last executing test programs:

23.775309967s ago: executing program 2 (id=2508):
r0 = socket(0x10, 0x803, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000300)={@private1}, &(0x7f0000000340)=0x14)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001280)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000001000000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000640)="e00200000087dbe9a8c89b6f5bec", 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002080)="8cdbfc912b2f5015cd4201ad9746ee95213affe23f8c35e5170be0abd5b03507e79012189e1e64b37f4ad974f59fc51fa1f54dbbe9965a2263f8f27e9eb7c8f3da6b8a2ceaaf2e4d39ce3ac31c9fd63f148369fdf5ab93ba0d574effb74d9045ef022dc492d3f44d5dea22c7b841fcc04eb1c49289f206be0479e83bc738a0c0b4af8078e4196fc461319ad63eb307ce25e4478809f34c4d4260eb8dd2de61ea8ec9b3b1492a881c74ca76df5cfb77002aa143f9eed0d0522867d652a3d8550aabeae3d042976bbc2880b947e381f251002b954397afa87388aac2fc96f97a64ab4ff907ae1529ef438006380d08fa0bb3467af1fb531998277792cdf3074d910a636d341e5d398b46e771cfef2599b8639f8e59ab3d5836457eff22ff2c65569eaa99e255c40f18b952f20d020e7d687bc41142b2a31e82cb45a7e0988dc1b6f261944fd46ca54c067f4ad6d9fcaa2e336148d28e22c5f23714c7a66a18faa639baa7eaffed706242859815cda57d2b4b098ac4b2313118ac27223be51de34edc2252f3566202b4c94d53461e194cd72c3182cc14d7ed81c5f0838b9839dc07c9d477ab24889b145f2cd30f1998016aa19eff5b016847cf5c3e1b33800434803514e145e98b4f8e8e2e44ab8fc59c2465ed6543afa8052a71c835d09c8a8f58add989cb798bf2213f3994ffbb812aeafe14ad4cab9e1c95bfe1acc85b1407a888ca967735d8a2ac078091a456a5f7219e2900b1913efb87cd6cc301fd286e6bb5b2358d6b55afcbe1bb033d0b07ebe0ac540eefc4d13cf8d8e03c8c9d62c61248f3337565fdc105e67662e376310fe35afc7ef8730b619f48159b9d3d6773360a30f37301de38933539c15eed59ad1ce0399de77635d2876e23316ec502ac64bb5d2229e216e5b062869b17daaa3d844329de3b8ab08566adbccbf1fde70d2742b65d6d7b4225264f00b4a02b6e78f18a32d16c57b743a86cad2c8b5daadef06cce62912ef6b5a4b97f05d3757cc48331faa66b37ef4a540776690ce4308550d4e5664a5d1f6d675b0c9f7483a358b53cf56293bec5d835822bc666de1c6bb9b3b1c6f67734bb916036c109c4d2143149cbc38547052acb13ddd3347cacb0a30c82f94349fcfa230886b3a782f07a6f964af6cd3c14c83875a4b89a37866b9730a55cbc04eec08079de184a94986e7a59c3e42ec97f95e97d794455ebc4c31946c8319c56ad96a786bae58bc3d71fd6d5988a9eb15a157d12345bc18b52af4bc77a1bf3ac854e8cda6030337d436a2828cd9fd4cc0099b1f6096633a49b612fe6d779b2a82ffc8be5f792a5eea71641898b88ec9041355d3a17a61eb82515b2ac321dd159c81a862e05c3fa30dad529faf79215c3600e62ccdbbaebf159caa1a583eefcce3aa413a15abd88263107b18257b17b224aa03357de9837ad60aa2189b3a0861c5ada3761563be0ffdf870c58b20cc75ebe0317cf7b6a410ef8524a452b10ac119794b9fa588963f918d1159171c5a8eb4e276bec3e574f3111482748201570582f3508720aa3741c617069acddf2085b2184806126a7745e9c40f644ef3a19066b2b9c690e1d9afbe3e561424779c2da513564134abbe3b43142d4880b25f5f36125f739167267c877335ba0d56adfc5e87e276c17edcd964455b31b5b4205d18e067f2759ecdd65b47fbb2c64d0ecbe09ce45a18194d00c61de20717cfe8acbc9d46b96fc7594786641f6eb491a94072c5088a95f7489fcdc3f91861c21742ca91170e867f394952ede0ecb84bf78ad53a051cf6d4cba7033584a68dfc42dbd4771ef330c7ec3a6265235545a20f83e5f0347e58ee1988addd0f4dbba443bbd1463bc97d54fdfbed37b8444ec96489c5beb9c2f63646d937f69a5fbf7bb23c759b582788bb2daf389c6841daab3d4353164b83339708190881b241a72d4693c16b3e4b7232f6b4673ce89c20875811f31373f7a3d439a47ab86f1e43c8ac2bfd5753debc7f13dd32ea1d91f7fd96209bc999a9bf2b0a9ee330f6301fd916ece8669f8058561816504beae76ff8a0b84677783f86bafd8a128cec5845d00269955b155ff860c57a72c37b4b9fc1bafe4e046e69ff2be01e627b20870073dc61a56b92ae8d993f1cc6704675e26f0ee75c55a08794f9b9830f75ec4e6443767a7aadf864862133b628675e2d5f1cc556ef3a4ab06d92a37e9bcd9fe67712c7ac058e5314ca88811735f06caec6dd0079ccb772f9851c041388874210732e86583406f8df7ecec8a9e9a30ebfcad72dd6d678c0d6110c35f3b9eab5038bd31cf2e1069c60e6f197060189573d7273933283f2e826021643d6499bd13b4d2b58718b3ea319703a03db218c01763a9e47611e741617b4217234f1c56eafa34ef32913fc40ba43e66cc0b5f9cbb41f405ec905206ca1eadf9bf1ea5fb039eb0199177b004e1921606aabb878a110cfd20db78ceb9c59fba6ac089ea01c0c0dff10f1009d780fc115986781a8352dddae602af987d2541d5a72936211a20c3a12bc27c7b448261662d004cafb38a28b631f57176ef8107dd321f9c40a7e75fd47c971e435e3aa87c6ea29d2bb2c548810633a610e08e90c13285eeb2f18de70de2fcb0ad3c60978be6566f17973fa6c7ab95b824913ffa43a75cbef7e499cbc1da3025de57bf19e0d369868dd3ffab58b6702e32574f54ef07a34d300c702e1b62f7488cfcc557b0002310e01e02004b1b51e3044f1a95fc7134bc1cbdbb0f1ecdaccfc769b9ed2e1d0aac16a17395ad092564f6f7f84415c0f7552683b72d165e42034337beed4e184033ec2fbd0b143238c2afef7e1ed5b04d5541786e4d97c0e0b1ee0ca58c91f83eee2ac420409942facbaaa47373adbb47ba877d85506f49b588189183aba3570c2ef4cf911f4dadb029f3ff3dee113fce291a7537e829ddcb4b23cbee081335da4cd4f560e37a836078652afe2c667d54ca503322cc8547208a603bc96824b3feedf31a50b4d8fb57c10ab5b5af3324164dcddb7d83dd2f533f98aadaa20e7f0ae333d9ba8b97164924ca8a5e994417bd255f8c3b71d7d376c81363a4f8dd017b0354fbf9defe22ffc3bfbc941617f139ab84022635e8b09e915391460781870fceed07b96882fc3a145bd4cbc9b08e58a95766d931c67c3835cdbc06675e862110ea995adf6749868131c598df528c7ddaf100e390c19b4becade18782bf1263661559db18310dd1c7f25088e7a3b4485a4415be552fcbd3", 0x904}], 0x1}, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
sendmmsg$inet(r3, &(0x7f0000004840)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="240000000000000000000000070000004414090300000000000000007f00000100000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414"], 0x48}}], 0x1, 0x0)
socket(0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000400), 0x4)
sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b80)=@bridge_setlink={0x1b, 0x13, 0xa29, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x2c}}, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x41}, {&(0x7f0000000280)=""/85, 0x5c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x596}, {&(0x7f00000007c0)=""/154, 0x32}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

15.938694054s ago: executing program 3 (id=2543):
capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000100))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private}, 0xc)

15.732298756s ago: executing program 3 (id=2546):
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc008551a, &(0x7f00000005c0)={0x1, 0xb, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b1665a8259dd542248e7f881bf56c4d8"})

15.629162319s ago: executing program 3 (id=2547):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
utime(0x0, 0x0)

15.567252772s ago: executing program 3 (id=2550):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x48005)
pselect6(0x40, &(0x7f0000000000)={0x10}, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000cc0)=ANY=[], 0x18}}, 0x0)

15.338141637s ago: executing program 3 (id=2554):
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc008551a, &(0x7f00000005c0)={0x1, 0xb, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b1665a8259dd542248e7f881bf56c4d8"})

4.47772961s ago: executing program 1 (id=2603):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581"], 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000c00)={'bridge_slave_1\x00'})
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1008002, &(0x7f00000004c0), 0x1, 0x5e3, &(0x7f0000000bc0)="$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")
syz_usb_connect(0x6, 0x3e8, &(0x7f0000000200)=ANY=[], &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x8, 0x4, 0x0, 0x20}, 0xf2, &(0x7f00000000c0)=ANY=[], 0x1, [{0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="200c03884e21095d298671572d"]}]})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802)
write$evdev(r2, &(0x7f0000000000), 0x100000008)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x541b, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)

2.961134559s ago: executing program 1 (id=2609):
r0 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000340)={{0x8, 0x0, 0x0, 0x0, 'syz0\x00'}})

2.947422291s ago: executing program 1 (id=2610):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x20)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "c96c8fe9124f9ba1"})
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0xffff, 0x0, 0x0, 0x0, 0x0, "823af9032ae9da23"})

2.824307233s ago: executing program 1 (id=2611):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
r1 = getpid()
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000053000000850000000800000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.726138445s ago: executing program 1 (id=2620):
syz_mount_image$bcachefs(&(0x7f0000005d80), &(0x7f0000005dc0)='./file0\x00', 0x0, &(0x7f0000005e40)={[{@metadata_checksum={'metadata_checksum', 0x3d, 'crc64'}}, {@nocow}, {@compression={'compression', 0x3d, 'none'}}, {@compression={'compression', 0x3d, 'gzip'}}, {@str_hash={'str_hash', 0x3d, 'crc32c'}}, {@data_checksum={'data_checksum', 0x3d, 'xxhash'}}, {@background_compression={'background_compression', 0x3d, 'none'}}, {@nocow}]}, 0x1, 0x5d5e, &(0x7f0000000000)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ftruncate(r0, 0xc17c)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007911b8100000000004000000000000009500000cf7760cb3"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffff7, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)

1.558408944s ago: executing program 2 (id=2510):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x3, 0x0}})

1.458009273s ago: executing program 2 (id=2623):
setresgid(0xffffffffffffffff, 0xee00, 0x0)
r0 = getegid()
setresgid(0xffffffffffffffff, 0xffffffffffffffff, r0)

1.358863195s ago: executing program 2 (id=2624):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x11, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040001)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440))
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
socket(0x10, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)={0x64, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}]}, 0x64}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000002200)={@private0}, &(0x7f0000002240)=0x14)
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000d0880))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000010c80)={{0x0, 0x7, 0x9ed2, 0x9, 0x1, 0x9, 0x1, 0x8, 0x0, 0xfff, 0x7fffffff, 0x9, 0x0, 0x3, 0x7fffffff}})

1.123482969s ago: executing program 0 (id=2625):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791400000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0x12)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00'}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r4=>r2}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {0x7}}, './file0\x00'})

1.101891895s ago: executing program 2 (id=2626):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
syz_mount_image$iso9660(&(0x7f00000006c0), &(0x7f0000000100)='./file0\x00', 0x9010, &(0x7f0000000340)=ANY=[], 0x1, 0xab0, &(0x7f00000017c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c)
r2 = memfd_secret(0x80000)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r3 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800700, &(0x7f0000000540)={[{@journal_path={'journal_path', 0x3d, './file0'}}, {@auto_da_alloc}, {@mblk_io_submit}, {@minixdf}, {@resgid}, {@sysvgroups}, {@usrjquota}]}, 0x3, 0x455, &(0x7f0000001080)="$eJzs289rHFUcAPDvzCbp7ybWKrRWjRYx+CNp0qo9eFEUPFQU9FCPcZOW0m0jTQRbio0i9SJIQc/iUfAv8OZF1JPgVe9SKBqEVk+R2Z1JN9vd/Gg2u7H7+cAk7+17s++9ffN23sybDaBnDWd/kojdEfFbRAzWosszDNf+3Vq4XP5n4XI5icXFt/5MqvluLlwuF1mL/XblkZE0Iv0kyQuJbfVvO3vx0tnJSmX6Qh4fmzv33tjsxUvPnjk3eXr69PT5iePHjx0df+H5iefW1I5klfSsXTcPfjhz6MBr71x7vXzy2rs/fZvtsztPr29HuwxnDf9rsaox7Yl2F9Zle+rCSV8XK8K6lCIi667+6vgfjFLc7rzBePXjrlYO2FTZuWlb6+T5ReAelsTqef7uREWADitO9Nn1b7F1aOqxJdx4qXYBlLX7Vr7VUvoizfP0N1zfttNwRJyc//erbItNug8BAFDvs/KXJ+KZZvO/NB6sy7c3X0MZioj7ImJfRNwfEfsj4oGILG/jlHJNhhvid85/0ut32bQ1yeZ/L+ZrW8vnf8XsL4ZKeWxPtf39yakzlekj+WcyEv3bsvj4CmV8/8qvn7dKq5//ZVtWfjEXzOtxva/hBt3U5NxkdVLaBjc+ijjY16z9ydJKQBIRByLi4Preem8ROPPUN4d2HGqeafX2r6AN60yLX0c8Wev/+WhofyFZeX1ybHtUpo+MFUfFnX7+5eqbrcrfUPvbIOv/ncuP/8YsQ0n9eu3s+su4+vunLa9p7vb4H0jervbLQP7aB5NzcxfGIwaSE9X4stcnbu9bxIv8WftHDjcf//vyfbJyHoqI7BB+OCIeiYhH87o/FhGPR8ThFdr/48ut07ZC/081/f5bOv4b+n/9gdLZH75rVf7a+v9YNTSSv1L9/lvFWiu4kc8OAAAA/i/S6jPwSTq6FE7T0dHaM/z7Y2damZmde/rUzPvnp2rPyg9Ff1rc6Rqsux86nszn71iLT+T3iov0o/l94y9KO6rx0fJMZarLbYdet6vF+M/8Uep27YBN12wdbWKgCxUBOq5x/KfLo1fe6GRlgI7ye23oXauM/7RT9QA6z/kfelez8X+lIW4tAO5Nzv/Qu4x/6F3GP/Qu4x960kZ+1y/Qy4FIK5Wp7RFbpT4C7Q10+5sJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgPf4LAAD//zAd9WE=")
setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240), &(0x7f00000005c0)=ANY=[@ANYRESDEC=r2, @ANYRESOCT, @ANYRESDEC=r2, @ANYRESOCT=r3], 0xff27, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b70800000000e1ff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc)
r6 = socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000080)=@req3={0x0, 0x0, 0x0, 0xfc}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYRESHEX=r6, @ANYRES32=0x0], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xff62, 0x0, 0x0, 0x10, 0xfffffffa}, 0x90)
syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)

1.036592413s ago: executing program 0 (id=2627):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0)

795.499661ms ago: executing program 0 (id=2628):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000001600)={&(0x7f0000000200), 0x10, &(0x7f00000014c0)=[{&(0x7f0000000240)="9f", 0x1}], 0x1, &(0x7f0000000000)=[@prinfo={0x18, 0x84, 0x5, {0x10}}], 0x18}, 0x0)

688.3704ms ago: executing program 0 (id=2629):
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e)
connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4, @local, 'team_slave_1\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}})

614.768453ms ago: executing program 0 (id=2630):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340), 0x2)
r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x10000})
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020)

556.108518ms ago: executing program 1 (id=2631):
setresgid(0xffffffffffffffff, 0xee00, 0x0)
r0 = getegid()
setresgid(0xffffffffffffffff, 0xffffffffffffffff, r0)

478.658079ms ago: executing program 0 (id=2632):
syz_read_part_table(0x5e4, &(0x7f0000000600)="$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")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1218088, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c2, &(0x7f00000008c0)="$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")
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64auumCJWPBPEEisWPIbWMASdogFiB1SkWcmULdJC63jQPs80vjMHL8+874jK9KZiRzAU2sp/e2XJI7FoYhYiIijSeT7SblF3I44X4x9LiKOR0Tlri0p838m9kfE4Yg4Nile1EzKtz47OT5x9uc3f/362wP7jnz+1Xd7unBgTz0fEf31Yv9mv4hZJw93Fsp8Y9zNY//MuIzrUzX6WZG/2V7LK9xsbI1r5PF0pxifrd8YTuLVXqM5iZ3u1Ty/PihOOBx3tupMPpBea2zkx632Wh67wyyPnVvFeTdvFX/bbg1HRZ1WWe+jvHyMRluxyLc328V61q/nsTkYlfmibtZqb07iuIzl6aKZ9Vr5PNYe9Sr/+73VHdzYTMftjWE3G6Rna/UXavVz1fpG1mqP2meqjX7r3Jl0udObDKuO2o3++U6WdXrtWjPrr6TLnWazWq+nyxfaa93GIK3Xa6drp6pnV8q9k+lrl99Le610eRJf6Q5ujLq9YXo120iLT6ykq7XTL66kJ+rpO5eupFfevnjx0pV3P7jw/uWXL73xajnovmmly6unVler9VPV1frKU7T+j8tJ/4P1J9unf/j+8S4bFHb4ggGws/v6/7i3/w/9PzBzD+j/49pD+v/+9fJ4d/r/2Lb/r0z3/zHL/n/SUun/H97/Vvag/10M/f8urh8ey6P1//tnPg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAObux8UvXs93lorjI2X+f2XqmfI4iYhKRNzZxkLsn6q5UNZZ3GH84j1z+CaJvMLkHAfK7XBEnC+33/+/21cBAAAAnlxf3j7+adGtFy9Lez0h5qm4aVM5+uGM6iURsbj004yqVSYvz86oWP793hebM6qW38A6OKNixS23fbOq9rcsTIWDd4WkCJW5TgcAAJiL6U5gvl0IAAAA8/TJA999aW7zYM6S2HqUufUsOP/P+78eCB6aeg8AAAD4D0r2egIAAADArsv7f7//BwAAAE+24vf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YOd+ctMGojgAPxsM/auiqvtepTs4Ro/QZZeFA/QSHIGeoFIvwBmolEWOkIQIe4LkBKRIjHGCvk+ynRlHP88AmzeWBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu/a9Wsz+/vv4+Mebv7fY0maYDAAAAHLCpVrP6j0nTfp/6P6auz6ldREQZEYdq90GMWpmDlFMd+f/q0Rj+RdQJu/5xOt5FxLd03Hzq+lMAAACAy7VeLKdNtd6c0hLAVb+j4kyaRZvyw/dMeUVEVJPrTGnl7vQlU1j9+x7Gz0xp9QLWm0xhzZLb8PC9Ua6HtA1al4eZzOsvsW6V3TwXAADoU7sSOFKFAAAAcAF+9D0AzuFpaV/sT/v3jOPmkl4Ivm21AAAAgFeo6HsAAAAAQOfq+v8l7f9X2P8PAAAAsmv2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLm2o1Wy+W02P358/MudueJt+MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB79ucdBUIgDMJg7/rOZO5/WGnQ0NikCoSPvzEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYn5cUCIEgiII5438nff/DSoKeQYQIaHhUUYsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYt2PfNqowAOCffbbbFBAhoEgEUJE6wEJTt7R0RQgUMfAnIEWpUwIuhTYDrSJKFjaUuQuCESEkUNjyP3RupC5l65AhSEwMQXe+S8+JoVFp79zm95Oe3+fz9b3vna0qn98ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCw9W682szjJH2YHMTFsdvbKwtpv7mnT22s3ZlJWxo3Ks77CfBa+cnx6foSAQAA4PBIivo+Iu621+fSvjmZ1f/t4py05v/huUFc1PN76/7N7ZWj+UszRf3/+2/3XtqdaDLJ5kkHXVzq907tT6X1mJY49p5/4Bmt7Mpn370k2RvS/HD1xa12dj0b39269X4nC49UkS0A8DBOFn0eFH8PpX23zsQAODRapcK7qP+TyXpzAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjC1mo8U8SNiJhp3Y9Tm9srC6P6b9buzGzk7dzNm2vlMdMh2hGxuNTvnapwLeOruJrXP5vv93tXrl6rOjgeESNeunGwf57k6f/rOZ2IGDpy4uUR43x8gLn2jLMvyD+eUe01nEjX98CTG0NHGvsu+Hs7A3V8AKoKmvn7My75PMqg+Ow9+pEr/u8IAICnXjtvaSV6t70+lx5rTEXs/Dhc/79RimOo7t+5MTgyeL5Rqv/vfXLudnmucv3frWh9T4LZ5UtfzF69dv2tpUvzF3sXe5+/fbr7TvfM+bNnz89m35XMLkbTNyYAAAD8D528lev/5tT+/f9jpTj+Y/+/XP9/+X336/Jcifp/pPubfnVnAgAAcBh1dqMXXv/rz8aIMxqdTnw1v7x8pTt43H1+evBYaboP6UjeyvV/MlV3VgAAAEAVtlYbQ/v/F0pxHHD//9mfXvmlPGYSERMRlyOid3Lhcv9CdcsZa1X8UDmbqFP3SgEAAKjLRN7K+//t7P7/5u4tD82IePNExN/5b/jjgPV/8sG3P5fnKt//f6bSVY6f5vTgemT9dERruu6MAAAAeJodzVta7P/RXp/79NdjH3Xc/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQtX8CAAD//4ztMoY=")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f0000000140)=ANY=[], 0x1, 0x0, &(0x7f0000000080))

207.106745ms ago: executing program 3 (id=2555):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140))
ioctl$KVM_SET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000d00)={"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"})

0s ago: executing program 2 (id=2633):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x11, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040001)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440))
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
socket(0x10, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)={0x64, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}]}, 0x64}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000002200)={@private0}, &(0x7f0000002240)=0x14)
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000d0880))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000010c80)={{0x0, 0x7, 0x9ed2, 0x9, 0x1, 0x9, 0x1, 0x8, 0x0, 0xfff, 0x7fffffff, 0x9, 0x0, 0x3, 0x7fffffff}})

kernel console output (not intermixed with test programs):

S info (device loop3): disk space caching is enabled
[  213.610108][T10395] BTRFS info (device loop3): rebuilding free space tree
[  213.638872][T10395] BTRFS info (device loop3): disabling free space tree
[  213.642027][T10395] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  213.646314][T10395] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  213.667593][ T5210] Bluetooth: hci3: command tx timeout
[  213.711394][T10017] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  214.179862][   T89] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  214.188649][   T89] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  214.195858][   T89] bond0 (unregistering): Released all slaves
[  214.351881][   T89] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  214.359615][   T89] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  214.365819][   T89] bond0 (unregistering): Released all slaves
[  214.535723][   T89] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  214.542946][   T89] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  214.555102][   T89] bond0 (unregistering): Released all slaves
[  214.567618][T10370] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  214.571151][T10370] IPv6: NLM_F_CREATE should be set when creating new route
[  214.574304][T10370] IPv6: NLM_F_CREATE should be set when creating new route
[  214.665985][T10213] 8021q: adding VLAN 0 to HW filter on device batadv0
[  214.695423][   T89] tipc: Left network mode
[  214.808256][T10213] veth0_vlan: entered promiscuous mode
[  214.822909][T10213] veth1_vlan: entered promiscuous mode
[  214.882462][T10213] veth0_macvtap: entered promiscuous mode
[  214.896753][T10213] veth1_macvtap: entered promiscuous mode
[  214.933593][T10213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.938846][T10213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.943143][T10213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.949072][T10213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.963310][T10213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.968174][T10213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.972760][T10213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.978340][T10213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.982603][T10213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.986956][T10213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.992362][T10213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.997035][T10213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.002273][T10213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.007080][T10213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.021315][T10213] batman_adv: batadv0: Interface activated: batadv_slave_0
[  215.036403][T10213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.043341][T10213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.068146][T10213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.074958][T10213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.079710][T10213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.086485][T10213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.094935][T10213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.100418][T10213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.104882][T10213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.110803][T10213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.116257][T10213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.122076][T10213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.126654][T10213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.132844][T10213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.142895][T10213] batman_adv: batadv0: Interface activated: batadv_slave_1
[  215.209975][T10213] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  215.214022][T10213] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  215.237656][T10213] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  215.241600][T10213] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  215.564294][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  215.571332][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.618806][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  215.622322][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.702037][T10458] loop2: detected capacity change from 0 to 40427
[  215.706989][T10458] F2FS-fs (loop2): Invalid log blocks per segment (4278190089)
[  215.716898][T10458] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  215.732965][T10458] F2FS-fs (loop2): invalid crc value
[  215.750192][T10458] F2FS-fs (loop2): Found nat_bits in checkpoint
[  215.824055][T10458] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  215.827179][T10458] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  215.854992][T10458] F2FS-fs (loop2): Corrupted max_depth of 3: 8454145
[  215.905711][T10458] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  215.963361][T10475] loop1: detected capacity change from 0 to 4096
[  215.971186][T10475] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512).
[  216.049691][T10475] ntfs3: loop1: Failed to initialize $Extend/$ObjId.
[  216.202167][   T89] hsr_slave_0: left promiscuous mode
[  216.208129][   T89] hsr_slave_1: left promiscuous mode
[  216.216068][   T89] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  216.220214][   T89] batman_adv: batadv0: Removing interface: batadv_slave_0
[  216.228645][   T89] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  216.231901][   T89] batman_adv: batadv0: Removing interface: batadv_slave_1
[  216.285759][   T89] hsr_slave_0: left promiscuous mode
[  216.302511][T10484] loop1: detected capacity change from 0 to 512
[  216.306950][   T89] hsr_slave_1: left promiscuous mode
[  216.312598][   T89] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  216.315899][   T89] batman_adv: batadv0: Removing interface: batadv_slave_0
[  216.318953][T10484] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  216.330715][   T89] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  216.338241][   T89] batman_adv: batadv0: Removing interface: batadv_slave_1
[  216.339885][T10484] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  216.360236][   T89] hsr_slave_0: left promiscuous mode
[  216.366835][   T89] hsr_slave_1: left promiscuous mode
[  216.369855][T10484] EXT4-fs (loop1): 1 truncate cleaned up
[  216.374100][   T89] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  216.376864][   T89] batman_adv: batadv0: Removing interface: batadv_slave_0
[  216.378404][T10484] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  216.385531][   T89] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  216.389564][   T89] batman_adv: batadv0: Removing interface: batadv_slave_1
[  216.536441][T10213] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.583613][   T89] veth1_macvtap: left promiscuous mode
[  216.585951][   T89] veth0_macvtap: left promiscuous mode
[  216.588410][   T89] veth1_vlan: left promiscuous mode
[  216.590901][   T89] veth0_vlan: left promiscuous mode
[  216.598019][   T89] veth1_macvtap: left promiscuous mode
[  216.600673][   T89] veth0_macvtap: left promiscuous mode
[  216.603305][   T89] veth1_vlan: left promiscuous mode
[  216.605680][   T89] veth0_vlan: left promiscuous mode
[  216.630283][   T89] veth1_macvtap: left promiscuous mode
[  216.633050][   T89] veth0_macvtap: left promiscuous mode
[  216.635964][   T89] veth1_vlan: left promiscuous mode
[  216.640312][   T89] veth0_vlan: left promiscuous mode
[  216.932923][T10498] loop2: detected capacity change from 0 to 40427
[  216.954208][T10498] F2FS-fs (loop2): Invalid log blocks per segment (4278190089)
[  216.958233][T10498] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  216.980216][T10498] F2FS-fs (loop2): invalid crc value
[  216.987698][T10498] F2FS-fs (loop2): Found nat_bits in checkpoint
[  217.047897][T10498] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  217.051089][T10498] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  217.127624][T10498] F2FS-fs (loop2): Corrupted max_depth of 3: 8454145
[  217.156018][T10498] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  218.743605][   T89] team0 (unregistering): Port device team_slave_1 removed
[  218.938573][   T89] team0 (unregistering): Port device team_slave_0 removed
[  218.982134][T10525] loop3: detected capacity change from 0 to 16
[  219.012260][T10525] erofs: (device loop3): mounted with root inode @ nid 36.
[  221.221492][   T89] team0 (unregistering): Port device team_slave_1 removed
[  221.374709][   T89] team0 (unregistering): Port device team_slave_0 removed
[  222.403248][T10531] loop3: detected capacity change from 0 to 32768
[  222.407675][T10531] btrfs: Deprecated parameter 'usebackuproot'
[  222.410409][T10531] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  222.415945][T10531] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1903 (10531)
[  222.437351][T10531] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  222.441963][T10531] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm
[  222.446355][T10531] BTRFS info (device loop3): disk space caching is enabled
[  222.580887][T10531] BTRFS info (device loop3): rebuilding free space tree
[  222.611330][T10531] BTRFS info (device loop3): disabling free space tree
[  222.614377][T10531] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  222.618245][T10531] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  222.678102][T10017] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  223.806554][   T89] team0 (unregistering): Port device team_slave_1 removed
[  223.966613][   T89] team0 (unregistering): Port device team_slave_0 removed
[  224.935521][T10558] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  224.938827][T10558] IPv6: NLM_F_CREATE should be set when creating new route
[  224.941531][T10558] IPv6: NLM_F_CREATE should be set when creating new route
[  225.010146][T10570] loop3: detected capacity change from 0 to 16
[  225.032271][T10570] erofs: (device loop3): mounted with root inode @ nid 36.
[  225.421684][T10593] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  225.424263][T10593] IPv6: NLM_F_CREATE should be set when creating new route
[  225.426781][T10593] IPv6: NLM_F_CREATE should be set when creating new route
[  225.784701][T10595] loop2: detected capacity change from 0 to 32768
[  225.862188][T10595] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  225.889883][T10595] XFS (loop2): Ending clean mount
[  226.135295][T10608] loop1: detected capacity change from 0 to 32768
[  226.173742][T10608] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  226.184496][T10150] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  226.240363][T10608] XFS (loop1): Ending clean mount
[  226.336878][T10213] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  226.833791][T10637] loop1: detected capacity change from 0 to 32768
[  226.839741][T10637] btrfs: Deprecated parameter 'usebackuproot'
[  226.842264][T10637] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  226.848183][T10637] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1932 (10637)
[  226.862066][T10637] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  226.866023][T10637] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm
[  226.877332][T10637] BTRFS info (device loop1): disk space caching is enabled
[  226.955391][T10637] BTRFS info (device loop1): rebuilding free space tree
[  227.011845][T10637] BTRFS info (device loop1): disabling free space tree
[  227.015019][T10637] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  227.028197][T10637] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  227.095469][T10213] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  227.180876][T10669] loop2: detected capacity change from 0 to 164
[  227.188613][T10671] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  227.202149][T10671] fuse: Bad value for 'fd'
[  227.268687][ T5210] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  227.276008][ T5210] Bluetooth: hci0: Injecting HCI hardware error event
[  227.289172][ T5203] Bluetooth: hci0: hardware error 0x00
[  227.564925][T10675] loop1: detected capacity change from 0 to 32768
[  227.576666][T10675] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1937 (10675)
[  227.595815][T10675] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  227.600746][T10675] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  227.604787][T10675] BTRFS info (device loop1): using free-space-tree
[  227.696621][T10675] BTRFS info (device loop1): rebuilding free space tree
[  227.712893][T10675] BTRFS info (device loop1): checking UUID tree
[  227.755727][   T39] audit: type=1326 audit(1719401993.750:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10682 comm="syz.2.1945" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73e3579 code=0x0
[  227.843771][T10213] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  228.584644][T10712] loop1: detected capacity change from 0 to 32768
[  228.605571][T10712] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1949 (10712)
[  228.646038][T10712] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  228.661928][T10712] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm
[  228.665248][T10712] BTRFS info (device loop1): using free-space-tree
[  228.854385][T10745] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  228.953411][T10755] loop3: detected capacity change from 0 to 16
[  228.969771][T10755] erofs: (device loop3): mounted with root inode @ nid 36.
[  228.978553][T10712] BTRFS info (device loop1): setting incompat feature flag for SIMPLE_QUOTA (0x10000)
[  229.061497][T10213] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  229.074241][T10741] loop2: detected capacity change from 0 to 32768
[  229.091730][T10741] BTRFS: device /dev/loop2 (7:2) using temp-fsid 86962988-fdce-405f-b21e-cb13d7ee8d15
[  229.096619][T10741] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1952 (10741)
[  229.127766][T10741] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  229.133156][T10741] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm
[  229.136688][T10741] BTRFS info (device loop2): using free-space-tree
[  229.315284][T10724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1952'.
[  229.371182][T10150] BTRFS info (device loop2): last unmount of filesystem 86962988-fdce-405f-b21e-cb13d7ee8d15
[  229.433477][ T5203] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  229.507499][ T5203] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  229.511194][ T5203] Bluetooth: hci1: Injecting HCI hardware error event
[  229.515246][ T5203] Bluetooth: hci1: hardware error 0x00
[  231.588085][ T5203] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  233.708233][T10780] unknown channel width for channel at 909000KHz?
[  233.811015][T10795] loop2: detected capacity change from 0 to 16
[  233.822755][T10795] erofs: (device loop2): mounted with root inode @ nid 36.
[  234.078557][T10804] loop1: detected capacity change from 0 to 32768
[  234.095815][T10804] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  234.107337][   T39] audit: type=1800 audit(1719402000.100:372): pid=10801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1972" name="file2" dev="sda1" ino=1997 res=0 errno=0
[  234.116919][   T39] audit: type=1804 audit(1719402000.110:373): pid=10801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1972" name="/syzkaller.vEI2pm/594/bus" dev="sda1" ino=1998 res=1 errno=0
[  234.145812][T10799] loop3: detected capacity change from 0 to 32768
[  234.154254][T10799] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1971 (10799)
[  234.174293][T10799] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  234.183945][T10799] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm
[  234.201029][T10799] BTRFS info (device loop3): using free-space-tree
[  234.201101][T10804] XFS (loop1): Ending clean mount
[  234.247887][ T5262] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  234.288590][T10213] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  234.302170][T10836] unknown channel width for channel at 909000KHz?
[  234.370872][T10799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1971'.
[  234.461850][T10017] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  234.467619][ T5262] usb 7-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad
[  234.471516][ T5262] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.480661][ T5262] usb 7-1: config 0 descriptor??
[  234.722858][ T5262] snd-usb-hiface 7-1:0.0: probe with driver snd-usb-hiface failed with error -22
[  234.749407][T10858] loop3: detected capacity change from 0 to 164
[  234.931948][ T5257] usb 7-1: USB disconnect, device number 5
[  235.068398][T10860] loop1: detected capacity change from 0 to 32768
[  235.090281][T10860] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  235.116539][   T39] audit: type=1326 audit(1719402001.110:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10877 comm="syz.3.1996" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x0
[  235.157753][T10860] XFS (loop1): Ending clean mount
[  235.253754][T10213] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  235.699264][T10897] loop2: detected capacity change from 0 to 164
[  235.714026][T10894] loop1: detected capacity change from 0 to 32768
[  235.717913][T10894] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1997 (10894)
[  235.729411][T10894] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  235.732848][T10894] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  235.735838][T10894] BTRFS info (device loop1): using free-space-tree
[  236.118553][T10923] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  236.245826][T10213] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  236.250659][T10930] Bluetooth: MGMT ver 1.22
[  236.508518][T10932] loop2: detected capacity change from 0 to 32768
[  236.513401][T10932] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2009 (10932)
[  236.540338][T10932] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  236.544865][T10932] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm
[  236.556354][T10932] BTRFS info (device loop2): using free-space-tree
[  236.671309][T10932] BTRFS info (device loop2): setting incompat feature flag for SIMPLE_QUOTA (0x10000)
[  236.765279][T10955] xt_CT: You must specify a L4 protocol and not use inversions on it
[  236.810174][T10150] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  236.925293][   T39] audit: type=1326 audit(1719402002.920:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10956 comm="syz.0.2012" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf740c579 code=0x0
[  236.944281][T10962] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  237.327799][ T5257] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  237.382230][T10970] loop2: detected capacity change from 0 to 32768
[  237.388744][T10970] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2017 (10970)
[  237.401104][T10970] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  237.404874][T10970] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  237.408029][T10970] BTRFS info (device loop2): using free-space-tree
[  237.519333][ T5257] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  237.523534][ T5257] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  237.537777][ T5257] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  237.541261][ T5257] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.559493][ T5257] usb 6-1: config 0 descriptor??
[  237.620845][T10150] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  237.888598][T10992] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2020'.
[  238.066992][T11002] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  238.202757][T11010] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2029'.
[  238.354493][   T39] audit: type=1326 audit(1719402004.350:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11007 comm="syz.0.2028" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf740c579 code=0x0
[  238.372703][ T5257] usbhid 6-1:0.0: can't add hid device: -71
[  238.375117][ T5257] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  238.400154][ T5257] usb 6-1: USB disconnect, device number 2
[  238.464106][T11015] loop1: detected capacity change from 0 to 16
[  238.477737][T11015] erofs: (device loop1): mounted with root inode @ nid 36.
[  238.515964][T11012] loop2: detected capacity change from 0 to 32768
[  238.997429][ T5257] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  239.089038][T11024] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  239.207042][T11032] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2038'.
[  239.210377][ T5257] usb 6-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad
[  239.215390][ T5257] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.220742][ T5257] usb 6-1: config 0 descriptor??
[  239.451933][ T5257] snd-usb-hiface 6-1:0.0: probe with driver snd-usb-hiface failed with error -22
[  239.512601][T11053] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2048'.
[  239.666432][  T815] usb 6-1: USB disconnect, device number 3
[  239.780510][T11062] fuse: Bad value for 'fd'
[  239.907551][ T5262] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  240.099635][ T5262] usb 7-1: Using ep0 maxpacket: 8
[  240.104898][ T5262] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[  240.108488][ T5262] usb 7-1: config 179 has no interface number 0
[  240.110797][ T5262] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  240.114874][ T5262] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  240.118386][ T5262] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  240.122649][ T5262] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  240.126269][ T5262] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  240.131269][ T5262] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  240.134896][ T5262] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.139904][T11058] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  240.145242][ T5262] xpad 7-1:179.65: probe with driver xpad failed with error -5
[  240.306869][T11079] loop1: detected capacity change from 0 to 1024
[  240.312358][T11079] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  240.319141][T11079] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  240.323517][T11079] EXT4-fs (loop1): orphan cleanup on readonly fs
[  240.326500][T11079] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #11: comm syz.1.2060: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  240.337389][T11079] EXT4-fs (loop1): Remounting filesystem read-only
[  240.341334][T11079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  240.368590][T10213] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.398794][ T5242] usb 7-1: USB disconnect, device number 6
[  240.740892][T11087] loop1: detected capacity change from 0 to 32768
[  240.745512][T11087] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2063 (11087)
[  240.753995][T11087] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  240.758258][T11087] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  240.762055][T11087] BTRFS info (device loop1): using free-space-tree
[  241.051452][T10213] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  241.212280][T11112] loop2: detected capacity change from 0 to 256
[  241.454103][T11119] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  241.750054][   T40] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.867592][ T5257] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  241.867761][   T40] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.966506][   T40] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.990597][ T5210] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  242.000092][ T5210] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  242.006940][ T5210] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  242.012851][ T5210] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  242.016551][ T5210] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  242.019945][ T5210] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  242.058525][ T5257] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  242.064491][   T40] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.066195][ T5257] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  242.084291][ T5257] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  242.089204][ T5257] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.094618][ T5257] usb 6-1: config 0 descriptor??
[  242.293797][T11130] chnl_net:caif_netlink_parms(): no params data found
[  242.312262][   T40] bridge_slave_1: left allmulticast mode
[  242.315080][   T40] bridge_slave_1: left promiscuous mode
[  242.317896][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.326004][   T40] bridge_slave_0: left allmulticast mode
[  242.332534][   T40] bridge_slave_0: left promiscuous mode
[  242.339007][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.407299][   T39] audit: type=1804 audit(1719402008.400:377): pid=11137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2078" name="/syzkaller.vEI2pm/642/bus" dev="sda1" ino=1997 res=1 errno=0
[  242.775371][T11142] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  243.014349][ T5257] usbhid 6-1:0.0: can't add hid device: -71
[  243.016508][ T5257] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  243.023448][   T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  243.024117][ T5257] usb 6-1: USB disconnect, device number 4
[  243.043209][   T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  243.052991][   T40] bond0 (unregistering): Released all slaves
[  243.283540][T11130] bridge0: port 1(bridge_slave_0) entered blocking state
[  243.286820][T11130] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.316359][T11130] bridge_slave_0: entered allmulticast mode
[  243.322458][T11130] bridge_slave_0: entered promiscuous mode
[  243.370008][T11130] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.373451][T11130] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.376754][T11130] bridge_slave_1: entered allmulticast mode
[  243.388658][T11130] bridge_slave_1: entered promiscuous mode
[  243.521267][T11130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  243.564901][   T40] hsr_slave_0: left promiscuous mode
[  243.568591][   T40] hsr_slave_1: left promiscuous mode
[  243.574188][   T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  243.583227][   T40] batman_adv: batadv0: Removing interface: batadv_slave_0
[  243.588547][   T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  243.592828][   T40] batman_adv: batadv0: Removing interface: batadv_slave_1
[  243.608461][T11165] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2085'.
[  243.645881][   T40] veth1_macvtap: left promiscuous mode
[  243.648807][   T40] veth0_macvtap: left promiscuous mode
[  243.651362][   T40] veth1_vlan: left promiscuous mode
[  243.653520][   T40] veth0_vlan: left promiscuous mode
[  243.772158][T11169] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  243.821431][T11174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2090'.
[  243.904983][T11180] fuse: Bad value for 'fd'
[  244.076665][ T5203] Bluetooth: hci1: command tx timeout
[  244.087536][T11184] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2094'.
[  244.580444][T11193] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  244.624811][T11195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2099'.
[  245.206894][T11205] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2103'.
[  245.375462][T11211] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  245.593305][   T40] team0 (unregistering): Port device team_slave_1 removed
[  245.920545][   T40] team0 (unregistering): Port device team_slave_0 removed
[  246.152360][ T5203] Bluetooth: hci1: command tx timeout
[  247.033702][T11225] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2112'.
[  247.268687][T11232] loop3: detected capacity change from 0 to 256
[  247.272778][T11232] FAT-fs (loop3): Unrecognized mount option "nonë}umtail=0" or missing value
[  247.341461][ T5243] blk_print_req_error: 7 callbacks suppressed
[  247.341482][ T5243] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  247.379454][T11130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  247.465397][T11219] netlink: 'syz.0.2109': attribute type 3 has an invalid length.
[  247.474364][T11219] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2109'.
[  247.488302][T11130] team0: Port device team_slave_0 added
[  247.496361][T11130] team0: Port device team_slave_1 added
[  247.549068][T11130] batman_adv: batadv0: Adding interface: batadv_slave_0
[  247.559904][T11130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  247.581361][T11130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  247.597043][T11130] batman_adv: batadv0: Adding interface: batadv_slave_1
[  247.606530][T11130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  247.627289][T11130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  247.801180][T11130] hsr_slave_0: entered promiscuous mode
[  247.816540][T11130] hsr_slave_1: entered promiscuous mode
[  247.927714][   T39] audit: type=1804 audit(1719402013.930:378): pid=11240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2117" name="/syzkaller.vEI2pm/662/bus" dev="sda1" ino=1997 res=1 errno=0
[  248.117855][T11254] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2121'.
[  248.227676][ T5203] Bluetooth: hci1: command tx timeout
[  248.436171][T11257] loop1: detected capacity change from 0 to 32768
[  248.604064][T11257] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=zstd,nojournal_transaction_names
[  248.618649][T11257] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  248.664818][T11257] bcachefs (loop1): alloc_read... done
[  248.675269][T11257] bcachefs (loop1): stripes_read... done
[  248.683429][T11257] bcachefs (loop1): snapshots_read... done
[  248.693595][T11257] bcachefs (loop1): journal_replay... done
[  248.696272][T11257] bcachefs (loop1): resume_logged_ops... done
[  248.719073][T11257] bcachefs (loop1): going read-write
[  248.767211][T11257] bcachefs (loop1): done starting filesystem
[  248.822592][T11130] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  248.836037][T11130] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  248.862774][T11130] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  248.868264][T11287] fuse: Bad value for 'fd'
[  248.886689][T11130] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  249.030570][T11257] syz.1.2123 (11257) used greatest stack depth: 19464 bytes left
[  249.034802][T11130] 8021q: adding VLAN 0 to HW filter on device bond0
[  249.051939][T11130] 8021q: adding VLAN 0 to HW filter on device team0
[  249.071459][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.074738][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state
[  249.080637][T10213] bcachefs (loop1): shutting down
[  249.081441][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.082656][T10213] bcachefs (loop1): going read-only
[  249.085866][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state
[  249.102748][T10213] bcachefs (loop1): finished waiting for writes to stop
[  249.131635][T11130] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  249.137977][T10213] bcachefs (loop1): flushing journal and stopping allocators, journal seq 13
[  249.177069][T10213] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 15
[  249.181651][T10213] bcachefs (loop1): shutdown complete, journal seq 16
[  249.185918][T10213] bcachefs (loop1): marking filesystem clean
[  249.240368][T10213] bcachefs (loop1): shutdown complete
[  249.402602][T11130] 8021q: adding VLAN 0 to HW filter on device batadv0
[  249.463869][T11130] veth0_vlan: entered promiscuous mode
[  249.475258][T11130] veth1_vlan: entered promiscuous mode
[  249.550549][T11130] veth0_macvtap: entered promiscuous mode
[  249.560967][T11130] veth1_macvtap: entered promiscuous mode
[  249.600584][T11130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  249.605218][T11130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.607343][   T39] audit: type=1804 audit(1719402015.600:379): pid=11299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2130" name="/syzkaller.vEI2pm/669/bus" dev="sda1" ino=1994 res=1 errno=0
[  249.619769][T11130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  249.626237][T11130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.632525][T11130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  249.637567][T11130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.644555][T11130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  249.652123][T11130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.666899][T11130] batman_adv: batadv0: Interface activated: batadv_slave_0
[  249.679895][T11130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.684990][T11130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.695119][T11130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.700673][T11130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.704228][T11130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.708856][T11130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.712795][T11130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.717067][T11130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.723976][T11130] batman_adv: batadv0: Interface activated: batadv_slave_1
[  249.735719][T11130] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  249.739739][T11130] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  249.743501][T11130] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  249.747010][T11130] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  249.768523][    C3] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  249.876266][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  249.888066][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  249.953911][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  249.967364][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  250.047067][T11324] loop1: detected capacity change from 0 to 256
[  250.068231][T11324] FAT-fs (loop1): Unrecognized mount option "nonë}umtail=0" or missing value
[  250.121083][T11329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2132'.
[  250.127705][ T5392] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  250.275172][T11337] batadv_slave_1: entered promiscuous mode
[  250.281521][T11336] batadv_slave_1: left promiscuous mode
[  250.307408][ T5203] Bluetooth: hci1: command tx timeout
[  250.391297][   T25] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  250.417437][T11335] loop1: detected capacity change from 0 to 32768
[  250.491769][T11335] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=zstd,nojournal_transaction_names
[  250.498109][T11335] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  250.520054][T11335] bcachefs (loop1): alloc_read... done
[  250.522101][T11335] bcachefs (loop1): stripes_read... done
[  250.524105][T11335] bcachefs (loop1): snapshots_read... done
[  250.527847][T11335] bcachefs (loop1): journal_replay... done
[  250.530190][T11335] bcachefs (loop1): resume_logged_ops... done
[  250.533014][T11335] bcachefs (loop1): going read-write
[  250.542147][T11335] bcachefs (loop1): done starting filesystem
[  250.587428][   T25] usb 7-1: Using ep0 maxpacket: 8
[  250.594565][   T25] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[  250.606972][   T25] usb 7-1: config 179 has no interface number 0
[  250.618818][   T25] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  250.623429][   T25] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  250.647537][   T25] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  250.652389][   T25] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  250.668370][   T25] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  250.673940][   T25] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  250.678672][   T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.686197][T10213] bcachefs (loop1): shutting down
[  250.699025][T10213] bcachefs (loop1): going read-only
[  250.701225][T10213] bcachefs (loop1): finished waiting for writes to stop
[  250.712913][T10213] bcachefs (loop1): flushing journal and stopping allocators, journal seq 11
[  250.713397][T11327] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  250.733113][T10213] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 13
[  250.737610][   T25] xpad 7-1:179.65: probe with driver xpad failed with error -5
[  250.743211][T10213] bcachefs (loop1): shutdown complete, journal seq 14
[  250.743881][T10213] bcachefs (loop1): marking filesystem clean
[  250.771293][T10213] bcachefs (loop1): shutdown complete
[  250.798549][T11356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2142'.
[  250.963507][ T5248] usb 7-1: USB disconnect, device number 7
[  251.025598][T11364] loop1: detected capacity change from 0 to 256
[  251.076442][T11368] batadv_slave_1: entered promiscuous mode
[  251.096659][T11367] batadv_slave_1: left promiscuous mode
[  251.427523][   T25] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  251.570983][T11376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2152'.
[  251.590759][T11378] loop2: detected capacity change from 0 to 1024
[  251.617557][   T25] usb 6-1: Using ep0 maxpacket: 32
[  251.622387][   T25] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  251.625994][   T25] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  251.631033][   T25] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  251.634582][   T25] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  251.637652][   T25] usb 6-1: Product: syz
[  251.639136][   T25] usb 6-1: Manufacturer: syz
[  251.652405][   T25] hub 6-1:4.0: USB hub found
[  251.671202][ T1095] hfsplus: b-tree write err: -5, ino 4
[  251.751311][T11387] batadv_slave_1: entered promiscuous mode
[  251.755042][T11386] batadv_slave_1: left promiscuous mode
[  251.862530][   T25] hub 6-1:4.0: 2 ports detected
[  252.064046][   T65] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  252.071932][   T65] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  252.076131][   T65] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  252.082429][   T65] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  252.086385][T11397] loop2: detected capacity change from 0 to 32768
[  252.087372][   T65] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  252.094562][T11397] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section clean: wrong size (got 8 should be 24)
[  252.094562][T11397] clean (size 8):
[  252.094562][T11397] flags:          0
[  252.094562][T11397] journal_seq:    0
[  252.094562][T11397] 
[  252.098145][   T65] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  252.147321][ T5392] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  252.306829][T11372] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  252.309640][T11405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2163'.
[  252.312067][T11372] overlayfs: failed to set xattr on upper
[  252.316651][T11372] overlayfs: ...falling back to redirect_dir=nofollow.
[  252.320695][T11372] overlayfs: ...falling back to index=off.
[  252.323298][T11372] overlayfs: ...falling back to uuid=null.
[  252.329733][T11399] chnl_net:caif_netlink_parms(): no params data found
[  252.346866][T11372] evm: overlay not supported
[  252.374155][T11407] loop2: detected capacity change from 0 to 1024
[  252.503644][T11399] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.506756][T11399] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.515075][T11399] bridge_slave_0: entered allmulticast mode
[  252.519437][T11399] bridge_slave_0: entered promiscuous mode
[  252.524872][T11399] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.533103][T11399] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.536336][T11399] bridge_slave_1: entered allmulticast mode
[  252.542198][T11399] bridge_slave_1: entered promiscuous mode
[  252.600221][ T1095] hfsplus: b-tree write err: -5, ino 4
[  252.672999][T11399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  252.693522][T11399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  252.730002][T11413] loop2: detected capacity change from 0 to 4096
[  252.745316][T11413] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  252.787104][T11399] team0: Port device team_slave_0 added
[  252.796168][T11399] team0: Port device team_slave_1 added
[  252.832745][T11413] ntfs3: loop2: failed to convert "076c" to cp932
[  252.853495][T11399] batman_adv: batadv0: Adding interface: batadv_slave_0
[  252.856132][T11399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  252.865824][T11399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  252.870987][T11416] batadv_slave_1: entered promiscuous mode
[  252.875391][T11399] batman_adv: batadv0: Adding interface: batadv_slave_1
[  252.879422][T11399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  252.889204][T11399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  252.896270][T11415] batadv_slave_1: left promiscuous mode
[  253.001914][T11399] hsr_slave_0: entered promiscuous mode
[  253.005346][T11399] hsr_slave_1: entered promiscuous mode
[  253.008854][T11399] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  253.011428][T11399] Cannot create hsr debugfs directory
[  253.059252][T11425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2172'.
[  253.206641][   T25] hub 6-1:4.0: activate --> -90
[  253.234894][T11429] loop2: detected capacity change from 0 to 1024
[  253.305836][T11399] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.407918][   T40] hfsplus: b-tree write err: -5, ino 4
[  253.450772][T11399] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.461028][T11433] batadv_slave_1: entered promiscuous mode
[  253.464418][T11432] batadv_slave_1: left promiscuous mode
[  253.531709][T11437] loop2: detected capacity change from 0 to 4096
[  253.537218][T11437] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  253.570323][T11399] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.607175][T11437] ntfs3: loop2: failed to convert "076c" to cp932
[  253.621013][ T5248] usb 6-1: USB disconnect, device number 5
[  253.699128][T11399] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.760854][T11446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2181'.
[  253.927046][T11399] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  253.954640][T11399] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  253.980880][T11399] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  254.001357][T11399] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  254.106146][T11399] 8021q: adding VLAN 0 to HW filter on device bond0
[  254.136298][T11399] 8021q: adding VLAN 0 to HW filter on device team0
[  254.146815][   T25] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.150679][   T25] bridge0: port 1(bridge_slave_0) entered forwarding state
[  254.151992][ T5203] Bluetooth: hci0: command tx timeout
[  254.178831][ T5248] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.181873][ T5248] bridge0: port 2(bridge_slave_1) entered forwarding state
[  254.187141][T11452] loop2: detected capacity change from 0 to 32768
[  254.196834][T11452] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section clean: wrong size (got 8 should be 24)
[  254.196834][T11452] clean (size 8):
[  254.196834][T11452] flags:          0
[  254.196834][T11452] journal_seq:    0
[  254.196834][T11452] 
[  254.229038][T11399] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  254.269721][T11462] loop1: detected capacity change from 0 to 4096
[  254.270776][ T5243] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  254.295231][T11462] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  254.366801][T11462] ntfs3: loop1: failed to convert "076c" to cp932
[  254.447218][T11399] 8021q: adding VLAN 0 to HW filter on device batadv0
[  254.534018][T11399] veth0_vlan: entered promiscuous mode
[  254.554096][T11399] veth1_vlan: entered promiscuous mode
[  254.595132][T11399] veth0_macvtap: entered promiscuous mode
[  254.603130][T11399] veth1_macvtap: entered promiscuous mode
[  254.641863][T11399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  254.648086][T11399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.653190][T11399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  254.658390][T11399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.663141][T11399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  254.667930][T11399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.672114][T11399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  254.676397][T11399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.681296][T11399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  254.686205][T11399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.692834][T11399] batman_adv: batadv0: Interface activated: batadv_slave_0
[  254.707190][T11399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.720049][T11399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.729815][T11399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.734261][T11399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.738648][T11399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.743181][T11399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.749713][T11399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.755451][T11399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.760566][T11399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.765170][T11399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.771748][T11399] batman_adv: batadv0: Interface activated: batadv_slave_1
[  254.787073][T11399] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  254.793265][T11399] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  254.797047][T11399] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  254.802092][T11399] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  254.882482][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.885267][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.920863][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.923626][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  255.027467][ T5257] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  255.044466][T11487] loop1: detected capacity change from 0 to 32768
[  255.054951][T11487] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section clean: wrong size (got 8 should be 24)
[  255.054951][T11487] clean (size 8):
[  255.054951][T11487] flags:          0
[  255.054951][T11487] journal_seq:    0
[  255.054951][T11487] 
[  255.211277][T11496] loop1: detected capacity change from 0 to 1024
[  255.215417][T11496] EXT4-fs: Ignoring removed orlov option
[  255.223186][T11496] EXT4-fs: Ignoring removed nomblk_io_submit option
[  255.227305][ T5257] usb 7-1: Using ep0 maxpacket: 32
[  255.231541][ T5257] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  255.236222][ T5257] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  255.249605][ T5257] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  255.253407][ T5257] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  255.256685][ T5257] usb 7-1: Product: syz
[  255.259415][ T5257] usb 7-1: Manufacturer: syz
[  255.266395][ T5257] hub 7-1:4.0: USB hub found
[  255.275899][T11491] loop3: detected capacity change from 0 to 32768
[  255.297156][T11496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  255.341796][T10213] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.402809][T11491] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=zstd,nojournal_transaction_names
[  255.427397][T11491] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  255.451291][T11491] bcachefs (loop3): alloc_read... done
[  255.454275][T11491] bcachefs (loop3): stripes_read... done
[  255.464730][T11491] bcachefs (loop3): snapshots_read... done
[  255.474654][T11491] bcachefs (loop3): journal_replay... done
[  255.477588][T11491] bcachefs (loop3): resume_logged_ops... done
[  255.486613][T11491] bcachefs (loop3): going read-write
[  255.492926][T11491] bcachefs (loop3): done starting filesystem
[  255.500178][ T5257] hub 7-1:4.0: 2 ports detected
[  255.502211][T11517] bridge0: port 3(syz_tun) entered blocking state
[  255.515808][T11517] bridge0: port 3(syz_tun) entered disabled state
[  255.521918][T11517] syz_tun: entered allmulticast mode
[  255.535462][T11517] syz_tun: entered promiscuous mode
[  255.642823][T11491] syz.3.2162 (11491) used greatest stack depth: 19136 bytes left
[  255.679864][T11399] bcachefs (loop3): shutting down
[  255.682074][T11399] bcachefs (loop3): going read-only
[  255.684302][T11399] bcachefs (loop3): finished waiting for writes to stop
[  255.693244][T11399] bcachefs (loop3): flushing journal and stopping allocators, journal seq 12
[  255.718357][T11399] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 14
[  255.740015][T11399] bcachefs (loop3): shutdown complete, journal seq 15
[  255.743190][T11399] bcachefs (loop3): marking filesystem clean
[  255.793600][T11399] bcachefs (loop3): shutdown complete
[  255.912594][ T1354] ieee802154 phy0 wpan0: encryption failed: -22
[  255.915452][ T1354] ieee802154 phy1 wpan1: encryption failed: -22
[  255.932737][T11483] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  255.935215][T11483] overlayfs: failed to set xattr on upper
[  255.937208][T11483] overlayfs: ...falling back to redirect_dir=nofollow.
[  255.956953][T11483] overlayfs: ...falling back to index=off.
[  255.959892][T11483] overlayfs: ...falling back to uuid=null.
[  256.186750][T11541] --map-set only usable from mangle table
[  256.237365][   T65] Bluetooth: hci0: command tx timeout
[  256.284072][T11545] loop3: detected capacity change from 0 to 1024
[  256.349693][T11545] EXT4-fs: Ignoring removed orlov option
[  256.351888][T11545] EXT4-fs: Ignoring removed nomblk_io_submit option
[  256.363512][T11550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2221'.
[  256.418905][T11545] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  256.502958][T11399] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.852381][ T5257] hub 7-1:4.0: activate --> -90
[  256.950233][T11568] --map-set only usable from mangle table
[  257.151891][T11564] loop3: detected capacity change from 0 to 32768
[  257.179877][T11564] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  257.190719][T11583] loop1: detected capacity change from 0 to 1024
[  257.195004][T11583] EXT4-fs: Ignoring removed orlov option
[  257.197565][T11583] EXT4-fs: Ignoring removed nomblk_io_submit option
[  257.228897][T11583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  257.267639][  T825] usb 7-1: USB disconnect, device number 8
[  257.296657][T11564] XFS (loop3): Ending clean mount
[  257.302707][T10213] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.343169][T11399] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  257.463763][T11599] Cannot find set identified by id 0 to match
[  257.586259][T11603] --map-set only usable from mangle table
[  257.880410][T11616] loop2: detected capacity change from 0 to 1024
[  257.886463][T11616] EXT4-fs: Ignoring removed orlov option
[  257.892748][T11616] EXT4-fs: Ignoring removed nomblk_io_submit option
[  257.909777][T11616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  257.956786][   T39] audit: type=1326 audit(1719402023.950:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11611 comm="syz.0.2243" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf740c579 code=0x0
[  258.002114][T11130] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.307606][   T65] Bluetooth: hci0: command tx timeout
[  258.350290][T11627] Cannot find set identified by id 0 to match
[  258.382476][T11622] loop3: detected capacity change from 0 to 32768
[  258.446432][T11622] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  258.601994][T11622] XFS (loop3): Ending clean mount
[  258.668220][T11399] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  258.751385][T11645] loop1: detected capacity change from 0 to 128
[  258.873907][T11645] syz.1.2253: attempt to access beyond end of device
[  258.873907][T11645] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128
[  258.918306][T11645] syz.1.2253: attempt to access beyond end of device
[  258.918306][T11645] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128
[  259.137367][   T58] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  259.357428][   T58] usb 7-1: Using ep0 maxpacket: 32
[  259.361803][   T58] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  259.365906][   T58] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  259.379694][   T58] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  259.383441][   T58] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  259.386443][   T58] usb 7-1: Product: syz
[  259.393849][   T58] usb 7-1: Manufacturer: syz
[  259.407007][   T58] hub 7-1:4.0: USB hub found
[  259.468710][T11664] loop1: detected capacity change from 0 to 32768
[  259.510229][T11664] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  259.626406][   T58] hub 7-1:4.0: 2 ports detected
[  259.649981][T11664] XFS (loop1): Ending clean mount
[  259.717844][T10213] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  259.750904][T11683] loop3: detected capacity change from 0 to 128
[  259.940987][T11683] syz.3.2266: attempt to access beyond end of device
[  259.940987][T11683] loop3: rw=2049, sector=145, nr_sectors = 608 limit=128
[  260.031495][T11683] syz.3.2266: attempt to access beyond end of device
[  260.031495][T11683] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128
[  260.082651][T11647] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  260.086128][T11647] overlayfs: failed to set xattr on upper
[  260.092613][T11647] overlayfs: ...falling back to redirect_dir=nofollow.
[  260.096684][T11647] overlayfs: ...falling back to index=off.
[  260.100989][T11647] overlayfs: ...falling back to uuid=null.
[  260.132861][T11688] loop1: detected capacity change from 0 to 4096
[  260.139901][T11688] ntfs3: loop1: Failed to load $Volume (-22).
[  260.186488][T11690] Cannot find set identified by id 0 to match
[  260.388206][   T65] Bluetooth: hci0: command tx timeout
[  260.538016][T11709] loop1: detected capacity change from 0 to 128
[  260.675355][T11705] loop3: detected capacity change from 0 to 32768
[  260.733892][T11709] syz.1.2278: attempt to access beyond end of device
[  260.733892][T11709] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128
[  260.737167][T11705] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  260.814531][T11709] syz.1.2278: attempt to access beyond end of device
[  260.814531][T11709] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128
[  260.824537][T11705] XFS (loop3): Ending clean mount
[  260.881109][T11399] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  260.959709][   T58] hub 7-1:4.0: activate --> -90
[  261.211843][T11722] loop1: detected capacity change from 0 to 512
[  261.228772][T11722] EXT4-fs: Invalid want_extra_isize 5
[  261.360205][ T5392] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  261.380268][ T1139] usb 7-1: USB disconnect, device number 9
[  261.457951][T11726] loop3: detected capacity change from 0 to 4096
[  261.468998][T11726] ntfs3: loop3: Failed to load $Volume (-22).
[  261.533516][ T5243] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  262.174334][T11750] loop1: detected capacity change from 0 to 4096
[  262.183192][T11750] ntfs3: loop1: Failed to load $Volume (-22).
[  262.224820][ T5243] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  262.407547][T11760] loop2: detected capacity change from 0 to 8
[  262.448356][T11760] SQUASHFS error: zlib decompression failed, data probably corrupt
[  262.467598][T11760] SQUASHFS error: Failed to read block 0x9b: -5
[  262.469933][T11760] SQUASHFS error: Unable to read metadata cache entry [99]
[  262.472978][T11760] SQUASHFS error: Unable to read inode 0x127
[  262.556974][T11760] loop2: detected capacity change from 0 to 1024
[  262.567641][T11760] hfsplus: unable to parse mount options
[  262.612632][T11760] loop2: detected capacity change from 0 to 2048
[  262.675388][T11760] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  262.701004][T11760] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  262.724277][T11760] UDF-fs: unknown compression code (0)
[  262.765794][T11769] loop1: detected capacity change from 0 to 512
[  262.775410][T11769] EXT4-fs: Invalid want_extra_isize 5
[  262.883150][ T5243] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  264.015190][T11794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2311'.
[  264.089386][T11794] 8021q: adding VLAN 0 to HW filter on device batadv1
[  264.104241][T11794] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  264.126847][T11794] bond1 (unregistering): (slave batadv1): Releasing backup interface
[  264.153211][T11794] bond1 (unregistering): Released all slaves
[  264.674738][   T39] audit: type=1326 audit(1719402030.670:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11816 comm="syz.1.2321" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7488579 code=0x0
[  264.978894][T11828] bridge0: port 3(syz_tun) entered blocking state
[  264.981926][T11828] bridge0: port 3(syz_tun) entered disabled state
[  264.984888][T11828] syz_tun: entered allmulticast mode
[  264.995086][T11828] syz_tun: entered promiscuous mode
[  265.001169][T11828] bridge0: port 3(syz_tun) entered blocking state
[  265.004949][T11828] bridge0: port 3(syz_tun) entered forwarding state
[  265.468459][T11841] loop3: detected capacity change from 0 to 64
[  265.481919][T11839] loop2: detected capacity change from 0 to 8
[  265.526432][T11839] SQUASHFS error: zlib decompression failed, data probably corrupt
[  265.537850][T11839] SQUASHFS error: Failed to read block 0x9b: -5
[  265.540499][T11839] SQUASHFS error: Unable to read metadata cache entry [99]
[  265.557350][T11839] SQUASHFS error: Unable to read inode 0x127
[  265.581787][   T39] audit: type=1800 audit(1719402031.580:382): pid=11841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2330" name="file1" dev="loop3" ino=21 res=0 errno=0
[  265.711977][T11839] loop2: detected capacity change from 0 to 1024
[  265.731441][T11841] syz.3.2330: attempt to access beyond end of device
[  265.731441][T11841] loop3: rw=0, sector=163, nr_sectors = 1 limit=64
[  265.740331][T11839] hfsplus: unable to parse mount options
[  265.750859][T11841] buffer_io_error: 2 callbacks suppressed
[  265.750873][T11841] Buffer I/O error on dev loop3, logical block 163, async page read
[  265.757007][T11841] syz.3.2330: attempt to access beyond end of device
[  265.757007][T11841] loop3: rw=0, sector=164, nr_sectors = 1 limit=64
[  265.762601][T11841] Buffer I/O error on dev loop3, logical block 164, async page read
[  265.765828][T11841] syz.3.2330: attempt to access beyond end of device
[  265.765828][T11841] loop3: rw=0, sector=165, nr_sectors = 1 limit=64
[  265.771593][T11841] Buffer I/O error on dev loop3, logical block 165, async page read
[  265.775072][T11841] syz.3.2330: attempt to access beyond end of device
[  265.775072][T11841] loop3: rw=0, sector=166, nr_sectors = 1 limit=64
[  265.780818][T11841] Buffer I/O error on dev loop3, logical block 166, async page read
[  265.815903][ T5243] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  265.891651][T11839] loop2: detected capacity change from 0 to 2048
[  265.906746][T11839] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  265.927947][T11839] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  265.997360][T11839] UDF-fs: unknown compression code (0)
[  266.037435][T11855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2338'.
[  266.231275][T11859] 8021q: adding VLAN 0 to HW filter on device batadv1
[  266.236018][T11859] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  266.420303][T11861] bond1 (unregistering): (slave batadv1): Releasing backup interface
[  266.440676][T11861] bond1 (unregistering): Released all slaves
[  266.811998][T11865] xt_CT: You must specify a L4 protocol and not use inversions on it
[  266.976594][   T39] audit: type=1804 audit(1719402032.970:383): pid=11849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2335" name="/syzkaller.vEI2pm/754/file0" dev="sda1" ino=1981 res=1 errno=0
[  267.342938][   T39] audit: type=1326 audit(1719402033.340:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11868 comm="syz.0.2341" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf740c579 code=0x0
[  267.663357][   T39] audit: type=1326 audit(1719402033.660:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11876 comm="syz.1.2344" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7488579 code=0x0
[  267.719306][T11874] loop3: detected capacity change from 0 to 32768
[  267.814977][T11874] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,noshard_inode_numbers,noinodes_use_key_cache,gc_reserve_bytes=512 GiB,nojournal_transaction_names
[  267.823350][T11874] bcachefs (loop3): recovering from clean shutdown, journal seq 8
[  267.848680][T11874] bcachefs (loop3): alloc_read... done
[  267.851088][T11874] bcachefs (loop3): stripes_read... done
[  267.853739][T11874] bcachefs (loop3): snapshots_read... done
[  267.860281][T11874] bcachefs (loop3): journal_replay... done
[  267.863604][T11874] bcachefs (loop3): resume_logged_ops... done
[  267.866633][T11874] bcachefs (loop3): going read-write
[  267.872396][T11874] bcachefs (loop3): done starting filesystem
[  268.050099][T11399] bcachefs (loop3): shutting down
[  268.052567][T11399] bcachefs (loop3): going read-only
[  268.065188][T11399] bcachefs (loop3): finished waiting for writes to stop
[  268.083140][T11399] bcachefs (loop3): flushing journal and stopping allocators, journal seq 8
[  268.091735][T11399] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 8
[  268.110103][T11892] [U] 
[  268.119078][T11892] [U] 
[  268.120290][T11892] [U] 
[  268.121475][T11892] [U] 
[  268.121810][T11399] bcachefs (loop3): shutdown complete, journal seq 9
[  268.126391][T11399] bcachefs (loop3): marking filesystem clean
[  268.134383][T11892] [U] 
[  268.135560][T11892] [U] 
[  268.136666][T11892] [U] 
[  268.137810][T11892] [U] 
[  268.147514][T11892] [U] 
[  268.148736][T11892] [U] 
[  268.149899][T11892] [U] 
[  268.153731][T11891] [U] 
[  268.220332][T11399] bcachefs (loop3): shutdown complete
[  268.596662][T11903] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  268.599972][T11903] overlayfs: failed to set xattr on upper
[  268.603221][T11903] overlayfs: ...falling back to redirect_dir=nofollow.
[  268.607020][T11903] overlayfs: ...falling back to index=off.
[  268.610752][T11903] overlayfs: ...falling back to uuid=null.
[  268.795786][T11898] loop2: detected capacity change from 0 to 40427
[  268.807479][T11898] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  268.811177][T11898] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  268.821841][T11898] F2FS-fs (loop2): Found nat_bits in checkpoint
[  268.861488][ T1139] kernel write not supported for file /cpuinfo (pid: 1139 comm: kworker/1:2)
[  268.916177][T11898] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  268.950531][T11898] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  268.953707][T11898] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  269.014349][T11914] loop1: detected capacity change from 0 to 512
[  269.021448][T11914] EXT4-fs: Invalid want_extra_isize 5
[  269.078437][ T5243] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  269.086854][   T39] audit: type=1804 audit(1719402035.080:386): pid=11898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2350" name="/syzkaller.zBCk73/37/bus/file0" dev="loop2" ino=10 res=1 errno=0
[  269.170159][T11130] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[  269.175755][T11130] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[  269.191681][T11913] loop3: detected capacity change from 0 to 32768
[  269.201775][T11130] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[  269.205194][T11130] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[  269.211797][T11130] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[  269.215763][T11913] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2355 (11913)
[  269.221283][T11130] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[  269.224862][T11130] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[  269.283183][T11913] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  269.297929][T11913] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  269.301416][T11913] BTRFS info (device loop3): using free-space-tree
[  269.499572][T11913] BTRFS info (device loop3): checking UUID tree
[  269.638755][T11939] xt_CT: You must specify a L4 protocol and not use inversions on it
[  269.769214][T11399] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  270.344609][   T39] audit: type=1326 audit(1719402036.340:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11955 comm="syz.3.2361" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf746d579 code=0x0
[  270.540925][T11963] xt_CT: You must specify a L4 protocol and not use inversions on it
[  270.655548][   T39] audit: type=1804 audit(1719402036.650:388): pid=11949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2365" name="/syzkaller.vEI2pm/764/file0" dev="sda1" ino=2002 res=1 errno=0
[  270.694740][T11952] loop1: detected capacity change from 0 to 65536
[  270.744934][T11952] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  270.762990][T11952] XFS (loop1): Ending clean mount
[  270.803484][   T39] audit: type=1800 audit(1719402036.800:389): pid=11952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2363" name="file1" dev="loop1" ino=38 res=0 errno=0
[  270.851356][   T39] audit: type=1800 audit(1719402036.850:390): pid=11952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2363" name="file1" dev="loop1" ino=38 res=0 errno=0
[  270.906689][T11965] loop2: detected capacity change from 0 to 32768
[  270.919096][T11965] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2370 (11965)
[  270.950165][T11965] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  270.954788][T11965] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  270.962031][T11965] BTRFS info (device loop2): using free-space-tree
[  271.028420][T10213] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  271.212937][T11995] loop3: detected capacity change from 0 to 256
[  271.225727][T11995] FAT-fs (loop3): Directory bread(block 1285) failed
[  271.243122][T11965] BTRFS info (device loop2): checking UUID tree
[  271.253743][T11995] FAT-fs (loop3): Directory bread(block 1285) failed
[  271.258561][T11995] FAT-fs (loop3): FAT read failed (blocknr 1281)
[  271.401931][T11130] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  271.426816][ T5243] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  271.794977][T12010] xt_CT: You must specify a L4 protocol and not use inversions on it
[  271.999201][T12006] loop2: detected capacity change from 0 to 32768
[  272.174462][T12006] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=ro,compression=lz4,nojournal_transaction_names,read_only
[  272.180266][T12006] bcachefs (loop2): recovering from clean shutdown, journal seq 7
[  272.223756][   T39] audit: type=1326 audit(1719402038.220:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12026 comm="syz.1.2383" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7488579 code=0x0
[  272.245942][T12006] bcachefs (loop2): alloc_read... done
[  272.248744][T12006] bcachefs (loop2): stripes_read... done
[  272.251459][T12006] bcachefs (loop2): snapshots_read... done
[  272.256588][T12006] bcachefs (loop2): journal_replay... done
[  272.260400][T12006] bcachefs (loop2): resume_logged_ops... done
[  272.263861][T12006] bcachefs (loop2): done starting filesystem
[  272.281382][T12014] loop3: detected capacity change from 0 to 40427
[  272.293625][T12014] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  272.296890][T12014] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  272.315865][T12014] F2FS-fs (loop3): Found nat_bits in checkpoint
[  272.355158][T12014] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  272.379518][T12014] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  272.382858][T12014] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  272.425115][   T39] audit: type=1804 audit(1719402038.420:392): pid=12014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2380" name="/syzkaller.pRDf92/49/bus/file0" dev="loop3" ino=10 res=1 errno=0
[  272.445818][T11399] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  272.449643][T11130] bcachefs (loop2): shutting down
[  272.451695][T11399] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  272.457992][T11399] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  272.483790][T11130] bcachefs (loop2): shutdown complete
[  272.707171][T11130] bridge0: port 3(syz_tun) entered disabled state
[  272.755776][T11130] syz_tun (unregistering): left allmulticast mode
[  272.758987][T11130] syz_tun (unregistering): left promiscuous mode
[  272.761829][T11130] bridge0: port 3(syz_tun) entered disabled state
[  272.801233][   T39] audit: type=1800 audit(1719402038.800:393): pid=12025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2382" name="file1" dev="sda1" ino=1974 res=0 errno=0
[  272.814502][   T39] audit: type=1800 audit(1719402038.810:394): pid=12025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2382" name="file1" dev="sda1" ino=1974 res=0 errno=0
[  273.004605][T12039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  273.020053][   T89] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.124590][T12042] 9pnet_fd: Insufficient options for proto=fd
[  273.161653][T12043] capability: warning: `syz.1.2388' uses 32-bit capabilities (legacy support in use)
[  273.213075][   T89] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.246790][T12037] loop3: detected capacity change from 0 to 32768
[  273.252136][T12037] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2385 (12037)
[  273.285768][T12037] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  273.299789][T12037] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  273.303734][T12037] BTRFS info (device loop3): using free-space-tree
[  273.362897][   T89] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.433180][T12063] loop1: detected capacity change from 0 to 128
[  273.437465][T12063] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  273.469228][T12063] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  273.496103][   T89] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.513703][T12037] BTRFS info (device loop3): checking UUID tree
[  273.549818][   T65] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  273.563594][ T1095] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  273.569538][   T65] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  273.576675][   T65] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  273.603698][   T65] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  273.607882][   T65] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  273.611036][   T65] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  273.633971][T11399] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  273.899288][   T39] audit: type=1326 audit(1719402039.900:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12075 comm="syz.1.2397" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7488579 code=0x0
[  273.963697][   T89] bridge_slave_1: left allmulticast mode
[  273.965776][   T89] bridge_slave_1: left promiscuous mode
[  273.968177][   T89] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.986501][   T89] bridge_slave_0: left allmulticast mode
[  273.996498][   T89] bridge_slave_0: left promiscuous mode
[  274.003610][   T89] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.233420][T12080] loop3: detected capacity change from 0 to 32768
[  274.306784][ T5243] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  274.620760][   T89] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  274.628382][   T89] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  274.641289][   T89] bond0 (unregistering): Released all slaves
[  274.716000][   T25] kernel write not supported for file /cpuinfo (pid: 25 comm: kworker/2:0)
[  274.756124][T12084] loop3: detected capacity change from 0 to 32768
[  274.804208][T12069] chnl_net:caif_netlink_parms(): no params data found
[  274.926834][T12084] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,noshard_inode_numbers,noinodes_use_key_cache,gc_reserve_bytes=512 GiB,nojournal_transaction_names
[  274.936202][T12084] bcachefs (loop3): recovering from clean shutdown, journal seq 8
[  274.971952][T12084] bcachefs (loop3): alloc_read... done
[  274.974679][T12084] bcachefs (loop3): stripes_read... done
[  274.976705][T12084] bcachefs (loop3): snapshots_read... done
[  274.983020][T12084] bcachefs (loop3): journal_replay... done
[  274.986028][T12084] bcachefs (loop3): resume_logged_ops... done
[  274.990025][T12084] bcachefs (loop3): going read-write
[  275.037906][T12084] bcachefs (loop3): done starting filesystem
[  275.138692][T11399] bcachefs (loop3): shutting down
[  275.143133][T11399] bcachefs (loop3): going read-only
[  275.145789][T11399] bcachefs (loop3): finished waiting for writes to stop
[  275.169319][T11399] bcachefs (loop3): flushing journal and stopping allocators, journal seq 8
[  275.174965][T11399] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 8
[  275.192850][   T39] audit: type=1326 audit(1719402041.200:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12118 comm="syz.0.2408" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf740c579 code=0x0
[  275.211230][T11399] bcachefs (loop3): shutdown complete, journal seq 9
[  275.225117][T11399] bcachefs (loop3): marking filesystem clean
[  275.275109][T11399] bcachefs (loop3): shutdown complete
[  275.440964][   T89] hsr_slave_0: left promiscuous mode
[  275.444857][   T89] hsr_slave_1: left promiscuous mode
[  275.448228][   T89] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  275.451661][   T89] batman_adv: batadv0: Removing interface: batadv_slave_0
[  275.466593][   T89] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  275.470311][   T89] batman_adv: batadv0: Removing interface: batadv_slave_1
[  275.606000][   T89] veth1_macvtap: left promiscuous mode
[  275.608582][   T89] veth0_macvtap: left promiscuous mode
[  275.611006][   T89] veth1_vlan: left promiscuous mode
[  275.613073][   T89] veth0_vlan: left promiscuous mode
[  275.677361][ T5203] Bluetooth: hci1: command tx timeout
[  277.207535][   T89] team0 (unregistering): Port device team_slave_1 removed
[  277.385080][   T89] team0 (unregistering): Port device team_slave_0 removed
[  277.759367][ T5203] Bluetooth: hci1: command tx timeout
[  278.671958][T12069] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.675727][T12069] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.679723][T12069] bridge_slave_0: entered allmulticast mode
[  278.683643][T12069] bridge_slave_0: entered promiscuous mode
[  278.695162][T12069] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.698631][T12069] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.701773][T12069] bridge_slave_1: entered allmulticast mode
[  278.705841][T12069] bridge_slave_1: entered promiscuous mode
[  278.839127][T12069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  278.845673][T12069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  278.979640][T12069] team0: Port device team_slave_0 added
[  278.988839][T12069] team0: Port device team_slave_1 added
[  279.153753][T12069] batman_adv: batadv0: Adding interface: batadv_slave_0
[  279.156996][T12069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  279.169823][T12143] loop3: detected capacity change from 0 to 32768
[  279.177872][T12069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  279.187119][T12069] batman_adv: batadv0: Adding interface: batadv_slave_1
[  279.195716][T12069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  279.212438][T12069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  279.298894][   T39] audit: type=1326 audit(1719402045.300:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.1.2421" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7488579 code=0x0
[  279.323547][T12143] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,noshard_inode_numbers,noinodes_use_key_cache,gc_reserve_bytes=512 GiB,nojournal_transaction_names
[  279.341838][T12069] hsr_slave_0: entered promiscuous mode
[  279.345141][T12143] bcachefs (loop3): recovering from clean shutdown, journal seq 8
[  279.355198][T12069] hsr_slave_1: entered promiscuous mode
[  279.391007][T12143] bcachefs (loop3): alloc_read... done
[  279.393230][T12143] bcachefs (loop3): stripes_read... done
[  279.395471][T12143] bcachefs (loop3): snapshots_read... done
[  279.399642][T12143] bcachefs (loop3): journal_replay... done
[  279.401807][T12143] bcachefs (loop3): resume_logged_ops... done
[  279.404757][T12143] bcachefs (loop3): going read-write
[  279.439357][T12143] bcachefs (loop3): done starting filesystem
[  279.538338][T11399] bcachefs (loop3): shutting down
[  279.540330][T11399] bcachefs (loop3): going read-only
[  279.542578][T11399] bcachefs (loop3): finished waiting for writes to stop
[  279.554351][T11399] bcachefs (loop3): flushing journal and stopping allocators, journal seq 8
[  279.565292][T11399] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 8
[  279.582505][T11399] bcachefs (loop3): shutdown complete, journal seq 9
[  279.586203][T11399] bcachefs (loop3): marking filesystem clean
[  279.626498][T11399] bcachefs (loop3): shutdown complete
[  279.837672][ T5203] Bluetooth: hci1: command tx timeout
[  280.414433][T12204] loop1: detected capacity change from 0 to 32768
[  280.455467][T12204] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  280.481657][T12204] XFS (loop1): Ending clean mount
[  280.490704][T12204] XFS (loop1): Quotacheck needed: Please wait.
[  280.524705][T12069] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  280.539078][T12069] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  280.551528][T12204] XFS (loop1): Quotacheck: Done.
[  280.563022][T12069] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  280.570430][T12069] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  280.648886][T12069] 8021q: adding VLAN 0 to HW filter on device bond0
[  280.661820][T12069] 8021q: adding VLAN 0 to HW filter on device team0
[  280.669491][ T5247] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.673252][ T5247] bridge0: port 1(bridge_slave_0) entered forwarding state
[  280.683801][ T5257] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.686422][ T5257] bridge0: port 2(bridge_slave_1) entered forwarding state
[  280.698288][T12227] fuse: Bad value for 'fd'
[  280.745274][T10213] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  280.981555][T12069] 8021q: adding VLAN 0 to HW filter on device batadv0
[  281.088316][T12069] veth0_vlan: entered promiscuous mode
[  281.110585][T12069] veth1_vlan: entered promiscuous mode
[  281.172249][T12069] veth0_macvtap: entered promiscuous mode
[  281.191718][T12069] veth1_macvtap: entered promiscuous mode
[  281.236160][T12069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  281.242011][T12069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.246820][T12069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  281.253998][T12069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.259940][T12069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  281.264813][T12069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.270344][T12069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  281.289528][T12069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.294595][T12069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  281.310442][T12069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.321329][T12069] batman_adv: batadv0: Interface activated: batadv_slave_0
[  281.334343][T12069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  281.355099][T12069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.360755][T12069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  281.365579][T12069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.370664][T12069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  281.375740][T12069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.380865][T12069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  281.385916][T12069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.391834][T12069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  281.396897][T12069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.405047][T12069] batman_adv: batadv0: Interface activated: batadv_slave_1
[  281.415433][T12069] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  281.420474][T12069] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  281.425601][T12069] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  281.431443][T12069] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  281.608591][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  281.612019][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.671384][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  281.674511][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.685130][T12265] loop1: detected capacity change from 0 to 512
[  281.694662][T12265] EXT4-fs: Invalid want_extra_isize 5
[  281.760492][ T5243] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  281.911272][ T5203] Bluetooth: hci1: command tx timeout
[  281.938250][T12276] loop2: detected capacity change from 0 to 128
[  281.974117][T12261] loop3: detected capacity change from 0 to 32768
[  281.977088][T12276] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  282.025572][T12276] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  282.055082][T12261] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  282.144093][T12261] XFS (loop3): Ending clean mount
[  282.178521][T12261] XFS (loop3): Quotacheck needed: Please wait.
[  282.263867][   T11] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  282.307914][T12261] XFS (loop3): Quotacheck: Done.
[  282.616141][T11399] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  282.740415][T12301] loop1: detected capacity change from 0 to 1024
[  282.744878][T12301] hfsplus: unable to parse mount options
[  282.847220][ T5243] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  282.876353][T12308] netlink: 'syz.0.2451': attribute type 12 has an invalid length.
[  283.058603][T12305] loop2: detected capacity change from 0 to 32768
[  283.128747][T12305] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  283.221213][T12305] XFS (loop2): Ending clean mount
[  283.226060][T12305] XFS (loop2): Quotacheck needed: Please wait.
[  283.261295][T12341] netlink: 'syz.0.2461': attribute type 12 has an invalid length.
[  283.295814][T12305] XFS (loop2): Quotacheck: Done.
[  283.460420][T12069] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  283.477120][T12330] loop1: detected capacity change from 0 to 32768
[  283.520847][T12330] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  283.546738][T12330] XFS (loop1): Ending clean mount
[  283.551429][T12330] XFS (loop1): Quotacheck needed: Please wait.
[  283.698723][T12330] XFS (loop1): Quotacheck: Done.
[  283.792352][T12367] netlink: 'syz.0.2471': attribute type 12 has an invalid length.
[  283.948092][T12373] loop2: detected capacity change from 0 to 1024
[  283.958039][T12373] hfsplus: unable to parse mount options
[  284.011367][T10213] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  284.051033][ T5243] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  284.408649][T12389] loop1: detected capacity change from 0 to 256
[  284.412764][T12389] exfat: Deprecated parameter 'namecase'
[  284.441217][T12389] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x6ff59669, utbl_chksum : 0xe619d30d)
[  284.636780][T12393] netlink: 'syz.1.2481': attribute type 12 has an invalid length.
[  284.792972][T12391] loop2: detected capacity change from 0 to 32768
[  285.019505][T12391] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=ro,compression=lz4,nojournal_transaction_names,read_only
[  285.071619][T12391] bcachefs (loop2): recovering from clean shutdown, journal seq 7
[  285.157639][T12391] bcachefs (loop2): alloc_read... done
[  285.165015][T12391] bcachefs (loop2): stripes_read... done
[  285.174077][T12391] bcachefs (loop2): snapshots_read... done
[  285.182992][T12391] bcachefs (loop2): journal_replay... done
[  285.209451][T12391] bcachefs (loop2): resume_logged_ops... done
[  285.213641][T12391] bcachefs (loop2): done starting filesystem
[  285.408354][T12409] loop1: detected capacity change from 0 to 32768
[  285.408593][T12414] loop3: detected capacity change from 0 to 1024
[  285.415574][T12414] hfsplus: unable to parse mount options
[  285.445634][T12409] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  285.485136][T12409] XFS (loop1): Ending clean mount
[  285.488706][T12409] XFS (loop1): Quotacheck needed: Please wait.
[  285.493716][ T5392] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  285.585998][T12409] XFS (loop1): Quotacheck: Done.
[  285.612705][T12069] bcachefs (loop2): shutting down
[  285.676323][T12069] bcachefs (loop2): shutdown complete
[  285.719846][T12428] netlink: 'syz.0.2490': attribute type 12 has an invalid length.
[  285.794140][T10213] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  286.512061][T12443] loop1: detected capacity change from 0 to 256
[  286.516349][T12443] exfat: Deprecated parameter 'namecase'
[  286.613819][T12443] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x6ff59669, utbl_chksum : 0xe619d30d)
[  287.388725][T12465] loop3: detected capacity change from 0 to 256
[  287.392598][T12465] exfat: Deprecated parameter 'namecase'
[  287.481131][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.486341][T12465] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x6ff59669, utbl_chksum : 0xe619d30d)
[  287.718511][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.845145][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.030601][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.159042][   T65] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  288.178107][   T65] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  288.198164][   T65] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  288.235003][   T65] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  288.242733][   T65] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  288.270808][   T65] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  288.299732][   T13] bridge_slave_1: left allmulticast mode
[  288.302730][   T13] bridge_slave_1: left promiscuous mode
[  288.305524][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.319524][   T13] bridge_slave_0: left allmulticast mode
[  288.322188][   T13] bridge_slave_0: left promiscuous mode
[  288.324793][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.511633][T12474] loop3: detected capacity change from 0 to 32768
[  288.542510][T12474] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section members_v2: device 0: bucket size 16 smaller than btree node size 256
[  288.542510][T12474] members_v2 (size 152):
[  288.542510][T12474] Device:                        0
[  288.542510][T12474]   Label:                       (none)
[  288.542510][T12474]   UUID:                        87bd6f1c-e82e-46d8-bfd9-42f53008fa72
[  288.542510][T12474]   Size:                        1048576
[  288.542510][T12474]   read errors:                 0
[  288.542510][T12474]   write errors:                0
[  288.542510][T12474]   checksum errors:             0
[  288.542510][T12474]   seqread iops:                0
[  288.542510][T12474]   seqwrite iops:               0
[  288.542510][T12474]   randread iops:               0
[  288.542510][T12474]   randwrite iops:              0
[  288.542510][T12474]   Bucket size:                 8192
[  288.542510][T12474]   First bucket:                0
[  288.542510][T12474]   Buckets:                     128
[  288.542510][T12474]   Last mount:                  1714681267
[  288.542510][T12474]   Last superblock write:       41
[  288.542510][T12474]   State:                       rw
[  288.542510][T12474]   Data allowed:                journal,btree,user
[  288.542510][T12474]   Has data:                    journal,btree,user
[  288.542510][T12474]   Btree allocated bitmap blocksize:256
[  288.542510][T12474]   Btree allocated bitmap:      00000000000000000000000100010000100110000000000000000000
[  288.606917][T12489] vivid-007: disconnect
[  288.694094][T12488] vivid-007: reconnect
[  288.701380][ T5243] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  288.776160][T12491] loop1: detected capacity change from 0 to 256
[  288.786523][T12491] exfat: Deprecated parameter 'namecase'
[  288.808931][T12491] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x6ff59669, utbl_chksum : 0xe619d30d)
[  289.385288][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  289.402541][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  289.408856][   T13] bond0 (unregistering): Released all slaves
[  289.794289][T12517] vivid-007: disconnect
[  289.799378][T12515] vivid-007: reconnect
[  289.871403][T12521] loop1: detected capacity change from 0 to 256
[  289.892542][T12521] exfat: Deprecated parameter 'namecase'
[  289.914843][T12521] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x6ff59669, utbl_chksum : 0xe619d30d)
[  290.056104][T12476] chnl_net:caif_netlink_parms(): no params data found
[  290.191332][T12519] loop3: detected capacity change from 0 to 32768
[  290.211253][T12519] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section members_v2: device 0: bucket size 16 smaller than btree node size 256
[  290.211253][T12519] members_v2 (size 152):
[  290.211253][T12519] Device:                        0
[  290.211253][T12519]   Label:                       (none)
[  290.211253][T12519]   UUID:                        87bd6f1c-e82e-46d8-bfd9-42f53008fa72
[  290.211253][T12519]   Size:                        1048576
[  290.211253][T12519]   read errors:                 0
[  290.211253][T12519]   write errors:                0
[  290.211253][T12519]   checksum errors:             0
[  290.211253][T12519]   seqread iops:                0
[  290.211253][T12519]   seqwrite iops:               0
[  290.211253][T12519]   randread iops:               0
[  290.211253][T12519]   randwrite iops:              0
[  290.211253][T12519]   Bucket size:                 8192
[  290.211253][T12519]   First bucket:                0
[  290.211253][T12519]   Buckets:                     128
[  290.211253][T12519]   Last mount:                  1714681267
[  290.211253][T12519]   Last superblock write:       41
[  290.211253][T12519]   State:                       rw
[  290.211253][T12519]   Data allowed:                journal,btree,user
[  290.211253][T12519]   Has data:                    journal,btree,user
[  290.211253][T12519]   Btree allocated bitmap blocksize:256
[  290.211253][T12519]   Btree allocated bitmap:      00000000000000000000000100010000100110000000000000000000
[  290.212514][   T13] hsr_slave_0: left promiscuous mode
[  290.345541][ T5243] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  290.387649][   T65] Bluetooth: hci1: command tx timeout
[  290.393328][   T13] hsr_slave_1: left promiscuous mode
[  290.413782][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  290.416951][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  290.421320][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  290.424757][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  290.531728][   T13] veth1_macvtap: left promiscuous mode
[  290.534077][   T13] veth0_macvtap: left promiscuous mode
[  290.536316][   T13] veth1_vlan: left promiscuous mode
[  290.545416][   T13] veth0_vlan: left promiscuous mode
[  291.013080][T12546] vivid-007: disconnect
[  291.016482][T12545] vivid-007: reconnect
[  291.748841][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  292.446512][T12561] loop3: detected capacity change from 0 to 8
[  292.476592][   T65] Bluetooth: hci1: command tx timeout
[  292.477161][T12561] SQUASHFS error: zlib decompression failed, data probably corrupt
[  292.483215][T12561] SQUASHFS error: Failed to read block 0x9b: -5
[  292.486079][T12561] SQUASHFS error: Unable to read metadata cache entry [99]
[  292.489934][T12561] SQUASHFS error: Unable to read inode 0x127
[  292.574616][T12561] loop3: detected capacity change from 0 to 1024
[  292.589002][T12561] hfsplus: unable to parse mount options
[  292.681825][ T5243] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  292.724447][T12561] loop3: detected capacity change from 0 to 2048
[  292.730804][T12561] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  292.741526][T12561] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  292.783650][T12561] UDF-fs: unknown compression code (0)
[  293.290892][   T13] team0 (unregistering): Port device team_slave_1 removed
[  293.547579][   T13] team0 (unregistering): Port device team_slave_0 removed
[  294.560051][   T65] Bluetooth: hci1: command tx timeout
[  295.845228][T12587] tmpfs: Bad value for 'mpol'
[  295.951480][T12476] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.955100][T12476] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.958624][T12476] bridge_slave_0: entered allmulticast mode
[  295.963386][T12476] bridge_slave_0: entered promiscuous mode
[  295.969151][T12476] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.977762][T12476] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.980375][T12476] bridge_slave_1: entered allmulticast mode
[  295.984956][T12476] bridge_slave_1: entered promiscuous mode
[  296.252208][T12476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  296.309031][T12476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  296.405222][ T5203] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  296.417063][ T5203] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  296.424174][ T5203] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  296.445082][ T5203] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  296.451261][ T5203] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  296.463397][T12476] team0: Port device team_slave_0 added
[  296.466308][ T5203] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  296.519520][T12476] team0: Port device team_slave_1 added
[  296.633544][ T5203] Bluetooth: hci1: command tx timeout
[  296.863621][T12476] batman_adv: batadv0: Adding interface: batadv_slave_0
[  296.867034][T12476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  296.880870][T12476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  296.936013][T12476] batman_adv: batadv0: Adding interface: batadv_slave_1
[  296.942676][T12476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  296.954390][T12476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  297.063030][   T40] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.292615][   T40] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.322436][T12593] loop1: detected capacity change from 0 to 131072
[  297.339503][T12593] F2FS-fs (loop1): invalid crc value
[  297.346463][T12593] F2FS-fs (loop1): Found nat_bits in checkpoint
[  297.370957][T12476] hsr_slave_0: entered promiscuous mode
[  297.374510][T12476] hsr_slave_1: entered promiscuous mode
[  297.483090][   T40] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.516766][T12593] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  297.720668][   T40] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.887102][T12630] team0: Port device team_slave_0 removed
[  298.060565][T12608] chnl_net:caif_netlink_parms(): no params data found
[  298.547550][ T5203] Bluetooth: hci4: command tx timeout
[  298.602765][   T40] bridge_slave_1: left allmulticast mode
[  298.605608][   T40] bridge_slave_1: left promiscuous mode
[  298.617607][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[  298.624066][   T40] bridge_slave_0: left allmulticast mode
[  298.630802][   T40] bridge_slave_0: left promiscuous mode
[  298.633905][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.680164][   T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  299.730476][   T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  299.755663][   T40] bond0 (unregistering): Released all slaves
[  300.032768][T12608] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.036281][T12608] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.039751][T12608] bridge_slave_0: entered allmulticast mode
[  300.057506][T12608] bridge_slave_0: entered promiscuous mode
[  300.071072][T12608] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.074594][T12608] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.078254][T12608] bridge_slave_1: entered allmulticast mode
[  300.098358][T12608] bridge_slave_1: entered promiscuous mode
[  300.173180][T12660] team0: Port device team_slave_0 removed
[  300.641895][ T5203] Bluetooth: hci4: command tx timeout
[  300.677355][T12673] openvswitch: netlink: Unknown key attributes 1
[  300.728562][T12608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  300.814629][T12608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  301.045890][T12684] 9pnet_fd: Insufficient options for proto=fd
[  301.058668][T12608] team0: Port device team_slave_0 added
[  301.081257][   T40] hsr_slave_0: left promiscuous mode
[  301.084694][   T40] hsr_slave_1: left promiscuous mode
[  301.097702][   T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  301.101888][   T40] batman_adv: batadv0: Removing interface: batadv_slave_0
[  301.106399][   T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  301.112429][   T40] batman_adv: batadv0: Removing interface: batadv_slave_1
[  301.214943][   T40] veth1_macvtap: left promiscuous mode
[  301.218046][   T40] veth0_macvtap: left promiscuous mode
[  301.220742][   T40] veth1_vlan: left promiscuous mode
[  301.222977][   T40] veth0_vlan: left promiscuous mode
[  302.331688][T12691] loop1: detected capacity change from 0 to 131072
[  302.347427][T12691] F2FS-fs (loop1): invalid crc value
[  302.354326][T12691] F2FS-fs (loop1): Found nat_bits in checkpoint
[  302.449947][T12691] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  302.717786][ T5203] Bluetooth: hci4: command tx timeout
[  303.764065][   T40] team0 (unregistering): Port device team_slave_1 removed
[  304.072901][   T40] team0 (unregistering): Port device team_slave_0 removed
[  304.526199][T12712] loop1: detected capacity change from 0 to 32768
[  304.606456][T12712] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  304.614981][T12712] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  304.698952][T12712] XFS (loop1): Ending clean mount
[  304.723180][T12712] XFS (loop1): Quotacheck needed: Please wait.
[  304.799017][ T5203] Bluetooth: hci4: command tx timeout
[  304.890077][T12712] XFS (loop1): Quotacheck: Done.
[  305.346460][T10213] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  306.220904][T12608] team0: Port device team_slave_1 added
[  306.500849][T12608] batman_adv: batadv0: Adding interface: batadv_slave_0
[  306.504664][T12608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  306.519318][T12608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  306.603435][T12608] batman_adv: batadv0: Adding interface: batadv_slave_1
[  306.606729][T12608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  306.634685][T12608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  307.005369][T12608] hsr_slave_0: entered promiscuous mode
[  307.197424][ T8793] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  307.387603][ T8793] usb 6-1: Using ep0 maxpacket: 16
[  307.407084][ T8793] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  307.417309][ T8793] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  307.423853][ T8793] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  307.431580][ T8793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.449095][ T8793] usb 6-1: config 0 descriptor??
[  307.456524][T12608] hsr_slave_1: entered promiscuous mode
[  307.461125][T12608] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  307.464544][ T8793] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  307.465550][T12608] Cannot create hsr debugfs directory
[  307.519669][T12476] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  307.571760][T12476] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  307.579076][T12476] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  307.586063][T12476] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  307.725712][T12770] 9pnet_fd: Insufficient options for proto=fd
[  307.748115][T12761] loop1: detected capacity change from 0 to 1024
[  307.759277][T12761] EXT4-fs (loop1): filesystem too large to mount safely on this system
[  307.829157][ T5246] usb 6-1: USB disconnect, device number 6
[  307.984844][T12476] 8021q: adding VLAN 0 to HW filter on device bond0
[  308.021094][T12476] 8021q: adding VLAN 0 to HW filter on device team0
[  308.035207][ T5257] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.038813][ T5257] bridge0: port 1(bridge_slave_0) entered forwarding state
[  308.117939][   T25] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.121787][   T25] bridge0: port 2(bridge_slave_1) entered forwarding state
[  308.500381][T12476] 8021q: adding VLAN 0 to HW filter on device batadv0
[  308.569496][T12476] veth0_vlan: entered promiscuous mode
[  308.582091][T12608] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  308.602333][T12608] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  308.618888][T12476] veth1_vlan: entered promiscuous mode
[  308.625136][T12608] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  308.656643][T12608] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  308.742687][T12476] veth0_macvtap: entered promiscuous mode
[  308.752073][T12476] veth1_macvtap: entered promiscuous mode
[  308.801369][T12476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  308.805926][T12476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.811777][T12476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  308.831862][T12476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.836064][T12476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  308.840164][T12476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.861010][T12476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  308.865363][T12476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.871672][T12476] batman_adv: batadv0: Interface activated: batadv_slave_0
[  308.906564][T12476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  308.911838][T12476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.916849][T12476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  308.924961][T12476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.932871][T12476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  308.939865][T12476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.948267][T12476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  308.953457][T12476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.960590][T12476] batman_adv: batadv0: Interface activated: batadv_slave_1
[  308.973453][T12476] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  308.979070][T12476] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  308.983379][T12476] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  308.998613][T12476] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  309.099027][T12810] 9pnet_fd: Insufficient options for proto=fd
[  309.471552][T12608] 8021q: adding VLAN 0 to HW filter on device bond0
[  309.588588][T12608] 8021q: adding VLAN 0 to HW filter on device team0
[  309.628120][ T5248] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.631454][ T5248] bridge0: port 1(bridge_slave_0) entered forwarding state
[  309.635590][ T5248] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.640575][ T5248] bridge0: port 2(bridge_slave_1) entered forwarding state
[  309.668183][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  309.711594][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  309.763859][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  309.783113][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  310.040483][T12608] 8021q: adding VLAN 0 to HW filter on device batadv0
[  310.134465][T12857] tipc: Started in network mode
[  310.136675][T12857] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[  310.140936][T12857] tipc: Enabled bearer <eth:vlan0>, priority 10
[  310.173478][T12851] 9pnet_fd: Insufficient options for proto=fd
[  310.185994][T12608] veth0_vlan: entered promiscuous mode
[  310.256531][T12608] veth1_vlan: entered promiscuous mode
[  310.267949][T12838] loop1: detected capacity change from 0 to 32768
[  310.326431][T12608] veth0_macvtap: entered promiscuous mode
[  310.381752][T12608] veth1_macvtap: entered promiscuous mode
[  310.434860][T12608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  310.443177][T12608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.449175][T12608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  310.453059][T12838] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=xxhash,compression=gzip,str_hash=crc32c,nojournal_transaction_names,nocow
[  310.463864][T12608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.470951][T12838] bcachefs (loop1): recovering from clean shutdown, journal seq 7
[  310.487768][T12608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  310.491913][T12608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.497625][T12608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  310.502213][T12608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.505113][T12867] loop2: detected capacity change from 0 to 1764
[  310.508178][T12608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  310.514349][T12608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.522695][T12608] batman_adv: batadv0: Interface activated: batadv_slave_0
[  310.562589][T12608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  310.569978][ T5243] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  310.584920][T12838] bcachefs (loop1): alloc_read... done
[  310.589140][T12838] bcachefs (loop1): stripes_read... done
[  310.592440][T12838] bcachefs (loop1): snapshots_read... done
[  310.596331][T12608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.613584][T12838] bcachefs (loop1): journal_replay... done
[  310.613635][T12838] bcachefs (loop1): resume_logged_ops... done
[  310.614665][T12838] bcachefs (loop1): going read-write
[  310.626664][T12838] bcachefs (loop1): done starting filesystem
[  310.654799][T12608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  310.669768][T12608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.676064][T12608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  310.687319][T12608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.691785][T12608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  310.702334][T12608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.706455][T12608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  310.712315][T12608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.730018][T12608] batman_adv: batadv0: Interface activated: batadv_slave_1
[  310.749097][T12608] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  310.753573][T12608] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  310.776648][T12608] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  310.782543][T12867] loop2: detected capacity change from 0 to 512
[  310.785702][T12867] journal_path: Lookup failure for './file0'
[  310.790515][T12608] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  310.816351][T12867] EXT4-fs: error: could not find journal device path
[  310.931658][T10213] bcachefs (loop1): shutting down
[  310.934401][T10213] bcachefs (loop1): going read-only
[  310.971022][T10213] bcachefs (loop1): finished waiting for writes to stop
[  311.058809][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  311.062503][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  311.065418][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  311.077947][T10213] bcachefs (loop1): flushing journal and stopping allocators, journal seq 10
[  311.082675][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  311.113458][T10213] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 11
[  311.138088][ T5262] tipc: Node number set to 10005162
[  311.160618][T10213] bcachefs (loop1): shutdown complete, journal seq 12
[  311.165294][T10213] bcachefs (loop1): marking filesystem clean
[  311.272065][T10213] bcachefs (loop1): shutdown complete
[  311.437574][ T5262] ------------[ cut here ]------------
[  311.441329][ T5262] Mixed NMI-safe readers for srcu_struct at 0xffffc9000fc868a8.
[  311.445084][ T5262] WARNING: CPU: 1 PID: 5262 at kernel/rcu/srcutree.c:453 try_check_zero+0x3aa/0x560
[  311.449865][ T5262] Modules linked in:
[  311.451880][ T5262] CPU: 1 PID: 5262 Comm: kworker/1:4 Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0
[  311.460453][ T5262] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  311.465768][ T5262] Workqueue: rcu_gp process_srcu
[  311.468600][ T5262] RIP: 0010:try_check_zero+0x3aa/0x560
SYZFAIL: failed to recv rpc
fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor)
[  311.480652][ T5262] Code: e9 8a fe ff ff 80 3d 04 9d 57 0e 00 0f 85 47 fe ff ff c6 05 f7 9c 57 0e 01 90 48 c7 c7 a0 46 2e 8b 4c 89 f6 e8 37 93 dc ff 90 <0f> 0b 90 90 e9 26 fe ff ff 48 83 c4 48 31 c0 5b 5d 41 5c 41 5d 41
[  311.505564][ T5262] RSP: 0018:ffffc90002b1fb70 EFLAGS: 00010282
[  311.518520][ T5262] RAX: 0000000000000000 RBX: ffffe8ffffd57600 RCX: ffffffff81511289
[  311.522194][ T5262] RDX: ffff8880200ea440 RSI: ffffffff81511296 RDI: 0000000000000001
[  311.526071][ T5262] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[  311.529129][ T5262] R10: 0000000000000000 R11: 0000000000000003 R12: 000000000000001f
[  311.531988][ T5262] R13: dffffc0000000000 R14: ffffc9000fc868a8 R15: 0000000000000000
[  311.534899][ T5262] FS:  0000000000000000(0000) GS:ffff88802c100000(0000) knlGS:0000000000000000
[  311.538997][ T5262] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  311.539091][T12898] tipc: Enabling of bearer <eth:vlan0> rejected, already enabled
[  311.541865][ T5262] CR2: 000000002f810ff8 CR3: 000000006158a000 CR4: 0000000000352ef0
[  311.548645][ T5262] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  311.552312][ T5262] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  311.556278][ T5262] Call Trace:
[  311.558043][ T5262]  <TASK>
[  311.559447][ T5262]  ? show_regs+0x8c/0xa0
[  311.561403][ T5262]  ? __warn+0xe5/0x3c0
[  311.563236][ T5262]  ? __wake_up_klogd.part.0+0x99/0xf0
[  311.566158][ T5262]  ? try_check_zero+0x3aa/0x560
[  311.568707][ T5262]  ? report_bug+0x3c0/0x580
[  311.570844][ T5262]  ? handle_bug+0x3d/0x70
[  311.572839][ T5262]  ? exc_invalid_op+0x17/0x50
[  311.574968][ T5262]  ? asm_exc_invalid_op+0x1a/0x20
[  311.577335][ T5262]  ? __warn_printk+0x199/0x350
[  311.579438][ T5262]  ? __warn_printk+0x1a6/0x350
[  311.582116][ T5262]  ? try_check_zero+0x3aa/0x560
[  311.584175][ T5262]  process_srcu+0x3f9/0x1730
[  311.587759][ T5262]  ? __pfx_lock_acquire+0x10/0x10
[  311.603286][ T5262]  ? __pfx_lock_release+0x10/0x10
[  311.605445][ T5262]  process_one_work+0x958/0x1ad0
[  311.607916][ T5262]  ? __pfx_lock_acquire+0x10/0x10
[  311.610412][ T5262]  ? __pfx_process_one_work+0x10/0x10
[  311.612939][ T5262]  ? assign_work+0x1a0/0x250
[  311.615117][ T5262]  worker_thread+0x6c8/0xf70
[  311.617347][ T5262]  ? __kthread_parkme+0x148/0x220
[  311.631704][ T5262]  ? __pfx_worker_thread+0x10/0x10
[  311.634021][ T5262]  kthread+0x2c1/0x3a0
[  311.635932][ T5262]  ? _raw_spin_unlock_irq+0x23/0x50
[  311.638375][ T5262]  ? __pfx_kthread+0x10/0x10
[  311.656289][ T5262]  ret_from_fork+0x45/0x80
[  311.658118][ T5262]  ? __pfx_kthread+0x10/0x10
[  311.659879][ T5262]  ret_from_fork_asm+0x1a/0x30
[  311.661557][ T5262]  </TASK>
[  311.662652][ T5262] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  311.665089][ T5262] CPU: 1 PID: 5262 Comm: kworker/1:4 Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0
[  311.668778][ T5262] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  311.673382][ T5262] Workqueue: rcu_gp process_srcu
[  311.676094][ T5262] Call Trace:
[  311.677709][ T5262]  <TASK>
[  311.679139][ T5262]  dump_stack_lvl+0x3d/0x1f0
[  311.681439][ T5262]  panic+0x6f5/0x7a0
[  311.683281][ T5262]  ? __pfx_panic+0x10/0x10
[  311.685509][ T5262]  ? show_trace_log_lvl+0x363/0x500
[  311.688116][ T5262]  ? check_panic_on_warn+0x1f/0xb0
[  311.690434][ T5262]  ? try_check_zero+0x3aa/0x560
[  311.692515][ T5262]  check_panic_on_warn+0xab/0xb0
[  311.694470][ T5262]  __warn+0xf1/0x3c0
[  311.696187][ T5262]  ? __wake_up_klogd.part.0+0x99/0xf0
[  311.698269][ T5262]  ? try_check_zero+0x3aa/0x560
[  311.700125][ T5262]  report_bug+0x3c0/0x580
[  311.701818][ T5262]  handle_bug+0x3d/0x70
[  311.703431][ T5262]  exc_invalid_op+0x17/0x50
[  311.705188][ T5262]  asm_exc_invalid_op+0x1a/0x20
[  311.707112][ T5262] RIP: 0010:try_check_zero+0x3aa/0x560
[  311.709284][ T5262] Code: e9 8a fe ff ff 80 3d 04 9d 57 0e 00 0f 85 47 fe ff ff c6 05 f7 9c 57 0e 01 90 48 c7 c7 a0 46 2e 8b 4c 89 f6 e8 37 93 dc ff 90 <0f> 0b 90 90 e9 26 fe ff ff 48 83 c4 48 31 c0 5b 5d 41 5c 41 5d 41
[  311.716793][ T5262] RSP: 0018:ffffc90002b1fb70 EFLAGS: 00010282
[  311.720438][ T5262] RAX: 0000000000000000 RBX: ffffe8ffffd57600 RCX: ffffffff81511289
[  311.723628][ T5262] RDX: ffff8880200ea440 RSI: ffffffff81511296 RDI: 0000000000000001
[  311.726651][ T5262] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[  311.729687][ T5262] R10: 0000000000000000 R11: 0000000000000003 R12: 000000000000001f
[  311.732772][ T5262] R13: dffffc0000000000 R14: ffffc9000fc868a8 R15: 0000000000000000
[  311.735934][ T5262]  ? __warn_printk+0x199/0x350
[  311.737921][ T5262]  ? __warn_printk+0x1a6/0x350
[  311.739982][ T5262]  process_srcu+0x3f9/0x1730
[  311.741867][ T5262]  ? __pfx_lock_acquire+0x10/0x10
[  311.743887][ T5262]  ? __pfx_lock_release+0x10/0x10
[  311.745864][ T5262]  process_one_work+0x958/0x1ad0
[  311.747779][ T5262]  ? __pfx_lock_acquire+0x10/0x10
[  311.749686][ T5262]  ? __pfx_process_one_work+0x10/0x10
[  311.751757][ T5262]  ? assign_work+0x1a0/0x250
[  311.753496][ T5262]  worker_thread+0x6c8/0xf70
[  311.755144][ T5262]  ? __kthread_parkme+0x148/0x220
[  311.756827][ T5262]  ? __pfx_worker_thread+0x10/0x10
[  311.758557][ T5262]  kthread+0x2c1/0x3a0
[  311.759932][ T5262]  ? _raw_spin_unlock_irq+0x23/0x50
[  311.761736][ T5262]  ? __pfx_kthread+0x10/0x10
[  311.763506][ T5262]  ret_from_fork+0x45/0x80
[  311.765202][ T5262]  ? __pfx_kthread+0x10/0x10
[  311.766986][ T5262]  ret_from_fork_asm+0x1a/0x30
[  311.768879][ T5262]  </TASK>
[  311.770691][ T5262] Kernel Offset: disabled
[  311.772203][ T5262] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:41:17  Registers:
info registers vcpu 0

CPU#0
RAX=dffffc0000000000 RBX=ffffffff8fe2d4d8 RCX=ffffffff816cad09 RDX=0000000000000000
RSI=ffffffff8b8fb8a0 RDI=ffff88801ffbd35c RBP=1ffff92000e79f5c RSP=ffffc900073cfad0
R8 =0000000000000000 R9 =fffffbfff1fc5442 R10=ffffffff8fe2a217 R11=0000000000000002
R12=ffffffff8dbb51a0 R13=0000000000000000 R14=ffff88801ffbc880 R15=0000000000000001
RIP=ffffffff816cad89 RFL=00000a03 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802c000000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000ee2c5000 CR3=0000000021534000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000f8000000 Opmask01=000000000007ffff Opmask02=000000000007ffff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff84278d0 0000003000000008
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff84276b0 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffff0f
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e6970726100656c 69666f7270000920
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 726f74616e696d72 6574206f6e203a73 2500657469727720 3a7325006b636f73
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 574a51444b4c4857 4051054a4b051f56 000040514c575205 1f5600004e464a56
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f040310061f1052 1a411d205b090f0c 14010173121f0016 640004260a020c08
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7165722033382036 656e696665640a74 725f78616d5f6c6f 73203233746e6975
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1965004551555558 450f49120a0a2a4e 017a780d023c031b 1c524213100b1d07
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7f755b575f5f5f5f 5f7f5f377f4b7f5e 5f7f7b7f1f7f771f 7f7f4f7f1f1b1f1f
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20646574726f7070 75736e75203a7325 0035646d2d63616d 680035646d63616d
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2073736572646461 2032382030382036 6565640a65640065 6461615f6b6c6165
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020362033382036 200a382030380a36 5f5f640a20320065 642032206b6c6165
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbf2b313423342c
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020
info registers vcpu 1

CPU#1
RAX=0000000000000049 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff84f95405 RDI=ffffffff94d5c040 RBP=ffffffff94d5c000 RSP=ffffc90002b1f560
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000006
R12=0000000000000000 R13=0000000000000049 R14=ffffffff84f953a0 R15=0000000000000000
RIP=ffffffff84f9542f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802c100000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000002f810ff8 CR3=000000006158a000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006000000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ffffffffffff ffffffffffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff813be48e RDX=ffff88801a214880
RSI=ffffffff813be4ab RDI=0000000000000000 RBP=ffff88802c23ebc0 RSP=ffffc90000e8f8c0
R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000003 R11=0000000000000000
R12=0000000000000003 R13=0000000000000003 R14=ffff88802c23fa40 R15=ffffed1005847d78
RIP=ffffffff813be4ac RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802c200000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000561d38bf9000 CR3=0000000021c20000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c
ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004
ZMM21=88fb6e9688fb6e96 88fb6e9688fb6e96 88fb6e9688fb6e96 88fb6e9688fb6e96 88fb6e9688fb6e96 88fb6e9688fb6e96 88fb6e9688fb6e96 88fb6e9688fb6e96
ZMM22=f02c3960f02c3960 f02c3960f02c3960 f02c3960f02c3960 f02c3960f02c3960 f02c3960f02c3960 f02c3960f02c3960 f02c3960f02c3960 f02c3960f02c3960
ZMM23=0d404c4a0d404c4a 0d404c4a0d404c4a 0d404c4a0d404c4a 0d404c4a0d404c4a 0d404c4a0d404c4a 0d404c4a0d404c4a 0d404c4a0d404c4a 0d404c4a0d404c4a
ZMM24=0c1c5d840c1c5d84 0c1c5d840c1c5d84 0c1c5d840c1c5d84 0c1c5d840c1c5d84 0c1c5d840c1c5d84 0c1c5d840c1c5d84 0c1c5d840c1c5d84 0c1c5d840c1c5d84
ZMM25=df0a20eadf0a20ea df0a20eadf0a20ea df0a20eadf0a20ea df0a20eadf0a20ea df0a20eadf0a20ea df0a20eadf0a20ea df0a20eadf0a20ea df0a20eadf0a20ea
ZMM26=5f459daa5f459daa 5f459daa5f459daa 5f459daa5f459daa 5f459daa5f459daa 5f459daa5f459daa 5f459daa5f459daa 5f459daa5f459daa 5f459daa5f459daa
ZMM27=8213ca078213ca07 8213ca078213ca07 8213ca078213ca07 8213ca078213ca07 8213ca078213ca07 8213ca078213ca07 8213ca078213ca07 8213ca078213ca07
ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=7814000078140000 7814000078140000 7814000078140000 7814000078140000 7814000078140000 7814000078140000 7814000078140000 7814000078140000
info registers vcpu 3

CPU#3
RAX=ffffc9000041e000 RBX=ffff888020285400 RCX=ffffffff81706ea1 RDX=1ffff11004050a06
RSI=ffffffff85ef3714 RDI=ffff888020285030 RBP=0000000000000001 RSP=ffffc900005f0ea8
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000003
R12=ffffc9000041e008 R13=ffff888020285028 R14=ffff88802030f000 R15=0000000000000000
RIP=ffffffff85ef3762 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0f96876500 ffffffff 00c00000
GS =0000 ffff88802c300000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000561d38bfc000 CR3=000000002561a000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c
ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004
ZMM21=88fb6e9688fb6e96 88fb6e9688fb6e96 88fb6e9688fb6e96 88fb6e9688fb6e96 88fb6e9688fb6e96 88fb6e9688fb6e96 88fb6e9688fb6e96 88fb6e9688fb6e96
ZMM22=f02c3960f02c3960 f02c3960f02c3960 f02c3960f02c3960 f02c3960f02c3960 f02c3960f02c3960 f02c3960f02c3960 f02c3960f02c3960 f02c3960f02c3960
ZMM23=0d404c4a0d404c4a 0d404c4a0d404c4a 0d404c4a0d404c4a 0d404c4a0d404c4a 0d404c4a0d404c4a 0d404c4a0d404c4a 0d404c4a0d404c4a 0d404c4a0d404c4a
ZMM24=0c1c5d840c1c5d84 0c1c5d840c1c5d84 0c1c5d840c1c5d84 0c1c5d840c1c5d84 0c1c5d840c1c5d84 0c1c5d840c1c5d84 0c1c5d840c1c5d84 0c1c5d840c1c5d84
ZMM25=df0a20eadf0a20ea df0a20eadf0a20ea df0a20eadf0a20ea df0a20eadf0a20ea df0a20eadf0a20ea df0a20eadf0a20ea df0a20eadf0a20ea df0a20eadf0a20ea
ZMM26=5f459daa5f459daa 5f459daa5f459daa 5f459daa5f459daa 5f459daa5f459daa 5f459daa5f459daa 5f459daa5f459daa 5f459daa5f459daa 5f459daa5f459daa
ZMM27=8213ca078213ca07 8213ca078213ca07 8213ca078213ca07 8213ca078213ca07 8213ca078213ca07 8213ca078213ca07 8213ca078213ca07 8213ca078213ca07
ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=7814000078140000 7814000078140000 7814000078140000 7814000078140000 7814000078140000 7814000078140000 7814000078140000 7814000078140000