last executing test programs:

2m23.67955769s ago: executing program 2 (id=3):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x80200, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', <r1=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000000c0)={"3c2413b9d44aec57f2e2ad238a7b448ed886910284ed923c31d4b8affbf514fd"})

2m23.296815759s ago: executing program 2 (id=17):
r0 = syz_open_procfs(0x0, &(0x7f0000001080)='net/igmp\x00')
read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d)
preadv(r0, &(0x7f0000002240)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1, 0x29d3, 0x6)

2m23.136491589s ago: executing program 2 (id=18):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680), 0x3, 0x470, &(0x7f0000000dc0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

2m22.200758147s ago: executing program 2 (id=29):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f00000000c0)=ANY=[], 0x4, 0xf82, &(0x7f0000003080)="$eJzs3U9sHNX9APA36/W/2MRr4AcGfoQUWhEo2CGJ1PQWBOqlEuLSOygkNMJQ1NBKREBMD4hKiCIhThUHEBdKpRSpSKBKFeqp7alVb+0F9UKlKpWCemgjJa5iv1nvPu9k12N7dtf7+UjffX7zZuf7HXsTz4xn3wZgZNXWHo8dW8hCeOeztx99+ansk2vL7mqucXDtMYu9RghhvKWfJdv7Ii64cumlk53aLBxZe8z74bGLzefOhBBWwsHweWiEj5aWv/rw3UcOffza1C1vnnvmlV3a/aZ0PwAAYC+68Mflv973jz88MH/5woETYbK5PD8+b8T+TDzuPxwPlPPj5Vpo72ct0WoiWW8sRi1ZbyxZr57kqRfkG0+2M16w3kSXfGMtyzrtJwAAAAyj/Ly2EbLaYlu/VltcXD/vv+aLuYls8bkzy6fP9qlQAAAAoLR/n1+76XaIY2oAahBpTOcvsK0976Pvbv0524paxfnqFecbmSj3ehNCCCGE2LlwPCKGIFbnKrzYAAAAANBhvrBNVnZ2pq7m1hq95b/4cK3z82EHJK+/zdNO7PDr//r5pzavUGn+DnY//3if8193/z941f84AACUt1ePJvP9yo+j83kM0nkEx9qeNTO21fOPWrKd+hbrLJpXcFjmGyyqc6ziOsoqqn+rP8d+Kao/nQ9zUBXVn87TOaiK6p+suI6yiurvcOUnDOI/66L6pyuuo6yi+vdVXEdZRfXPVFxHWUX1z1ZcR1lF9d9QcR1lFdW/v+I6yiqqf1huqy2qv1FxHWUV1T+/3gz8YURR/TdWXEdZRfXfVHEdZRXVf3PFdfTLnbHNvw8HCtab6XDwN3AHgwAAAEBH/x36+f9GNOoDUIMQQgx9vLr+y7B9+VSHZWJbURuAGnYrpju9hoQQQoiBjPN9vPYAAAAADIb8fQH5u95Xo3x8bNP4396/9piP11vHpzY2kI+Pd9n+RJfxyS7jAAAAQAi/ef30bW9lG/Pdpe/p3+p8ePm8UdPhk6uhxDxG6XyEW82/3XnPtpu/84QjwzIbGwAAAHtV9p3Pr97/6HsvzF++cOBEy9nv1Xi+m88DWo/XBj6N/fy+gNmkn+Xn0Cfa89QK1kuvD9xQtL3Ht7mjAAAAMMLy8/dGyGqLLefdjVCrLS5unI8vhPHs9JnlU4djP/98lt/PjU9eW/5QxXUDAAAAvds43+98/p9/ju9CmMgWnzuzfPrsen+2uXy81npdYG5jedZ6XaCRLD9SsPxo7MfP7wzfn5teW7548gfLT+30zgMAAMCIOPviuWeeXF4+9cPR+aIeQtjWdsIg7IUvfLGrX/T7fyYAAGCnffnl2+M/Ojr72/X3/2/Mf3c1fnEw9htxbr8/xeX5fQL5+wA2vV//ifY8c0XrPd++XiNZbyzGZFL3VMt2wtp8g+3Pmy/K12jfzkRBvpkk32ySL52noJ6sn3WYSzB0mAkwX28uWZ7Ow1hPcmRJ/rs75AIAAIDc0gvPPr909sVzD5559smnTz196rmjR45/+/jxww9966Gltfv6l1rv7gcAAACG0cZNv/2uBAAAAAAAAAAAAAAAAAAAAEZXFR8n1u99BAAAgFH3r/MhhBUhCiL/gMF+1zHskQ1ADbsXq5P9r2FvR/DvUAghhBDbjP6e9005lhmMWF1NP2keAAAAYHddufTSydZ2k5VsR/M1t9ZYb67GvHk7++Bf5q9FvtrFh9uvl+zb0WoYdVW//uUf1PyTHcc/eHVn869diG9s9Lv//1dr38CJtcd67E33mvfepV8sNPOHEG6v95g/3f/He83Y7lCS/97QW/7V95L8T7T1ar3mvy/Jv6/H/Jv2//miDFPXzX9/zL8Q+4fu6TV/+y5OJtl6fQF8M9n/p0Kv+ZP9b/SYMPFAzA8Ao6j523z1fH8L2WH5UUJ+PD0T+/n+5ges6d0PWz3+ryXbqW+78vbt5sdBt8Z+86hupT1vbqv159+X2djeULLO1LDcVVJU/079HHdbUf3jFddRVlH9ExXXUVZR/Z3P3gdPUf3XP3scHEX193whos+K6h+W68pF9c9UXEdZRfXPVlxHWUX1b/X3eL8U1b+/4jrKKqp/ruI6yiqqv+RltcoV1T9fcR1lFdV/Y8V1lFVU/00V11FWUf03V1xHv9wR26Lz4fz8cy6O5f1G0p/s8L3s+Y8hAAAAwK7650DO/9dy5aDvtQghhBBiGGJsAGoQYpjjP6vr+l2HEGL3YnW1n1cf6LdsiO4VB2Dn7O5sFgw6P//R5uc/2vz8uZ78L/FZ0s+NdRmvdxkf7zI+kYxnyRMni8ajm5LtrubXNaObu4z/X9yDovH9yfN/nIzf2mX7C13Gb+syfnuX8Tu6jAMAADAabomt80MAAADYu17+5adv/PreJy7NX75w4ESY2DTv/OHYn4x/W3899tN573Pj8W/+P4n992P7u9j+PVnf/ScAAACw+/LPifH3fwAAANi78s8pdf4PAAAAe9d8bJ3/AwAAwN51Y2yd/wMAAMAelk11Xhzb/LrA3bHtdV4/AGDw/X9s74ztgdjeFduvxTY/Drgntl+vqD4AYOf8/Hs/Pf5WtjHf/9Fk/EpcnrebrKxfKchq7TP5T8d2X2y/0WM96ecB9Jo/t7/HPLuVf26b+QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvaO29njs2EIWwjufvf3ozybe+PO1ZXc11zi49pjFXiOEMN58Xj660f9VXPHKpZdOtrZXY5uFIyELWXN5eOxiM9NMCGElHAyfh0b4aGn5qw/ffeTQx69N3fLmuWde2cVvQdv+AQAAwF70vwAAAP//7lUWHg==")
chdir(&(0x7f0000000140)='./file0\x00')
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0x0, 0x0, &(0x7f00000000c0))

2m21.324307224s ago: executing program 2 (id=42):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x40, r1, 0x709, 0x0, 0x3, {0x2e}, [{@pci={{0x8}, {0x11}}, {0xd}}]}, 0x40}}, 0x0)

2m20.900469888s ago: executing program 32 (id=42):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x40, r1, 0x709, 0x0, 0x3, {0x2e}, [{@pci={{0x8}, {0x11}}, {0xd}}]}, 0x40}}, 0x0)

2m8.072116554s ago: executing program 6 (id=183):
syz_io_uring_setup(0x111, 0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x40, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x24, 0x3, @multicast2}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

2m7.644516516s ago: executing program 6 (id=186):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = semget$private(0x0, 0x5, 0x0)
semop(r0, &(0x7f0000002480)=[{}], 0x1)

2m7.465929305s ago: executing program 6 (id=190):
socket$tipc(0x1e, 0x5, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0)

2m7.362845753s ago: executing program 6 (id=192):
syz_mount_image$ext4(&(0x7f0000001280)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000001080), 0x1, 0x4fe, &(0x7f0000000a40)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})

2m6.889528454s ago: executing program 6 (id=203):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0)
ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080))

2m6.373011299s ago: executing program 6 (id=206):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000000c0)={0x40, 0xe, 0xd, "c6c536ad1782030c14f6b30713"}, 0x0, 0x0})

2m5.985151546s ago: executing program 33 (id=206):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000000c0)={0x40, 0xe, 0xd, "c6c536ad1782030c14f6b30713"}, 0x0, 0x0})

2m2.941126418s ago: executing program 0 (id=242):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1})

2m2.704200074s ago: executing program 0 (id=244):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000500)={0x40, 0xe, 0x4, "704e9586"}, 0x0, 0x0, 0x0, 0x0})

2m0.817715596s ago: executing program 0 (id=257):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711817000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m0.579684052s ago: executing program 0 (id=261):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000001a00)=ANY=[@ANYBLOB='allow_utime=00000000000000000000302,namecase=1,errors=remount-ro,umask=00000000000000000000020,fmask=00000000000000000000005,iocharset=iso8859-14,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030000000002c646973636172642c7569643d020331dcd7706de469da08a27f989c2c8492e71601372cb14bdcaee57b93e3d030470bd060999c22775e7b5ed20cdc0d19238d47a5ad1a7e4bb598f5658bf54b4ca97cce85a6296d1725", @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000020000002,defcontext=user_u,obj_user=iocharset,\x00'], 0x1, 0x152a, &(0x7f0000000340)="$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")
chroot(&(0x7f0000000180)='./file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)

2m0.301125656s ago: executing program 0 (id=264):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x4, 0x0)

1m59.74311838s ago: executing program 0 (id=269):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000140)={0x2, 0xaf, 0x80})

1m59.188962926s ago: executing program 34 (id=269):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000140)={0x2, 0xaf, 0x80})

1m23.600441714s ago: executing program 4 (id=691):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e000102000000000000", @ANYRES32=0x0, @ANYRES32], 0x1c}}, 0x0)

1m22.551394411s ago: executing program 4 (id=701):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10)

1m21.517947468s ago: executing program 4 (id=705):
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x37})

1m21.122097309s ago: executing program 4 (id=709):
syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x20c, &(0x7f0000000680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000040)={0xbc79, 0x10000002000003, 0x0, 0x800000})

1m20.602796599s ago: executing program 4 (id=716):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d", 0x14}], 0x1}}], 0x1, 0x20008000)

1m20.128534807s ago: executing program 4 (id=718):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

1m9.325726188s ago: executing program 8 (id=777):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={<r1=>0xffffffffffffffff}, 0x106, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {0xffffffffffffffff, r1, 0x2}}, 0x18)

1m8.87246929s ago: executing program 8 (id=780):
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000140), &(0x7f00000007c0)={'syz', 0x0}, &(0x7f0000000980)="f40fc24077021c9b084c60ffc26fd06301176d36c2f546f10626db12b9e78d629870bb26edb4a5e1cc09ed8c58ca4fe84b94a7b70000000000000000002945ffebbfea11dd3d0df936a10285ecc1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b57f5b606a43e50874c90143034142cd5f7bd9b4dd8b57fbccb69ba4376b97b7feb75b9138dde818a3c6b96dd800000", 0xc4, 0xfffffffffffffffb)
keyctl$dh_compute(0x17, &(0x7f0000001340)={r1, r1, r0}, &(0x7f0000003f00)=""/4101, 0x1005, 0x0)

1m7.722571792s ago: executing program 8 (id=789):
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x9440)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/65)

1m7.585558077s ago: executing program 3 (id=790):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x38}, 0x300}, 0x0)

1m7.270268717s ago: executing program 8 (id=794):
r0 = socket$inet(0x2, 0x4000000805, 0x0)
listen(r0, 0x5)
sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000084"], 0x18}}], 0x2, 0x844)

1m7.166466632s ago: executing program 3 (id=795):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xffffffffffffffb0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84)
recvmmsg(r0, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10000, 0x0)

1m6.852380922s ago: executing program 8 (id=797):
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x58, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x5}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0x58}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000400016803c0001800c000500f9ffffff3f060004280003"], 0x68}, 0x1, 0x0, 0x0, 0x44004}, 0x0)

1m6.706947071s ago: executing program 3 (id=799):
bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc)

1m6.317660896s ago: executing program 3 (id=802):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x600, 0x0, 0x7}, 0x10)

1m6.141478118s ago: executing program 8 (id=804):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001340), 0x100, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001380)={'dvmrp1\x00', 0x2})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)={0x1, 0x9, [@remote, @multicast, @empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @multicast, @random="ba03bc1c19da", @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @empty]})

1m5.897127882s ago: executing program 3 (id=806):
syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x2800000, &(0x7f0000000740)=ANY=[@ANYRES64, @ANYBLOB="1a8655d26e06c6450bdb9303032f6eb1d14d2a1a97778c701e02cb65e93f8c2c55acc8d8b229057658092950d36f5a7708726018c20d7dd7d402982b10679e4caf71ba5b1179e2eecb16786dc112f9601d783f85bbe54dd69cf82090835fa3b2ef465a4f2f8ee5e0c9ebf49280320a5ef65410103aa2435966db15e64dcc69fbfd00fa7a850207d76381abbd17ff6fd174af4c06fd1a6863b81924bba857133e013cfda1f33c6f3454b500cbad2f5823", @ANYRES8, @ANYRES64=0x0], 0xfd, 0x5aa1, &(0x7f0000000940)="$eJzs3X2QHOV5IPC3Z2a1X/pYCRxkMKtFRheCY2vFV/kjFSu5xE6B45KLlIM42bCgFZG9Eip9BJBxLHLgswrsslNOJTipOuLCvrOtuKiyL0ahTMCcxPlLxcVHXWHq7Bz2H74iHKoAOsrl86Z2pt/ZmZ7p7dnZ2UWC36+k7el3ep5+++13evp5u3cnAAAA8Jpw/K59p9577u9+508nX/rY7/39rjvCcLlaPhAXGEmnt75SNWQp9VfWVqfZfvGrH/nyT8du/O1vPzD0hZePbb9gxw9/56wbH/rQlUfv/atHX1zx9V8+UxQ39qeLZ+eT55IQBr558s8/fuy758yUJStnfpYOhbA6WfPo6iSEOxtDjP88hLA9nVlbL766+vNrL126Y2Z6x939TetdlamH/v7aNrOfkxDCwVO3vCn86Le23vn9dV/9274jzx6aXSQZaOhPIay8vvH1fSGEwfT/jNjbYn9M0umWEMJQw+veWlCvN3ZQ7xkbM+Vx/rx0uiydDhfEi8+vz8yXMstl56O+zHSoYH0LlVePbpcrsjwzn/QobpRXz1i+Op1+I51ePM/45XQbykkoJaFSr/5UMttHQsN+S0JS3ZcD9flSfd+GdPsz80lmvpSZL/dltqu63rSjlZOkuTwulymPh+NKWn5B47G6jasbHjcu9/pYlr5RX84ukwk63PKgvl1VsV4n56jLUig1HIPaldd3fLozhtOy4WRNy2um24jPHdt6z4bytm8dH8mpR/JAksZPuop/8Hurl3/wK4cPrM2Lf30pjV/qKv6Przrx/LWHP/+53PifjvHLXcW/5OGh56567K71ue1zMrZPpav4E888/sl1Z99wJLf+98X4A13F33z0RP+KUw8/klv/8dg+g13Ff/od7/rJl5588Nnc+CHGH+oq/rajez7VP3rqotz4j8T2Ge6u/7xw5IqnRkd/NpYX/4kYf0VX8b94qP/t96+6+8rc/bslts9IV/Hfc+FDdy4/9eD5ecfO5L5efXICvDadlZ5jfSKd7zbPXKiGfOEvxyq1c77l6f8VvVxR5uQzmycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQC+87k3/7d3/+/0jz1XS+f70wdOl2jSWLwshGQwh7Ns/sXf/zt03jX3o5gN7d09MjU3sH5vcvX/vbWOX/frY3sk9UxO3zTw7/uZLa69bE5LaNDm/Zd3909PTpZHmsri+f3vhkR9teOv/+ecQxl/3g9FKbv033rvr/rPb/MxINk+/c9eB9/7g8r9Jt2skrddIm3pNT09Ph5x6/d9rfnH/n5386UUhjP/KXPV6/Onf/IemClULZuOkSv2hVqH+ZKhtPeq1TusT26uyY+fU5Pjc7Tvz+nLOdvy7jzz78x23fuYXtfYdyN2ODtt3cPP0VOkvtr7n///F7bWConq9Uvt9pr3LOTFn6hW3ItYvtt9A2t4r0+1ambNdlZztuuv7jzz5zXMPv3gojFdeWNe6r4u2qy/tAH3J6ztab1zDULK6qXwgXT7u8fi6jft37dm477aDb965a+KmyZsmd79t02Wbrhi//IrLN1a3fGOPtz+u/990uP1L059W/fGhb8SfnfWn5notm3d7zNSruD0aa5T3/hu6+uOffdu9j723VlB0XIlL148n6XRoZj9vCg39rbWt2m1X0f4JIYy1a4fnX7wynPM/d95ZdBxq3DONPzOSzdPfXf8vf/PWv177G7WCJTnON1aoy+N8vdaz9am210C6P6ZP0/btT4+m/clw23pt+u5jffcc/+eP1uu3bFm4dWL//r2baj+XpzVdnpzXtl7Z0rhd66o/yyFtllDvpm3664y+UKtf9vgZF8+26nD63HCypu12ZcXnjm29Z0N527eO57V08kBtjYNhRW2avCFnyanMC8v1Crdb/+n6/ivqH6Pv/uuvv//rf3dZS/+4pPazaLuSnO366pNf/OwXPvMf/q532/Xu3zwx8i//64821AqW4LgSFnRcKdcqUq91Wp+k8bhySQhF7791of125L7/Su23p+j9l13P7PLt441l5odDuav36yUPDz131WN3rc99v56c6/3auLG3N72uXPB+PV0+l7Lvr6TSXI/Fe381dZRk8/S3P3HWoUc/tuXcWkHR52V96Xb9+tIO8o+c7fqHa58avXns3/+P3h03vvzrX7vuhxOb/6RW0P1+j3XpzX4fSNt3IKd967WOeWdj+77lxpunttfKi9r5lTv/TacF+U88lOy77eCHJ6amJvfu62y7Ov08jevJtnK3n6fx6LamYLtKLdu1WA/Cvk7aq9P3W6z/9q7bq/n9NhySrj4XDn5v9fIPfuXwgZGWV6Urur6Uxi91Ff/HV514/trDn/9cbvxPx/iVruJPPPP4J9edfcOR3Pj3JWn8geL4K0NL/M1HT/SvOPXwI7nxx2P9B7uq/9PveNdPvvTkg8/mxg8x/nB37f/CkSueGh39WW78J5J0PTPnSCF87aVLd9Tmk9CXvt9iPfqa6hWy80lmvpSZLzfOl+IoQrqCcpI0l8fl0vILGurSzh/mlMezsIG1tenLcT5kH8xdfropNRz725XPcZ76Hxe7bgAAp4N4/T+eg8br/5PpiVL+SAPMWmgetjYnbszDZsdzmq+xrk3jx9fHccDRt4TxmekdY7UT/fleR4jvh+w4Z1zPRW9sjtF2fOJo40qq628Z5ywaf1+fmY/1qo2XVxry0FRrXlMJHYy/t65n7vH3zOYXX88a+0RLtcYaxq2y+68vHTFrd79Dpr6VmQh5/SM7Lhbv5xhdGbZU19dh/8jeRxP3Q/Y+mrieczMHzm7vo8nrHyOt7dBUr9g/4nJz9I9qlYuvR7buvzBH+87uv/bRsvtvHvt7YGb5xb4+24Nxw7aHtKUbN1zc62Gnxbhkm/hLPC65vCV++gY73ccNY3lsp0qH44nvzynv1XhiPFzEep2coy5LYQHjiQCntZj/x8+Imfx/5gT8/2WWK8pTsmeNMV7ufUI5N2EX5R2t9+kNdfU5vu3onk/1j566KPc855FO79Pb0zQ3VHDfT1E7bsjMF7ZjzgBNUb6XXU9Ru2fvyxgOK7pq9y8euvft96+6+8rcdt9S+yAtbvfPNs2tKGj3MyBfaB9fvvBqyhda4/foPoai8bP8fKRcr8ei5CPpjU+LlY/8QU75fPORoZYH9e2qOn3zkdkP0qZ8pG9p6wUAnDli/l+/fpbm//8UTyzS84iivPXizHyMl5u35pyf5OWtv59Ob80sP5z+RsV8z5vfc+FDdy4/9eD5uXnLfZ3mof+5aW6kMA9dWN6cm0ds6c394rl5RD3PWliemFv/ep64sDw95zJtQ56+sDw6t33qeXTzOMBnT8xmGnPFj+MAufHr4wA9zHN/ObvQ0uW5BeN1mZXF2U7H65Y6j54p6VvZvJ3NefFQb/Lo9NdnFyuPvjqnfL559HDLg/p2VZ2+eXRzuTwaAHi1ivl/PI2r5v/9ITwWFxiMDxZ2nT03L+jReXv274HU4z+xKHnlbPweXf8tzvsWO29d7Lx+scclzvTrv4s9LjRS/QOeizVO9ord77ooefE/1R91nBenK5UXAwBwOov5f0zz4/X/xzLLLTQ/acnf+mqnkLP5yZmXnzcudwbn59eEpcrP+8/k/PxMH/9a3PtkXl35/6wur4u/PP0qzv+rdZb/AwCckWL+H3/tMf79v/+azmf/bn2Hefp92dt5XUd3HT3I0zvI03s8zhbjN94HcAaPA5QXPg4wuOT3xw/OLv9qGgeo6gsGAwAAzgB91Uyp9ffsP5BOs79nn/d7+dfmLN+pSnp6fMP+vZOT1x3Ys31i/+R1u2/ePrnvulv27ty/f7J+7rywvDE3b0nzxr5QSduj/XLZvG1V+vcQVuX8PYTs8jHsedUHrX8PIbvawYK/IzC7/zqrb97+K82xfLv+kbe/8+L/Yc7yUX3/3/hHl1y3Y991O3fv3L9zYmrnwcnm5Uaqv0nd+fdmxuuU8/q+1MyPFqX5f39n3D0Lq0eppR59aXvkfT97kqnH6rQmq/O+/yCn3t/573/2xxdO/+JLIYy/rvyGBbVfsnn6v1wz+fv7j/9gz0z9S3PWv75kWq+i7yvNLh+3pzJ18779b9px84Hd2W+U7E4czyjV5xfpvob07V/ucHxiW075fH9/v9zy4PTU8fgEAABN4vX/eD4brx9+Jj2BiuWFefru2nILvX6cm6ePd5anZ7+XbDZPH+xo+bi9nebpAwvM07PrL8rT2y3fLk/Py7vz4v9BzvLz1Xk/mf99HlNxga8cPpDbT67vrJ9kv8+gaDwnu/x8+0mywH6SXX9RP2m3fLt+krff8+K/L2f5PEX9oVLvDwu7Lye3P3y6s/7wa5n5ov6QXX6+/aG0wP6QXX9Rf2i3fLv+kLd/W+M3DxD0Zvx3pmNU+8XkdbfcvPfDDct10j/KIb9/FH3/RWi9JaOT+i2bfe3ifv9Htzpv38W972vh9Q9hc7Ukr/7x+sCyedW/0/vKFl7/ovafx31lK0PLfWW59X9iYSNhndd/Xvcl3hGf6/T7XTLyFm99/VKN16bdruj+s6Jx3K055fMdx13W8uD0ZBwXXjkx/49nczH/vzud9voy0Jn/PWld3H8fj8G+xyy//Ts8jznNP88/mq33gj/Ps5fc23yeJ/mX5Zecz3MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzvRX1lanx+/ad+q95/7ud/508qWP/d7f77rjVz/y5Z+O3fjb335g6AsvH9t+wY4f/s5ZNz70oSuP3vtXj7644uu/fKYw8Ej1Z+XidHYghOS5JISBb578848f++45M2VJCKGcjBwKYXWy5tHVSSbC+M9DCNvr9Wx+8msvXbpjZnrH3f1N5asyQbLbFYbLsT6N9Qzh1sIt4gw0kPazg6dueVP40W9tvfP76776t31Hnj00u0gy0NCfQlh5fePr+0IIg+n/GbG3rY0vTqdbQghDDa97a0G93thh/TfmzJ+XTpel0+GCOPH59Zn5Uma57HzUl5k2bOtgwaq7klePbpcrsjwznz0YLVRePWP56nT6jXR68Tzjl+P/JJSSUKlXfyqZ7SOhYb8lIanuy4H6fKm+b0O6/Zn5JDNfysyX+zLbVV1v2tHKSdJcHpfLlMfDcSUtv6DxWN3G1Tnlr0+nA+kb9eU4H7IPaoZbHtS3qyrW6+QcdUn9p/bFleJXdqDUcAxqV17f8enOGE7LhpM1La+ZbiM+d2zrPRvK2751fCSnHskDSRo/6Sr+we+tXv7Brxw+sDYv/vWlNH6pq/g/vurE89ce/vzncuN/OsYvdxX/koeHnrvqsbvW57bPydg+la7iTzzz+CfXnX3Dkdz63xfjD3QVf/PRE/0rTj38SG79x2P7DHYV/+l3vOsnX3rywWdz44cYf6ir+NuO7vlU/+ipi3LjPxLbZ7i7/vPCkSueGh392Vhe/Cdi/BVdxf/ioXvffv+qu6/M3b9bYvuMdBX/PRc+dOfyUw+en3fsTO7r1ScnwGvTWek51ifS+W7zzIVqyBf+cqxSO+dbnv5f0csVZcysZ+UixgcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NXpH2+/7APXvPN9WytJCEnOMtNtxOfKyzZvHutivRPPPP7JdWcPNpWt7SIOAAAAUKyWh99wpFQvGQhrwy3JYDiv7fJxjOC8OJc0l2fHEGKc7BhBt3FKbeKUuohT7lF9Kj2K09ejOMt6FKe/R3EGCuIMhM7iDM4RpzLTAzqsz9Cc9ek8znCP4izvUZwVmRDdxlnZo/qs6lGckTnjdN4PV/cozpoexTmrR3HO7lGc1/Uozq/0KM45PYqTHVOebz9ckS55bl6c6oNyYZxKUq4/0W48/Zx0PecvcD3DBetZUfR53OF6BjtczxszryvNcz0DHa7nsgWuJ+lwPb+2wPWUCtYT++2t2frF9cS5Dvv/bT2Kc7BHcT7Sozi39yjOR3sU5096FOdjofnkdL5xADoV8//ZfG8k9Fd+IwylR5zsKEDMd9dVf7Z+3uUdkGK8N2TKlxXFyybqmXjr5lu/7ABCY7zBENZnyvua4lXq+cgc8QYa67ch8+Rc2/uOze3r1hjv4kx5/xzxmjYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJbAP95+2Qeueef7toYkzPxra7qN+Fx52ebNY12s99jWezaUt33reGNZf6WLQAAAAEChmIf31UsGQn9lU+hPljUtN5COAwyk8+WR2nR0ZdgyM03GStX5oWT1nK+rpK/buH/Xno37bjv45p27Jm6avGly99s2XbbpivHLr7h8446dU5PjtZ8h9BfECyFUhx/23XbwwxNTU5N799UKs/Vfm75ubTqfpK8bfUsYn5nekdZ/TcH6Si3rW7wHxXsPAAAAAAAAAAAAAAD4V3btN0TSug4A+PeZmZ0ZVy83/Dce3jmcp1hZ6bWGlrgPBAn+OVyEmLU2OfIkafUOvROzSQ9SU4pAOTgufNGFSZr0xj8pkX84MMwS2usIlfJFvSi0DBVfhDKxu/PMv51xtkluz+vzeTHPM9/f9/f7/n4Px8H3mQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6t+frkbG1qemY8iUgG5DT6yMbyxTStjlD3K09u/0Fp/TtndsZKhREWAgAAAIbK+vCxVqQcpUI+8nHy4rcN0TEQ7b4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4/zNfn5ytTU3PHJ1EJANyGn1kY/limlZHqPvqWw9/9qX16//WGauMsA4AAAAwXNaH51qRclTitBhLTl7o/FvR7N3A2p75S3lt2TrrVpjX++5gUN5pK8w7Y4V5HxuSt7l5vTkAAADgwy/r/wutyESUCmuW9cNZ/z+sr8/yTu3Jyzev1c6k91VcSRIAAACwAln/X2pFKlEqVFr9+kr7/Q3t0OJP59n8Yb/bZ/NP78nL5g/7Pf+y5tXv9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw4TFfn5ytTU3P5JOIZEBOo49sLF9M0+oIdTc9Nf6PS/bfsaEzViqMsBAAAAAwVNaHt1vvcpQK4zEWRy/2/esvuu/RLz36+GRELLX5xWLcvGXHjhs2LXzGpizvnBf2j33/ude/vSzvnKXPVTsgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwgZmvT87WpqZnjkoikgE5jT6ysXwxTasj1H3l81/8y4MHn3itM1YZYR0AAABguKwPb/f+5ahEMYpx4uK3zl5/Qa5n/qB3BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCR48Zv3vKNLXNzW29wszo3jXzEYbCN//Em++d0uOznw39TXu1trO7/SwAAwAfv1Eii8V866fLV3jUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA4mK9PztampmfKSUQyIKeRKbUD2Vi+mKbVEeqmT75YWvPOU890xiojrAMAAAAMl/Xh7d6/HJUYi7E4YfFbv3cCjYX+f+IQbhIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4rMzXJ2drU9Mza5KIZEBOo49sLF9M0+oIdR/Ytfdz9x/7vYs7Y6XCCAsBAAAAQ2V9eLEVKUep8PEoxSnN73PdE5J889r/vUB73vauaeMrnlfvmpd/v3lJIaI1766ekxWap1maV87Wm1i6tupV2/NyzXnVjnmVaJWvtuYtPqzdXdXWDDnf8icPAAAAh07W/5dakYkoFUod/f9Pm9ejmtdBfW7u0G4cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADjszNcnZ2tT0zNJEpEMyGn0kY3li2laHaHuLb/96DFf/dndOztjlRHWAQAAAIbL+vB271+OSqyLj8S6xb4/Jrrzs7x/1t69/95//fXMiLNPPLC+0Lvsj7KbX79y4dO9HxG57uxcxLHNesmAer/5/b03bWy8+2DE2SfkT1lWL96/XveSaeOx2tbLdjx3YPuQhwMAAABHiKz/H2tFJqJUuH5g/5913kP6/5bFBvzYm3b94vjmZ7Mj75mRm2jWyw2o94WND//59PP+/vpC/7+83idbd5/ee939x3cVXIr0SNLG1HU7Nx84d18uO/VS/XxP/ey5fPlbr/37mpvveXepfjnKzfjanq0sVVv+2VM+0sZcbs/Mpe/tqXfXLww4/x2/e+bgr9be/fZC/bdOHW/VPyP61V86eWFg/TgqbYxfcefu8/fu39xdPyKq/eq/8fbFcdIfr7299/zjcbBr4c4n3/nZ+wDSxgsb3tx33n2VC7rrJz31s+f/84MP7P7JPd99PKuf/a3ImafFCuvneuo/f9dxu5697fK13fVzA87/9JUvrd9W/c4fes9/ddeqhYG7WH7+h8565KqXt6S39g4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcWebrk7O1qemZXBKRDMhp9JGN5YtpWh2h7quXvPjGlXf/+IedscoI6wAAAADDZX14u/cvRyWKUYzxxb7/sdrWy3Y8d2B7TCyNJs1rYW7bjTs+cc22nddfvUo7BwAAAFbq1UuSxf6/0IpMRKmwMcaa/f/UdTs3Hzh3Xy7r/3ML1yQirrl2buvZ0cp7/q7jdj172+VrW+8JIhb/LKC8kPeZdt5FF7448eafvn5637xN7bwXNry577z7KhdkedGZd0603k88dNYjV728Jb21tb/OvE99bdtc8/VEtu74FXfuPn/v/s257D1G8zreXDfLm8vtmbn0vT313ESUFsbzzbxy89wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwHLz9cnZ2tT0TOQjkgE5jU7NQDaWL6ZpdYS6l2785e3HvPPEus5YqTDCQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9hBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCvv1ExpH2ccB/Hl2kzebbNIm7QtGxTStilIPLQoielFRkVak4KlSpNragygIIko9mEorlqp4EaxeiqigRilUsLFYWiUV/xUvHlRQqB6EUgxoluJBJZtnNpvJTjduVFA+H1iePM/MfOc3M88+mwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4F+lp2u43p7Y81Dt9gtu/uSJe6cfv/W9B3Zd9tgbP4xuu/Hjg32vnp3cvnrH1zet3Hbkvg0T+186/svAO7+dahv86GyzNnUrIcQzMYTK+1PPPzn56XkzYzGEUI6DYyEMxRXHh2IuYf2vIYTtjTrnbzw0fdWOmXbXvp5548tzIfnrCtVyVs+swfn18t9SSfNsZ+2RK8K3N2ze/fmqt9/qHj89NrdLnNmnnOZTCMu2Nh/fHULoTZ8Z2Wwbzg5O7aYQQl/Tcde0qeviRda/LoRarl93YWr/l9pqm5xs+5pcv5TbL9/PdOfavjbnW6qiOtru19vZ+fpz/fxitFSNOte1Hh9K7bupXfsn88vZJ4ZSDF2N8u+Pc3MkND23GGL9WVYa/VLj2YZ0/bl+zPVLuX65O3dd9fOmiVaOcf54tl9uPFuOu9L46ua1uoU7CsbPT20lfVHPZv2Q/2NWdcEfjeuqy+qaOkct/4RS0xrUarzx4NPDqKaxalyx4JjfW8i2TW5++tLylg9ODBbUEQ/GlB87yt/52VD/XW/ufXi4KH9rKeWXOsr/buPJn+7c+/KLhfnPZfnljvKvPNp3ZuOHe9YU3p+puRVkMfkx9bNtd5/66JlV/79nvNWzrmceyO5/paP6r5842TNQO3qssP712f3p7Sj/m+tu+f71Lw+fLswPWX5fR/lbJh58tmekdnlh/rHZr0K1PkM7mD8/j1/91cjIj6NF+V9k93+gRX5sm//a2P5rX1m+b0Ph/NyU3Z/BlL/wh+1c+bddcmR3f+3wRUVrZzyw2F9YAFpZmf7Heir1271nHpoutXzPXKqm94UXRrtmf4H602fgrzxRzsx5lv2N+QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH+wAwckAAAAAIL+v25HoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwVAAD//1eECw0=")
r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x80)

1m5.445884335s ago: executing program 5 (id=809):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003680)=""/4098, 0x1002}, {&(0x7f0000000b80)=""/4120, 0x1018}, {&(0x7f00000009c0)=""/112, 0x70}, {&(0x7f0000000200)=""/165, 0xa5}], 0x4}, 0x0)

1m4.996113076s ago: executing program 35 (id=718):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

1m4.928158361s ago: executing program 5 (id=812):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000240)=0x1000000)

1m3.817845439s ago: executing program 5 (id=816):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x1d, 0x0, 0x0, 0xfffff010}]}, 0x10)

1m3.326115473s ago: executing program 5 (id=819):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x4, 0x0, 0x0, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0xfc, 0x0, 0x4, 0x0, "63bad47c2fbf2948"}}, 0x48}}, 0x0)

1m2.837626553s ago: executing program 5 (id=822):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00')

1m2.491346131s ago: executing program 5 (id=824):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7c2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x305)

1m2.051099075s ago: executing program 3 (id=825):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000080)={[{@noload}]}, 0x9, 0x60d, &(0x7f0000000740)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FITRIM(r0, 0xc0185879, 0x0)

50.626744594s ago: executing program 36 (id=804):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001340), 0x100, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001380)={'dvmrp1\x00', 0x2})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)={0x1, 0x9, [@remote, @multicast, @empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @multicast, @random="ba03bc1c19da", @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @empty]})

47.336375118s ago: executing program 37 (id=824):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7c2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x305)

46.673880502s ago: executing program 38 (id=825):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000080)={[{@noload}]}, 0x9, 0x60d, &(0x7f0000000740)="$eJzs3c1vVFUbAPDn3k4/aN/3bSFvVFxIE2MgUVpawBBjIsQtIfixc1VpIUihhNZokcSS4EZj3LgwceVC/C+UxK0Lty7cuDIkxBgWYoiMuTN32ulMp0w/plNmfr/k0vvB3PPcwjPnzLnn3Amga41mf6QR+yPiahIxXHWsEPnB0fLfu//njXPZkkSx+NYfSdz4OFmqPleS/xzKX/zPcCQ/pxH7eurLnV+8fmlqdnbmWr49vnD56vj84vXDFy9PXZi5MHNl8uXJE8ePHT8xcWRL11eoWj99670Phj898863Xz9MJr779UwSJ+NRHlt2XbWv7d9SydnvbDSKZQ9qYzqxxXPvFn8Nr/4dZ5LaHexa5/P/j70R8XQMR0/Vv+ZwfPJGW4MDWqqYRKWOArpOsqn8H9j+QIAdVmkHZJ9/0wafg+ulLW6VADvh3qlyB0C5b683Iir5Xyj3DcZAqW9g8H6yqp8niYit9cyVZWX89OOZW9kSTb//ANth6Wall7vct7+Sf0kpN0dioLQ1eD9dlf9p1ZLtf3OT5Y/WbK+R/2vcPQC2w9LNiHgmr//7oun8T2ry/91Nlt9E/gMAAAAAAABNunMqIl5amdu3cv8tXR7/07fG+J+hiDi5DeU//v5fejdfSbahOKDKvVMRr67M7a3kWPXo4JGe/D7/f0vjAXrT8xdnZ45ExP8i4lD09mfbEzXnrR4hfPjzfV81Kr96/F+2ZHFUxgLmZ7pbqJmIOz21MLX1Kwfu3Yx4tjT+90C+Z/X4n6z+T+rq/89ez/L7apNl7Hvh9tlGxx6f/0CrFL+JOBhrtf9XmtvJ+s/nGC+1B8YrrYJ6z330xfeNypf/0D5Z/T+4fv73J9XP65nf2Pn7IuLoYqHY6Phm2/99yds9lfNnPpxaWLg2EdGXnK7fP7mxmKFTVfKhki9Z/h96fv3+v+X2f1Ue7omIpSbLfOrR0G+Njqn/oX2y/J9ev/4fWV3/b3xl8vbID/kjxuqcbar+P1aq0w/le/T/QbX653E0m6BtCRcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnnBpRPwnknRseT1Nx8YihiLi/zGYzs7NL7x4fu79K9PZsdXf/z9c3k4q3/8/UrU9WbN9NCL2RsSXPXtK22Pn5man233xAAAAAAAAAAAAAAAAAAAAsEsMleb8F/tr5/9nfu9pd3RAyxXyn/Iduk9h068s9m9rIMCO23z+A0+65vO/t6VxADuvcf4/eFgs2dFwgB2k/Q/da5P573YBdAD1P3SrJvv0BlodB9AO6n8AAAAAAOgoew/c+SWJiKVX9pSWTF9+zGB/6GxpuwMA2sYYXuhehbl2RwC0i8/4QLK89veak/0bj/5PWhMQAAAAAAAAAAAAAFDn4H7z/6FbrT//39h+6GTrzP9fK/k9LgA6SOOv/lD3Q6fzGR94XG1v/j8AAAAAAAAAAAAA7AID1y9Nzc7OXJtffPJWXtsdYWxsZWlqV4SxrSuPWnPm3ojYHRe40yuVR3C0MYw2vy8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADL/g0AAP//YBopSA==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FITRIM(r0, 0xc0185879, 0x0)

20.67436932s ago: executing program 7 (id=988):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000500)='./bus\x00', 0x2000006, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYBLOB="2c6f626a5f636f6c61a3ea000073683c000e1c906ec52a91a85a14cb7fb0c282c5737a29f37a113e", @ANYBLOB="42e76cb75508f3f54e01b9f07bef8eac17d4aa4e5abff7033b1e4caf776d5472e2043c9d20b68a7178be937f02a899f4883c6d8f5ec5543efe50904a402fa451c0aad8ef7d553c6062f66ae403a40294c9e28a10a60fe26869b2c96a8fc066bb89b112b501820a543e1d595bb9d5ea43d228969d2d5442ab3919894eda25fb04535ab8cd87accab34a8fa00e28fe4f300117ab6718f41445945e46c0454419764df25b20011c8fac865a13ff729f710dcc987a5fabe49f4524caae8f1eb49d", @ANYRES64=0x0], 0x25, 0x363, &(0x7f0000000100)="$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")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f000000ac40)={0x2020}, 0x2020)

19.961674195s ago: executing program 7 (id=993):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a00800020", @ANYBLOB='\x00\x00\x00\x00\b'], 0x38}}, 0x0)

19.728563581s ago: executing program 9 (id=994):
chroot(&(0x7f0000000080)='./file0/file0\x00')
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000100))

19.607432966s ago: executing program 7 (id=995):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0xfffffffd}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7c8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

19.44623069s ago: executing program 9 (id=996):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

19.141030718s ago: executing program 9 (id=997):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TCSETSF2(r0, 0x5432, 0x0)

18.846883774s ago: executing program 7 (id=998):
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)

18.776658781s ago: executing program 9 (id=1000):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f00000003c0)={0x40, 0xf, 0x6, "44696b831856"}, 0x0, 0x0})
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)

17.750490934s ago: executing program 1 (id=1004):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10)
getxattr(0x0, 0x0, 0x0, 0x0)

17.506510823s ago: executing program 1 (id=1005):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0)

17.470882151s ago: executing program 7 (id=1006):
syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000040)='./file0\x00', 0x1600008, &(0x7f0000000100)={[{@nodecompose}, {@nls={'nls', 0x3d, 'maccyrillic'}}, {@force}, {@nobarrier}, {@part={'part', 0x3d, 0x2}}, {@barrier}, {@type={'type', 0x3d, "eaab9aa0"}}]}, 0x3, 0x632, &(0x7f0000000800)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

17.263645732s ago: executing program 1 (id=1007):
syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xaf1, &(0x7f0000001cc0)="$eJzs3V+IXFf9APBzd3c2u2n7y6a/RNc0tonVtmq7aTZrrAZNSoJgaIr4Uii+hDStwRjBCmopmOTJN1tKCj75B5/6UqoIFkRCn3wp2EAR8lQFfWiIWPChRpORnbln5t6Tmdydze7cnd3PB+6eufecO99zZ+/cuf/OPQHYsMZafxcWZrMQLrz5ypH3H/j79OKUg50SM62/E4WxRgghy8cnkvd7b7ydXv/gxRO90izMt/7G8fDk1c68d4QQzoZd4WKYCTsuXHr57fknjp07en73O68duLI6Sw8AABvL1y4eWNj+lz/ds/Xa6/ceCps60+P++UycMNXe7z+U7/jH/f+xUB5fTLdeToJ037Z03LA4jE2Xi473KFeM00jKTfSIvzhMJlVo9Cm3Kdw6/nhhWq/lhlEW1+OZkI3NhRA2d8bHxubm2sfkoXVcP5nNnTl1+tnna6oosOL+dV8IYVdhOHy+PL7WhoNroA7LHJproA4jORwaXqxrzbbal3lIQ3NL3VsggLb0euFNzmYrGq/zbhNLi3/18bHe88MKGPb6P1D8yZviTw81fqh5+ddA/F+ds8Vh5azXtSkuV/we3ZmPp9cR0vuXXv19eb6u9EpHeWp6PaKxxHr2u44wKtcX+tVzfMj1WK5+9U/Xi/XqS3kaP4cvl3LvK31/0v/pqPyPgd4+TM//GwyrODz2fv11GPkhlMYbt/NezZq3P8Dald4314zXR3OTFfmbKvKnKvKnK/I3V+TfUZEPG9lvvveT8FLWPd+VHtMPej48nme7K0//b8D6pOcjB42f3vc7qNuNn95PDGvZ744/dfKxZ56+1L7/P+us/zfy9T0ebszk362LeYF4vjA9rx7vq+82HCjnp+XuTupzV4/yrdfbyuWybd33CYXtzE31mC3Pt6VfuZ3lcjNJuel8mErqm+6fbE7mi/sfcbsaP6+JZHkbyXJMJvWI25WteZrWA5Yjro+t+/8LF63i/f9x/ZwNjezZU6dPPpqPx/X0j+ONTYvT9w6z0sCKSNv/dMfL7X9mQ7n9z52d6Y2x4nZhS3d61t4uvJG/X3n6fCdOYXrhRy3+zn1zfLpVfu7Ed04/s8LLDhvd8z984VvHT58++V0vlv3iK2ujGoO8iIcta6U+Xgz6Ytdqh6h5wwSsuj0/au8EPHLq28efO/ncyTP79u/fNz+//wv7Fva09uv3FPfui87WUFtgJXV/9OuuCQAAAAAAAAAAALBU3z965NK7b33+crv9f7f9X2z/H+/8je3/f5y0/0/bycd28LEd4NYe+a0yyQNWJ5NyjXz4/6S+25I425P5PpKnnX788vb/MVz6XNdYn48m0xt9RpPHCdz0vJTJ5BkkaX+Bn8jT83n6ywA1yno/wj9db3s83zr7sLCux+dTFJrwNj0feHTE/1trbSg80ii2/+75XKce7bUZLcNosVj3MgK9/WNDPf/7n90FH2C+h2uv90YbJoYb76eDrxPrZWj23Utfag82ACuj7v4//xbaceP5zzN/+OrU4hCLXX28vL1Mn18Kg/jzu+Xxtd7/5GrHT/vtG3b8upd/2P1/dvq/y7d/cbvXf/uX9Jg3s7y4//7ZlcuFsGHHUuOnyx+fA71tsPjX8vhxaR4MS4vf/EUSP70gtET/SeJvXmL8m5Z/5/Li/zePHz+2h+5favx2jbOxcj2mk+WI1//S88bR9WT547M9bxH/6y/0Wv5ldtR4I48PG9mo9DM7qGQ/orPTXtX/76C//7fb/2+nslm5Mul9GJ/Lx+OGON7nkPZ3Mmj94/0V8Xdge/L+WcXvm/5/R9sX87Tq+xD7/43r40z+k18Yb32WcbzR47Ndr9saGFXvbajrf8MarrQPg5Y3/1T99TcMMDTHlzFfp5+4muvfbDZX94RWhVqDU/vnX/dxQt3x6/78q6T9/6b78Gn/v2l+2v9vmp/2/5vmT+f/oX75af+/6eeZ9v+bpRVP3jftH3i2Iv9jFfk7eud3ot9TMf/OivyPV+Tv7uQfLJWI+ffecv5uuX7vf3dF/v0V+Z+syP9URf4DFfkPFfKLfUDH/E8n82dJ/noX26P0+/yA9Sttn+f7DxtHvP7T7/u/rZs/WSwy3FoCq+HV1/cefvrX35hpt/+f7JwPidfxDuXjjfzY6Af5eHrdOxTGF/Peysf/muSv9fMdsJGkz89If/8frMgHRle8z8v3GzagbKr35Dytem5Vv/18Rstn8vSzefpwnj6Sp3N5uidP9+bp/JDqx+o4/MZvD7yUdY/3tyT5S72fPG0PVHpOVAhh3xLrk54fGPR+9vQ5foO63fjLbA4GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQm7HW34WF2SyEC2++cuSpY6f2LE452Ckx0/o7URhrdOYL4dE8Hc/Tn+cvrn/w4olieiNPszAfspB1pocnr3Yi3RFCOBt2hYthJuy4cOnlt+efOHbu6Pnd77x24MrqfQIAAACw/v0vAAD//8AFCcQ=")
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0))
rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00')

17.160955894s ago: executing program 7 (id=1008):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f00)={0x98, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)

17.090432966s ago: executing program 9 (id=1009):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000)=0x4, 0x4)
getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)

16.779342185s ago: executing program 9 (id=1010):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@chandef_params, @NL80211_ATTR_DURATION={0x8}]}, 0x24}}, 0x0)

16.639877189s ago: executing program 1 (id=1011):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x80041285, &(0x7f0000001080))

16.39672009s ago: executing program 1 (id=1012):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file1\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$eJzs3X2QVWUdB/Bzd1lYZGI3BMGBFShfQEIhpVRS7kBBuDJtkjU2GQtioaAwzBI1ii04WLgam1kz5QxCiwjDUmszGmXlygyQk9PWjIPIgjLThjG9SMXEFjU2e+99Lveey+5eyVxfPh9m99zn/s7znOeeOX/c72WfcyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIoujgjtr/rB1ZV75+06hFt199cPSq0RNWVDWdHHWg+rzdl/absWjovuntdw6b0bH6SPX65tsu6IyiRKpfItN/3vSPX/+FufPmlIcBaz+Z3lZWdnfIdNfD6Ub/vCe7+uX/zI+iqCw2QGlmu7s0p52IHyBaXjhgj8pmbVsycEGyduvmp+ouX7J1XOFLp0t5X0+gr2Suq45T11Iy9bsktke2nXPpJfIu0XT/+AX3prwIAOB1mVST2mTfjmbe4mbb9fF6rJ2MtRtj7fAOoTG3cSbS4/bvbp5j4vU+mmcyHRUGdDvPWD1z/rPtmnj/WDsWNV7HPPN3zUSa8u7muSxW76t5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyVvFa3Ys34z714sOyX549bvfLk4WvLL3zoq/8uWXrzS68dqlnzl7ah+6a33zlsRsfqI9Xrm2+7oDOKKlP9EunuiWknXr1kYvWcUeuf+N7ETc+OP16aGTds++XsHO0PD66siKIFOZWOMOzRwVFUk19INaPvFhZuTT2YHQoAAAC8k5yb+l2SbafjYFleO5FKk4nUvyAdFstmbVsycEGyduvmp+ouX7J13JmPV9PNeMnTjpdtV576SeQE4xB/4+OdqoddlxeM07P4iPE8P+X5l1+oGHHtT5+pOu+mlde/NPKax9tmfnP48UX7K+8YtGrc2CsK8n9lz/k/nDn5HwAAgP+F/B8fp2e95f/PzK+75Y5HvnJszD2HVw66+8H9G4eVH7nplsn7/jj8hosvvqz2xoL8PybvkAX5P8w45P+S6MzyPwAAALyV/b/zf7JgnJ71lv/bhzff/MB7Di2sbOt4evtlK/b0X3j1RUMOPHTR3In3XjdozPkNBfl/UnH5v1/utMOTz4UJL66IoknFn1QAAAAgT/h/91MfLYS8nv7kIJ7XW+dtGd3y6swvTxj78KH6P1Vtnvj5jUMe37lh5jd2PXf3/RPbzi7I/8ni8n/Zm/NyAQAAgCI0HTpnxNBPJ38e3X/01vnf/+yuR+9b+sWrLtnbOWvC2l9UP72jviD/1xSX/wf0zcsBAAAATuPE+GsW/mPnkd9e1/yJ+5qO/v5Lq0p/NaNp9/62hqZ/bh81e/XkgvxfW1z+Pyuzzax8SHfaE/4K4VsVUVTe9WBZurA3apyWLQAAAABvkJDT75ryfMm9A6edu2Xub06Me+KFPZ/aN3vxhnPWTGp69n2tiz9y4WMF+X9Zz/f/D3c6COv/8+7/V7D+P6eQvuvfVDcGAAAA4N2ocD1/uD1++psLuvv+/WLX///w6xv+mqiqf/ID8342q/P9zT/Z2zr1wZNVf5hz/OGW5MgnL32xIP/XF5f/S3O3b+T3/wEAAMAZeLt9/9+NBeP0rLf7/7c980j1o1d+6GtXza2buuN3H77iz68Mn9qwPXpl+UfbFx342K5fF+T/xuLyf9gOyn15reH83FMRRSO6HmTuJrgtTHdxrNBSllNIn/hYj7mhR6bQMiCnkLIs1uODFVE0tutBfazw3lBojBWODc4UNsYKbaGQuR6yhR/ECq3hSvvO4Mx044Ufh0JmgUVLWEExKLskItbj79316Cqctkd79uAAAADvKiE8Z7JsWX4zikfZlkRvO5zV2w4lve1Q2tsO/WI7xHfs7vmoNr8Qnv/Rt294ecBdD2yom7Jl04KqhrPX/euxyZNuX7Z2Z93SziF/W7euIP9vLC7/h1PRP73pbv1/FNb/Z77XMLv+vzYUKmOFllCoid8xoCYcIx12G8IxKmsyPY6NyBYAAADgHS18LlDax/MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7J373FW1nXiwL8zzIUZhplRMS+RISaKwTCMKYaZID/TnwQOq6WFJgSDjgxCXEzQTUTd1VzB2+ZtE0jdtIwoNbVUeGnekspLsKl5SfHSK41lS5Js133NnPM9nPOcOc5BQBn3/f5jzvecz/f6nMuc7/M85/sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/N2z85GVfeHmfj/xg3cKBi1eP+krfI4cMn3DMNTceu/jhb0/e777f//8+aw575sydR60955XRi245de+3QmjuKFeSKl5y6F/XNQwePabvotuvGbz0kYF/qUjXm46HXu1/StN3zoutru0dwh0lIZQlA4NrUoHy9P2aWF/fmhB2CJsCmRIt1akSyYbDA1UhLAmbApmq7qoKoSYrcOwT9624uD1xRVUIe4cQKpNtPFuZaqMqGRhQkQpUJwPTy1KBv76TkgncWZoKwBaLb4bMi355c26G+s7LFXj9lW+1jn2wksPrERP1hfO9MXIbdypLRfKB5i162vKqY5vIe3us9G7rBu+2vO18iact+4tU+hvKO5tClaF0csuUiXPaZsdHSkNDQ49CNW2j5/np9WdN2px0t3kdxg7Ub5XX4aoLe49d/OhRw2+tG35Dn0ELN25pNwtt3m2tMqRfc93meYxG+DzpBm+/vG9J/XzpCiHsf9v42798wcs3L7h87K4HPbHTsDc+u/vdLT+75YTxxx++fsVXf//jvPl//bvP/+PLOd6W5uSOrb5dm5qbx0dqYmJdbWpuDgAAAN1Gd9hr+srq/5722X3HDX185OrqW2+659SL7/v8tT9r3a/t4bE77fj8vvN+lDf/71fc8f94yL8me7QrQxjRkTi3LoRdOx5PBW6O3flqXQh7dqSacwMjE4GVIezWkRiYqSpRomcs0S8ReLU2HRiRCDwYA82JwI0xcEkicF4MLE8EJsXAykTgsBgIrbnj2K82PY6iA1UxMCG1EZfHsxD+XBtbS2yrZzJVAQAAbCXp2WF57t2scx22NEOcXi6v6ipDPAO7YIbKRA3JGWxmWlWwhrKuaijtqobMuOe/+/Dzai7pqua80zBKcjNcWXXLpT8aNumNu2e8tOG0Iz7x2quP1S/96afXXfPGU9Mr79/j8ofz5v+N7z7/r+ykIyV5x/9DGNfxN+YuTUfaMvEJzTkZAAAAgC3w1sADvvydsq/NfeH3jwz75K+vfez1lQ9/dO8zb1v7/Bk/+NZ3au4fnTf/H1Hc+f9xn0iPrMxhVdwNMbUuhMbcQKrag/MDqaPevdIBAAAA6A4yx+Mzx8Jb07epU7ST8+n8/M2bmT8e+B/Raf7131p2/Y6feGT2Q7W3zXhqw+NfWTl64bEz3xh05dmP7HvoQU+N/Gze/L+5uPP/q3NvU514MPbi8roQemYFHoq9bA906BcDLxyaG0iP/8G4AS6KVaVPTMhUdVEsMSEGGhOBJYVKPJYpsWtuIP1kZRo/NzOO1nSJrAAAAAC87+LugHhcPp7/v2LBXZf9x41/umzVgUtnnzz98de+V1H5zknL7zyxzwX39li008hJefP/CZt3/n/HPDjv9P62XiEMKQuhR/KHAauqUwsDxkBNSTpxT3Wqrh7JqhZUh3Bw+8CSVb2YXv+/LLnG4JNVqapiYNf+N60f0J64oSqEIdmBNeOXHtCemJMIZBr/YlUIH28fbbLxn/RMNV6ebPyqniHskRXIVDWpZwjtjVUkq7q/Mn0dg2RVyytD2CkrkKlqWGUIcwMA3VX8Xzo5+8FZc+dNndjW1jJzGybiTvyqMKW1raVh0vS2yZUF+jQ50eecdYzOyR9TsZe++V16jaLVx0ytKyad+aFgY3Zb6R35eWcOpu/HL0PlHeNsKs+5u39yyPvuld9EyPoqVWjIpdt4yNXZlWx6EvPqj/krQq/Qc86slpkNZ0ycPXvm0NTfYrM3pf7G40ypbTU0ua2qO+tbES+PgstlJbzXbTUgu5Ihs6fNGDJr7rzBrdMmntxycstpwz7VNKxp6P5NjUPaB5X+28VIB3RWc2Kk7ywtclhbcaS7l2VV8n58aEhISHS3xE2Xj39m0UcXV3538UmXPHH++WefcvrOt1057ft9p48fdOXnlkz9et78f8a7z//jp0784E+vz1Do+H99PMyfenzTYf4JMbCk2OP/9YWO5mdODOiXCMyPgfkO8wMAAPDhEHdHxr2Zcad07SvfOP1/Tjii9NA/HP2LpqGDdrnw1qkDbnx94+kf23vekmvLKvKv/ze/uN//b6X1/zNL1x9VaJn/gbFEY6H1/5PL/GfW/59faP3/5DL/mfX/l3wA6//PyQQSm+TP1v8HAAA+DN6/9f+7XN4/eYGAvAxdLu+fvEBAXoYul/Ev9gIBm73+/89/XrbDx47YrW/ZF56YuNedB/7mpGkP7vKjUVev+3RT/TfPWPPzZXnz/0uKm/9buB8AAAC2Hyfs+6UBC14a8vVzpj/ww8Ezdn7purOfH3HPL4/75MYxfddVr+v76bz5/5Li5v/v//p/odD5//0KBZoLLQxo/T8AAAC6qULr//3t42d987p+O24Y1O/M29+6emrJ8L2fO/XXbRc9NOrwj435xyWTrs2b/y8vbv4fT7sozckde/N2bWpNu5Bc025dbeYnAwAAANA9lIaGhvIi8+YsjDryvbf5dHop0HdLZ9vtE6vWnHvvdX8fcvP5C9Ydf3rtQUf+oeyQOydf99KCU/boX/Pc2rz5/8ri5v85v8tYdWHvsYsfPWr427fWDb+hz6CFGzcd/wcAAAC2nWL3SwAAAAAAAAAAAAAAAB+8Y1b95Kz/+uWY4+4cNu/qR3d+/OT//PqsM1on/aLtiHUHPLv0hk/tk/f7/zCuo1yh3//H6/7F3xf0yckdW+16/b/0/WNHL5vbsWThqtoQ9soOTF0wdYeQvjb/PtmBFScO3KU9sSBZ4u7nDnu5PXFSMnDk4B03tCc+kwhMiIsk7pYMxKsqbuidCMTlFZ9MBuL2WJ4MVKQDF/ZOjaMkua3+UJPaViXJbfV0TQh1WYHMtrqjJtVGSXKAVyQCmQF+LRmIAxybDpQme7WsV6pXMVATiy7uleoVAADbrfgtsDxMaW1raYxf4ePt7mW5t1HOkmXn5FdbUmTzv0svTbb6mKl1xaR7JL+LbrrWeHmobB/C0Lyvq9lZSjpGuXVq6WLT9Skw5K5WeystUC5pczddReERVaVG1DBpetvk8i4Hvn/XWZrKuswyNG+yk52ltGOTFlFLEX0pYkRFbpsiuhzvl4aGhh6JXMNjsD7k6OoVUezv9bPX+Sv0KsjOs3zUQQOOW/bcgRMWPXnQtKnhI5e9M2Li5FmHXPHiU0vnjxw0oUfe/L++uPl/Zfa4NqQvBjA/Xlnv4LoQJhQ5IgAAAPjwO+W05y674P5LX32hecDL04dcuuK3c6+aV1Z783mHP3336W+OX3jSlsYHDHtj6Kl3/ebcjU2jHrqy99X3X7PTkXU//H/Vvea+tWLQmy/cvVfe/L9fcfP/uAcrfSg4tbdjZbz+/7l1IXRcWr8+Fbg5DverdSHs2ZFqjiVSF9Q/KpZoTAVujjtMBsYSE5pzq+oZA8sTgVdr04GVicCDMZDeS3FTSO/KubQ2hAM6UuNyS8yIJeoTgaNjoF8i0BADjYlA7xgYkQi83jsdaE4EHo2B0Jq7rW7tnd5WAAAAmyM9zyrPvRuS87zlZV1lKOkqQ3VXGUq7ylDZVYZCo4j3fxwzlCdOXinJylSerLUqUUtehngx/M3uV16G8FhuzmTBvKbj+QeZ8w1KcjNccWbF9Dc/33/R8UPGrB/ftPhzc38a/uHtOW9d8OYvz6977pqNJXnz/8bi5v/Vubep1h+M8/9N1/9LBR6K3bs8njreLwZeODQ3kN4x8GCc7F6Uqao5XSI9ab8olhgRA/0SgRkxMCIRmDAuHViyS24gPdPONH5upvHWdImsAAAAALzv4g6CuJsmzv+fXTv+iWnjf3vQZX1nLzx/+VFffvrXx736i3t73v3d/osebitZuzpv/j+iuPl/bK9XdmPnxd6s7R3CHSWbepMJDK5JBeJ+jJr48/i+NSHskLWDI1OipTpVoiLRcHigKvUL9YpkVXdVpdYYiPePfeK+FRe3J66oCmHvrL0vmTaerUy1UZUMDKhIBaqTgellqUDc85MJ3FmaCsAWy+wVjC+o9KkuGfWdlyvw+vuwXBM0Oby8faCd5OvsN1fbSmXygfQ+1YzNe9ryqmObyHt7rPRu647vtnrvtuwvUulvKO9sClWG0sktUybOaZsdH8n+JWuebfQ8Z/9KtZj0Vngdzn/vve1aZbIDjYmPj8bOy3X+OiyJ1a26sPfYxY8eNfzWuuE39Bm0cGPR3Sgg/lB45rCr6rM377ZWGdKvuW73edLs86Q7/hvo52kLIYy7d+xFjYfcuHDSiP7X73xH7fDLvzT4lkMbnx1XM2eXw8e89sV5efP/5uLm/2WJ2w4b48acVRfCvlkbd1Xc/KPqUp+DWYHUp+RO+YHUIfeXagt+cgIAAMDWltndkdlf0Jq+TZ0Qnpwn5+dv3sz8cX/FiE7zF9vv/lecsnL0hAN/23f8XoccvM9Zdy04er+/Tbz+tT9Wj5z0wPd+tfr6vPn/hHef//dMdNPxf8f/2UYc/+/U9r4rumfygflbtCs6rzq2Ccf/O7W9v9sc/++U4/+O/3fG8f8uOP7fqe39acv7ljTDl64Qwr9f/vm/vX3Pbv02LC393pQH5vU//rLvL1r2k52f+efH/mn69H33/FXe/H9GcfN/6/91vmhfZv2/CYXW/5tRaP2/+db/AwAAtqkCC80l53l5q/flZUiu3peXocsFArtcYtD6f5u9/t+L/3Lpgr2mjv3GiWc9dnDvR+tHrRkz6O8nvbrnmuuevHLoIyf8/dt58//5xc3/48uhV3br3WX9v37jClR1SQzMsDAgAAAA26NCOwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4YJ31xynnjVjw+J+ap39l/fLx32nd8fGHprzefMQPRy87es0pu5xyb581hz1z5s6j1p7zyuhFt5y691shtHaUK0kVLzn0r+saBo8e03fR7dcMXvrIwL9UpustT99+NCd3bPXt2hCWZD1SExPratvvbAocO3rZ3LL2xKraEPbKDkxdMHWH9sSNtSHskx1YceLAXdoTC5Il7n7usJfbEyclA0cO3nFDe+Iz6UBJsrv/1jvV3ZJkdy/uHUJdViDT3VN751aVaeOIdKA02cZ3a1JtxEBNLHpVTaqNGGiLJVp7hjCkLIQeyaoeqUxV1SNZ1U8rU1X1SFZ1dmUIB4cQypJVPV+RqqosOfLHKlJVxcCu/W9aP6A9sbQihCHZgTXjlx7QnpiZCGQaP6YihI+3v2SSjd9anmq8PNn4v5aHsEcIoSJZ4s2yVImKZIkXy0LYKSuwaSOWhTA38OEQP30mZz84a+68qRPb2lpmbsNERbqtqjClta2lYdL0tsmViT4VUpKVfuec9z72360/a1L77epjptYVky5Llyvv6HJTec7d/bf33sd+VWdXsun5yKs/5q8IvULPObNaZjacMXH27JlDU3+Lzd6U+tsjHU1tq6HdZVsNyK5kyOxpM4bMmjtvcOu0iSe3nNxy2rBPNQ1rGrp/U+OQ9kGl/26NkS59/0e6e1lWJe/H+19CQqK7JUpzPt0at/fP8bwv+ps6Wh4qOz6g86YV2VlKOka5NQY98j2O+L18TelyREPzJg55WZq6zrJ/3mRiU5aqVJaOr3V5k8Psmko7Nmm8XxoaGnoU2g71uXezN+8bW7B5n05vumLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwv+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAD//+GI8JI=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x2, 0x100000})

15.350663974s ago: executing program 1 (id=1013):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000047400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0)

1.986577572s ago: executing program 39 (id=1008):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f00)={0x98, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)

1.487978549s ago: executing program 40 (id=1010):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@chandef_params, @NL80211_ATTR_DURATION={0x8}]}, 0x24}}, 0x0)

0s ago: executing program 41 (id=1013):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000047400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0)

kernel console output (not intermixed with test programs):

 usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.541507][ T5924] usb 6-1: config 0 descriptor??
[  134.563690][ T5924] cp210x 6-1:0.0: cp210x converter detected
[  134.589469][ T6956] loop3: detected capacity change from 0 to 1024
[  134.637608][ T6956] EXT4-fs: Ignoring removed bh option
[  134.673502][ T6956] EXT4-fs: inline encryption not supported
[  134.673809][  T970] IPVS: starting estimator thread 0...
[  134.723654][ T6956] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  134.775714][ T6956] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  134.790262][ T6962] IPVS: using max 24 ests per chain, 57600 per kthread
[  134.806636][ T6956] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.375: lblock 2 mapped to illegal pblock 2 (length 1)
[  134.827095][ T6956] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  134.836207][ T6956] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 48: comm syz.3.375: lblock 0 mapped to illegal pblock 48 (length 1)
[  134.866327][ T6956] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  134.878473][ T6956] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.375: Failed to acquire dquot type 0
[  134.896981][ T6956] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  134.910695][ T6956] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.375: mark_inode_dirty error
[  134.941482][ T6956] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  134.960355][ T6956] EXT4-fs (loop3): 1 orphan inode deleted
[  134.968005][ T6956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.981304][  T996] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  135.018162][ T5924] usb 6-1: cp210x converter now attached to ttyUSB0
[  135.049982][  T996] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  135.079418][  T996] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0
[  135.160949][   T49] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm kworker/u8:3: lblock 2 mapped to illegal pblock 2 (length 1)
[  135.184829][ T6673] veth0_vlan: entered promiscuous mode
[  135.214143][ T5833] usb 6-1: USB disconnect, device number 6
[  135.234229][   T49] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  135.240430][ T5833] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  135.263340][ T6673] veth1_vlan: entered promiscuous mode
[  135.268938][   T49] EXT4-fs error (device loop3): ext4_write_dquot:6913: comm kworker/u8:3: Failed to commit dquot type 0
[  135.274492][ T5833] cp210x 6-1:0.0: device disconnected
[  135.311801][   T49] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync!
[  135.363353][ T5846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.373268][ T6673] veth0_macvtap: entered promiscuous mode
[  135.398967][ T6673] veth1_macvtap: entered promiscuous mode
[  135.399475][ T5846] EXT4-fs error (device loop3): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0
[  135.431983][ T5846] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  135.446883][ T6951] loop4: detected capacity change from 0 to 32768
[  135.476239][ T6673] batman_adv: batadv0: Interface activated: batadv_slave_0
[  135.491697][ T5846] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[  135.493558][ T6951] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.374 (6951)
[  135.528652][ T6673] batman_adv: batadv0: Interface activated: batadv_slave_1
[  135.565683][ T6673] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.577346][ T6673] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.579999][ T6951] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  135.604415][ T6673] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.621701][ T6673] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.633644][ T6951] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm
[  135.666501][ T6951] BTRFS info (device loop4): using free-space-tree
[  135.859527][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.890167][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.982472][ T6966] loop7: detected capacity change from 0 to 32768
[  136.002782][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.034233][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.113132][ T5845] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  136.299513][ T6971] loop1: detected capacity change from 0 to 32768
[  136.337083][ T7000] loop5: detected capacity change from 0 to 512
[  136.394198][ T7000] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  136.466005][ T7000] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.485522][ T6971] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  136.502069][ T7006] sp0: Synchronizing with TNC
[  136.563692][ T7005] [U] è
[  136.695757][ T5848] ocfs2: Unmounting device (7,1) on (node local)
[  136.707161][ T5847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.996738][ T7016] loop5: detected capacity change from 0 to 64
[  137.052910][ T7016] syz.5.392: attempt to access beyond end of device
[  137.052910][ T7016] loop5: rw=0, sector=1024, nr_sectors = 2 limit=64
[  137.113803][ T7016] Buffer I/O error on dev loop5, logical block 512, async page read
[  137.155409][ T7016] syz.5.392: attempt to access beyond end of device
[  137.155409][ T7016] loop5: rw=0, sector=113152, nr_sectors = 2 limit=64
[  137.181669][ T7020] netlink: 372 bytes leftover after parsing attributes in process `syz.3.395'.
[  137.210245][ T7016] Buffer I/O error on dev loop5, logical block 56576, async page read
[  137.335947][ T7025] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  137.801712][ T7014] loop4: detected capacity change from 0 to 32768
[  137.830265][ T7014] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.394 (7014)
[  137.871532][ T7047] loop1: detected capacity change from 0 to 1024
[  137.882659][ T7014] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  137.894329][ T7014] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm
[  137.904293][ T7014] BTRFS info (device loop4): disk space caching is enabled
[  137.912203][ T7014] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  137.930415][ T5833] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  137.940845][ T7047] hfsplus: bad catalog entry type
[  138.006183][ T7057] netlink: 'syz.7.409': attribute type 3 has an invalid length.
[  138.020814][ T3539] hfsplus: b-tree write err: -5, ino 4
[  138.035638][ T7014] BTRFS info (device loop4): rebuilding free space tree
[  138.090203][ T5833] usb 6-1: Using ep0 maxpacket: 16
[  138.101277][ T7014] BTRFS info (device loop4): disabling free space tree
[  138.126776][ T5833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.159785][ T7014] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  138.179601][ T5833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  138.201053][ T7014] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  138.223691][ T7070] dlm: plock device version mismatch: kernel (1.2.0), user (1.4.8)
[  138.224123][ T5833] usb 6-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[  138.259449][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.329990][ T5833] usb 6-1: config 0 descriptor??
[  138.438017][ T7074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.413'.
[  138.493392][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.413'.
[  138.604992][ T5845] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  138.812289][ T5833] input: HID 0458:5012 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5012.000B/input/input7
[  138.966163][ T5833] input: HID 0458:5012 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5012.000B/input/input8
[  139.072971][ T7086] netlink: 'syz.8.420': attribute type 2 has an invalid length.
[  139.104369][ T5833] kye 0003:0458:5012.000B: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.5-1/input0
[  139.176790][ T5833] usb 6-1: USB disconnect, device number 7
[  139.766876][ T7109] loop4: detected capacity change from 0 to 256
[  139.802747][ T7109] exfat: Deprecated parameter 'utf8'
[  139.829892][ T7109] exfat: Deprecated parameter 'utf8'
[  139.857020][ T7109] exfat: Deprecated parameter 'utf8'
[  139.910279][ T7109] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  140.263748][ T7092] loop8: detected capacity change from 0 to 32768
[  140.809475][ T7150] loop3: detected capacity change from 0 to 256
[  140.915885][ T7150] FAT-fs (loop3): Directory bread(block 64) failed
[  140.940921][ T7152] program syz.5.453 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  140.944607][ T7150] FAT-fs (loop3): Directory bread(block 65) failed
[  140.989219][ T7150] FAT-fs (loop3): Directory bread(block 66) failed
[  141.028319][ T7126] loop7: detected capacity change from 0 to 32768
[  141.037537][ T7150] FAT-fs (loop3): Directory bread(block 67) failed
[  141.073270][ T7150] FAT-fs (loop3): Directory bread(block 68) failed
[  141.079825][ T7150] FAT-fs (loop3): Directory bread(block 69) failed
[  141.134644][ T7126] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  141.180782][ T7150] FAT-fs (loop3): Directory bread(block 70) failed
[  141.188405][ T7150] FAT-fs (loop3): Directory bread(block 71) failed
[  141.274311][ T7150] FAT-fs (loop3): Directory bread(block 72) failed
[  141.296191][ T7150] FAT-fs (loop3): Directory bread(block 73) failed
[  141.384545][ T6525] (syz-executor,6525,1):ocfs2_inode_is_valid_to_delete:886 ERROR: Skipping delete of system file 72
[  141.422903][ T7171] loop4: detected capacity change from 0 to 16
[  141.433647][ T6525] ocfs2: Unmounting device (7,7) on (node local)
[  141.551504][ T7173] dummy0: entered allmulticast mode
[  142.208247][ T7169] loop1: detected capacity change from 0 to 32768
[  142.408652][ T7203] loop8: detected capacity change from 0 to 512
[  142.461179][ T7203] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  142.497563][ T7203] EXT4-fs (loop8): orphan cleanup on readonly fs
[  142.528775][ T7203] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.475: bg 0: block 248: padding at end of block bitmap is not set
[  142.625292][ T7203] Quota error (device loop8): write_blk: dquota write failed
[  142.656720][ T7190] loop3: detected capacity change from 0 to 32768
[  142.665973][ T7203] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota
[  142.690281][ T7190] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.469 (7190)
[  142.705803][ T7203] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.475: Failed to acquire dquot type 1
[  142.738554][ T7203] EXT4-fs (loop8): 1 truncate cleaned up
[  142.750421][ T7190] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  142.752057][ T7203] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  142.800861][ T7190] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  142.828581][ T7190] BTRFS info (device loop3): using free-space-tree
[  142.860930][ T7210] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  142.867688][ T7210] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  142.886610][ T7203] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  142.904758][ T7210] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  142.911258][ T7210] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  142.931798][ T7203] EXT4-fs (loop8): changing journal_checksum during remount not supported; ignoring
[  142.944772][ T7203] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended
[  142.956971][ T7210] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  142.963454][ T7210] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  142.988640][ T7210] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  142.995177][ T7210] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  143.020327][   T30] audit: type=1326 audit(1753160045.078:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.7.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3718e9a9 code=0x7fc00000
[  143.052983][ T7203] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  143.084879][ T5846] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  143.094647][ T7203] ext4 filesystem being remounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  143.107128][ T7210] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  143.113691][ T7210] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  143.144743][   T30] audit: type=1326 audit(1753160045.078:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.7.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4c3718e9a9 code=0x7fc00000
[  143.192658][   T30] audit: type=1326 audit(1753160045.078:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.7.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3718e9a9 code=0x7fc00000
[  143.224996][   T30] audit: type=1326 audit(1753160045.078:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.7.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3718e9a9 code=0x7fc00000
[  143.259817][   T30] audit: type=1326 audit(1753160045.078:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.7.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3718e9a9 code=0x7fc00000
[  143.336116][   T30] audit: type=1326 audit(1753160045.078:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.7.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3718e9a9 code=0x7fc00000
[  143.453280][ T6673] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.469501][   T30] audit: type=1326 audit(1753160045.078:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.7.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3718e9a9 code=0x7fc00000
[  143.595640][   T30] audit: type=1326 audit(1753160045.078:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.7.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3718e9a9 code=0x7fc00000
[  143.619752][ T7231] loop1: detected capacity change from 0 to 256
[  143.634176][ T7201] loop4: detected capacity change from 0 to 32768
[  143.668459][ T7231] exfat: Deprecated parameter 'namecase'
[  143.703937][ T7231] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d)
[  143.726623][ T7201] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  143.794814][ T7208] loop5: detected capacity change from 0 to 32768
[  143.813501][ T7239] loop8: detected capacity change from 0 to 512
[  143.830534][ T7239] EXT4-fs (loop8): first meta block group too large: 524287 (group descriptor block count 1)
[  143.870248][ T7208] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.478 (7208)
[  143.890389][ T5864] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  143.899821][ T5864] Bluetooth: hci1: Injecting HCI hardware error event
[  143.905958][ T7208] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  143.910787][ T5864] Bluetooth: hci1: hardware error 0x00
[  143.974470][ T7208] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm
[  144.018199][ T7201] XFS (loop4): Ending clean mount
[  144.027162][ T7208] BTRFS info (device loop5): using free-space-tree
[  144.055125][ T7201] XFS (loop4): Quotacheck needed: Please wait.
[  144.148358][ T7201] XFS (loop4): Quotacheck: Done.
[  144.309390][ T7208] BTRFS info (device loop5): balance: start -susage=4294967290..4294967295,limit=0..6
[  144.340498][ T5845] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  144.353661][ T7208] BTRFS info (device loop5): balance: ended with status: 0
[  144.600559][ T5847] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  145.165077][ T7302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.505'.
[  146.027558][ T7332] loop1: detected capacity change from 0 to 1024
[  146.040192][ T5864] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  146.118687][ T7336] loop4: detected capacity change from 0 to 256
[  146.165978][ T7336] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  146.178525][ T7332] syz.1.518: attempt to access beyond end of device
[  146.178525][ T7332] loop1: rw=0, sector=201326592, nr_sectors = 2 limit=1024
[  146.214120][ T7336] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  146.234225][ T7336] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  146.241890][ T7332] Buffer I/O error on dev loop1, logical block 100663296, async page read
[  146.242205][ T7332] syz.1.518: attempt to access beyond end of device
[  146.242205][ T7332] loop1: rw=0, sector=201326592, nr_sectors = 2 limit=1024
[  146.242237][ T7332] Buffer I/O error on dev loop1, logical block 100663296, async page read
[  146.314374][ T7336] UDF-fs: Scanning with blocksize 512 failed
[  146.328074][ T7336] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  146.348499][ T7336] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  146.609611][ T7352] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  147.137651][ T7377] loop4: detected capacity change from 0 to 1024
[  147.152010][ T7376] sp0: Synchronizing with TNC
[  147.164340][ T7374] [U] è
[  147.238323][ T7377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.334621][ T7377] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.539: bg 0: block 494: padding at end of block bitmap is not set
[  147.389886][ T7377] EXT4-fs (loop4): Remounting filesystem read-only
[  147.397009][ T7377] EXT4-fs (loop4): error restoring inline_data for inode -- potential data loss! (inode 12, error -30)
[  147.527433][ T5845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.946343][ T7411] loop7: detected capacity change from 0 to 512
[  147.962104][ T7412] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  147.990530][ T7412] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  148.003018][ T7411] EXT4-fs: Ignoring removed mblk_io_submit option
[  148.009584][ T7411] EXT4-fs: Ignoring removed mblk_io_submit option
[  148.070195][ T7411] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  148.117234][ T7411] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002]
[  148.180983][ T7411] EXT4-fs error (device loop7): ext4_iget_extra_inode:5035: inode #15: comm syz.7.556: corrupted in-inode xattr: e_value size too large
[  148.284463][ T7411] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.556: couldn't read orphan inode 15 (err -117)
[  148.323153][ T7411] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  148.402557][ T7423] netlink: 4 bytes leftover after parsing attributes in process `syz.8.559'.
[  148.595892][ T6525] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.774245][ T7431] loop5: detected capacity change from 0 to 512
[  148.862525][ T7431] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.963255][ T7431] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  148.977114][ T7401] loop1: detected capacity change from 0 to 32768
[  149.056564][ T7401] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  149.150412][ T7450] loop7: detected capacity change from 0 to 4096
[  149.160826][ T7450] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512).
[  149.183233][ T7457] loop4: detected capacity change from 0 to 512
[  149.237516][ T5847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.266833][ T7457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.282807][ T7457] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  149.289392][ T7401] XFS (loop1): Ending clean mount
[  149.330015][   T30] kauditd_printk_skb: 41 callbacks suppressed
[  149.330035][   T30] audit: type=1800 audit(1753160051.388:56): pid=7457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.571" name="file2" dev="loop4" ino=16 res=0 errno=0
[  149.578579][ T5845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.613368][ T5848] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  149.855138][ T7451] loop3: detected capacity change from 0 to 32768
[  149.881076][ T7475] binder: 7474:7475 unknown command 24
[  149.893954][ T7451] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.569 (7451)
[  149.910224][ T7475] binder: 7474:7475 ioctl c0306201 200000000280 returned -22
[  149.970663][ T7451] BTRFS info (device loop3): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  150.027766][ T7451] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  150.073447][ T7451] BTRFS info (device loop3): using free-space-tree
[  150.210284][   T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  150.219246][ T7451] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  150.296054][ T7500] loop1: detected capacity change from 0 to 512
[  150.321309][ T7500] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.578: casefold flag without casefold feature
[  150.362164][ T7500] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.578: couldn't read orphan inode 15 (err -117)
[  150.435077][   T24] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  150.443632][ T7468] loop8: detected capacity change from 0 to 32768
[  150.452812][ T7503] loop7: detected capacity change from 0 to 2048
[  150.463356][ T7500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.469310][ T5846] BTRFS info (device loop3): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  150.486324][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.500357][   T24] usb 6-1: Product: syz
[  150.504550][   T24] usb 6-1: Manufacturer: syz
[  150.509242][   T24] usb 6-1: SerialNumber: syz
[  150.518798][   T24] usb 6-1: config 0 descriptor??
[  150.528153][   T24] gspca_main: sunplus-2.14.0 probing 055f:c230
[  150.553627][ T7468] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  150.588251][ T7512] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  150.647573][ T7468] XFS (loop8): Ending clean mount
[  150.669045][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.742200][ T7468] XFS (loop8): Quotacheck needed: Please wait.
[  150.826906][ T7468] XFS (loop8): Quotacheck: Done.
[  151.035889][ T7524] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  151.066481][ T6673] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  151.164121][   T24] gspca_sunplus: reg_r err -71
[  151.174279][   T24] sunplus 6-1:0.0: probe with driver sunplus failed with error -71
[  151.204476][   T24] usb 6-1: USB disconnect, device number 8
[  151.461944][ T7531] loop3: detected capacity change from 0 to 4096
[  151.559697][ T7531] ntfs3(loop3): Failed to initialize $Extend/$ObjId.
[  151.623358][ T7531] ntfs3(loop3): ino=1e, "file1" attr_set_size
[  151.651286][ T7530] ntfs3(loop3): ino=1e, "file1" attr_set_size
[  151.983671][ T7548] 9pnet_rdma: rdma_create_trans (7548): problem binding to privport: 13
[  152.118871][ T7554] pim6reg9: entered allmulticast mode
[  152.166533][ T7556] CUSE: unknown device info "ÿ
"
[  152.176435][ T7556] CUSE: zero length info key specified
[  152.204810][ T7533] loop4: detected capacity change from 0 to 32768
[  152.268146][ T7558] loop5: detected capacity change from 0 to 256
[  152.274560][ T7533] (syz.4.596,7533,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  152.311585][   T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  152.324088][ T7533] (syz.4.596,7533,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  152.417769][ T7533] JBD2: Ignoring recovery information on journal
[  152.470547][   T24] usb 8-1: Using ep0 maxpacket: 8
[  152.547350][ T7568] loop3: detected capacity change from 0 to 128
[  152.557232][ T7568] EXT4-fs (loop3): Test dummy encryption mode enabled
[  152.564725][   T24] usb 8-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  152.569385][ T7568] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  152.583782][ T7533] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  152.596214][ T7568] ext4 filesystem being mounted at /118/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  152.610993][   T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.641938][ T7568] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2"
[  152.661780][   T24] usb 8-1: Product: syz
[  152.677972][   T24] usb 8-1: Manufacturer: syz
[  152.699157][   T24] usb 8-1: SerialNumber: syz
[  152.737907][ T5846] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  152.755055][   T24] usb 8-1: config 0 descriptor??
[  152.774772][   T24] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  152.819121][ T7533] (syz.4.596,7533,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[  153.091514][ T5845] ocfs2: Unmounting device (7,4) on (node local)
[  153.210726][ T7590] loop5: detected capacity change from 0 to 512
[  153.227318][ T7590] EXT4-fs: inline encryption not supported
[  153.317691][ T7590] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.411140][   T24] gspca_sonixj: reg_w1 err -71
[  153.416041][   T24] sonixj 8-1:0.0: probe with driver sonixj failed with error -71
[  153.417158][ T7590] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  153.431649][   T24] usb 8-1: USB disconnect, device number 2
[  153.677277][ T5847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.696422][ T7608] loop1: detected capacity change from 0 to 64
[  153.879935][ T7614] loop5: detected capacity change from 0 to 1764
[  154.077060][ T7621] loop3: detected capacity change from 0 to 1024
[  154.167790][ T7621] hfsplus: walked past end of dir
[  154.277106][ T7593] loop8: detected capacity change from 0 to 32768
[  154.307230][ T7593] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.623 (7593)
[  154.360452][ T7593] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  154.392413][ T7593] BTRFS info (device loop8): using sha256 (sha256-x86_64) checksum algorithm
[  154.439722][ T7593] BTRFS info (device loop8): using free-space-tree
[  154.472525][   T43] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  154.635102][   T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  154.660351][   T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  154.686694][   T43] usb 6-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00
[  154.705891][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.730169][   T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  154.763989][   T43] usb 6-1: config 0 descriptor??
[  154.807871][ T6673] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  154.914855][   T24] usb 2-1: Using ep0 maxpacket: 32
[  154.947236][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  154.963150][   T24] usb 2-1: unable to read config index 0 descriptor/start: -71
[  154.986482][   T24] usb 2-1: can't read configurations, error -71
[  155.011363][ T3084] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  155.174240][ T3084] usb 8-1: Using ep0 maxpacket: 16
[  155.181999][ T3084] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  155.207362][ T3084] usb 8-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  155.229141][   T43] itetech 0003:06CB:2968.000C: hidraw0: USB HID v0.00 Device [HID 06cb:2968] on usb-dummy_hcd.5-1/input0
[  155.243127][ T3084] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.262877][ T3084] usb 8-1: config 0 descriptor??
[  155.402988][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.8.649'.
[  155.404025][  T970] usb 6-1: USB disconnect, device number 9
[  155.420503][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.8.649'.
[  155.439683][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.8.649'.
[  155.669585][ T7677] netlink: 'syz.1.653': attribute type 29 has an invalid length.
[  155.742000][ T3084] kye 0003:0458:5011.000D: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  155.793631][ T3084] kye 0003:0458:5011.000D: hidraw0: USB HID v1f.ff Device [HID 0458:5011] on usb-dummy_hcd.7-1/input0
[  155.824052][ T3084] kye 0003:0458:5011.000D: tablet-enabling feature report not found
[  155.845125][ T3084] kye 0003:0458:5011.000D: tablet enabling failed
[  155.856068][ T7683] loop8: detected capacity change from 0 to 128
[  155.872815][ T7683] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  155.915165][ T7683] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  155.946200][ T5833] usb 8-1: USB disconnect, device number 3
[  156.004994][ T7683] EXT4-fs error (device loop8): __ext4_find_entry:1626: inode #2: comm syz.8.656: checksumming directory block 0
[  156.095083][ T7694] loop4: detected capacity change from 0 to 256
[  156.142850][ T7695] loop3: detected capacity change from 0 to 2048
[  156.172429][ T6673] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  156.301226][ T7695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  156.602743][ T5846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.612293][ T7707] loop4: detected capacity change from 0 to 64
[  156.640379][ T5833] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  156.814104][ T5833] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30
[  156.874550][ T5833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.948383][ T5833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  157.034354][ T5833] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65
[  157.107106][ T5833] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00
[  157.187880][ T5833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.286409][ T5833] usb 2-1: config 0 descriptor??
[  157.762569][ T5833] cmedia_hs100b 0003:0D8C:0014.000E: item fetching failed at offset 5/7
[  157.839227][ T5833] cmedia_hs100b 0003:0D8C:0014.000E: probe with driver cmedia_hs100b failed with error -22
[  157.931024][ T5924] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  158.002940][ T5833] usb 2-1: USB disconnect, device number 9
[  158.153110][ T5924] usb 9-1: Using ep0 maxpacket: 16
[  158.177404][ T7731] loop5: detected capacity change from 0 to 1024
[  158.201022][ T5924] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  158.269214][ T5924] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  158.319559][ T7735] netlink: 4 bytes leftover after parsing attributes in process `syz.7.682'.
[  158.331804][ T5924] usb 9-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  158.374164][ T7731] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.417441][ T5924] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.484221][ T5924] usb 9-1: config 0 descriptor??
[  158.836967][ T5847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.996708][ T5924] apple 0003:05AC:024B.000F: unknown main item tag 0x6
[  159.088130][ T5924] apple 0003:05AC:024B.000F: ignoring exceeding usage max
[  159.134846][ T5924] apple 0003:05AC:024B.000F: invalid report_size 16640
[  159.223656][ T5924] apple 0003:05AC:024B.000F: item 0 2 1 7 parsing failed
[  159.274477][ T5924] apple 0003:05AC:024B.000F: parse failed
[  159.284856][ T7748] loop4: detected capacity change from 0 to 1024
[  159.315823][ T5924] apple 0003:05AC:024B.000F: probe with driver apple failed with error -22
[  159.410166][ T5924] usb 9-1: USB disconnect, device number 2
[  159.666581][   T12] hfsplus: b-tree write err: -5, ino 4
[  160.807607][ T7777] getblk(): invalid block size 0 requested
[  160.837905][ T7777] logical block size: 512
[  160.868025][ T7777] CPU: 0 UID: 0 PID: 7777 Comm: syz.8.700 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) 
[  160.868060][ T7777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  160.868075][ T7777] Call Trace:
[  160.868084][ T7777]  <TASK>
[  160.868094][ T7777]  dump_stack_lvl+0x189/0x250
[  160.868140][ T7777]  ? __pfx_dump_stack_lvl+0x10/0x10
[  160.868170][ T7777]  ? __pfx__printk+0x10/0x10
[  160.868207][ T7777]  ? srso_alias_return_thunk+0x5/0xfbef5
[  160.868240][ T7777]  ? fs_reclaim_acquire+0x7d/0x100
[  160.868271][ T7777]  bdev_getblk+0x5b0/0x690
[  160.868300][ T7777]  ? srso_alias_return_thunk+0x5/0xfbef5
[  160.868328][ T7777]  ? __mutex_trylock_common+0x153/0x260
[  160.868361][ T7777]  ? srso_alias_return_thunk+0x5/0xfbef5
[  160.868389][ T7777]  ? string+0x279/0x2b0
[  160.868427][ T7777]  __bread_gfp+0x89/0x3c0
[  160.868454][ T7777]  ntfs_bread+0xc2/0x1e0
[  160.868485][ T7777]  ntfs_fill_super+0x656/0x40c0
[  160.868530][ T7777]  ? format_decode+0x5ee/0xe30
[  160.868574][ T7777]  ? srso_alias_return_thunk+0x5/0xfbef5
[  160.868602][ T7777]  ? vsnprintf+0xe11/0xf00
[  160.868650][ T7777]  ? srso_alias_return_thunk+0x5/0xfbef5
[  160.868690][ T7777]  ? __pfx_ntfs_fill_super+0x10/0x10
[  160.868718][ T7777]  ? srso_alias_return_thunk+0x5/0xfbef5
[  160.868751][ T7777]  ? srso_alias_return_thunk+0x5/0xfbef5
[  160.868779][ T7777]  ? srso_alias_return_thunk+0x5/0xfbef5
[  160.868807][ T7777]  ? sb_set_blocksize+0x85/0x180
[  160.868841][ T7777]  ? srso_alias_return_thunk+0x5/0xfbef5
[  160.868869][ T7777]  ? setup_bdev_super+0x4c1/0x5b0
[  160.868908][ T7777]  get_tree_bdev_flags+0x40e/0x4d0
[  160.868943][ T7777]  ? __pfx_ntfs_fill_super+0x10/0x10
[  160.868971][ T7777]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  160.869005][ T7777]  ? srso_alias_return_thunk+0x5/0xfbef5
[  160.869042][ T7777]  ? srso_alias_return_thunk+0x5/0xfbef5
[  160.869076][ T7777]  vfs_get_tree+0x92/0x2b0
[  160.869114][ T7777]  do_new_mount+0x24a/0xa40
[  160.869167][ T7777]  __se_sys_mount+0x317/0x410
[  160.869198][ T7777]  ? __pfx___se_sys_mount+0x10/0x10
[  160.869218][ T7777]  ? rcu_is_watching+0x15/0xb0
[  160.869255][ T7777]  ? srso_alias_return_thunk+0x5/0xfbef5
[  160.869282][ T7777]  ? __x64_sys_mount+0x20/0xc0
[  160.869324][ T7777]  do_syscall_64+0xfa/0x3b0
[  160.869351][ T7777]  ? lockdep_hardirqs_on+0x9c/0x150
[  160.869377][ T7777]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.869401][ T7777]  ? srso_alias_return_thunk+0x5/0xfbef5
[  160.869429][ T7777]  ? exc_page_fault+0x9f/0xf0
[  160.869458][ T7777]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.869482][ T7777] RIP: 0033:0x7f8675d8e9a9
[  160.869503][ T7777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  160.869524][ T7777] RSP: 002b:00007f8676c00038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  160.869549][ T7777] RAX: ffffffffffffffda RBX: 00007f8675fb5fa0 RCX: 00007f8675d8e9a9
[  160.869568][ T7777] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000200000000140
[  160.869585][ T7777] RBP: 00007f8675e10d69 R08: 0000000000000000 R09: 0000000000000000
[  160.869602][ T7777] R10: 0000000002208004 R11: 0000000000000246 R12: 0000000000000000
[  160.869618][ T7777] R13: 0000000000000000 R14: 00007f8675fb5fa0 R15: 00007ffebc9076d8
[  160.869656][ T7777]  </TASK>
[  161.263770][ T7777] ntfs3(nullb0): failed to read volume at offset 0x0
[  161.531654][ T7786] 9pnet_fd: Insufficient options for proto=fd
[  161.866112][ T7791] program syz.4.705 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  161.921228][ T7768] kthread_run failed with err -4
[  162.153020][ T7799] tmpfs: Cannot enable quota on remount
[  162.325720][ T7801] loop4: detected capacity change from 0 to 16
[  162.407243][ T7801] erofs (device loop4): mounted with root inode @ nid 36.
[  162.420094][    C1] sched: DL replenish lagged too much
[  162.620266][ T5833] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  162.816088][ T5833] usb 2-1: Using ep0 maxpacket: 8
[  162.847309][ T7814] loop3: detected capacity change from 0 to 512
[  162.873427][ T5833] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  162.920600][ T5833] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  162.975167][ T7814] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.715: iget: bad i_size value: 38620345925642
[  163.008123][ T5833] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  163.057297][ T7814] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.715: couldn't read orphan inode 15 (err -117)
[  163.091769][ T5833] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  163.137272][ T7814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.180890][ T5833] usb 2-1: config 0 interface 0 has no altsetting 0
[  163.216988][ T5833] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.17
[  163.266464][ T5833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.323827][ T5833] usb 2-1: config 0 descriptor??
[  163.440988][  T970] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  163.473833][ T5846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.499046][ T7824] loop8: detected capacity change from 0 to 1024
[  163.556481][ T7824] hfsplus: bad catalog entry type
[  163.640330][  T970] usb 6-1: Using ep0 maxpacket: 32
[  163.652248][  T970] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  163.687923][  T970] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  163.735433][   T36] hfsplus: b-tree write err: -5, ino 4
[  163.743317][  T970] usb 6-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00
[  163.793353][ T5833] uclogic 0003:5543:0042.0010: unbalanced delimiter at end of report description
[  163.814402][  T970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.856199][ T5833] uclogic 0003:5543:0042.0010: parse failed
[  163.881801][  T970] usb 6-1: config 0 descriptor??
[  163.898597][ T5833] uclogic 0003:5543:0042.0010: probe with driver uclogic failed with error -22
[  164.028076][ T5833] usb 2-1: USB disconnect, device number 10
[  164.342896][  T970] saitek 0003:06A3:0621.0011: hidraw0: USB HID v0.00 Device [HID 06a3:0621] on usb-dummy_hcd.5-1/input0
[  164.553301][  T970] usb 6-1: USB disconnect, device number 10
[  165.010392][ T5924] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  165.181141][ T5924] usb 2-1: Using ep0 maxpacket: 16
[  165.205932][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  165.249883][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  165.284373][ T5924] usb 2-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00
[  165.330395][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.376487][ T5924] usb 2-1: config 0 descriptor??
[  165.872290][ T5924] thrustmaster 0003:044F:B323.0012: collection stack underflow
[  165.907621][ T5924] thrustmaster 0003:044F:B323.0012: item 0 1 0 12 parsing failed
[  165.947774][ T5924] thrustmaster 0003:044F:B323.0012: parse failed
[  165.975068][ T5924] thrustmaster 0003:044F:B323.0012: probe with driver thrustmaster failed with error -22
[  166.110402][ T5924] usb 2-1: USB disconnect, device number 11
[  166.152796][ T7840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  166.963066][ T7822] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.153680][ T7851] loop3: detected capacity change from 0 to 512
[  167.224057][ T7851] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  167.311164][ T7851] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.406023][ T7851] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  167.706082][ T5846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.846028][ T7885] loop3: detected capacity change from 0 to 4096
[  168.944483][ T7888] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  170.330361][ T7878] loop5: detected capacity change from 0 to 32768
[  170.407417][ T7878] XFS: noikeep mount option is deprecated.
[  170.553559][ T7911] netlink: 8 bytes leftover after parsing attributes in process `syz.7.755'.
[  170.591708][ T7878] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  170.790990][ T7920] delete_channel: no stack
[  170.894818][ T7878] XFS (loop5): Ending clean mount
[  170.974079][ T7878] XFS (loop5): Quotacheck needed: Please wait.
[  171.132479][ T7878] XFS (loop5): Quotacheck: Done.
[  171.511682][ T5847] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  172.628609][ T7905] loop1: detected capacity change from 0 to 32768
[  172.780006][ T7905] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  172.836399][ T7905] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  173.048530][ T7905] XFS (loop1): Ending clean mount
[  173.099633][ T7905] XFS (loop1): Quotacheck needed: Please wait.
[  173.243737][ T7905] XFS (loop1): Quotacheck: Done.
[  173.393659][ T7955] loop5: detected capacity change from 0 to 1024
[  173.446897][ T7955] EXT4-fs: Ignoring removed nomblk_io_submit option
[  173.551044][ T7955] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  173.593818][ T5848] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  173.646722][ T7961] loop7: detected capacity change from 0 to 512
[  173.827363][ T7961] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.909432][ T5847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.940328][ T7961] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  174.405450][ T6525] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.859082][ T7981] loop7: detected capacity change from 0 to 764
[  174.934276][ T7981] rock: directory entry would overflow storage
[  174.992074][ T7981] rock: sig=0x5245, size=8, remaining=5
[  175.373895][ T7992] loop3: detected capacity change from 0 to 128
[  176.349580][ T8006] loop5: detected capacity change from 0 to 4096
[  176.498628][ T8006] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.676671][ T8019] netlink: 4 bytes leftover after parsing attributes in process `syz.8.797'.
[  176.727609][ T8019] net_ratelimit: 1054 callbacks suppressed
[  176.727630][ T8019] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  176.873090][ T5847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.420287][  T970] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  177.602034][  T970] usb 8-1: Using ep0 maxpacket: 32
[  177.640440][  T970] usb 8-1: config 0 has an invalid interface number: 67 but max is 0
[  177.679316][  T970] usb 8-1: config 0 has no interface number 0
[  177.732225][  T970] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  177.770487][  T970] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.819202][  T970] usb 8-1: Product: syz
[  177.840237][  T970] usb 8-1: Manufacturer: syz
[  177.844890][  T970] usb 8-1: SerialNumber: syz
[  177.913933][  T970] usb 8-1: config 0 descriptor??
[  177.945695][  T970] smsc95xx v2.0.0
[  178.572334][  T970] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  178.610813][  T970] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  178.669921][  T970] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  178.741408][  T970] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71
[  178.832605][  T970] usb 8-1: USB disconnect, device number 4
[  179.281271][ T8037] loop3: detected capacity change from 0 to 32768
[  179.658018][ T8056] loop7: detected capacity change from 0 to 4096
[  179.817300][ T8068] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  179.829671][ T8037] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names
[  179.829706][ T8037]   allowing incompatible features above 0.0: (unknown version)
[  179.829721][ T8037]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  180.173302][ T8037] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  180.243919][ T8037] bcachefs (loop3): initializing new filesystem
[  180.282010][ T5854] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  180.292096][ T5854] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  180.300011][ T5854] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  180.308253][ T5854] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  180.317434][ T5854] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  180.397069][ T8037] bcachefs (loop3): going read-write
[  180.534720][ T8037] bcachefs (loop3): marking superblocks
[  180.687198][ T8037] bcachefs (loop3): initializing freespace
[  180.726249][ T8083] loop7: detected capacity change from 0 to 2048
[  180.767438][ T8037] bcachefs (loop3): done initializing freespace
[  180.861187][ T8037] bcachefs (loop3): reading snapshots table
[  180.874193][ T8083] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.915051][ T8037] bcachefs (loop3): reading snapshots done
[  181.046657][ T8037] bcachefs (loop3): done starting filesystem
[  181.149067][ T8037] syz.3.806 (8037) used greatest stack depth: 16488 bytes left
[  181.170287][  T970] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  181.236171][ T5846] bcachefs (loop3): shutting down
[  181.263898][ T5846] bcachefs (loop3): going read-only
[  181.286955][ T5846] bcachefs (loop3): finished waiting for writes to stop
[  181.328004][ T4198] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  181.346300][  T970] usb 2-1: Using ep0 maxpacket: 8
[  181.369482][ T5846] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3
[  181.378618][  T970] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  181.399583][ T4198] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  181.426629][  T970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.448880][ T4198] EXT4-fs (loop7): This should not happen!! Data will be lost
[  181.448880][ T4198] 
[  181.476260][  T970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.490985][ T4198] EXT4-fs (loop7): Total free blocks count 0
[  181.516511][ T4198] EXT4-fs (loop7): Free/Dirty block details
[  181.523232][  T970] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  181.546948][ T4198] EXT4-fs (loop7): free_blocks=4096
[  181.569860][ T5846] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3
[  181.585044][ T4198] EXT4-fs (loop7): dirty_blocks=512
[  181.594663][  T970] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00
[  181.605500][ T4198] EXT4-fs (loop7): Block reservation details
[  181.622728][ T4198] EXT4-fs (loop7): i_reserved_data_blocks=32
[  181.634427][ T5846] bcachefs (loop3): clean shutdown complete, journal seq 4
[  181.650570][  T970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.669859][ T4198] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28
[  181.693002][ T5846] bcachefs (loop3): marking filesystem clean
[  181.704659][  T970] usb 2-1: config 0 descriptor??
[  181.886271][ T5846] bcachefs (loop3): shutdown complete
[  182.182196][  T970] redragon 0003:0C45:760B.0013: Fixing Redragon ASURA report descriptor.
[  182.202529][  T970] redragon 0003:0C45:760B.0013: unknown main item tag 0x6
[  182.209987][  T970] redragon 0003:0C45:760B.0013: item fetching failed at offset 7/133
[  182.224286][  T970] redragon 0003:0C45:760B.0013: probe with driver redragon failed with error -22
[  182.367375][ T5854] Bluetooth: hci6: command tx timeout
[  182.424512][  T970] usb 2-1: USB disconnect, device number 12
[  183.467415][ T8107] loop7: detected capacity change from 0 to 64
[  183.508247][ T8107] Trying to free block not in datazone
[  184.427446][ T8123] loop7: detected capacity change from 0 to 64
[  184.441628][ T5854] Bluetooth: hci6: command tx timeout
[  184.975566][ T8125] loop7: detected capacity change from 0 to 32768
[  185.095378][ T8125] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  185.103925][ T8125] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  185.154303][ T8125] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  185.171958][ T5924] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  185.184527][ T5924] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  185.278709][ T5924] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 94ms
[  185.291265][ T5924] gfs2: fsid=syz:syz.0: jid=0: Done
[  185.298115][ T8125] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  185.312214][ T8125] gfs2: fsid=syz:syz.0: can't lock local "qc" file: -30
[  185.625496][ T8131] netlink: 16 bytes leftover after parsing attributes in process `syz.7.841'.
[  185.796078][ T7822] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.168512][ T8134] loop1: detected capacity change from 0 to 1024
[  186.178076][ T8135] netlink: 'syz.7.843': attribute type 1 has an invalid length.
[  186.206940][ T8135] netlink: 232 bytes leftover after parsing attributes in process `syz.7.843'.
[  186.246682][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.7.843'.
[  186.522724][ T5854] Bluetooth: hci6: command tx timeout
[  186.941484][   T30] audit: type=1326 audit(1753160088.988:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.1.846" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f04a378e9a9 code=0x0
[  187.010352][ T8073] chnl_net:caif_netlink_parms(): no params data found
[  187.346428][ T8073] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.356556][ T8073] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.368117][ T8073] bridge_slave_0: entered allmulticast mode
[  187.387828][ T8073] bridge_slave_0: entered promiscuous mode
[  187.414940][ T8073] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.445970][ T8073] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.466811][ T8073] bridge_slave_1: entered allmulticast mode
[  187.492882][ T8073] bridge_slave_1: entered promiscuous mode
[  187.758594][ T8155] tmpfs: Cannot change global quota limit on remount
[  187.808563][ T8073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  187.868996][ T8073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  188.257161][ T8073] team0: Port device team_slave_0 added
[  188.307452][ T8073] team0: Port device team_slave_1 added
[  188.425985][ T8163] loop1: detected capacity change from 0 to 16
[  188.486772][ T8163] erofs (device loop1): mounted with root inode @ nid 36.
[  188.543999][ T8163] erofs (device loop1): bogus i_mode (0) @ nid 4294967296
[  188.591416][ T8073] batman_adv: batadv0: Adding interface: batadv_slave_0
[  188.600723][ T5864] Bluetooth: hci6: command tx timeout
[  188.628951][ T8073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.747783][ T8073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  188.826483][ T8073] batman_adv: batadv0: Adding interface: batadv_slave_1
[  188.859760][ T8073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.946929][ T8073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  189.282194][ T8073] hsr_slave_0: entered promiscuous mode
[  189.304035][ T8073] hsr_slave_1: entered promiscuous mode
[  189.333385][ T8073] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  189.359690][ T8073] Cannot create hsr debugfs directory
[  190.451212][ T8073] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  190.506454][ T8073] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  190.586898][ T8073] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  190.657322][ T8073] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  190.886238][ T8178] loop1: detected capacity change from 0 to 8192
[  191.099840][ T8073] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.197187][ T8073] 8021q: adding VLAN 0 to HW filter on device team0
[  191.265262][ T3539] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.272492][ T3539] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.322938][ T3539] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.330136][ T3539] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.558971][ T8073] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  191.842721][ T8190] loop1: detected capacity change from 0 to 2048
[  191.956215][ T8190] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  192.548647][ T3539] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  192.648753][ T8073] 8021q: adding VLAN 0 to HW filter on device batadv0
[  192.696363][ T3539] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  192.780761][ T3539] EXT4-fs (loop1): This should not happen!! Data will be lost
[  192.780761][ T3539] 
[  192.827396][ T3539] EXT4-fs (loop1): Total free blocks count 0
[  192.887359][ T3539] EXT4-fs (loop1): Free/Dirty block details
[  192.929673][ T3539] EXT4-fs (loop1): free_blocks=4096
[  192.961380][ T3539] EXT4-fs (loop1): dirty_blocks=512
[  192.980426][ T3539] EXT4-fs (loop1): Block reservation details
[  192.986435][ T3539] EXT4-fs (loop1): i_reserved_data_blocks=32
[  193.048858][ T3539] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28
[  193.568684][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  193.581525][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  194.042272][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.7.865'.
[  194.104577][ T8209] netlink: 24 bytes leftover after parsing attributes in process `syz.7.865'.
[  194.300964][ T5854] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  194.310006][ T5854] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  194.321875][ T5854] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  194.329981][ T5854] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  194.337811][ T5854] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  194.357791][ T8073] veth0_vlan: entered promiscuous mode
[  194.416558][ T8073] veth1_vlan: entered promiscuous mode
[  194.684161][ T8073] veth0_macvtap: entered promiscuous mode
[  194.759297][ T8073] veth1_macvtap: entered promiscuous mode
[  194.873831][ T8073] batman_adv: batadv0: Interface activated: batadv_slave_0
[  194.941167][ T8073] batman_adv: batadv0: Interface activated: batadv_slave_1
[  195.022399][ T8073] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  195.057524][ T8073] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  195.089436][ T8073] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  195.111160][ T8073] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.350250][ T5931] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  195.528862][ T8210] chnl_net:caif_netlink_parms(): no params data found
[  195.566503][ T5931] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  195.606963][ T5931] usb 8-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00
[  195.670481][ T5931] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.728274][ T5931] usb 8-1: config 0 descriptor??
[  195.746580][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.789528][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.242466][ T5931] macally 0003:060B:0001.0014: item fetching failed at offset 0/2
[  196.303739][ T5931] macally 0003:060B:0001.0014: probe with driver macally failed with error -22
[  196.365397][ T4198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.374712][ T5864] Bluetooth: hci7: command tx timeout
[  196.393741][ T4198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.491665][ T5931] usb 8-1: USB disconnect, device number 5
[  196.827832][ T8210] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.896055][ T8210] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.940463][ T8210] bridge_slave_0: entered allmulticast mode
[  197.013183][ T8210] bridge_slave_0: entered promiscuous mode
[  197.061976][ T8235] loop1: detected capacity change from 0 to 22
[  197.115508][ T8210] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.124009][ T8235] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  197.172347][ T8210] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.179642][ T8210] bridge_slave_1: entered allmulticast mode
[  197.187237][ T8235] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  197.290548][ T8210] bridge_slave_1: entered promiscuous mode
[  197.856166][ T8210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  197.983347][ T8210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  198.197887][ T5854] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  198.213507][ T5854] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  198.222126][ T5854] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  198.233632][ T5854] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  198.291465][ T5854] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  198.441112][ T5854] Bluetooth: hci7: command tx timeout
[  198.618630][ T8210] team0: Port device team_slave_0 added
[  198.701334][ T8210] team0: Port device team_slave_1 added
[  198.837690][ T5864] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  198.849272][ T5864] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  198.862089][ T5864] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  198.870898][ T5864] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  198.890887][ T5864] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  199.257525][ T8210] batman_adv: batadv0: Adding interface: batadv_slave_0
[  199.304673][ T8210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.456762][ T8210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  199.560700][ T8210] batman_adv: batadv0: Adding interface: batadv_slave_1
[  199.598468][ T8210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.735249][ T8240] loop9: detected capacity change from 0 to 32768
[  199.752512][ T8210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  199.803357][ T8240] JBD2: Ignoring recovery information on journal
[  200.069740][ T8240] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  200.361784][ T5864] Bluetooth: hci8: command tx timeout
[  200.396646][ T8073] ocfs2: Unmounting device (7,9) on (node local)
[  200.467228][ T8261] bridge_slave_0: default FDB implementation only supports local addresses
[  200.521120][ T5864] Bluetooth: hci7: command tx timeout
[  200.554819][ T8210] hsr_slave_0: entered promiscuous mode
[  200.625695][ T8210] hsr_slave_1: entered promiscuous mode
[  200.682460][ T8210] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  200.727579][ T8210] Cannot create hsr debugfs directory
[  201.001043][ T5864] Bluetooth: hci9: command tx timeout
[  201.320761][ T5924] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  201.512960][ T5924] usb 2-1: Using ep0 maxpacket: 8
[  201.557830][ T5924] usb 2-1: config index 0 descriptor too short (expected 5924, got 36)
[  201.593513][ T5924] usb 2-1: config 250 has an invalid interface number: 228 but max is -1
[  201.622474][ T5924] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  201.665763][ T5924] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0
[  201.715977][ T5924] usb 2-1: config 250 has no interface number 0
[  201.740190][ T5924] usb 2-1: config 250 interface 228 altsetting 255 has an invalid descriptor for endpoint zero, skipping
[  201.794914][ T5924] usb 2-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  201.887411][ T5924] usb 2-1: config 250 interface 228 has no altsetting 0
[  201.934952][ T5924] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  201.984672][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  202.047236][ T5924] usb 2-1: Product: syz
[  202.074743][ T5924] usb 2-1: SerialNumber: syz
[  202.124369][ T5924] hub 2-1:250.228: bad descriptor, ignoring hub
[  202.184818][ T5924] hub 2-1:250.228: probe with driver hub failed with error -5
[  202.450485][ T5864] Bluetooth: hci8: command tx timeout
[  202.602297][ T5864] Bluetooth: hci7: command tx timeout
[  202.670600][ T8269] netlink: 'syz.1.886': attribute type 3 has an invalid length.
[  202.720493][ T8269] netlink: 666 bytes leftover after parsing attributes in process `syz.1.886'.
[  202.870467][ T5924] usb 2-1: USB disconnect, device number 13
[  203.086260][ T5864] Bluetooth: hci9: command tx timeout
[  203.155267][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.7.892'.
[  203.209751][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.7.892'.
[  203.457846][ T8243] chnl_net:caif_netlink_parms(): no params data found
[  203.860259][ T5931] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  204.050633][ T8304] 9pnet_fd: p9_fd_create_tcp (8304): problem binding to privport
[  204.065540][ T8302] dummy0: entered allmulticast mode
[  204.100685][ T5931] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  204.130734][ T8246] chnl_net:caif_netlink_parms(): no params data found
[  204.140254][ T5931] usb 2-1: config 0 interface 0 has no altsetting 0
[  204.174960][ T8301] dummy0: left allmulticast mode
[  204.188963][ T5931] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  204.240043][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.248130][ T5931] usb 2-1: Product: syz
[  204.305182][ T5931] usb 2-1: Manufacturer: syz
[  204.309823][ T5931] usb 2-1: SerialNumber: syz
[  204.406195][ T5931] usb 2-1: config 0 descriptor??
[  204.455915][ T5931] usb 2-1: selecting invalid altsetting 0
[  204.525028][ T5864] Bluetooth: hci8: command tx timeout
[  204.689538][ T5931] usb 2-1: USB disconnect, device number 14
[  204.821834][ T8313] loop7: detected capacity change from 0 to 128
[  204.893613][ T8243] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.934448][ T8243] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.974170][ T8243] bridge_slave_0: entered allmulticast mode
[  205.009669][ T8243] bridge_slave_0: entered promiscuous mode
[  205.133333][ T8243] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.161824][ T5864] Bluetooth: hci9: command tx timeout
[  205.188628][ T8243] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.229275][ T8243] bridge_slave_1: entered allmulticast mode
[  205.262414][ T8243] bridge_slave_1: entered promiscuous mode
[  205.979582][ T8243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  206.056378][ T8246] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.100416][ T8246] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.140707][ T8246] bridge_slave_0: entered allmulticast mode
[  206.200665][ T8246] bridge_slave_0: entered promiscuous mode
[  206.242385][ T8246] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.251210][ T8246] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.258495][ T8246] bridge_slave_1: entered allmulticast mode
[  206.341802][ T8246] bridge_slave_1: entered promiscuous mode
[  206.358015][ T8330] loop1: detected capacity change from 0 to 4096
[  206.393780][ T8243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  206.470626][ T8330] NILFS (loop1): invalid segment: Checksum error in segment payload
[  206.478669][ T8330] NILFS (loop1): trying rollback from an earlier position
[  206.494738][ T8316] loop9: detected capacity change from 0 to 32768
[  206.600743][ T5864] Bluetooth: hci8: command tx timeout
[  206.647812][ T8316] JBD2: Ignoring recovery information on journal
[  206.654459][ T8330] NILFS (loop1): recovery complete
[  206.700724][ T8336] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  206.773483][ T8337] loop7: detected capacity change from 0 to 512
[  206.832373][ T8316] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  206.851721][   T30] audit: type=1800 audit(1753160108.888:58): pid=8330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.908" name="file1" dev="loop1" ino=12 res=0 errno=0
[  206.936887][ T8337] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.910: invalid block
[  207.034338][ T8337] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.910: invalid indirect mapped block 4294967295 (level 1)
[  207.105007][ T8337] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.910: invalid indirect mapped block 4294967295 (level 1)
[  207.176723][ T8337] EXT4-fs (loop7): 2 truncates cleaned up
[  207.213664][ T8243] team0: Port device team_slave_0 added
[  207.227578][ T8337] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.241077][ T5864] Bluetooth: hci9: command tx timeout
[  207.266022][ T8246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  207.298502][ T8073] ocfs2: Unmounting device (7,9) on (node local)
[  207.315595][ T8246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  207.393261][ T8243] team0: Port device team_slave_1 added
[  207.556234][ T6525] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.854926][ T8243] batman_adv: batadv0: Adding interface: batadv_slave_0
[  207.880626][ T8243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.964876][ T8243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  208.139923][ T8246] team0: Port device team_slave_0 added
[  208.172054][ T8246] team0: Port device team_slave_1 added
[  208.194150][ T8243] batman_adv: batadv0: Adding interface: batadv_slave_1
[  208.217917][ T8243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.306859][ T8243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  208.838766][ T8246] batman_adv: batadv0: Adding interface: batadv_slave_0
[  208.861762][ T8246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.980299][ T8246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  209.050303][ T8246] batman_adv: batadv0: Adding interface: batadv_slave_1
[  209.057294][ T8246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.280381][ T8246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  209.377049][ T8243] hsr_slave_0: entered promiscuous mode
[  209.421697][ T8243] hsr_slave_1: entered promiscuous mode
[  209.451003][ T8243] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  209.458591][ T8243] Cannot create hsr debugfs directory
[  209.868110][ T8353] loop1: detected capacity change from 0 to 256
[  209.998775][ T8353] FAT-fs (loop1): Directory bread(block 64) failed
[  210.060405][ T8353] FAT-fs (loop1): Directory bread(block 65) failed
[  210.067066][ T8353] FAT-fs (loop1): Directory bread(block 66) failed
[  210.141229][ T8353] FAT-fs (loop1): Directory bread(block 67) failed
[  210.147892][ T8353] FAT-fs (loop1): Directory bread(block 68) failed
[  210.245612][ T8353] FAT-fs (loop1): Directory bread(block 69) failed
[  210.305653][ T8353] FAT-fs (loop1): Directory bread(block 70) failed
[  210.350333][ T8353] FAT-fs (loop1): Directory bread(block 71) failed
[  210.357035][ T8353] FAT-fs (loop1): Directory bread(block 72) failed
[  210.398319][ T8246] hsr_slave_0: entered promiscuous mode
[  210.464659][ T8353] FAT-fs (loop1): Directory bread(block 73) failed
[  210.472769][ T8246] hsr_slave_1: entered promiscuous mode
[  210.521386][ T8246] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  210.529004][ T8246] Cannot create hsr debugfs directory
[  211.276097][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz.7.923'.
[  211.616235][ T8368] loop1: detected capacity change from 0 to 4096
[  211.654392][ T8368] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  211.760871][ T8368] ntfs3(loop1): Failed to load $Extend (-22).
[  211.786496][ T8368] ntfs3(loop1): Failed to initialize $Extend.
[  211.940388][   T30] audit: type=1800 audit(1753160113.978:59): pid=8368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.922" name="file0" dev="loop1" ino=0 res=0 errno=0
[  212.396157][ T8378] loop7: detected capacity change from 0 to 4096
[  212.449791][ T8378] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  212.549989][ T8382] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.929'.
[  212.573864][ T8378] ntfs3(loop7): ino=1a, mi_enum_attr
[  212.579189][ T8378] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  212.597021][ T8382] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  212.641707][ T8378] ntfs3(loop7): Failed to initialize $Extend/$ObjId.
[  212.733340][   T30] audit: type=1800 audit(1753160114.798:60): pid=8378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.927" name="file1" dev="loop7" ino=24 res=0 errno=0
[  212.960551][ T8386] netlink: 16 bytes leftover after parsing attributes in process `syz.1.931'.
[  213.552632][ T8392] loop7: detected capacity change from 0 to 1024
[  213.660302][ T8392] hfsplus: invalid xattr key length: 0
[  213.720759][ T8394] loop1: detected capacity change from 0 to 1024
[  213.817114][   T12] hfsplus: b-tree write err: -5, ino 8
[  213.898962][ T8384] loop9: detected capacity change from 0 to 32768
[  213.987138][ T8384] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  214.036139][   T36] (kworker/u8:2,36,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2
[  214.192220][ T8384] (syz.9.930,8384,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2
[  214.270502][ T8384] (syz.9.930,8384,0):ocfs2_prepare_dir_for_insert:4294 ERROR: status = -2
[  214.310400][ T8384] (syz.9.930,8384,0):__ocfs2_prepare_orphan_dir:2180 ERROR: status = -2
[  214.355098][ T8384] (syz.9.930,8384,0):ocfs2_prepare_orphan_dir:2224 ERROR: status = -2
[  214.391025][ T8384] (syz.9.930,8384,0):ocfs2_prepare_orphan_dir:2240 ERROR: status = -2
[  214.430355][ T8384] (syz.9.930,8384,0):ocfs2_unlink:964 ERROR: status = -2
[  214.570394][ T5833] usb 8-1: new full-speed USB device number 6 using dummy_hcd
[  214.584427][ T8073] ocfs2: Unmounting device (7,9) on (node local)
[  214.731942][ T5833] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  214.772570][ T5833] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  214.823665][ T5833] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  214.880518][ T5833] usb 8-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00
[  214.889643][ T5833] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.971110][ T5833] usb 8-1: config 0 descriptor??
[  215.102131][ T8408] loop1: detected capacity change from 0 to 1024
[  215.232563][ T8408] hfsplus: bad catalog entry type
[  215.385790][   T36] hfsplus: b-tree write err: -5, ino 4
[  215.416445][ T5833] topre 0003:0853:0148.0015: unknown main item tag 0x0
[  215.469495][ T5833] topre 0003:0853:0148.0015: unknown main item tag 0x0
[  215.491564][ T5833] topre 0003:0853:0148.0015: unknown main item tag 0x0
[  215.527363][ T5833] topre 0003:0853:0148.0015: unknown main item tag 0x0
[  215.564833][ T5833] topre 0003:0853:0148.0015: unknown main item tag 0x0
[  215.586662][ T8413] loop1: detected capacity change from 0 to 8
[  215.622517][ T5833] topre 0003:0853:0148.0015: hidraw0: USB HID v0.00 Device [HID 0853:0148] on usb-dummy_hcd.7-1/input0
[  215.690549][ T5833] usb 8-1: USB disconnect, device number 6
[  216.211118][ T5161] Bluetooth: hci2: command 0x0406 tx timeout
[  216.217228][ T5161] Bluetooth: hci0: command 0x0406 tx timeout
[  216.224655][ T5864] Bluetooth: hci4: command 0x0406 tx timeout
[  217.090812][ T8431] sg_read: process 418 (syz.1.952) changed security contexts after opening file descriptor, this is not allowed.
[  217.146041][ T8433] loop7: detected capacity change from 0 to 64
[  217.551027][ T5833] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  217.705898][ T5833] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  217.728007][ T5833] usb 2-1: config 0 has no interface number 0
[  217.754856][ T5833] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  217.790064][ T5833] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  217.826106][ T5833] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[  217.860809][ T5833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.892390][ T5833] usb 2-1: config 0 descriptor??
[  217.954875][ T8443] loop7: detected capacity change from 0 to 64
[  217.992049][ T8443] syz.7.958: attempt to access beyond end of device
[  217.992049][ T8443] loop7: rw=0, sector=1024, nr_sectors = 2 limit=64
[  218.018489][ T8443] Buffer I/O error on dev loop7, logical block 512, async page read
[  218.051044][ T8443] syz.7.958: attempt to access beyond end of device
[  218.051044][ T8443] loop7: rw=0, sector=113152, nr_sectors = 2 limit=64
[  218.088900][ T8443] Buffer I/O error on dev loop7, logical block 56576, async page read
[  218.364598][ T5833] input: HID 04d9:a055 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:04D9:A055.0016/input/input9
[  218.564667][ T5833] holtek_kbd 0003:04D9:A055.0016: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.1-1/input1
[  218.599607][ T8448] loop7: detected capacity change from 0 to 1024
[  218.657366][ T5833] usb 2-1: USB disconnect, device number 15
[  219.384431][ T8458] loop7: detected capacity change from 0 to 256
[  219.977344][ T8468] loop7: detected capacity change from 0 to 256
[  220.026927][ T8468] exfat: Deprecated parameter 'utf8'
[  220.057950][ T8468] exfat: Deprecated parameter 'utf8'
[  220.069154][ T8468] exfat: Deprecated parameter 'utf8'
[  220.154780][ T8468] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  220.272725][   T30] audit: type=1800 audit(1753160122.338:61): pid=8468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.969" name="file1" dev="loop7" ino=1048669 res=0 errno=0
[  220.730822][ T8478] loop7: detected capacity change from 0 to 16
[  220.771281][ T8478] erofs (device loop7): mounted with root inode @ nid 36.
[  220.855239][ T8481] loop9: detected capacity change from 0 to 64
[  221.139893][ T8484] loop7: detected capacity change from 0 to 512
[  221.233926][ T8484] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  221.309599][ T8484] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  221.490672][ T8493] loop1: detected capacity change from 0 to 512
[  221.523149][ T6525] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.559667][ T8493] EXT4-fs (loop1): orphan cleanup on readonly fs
[  221.610265][ T8493] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.980: bg 0: block 248: padding at end of block bitmap is not set
[  221.712186][ T8493] Quota error (device loop1): write_blk: dquota write failed
[  221.719745][ T8493] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  221.783347][ T8493] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.980: Failed to acquire dquot type 1
[  221.861983][ T8493] EXT4-fs (loop1): 1 truncate cleaned up
[  221.864453][ T8493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  222.017355][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.737824][ T8510] loop7: detected capacity change from 0 to 256
[  222.813475][ T8510] FAT-fs (loop7): Directory bread(block 64) failed
[  222.837615][ T8510] FAT-fs (loop7): Directory bread(block 65) failed
[  222.863246][ T8510] FAT-fs (loop7): Directory bread(block 66) failed
[  222.888758][ T8510] FAT-fs (loop7): Directory bread(block 67) failed
[  222.911321][ T8510] FAT-fs (loop7): Directory bread(block 68) failed
[  222.931508][ T8510] FAT-fs (loop7): Directory bread(block 69) failed
[  222.939449][ T8510] FAT-fs (loop7): Directory bread(block 70) failed
[  222.973283][ T8510] FAT-fs (loop7): Directory bread(block 71) failed
[  222.991946][ T8510] FAT-fs (loop7): Directory bread(block 72) failed
[  222.998521][ T8510] FAT-fs (loop7): Directory bread(block 73) failed
[  223.010150][ T5931] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  223.186061][ T5931] usb 2-1: Using ep0 maxpacket: 8
[  223.205619][ T5931] usb 2-1: unable to get BOS descriptor or descriptor too short
[  223.229101][ T5931] usb 2-1: too many endpoints for config 4 interface 0 altsetting 102: 65, using maximum allowed: 30
[  223.282640][ T5931] usb 2-1: config 4 interface 0 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 65
[  223.317067][ T5931] usb 2-1: config 4 interface 0 has no altsetting 0
[  223.371738][ T5931] usb 2-1: string descriptor 0 read error: -22
[  223.390644][ T5931] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  223.415289][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.491828][ T5931] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  223.564046][ T5931] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  223.630811][ T5931] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  223.676162][ T5931] usb 2-1: media controller created
[  223.825065][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  223.934047][ T5931] zl10353_read_register: readreg error (reg=127, ret==0)
[  224.171874][ T5931] usb 2-1: USB disconnect, device number 16
[  224.840288][ T5931] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  225.029104][ T5931] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  225.059240][ T5931] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.111175][ T5931] usb 10-1: config 0 descriptor??
[  225.554062][ T5931] usb 10-1: Cannot set MAC address
[  225.559859][ T5931] MOSCHIP usb-ethernet driver 10-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  225.637964][ T5931] usb 10-1: USB disconnect, device number 2
[  225.919092][ T8546] loop7: detected capacity change from 0 to 1024
[  225.980662][ T8546] hfsplus: bad catalog entry type
[  226.251318][ T8549] loop1: detected capacity change from 0 to 2048
[  226.329582][ T8551] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  226.454550][ T8549] NILFS error (device loop1): nilfs_dotdot: directory #12 missing '..'
[  226.496847][ T8549] Remounting filesystem read-only
[  226.631541][ T5848] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[  227.586027][ T8561] loop1: detected capacity change from 0 to 32768
[  227.608548][ T8561] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1012 (8561)
[  227.636829][ T8561] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  227.659761][ T8561] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  227.681678][ T8561] BTRFS info (device loop1): using free-space-tree
[  227.908873][ T5848] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  242.640974][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  242.651752][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  242.665832][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  242.677576][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  242.693790][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  242.873385][ T5857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  242.899085][ T5857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  242.918732][ T5857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  242.931496][ T5857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  242.940891][ T5857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  243.939244][ T5854] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  243.961477][ T5854] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  243.971500][ T5854] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  243.985626][ T5854] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  243.994331][ T5854] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  244.767735][ T5854] Bluetooth: hci3: command tx timeout
[  245.000457][ T5854] Bluetooth: hci4: command tx timeout
[  246.041414][ T5854] Bluetooth: hci10: command tx timeout
[  246.846910][ T5864] Bluetooth: hci3: command tx timeout
[  246.852810][ T5854] Bluetooth: hci5: command 0x0406 tx timeout
[  247.080715][ T5857] Bluetooth: hci4: command tx timeout
[  248.122077][ T5857] Bluetooth: hci10: command tx timeout
[  248.920779][ T5857] Bluetooth: hci3: command tx timeout
[  249.160325][ T5857] Bluetooth: hci4: command tx timeout
[  250.200734][ T5857] Bluetooth: hci10: command tx timeout
[  251.000430][ T5857] Bluetooth: hci3: command tx timeout
[  251.244749][ T5857] Bluetooth: hci4: command tx timeout
[  252.280356][ T5857] Bluetooth: hci10: command tx timeout
[  253.443220][ T5864] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  253.452214][ T5864] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  253.459951][ T5864] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  253.482343][ T5864] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  253.495616][ T5864] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  255.012815][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  255.019159][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  255.560549][ T5857] Bluetooth: hci11: command tx timeout
[  257.106652][ T5864] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  257.117259][ T5864] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  257.125847][ T5864] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  257.136197][ T5864] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  257.144124][ T5864] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  257.502397][ T7822] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.660410][ T5857] Bluetooth: hci11: command tx timeout
[  258.536941][ T5864] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  258.550400][ T5864] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  258.558303][ T5864] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  258.567180][ T5864] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  258.574974][ T5864] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  259.246426][ T5864] Bluetooth: hci12: command tx timeout
[  259.720715][ T5864] Bluetooth: hci11: command tx timeout
[  260.680543][ T5864] Bluetooth: hci13: command tx timeout
[  261.320374][ T5864] Bluetooth: hci12: command tx timeout
[  261.800483][ T5864] Bluetooth: hci11: command tx timeout
[  262.760510][ T5864] Bluetooth: hci13: command tx timeout
[  263.400441][ T5864] Bluetooth: hci12: command tx timeout
[  264.840878][ T5864] Bluetooth: hci13: command tx timeout
[  265.490549][ T5864] Bluetooth: hci12: command tx timeout
[  266.047399][ T8585] chnl_net:caif_netlink_parms(): no params data found
[  266.667598][ T8601] chnl_net:caif_netlink_parms(): no params data found
[  266.905521][ T8603] chnl_net:caif_netlink_parms(): no params data found
[  266.928960][ T5864] Bluetooth: hci13: command tx timeout
[  266.958584][ T8597] chnl_net:caif_netlink_parms(): no params data found
[  267.097187][ T8588] chnl_net:caif_netlink_parms(): no params data found
[  267.928228][ T8583] chnl_net:caif_netlink_parms(): no params data found
[  268.175193][ T8585] bridge0: port 1(bridge_slave_0) entered blocking state
[  268.191820][ T8585] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.199144][ T8585] bridge_slave_0: entered allmulticast mode
[  268.227976][ T8585] bridge_slave_0: entered promiscuous mode
[  268.251953][ T8585] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.259123][ T8585] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.279699][ T8585] bridge_slave_1: entered allmulticast mode
[  268.293153][ T8585] bridge_slave_1: entered promiscuous mode
[  268.453021][ T8601] bridge0: port 1(bridge_slave_0) entered blocking state
[  268.477104][ T8601] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.490547][ T8601] bridge_slave_0: entered allmulticast mode
[  268.510412][ T8601] bridge_slave_0: entered promiscuous mode
[  268.534776][ T8601] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.550583][ T8601] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.558165][ T8601] bridge_slave_1: entered allmulticast mode
[  268.586871][ T8601] bridge_slave_1: entered promiscuous mode
[  269.447220][ T8585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  269.471193][ T8603] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.478368][ T8603] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.500682][ T8603] bridge_slave_0: entered allmulticast mode
[  269.523579][ T8603] bridge_slave_0: entered promiscuous mode
[  269.549884][ T8603] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.572609][ T8603] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.581195][ T8603] bridge_slave_1: entered allmulticast mode
[  269.601439][ T8603] bridge_slave_1: entered promiscuous mode
[  269.823740][ T8597] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.840517][ T8597] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.848146][ T8597] bridge_slave_0: entered allmulticast mode
[  269.877937][ T8597] bridge_slave_0: entered promiscuous mode
[  269.903417][ T8588] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.911243][ T8588] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.918531][ T8588] bridge_slave_0: entered allmulticast mode
[  269.941209][ T8588] bridge_slave_0: entered promiscuous mode
[  269.976332][ T8585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  270.253341][ T8601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  270.288842][ T8601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  270.319831][ T8597] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.340481][ T8597] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.348129][ T8597] bridge_slave_1: entered allmulticast mode
[  270.412416][ T8597] bridge_slave_1: entered promiscuous mode
[  270.564817][ T8588] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.600473][ T8588] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.607800][ T8588] bridge_slave_1: entered allmulticast mode
[  270.644145][ T8588] bridge_slave_1: entered promiscuous mode
[  271.541637][ T8588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  271.585280][ T8585] team0: Port device team_slave_0 added
[  271.612385][ T8585] team0: Port device team_slave_1 added
[  271.715228][ T8603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  271.785741][ T8583] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.801728][ T8583] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.809053][ T8583] bridge_slave_0: entered allmulticast mode
[  271.838129][ T8583] bridge_slave_0: entered promiscuous mode
[  271.972556][ T8601] team0: Port device team_slave_0 added
[  271.994482][ T8597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  272.032280][ T8597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  272.059144][ T8588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  272.235966][ T8585] batman_adv: batadv0: Adding interface: batadv_slave_0
[  272.250179][ T8585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  272.307985][ T8585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  272.353058][ T8603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  272.482272][ T8583] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.489477][ T8583] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.519378][ T8583] bridge_slave_1: entered allmulticast mode
[  272.546113][ T8583] bridge_slave_1: entered promiscuous mode
[  272.564538][ T8601] team0: Port device team_slave_1 added
[  272.999048][ T8588] team0: Port device team_slave_0 added
[  273.026373][ T8585] batman_adv: batadv0: Adding interface: batadv_slave_1
[  273.038798][ T8585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  273.085150][ T8585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  273.549810][ T8597] team0: Port device team_slave_0 added
[  273.564449][ T8588] team0: Port device team_slave_1 added
[  273.696397][ T8603] team0: Port device team_slave_0 added
[  273.715347][ T8603] team0: Port device team_slave_1 added
[  273.849585][ T8583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  273.877392][ T8601] batman_adv: batadv0: Adding interface: batadv_slave_0
[  273.893866][ T8601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  273.936180][ T8601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  273.984112][ T8597] team0: Port device team_slave_1 added
[  274.288856][ T8585] hsr_slave_0: entered promiscuous mode
[  274.318662][ T8585] hsr_slave_1: entered promiscuous mode
[  274.331588][ T8585] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  274.339254][ T8585] Cannot create hsr debugfs directory
[  274.549931][ T8583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  274.663668][ T8601] batman_adv: batadv0: Adding interface: batadv_slave_1
[  274.680633][ T8601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.725396][ T8601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  274.874393][ T8597] batman_adv: batadv0: Adding interface: batadv_slave_0
[  274.890308][ T8597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.936896][ T8597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  275.069038][ T8588] batman_adv: batadv0: Adding interface: batadv_slave_0
[  275.092739][ T8588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.134557][ T8588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  275.364641][ T8603] batman_adv: batadv0: Adding interface: batadv_slave_0
[  275.380124][ T8603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.437480][ T8603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  275.463994][ T8603] batman_adv: batadv0: Adding interface: batadv_slave_1
[  275.484541][ T8603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.540694][ T8603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  275.737948][ T8597] batman_adv: batadv0: Adding interface: batadv_slave_1
[  275.760573][ T8597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.819093][ T8597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  275.856787][ T8588] batman_adv: batadv0: Adding interface: batadv_slave_1
[  275.884838][ T8588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.920240][ T8588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  276.086643][ T8583] team0: Port device team_slave_0 added
[  276.199198][ T8601] hsr_slave_0: entered promiscuous mode
[  276.232738][ T8601] hsr_slave_1: entered promiscuous mode
[  276.259653][ T8601] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  276.270573][ T8601] Cannot create hsr debugfs directory
[  276.705009][ T8583] team0: Port device team_slave_1 added
[  277.032769][ T8588] hsr_slave_0: entered promiscuous mode
[  277.050784][ T8588] hsr_slave_1: entered promiscuous mode
[  277.070474][ T8588] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  277.078071][ T8588] Cannot create hsr debugfs directory
[  277.147674][ T8603] hsr_slave_0: entered promiscuous mode
[  277.169655][ T8603] hsr_slave_1: entered promiscuous mode
[  277.189861][ T8603] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  277.204524][ T8603] Cannot create hsr debugfs directory
[  277.463551][ T8597] hsr_slave_0: entered promiscuous mode
[  277.481175][ T8597] hsr_slave_1: entered promiscuous mode
[  277.500695][ T8597] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  277.509672][ T8597] Cannot create hsr debugfs directory
[  278.180410][ T8583] batman_adv: batadv0: Adding interface: batadv_slave_0
[  278.187401][ T8583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  278.236683][ T8583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  278.522194][ T8583] batman_adv: batadv0: Adding interface: batadv_slave_1
[  278.529180][ T8583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  278.587587][ T8583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  279.518712][ T8583] hsr_slave_0: entered promiscuous mode
[  279.538719][ T8583] hsr_slave_1: entered promiscuous mode
[  279.551544][ T8583] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  279.559135][ T8583] Cannot create hsr debugfs directory
[  296.449775][ T4867] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.997508][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  303.022807][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  303.040487][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  303.051292][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  303.060285][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  303.546658][ T5864] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  303.556730][ T5864] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  303.567227][ T5864] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  303.578671][ T5864] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  303.586942][ T5864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  304.075630][ T8646] chnl_net:caif_netlink_parms(): no params data found
[  304.712346][ T8646] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.719605][ T8646] bridge0: port 1(bridge_slave_0) entered disabled state
[  304.732404][ T8646] bridge_slave_0: entered allmulticast mode
[  304.760909][ T8646] bridge_slave_0: entered promiscuous mode
[  304.956290][ T8646] bridge0: port 2(bridge_slave_1) entered blocking state
[  304.991615][ T8646] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.998984][ T8646] bridge_slave_1: entered allmulticast mode
[  305.013016][ T5857] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  305.050557][ T5857] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  305.059810][ T5857] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  305.068199][ T5857] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  305.082430][ T5857] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  305.133472][ T8646] bridge_slave_1: entered promiscuous mode
[  305.160669][ T5857] Bluetooth: hci2: command tx timeout
[  305.397266][ T8646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  305.429035][ T8649] chnl_net:caif_netlink_parms(): no params data found
[  305.466939][ T8646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  305.640894][ T5857] Bluetooth: hci5: command tx timeout
[  305.922926][ T8646] team0: Port device team_slave_0 added
[  305.980527][ T8646] team0: Port device team_slave_1 added
[  306.496530][ T8646] batman_adv: batadv0: Adding interface: batadv_slave_0
[  306.515561][ T8646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  306.559934][ T8646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  306.706358][ T8646] batman_adv: batadv0: Adding interface: batadv_slave_1
[  306.720362][ T8646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  306.769331][ T8646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  306.843095][ T8649] bridge0: port 1(bridge_slave_0) entered blocking state
[  306.868894][ T8649] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.890694][ T8649] bridge_slave_0: entered allmulticast mode
[  306.903565][ T8649] bridge_slave_0: entered promiscuous mode
[  306.931702][ T8649] bridge0: port 2(bridge_slave_1) entered blocking state
[  306.938882][ T8649] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.962465][ T8649] bridge_slave_1: entered allmulticast mode
[  306.981596][ T8649] bridge_slave_1: entered promiscuous mode
[  307.161325][ T5857] Bluetooth: hci6: command tx timeout
[  307.240825][ T5857] Bluetooth: hci2: command tx timeout
[  307.384617][ T8649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  307.414956][ T8649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  307.552481][ T8646] hsr_slave_0: entered promiscuous mode
[  307.571116][ T8646] hsr_slave_1: entered promiscuous mode
[  307.590650][ T8646] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  307.598254][ T8646] Cannot create hsr debugfs directory
[  307.721006][ T5857] Bluetooth: hci5: command tx timeout
[  308.063244][ T8649] team0: Port device team_slave_0 added
[  308.368693][ T8649] team0: Port device team_slave_1 added
[  308.388564][ T8659] chnl_net:caif_netlink_parms(): no params data found
[  308.724117][ T8649] batman_adv: batadv0: Adding interface: batadv_slave_0
[  308.740148][ T8649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  308.801037][ T8649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  308.948861][ T8649] batman_adv: batadv0: Adding interface: batadv_slave_1
[  308.974071][ T8649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  309.030486][ T8649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  309.240441][ T5857] Bluetooth: hci6: command tx timeout
[  309.320522][ T5857] Bluetooth: hci2: command tx timeout
[  309.547107][ T8649] hsr_slave_0: entered promiscuous mode
[  309.581519][ T8649] hsr_slave_1: entered promiscuous mode
[  309.590063][ T8649] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  309.607787][ T8649] Cannot create hsr debugfs directory
[  309.800433][ T5857] Bluetooth: hci5: command tx timeout
[  309.852583][ T8659] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.859795][ T8659] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.881638][ T8659] bridge_slave_0: entered allmulticast mode
[  309.911911][ T8659] bridge_slave_0: entered promiscuous mode
[  309.922912][ T8659] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.930051][ T8659] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.947365][ T8659] bridge_slave_1: entered allmulticast mode
[  309.972775][ T8659] bridge_slave_1: entered promiscuous mode
[  310.226749][ T8659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  310.356577][ T8659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  310.731316][ T8659] team0: Port device team_slave_0 added
[  310.780044][ T8659] team0: Port device team_slave_1 added
[  311.098937][ T8659] batman_adv: batadv0: Adding interface: batadv_slave_0
[  311.122492][ T8659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.180507][ T8659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  311.241653][ T8659] batman_adv: batadv0: Adding interface: batadv_slave_1
[  311.248620][ T8659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.296452][ T8659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  311.323295][ T5864] Bluetooth: hci6: command tx timeout
[  311.400795][ T5857] Bluetooth: hci2: command tx timeout
[  311.612915][ T8659] hsr_slave_0: entered promiscuous mode
[  311.619828][ T8659] hsr_slave_1: entered promiscuous mode
[  311.650545][ T8659] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  311.658159][ T8659] Cannot create hsr debugfs directory
[  311.883741][ T5857] Bluetooth: hci5: command tx timeout
[  313.401364][ T5857] Bluetooth: hci6: command tx timeout
[  314.085522][ T5864] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  314.110742][ T5864] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  314.120990][ T5864] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  314.129247][ T5864] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  314.139533][ T5864] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  314.783794][ T8676] chnl_net:caif_netlink_parms(): no params data found
[  315.177364][ T8676] bridge0: port 1(bridge_slave_0) entered blocking state
[  315.200462][ T8676] bridge0: port 1(bridge_slave_0) entered disabled state
[  315.207858][ T8676] bridge_slave_0: entered allmulticast mode
[  315.235964][ T8676] bridge_slave_0: entered promiscuous mode
[  315.262404][ T8676] bridge0: port 2(bridge_slave_1) entered blocking state
[  315.269585][ T8676] bridge0: port 2(bridge_slave_1) entered disabled state
[  315.301937][ T8676] bridge_slave_1: entered allmulticast mode
[  315.323628][ T8676] bridge_slave_1: entered promiscuous mode
[  315.545798][ T8676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  315.576933][ T8676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  315.881994][ T8676] team0: Port device team_slave_0 added
[  315.908241][ T8676] team0: Port device team_slave_1 added
[  316.150842][ T8676] batman_adv: batadv0: Adding interface: batadv_slave_0
[  316.157851][ T8676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  316.207230][ T5864] Bluetooth: hci14: command tx timeout
[  316.232611][ T8676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  316.265617][ T8676] batman_adv: batadv0: Adding interface: batadv_slave_1
[  316.293487][ T8676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  316.347070][ T8676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  316.457630][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  316.464293][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  316.645703][ T8676] hsr_slave_0: entered promiscuous mode
[  316.674422][ T8676] hsr_slave_1: entered promiscuous mode
[  316.682382][ T8676] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  316.689967][ T8676] Cannot create hsr debugfs directory
[  318.118780][ T5854] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  318.127660][ T5854] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  318.135856][ T5854] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  318.145885][ T5854] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  318.158817][ T5161] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  318.196670][ T5161] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  318.207708][ T5161] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  318.216137][ T5161] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  318.227882][ T5161] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  318.236654][ T5161] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  318.280727][ T5161] Bluetooth: hci14: command tx timeout
[  318.521733][ T5161] Bluetooth: hci7: command 0x0406 tx timeout
[  319.282821][ T8690] chnl_net:caif_netlink_parms(): no params data found
[  319.326315][ T8689] chnl_net:caif_netlink_parms(): no params data found
[  319.905536][ T8690] bridge0: port 1(bridge_slave_0) entered blocking state
[  319.929154][ T8690] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.950726][ T8690] bridge_slave_0: entered allmulticast mode
[  319.959111][ T8690] bridge_slave_0: entered promiscuous mode
[  320.058303][ T8690] bridge0: port 2(bridge_slave_1) entered blocking state
[  320.070560][ T8690] bridge0: port 2(bridge_slave_1) entered disabled state
[  320.077921][ T8690] bridge_slave_1: entered allmulticast mode
[  320.109025][ T8690] bridge_slave_1: entered promiscuous mode
[  320.200850][ T5864] Bluetooth: hci15: command tx timeout
[  320.218276][ T8689] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.230512][ T8689] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.252735][ T8689] bridge_slave_0: entered allmulticast mode
[  320.281314][ T5864] Bluetooth: hci16: command tx timeout
[  320.289160][ T8689] bridge_slave_0: entered promiscuous mode
[  320.362663][ T5864] Bluetooth: hci14: command tx timeout
[  320.392395][ T8689] bridge0: port 2(bridge_slave_1) entered blocking state
[  320.399581][ T8689] bridge0: port 2(bridge_slave_1) entered disabled state
[  320.420756][ T8689] bridge_slave_1: entered allmulticast mode
[  320.442548][ T8689] bridge_slave_1: entered promiscuous mode
[  320.638121][ T8690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  320.783012][ T8689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  320.818948][ T8690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  320.941500][ T8689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  321.317164][ T8689] team0: Port device team_slave_0 added
[  321.507329][ T8690] team0: Port device team_slave_0 added
[  321.525878][ T8690] team0: Port device team_slave_1 added
[  321.557140][ T8689] team0: Port device team_slave_1 added
[  321.995043][ T8690] batman_adv: batadv0: Adding interface: batadv_slave_0
[  322.010059][ T8690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  322.070834][ T8690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  322.102083][ T8689] batman_adv: batadv0: Adding interface: batadv_slave_0
[  322.109100][ T8689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  322.182435][ T8689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  322.205308][ T8690] batman_adv: batadv0: Adding interface: batadv_slave_1
[  322.212750][ T8690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  322.269321][ T8690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  322.282978][ T5161] Bluetooth: hci15: command tx timeout
[  322.304686][ T8689] batman_adv: batadv0: Adding interface: batadv_slave_1
[  322.312547][ T8689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  322.359836][ T8689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  322.371971][ T5161] Bluetooth: hci16: command tx timeout
[  322.440411][ T5161] Bluetooth: hci14: command tx timeout
[  322.923011][ T8690] hsr_slave_0: entered promiscuous mode
[  322.930043][ T8690] hsr_slave_1: entered promiscuous mode
[  322.941317][ T8690] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  322.948913][ T8690] Cannot create hsr debugfs directory
[  322.992730][ T8689] hsr_slave_0: entered promiscuous mode
[  323.014244][ T8689] hsr_slave_1: entered promiscuous mode
[  323.022171][ T8689] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  323.029761][ T8689] Cannot create hsr debugfs directory
[  323.642802][ T5161] Bluetooth: hci8: command 0x0406 tx timeout
[  324.360880][ T5864] Bluetooth: hci15: command tx timeout
[  324.443616][ T5864] Bluetooth: hci16: command tx timeout
[  326.440655][ T5864] Bluetooth: hci15: command tx timeout
[  326.521105][ T5864] Bluetooth: hci16: command tx timeout
[  328.766618][ T5864] Bluetooth: hci9: command 0x0406 tx timeout
[  364.937386][ T5864] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  364.953510][ T5864] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  364.969236][ T5864] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  364.978964][ T5864] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  364.991407][ T5864] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  365.207011][ T5161] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  365.218910][ T5161] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  365.228014][ T5161] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  365.237839][ T5161] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  365.246256][ T5161] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  365.890830][ T5864] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1
[  365.915219][ T5864] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9
[  365.930330][ T5864] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9
[  365.938540][ T5864] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4
[  365.946663][ T5864] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2
[  366.262569][ T8708] chnl_net:caif_netlink_parms(): no params data found
[  366.729561][ T8710] chnl_net:caif_netlink_parms(): no params data found
[  367.081496][ T5161] Bluetooth: hci17: command tx timeout
[  367.172245][ T8708] bridge0: port 1(bridge_slave_0) entered blocking state
[  367.179528][ T8708] bridge0: port 1(bridge_slave_0) entered disabled state
[  367.210479][ T8708] bridge_slave_0: entered allmulticast mode
[  367.232043][ T8708] bridge_slave_0: entered promiscuous mode
[  367.312072][ T8708] bridge0: port 2(bridge_slave_1) entered blocking state
[  367.319365][ T8708] bridge0: port 2(bridge_slave_1) entered disabled state
[  367.327593][ T5161] Bluetooth: hci18: command tx timeout
[  367.361145][ T8708] bridge_slave_1: entered allmulticast mode
[  367.371369][ T8708] bridge_slave_1: entered promiscuous mode
[  367.619176][ T8708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  367.857877][ T8708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  368.050951][ T5865] Bluetooth: hci19: command tx timeout
[  368.072637][ T8710] bridge0: port 1(bridge_slave_0) entered blocking state
[  368.079818][ T8710] bridge0: port 1(bridge_slave_0) entered disabled state
[  368.102181][ T8710] bridge_slave_0: entered allmulticast mode
[  368.129774][ T8710] bridge_slave_0: entered promiscuous mode
[  368.154599][ T8710] bridge0: port 2(bridge_slave_1) entered blocking state
[  368.170307][ T8710] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.177791][ T8710] bridge_slave_1: entered allmulticast mode
[  368.205213][ T8710] bridge_slave_1: entered promiscuous mode
[  368.581701][ T8708] team0: Port device team_slave_0 added
[  368.595966][ T8708] team0: Port device team_slave_1 added
[  368.617446][ T8714] chnl_net:caif_netlink_parms(): no params data found
[  368.650753][ T8710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  368.685077][ T8710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  369.161688][ T5865] Bluetooth: hci17: command tx timeout
[  369.173423][ T8708] batman_adv: batadv0: Adding interface: batadv_slave_0
[  369.190299][ T8708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  369.246026][ T8708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  369.274970][ T8708] batman_adv: batadv0: Adding interface: batadv_slave_1
[  369.299745][ T8708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  369.362314][ T8708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  369.411431][ T5865] Bluetooth: hci18: command tx timeout
[  369.432426][ T8710] team0: Port device team_slave_0 added
[  369.682705][ T8710] team0: Port device team_slave_1 added
[  369.736867][ T5865] Bluetooth: hci3: command 0x0406 tx timeout
[  369.743021][ T5857] Bluetooth: hci4: command 0x0406 tx timeout
[  369.749073][ T5857] Bluetooth: hci10: command 0x0406 tx timeout
[  370.122465][ T5854] Bluetooth: hci19: command tx timeout
[  370.162811][ T8708] hsr_slave_0: entered promiscuous mode
[  370.181588][ T8708] hsr_slave_1: entered promiscuous mode
[  370.189885][ T8708] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  370.207662][ T8708] Cannot create hsr debugfs directory
[  370.437683][ T8710] batman_adv: batadv0: Adding interface: batadv_slave_0
[  370.462495][ T8710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  370.519525][ T8710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  370.826307][ T8710] batman_adv: batadv0: Adding interface: batadv_slave_1
[  370.846001][   T31] INFO: task syz-executor:8243 blocked for more than 143 seconds.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  370.854255][ T8710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  370.891434][   T31]       Not tainted 6.16.0-rc7-syzkaller #0
[  370.927572][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  370.954603][   T31] task:syz-executor    state:D stack:21928 pid:8243  tgid:8243  ppid:1      task_flags:0x400140 flags:0x00004004
[  370.980806][ T8710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  371.064815][   T31] Call Trace:
[  371.068166][   T31]  <TASK>
[  371.139650][   T31]  __schedule+0x16fd/0x4cf0
[  371.175469][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  371.218257][   T31]  ? is_bpf_text_address+0x26/0x2b0
[  371.240657][ T5854] Bluetooth: hci17: command tx timeout
[  371.250582][ T8714] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.257785][ T8714] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.270154][   T31]  ? __lock_acquire+0xab9/0xd20
[  371.275100][   T31]  ? schedule+0x165/0x360
[  371.279476][   T31]  ? __pfx___schedule+0x10/0x10
[  371.320522][ T8714] bridge_slave_0: entered allmulticast mode
[  371.350689][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  371.356435][   T31]  ? schedule+0x91/0x360
[  371.380277][ T8714] bridge_slave_0: entered promiscuous mode
[  371.387842][   T31]  schedule+0x165/0x360
[  371.411003][   T31]  schedule_preempt_disabled+0x13/0x30
[  371.416562][   T31]  __mutex_lock+0x724/0xe80
[  371.450208][   T31]  ? __mutex_lock+0x51b/0xe80
[  371.454983][   T31]  ? del_device_store+0xd1/0x360
[  371.459963][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  371.483107][ T5854] Bluetooth: hci18: command tx timeout
[  371.530573][   T31]  ? __lock_acquire+0xab9/0xd20
[  371.535530][   T31]  ? sysfs_file_kobj+0x1a/0x230
[  371.570669][   T31]  del_device_store+0xd1/0x360
[  371.575535][   T31]  ? sysfs_file_kobj+0x1a/0x230
[  371.596441][   T31]  ? __pfx_del_device_store+0x10/0x10
[  371.610143][   T31]  ? sysfs_file_kobj+0x1e4/0x230
[  371.616712][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  371.641441][   T31]  ? sysfs_kf_write+0x166/0x260
[  371.646402][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  371.660194][   T31]  ? __pfx_sysfs_kf_write+0x10/0x10
[  371.665493][   T31]  kernfs_fop_write_iter+0x378/0x4f0
[  371.680196][   T31]  vfs_write+0x54b/0xa90
[  371.684540][   T31]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  371.711037][   T31]  ? __pfx_vfs_write+0x10/0x10
[  371.715901][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  371.734484][   T31]  ? kmem_cache_free+0x18f/0x400
[  371.739540][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  371.760646][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  371.766370][   T31]  ksys_write+0x145/0x250
[  371.780388][   T31]  ? __pfx_ksys_write+0x10/0x10
[  371.785327][   T31]  ? rcu_is_watching+0x15/0xb0
[  371.800682][   T31]  ? do_syscall_64+0xbe/0x3b0
[  371.805538][   T31]  do_syscall_64+0xfa/0x3b0
[  371.820443][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  371.825753][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.860740][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  371.866453][   T31]  ? exc_page_fault+0x9f/0xf0
[  371.880387][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.886348][   T31] RIP: 0033:0x7f5c6e18d45f
[  371.900249][   T31] RSP: 002b:00007ffe3c660c30 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  371.908742][   T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f5c6e18d45f
[  371.932366][   T31] RDX: 0000000000000001 RSI: 00007ffe3c660c80 RDI: 0000000000000005
[  371.960142][   T31] RBP: 00007f5c6e211fbd R08: 0000000000000000 R09: 00007ffe3c660a87
[  371.968186][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  372.000401][   T31] R13: 00007ffe3c660c80 R14: 00007f5c6eee4620 R15: 0000000000000003
[  372.008481][   T31]  </TASK>
[  372.032917][   T31] INFO: task syz-executor:8246 blocked for more than 144 seconds.
[  372.090910][   T31]       Not tainted 6.16.0-rc7-syzkaller #0
[  372.096873][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  372.202528][ T5854] Bluetooth: hci19: command tx timeout
[  372.220149][   T31] task:syz-executor    state:D stack:22760 pid:8246  tgid:8246  ppid:1      task_flags:0x400140 flags:0x00004004
[  372.294830][   T31] Call Trace:
[  372.298191][   T31]  <TASK>
[  372.330779][   T31]  __schedule+0x16fd/0x4cf0
[  372.335384][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  372.390242][   T31]  ? is_bpf_text_address+0x26/0x2b0
[  372.395538][   T31]  ? __lock_acquire+0xab9/0xd20
[  372.450175][   T31]  ? schedule+0x165/0x360
[  372.454604][   T31]  ? __pfx___schedule+0x10/0x10
[  372.501699][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  372.507428][   T31]  ? schedule+0x91/0x360
[  372.561019][   T31]  schedule+0x165/0x360
[  372.565262][   T31]  schedule_preempt_disabled+0x13/0x30
[  372.621288][   T31]  __mutex_lock+0x724/0xe80
[  372.625878][   T31]  ? __mutex_lock+0x51b/0xe80
[  372.664481][   T31]  ? del_device_store+0xd1/0x360
[  372.669507][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  372.710507][   T31]  ? __lock_acquire+0xab9/0xd20
[  372.715438][   T31]  ? sysfs_file_kobj+0x1a/0x230
[  372.800219][   T31]  del_device_store+0xd1/0x360
[  372.805073][   T31]  ? sysfs_file_kobj+0x1a/0x230
[  372.809965][   T31]  ? __pfx_del_device_store+0x10/0x10
[  372.890579][   T31]  ? sysfs_file_kobj+0x1e4/0x230
[  372.895609][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  372.950769][   T31]  ? sysfs_kf_write+0x166/0x260
[  372.955716][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  373.040685][   T31]  ? __pfx_sysfs_kf_write+0x10/0x10
[  373.045983][   T31]  kernfs_fop_write_iter+0x378/0x4f0
[  373.110804][   T31]  vfs_write+0x54b/0xa90
[  373.115153][   T31]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  373.162431][   T31]  ? __pfx_vfs_write+0x10/0x10
[  373.167294][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  373.220542][   T31]  ? kmem_cache_free+0x18f/0x400
[  373.225583][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  373.268503][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  373.326481][   T31]  ksys_write+0x145/0x250
[  373.331461][ T5854] Bluetooth: hci17: command tx timeout
[  373.337025][   T31]  ? __pfx_ksys_write+0x10/0x10
[  373.384050][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  373.389789][   T31]  ? do_syscall_64+0xbe/0x3b0
[  373.446335][   T31]  do_syscall_64+0xfa/0x3b0
[  373.460135][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  373.480164][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.520152][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  373.525875][   T31]  ? exc_page_fault+0x9f/0xf0
[  373.561233][ T5854] Bluetooth: hci18: command tx timeout
[  373.574762][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.587950][   T31] RIP: 0033:0x7f473cf8d45f
[  373.600132][   T31] RSP: 002b:00007fff012a1360 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  373.608599][   T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f473cf8d45f
[  373.630979][   T31] RDX: 0000000000000001 RSI: 00007fff012a13b0 RDI: 0000000000000005
[  373.639007][   T31] RBP: 00007f473d011fbd R08: 0000000000000000 R09: 00007fff012a11b7
[  373.666150][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  373.688835][   T31] R13: 00007fff012a13b0 R14: 00007f473dce4620 R15: 0000000000000003
[  373.710963][   T31]  </TASK>
[  373.715512][   T31] 
[  373.715512][   T31] Showing all locks held in the system:
[  373.741062][   T31] 1 lock held by khungtaskd/31:
[  373.745973][   T31]  #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  373.770533][   T31] 6 locks held by kworker/u8:8/4867:
[  373.775888][   T31]  #0: ffff88801b2f6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  373.824347][   T31]  #1: ffffc9000dfc7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  373.851034][   T31]  #2: ffffffff8f50f510 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  373.870474][   T31]  #3: ffff8880573530e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0
[  373.890142][   T31]  #4: ffff888056f84250 (&devlink->lock_key#9){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0
[  373.920471][   T31]  #5: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  373.950786][   T31] 2 locks held by getty/5601:
[  373.955524][   T31]  #0: ffff88814c7150a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  373.990141][   T31]  #1: ffffc900036cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  374.029124][   T31] 2 locks held by syz-executor/5846:
[  374.070531][   T31]  #0: ffffffff8e88f248 (bio_slab_lock){+.+.}-{4:4}, at: bioset_exit+0x44a/0x690
[  374.079806][   T31]  #1: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  374.121065][   T31] 4 locks held by kworker/0:5/5924:
[  374.126308][   T31]  #0: ffff888058431d48 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  374.160137][   T31]  #1: ffffc90002fe7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  374.229789][   T31]  #2: ffff8880337b5308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900
[  374.263714][   T31]  #3: ffff888056e2b4c0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900
[  374.290703][ T5854] Bluetooth: hci19: command tx timeout
[  374.296256][   T31] 2 locks held by kworker/1:6/5982:
[  374.311976][   T31] 4 locks held by syz.4.718/7822:
[  374.317052][   T31]  #0: ffffffff8f5823f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  374.340644][   T31]  #1: ffff888056bf00e8 (&dev->mutex){....}-{4:4}, at: devlink_get_from_attrs_lock+0x240/0x3a0
[  374.375341][   T31]  #2: ffff888056bf1250 (&devlink->lock_key#6){+.+.}-{4:4}, at: devlink_get_from_attrs_lock+0x24f/0x3a0
[  374.400619][   T31]  #3: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  374.422018][   T31] 4 locks held by kworker/1:9/7847:
[  374.427292][   T31] 1 lock held by syz.5.824/8090:
[  374.440635][   T31]  #0: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  374.461739][   T31] 2 locks held by kworker/1:10/8167:
[  374.467095][   T31] 7 locks held by syz-executor/8210:
[  374.493787][   T31]  #0: ffff8880346d2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  374.510127][   T31]  #1: ffff8880559af488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  374.519992][   T31]  #2: ffff88802750e1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  374.560839][   T31]  #3: ffffffff8eda9908 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  374.580359][   T31]  #4: ffff888056f540e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0
[  374.603623][   T31]  #5: ffff888056f55250 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160
[  374.630650][   T31]  #6: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  374.650143][   T31] 4 locks held by syz-executor/8243:
[  374.655479][   T31]  #0: ffff8880346d2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  374.683742][   T31]  #1: ffff888056bc0488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  374.720150][   T31]  #2: ffff88802750e1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  374.740212][   T31]  #3: ffffffff8eda9908 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  374.760137][   T31] 4 locks held by syz-executor/8246:
[  374.765470][   T31]  #0: ffff8880346d2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  374.800133][   T31]  #1: ffff8880453d6488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  374.811959][   T31]  #2: ffff88802750e1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  374.840771][   T31]  #3: ffffffff8eda9908 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  374.860133][   T31] 2 locks held by kworker/1:14/8429:
[  374.865456][   T31] 1 lock held by syz.7.1008/8552:
[  374.880131][   T31]  #0: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  374.910697][   T31] 1 lock held by syz.9.1010/8556:
[  374.919924][   T31]  #0: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  374.950689][   T31] 1 lock held by syz.1.1013/8578:
[  374.955774][   T31]  #0: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  374.980833][   T31] 4 locks held by syz-executor/8583:
[  374.987539][   T31]  #0: ffff8880346d2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  375.013913][   T31]  #1: ffff88808294ac88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  375.043948][   T31]  #2: ffff88802750e1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  375.060123][   T31]  #3: ffffffff8eda9908 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  375.080814][   T31] 4 locks held by syz-executor/8585:
[  375.086133][   T31]  #0: ffff8880346d2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  375.110500][   T31]  #1: ffff88805eac1888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  375.140503][   T31]  #2: ffff88802750e1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  375.171092][   T31]  #3: ffffffff8eda9908 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  375.190130][   T31] 4 locks held by syz-executor/8588:
[  375.195453][   T31]  #0: ffff8880346d2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  375.220523][   T31]  #1: ffff88806adb2c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  375.250593][   T31]  #2: ffff88802750e1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  375.270431][   T31]  #3: ffffffff8eda9908 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  375.290138][   T31] 4 locks held by syz-executor/8597:
[  375.295456][   T31]  #0: ffff8880346d2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  375.329056][   T31]  #1: ffff88808233c888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  375.353367][   T31]  #2: ffff88802750e1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  375.379968][   T31]  #3: ffffffff8eda9908 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  375.400598][   T31] 4 locks held by syz-executor/8601:
[  375.405920][   T31]  #0: ffff8880346d2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  375.440404][   T31]  #1: ffff88806adb3488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  375.463062][   T31]  #2: ffff88802750e1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  375.480140][   T31]  #3: ffffffff8eda9908 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  375.520159][   T31] 4 locks held by syz-executor/8603:
[  375.527035][   T31]  #0: ffff8880346d2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  375.560156][   T31]  #1: ffff8880823dd488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  375.570030][   T31]  #2: ffff88802750e1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  375.650870][   T31]  #3: ffffffff8eda9908 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  375.670153][   T31] 3 locks held by kworker/u8:10/8642:
[  375.683385][   T31] 4 locks held by syz-executor/8646:
[  375.688716][   T31]  #0: ffff8880346d2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  375.710578][   T31]  #1: ffff888033b89488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  375.737356][   T31]  #2: ffff88802750e1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  375.760585][   T31]  #3: ffffffff8eda9908 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  375.780147][   T31] 4 locks held by syz-executor/8649:
[  375.785507][   T31]  #0: ffff8880346d2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  375.812382][   T31]  #1: ffff88808d680888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  375.839534][   T31]  #2: ffff88802750e1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  375.862289][   T31]  #3: ffffffff8eda9908 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  375.891050][   T31] 4 locks held by syz-executor/8659:
[  375.896403][   T31]  #0: ffff8880346d2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  375.917867][   T31]  #1: ffff88808d8f1488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  375.942337][   T31]  #2: ffff88802750e1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  375.962064][   T31]  #3: ffffffff8eda9908 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  375.990668][   T31] 4 locks held by syz-executor/8676:
[  375.996024][   T31]  #0: ffff8880346d2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  376.024880][   T31]  #1: ffff888056459088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  376.056964][   T31]  #2: ffff88802750e1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  376.091200][   T31]  #3: ffffffff8eda9908 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  376.121065][   T31] 4 locks held by syz-executor/8689:
[  376.126414][   T31]  #0: ffff8880346d2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  376.150528][   T31]  #1: ffff8880914a6c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  376.170387][   T31]  #2: ffff88802750e1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  376.205199][   T31]  #3: ffffffff8eda9908 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  376.220143][   T31] 4 locks held by syz-executor/8690:
[  376.225488][   T31]  #0: ffff8880346d2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  376.270141][   T31]  #1: ffff8880914a6888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  376.280025][   T31]  #2: ffff88802750e1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  376.324060][   T31]  #3: ffffffff8eda9908 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  376.340134][   T31] 3 locks held by syz-executor/8708:
[  376.345465][   T31]  #0: ffff88805fff4dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  376.380137][   T31]  #1: ffff88805fff40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  376.389937][   T31]  #2: ffffffff8f684288 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  376.428340][   T31] 3 locks held by syz-executor/8710:
[  376.434813][   T31]  #0: ffff8880a6694dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  376.460399][   T31]  #1: ffff8880a66940b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  376.483468][   T31]  #2: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  376.510943][   T31] 5 locks held by syz-executor/8714:
[  376.516315][   T31]  #0: ffff8880a632cdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  376.540454][   T31]  #1: ffff8880a632c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  376.570258][   T31]  #2: ffffffff8f684288 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  376.593032][   T31]  #3: ffff8880514e6b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  376.617693][   T31]  #4: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  376.650546][   T31] 1 lock held by dhcpcd/8732:
[  376.655295][   T31]  #0: ffff8880ace72258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  376.680675][   T31] 1 lock held by dhcpcd/8733:
[  376.685410][   T31]  #0: ffff888060a7a258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  376.713252][   T31] 1 lock held by dhcpcd/8734:
[  376.718268][   T31]  #0: ffff88805f56e258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  376.749141][   T31] 
[  376.761727][   T31] =============================================
[  376.761727][   T31] 
[  376.780205][   T31] NMI backtrace for cpu 0
[  376.780230][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) 
[  376.780266][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  376.780280][   T31] Call Trace:
[  376.780289][   T31]  <TASK>
[  376.780299][   T31]  dump_stack_lvl+0x189/0x250
[  376.780331][   T31]  ? __wake_up_klogd+0xd9/0x110
[  376.780366][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  376.780397][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  376.780427][   T31]  ? __pfx__printk+0x10/0x10
[  376.780476][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  376.780517][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  376.780550][   T31]  ? _printk+0xcf/0x120
[  376.780589][   T31]  ? __pfx__printk+0x10/0x10
[  376.780624][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  376.780653][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  376.780694][   T31]  watchdog+0xfee/0x1030
[  376.780719][   T31]  ? watchdog+0x1de/0x1030
[  376.780751][   T31]  kthread+0x711/0x8a0
[  376.780789][   T31]  ? __pfx_watchdog+0x10/0x10
[  376.780810][   T31]  ? __pfx_kthread+0x10/0x10
[  376.780841][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  376.780873][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  376.780897][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  376.780924][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  376.780948][   T31]  ? __pfx_kthread+0x10/0x10
[  376.780984][   T31]  ret_from_fork+0x3fc/0x770
[  376.781012][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  376.781046][   T31]  ? __switch_to_asm+0x39/0x70
[  376.781077][   T31]  ? __switch_to_asm+0x33/0x70
[  376.781107][   T31]  ? __pfx_kthread+0x10/0x10
[  376.781143][   T31]  ret_from_fork_asm+0x1a/0x30
[  376.781193][   T31]  </TASK>
[  376.781203][   T31] Sending NMI from CPU 0 to CPUs 1:
[  376.957761][    C1] NMI backtrace for cpu 1
[  376.957779][    C1] CPU: 1 UID: 0 PID: 5982 Comm: kworker/1:6 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) 
[  376.957804][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  376.957819][    C1] Workqueue: events_power_efficient neigh_periodic_work
[  376.957853][    C1] RIP: 0010:debug_object_activate+0x108/0x420
[  376.957890][    C1] Code: 4d 8b 6d 00 41 ff c7 4d 85 ed 74 3c 4d 8d 65 18 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 9c a5 5b fd 49 39 1c 24 <0f> 84 ef 00 00 00 4c 89 e8 48 c1 e8 03 42 80 3c 30 00 74 c2 4c 89
[  376.957908][    C1] RSP: 0018:ffffc90000a08080 EFLAGS: 00000087
[  376.957926][    C1] RAX: 1ffff110099f8f8b RBX: ffff8880a5186d50 RCX: dffffc0000000000
[  376.957942][    C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000a07f60
[  376.957956][    C1] RBP: ffffffff99d18ba8 R08: 0000000000000003 R09: 0000000000000004
[  376.957970][    C1] R10: dffffc0000000000 R11: fffff52000140fec R12: ffff88804cfc7c58
[  376.957986][    C1] R13: ffff88804cfc7c40 R14: dffffc0000000000 R15: 0000000000000003
[  376.958004][    C1] FS:  0000000000000000(0000) GS:ffff888125d23000(0000) knlGS:0000000000000000
[  376.958022][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  376.958036][    C1] CR2: 00007f4c38000f98 CR3: 000000000df38000 CR4: 0000000000350ef0
[  376.958053][    C1] Call Trace:
[  376.958061][    C1]  <IRQ>
[  376.958077][    C1]  ? __pfx_dst_destroy_rcu+0x10/0x10
[  376.958100][    C1]  call_rcu+0xaa/0x9c0
[  376.958133][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  376.958159][    C1]  ? rcuref_put+0x1b7/0x210
[  376.958180][    C1]  ? __pfx_call_rcu+0x10/0x10
[  376.958206][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  376.958230][    C1]  ? percpu_counter_add_batch+0xea/0x1e0
[  376.958255][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  376.958280][    C1]  ? dst_release+0x126/0x1b0
[  376.958303][    C1]  skb_release_head_state+0x71/0x250
[  376.958339][    C1]  consume_skb+0x60/0xf0
[  376.958370][    C1]  nft_synproxy_eval_v4+0x376/0x560
[  376.958398][    C1]  ? __pfx_nft_synproxy_eval_v4+0x10/0x10
[  376.958422][    C1]  ? nf_ip_checksum+0x13c/0x510
[  376.958446][    C1]  nft_synproxy_do_eval+0x345/0x570
[  376.958473][    C1]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[  376.958502][    C1]  ? __pfx___ip_vs_conn_in_get+0x10/0x10
[  376.958531][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  376.958560][    C1]  nft_do_chain+0x40c/0x1920
[  376.958586][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  376.958617][    C1]  ? __pfx_nft_do_chain+0x10/0x10
[  376.958641][    C1]  ? __pfx_ip_vs_conn_out_get_proto+0x10/0x10
[  376.958680][    C1]  ? ip_vs_out_hook+0x9b5/0xef0
[  376.958708][    C1]  ? __pfx_ip_vs_in_hook+0x10/0x10
[  376.958739][    C1]  nft_do_chain_inet+0x25d/0x340
[  376.958760][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  376.958785][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  376.958810][    C1]  ? nf_nat_ipv4_local_in+0x223/0x720
[  376.958841][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  376.958862][    C1]  nf_hook_slow+0xc5/0x220
[  376.958895][    C1]  NF_HOOK+0x206/0x3a0
[  376.958924][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  376.958949][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  376.958979][    C1]  ? NF_HOOK+0x9a/0x3a0
[  376.959008][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  376.959034][    C1]  ? ip_rcv_finish_core+0xda3/0x1c00
[  376.959066][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  376.959097][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  376.959122][    C1]  ? skb_dst+0x4f/0xd0
[  376.959150][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  376.959175][    C1]  ? ip_local_deliver+0x12a/0x1b0
[  376.959206][    C1]  NF_HOOK+0x30c/0x3a0
[  376.959236][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  376.959265][    C1]  ? NF_HOOK+0x9a/0x3a0
[  376.959293][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  376.959320][    C1]  ? ip_rcv_core+0x7f7/0xd00
[  376.959350][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  376.959386][    C1]  ? __pfx_ip_rcv+0x10/0x10
[  376.959414][    C1]  __netif_receive_skb+0x143/0x380
[  376.959443][    C1]  ? process_backlog+0x2d5/0x14f0
[  376.959473][    C1]  process_backlog+0x60e/0x14f0
[  376.959504][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  376.959529][    C1]  ? __lock_acquire+0xab9/0xd20
[  376.959560][    C1]  ? __pfx_process_backlog+0x10/0x10
[  376.959596][    C1]  __napi_poll+0xc7/0x480
[  376.959621][    C1]  ? net_rx_action+0x46d/0xe30
[  376.959651][    C1]  net_rx_action+0x707/0xe30
[  376.959679][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  376.959703][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  376.959736][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  376.959789][    C1]  handle_softirqs+0x286/0x870
[  376.959817][    C1]  ? do_softirq+0xec/0x180
[  376.959844][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  376.959872][    C1]  ? __common_interrupt+0x163/0x250
[  376.959891][    C1]  ? neigh_periodic_work+0xb41/0xd60
[  376.959921][    C1]  do_softirq+0xec/0x180
[  376.959943][    C1]  </IRQ>
[  376.959950][    C1]  <TASK>
[  376.959959][    C1]  ? __pfx_do_softirq+0x10/0x10
[  376.959988][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  376.960013][    C1]  ? lockdep_softirqs_on+0x13b/0x1c0
[  376.960035][    C1]  __local_bh_enable_ip+0x17d/0x1c0
[  376.960059][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  376.960087][    C1]  ? neigh_periodic_work+0xb41/0xd60
[  376.960119][    C1]  ? neigh_periodic_work+0xb41/0xd60
[  376.960149][    C1]  neigh_periodic_work+0xb41/0xd60
[  376.960183][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  376.960210][    C1]  process_scheduled_works+0xae1/0x17b0
[  376.960254][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  376.960284][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  376.960315][    C1]  worker_thread+0x8a0/0xda0
[  376.960342][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  376.960370][    C1]  ? __kthread_parkme+0x7b/0x200
[  376.960403][    C1]  kthread+0x711/0x8a0
[  376.960435][    C1]  ? __pfx_worker_thread+0x10/0x10
[  376.960459][    C1]  ? __pfx_kthread+0x10/0x10
[  376.960491][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  376.960518][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  376.960538][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  376.960563][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  376.960584][    C1]  ? __pfx_kthread+0x10/0x10
[  376.960615][    C1]  ret_from_fork+0x3fc/0x770
[  376.960639][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  376.960666][    C1]  ? __switch_to_asm+0x39/0x70
[  376.960694][    C1]  ? __switch_to_asm+0x33/0x70
[  376.960722][    C1]  ? __pfx_kthread+0x10/0x10
[  376.960752][    C1]  ret_from_fork_asm+0x1a/0x30
[  376.960792][    C1]  </TASK>
[  377.724908][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  377.731827][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) 
[  377.741925][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  377.752003][   T31] Call Trace:
[  377.755299][   T31]  <TASK>
[  377.758244][   T31]  dump_stack_lvl+0x99/0x250
[  377.762866][   T31]  ? __asan_memcpy+0x40/0x70
[  377.767480][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  377.772703][   T31]  ? __pfx__printk+0x10/0x10
[  377.777329][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  377.782991][   T31]  panic+0x2db/0x790
[  377.786913][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  377.792576][   T31]  ? __pfx_panic+0x10/0x10
[  377.797014][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  377.802672][   T31]  ? nmi_backtrace_stall_check+0x433/0x440
[  377.808515][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  377.814173][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  377.819584][   T31]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  377.825781][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  377.831449][   T31]  watchdog+0x102d/0x1030
[  377.835805][   T31]  ? watchdog+0x1de/0x1030
[  377.840249][   T31]  kthread+0x711/0x8a0
[  377.844363][   T31]  ? __pfx_watchdog+0x10/0x10
[  377.849058][   T31]  ? __pfx_kthread+0x10/0x10
[  377.853676][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  377.859338][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  377.864557][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  377.870213][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  377.875434][   T31]  ? __pfx_kthread+0x10/0x10
[  377.880057][   T31]  ret_from_fork+0x3fc/0x770
[  377.884667][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  377.889808][   T31]  ? __switch_to_asm+0x39/0x70
[  377.894596][   T31]  ? __switch_to_asm+0x33/0x70
[  377.899383][   T31]  ? __pfx_kthread+0x10/0x10
[  377.904000][   T31]  ret_from_fork_asm+0x1a/0x30
[  377.908825][   T31]  </TASK>
[  377.912101][   T31] Kernel Offset: disabled
[  377.916426][   T31] Rebooting in 86400 seconds..