.117752][ T6421] EXT4-fs (loop1): Remounting filesystem read-only
[   93.120914][ T6421] EXT4-fs (loop1): 1 truncate cleaned up
[   93.125213][ T6421] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   93.236989][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.268371][ T6297] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.470615][ T6297] veth0_vlan: entered promiscuous mode
[   93.484229][ T6297] veth1_vlan: entered promiscuous mode
[   93.548048][ T6297] veth0_macvtap: entered promiscuous mode
[   93.555801][ T6297] veth1_macvtap: entered promiscuous mode
[   93.619080][ T6297] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.629983][ T6297] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.644244][ T6297] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.647435][ T6297] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.663636][ T6297] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.666873][ T6297] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.005372][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.008398][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.076294][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.082939][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.119459][ T5218] Bluetooth: hci2: command tx timeout
[   94.209515][ T6453] loop2: detected capacity change from 0 to 128
[   94.260821][ T6453] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   94.275440][ T6453] ext4 filesystem being mounted at /101/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   94.419489][ T5836] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   94.653406][ T6461] loop3: detected capacity change from 0 to 32768
[   94.671764][ T6461] bcachefs (/dev/loop3): error validating superblock: Filesystem has incompatible feature bit 96, highest supported small_image (22)
[   94.675960][ T6461] bcachefs: bch2_fs_get_tree() error: invalid_sb_features
[   95.216770][ T6489] loop2: detected capacity change from 0 to 1024
[   95.225183][ T6489] EXT4-fs: Ignoring removed orlov option
[   95.251430][ T6489] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   95.271938][ T6489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.315189][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.537930][ T5879] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   95.713464][ T5879] usb 4-1: Using ep0 maxpacket: 32
[   95.722560][ T5879] usb 4-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d
[   95.725306][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.733201][ T5879] usb 4-1: Product: syz
[   95.735103][ T5879] usb 4-1: Manufacturer: syz
[   95.736489][ T5879] usb 4-1: SerialNumber: syz
[   95.740621][ T5879] usb 4-1: config 0 descriptor??
[   95.781726][   T33] audit: type=1326 audit(1752295158.367:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6516 comm="syz.1.214" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc9b8e929 code=0x7ffc0000
[   95.791848][   T33] audit: type=1326 audit(1752295158.367:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6516 comm="syz.1.214" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc9b8e929 code=0x7ffc0000
[   95.808344][   T33] audit: type=1326 audit(1752295158.367:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6516 comm="syz.1.214" exe="/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fddc9b8e929 code=0x7ffc0000
[   95.827846][   T33] audit: type=1326 audit(1752295158.367:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6516 comm="syz.1.214" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc9b8e929 code=0x7ffc0000
[   95.836082][   T33] audit: type=1326 audit(1752295158.367:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6516 comm="syz.1.214" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc9b8e929 code=0x7ffc0000
[   95.960113][ T5879] mdc800 4-1:0.0: probe fails -> wrong Number of Configuration
[   95.972270][ T5879] usb 4-1: USB disconnect, device number 2
[   96.207763][ T5218] Bluetooth: hci2: command tx timeout
[   96.641679][ T6533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.219'.
[   96.645757][ T6533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.219'.
[   96.888570][ T5295] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   97.047891][ T5295] usb 4-1: Using ep0 maxpacket: 32
[   97.052607][ T5295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   97.056423][ T5295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   97.066273][ T5295] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[   97.069786][ T5295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.096275][ T5295] usb 4-1: config 0 descriptor??
[   97.229165][ T6550] process 'syz.2.225' launched '/dev/fd/12' with NULL argv: empty string added
[   97.248356][ T6551] Cannot find set identified by id 2 to match
[   97.654090][ T5295] magicmouse 0003:05AC:0265.0001: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.3-1/input0
[   97.672720][ T5295] magicmouse 0003:05AC:0265.0001: magicmouse input not registered
[   97.717163][ T5295] magicmouse 0003:05AC:0265.0001: probe with driver magicmouse failed with error -12
[   97.813910][ T5295] usb 4-1: USB disconnect, device number 3
[   98.052103][ T6567] loop1: detected capacity change from 0 to 4096
[   98.076569][ T6567] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[   98.110395][ T6567] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   99.441864][ T6588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.242'.
[   99.625831][ T6594] __vm_enough_memory: pid: 6594, comm: syz.2.245, bytes: 21199702646784 not enough memory for the allocation
[   99.681210][ T6592] loop3: detected capacity change from 0 to 4096
[   99.684545][ T6592] nilfs2: Bad value for 'cp'
[   99.716618][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   99.723111][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   99.726456][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   99.732751][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   99.735829][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   99.978641][ T6609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.249'.
[  100.106185][ T6597] chnl_net:caif_netlink_parms(): no params data found
[  100.213176][ T6597] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.216034][ T6597] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.220171][ T6597] bridge_slave_0: entered allmulticast mode
[  100.224365][ T6597] bridge_slave_0: entered promiscuous mode
[  100.242421][ T6597] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.245030][ T6597] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.251366][ T6597] bridge_slave_1: entered allmulticast mode
[  100.259085][ T6597] bridge_slave_1: entered promiscuous mode
[  100.311485][ T6597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.318634][ T6597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.359976][ T6597] team0: Port device team_slave_0 added
[  100.364358][ T6597] team0: Port device team_slave_1 added
[  100.385622][ T6597] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.388260][ T6597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.395914][ T6597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.400954][ T6597] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.402992][ T6597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.411623][ T6597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.448011][ T6597] hsr_slave_0: entered promiscuous mode
[  100.450528][ T6597] hsr_slave_1: entered promiscuous mode
[  100.452941][ T6597] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  100.455808][ T6597] Cannot create hsr debugfs directory
[  100.590313][ T6597] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.601140][ T5295] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  100.660773][ T6597] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.719704][ T6627] loop3: detected capacity change from 0 to 64
[  100.747661][ T5295] usb 3-1: Using ep0 maxpacket: 16
[  100.763402][ T5295] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  100.766909][ T5295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.774393][ T5295] usb 3-1: Product: syz
[  100.776138][ T5295] usb 3-1: Manufacturer: syz
[  100.779021][ T5295] usb 3-1: SerialNumber: syz
[  100.793584][ T5295] r8152-cfgselector 3-1: Unknown version 0x0000
[  100.796050][ T5295] r8152-cfgselector 3-1: config 0 descriptor??
[  100.812545][ T6597] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.907113][ T6597] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.077945][ T6597] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  101.080017][ T6634] loop3: detected capacity change from 0 to 32768
[  101.084919][ T6597] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  101.092607][ T6634] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.259 (6634)
[  101.093323][ T6597] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  101.104032][ T6597] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  101.114507][ T6634] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  101.120746][ T6634] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  101.124300][ T6634] BTRFS info (device loop3): using free-space-tree
[  101.197855][ T6597] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.221053][ T6597] 8021q: adding VLAN 0 to HW filter on device team0
[  101.229669][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.232437][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.242129][   T33] audit: type=1800 audit(1752295163.827:8): pid=6634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.259" name="file1" dev="loop3" ino=260 res=0 errno=0
[  101.251689][   T47] r8152-cfgselector 3-1: USB disconnect, device number 5
[  101.261654][ T3720] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.263884][ T3720] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.375596][ T6297] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  101.422235][ T6597] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.500561][ T6597] veth0_vlan: entered promiscuous mode
[  101.506326][ T6597] veth1_vlan: entered promiscuous mode
[  101.547209][ T6597] veth0_macvtap: entered promiscuous mode
[  101.562502][ T6597] veth1_macvtap: entered promiscuous mode
[  101.584618][ T6664] netlink: 'syz.3.260': attribute type 83 has an invalid length.
[  101.588060][ T6597] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.599842][ T6597] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.603844][ T6597] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.606463][ T6597] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.612053][ T6597] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.615506][ T6597] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.685384][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.689839][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.729152][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.732809][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.919453][ T6670] loop2: detected capacity change from 0 to 512
[  101.927997][ T6670] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  101.934881][ T6670] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  101.937280][ T6670] System zones: 1-12
[  101.942060][ T6670] EXT4-fs (loop2): 1 truncate cleaned up
[  101.950374][ T6670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.984315][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.995566][ T6668] loop3: detected capacity change from 0 to 32768
[  102.022684][ T6668] JBD2: Ignoring recovery information on journal
[  102.033770][ T6677] bond0: option all_slaves_active: invalid value (2)
[  102.083029][ T6668] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  102.168773][ T6297] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1056 has bad signature 
[  102.180388][ T6297] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  102.184065][ T6297] OCFS2: File system is now read-only.
[  102.186130][ T6297] (syz-executor,6297,0):_ocfs2_free_suballoc_bits:2579 ERROR: status = -30
[  102.204249][ T6297] (syz-executor,6297,0):_ocfs2_free_clusters:2676 ERROR: status = -30
[  102.207421][ T6297] (syz-executor,6297,0):ocfs2_sync_local_to_main:996 ERROR: status = -30
[  102.210943][ T6297] (syz-executor,6297,0):ocfs2_sync_local_to_main:1009 ERROR: status = -30
[  102.214549][ T6297] (syz-executor,6297,0):ocfs2_shutdown_local_alloc:450 ERROR: status = -30
[  102.224104][ T6297] ocfs2: Unmounting device (7,3) on (node local)
[  102.640663][ T6712] loop3: detected capacity change from 0 to 512
[  102.647160][ T6712] EXT4-fs: Ignoring removed orlov option
[  102.656235][ T6712] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.277: Attempting to read directory block (0) that is past i_size (256)
[  102.663420][ T6712] EXT4-fs (loop3): Remounting filesystem read-only
[  102.665552][ T6712] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  102.669604][ T6712] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.696547][ T6297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.858921][ T5879] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  103.017656][ T5879] usb 3-1: Using ep0 maxpacket: 8
[  103.021625][ T5879] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  103.024161][ T5879] usb 3-1: config 179 has no interface number 0
[  103.026136][ T5879] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  103.031708][ T5879] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  103.035148][ T5879] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  103.038536][ T5879] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  103.041493][ T5879] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  103.045814][ T5879] usb 3-1: config 179 interface 65 has no altsetting 0
[  103.049629][ T5879] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  103.054865][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.075593][ T5879] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input7
[  103.273341][   T47] usb 3-1: USB disconnect, device number 6
[  103.866937][ T5865] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.543115][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  104.547329][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  104.551425][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  104.555276][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  104.557160][ T6743] loop2: detected capacity change from 0 to 32768
[  104.563553][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  104.650930][ T6743] JFS: charset not found
[  104.823333][ T6747] loop3: detected capacity change from 0 to 32768
[  104.827449][ T6747] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.289 (6747)
[  104.838857][ T6747] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  104.842771][ T6747] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm
[  104.846670][ T6747] BTRFS info (device loop3): using free-space-tree
[  104.961156][ T6748] chnl_net:caif_netlink_parms(): no params data found
[  105.123736][ T6297] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  105.358584][ T6748] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.362867][ T6748] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.365550][ T6748] bridge_slave_0: entered allmulticast mode
[  105.383003][ T6748] bridge_slave_0: entered promiscuous mode
[  105.403365][ T6748] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.415473][ T6748] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.428946][ T6748] bridge_slave_1: entered allmulticast mode
[  105.434642][ T6748] bridge_slave_1: entered promiscuous mode
[  105.672906][ T5865] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.693444][ T6748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  105.708266][ T6748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  105.833323][ T5865] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.855934][ T6748] team0: Port device team_slave_0 added
[  105.863157][ T6748] team0: Port device team_slave_1 added
[  106.388927][ T5865] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.423407][ T6748] batman_adv: batadv0: Adding interface: batadv_slave_0
[  106.431683][ T6748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.454306][ T6748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  106.463789][ T6748] batman_adv: batadv0: Adding interface: batadv_slave_1
[  106.471642][ T6748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.490652][ T6748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  106.598343][ T5838] Bluetooth: hci0: command tx timeout
[  106.624072][ T6748] hsr_slave_0: entered promiscuous mode
[  106.633701][ T6748] hsr_slave_1: entered promiscuous mode
[  106.637194][ T6748] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  106.648210][ T6748] Cannot create hsr debugfs directory
[  106.892584][ T5865] bridge_slave_1: left allmulticast mode
[  106.895036][ T5865] bridge_slave_1: left promiscuous mode
[  106.897635][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.907437][ T6823] netlink: 'syz.2.303': attribute type 21 has an invalid length.
[  106.921803][ T5865] bridge_slave_0: left allmulticast mode
[  106.924013][ T5865] bridge_slave_0: left promiscuous mode
[  106.926443][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.384448][ T5865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  107.390658][ T5865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  107.395283][ T5865] bond0 (unregistering): Released all slaves
[  107.422520][ T6823] netlink: 132 bytes leftover after parsing attributes in process `syz.2.303'.
[  107.426111][ T6823] netlink: 'syz.2.303': attribute type 1 has an invalid length.
[  107.533090][ T6832] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (16777216)
[  107.734984][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.309'.
[  107.980103][ T6838] loop2: detected capacity change from 0 to 32768
[  107.983449][ T5865] hsr_slave_0: left promiscuous mode
[  108.004800][ T6850] loop3: detected capacity change from 0 to 512
[  108.009844][ T5865] hsr_slave_1: left promiscuous mode
[  108.017045][ T5865] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  108.032822][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_0
[  108.038525][ T5865] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  108.044191][ T6838] JBD2: Ignoring recovery information on journal
[  108.059619][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_1
[  108.124191][ T6838] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  108.125288][ T5865] veth1_macvtap: left promiscuous mode
[  108.131326][ T5865] veth0_macvtap: left promiscuous mode
[  108.133184][ T5865] veth1_vlan: left promiscuous mode
[  108.134889][ T5865] veth0_vlan: left promiscuous mode
[  108.150127][ T6850] EXT4-fs (loop3): 1 orphan inode deleted
[  108.154450][ T6850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.161535][   T26] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  108.165621][   T26] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u9:0: Failed to release dquot type 1
[  108.171046][ T6850] ext4 filesystem being mounted at /syzcgroup/cpu/syz3/cgroup.procs supports timestamps until 2038-01-19 (0x7fffffff)
[  108.189750][   T26] EXT4-fs (loop3): Remounting filesystem read-only
[  108.211236][ T6850] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.297927][ T5836] ocfs2: Unmounting device (7,2) on (node local)
[  108.334037][ T6861] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  108.348560][ T6861] CIFS mount error: No usable UNC path provided in device string!
[  108.348560][ T6861] 
[  108.352515][ T6861] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  108.694118][ T5838] Bluetooth: hci0: command tx timeout
[  108.976773][ T5865] team0 (unregistering): Port device team_slave_1 removed
[  109.022441][ T5865] team0 (unregistering): Port device team_slave_0 removed
[  109.178874][ T5879] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  109.338524][ T5879] usb 4-1: Using ep0 maxpacket: 16
[  109.350596][ T5879] usb 4-1: config 0 interface 0 has no altsetting 0
[  109.359258][ T5879] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[  109.362866][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.375140][ T5879] usb 4-1: config 0 descriptor??
[  109.766274][ T6748] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  109.806378][ T6748] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  109.842019][ T6748] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  109.868105][ T6748] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  109.883291][ T5879] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0002/input/input8
[  109.994876][ T5879] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0002/input/input9
[  110.084803][ T5879] kye 0003:0458:5013.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0
[  110.091208][ T6748] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.119356][   T47] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  110.123563][ T6748] 8021q: adding VLAN 0 to HW filter on device team0
[  110.130024][ T5879] usb 4-1: USB disconnect, device number 4
[  110.145420][ T3720] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.147840][ T3720] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.170177][ T3720] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.172985][ T3720] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.281304][   T47] usb 3-1: Using ep0 maxpacket: 8
[  110.285245][   T47] usb 3-1: config 0 has an invalid interface number: 148 but max is 0
[  110.291804][   T47] usb 3-1: config 0 has no interface number 0
[  110.301468][   T47] usb 3-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36
[  110.308884][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.311438][   T47] usb 3-1: Product: syz
[  110.312957][   T47] usb 3-1: Manufacturer: syz
[  110.319965][   T47] usb 3-1: SerialNumber: syz
[  110.324255][   T47] usb 3-1: config 0 descriptor??
[  110.335021][   T47] kobil_sct 3-1:0.148: required endpoints missing
[  110.432406][ T6748] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.469396][ T6748] veth0_vlan: entered promiscuous mode
[  110.477048][ T6748] veth1_vlan: entered promiscuous mode
[  110.504016][ T6748] veth0_macvtap: entered promiscuous mode
[  110.510210][ T6748] veth1_macvtap: entered promiscuous mode
[  110.528604][ T6748] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.538274][   T47] usb 3-1: USB disconnect, device number 7
[  110.555353][ T6748] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.581558][ T6748] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.585679][ T6748] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.589487][ T6748] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.593968][ T6748] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.692162][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.695163][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.732530][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.740925][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.757945][ T5838] Bluetooth: hci0: command tx timeout
[  110.785016][ T6927] loop3: detected capacity change from 0 to 2048
[  110.792945][ T6927] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  111.193728][ T6934] loop3: detected capacity change from 0 to 32768
[  111.208051][ T6934] bcachefs (/dev/loop3): error validating superblock: Invalid superblock: optional field extends past end of superblock (type 1497488896)
[  111.212883][ T6934] bcachefs: bch2_fs_get_tree() error: invalid_sb_field_size
[  111.339213][ T6936] loop2: detected capacity change from 0 to 32768
[  111.356491][ T6936] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  111.411841][   T33] audit: type=1804 audit(1752295179.994:9): pid=6936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.331" name="/newroot/158/file1/bus" dev="loop2" ino=17058 res=1 errno=0
[  111.452360][ T5836] ocfs2: Unmounting device (7,2) on (node local)
[  111.531052][ T6940] loop3: detected capacity change from 0 to 32768
[  111.534697][ T6940] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.333 (6940)
[  111.553199][ T6940] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  111.559524][ T6940] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm
[  111.562170][ T6940] BTRFS info (device loop3): using free-space-tree
[  111.684340][ T6297] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  112.048613][   T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  112.184366][ T6970] loop2: detected capacity change from 0 to 32768
[  112.202406][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.206612][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  112.232682][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  112.244288][ T5697] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.247907][   T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  112.252114][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.274555][   T10] usb 4-1: config 0 descriptor??
[  112.309689][ T6970] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  112.309703][ T6970]   allowing incompatible features above 0.0: (unknown version)
[  112.309708][ T6970]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  112.325450][ T6970] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  112.328491][ T6970] bcachefs (loop2): initializing new filesystem
[  112.336159][ T6970] bcachefs (loop2): going read-write
[  112.348679][ T6970] bcachefs (loop2): marking superblocks
[  112.372411][ T6970] bcachefs (loop2): initializing freespace
[  112.383769][ T6970] bcachefs (loop2): done initializing freespace
[  112.390894][ T6970] bcachefs (loop2): reading snapshots table
[  112.393035][ T6970] bcachefs (loop2): reading snapshots done
[  112.423224][ T6970] bcachefs (loop2): done starting filesystem
[  112.573990][ T5836] bcachefs (loop2): shutting down
[  112.576264][ T5836] bcachefs (loop2): going read-only
[  112.581416][ T6970] syz.2.338 (6970) used greatest stack depth: 16632 bytes left
[  112.585085][ T5836] bcachefs (loop2): finished waiting for writes to stop
[  112.599467][ T5836] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3
[  112.652520][ T5836] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  112.660993][ T5836] bcachefs (loop2): clean shutdown complete, journal seq 4
[  112.665083][ T5836] bcachefs (loop2): marking filesystem clean
[  112.675096][ T5218] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  112.694715][ T5218] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  112.698522][ T5218] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  112.702902][   T10] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  112.704960][ T5218] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  112.712945][ T5218] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  112.716662][ T5836] bcachefs (loop2): shutdown complete
[  112.926439][ T6985] chnl_net:caif_netlink_parms(): no params data found
[  113.009100][ T6985] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.012009][ T6985] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.014584][ T6985] bridge_slave_0: entered allmulticast mode
[  113.017784][ T6985] bridge_slave_0: entered promiscuous mode
[  113.021191][ T6985] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.023349][ T6985] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.025788][ T6985] bridge_slave_1: entered allmulticast mode
[  113.028770][ T6985] bridge_slave_1: entered promiscuous mode
[  113.051022][ T6985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  113.055778][ T6985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  113.084855][ T6985] team0: Port device team_slave_0 added
[  113.089253][ T6985] team0: Port device team_slave_1 added
[  113.115166][ T6985] batman_adv: batadv0: Adding interface: batadv_slave_0
[  113.118360][ T6985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.132246][ T6985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  113.138215][ T6985] batman_adv: batadv0: Adding interface: batadv_slave_1
[  113.140464][ T6985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.150714][ T6985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  113.197844][ T6985] hsr_slave_0: entered promiscuous mode
[  113.200941][ T6985] hsr_slave_1: entered promiscuous mode
[  113.203711][ T6985] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  113.206621][ T6985] Cannot create hsr debugfs directory
[  113.312579][    C0] plantronics 0003:047F:FFFF.0003: hid_field_extract() called with n (132) > 32! (syz.3.336)
[  113.518849][   T10] usb 4-1: USB disconnect, device number 5
[  113.648381][ T5697] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.712873][ T5697] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.771545][ T5697] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.948180][ T5697] bridge_slave_1: left allmulticast mode
[  113.950758][ T5697] bridge_slave_1: left promiscuous mode
[  113.952632][ T5697] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.970039][ T5697] bridge_slave_0: left allmulticast mode
[  113.971780][ T5697] bridge_slave_0: left promiscuous mode
[  113.973625][ T5697] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.028571][ T6995] loop2: detected capacity change from 0 to 256
[  114.036243][ T6995] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  114.412848][ T5697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  114.423115][ T5697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  114.428303][ T5697] bond0 (unregistering): Released all slaves
[  114.524620][ T7002] loop2: detected capacity change from 0 to 32768
[  114.549036][ T7002] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  114.561474][ T7002] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  114.592146][ T7009] Illegal XDP return value 4294967294 on prog  (id 36) dev N/A, expect packet loss!
[  114.611936][ T7002] XFS (loop2): Ending clean mount
[  114.631342][ T7002] XFS (loop2): Quotacheck needed: Please wait.
[  114.673541][ T7002] XFS (loop2): Quotacheck: Done.
[  114.712799][ T7015] netlink: 'syz.3.344': attribute type 21 has an invalid length.
[  114.715861][ T7015] netlink: 164 bytes leftover after parsing attributes in process `syz.3.344'.
[  114.758892][ T5838] Bluetooth: hci0: command tx timeout
[  114.763480][ T5836] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  114.936158][ T5697] hsr_slave_0: left promiscuous mode
[  114.961691][ T5697] hsr_slave_1: left promiscuous mode
[  114.964493][ T5697] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.967479][ T5697] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.982917][ T5697] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.985989][ T5697] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.032580][ T5697] veth1_macvtap: left promiscuous mode
[  115.034689][ T5697] veth0_macvtap: left promiscuous mode
[  115.043746][ T5697] veth1_vlan: left promiscuous mode
[  115.058023][ T5697] veth0_vlan: left promiscuous mode
[  115.146358][ T7027] loop2: detected capacity change from 0 to 512
[  115.159705][ T7027] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  115.191442][ T7027] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  115.208084][ T7027] EXT4-fs (loop2): 1 truncate cleaned up
[  115.215257][ T7027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.341027][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.411903][ T7028] loop3: detected capacity change from 0 to 32768
[  115.839797][ T5697] team0 (unregistering): Port device team_slave_1 removed
[  115.893366][ T5697] team0 (unregistering): Port device team_slave_0 removed
[  116.149754][   T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  116.320238][   T24] usb 4-1: Using ep0 maxpacket: 16
[  116.324443][   T24] usb 4-1: config 0 has an invalid interface number: 102 but max is 0
[  116.331200][   T24] usb 4-1: config 0 has no interface number 0
[  116.336347][   T24] usb 4-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=53.54
[  116.340558][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.343731][   T24] usb 4-1: Product: syz
[  116.345430][   T24] usb 4-1: Manufacturer: syz
[  116.347270][   T24] usb 4-1: SerialNumber: syz
[  116.359607][   T24] usb 4-1: config 0 descriptor??
[  116.383269][ T7032] netlink: 'syz.2.349': attribute type 4 has an invalid length.
[  116.606781][   T24] snd-usb-audio 4-1:0.102: probe with driver snd-usb-audio failed with error -71
[  116.628694][   T24] usb 4-1: USB disconnect, device number 6
[  116.634848][ T7039] xt_CT: No such helper "snmp_trap"
[  116.681132][ T6985] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  116.701588][ T6985] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  116.721769][ T6985] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  116.750272][ T6985] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  116.837709][ T5838] Bluetooth: hci0: command tx timeout
[  116.856740][ T6985] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.876822][ T6985] 8021q: adding VLAN 0 to HW filter on device team0
[  116.899153][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.901993][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.906493][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.909344][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.093335][ T6985] 8021q: adding VLAN 0 to HW filter on device batadv0
[  117.164689][ T6985] veth0_vlan: entered promiscuous mode
[  117.187016][ T6985] veth1_vlan: entered promiscuous mode
[  117.254570][ T6985] veth0_macvtap: entered promiscuous mode
[  117.290470][ T6985] veth1_macvtap: entered promiscuous mode
[  117.331792][ T6985] batman_adv: batadv0: Interface activated: batadv_slave_0
[  117.361543][ T6985] batman_adv: batadv0: Interface activated: batadv_slave_1
[  117.379737][ T6985] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.383130][ T6985] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.385884][ T6985] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.393425][ T6985] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.477451][  T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.481263][  T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.522535][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.525524][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.668881][ T7072] loop3: detected capacity change from 0 to 32768
[  117.696739][ T7080] netlink: 'syz.2.363': attribute type 1 has an invalid length.
[  117.701074][ T7080] netlink: 16 bytes leftover after parsing attributes in process `syz.2.363'.
[  117.940002][ T7086] loop2: detected capacity change from 0 to 2048
[  117.948026][ T7086] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  117.995146][ T7089] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  118.015200][ T7086] syz.2.367: attempt to access beyond end of device
[  118.015200][ T7086] loop2: rw=0, sector=262216, nr_sectors = 2 limit=2048
[  118.020287][ T7086] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=1)
[  118.165449][ T7091] loop3: detected capacity change from 0 to 4096
[  118.176948][ T7091] ntfs3(loop3): Primary boot: unsupported bytes per index 8192.
[  118.196284][ T7091] ntfs3(loop3): try to read out of volume at offset 0x1ffe00
[  118.386791][ T7103] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  118.433467][   T33] audit: type=1326 audit(1752295187.014:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7104 comm="syz.3.375" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1cb8e929 code=0x7ffc0000
[  118.454540][   T33] audit: type=1326 audit(1752295187.014:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7104 comm="syz.3.375" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1cb8e929 code=0x7ffc0000
[  118.472581][   T33] audit: type=1326 audit(1752295187.014:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7104 comm="syz.3.375" exe="/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f8e1cb8e929 code=0x7ffc0000
[  118.483331][   T33] audit: type=1326 audit(1752295187.014:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7104 comm="syz.3.375" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1cb8e929 code=0x7ffc0000
[  118.492512][   T33] audit: type=1326 audit(1752295187.014:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7104 comm="syz.3.375" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1cb8e929 code=0x7ffc0000
[  118.524445][ T7097] loop2: detected capacity change from 0 to 32768
[  118.533402][ T7097] XFS: noikeep mount option is deprecated.
[  118.554991][ T7097] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  118.571296][ T7118] all: renamed from bridge_slave_0 (while UP)
[  118.586987][ T7097] XFS (loop2): Ending clean mount
[  118.593230][ T7097] XFS (loop2): Quotacheck needed: Please wait.
[  118.628411][ T7097] XFS (loop2): Quotacheck: Done.
[  118.692890][ T5836] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  118.902795][ T7124] netlink: 28 bytes leftover after parsing attributes in process `syz.2.379'.
[  118.906266][ T7124] netlink: 'syz.2.379': attribute type 7 has an invalid length.
[  118.909474][ T7124] netlink: 'syz.2.379': attribute type 8 has an invalid length.
[  118.912276][ T7124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.379'.
[  118.922309][ T7124] gretap0: entered promiscuous mode
[  118.944203][ T7124] gretap0: left promiscuous mode
[  119.243474][ T5865] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.797157][ T7136] loop2: detected capacity change from 0 to 1024
[  119.801692][ T7136] EXT4-fs: Ignoring removed nomblk_io_submit option
[  119.805438][ T7136] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  119.824907][ T7136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.862310][ T7136] EXT4-fs (loop2): shut down requested (1)
[  119.885830][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.047062][ T5218] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  120.054713][ T5218] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  120.058039][ T5218] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  120.063292][ T5218] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  120.066052][ T5218] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  120.134781][ T7142] loop3: detected capacity change from 0 to 40427
[  120.145458][ T7142] F2FS-fs (loop3): invalid crc value
[  120.154434][ T7153] netlink: 'syz.2.391': attribute type 2 has an invalid length.
[  120.159636][ T7153] netlink: 'syz.2.391': attribute type 1 has an invalid length.
[  120.312364][ T7142] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  120.346833][ T7142] syz.3.387: attempt to access beyond end of device
[  120.346833][ T7142] loop3: rw=2049, sector=53248, nr_sectors = 96 limit=40427
[  120.361245][ T7142] syz.3.387: attempt to access beyond end of device
[  120.361245][ T7142] loop3: rw=2049, sector=53344, nr_sectors = 40 limit=40427
[  120.365490][ T7142] syz.3.387: attempt to access beyond end of device
[  120.365490][ T7142] loop3: rw=2049, sector=53248, nr_sectors = 88 limit=40427
[  120.375504][ T7162] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22)
[  120.389474][ T7147] chnl_net:caif_netlink_parms(): no params data found
[  120.422223][ T6297] syz-executor: attempt to access beyond end of device
[  120.422223][ T6297] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  120.433813][ T6297] CPU: 1 UID: 0 PID: 6297 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa-dirty #0 PREEMPT(full) 
[  120.433827][ T6297] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  120.433833][ T6297] Call Trace:
[  120.433837][ T6297]  <TASK>
[  120.433842][ T6297]  dump_stack_lvl+0x189/0x250
[  120.433858][ T6297]  ? __pfx_dump_stack_lvl+0x10/0x10
[  120.433866][ T6297]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  120.433879][ T6297]  ? __pfx_queue_work_on+0x10/0x10
[  120.433890][ T6297]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  120.433900][ T6297]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  120.433912][ T6297]  ? f2fs_hw_is_readonly+0x39b/0x470
[  120.433926][ T6297]  f2fs_handle_critical_error+0x37c/0x540
[  120.433940][ T6297]  f2fs_write_end_io+0x495/0x810
[  120.433948][ T6297]  ? blkg_put+0x22/0x240
[  120.433965][ T6297]  __submit_merged_bio+0x27a/0x6a0
[  120.434006][ T6297]  __submit_merged_write_cond+0x255/0x530
[  120.434022][ T6297]  f2fs_write_data_pages+0x261d/0x3000
[  120.434049][ T6297]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  120.434082][ T6297]  ? check_path+0x21/0x40
[  120.434091][ T6297]  ? check_noncircular+0xe0/0x160
[  120.434123][ T6297]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  120.434135][ T6297]  do_writepages+0x32e/0x550
[  120.434150][ T6297]  ? do_raw_spin_unlock+0x4d/0x240
[  120.434162][ T6297]  filemap_fdatawrite+0x191/0x230
[  120.434172][ T6297]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  120.434202][ T6297]  ? do_raw_spin_unlock+0x4d/0x240
[  120.434215][ T6297]  f2fs_sync_dirty_inodes+0x31f/0x830
[  120.434230][ T6297]  f2fs_write_checkpoint+0x94a/0x1de0
[  120.434248][ T6297]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  120.434277][ T6297]  ? kill_f2fs_super+0x298/0x6c0
[  120.434288][ T6297]  kill_f2fs_super+0x2c3/0x6c0
[  120.434299][ T6297]  ? __pfx_kill_f2fs_super+0x10/0x10
[  120.434306][ T6297]  ? radix_tree_delete_item+0x2b6/0x400
[  120.434321][ T6297]  ? shrinker_free+0x2ce/0x3e0
[  120.434334][ T6297]  deactivate_locked_super+0xbc/0x130
[  120.434344][ T6297]  cleanup_mnt+0x425/0x4c0
[  120.434351][ T6297]  ? lockdep_hardirqs_on+0x9c/0x150
[  120.434365][ T6297]  task_work_run+0x1d4/0x260
[  120.434378][ T6297]  ? __pfx_task_work_run+0x10/0x10
[  120.434388][ T6297]  ? __x64_sys_umount+0x122/0x160
[  120.434400][ T6297]  ? exit_to_user_mode_loop+0x40/0x110
[  120.434411][ T6297]  exit_to_user_mode_loop+0xec/0x110
[  120.434420][ T6297]  do_syscall_64+0x2bd/0x3b0
[  120.434427][ T6297]  ? lockdep_hardirqs_on+0x9c/0x150
[  120.434438][ T6297]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.434446][ T6297]  ? exc_page_fault+0x9f/0xf0
[  120.434458][ T6297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.434466][ T6297] RIP: 0033:0x7f8e1cb8fc57
[  120.434474][ T6297] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  120.434481][ T6297] RSP: 002b:00007ffe96114358 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  120.434490][ T6297] RAX: 0000000000000000 RBX: 00007f8e1cc10925 RCX: 00007f8e1cb8fc57
[  120.434496][ T6297] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe96114410
[  120.434501][ T6297] RBP: 00007ffe96114410 R08: 0000000000000000 R09: 0000000000000000
[  120.434505][ T6297] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe961154a0
[  120.434510][ T6297] R13: 00007f8e1cc10925 R14: 000000000001d5da R15: 00007ffe961154e0
[  120.434524][ T6297]  </TASK>
[  120.434527][ T6297] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  120.547178][ T7168] loop2: detected capacity change from 0 to 128
[  120.590516][ T7168] vfat: Unknown parameter '*bs'
[  120.662309][ T7147] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.664493][ T7147] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.666675][ T7147] bridge_slave_0: entered allmulticast mode
[  120.683071][ T7147] bridge_slave_0: entered promiscuous mode
[  120.694575][ T7147] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.706064][ T7147] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.711023][ T7147] bridge_slave_1: entered allmulticast mode
[  120.714502][ T7147] bridge_slave_1: entered promiscuous mode
[  120.770828][ T7147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.777001][ T7147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.832811][ T7147] team0: Port device team_slave_0 added
[  120.837171][ T7147] team0: Port device team_slave_1 added
[  120.886273][ T7147] batman_adv: batadv0: Adding interface: batadv_slave_0
[  120.894032][ T7147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.906405][ T7147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  120.912720][ T7147] batman_adv: batadv0: Adding interface: batadv_slave_1
[  120.916364][ T7147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.926705][ T7147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  121.064241][ T5865] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.148693][ T7147] hsr_slave_0: entered promiscuous mode
[  121.151312][ T7147] hsr_slave_1: entered promiscuous mode
[  121.154110][ T7147] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  121.157055][ T7147] Cannot create hsr debugfs directory
[  121.161997][ T5218] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  121.166170][ T5218] Bluetooth: hci1: Injecting HCI hardware error event
[  121.173734][ T5218] Bluetooth: hci1: hardware error 0x00
[  121.474621][ T7183] loop2: detected capacity change from 0 to 4096
[  121.518002][ T7183] NILFS (loop2): invalid segment: Checksum error in segment payload
[  121.526657][ T7183] NILFS (loop2): trying rollback from an earlier position
[  121.549178][ T5865] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.565105][ T7183] NILFS (loop2): recovery complete
[  121.582304][ T7185] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  121.598156][ T5865] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.979778][ T5865] bridge_slave_1: left allmulticast mode
[  121.981618][ T5865] bridge_slave_1: left promiscuous mode
[  121.983833][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.044664][ T5865] bridge_slave_0: left allmulticast mode
[  122.046416][ T5865] bridge_slave_0: left promiscuous mode
[  122.050581][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.118478][ T5838] Bluetooth: hci0: command tx timeout
[  122.318108][ T5295] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  122.373530][ T5865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  122.379097][ T5865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  122.383027][ T5865] bond0 (unregistering): Released all slaves
[  122.477759][ T5295] usb 4-1: Using ep0 maxpacket: 16
[  122.505233][ T5295] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  122.514499][ T5295] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  122.519669][ T5295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.529696][ T5295] usb 4-1: config 0 descriptor??
[  122.551575][ T5295] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10
[  122.791290][ T5865] hsr_slave_0: left promiscuous mode
[  122.794092][ T5865] hsr_slave_1: left promiscuous mode
[  122.796733][ T5865] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.804526][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.811192][ T5865] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.813790][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_1
[  122.839314][ T5865] veth1_macvtap: left promiscuous mode
[  122.842406][ T5865] veth0_macvtap: left promiscuous mode
[  122.845130][ T5865] veth1_vlan: left promiscuous mode
[  122.852980][ T5865] veth0_vlan: left promiscuous mode
[  122.876833][ T5262] bcm5974 4-1:0.0: could not read from device
[  122.885574][ T5295] usb 4-1: USB disconnect, device number 7
[  122.887971][ T5262] bcm5974 4-1:0.0: could not read from device
[  122.894905][ T5262] bcm5974 4-1:0.0: could not read from device
[  123.326729][ T5218] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  123.334517][ T7220] loop2: detected capacity change from 0 to 32768
[  123.370452][ T7220] (syz.2.410,7220,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  123.394173][ T7220] (syz.2.410,7220,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  123.454325][ T7220] JBD2: Ignoring recovery information on journal
[  123.524548][ T7220] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  123.550617][ T5865] team0 (unregistering): Port device team_slave_1 removed
[  123.644866][ T7220] 
[  123.645897][ T7220] ======================================================
[  123.648036][ T7220] WARNING: possible circular locking dependency detected
[  123.650436][ T7220] 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa-dirty #0 Not tainted
[  123.653824][ T7220] ------------------------------------------------------
[  123.656518][ T7220] syz.2.410/7220 is trying to acquire lock:
[  123.658812][ T7220] ffff88802ba1ec78 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_init_acl+0x2f9/0x720
[  123.661940][ T7220] 
[  123.661940][ T7220] but task is already holding lock:
[  123.664260][ T7220] ffff888020070950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0
[  123.667227][ T7220] 
[  123.667227][ T7220] which lock already depends on the new lock.
[  123.667227][ T7220] 
[  123.670394][ T7220] 
[  123.670394][ T7220] the existing dependency chain (in reverse order) is:
[  123.673296][ T7220] 
[  123.673296][ T7220] -> #3 (jbd2_handle){++++}-{0:0}:
[  123.675521][ T7220]        lock_acquire+0x120/0x360
[  123.677103][ T7220]        jbd2_journal_lock_updates+0xaa/0x360
[  123.679016][ T7220]        __ocfs2_flush_truncate_log+0x2ba/0x10e0
[  123.681001][ T7220]        ocfs2_flush_truncate_log+0x4f/0x70
[  123.682963][ T7220]        ocfs2_sync_fs+0x116/0x310
[  123.684869][ T7220]        sync_filesystem+0x1cf/0x230
[  123.686659][ T7220]        generic_shutdown_super+0x6f/0x2c0
[  123.688913][ T7220]        kill_block_super+0x44/0x90
[  123.690688][ T7220]        deactivate_locked_super+0xbc/0x130
[  123.692776][ T7220]        cleanup_mnt+0x425/0x4c0
[  123.694510][ T7220]        task_work_run+0x1d4/0x260
[  123.696397][ T7220]        exit_to_user_mode_loop+0xec/0x110
[  123.698353][ T7220]        do_syscall_64+0x2bd/0x3b0
[  123.700163][ T7220]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.702527][ T7220] 
[  123.702527][ T7220] -> #2 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{4:4}:
[  123.705806][ T7220]        lock_acquire+0x120/0x360
[  123.707351][ T7220]        down_write+0x96/0x1f0
[  123.708907][ T7220]        ocfs2_remove_btree_range+0x646/0x1540
[  123.710817][ T7220]        ocfs2_remove_inode_range+0xe60/0x2430
[  123.712828][ T7220]        ocfs2_reflink_remap_blocks+0xc2f/0x1930
[  123.714726][ T7220]        ocfs2_remap_file_range+0x4b7/0x730
[  123.716590][ T7220]        vfs_copy_file_range+0xd56/0x1310
[  123.718447][ T7220]        __se_sys_copy_file_range+0x2fb/0x470
[  123.720332][ T7220]        do_syscall_64+0xfa/0x3b0
[  123.721908][ T7220]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.723934][ T7220] 
[  123.723934][ T7220] -> #1 (&oi->ip_alloc_sem){++++}-{4:4}:
[  123.726660][ T7220]        lock_acquire+0x120/0x360
[  123.728570][ T7220]        down_write+0x96/0x1f0
[  123.730381][ T7220]        ocfs2_try_remove_refcount_tree+0xb6/0x320
[  123.732845][ T7220]        ocfs2_truncate_file+0xda0/0x1420
[  123.734985][ T7220]        ocfs2_setattr+0x1520/0x1b40
[  123.736962][ T7220]        notify_change+0xb36/0xe40
[  123.738557][ T7220]        do_truncate+0x1a4/0x220
[  123.740096][ T7220]        path_openat+0x306c/0x3830
[  123.741720][ T7220]        do_filp_open+0x1fa/0x410
[  123.743271][ T7220]        do_sys_openat2+0x121/0x1c0
[  123.744914][ T7220]        __x64_sys_openat+0x138/0x170
[  123.747178][ T7220]        do_syscall_64+0xfa/0x3b0
[  123.749308][ T7220]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.751987][ T7220] 
[  123.751987][ T7220] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}:
[  123.755228][ T7220]        validate_chain+0xb9b/0x2140
[  123.757452][ T7220]        __lock_acquire+0xab9/0xd20
[  123.759253][ T7220]        lock_acquire+0x120/0x360
[  123.760822][ T7220]        down_read+0x46/0x2e0
[  123.762424][ T7220]        ocfs2_init_acl+0x2f9/0x720
[  123.764030][ T7220]        ocfs2_mknod+0x1321/0x2050
[  123.765666][ T7220]        ocfs2_mkdir+0x191/0x440
[  123.767173][ T7220]        vfs_mkdir+0x306/0x510
[  123.768640][ T7220]        do_mkdirat+0x247/0x590
[  123.770126][ T7220]        __x64_sys_mkdirat+0x87/0xa0
[  123.771715][ T7220]        do_syscall_64+0xfa/0x3b0
[  123.773337][ T7220]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.775402][ T7220] 
[  123.775402][ T7220] other info that might help us debug this:
[  123.775402][ T7220] 
[  123.779321][ T7220] Chain exists of:
[  123.779321][ T7220]   &oi->ip_xattr_sem --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6 --> jbd2_handle
[  123.779321][ T7220] 
[  123.785458][ T7220]  Possible unsafe locking scenario:
[  123.785458][ T7220] 
[  123.788372][ T7220]        CPU0                    CPU1
[  123.790541][ T7220]        ----                    ----
[  123.792757][ T7220]   rlock(jbd2_handle);
[  123.794527][ T7220]                                lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6);
[  123.798462][ T7220]                                lock(jbd2_handle);
[  123.801131][ T7220]   rlock(&oi->ip_xattr_sem);
[  123.803015][ T7220] 
[  123.803015][ T7220]  *** DEADLOCK ***
[  123.803015][ T7220] 
[  123.805974][ T7220] 8 locks held by syz.2.410/7220:
[  123.807692][ T7220]  #0: ffff888039504428 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  123.810956][ T7220]  #1: ffff88802ba1ef40 (&type->i_mutex_dir_key#10/1){+.+.}-{4:4}, at: filename_create+0x1f9/0x470
[  123.815164][ T7220]  #2: ffff8881191960c0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  123.820427][ T7220]  #3: ffff8881191926c0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  123.825533][ T7220]  #4: ffff888119191840 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  123.830661][ T7220]  #5: ffff888039504618 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_mknod+0xe93/0x2050
[  123.834073][ T7220]  #6: ffff888044c610e8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x36a/0x6d0
[  123.837999][ T7220]  #7: ffff888020070950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0
[  123.840890][ T7220] 
[  123.840890][ T7220] stack backtrace:
[  123.842603][ T7220] CPU: 1 UID: 0 PID: 7220 Comm: syz.2.410 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa-dirty #0 PREEMPT(full) 
[  123.842614][ T7220] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  123.842620][ T7220] Call Trace:
[  123.842624][ T7220]  <TASK>
[  123.842630][ T7220]  dump_stack_lvl+0x189/0x250
[  123.842643][ T7220]  ? __pfx_dump_stack_lvl+0x10/0x10
[  123.842652][ T7220]  ? __pfx__printk+0x10/0x10
[  123.842663][ T7220]  ? stack_trace_save+0x9c/0xe0
[  123.842677][ T7220]  print_circular_bug+0x2ee/0x310
[  123.842689][ T7220]  check_noncircular+0x134/0x160
[  123.842700][ T7220]  validate_chain+0xb9b/0x2140
[  123.842709][ T7220]  ? __pfx_find_get_block_common+0x10/0x10
[  123.842724][ T7220]  __lock_acquire+0xab9/0xd20
[  123.842754][ T7220]  ? ocfs2_init_acl+0x2f9/0x720
[  123.842766][ T7220]  lock_acquire+0x120/0x360
[  123.842774][ T7220]  ? ocfs2_init_acl+0x2f9/0x720
[  123.842787][ T7220]  ? do_raw_spin_unlock+0x4d/0x240
[  123.842799][ T7220]  down_read+0x46/0x2e0
[  123.842808][ T7220]  ? ocfs2_init_acl+0x2f9/0x720
[  123.842819][ T7220]  ocfs2_init_acl+0x2f9/0x720
[  123.842831][ T7220]  ? __pfx_ocfs2_init_acl+0x10/0x10
[  123.842842][ T7220]  ? dquot_alloc_inode+0x8ba/0xa50
[  123.842853][ T7220]  ? __pfx_ocfs2_journal_dirty+0x10/0x10
[  123.842861][ T7220]  ? ocfs2_block_signals+0x94/0xe0
[  123.842871][ T7220]  ? ocfs2_metadata_cache_get_super+0x43/0x80
[  123.842880][ T7220]  ? ocfs2_inode_cache_get_super+0xd/0x40
[  123.842891][ T7220]  ocfs2_mknod+0x1321/0x2050
[  123.842904][ T7220]  ? __pfx_ocfs2_mknod+0x10/0x10
[  123.842913][ T7220]  ? do_raw_spin_unlock+0x4d/0x240
[  123.842924][ T7220]  ? ocfs2_inode_lock_full_nested+0xabe/0x1b40
[  123.842938][ T7220]  ? __lock_acquire+0xab9/0xd20
[  123.842949][ T7220]  ? __lock_acquire+0xab9/0xd20
[  123.842958][ T7220]  ? do_raw_spin_lock+0x121/0x290
[  123.842970][ T7220]  ? do_raw_spin_unlock+0x4d/0x240
[  123.842980][ T7220]  ? put_pid+0x105/0x160
[  123.842991][ T7220]  ocfs2_mkdir+0x191/0x440
[  123.843000][ T7220]  ? __pfx_from_kgid+0x10/0x10
[  123.843011][ T7220]  ? apparmor_path_mkdir+0x1a7/0x220
[  123.843020][ T7220]  ? __pfx_ocfs2_mkdir+0x10/0x10
[  123.843028][ T7220]  ? HAS_UNMAPPED_ID+0x11a/0x180
[  123.843040][ T7220]  ? inode_permission+0x149/0x470
[  123.843049][ T7220]  ? __pfx_ocfs2_permission+0x10/0x10
[  123.843057][ T7220]  ? bpf_lsm_inode_mkdir+0x9/0x20
[  123.843069][ T7220]  vfs_mkdir+0x306/0x510
[  123.843078][ T7220]  do_mkdirat+0x247/0x590
[  123.843086][ T7220]  ? __pfx_do_mkdirat+0x10/0x10
[  123.843094][ T7220]  ? getname_flags+0x1e5/0x540
[  123.843105][ T7220]  __x64_sys_mkdirat+0x87/0xa0
[  123.843113][ T7220]  do_syscall_64+0xfa/0x3b0
[  123.843121][ T7220]  ? lockdep_hardirqs_on+0x9c/0x150
[  123.843132][ T7220]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.843140][ T7220]  ? exc_page_fault+0x9f/0xf0
[  123.843151][ T7220]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.843159][ T7220] RIP: 0033:0x7fc599f8d197
[  123.843168][ T7220] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  123.843175][ T7220] RSP: 002b:00007fc59ad35e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  123.843184][ T7220] RAX: ffffffffffffffda RBX: 00007fc59ad35ef0 RCX: 00007fc599f8d197
[  123.843190][ T7220] RDX: 00000000000001ff RSI: 0000200000000140 RDI: 00000000ffffff9c
[  123.843195][ T7220] RBP: 0000000000000000 R08: 0000200000000000 R09: 0000000000000000
[  123.843201][ T7220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000140
[  123.843206][ T7220] R13: 00007fc59ad35eb0 R14: 0000000000000000 R15: 0000000000000000
[  123.843214][ T7220]  </TASK>
[  123.956829][ T5865] team0 (unregistering): Port device team_slave_0 removed
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  124.207794][ T5218] Bluetooth: hci0: command tx timeout
[  124.548813][ T7220] ocfs2: Unmounting device (7,2) on (node local)
[  124.729299][ T5865] bridge_slave_1: left allmulticast mode
[  124.731600][ T5865] bridge_slave_1: left promiscuous mode
[  124.733983][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.738108][ T5865] bridge_slave_0: left allmulticast mode
[  124.740341][ T5865] bridge_slave_0: left promiscuous mode
[  124.742594][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.800404][ T5865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  124.805112][ T5865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  124.809921][ T5865] bond0 (unregistering): Released all slaves
[  124.911740][ T5865] hsr_slave_0: left promiscuous mode
[  124.913969][ T5865] hsr_slave_1: left promiscuous mode
[  124.915985][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.919104][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_1
[  124.992518][ T5865] team0 (unregistering): Port device team_slave_1 removed
[  125.007154][ T5865] team0 (unregistering): Port device team_slave_0 removed
[  125.361839][ T5865] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.404071][ T5865] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.470885][ T5865] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.511338][ T5865] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.573493][ T5865] bridge_slave_1: left allmulticast mode
[  125.575804][ T5865] bridge_slave_1: left promiscuous mode
[  125.578403][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.581466][ T5865] bridge_slave_0: left allmulticast mode
[  125.584113][ T5865] bridge_slave_0: left promiscuous mode
[  125.586241][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.672909][ T5865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  125.676933][ T5865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  125.680709][ T5865] bond0 (unregistering): Released all slaves
[  125.898291][ T5865] hsr_slave_0: left promiscuous mode
[  125.900945][ T5865] hsr_slave_1: left promiscuous mode
[  125.903335][ T5865] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  125.908426][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_0
[  125.911744][ T5865] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  125.914918][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_1
[  125.922473][ T5865] veth1_macvtap: left promiscuous mode
[  125.924682][ T5865] veth0_macvtap: left promiscuous mode
[  125.926911][ T5865] veth1_vlan: left promiscuous mode
[  125.929476][ T5865] veth0_vlan: left promiscuous mode
[  126.100103][ T5865] team0 (unregistering): Port device team_slave_1 removed
[  126.116216][ T5865] team0 (unregistering): Port device team_slave_0 removed
[  132.440809][ T1358] ieee802154 phy0 wpan0: encryption failed: -22
[  132.444161][ T1358] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
04:39:46  Registers:
info registers vcpu 0

CPU#0
RAX=e9baa20f9ba67900 RBX=ffffffff81976c78 RCX=e9baa20f9ba67900 RDX=0000000000000001
RSI=ffffffff8be29da0 RDI=ffffffff81976c78 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1f3f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6f34d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8e1cdb6070 CR3=0000000044324000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000ff000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 00000000000000ff XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000851e RDI=000000000000851f RBP=00000000000003f8 RSP=ffffc90002b7ed10
R8 =ffff888108498237 R9 =1ffff11021093046 R10=dffffc0000000000 R11=ffffffff85478e30
R12=dffffc0000000000 R13=ffffffff99af9882 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff85478eac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc59ad366c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3091fffc CR3=0000000044324000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fc59a011c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
