last executing test programs:

5.651946838s ago: executing program 2 (id=324):
syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000200)={[{@compress}]}, 0x1, 0x50ed, &(0x7f0000005180)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTsT3573JENYvrOR3E/wmHm5XUpgfKxQ6WkmPbbFHXpgfLxQ65pIemydDeHBhZX9S+H8stJPClbV54UhSOB0L+fnQLRxLCifimfb52ny6aeH7WMgvsJiPV1Cs6V4SkfS42q/HQuGGPc52Dw4AAHBPieE5z7Jjvc2QRtn52qAdVg/aYWTQDvVBO4wmO6Q79tseZnsLcXv7zMalPf//yHD5P74Vq7JFv+v/Q7z+P3+uYff6/9lYaCSF+VhopXcMaMVjZGH343iMRivvcWV9twAAAAB3tfi9QH2F5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP+zda4xc1X0A8LPP8T68XkiqEBolm6TGcROv1zaQqKXKmlI1IqVZNxRURRQbe00WL9ixTYlRiIxNRCMEpQ1S8qEIoyiq+QC1AhFJAeEixREqj4iqKIBAoTVEQaSUJCJNkEI1e++ZvXPuzsOPNV76+0neOTP/87zz8Jx775wLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/w8GvXPO3zeKP/va8Z1+4ePyKPWsvfvW68059MoSJmcc7snBH/423j//87nPv2fPA6jvuO3z+R3vzcnk8DFT/dOZ3boi1Hl4cwv0dIXSngRWDWaAnvz8Y63vfYAinhNlArcRkf1YibTh8vy+EfWE2UKvqe30hDBYCFz71yMM3VxO39YWwNIRQSdt4vpK10ZcGzujNAv1pYGt3FvjVW5la4LudWQCOWXwz1F70BybqMwzPXa7B66/nuHXs7ZUOrysmhhvn+9naee5UQW/6wMQxPW2l6pgXpbfHQe+2BfBuK23nWz1txS9S+TeUt2ZDldC5aXLzhqund8ZHOsPoaFejmubpeX7m9S9tPJL0gnkdxg4MH5fX4S1PLL27a/kFj9+3YunL+z+295Vj7eaPCpu0mJ5vlZC/5hbM8xiN+zxZAG+/0rekEV+6QgibP/97n2kWL83/h5vP/+PLOd521uWOtb45lM3N4yODMfHaUDY3BwAAgAVjIew13Tr60Cea1Vea/4+0d/w/HvLPJ/PZaA+GMD6T2LskhNNmHs8Cd8XmLlsSwgdnUhP1gbVJ4GAI751JLK9VlZRYFEuMJIGfDOWB8SRwKAYmksC3YuDWJHBDDBxIAhtj4GASODcGwlT9OH5/KB9H24G+GFifbcQD8SyEXwzF1pJt9VytKgAAgOMknx321N8tnOtwrBni9PJAX6sM8QzshhkqSQ3pDLY2rWpYQ3erGjpb1VAb9+7mwy/V3NGq5tJpGB31GW7/5d98NjRRmv+PNZ//V+boSEfp+H8I62b+xtydeWS6Fl8/UZcBAAAAOAYD//viN5vFS/P/8fbO/4/7RLoKmcNjcTfEliUhjNUHsmr/sBzIjnoP5AEAAABYCGrH42vHwqfy2+wU7XQ+Xc4/cYT544H/8Tnz9x58cH2z/pbm/xPtnf/fX3+bdeJQ7MXXloSwqBD4QexlNTBjJAZ+/Mn6QD7+Q3ED3BSryk9MqFV1UyyxPgbGksC+RiV+WCtxWn0gf7Jqje+tjWMqL1EIAAAAwAkXdwfE4/Lx/P8P/Wb1Nc3Kleb/64/s/P+ZeXDp9P7pgRBWdofQlf4w4LH+bGHAGBjsyBMP9Wd1daVVXd8fwjnVgaVVvZiv/9+drjH4VF9WVQyc9qH9r59RTXyzL4SVxcDTn7vzrGpiZxKoNf6XfSF8oDratPHvLMoa70kb//qiEN5fCNSqumxRCNXGetOqHqnk1zFIq/rnSgjvKgRqVZ1dCWFXAGCBiv+Vbio+uGPXtVs2TE9Pbp/HRNyH3xc2T01Pjm7cOr2p0qBPm5I+1y1jdH15TO1e+ea5fImii+5dN9hOuvY7wbFiW/l+/NKJg/n9+F2oZ2acq3vq7q5Jh/yRD5ebCIVvUo2G3DnPQ+4vVjL7JJbqj/l7w0BYdPWOye2jX9ywc+f2VdnfdrOvzv7Gw0zZtlqVbqv+ufrWxsuj4WpZiaPdVsuKlazceeW2lTt2Xbti6soNl09ePnnVqrNXj505tmbs42eurI5qLPvbYqjL5qo6Gepbd7Y5ruM41NO7C5WciE8NCQmJhZbYOrCs6f/Jpfn/tubz//ipEz/58/UZGh3/H46H+bPHZw/zr4+Bfe0e/x9udDS/dmLASBLYHQO7HeYHAADgnSFO8uPezLhX+qfLv/Nys3Kl+f/u9n7/f5zW/68tXX9+o2X+l8cSY43W/0+X+a+t/7+70fr/6TL/tfX/970N6/9fXQskm+QX1v8HAADeCU7c+v8tl/dPLxBQytByef/0AgGlDC2X8W/3AgFHvP7/8//5V/8dmijN/29tb/5v4X4AAAA4eXz5z675nWbx0vx/X3vz/xO//l9odP7/SKPARKOFAa3/BwAAwALVaP2/4Rv7L21WrjT/P9De/D+edtFZlzvW+uZQtqZdSNe0e22o9pMBAAAAWBg6w+hoT5t561ZGXXv0bT6TLwXaLF304p8cPrLz/w+2N/+v+13GLU8svbtr+QWPv3nfiqUv7//Y3ldmj/8DAAAA86fd/RIAAAAAAAAAAAAAAMDb78X/2LOmWbz0+/+wbubxRr//j9f9i78veHdd7lhr6/X/8vsXfvqeXTNLFj42FMKHi4Ete7acEvJr8y8rBh6+ZPl7qok9aYkHXzj3pWri0jTwqRWnvlFNnJME1sdFEt+bBuJVFd9YnATi8or/ngbi9jiQBnrzwFcXZ+PoSLfVTwezbdWRbqtnB0NYUgjUttX9g1kbHekAb0sCtQF+IQ3EAf55HuhMe3XPQNarGBiMRe8YyHoFAMBJK34L7Ambp6Ynx+JX+Hh7enf9bVS3ZNn15Wo72mz+uXxpsovuXTfYTror/S46e63xnlCpDmFV6etqMUvHzCiPTy0tNt27Gwy51WpvnQ3KpY500/U2HlFfNqLRjVunN/W0HPia1llWd7fMsqo02Slm6ZzZpG3U0kZf2hhRm9umjS7H+51hdLQryfUHMTgc6rR6RbT7e/3iOn+NXgXFPFcd3vurZvWV5v/D7c3/K8VxvZFfDGB3vLLe3y2xzD8AAADMr6+u/fU34r/P3vjo083ylub/I+3N/+MerPxQcLa342C8/v/eJSHMXFp/OAvcFZu7bEkIH5xJTcQS2QX1z48lxrLAXXGHyfJYYv1EfVWLYuBAEvjJUB44mAQOxUC+l2J/yHfl/P1QCGfNpNbVl9gWSwwngc/EwEgSGI2BsSSwOAbGk8Cri/PARBL4txgIU/Xb6t7F+bYCAAA4Evk8q6f+bkjneQe6W2XoaJWhv1WGzlYZKq0yNBpFvP/tmKEnOXmlo5CpJ621L6mllCFeDP+I+1XKEH5YnzMtWGo6nn9QO9+goz7DA5/oroQmSvP/sfbm//31t1nrh+L8f/b6f1ngB7F7X4unjo/EwI8/WR/IdwwcipPdm2pVTeQl8kn7TbHEeAyMJIFtMTCeBNavywP73lMfyGfatcb31hqfyksUAgAAAHDCxR0EcTdNnP/fseMrA83Kleb/4+3N/2N7A8XGboi1Hl4cwv0ds72pBVYMZoG4H2Mw/jz+fYMhnFLYwVErMdmflehNGg7f78t+od6bVvW9vuzHB/H+hU898vDN1cRtfSEsLex9qbXxfCVroy8NnNGbBfrTwNbuLBD3/NQC3+3MAnDMansF4wsqP9WlZnjucg1ef++Ua4KmwyvtA50j31y/uZovpR2u+T7VmiN72pruv+W4Kb09Dnq3LcR327B3W/GLVP4N5a3ZUCV0bprcvOHq6Z3xkeIvWUvm6Xku/kq1nfRxeB3uPvretlZJOzCWfHyMzV1u7tdhR6zulieW3t21/ILH71ux9OX9H9v7StvdaCD+UPiR6/518EeFzTvfKiF/zS24z5MJnycL8b+BEU9bCGHdq1+/qVm8NP+faG/+353czvh13Jg7loTwkcLGfSxu/j9ekn0OFgLZp+S7yoHskPt/DTX85AQAAIDjrba7o7a/YCq/zU4IT+fJ5fwTR5g/7q8YnzN/u/3u/+tLljaLl+b/65vP/xcl3XT83/F/5onj/3M62XdFL0of2H1Mu6JL1TEvHP+f08n+bnP8f06O/zv+PxfH/1tw/H9OJ/vTVvqWtM2XrhDCy3/00LPN4qX5/7b25v/W/5t70b7a+n/rG63/t63R+n+7rf8HAADMqwYLzaXzvNLqfaUM6ep9pQwtFwhsucSg9f+OeP2/l05//jehidL8f3d78//4chgotr5Q1v8bWdegqltjYJuFAQEAADgZNdpBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNvrgX/4n03N4o/+9rxnX7h4/Io9ay9+9brzTn0yhKmZxzuycEf/jbeP//zuc+/Z88DqO+47fP5HK3m5nvz2d+tyx1rfHAphX+GRwZh4bah6ZzZw4afv2dVdTTw2FMKHi4Ete7acUk18ayiEZcXAw5csf081sSct8eAL575UTVyaBj614tQ3qolz8kBH2t1/XJx1tyPt7s2LQ1hSCNS6e8Xi+qpqbfxpHuhM2/inwayNGBiMRb8xmLURA9OxxNSiEFZ2h9CVVvVoJauqK63qXypZVV1pVV+uhHBOCKE7reqF3qyq7nTkT/ZmVcXAaR/a//oZ1cS+3hBWFgNPf+7Os6qJLySBWuN/0RvCB6ovmbTxb/dkjfekjd/WE8L7Qwi9aYlfdmcletMSL3aH8K5CoNb457tD2BV4R4gfPnWfaDt2Xbtlw/T05PZ5TPTmbfWFzVPTk6Mbt05vqiR9aqSjkH7r+qMf+3Ovf2lj9faie9cNtpPuzsv1zHR5dU/d3TUne+9jv/qLlcw+H6X6Y/7eMBAWXb1jcvvoFzfs3Ll9Vfa33eyrs79deTTbVqsWyrZaVqxk5c4rt63csevaFVNXbrh88vLJq1advXrszLE1Yx8/c2V1VGPZ3+Mx1DtP/FBP7y5UciI+ACQkJBZaorPu023sZP8gL33Rn+1oT6jMfECXphXFLB0zozweg157lCM+mu8pLUe0qjRxKGVZ3TrLmtJkYjZLX5Zl5ntdaXJYrKlzZpPG+51hdLSr0XYYrr9b3Lw/O4bN+0y+6dpNAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwf+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALgUAAD//wNUIwc=")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0)
readahead(r0, 0x0, 0x0)

3.427474029s ago: executing program 2 (id=334):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001b"], 0x34}}, 0x0)

3.078458229s ago: executing program 0 (id=338):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x8e2, @empty, 0x9}, 0x1c)
getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f0000009a80))

3.046759669s ago: executing program 2 (id=339):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x7, &(0x7f0000000000), 0xa0)

2.842875076s ago: executing program 0 (id=340):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x3}]}, 0x10)
sendto(r0, 0x0, 0x34000, 0x0, 0x0, 0x0)

2.718125089s ago: executing program 2 (id=342):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000003c0)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {}, {@noinit_itable}, {@norecovery}, {@discard}, {@noload}, {@usrjquota}, {@oldalloc}, {@grpquota}]}, 0x1, 0x583, &(0x7f0000000cc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc1}})

2.573450358s ago: executing program 0 (id=343):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000080))

2.572047193s ago: executing program 1 (id=344):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000600), 0x0, 0x5e7, &(0x7f0000000c00)="$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")
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
setxattr$trusted_overlay_origin(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x0)

2.43395986s ago: executing program 0 (id=345):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "31549194"}]}}, 0x0}, 0x0)

2.247329568s ago: executing program 2 (id=347):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000040)=0x20f, 0x4)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x3, 0x1}, 0xc)

2.192596973s ago: executing program 1 (id=348):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280))
r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x125d, 0x0)

1.814026138s ago: executing program 1 (id=350):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x1c18744, &(0x7f00000002c0)={[{@errors_remount}]}, 0xfe, 0x490, &(0x7f0000000640)="$eJzs3M9vFFUcAPDvTLf8VFoRf4AkVtHY+KOlBZSDHjSaeNBEowc81rYQZKGG1kQI0WIMHg2Jd+PRxL/Akyejnky8eNC7ISFKTAAvrpndmba77lT6cxf380kW3tt5M+99++btvr632wB61lD2TxJxR0T8EhEDjWxzgaHGfzeuXZi8ee3CZBK12hu/J/Vy169dmCyKFuftzDPDaUT6cZJX0mz23PlTE9Xq9Nk8Pzp3+t3R2XPnnzp5euLE9InpM+NHjx4+NPbM0+NHms47sso4s/iu7/tgZv/el9+6/Orksctvf/9V1t40P740jvUylAX+R62u9dij611Zh/1dW4wzqXS6NdyqvojIuqu/Pv4Hoi8WO28gXvqoo40DNlT2mr21/PB8DfgfS6LTLQA6o3ijz37/zR/9mzT16ApXn2/8ApTFfiN/NI5UFtYGNvIHMhQRx+b/+jx7RMs6RK3NugEAwFp9k81/nmya/+XzjzTuXVJuV743NBgRd0XE7oi4OyL2RMQ9EfWy90XE/Susv3Vr6N/7MOmVVQV2i7L537P53lbz/K+Y/cVgX567sx5/f3L8ZHX6YP4zGY7+rVl+rN3Fi0u8+NOnZfUvnf9lj6z+Yi6YX+RKpWWBbmpibmK9JqVXL0bsq7SLP1nYCUgiYm9E7FvZpXcViZOPf7m/rNB/x7+Mddhnqn0R8Vij/+ejJf5Csvz+5Oi2qE4fHG3cFX1t6vjhx0uvldW/pvjXQdb/O5rv/5YSA38mS/drZ1dex6VfPyndW62s8v7fkrxZ39Pdkj/3/sTc3NmxiC3JK/V80/Pji+cW+aJ8Fv/wgfbjf3d+Thb/AxGxP+LnYtg9mPfdQxHxcEQcWCb+71545J2yY93Q/1NtX/8W7v/B5v5feaLv1Ldfl9XfGn+S5xdLZP1/uJ4azp+pv/7ltpdct7w52/ISq72bAQAA4PaT1j8bn6QjC+k0HRlpfIZ/T+xIqzOzc08cn3nvzFTjM/SD0Z8W658DS9ZDx5L5/IqN/Hi+VlwcP5SvG3/Wtz1Jojo9MjlTnepw7NDrdpaM/8xv7RazI+K5TW0hsKF8Xwt6V+v4TzvUDmDzef+H3mX8Q+8y/qF3FeP/9SXPfdhSpmQvALjNef+H3mX8Q+9aGP8XO9sOYPN5/4ee1O5L8sXfOFjDV/7XlKgs8+39Lk0Uq6Pd0p5TSURsbBWRdkekpYnI/4hFt7Rn5YmbtVWeXllmdN9qojOvRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOvtnwAAAP//aP7lHQ==")
r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r0, 0x40086604)

1.681439711s ago: executing program 2 (id=351):
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001517ee40f00a057a0200010203010902120001000000400904000000ff"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.531641175s ago: executing program 1 (id=352):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000400))

1.086438853s ago: executing program 3 (id=356):
timer_create(0x2, &(0x7f0000000100)={0x0, 0x12, 0x1}, &(0x7f0000000280)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
timer_settime(r0, 0x0, &(0x7f00000003c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000440))

913.022226ms ago: executing program 1 (id=357):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x286801, 0x0)
unshare(0x8020480)
ftruncate(r0, 0x8001)

840.519712ms ago: executing program 1 (id=359):
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c820"], 0xbf)

840.245426ms ago: executing program 3 (id=360):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x1)
ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000480)={0x0, @bt={0x12, 0x7c5, 0x0, 0x3, 0xd59f80, 0x4, 0x5, 0x7, 0x8, 0x84, 0x4, 0xe72, 0x7, 0x8, 0x2e, 0xd, {0xffff945a, 0x1}, 0x3, 0xed}})

760.389908ms ago: executing program 3 (id=361):
r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
mq_timedsend(r0, &(0x7f0000000600)='m', 0x1, 0x0, 0x0)
mq_timedreceive(r0, &(0x7f0000004600)=""/102360, 0x18fd8, 0x0, 0x0)

674.261289ms ago: executing program 4 (id=362):
r0 = socket$unix(0x1, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

673.684608ms ago: executing program 3 (id=363):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0xea60}, 0x10)
recvmmsg(r0, &(0x7f000000a900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

609.491773ms ago: executing program 4 (id=364):
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000045090100ef0000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

561.084063ms ago: executing program 4 (id=365):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008000d003c00000008000a000020"], 0x3c}}, 0x0)

502.328217ms ago: executing program 3 (id=366):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(r1, r1, 0x0, 0xffffffffffffffff, r0)

482.761277ms ago: executing program 4 (id=367):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x4}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x28}}, 0x0)

335.268073ms ago: executing program 3 (id=368):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR")
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000000c0)={0x1})
ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000040)={0x0, {0xa, 0x0, 0x8}})

333.884344ms ago: executing program 0 (id=369):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006)

152.549967ms ago: executing program 4 (id=370):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x6c}}, 0x0)

36.411313ms ago: executing program 0 (id=371):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x3)
ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000440))

0s ago: executing program 4 (id=372):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03040000b500000000000000feefffff"], 0xc8)
write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="03000000b500000001000000feefffff"], 0xc8)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.21' (ED25519) to the list of known hosts.
[   61.224817][ T5226] cgroup: Unknown subsys name 'net'
[   61.332953][ T5226] cgroup: Unknown subsys name 'cpuset'
[   61.341325][ T5226] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   62.794760][ T5226] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   66.419245][ T5240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   66.430330][ T5248] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   66.438423][ T5248] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   66.447298][ T5250] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   66.456014][ T5250] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   66.464572][ T5250] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   66.472668][ T5250] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   66.480791][ T5250] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   66.488022][ T5250] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   66.500233][ T5250] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   66.508343][ T5250] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   66.514470][ T5254] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   66.516142][ T5250] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   66.531159][ T5250] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   66.539224][ T5250] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   66.540207][ T5254] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   66.554725][ T5256] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   66.559237][ T5250] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   66.562465][ T5254] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   66.576062][ T5250] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   66.576265][ T5256] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   66.598685][ T5256] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   66.606570][ T5254] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   66.613872][ T5256] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   66.622377][ T5256] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   66.630088][ T5254] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   66.632657][ T5259] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   66.645364][ T5259] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   66.646691][ T5241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   66.653154][ T5259] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   67.128316][ T5243] chnl_net:caif_netlink_parms(): no params data found
[   67.176335][ T5249] chnl_net:caif_netlink_parms(): no params data found
[   67.190033][ T5236] chnl_net:caif_netlink_parms(): no params data found
[   67.202633][ T5244] chnl_net:caif_netlink_parms(): no params data found
[   67.215406][ T5237] chnl_net:caif_netlink_parms(): no params data found
[   67.268562][ T5243] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.275839][ T5243] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.284709][ T5243] bridge_slave_0: entered allmulticast mode
[   67.294267][ T5243] bridge_slave_0: entered promiscuous mode
[   67.331547][ T5243] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.338646][ T5243] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.346067][ T5243] bridge_slave_1: entered allmulticast mode
[   67.352771][ T5243] bridge_slave_1: entered promiscuous mode
[   67.417595][ T5243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.455367][ T5243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.514069][ T5243] team0: Port device team_slave_0 added
[   67.544692][ T5244] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.552421][ T5244] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.559977][ T5244] bridge_slave_0: entered allmulticast mode
[   67.566738][ T5244] bridge_slave_0: entered promiscuous mode
[   67.574301][ T5244] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.581481][ T5244] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.588589][ T5244] bridge_slave_1: entered allmulticast mode
[   67.595356][ T5244] bridge_slave_1: entered promiscuous mode
[   67.602984][ T5243] team0: Port device team_slave_1 added
[   67.616585][ T5249] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.623805][ T5249] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.631015][ T5249] bridge_slave_0: entered allmulticast mode
[   67.637649][ T5249] bridge_slave_0: entered promiscuous mode
[   67.644994][ T5249] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.652511][ T5249] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.660081][ T5249] bridge_slave_1: entered allmulticast mode
[   67.666729][ T5249] bridge_slave_1: entered promiscuous mode
[   67.681343][ T5237] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.688471][ T5237] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.695987][ T5237] bridge_slave_0: entered allmulticast mode
[   67.702917][ T5237] bridge_slave_0: entered promiscuous mode
[   67.710885][ T5236] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.717997][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.725252][ T5236] bridge_slave_0: entered allmulticast mode
[   67.732322][ T5236] bridge_slave_0: entered promiscuous mode
[   67.767555][ T5237] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.775174][ T5237] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.782438][ T5237] bridge_slave_1: entered allmulticast mode
[   67.789858][ T5237] bridge_slave_1: entered promiscuous mode
[   67.796348][ T5236] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.803680][ T5236] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.811257][ T5236] bridge_slave_1: entered allmulticast mode
[   67.817917][ T5236] bridge_slave_1: entered promiscuous mode
[   67.826535][ T5244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.838487][ T5244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.895319][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.902937][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.929270][ T5243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.942664][ T5249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.954244][ T5249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.965157][ T5237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.991108][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.998082][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.024732][ T5243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.037639][ T5237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.056490][ T5236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.067869][ T5236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.081602][ T5244] team0: Port device team_slave_0 added
[   68.129655][ T5244] team0: Port device team_slave_1 added
[   68.137634][ T5237] team0: Port device team_slave_0 added
[   68.145894][ T5237] team0: Port device team_slave_1 added
[   68.153521][ T5249] team0: Port device team_slave_0 added
[   68.179982][ T5236] team0: Port device team_slave_0 added
[   68.198786][ T5249] team0: Port device team_slave_1 added
[   68.228208][ T5236] team0: Port device team_slave_1 added
[   68.234991][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.251271][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.277365][ T5244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.297385][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.304442][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.330486][ T5237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.343079][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.350095][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.376071][ T5237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.403750][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.410969][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.437134][ T5244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.448787][ T5249] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.456252][ T5249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.482700][ T5249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.501666][ T5243] hsr_slave_0: entered promiscuous mode
[   68.508206][ T5243] hsr_slave_1: entered promiscuous mode
[   68.529539][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.536503][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.563448][ T5259] Bluetooth: hci0: command tx timeout
[   68.563991][ T5236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.582696][ T5249] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.591217][ T5249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.617439][ T5249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.640428][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.647410][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.673947][ T5259] Bluetooth: hci3: command tx timeout
[   68.679727][ T5236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.719169][ T5259] Bluetooth: hci1: command tx timeout
[   68.719180][ T5248] Bluetooth: hci2: command tx timeout
[   68.719435][ T5248] Bluetooth: hci4: command tx timeout
[   68.751328][ T5244] hsr_slave_0: entered promiscuous mode
[   68.757599][ T5244] hsr_slave_1: entered promiscuous mode
[   68.764582][ T5244] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.772474][ T5244] Cannot create hsr debugfs directory
[   68.789448][ T5237] hsr_slave_0: entered promiscuous mode
[   68.795902][ T5237] hsr_slave_1: entered promiscuous mode
[   68.802492][ T5237] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.810332][ T5237] Cannot create hsr debugfs directory
[   68.842701][ T5249] hsr_slave_0: entered promiscuous mode
[   68.853442][ T5249] hsr_slave_1: entered promiscuous mode
[   68.859652][ T5249] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.867209][ T5249] Cannot create hsr debugfs directory
[   68.933958][ T5236] hsr_slave_0: entered promiscuous mode
[   68.940413][ T5236] hsr_slave_1: entered promiscuous mode
[   68.946491][ T5236] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.956941][ T5236] Cannot create hsr debugfs directory
[   69.265527][ T5243] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   69.278398][ T5243] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   69.302239][ T5243] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   69.324259][ T5243] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   69.344550][ T5244] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   69.361322][ T5244] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   69.378721][ T5244] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   69.396675][ T5244] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   69.444937][ T5249] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   69.475283][ T5249] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   69.485472][ T5249] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   69.509931][ T5249] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   69.545563][ T5236] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   69.566571][ T5236] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   69.600514][ T5236] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   69.611422][ T5236] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   69.667450][ T5237] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   69.677530][ T5237] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   69.691426][ T5237] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   69.714951][ T5237] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   69.731912][ T5243] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.764676][ T5244] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.812052][ T5244] 8021q: adding VLAN 0 to HW filter on device team0
[   69.824220][ T5243] 8021q: adding VLAN 0 to HW filter on device team0
[   69.856160][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.863561][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.880368][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.887458][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.911385][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.918481][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.948129][ T2581] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.955264][ T2581] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.006297][ T5249] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.067156][ T5244] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   70.097637][ T5249] 8021q: adding VLAN 0 to HW filter on device team0
[   70.133559][ T5236] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.173671][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.180832][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.218658][ T5237] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.250959][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.258086][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.295325][ T5236] 8021q: adding VLAN 0 to HW filter on device team0
[   70.315918][ T5237] 8021q: adding VLAN 0 to HW filter on device team0
[   70.354736][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.361951][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.414711][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.421891][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.435484][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.442718][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.457655][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.464846][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.526963][ T5243] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.541341][ T5244] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.640119][ T5248] Bluetooth: hci0: command tx timeout
[   70.692515][ T5244] veth0_vlan: entered promiscuous mode
[   70.719601][ T5248] Bluetooth: hci3: command tx timeout
[   70.743210][ T5244] veth1_vlan: entered promiscuous mode
[   70.802498][ T4632] Bluetooth: hci1: command tx timeout
[   70.802504][ T5259] Bluetooth: hci2: command tx timeout
[   70.813602][ T5248] Bluetooth: hci4: command tx timeout
[   70.872851][ T5244] veth0_macvtap: entered promiscuous mode
[   70.905067][ T5244] veth1_macvtap: entered promiscuous mode
[   70.931024][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.982964][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.049854][ T5244] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.058784][ T5244] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.069596][ T5244] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.078321][ T5244] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.104664][ T5236] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.126710][ T5237] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.154599][ T5249] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.210465][ T5243] veth0_vlan: entered promiscuous mode
[   71.272934][ T5237] veth0_vlan: entered promiscuous mode
[   71.280654][ T5243] veth1_vlan: entered promiscuous mode
[   71.291337][ T2559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.302450][ T2559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.365711][ T5236] veth0_vlan: entered promiscuous mode
[   71.384997][ T5237] veth1_vlan: entered promiscuous mode
[   71.396603][ T5236] veth1_vlan: entered promiscuous mode
[   71.411998][ T3027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.429237][ T3027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.442273][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[   71.448746][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[   71.495192][ T5236] veth0_macvtap: entered promiscuous mode
[   71.507067][ T5249] veth0_vlan: entered promiscuous mode
[   71.522369][ T5243] veth0_macvtap: entered promiscuous mode
[   71.530089][ T5244] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   71.535200][ T5243] veth1_macvtap: entered promiscuous mode
[   71.558409][ T5249] veth1_vlan: entered promiscuous mode
[   71.571567][ T5236] veth1_macvtap: entered promiscuous mode
[   71.601253][ T5237] veth0_macvtap: entered promiscuous mode
[   71.658394][ T5237] veth1_macvtap: entered promiscuous mode
[   71.682496][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.702512][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.714398][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.756983][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.782751][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.800071][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.810759][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.822317][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.832227][ T5249] veth0_macvtap: entered promiscuous mode
[   71.842453][ T5249] veth1_macvtap: entered promiscuous mode
[   71.858016][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.868842][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.878746][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.889377][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.899434][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.910071][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.921331][ T5249] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.936710][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.959878][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.981646][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.005042][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.019019][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.028886][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.054893][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.068008][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.080382][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.091189][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.102293][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.114894][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.134233][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.146819][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.158460][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.172355][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.184016][ T5249] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.195344][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.206635][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.216791][ T5325] loop0: detected capacity change from 0 to 32768
[   72.217591][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.227564][ T5325] =======================================================
[   72.227564][ T5325] WARNING: The mand mount option has been deprecated and
[   72.227564][ T5325]          and is ignored by this kernel. Remove the mand
[   72.227564][ T5325]          option from the mount to silence this warning.
[   72.227564][ T5325] =======================================================
[   72.248997][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.283795][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.294814][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.306798][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.322310][ T5243] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.332113][ T5325] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1 (5325)
[   72.339503][ T5243] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.355493][ T5243] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.364555][ T5243] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.376903][ T5249] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.388094][ T5325] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   72.405328][ T5249] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.413577][ T5325] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[   72.419328][ T5249] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.428110][ T5325] BTRFS info (device loop0): using free-space-tree
[   72.446886][ T5249] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.460671][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.473845][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.486127][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.497013][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.508430][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.521384][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.531550][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.549526][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.577483][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.611558][ T5236] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.623125][ T5236] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.633216][ T5236] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.643796][ T5236] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.663603][ T5244] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   72.669505][ T5237] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.683331][ T5237] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.692381][ T5237] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.702634][ T5237] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.720621][ T5248] Bluetooth: hci0: command tx timeout
[   72.809272][ T5248] Bluetooth: hci3: command tx timeout
[   72.879076][ T5248] Bluetooth: hci2: command tx timeout
[   72.889288][ T4632] Bluetooth: hci1: command tx timeout
[   72.894774][ T5248] Bluetooth: hci4: command tx timeout
[   73.003508][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.004532][ T3027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.012273][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.077590][ T2581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.079661][ T3027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.089835][ T2581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.140393][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.148228][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.186697][ T5345] loop0: detected capacity change from 0 to 16
[   73.201296][ T5345] erofs: (device loop0): mounted with root inode @ nid 36.
[   73.205821][ T3027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.236942][   T29] audit: type=1800 audit(1729035333.941:2): pid=5345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7" name="file1" dev="loop0" ino=86 res=0 errno=0
[   73.260645][ T3027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.370410][ T3027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.378279][ T3027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.467820][ T3027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.509916][ T3027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.563885][ T3027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.600452][ T3027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.737688][ T5353] loop1: detected capacity change from 0 to 256
[   73.776749][ T5355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10'.
[   73.851622][ T5353] FAT-fs (loop1): Directory bread(block 64) failed
[   73.871989][ T5353] FAT-fs (loop1): Directory bread(block 65) failed
[   73.878643][ T5353] FAT-fs (loop1): Directory bread(block 66) failed
[   73.896381][ T5353] FAT-fs (loop1): Directory bread(block 67) failed
[   73.906055][ T5353] FAT-fs (loop1): Directory bread(block 68) failed
[   73.920554][ T5353] FAT-fs (loop1): Directory bread(block 69) failed
[   73.928009][ T5353] FAT-fs (loop1): Directory bread(block 70) failed
[   73.957981][ T5353] FAT-fs (loop1): Directory bread(block 71) failed
[   73.972221][ T5353] FAT-fs (loop1): Directory bread(block 72) failed
[   73.989086][ T5353] FAT-fs (loop1): Directory bread(block 73) failed
[   74.176353][ T5363] loop4: detected capacity change from 0 to 4096
[   74.205742][ T5369] loop2: detected capacity change from 0 to 256
[   74.231634][ T5369] exfat: Deprecated parameter 'utf8'
[   74.256136][ T5363] NILFS (loop4): invalid segment: Checksum error in segment payload
[   74.278701][ T5363] NILFS (loop4): trying rollback from an earlier position
[   74.288846][ T5369] exfat: Deprecated parameter 'namecase'
[   74.350687][ T5369] exfat: Deprecated parameter 'utf8'
[   74.495377][ T5363] NILFS (loop4): recovery complete
[   74.584264][ T5369] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[   74.599057][ T5377] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   74.645697][   T29] audit: type=1800 audit(1729035335.361:3): pid=5363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.12" name="bus" dev="loop4" ino=12 res=0 errno=0
[   74.657705][ T5366] loop0: detected capacity change from 0 to 32768
[   74.687121][ T5369] exFAT-fs (loop2): hint_cluster is invalid (1), rewind to the first cluster
[   74.832169][ T5384] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000000)
[   74.865754][ T5248] Bluetooth: hci0: command tx timeout
[   74.886196][ T5248] Bluetooth: hci3: command tx timeout
[   75.037670][ T5248] Bluetooth: hci4: command tx timeout
[   75.053336][ T5248] Bluetooth: hci1: command tx timeout
[   75.062184][ T5248] Bluetooth: hci2: command tx timeout
[   75.279783][ T5366] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[   75.314531][ T5391] netlink: 'syz.4.23': attribute type 5 has an invalid length.
[   75.333439][ T5366] XFS (loop0): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent.
[   75.538528][ T5366] XFS (loop0): Quotacheck needed: Please wait.
[   75.691721][ T5366] XFS (loop0): Quotacheck: Done.
[   75.897547][ T5244] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   75.955023][    T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   76.019573][ T5383] loop1: detected capacity change from 0 to 131072
[   76.035444][ T5383] F2FS-fs (loop1): QUOTA feature is enabled, so ignore qf_name
[   76.065348][ T5383] F2FS-fs (loop1): invalid crc value
[   76.081327][ T5383] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387)
[   76.140980][    T9] usb 5-1: Using ep0 maxpacket: 32
[   76.149246][ T5383] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b
[   76.218338][    T9] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3
[   76.245429][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.256017][    T9] usb 5-1: Product: syz
[   76.260382][    T9] usb 5-1: Manufacturer: syz
[   76.265014][    T9] usb 5-1: SerialNumber: syz
[   76.311629][    T9] usb 5-1: config 0 descriptor??
[   76.536349][    T9] f81534a_ctrl 5-1:0.0: failed to set register 0x116: -5
[   76.547058][    T9] f81534a_ctrl 5-1:0.0: failed to enable ports: -5
[   76.555635][    T9] f81534a_ctrl 5-1:0.0: probe with driver f81534a_ctrl failed with error -5
[   76.625647][    T9] usb 5-1: USB disconnect, device number 2
[   77.274510][ T5434] loop4: detected capacity change from 0 to 128
[   77.308282][ T5434] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   77.344001][ T5440] loop0: detected capacity change from 0 to 256
[   77.384613][ T5440] exfat: Deprecated parameter 'utf8'
[   77.390175][ T5440] exfat: Deprecated parameter 'utf8'
[   77.405396][ T5440] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[   77.459217][ T5434] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   77.598446][ T5243] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   77.713883][ T5447] loop0: detected capacity change from 0 to 256
[   77.936819][ T5462] netlink: 'syz.0.50': attribute type 1 has an invalid length.
[   79.076769][ T5493] loop4: detected capacity change from 0 to 128
[   79.104381][ T5493] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   79.162225][ T5476] loop0: detected capacity change from 0 to 40427
[   79.219238][ T5493] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   79.242371][ T5476] F2FS-fs (loop0): Found nat_bits in checkpoint
[   79.350543][ T2640] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   79.392427][ T5243] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   79.412884][ T5476] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   79.531148][ T2640] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   79.542170][ T2640] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   79.558305][ T2640] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   79.586547][ T2640] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.653045][ T5244] syz-executor: attempt to access beyond end of device
[   79.653045][ T5244] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   79.670288][ T2640] usb 3-1: config 0 descriptor??
[   79.685411][ T5244] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   79.717157][ T5488] loop1: detected capacity change from 0 to 40427
[   79.749064][ T5488] F2FS-fs (loop1): Small segment_count (9 < 1 * 24)
[   79.755941][ T5488] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   79.808260][ T5505] loop3: detected capacity change from 0 to 512
[   79.817822][ T5505] EXT4-fs: Ignoring removed bh option
[   79.827395][ T5505] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   79.841113][ T5505] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   79.868368][ T5488] F2FS-fs (loop1): Found nat_bits in checkpoint
[   79.898368][ T5505] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.70: bad orphan inode 17
[   79.915750][ T5505] EXT4-fs (loop3): Remounting filesystem read-only
[   79.925181][ T5505] ext4_test_bit(bit=16, block=4) = 1
[   79.944743][ T5505] is_bad_inode(inode)=0
[   79.960336][ T5505] NEXT_ORPHAN(inode)=1048336
[   79.985329][ T5505] max_ino=32
[   79.988633][ T5505] i_nlink=0
[   79.993313][ T5505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.038698][ T5488] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   80.062114][ T5488] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   80.090325][ T2640] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   80.099148][ T2640] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   80.125245][ T5249] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.147624][ T2640] plantronics 0003:047F:FFFF.0001: unbalanced collection at end of report description
[   80.172857][ T2640] plantronics 0003:047F:FFFF.0001: parse failed
[   80.189419][ T2640] plantronics 0003:047F:FFFF.0001: probe with driver plantronics failed with error -22
[   80.223950][ T5236] syz-executor: attempt to access beyond end of device
[   80.223950][ T5236] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   80.298320][ T5236] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   80.483135][ T5510] loop4: detected capacity change from 0 to 32768
[   80.498085][ T2640] usb 3-1: USB disconnect, device number 2
[   80.503889][ T5514] loop0: detected capacity change from 0 to 2048
[   80.631928][ T5510] find_entry called with index >= next_index
[   80.638767][ T5510] find_entry called with index >= next_index
[   80.655371][ T5510] find_entry called with index >= next_index
[   80.711223][ T5514] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.739155][ T5514] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   80.921273][ T5244] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.222854][ T5535] netlink: 'syz.3.79': attribute type 2 has an invalid length.
[   81.242716][ T5537] netlink: 'syz.2.80': attribute type 1 has an invalid length.
[   81.374624][ T5544] loop4: detected capacity change from 0 to 256
[   81.418902][ T5544] exfat: Deprecated parameter 'utf8'
[   81.469565][ T5544] exfat: Deprecated parameter 'namecase'
[   81.475379][ T5544] exfat: Deprecated parameter 'namecase'
[   81.514178][ T5544] exfat: Deprecated parameter 'utf8'
[   81.522512][ T5548] loop0: detected capacity change from 0 to 128
[   81.564754][ T5544] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[   81.634660][ T5558] loop3: detected capacity change from 0 to 2048
[   81.645606][ T5548] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   81.678447][ T5558] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[   81.710487][    T8] cfg80211: failed to load regulatory.db
[   81.744061][ T5548] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   81.792606][ T5564] tmpfs: Bad value for 'mpol'
[   81.939673][ T5558] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[   81.952838][ T5570] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   82.261949][ T5244] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   82.380513][ T5558] Remounting filesystem read-only
[   82.638908][ T5568] loop1: detected capacity change from 0 to 40427
[   82.804780][ T5588] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   82.923155][ T5568] F2FS-fs (loop1): Found nat_bits in checkpoint
[   83.099555][ T5292] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   83.107196][ T5568] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   83.267307][ T5292] usb 1-1: Using ep0 maxpacket: 16
[   83.278483][ T5292] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.290730][ T5290] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   83.311264][ T5292] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.354496][ T5292] usb 1-1: config 0 interface 0 has no altsetting 0
[   83.374793][ T5292] usb 1-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00
[   83.399428][ T5292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.451687][ T5292] usb 1-1: config 0 descriptor??
[   83.479047][ T5290] usb 4-1: Using ep0 maxpacket: 32
[   83.506515][ T5290] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.537951][ T5290] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.574311][ T5290] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   83.599581][ T5290] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   83.638630][ T5290] usb 4-1: Product: syz
[   83.648747][ T5290] usb 4-1: Manufacturer: syz
[   83.694423][ T5290] hub 4-1:4.0: USB hub found
[   83.875033][ T5292] kye 0003:0458:500F.0002: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[   83.909727][ T5290] hub 4-1:4.0: config failed, hub doesn't have any ports! (err -19)
[   83.940544][ T5292] kye 0003:0458:500F.0002: hidraw0: USB HID vff.fd Device [HID 0458:500f] on usb-dummy_hcd.0-1/input0
[   83.969809][ T5292] kye 0003:0458:500F.0002: tablet-enabling feature report not found
[   83.998672][ T5292] kye 0003:0458:500F.0002: tablet enabling failed
[   84.089740][ T5290] usb 1-1: USB disconnect, device number 2
[   84.261907][ T5295] usb 4-1: USB disconnect, device number 2
[   84.343624][ T5619] loop4: detected capacity change from 0 to 32768
[   84.418320][ T5619] JBD2: Ignoring recovery information on journal
[   84.543380][ T5619] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   84.590781][ T5616] loop2: detected capacity change from 0 to 32768
[   84.740253][ T5616] XFS (loop2): Mounting V5 Filesystem 41ca08f1-94d2-48aa-bd9e-c0e7c187d3a2
[   84.860613][ T5243] ocfs2: Unmounting device (7,4) on (node local)
[   84.869137][ T5663] loop3: detected capacity change from 0 to 4096
[   84.902427][ T5663] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[   84.920338][ T5246] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   85.010739][ T5616] XFS (loop2): Ending clean mount
[   85.034305][ T5663] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[   85.073049][ T5246] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[   85.081845][ T5246] usb 1-1: config 0 has no interface number 0
[   85.131141][ T5246] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   85.168905][ T5246] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   85.221200][ T5237] XFS (loop2): Unmounting Filesystem 41ca08f1-94d2-48aa-bd9e-c0e7c187d3a2
[   85.239826][ T5246] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice=ee.00
[   85.259422][ T5246] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.303748][ T5246] usb 1-1: config 0 descriptor??
[   85.430458][ T5292] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   85.619088][ T5292] usb 2-1: Using ep0 maxpacket: 8
[   85.638767][ T5292] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=18.37
[   85.665941][ T5292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.695884][ T5292] usb 2-1: Product: syz
[   85.707381][ T5292] usb 2-1: Manufacturer: syz
[   85.718279][ T5292] usb 2-1: SerialNumber: syz
[   85.720193][ T5694] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   85.752445][ T5292] usb 2-1: config 0 descriptor??
[   85.755407][ T5246] uclogic 0003:256C:006D.0003: No inputs registered, leaving
[   85.782696][ T5292] radio-si470x 2-1:0.0: could not find interrupt in endpoint
[   85.803902][ T5292] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5
[   85.819413][ T5246] uclogic 0003:256C:006D.0003: hidraw0: USB HID v0.40 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input1
[   85.973218][    T8] usb 1-1: USB disconnect, device number 3
[   85.986323][ T5292] radio-raremono 2-1:0.0: Thanko's Raremono connected: (10C4:818A)
[   86.198724][ T5292] radio-raremono 2-1:0.0: V4L2 device registered as radio32
[   86.279200][ T5246] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   86.425833][ T5292] usb 2-1: USB disconnect, device number 2
[   86.430154][ T5246] usb 4-1: Using ep0 maxpacket: 16
[   86.449059][ T5246] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   86.456771][ T5292] radio-raremono 2-1:0.0: Thanko's Raremono disconnected
[   86.484626][ T5246] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.536973][ T5246] usb 4-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00
[   86.581934][ T5246] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.620653][ T5246] usb 4-1: config 0 descriptor??
[   87.048421][ T5732] process 'syz.0.128' launched './file0' with NULL argv: empty string added
[   87.065873][ T5246] glorious 0003:22D4:1503.0004: hidraw0: USB HID v0.00 Device [Glorious Model I] on usb-dummy_hcd.3-1/input0
[   87.204638][ T5708] loop2: detected capacity change from 0 to 40427
[   87.226673][ T5708] F2FS-fs (loop2): invalid crc value
[   87.235635][ T5735] loop1: detected capacity change from 0 to 2048
[   87.259307][ T5708] F2FS-fs (loop2): Found nat_bits in checkpoint
[   87.265180][ T5714] loop4: detected capacity change from 0 to 32768
[   87.281377][   T46] usb 4-1: USB disconnect, device number 3
[   87.327986][ T5735] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   87.384511][ T5714] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[   87.406816][ T5714] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   87.416199][ T5735] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.129: bg 0: block 234: padding at end of block bitmap is not set
[   87.434803][ T5708] F2FS-fs (loop2): Start checkpoint disabled!
[   87.471747][ T5735] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117
[   87.486335][ T5735] EXT4-fs (loop1): This should not happen!! Data will be lost
[   87.486335][ T5735] 
[   87.566086][ T5714] XFS (loop4): Ending clean mount
[   87.566154][ T5708] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   87.578242][ T5714] XFS (loop4): Quotacheck needed: Please wait.
[   87.597057][ T5236] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.657830][ T5714] XFS (loop4): Quotacheck: Done.
[   87.703317][ T3027] kworker/u8:11: attempt to access beyond end of device
[   87.703317][ T3027] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   87.723245][ T3027] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   87.731367][ T3027] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   87.764554][ T5243] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   88.159852][ T5757] loop3: detected capacity change from 0 to 4096
[   88.285947][ T5767] loop4: detected capacity change from 0 to 512
[   88.336527][ T5772] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   88.378215][ T5767] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.137: bg 0: block 5: invalid block bitmap
[   88.437216][ T5767] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem
[   88.457863][ T5767] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.137: invalid indirect mapped block 3 (level 2)
[   88.566857][ T5767] EXT4-fs (loop4): 1 orphan inode deleted
[   88.573947][ T5767] EXT4-fs (loop4): 1 truncate cleaned up
[   88.614715][ T5767] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.716955][ T5767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.137'.
[   88.762760][ T5782] loop3: detected capacity change from 0 to 2048
[   88.835451][ T5782] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[   88.896107][ T5243] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.915030][ T5786] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   88.915184][ T5782] syz.3.143: attempt to access beyond end of device
[   88.915184][ T5782] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[   88.946102][ T5785] loop1: detected capacity change from 0 to 2048
[   89.019074][ T5789] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   89.029120][ T5782] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=72057594037927938, rec_len=0, name_len=0
[   89.178265][ T5792] netlink: 'syz.4.148': attribute type 30 has an invalid length.
[   89.552975][   T46] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   89.553419][ T5783] loop2: detected capacity change from 0 to 32768
[   89.594993][ T5783] gfs2: fsid=_dev_net_tun: Trying to join cluster "lock_nolock", "_dev_net_tun"
[   89.648544][ T5783] gfs2: fsid=_dev_net_tun: Now mounting FS (format 1801)...
[   89.724005][ T5783] gfs2: fsid=_dev_net_tun.0: journal 0 mapped with 16 extents in 0ms
[   89.740952][   T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   89.768470][   T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   89.769328][    T8] gfs2: fsid=_dev_net_tun.0: jid=0, already locked for use
[   89.786380][   T46] usb 4-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00
[   89.791822][    T8] gfs2: fsid=_dev_net_tun.0: jid=0: Looking at journal...
[   89.816475][   T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.840508][   T46] usb 4-1: config 0 descriptor??
[   89.985507][    T8] gfs2: fsid=_dev_net_tun.0: jid=0: Journal head lookup took 193ms
[   90.005056][    T8] gfs2: fsid=_dev_net_tun.0: jid=0: Done
[   90.030913][ T5783] gfs2: fsid=_dev_net_tun.0: first mount done, others may mount
[   90.667554][ T5812] loop0: detected capacity change from 0 to 32768
[   90.691478][   T46] monterey 0003:0566:3004.0005: unknown main item tag 0x0
[   90.698676][   T46] monterey 0003:0566:3004.0005: unknown main item tag 0x0
[   90.705938][   T46] monterey 0003:0566:3004.0005: unknown main item tag 0x0
[   90.713199][   T46] monterey 0003:0566:3004.0005: unknown main item tag 0x0
[   90.720477][   T46] monterey 0003:0566:3004.0005: unknown main item tag 0x0
[   90.728372][   T46] monterey 0003:0566:3004.0005: unknown main item tag 0x0
[   90.735602][   T46] monterey 0003:0566:3004.0005: unknown main item tag 0x0
[   90.742822][   T46] monterey 0003:0566:3004.0005: unknown main item tag 0x0
[   90.760001][   T46] monterey 0003:0566:3004.0005: hidraw0: USB HID v0.00 Device [HID 0566:3004] on usb-dummy_hcd.3-1/input0
[   90.833689][ T5798] loop4: detected capacity change from 0 to 32768
[   90.842262][ T5798] XFS: ikeep mount option is deprecated.
[   90.851321][   T46] usb 4-1: USB disconnect, device number 4
[   90.902116][ T5798] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   90.908319][ T5812] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   90.973338][ T5824] Bluetooth: MGMT ver 1.23
[   91.080303][ T5798] XFS (loop4): Ending clean mount
[   91.122249][ T5830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.161'.
[   91.139819][ T5830] vxcan3: entered promiscuous mode
[   91.142613][ T5808] loop1: detected capacity change from 0 to 32768
[   91.157971][ T5798] XFS (loop4): Quotacheck needed: Please wait.
[   91.280639][ T5808] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   91.342422][ T5244] ocfs2: Unmounting device (7,0) on (node local)
[   91.359078][ T5798] XFS (loop4): Quotacheck: Done.
[   91.386254][ T5844] program syz.3.165 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   91.582136][ T5243] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   91.591264][ T5246] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   91.605117][ T5852] loop3: detected capacity change from 0 to 64
[   91.615014][ T5808] XFS (loop1): Ending clean mount
[   91.653866][ T5808] XFS (loop1): Quotacheck needed: Please wait.
[   91.776250][ T5246] usb 3-1: Using ep0 maxpacket: 8
[   91.842610][ T5808] XFS (loop1): Quotacheck: Done.
[   91.859290][ T5246] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7
[   92.038600][ T5236] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   92.236288][ T5858] loop3: detected capacity change from 0 to 32768
[   92.288850][ T5858] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.171 (5858)
[   92.305870][ T5246] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[   92.325535][ T5246] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[   92.347788][ T5246] usb 3-1: Product: syz
[   92.352105][ T5246] usb 3-1: Manufacturer: syz
[   92.359062][ T5246] usb 3-1: SerialNumber: syz
[   92.469661][ T5858] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[   92.496719][ T5858] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[   92.519159][ T5858] BTRFS info (device loop3): using free-space-tree
[   92.544303][ T5869] can0: slcan on ptm0.
[   92.599025][   T46] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   92.644387][ T5246] usb 3-1: Invalid connection information received from device
[   92.760316][ T5866] can0 (unregistered): slcan off ptm0.
[   92.802012][   T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   92.815514][ T5889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.175'.
[   92.828983][   T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   92.849056][   T46] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   92.866223][ T2640] usb 3-1: USB disconnect, device number 3
[   92.876417][   T46] usb 1-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00
[   92.885997][   T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.909750][   T46] usb 1-1: config 0 descriptor??
[   93.056031][ T4632] Bluetooth: hci0: Opcode 0x0401 failed: -110
[   93.119136][ T4632] Bluetooth: hci0: command 0x0401 tx timeout
[   93.260650][ T5249] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[   93.395335][   T46] logitech 0003:046D:C287.0006: unknown main item tag 0x3
[   93.459436][   T46] logitech 0003:046D:C287.0006: hidraw0: USB HID v0.00 Device [HID 046d:c287] on usb-dummy_hcd.0-1/input0
[   93.481651][   T46] logitech 0003:046D:C287.0006: no inputs found
[   93.624187][   T46] usb 1-1: USB disconnect, device number 4
[   93.939248][    T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   93.962798][ T5920] loop3: detected capacity change from 0 to 512
[   94.027246][ T5893] loop1: detected capacity change from 0 to 32768
[   94.029917][ T5920] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[   94.087078][ T5893] JBD2: Ignoring recovery information on journal
[   94.118020][ T5920] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[   94.147459][ T5920] EXT4-fs (loop3): 1 truncate cleaned up
[   94.178553][ T5893] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[   94.229498][ T5920] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   94.281407][ T5920] EXT4-fs: Ignoring removed nobh option
[   94.315492][ T5920] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[   94.326805][    T8] usb 3-1: Using ep0 maxpacket: 16
[   94.377091][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.388467][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   94.391279][ T5236] ocfs2: Unmounting device (7,1) on (node local)
[   94.399144][    T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   94.418720][    T8] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   94.444448][ T5249] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.459135][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.509596][    T8] usb 3-1: config 0 descriptor??
[   94.663465][ T5900] loop4: detected capacity change from 0 to 32768
[   94.944180][    T8] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[   94.979179][    T8] microsoft 0003:045E:07DA.0007: item 0 4 0 8 parsing failed
[   95.014440][    T8] microsoft 0003:045E:07DA.0007: parse failed
[   95.037348][    T8] microsoft 0003:045E:07DA.0007: probe with driver microsoft failed with error -22
[   95.042712][ T5938] loop3: detected capacity change from 0 to 32768
[   95.053983][ T5938] XFS: noikeep mount option is deprecated.
[   95.072972][ T5900] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   95.106237][ T5900] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   95.156489][ T5246] usb 3-1: USB disconnect, device number 4
[   95.162306][ T5900] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[   95.216022][ T5938] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[   95.221925][ T5900] gfs2: fsid=syz:syz.s: first mount done, others may mount
[   95.321065][ T5938] XFS (loop3): Ending clean mount
[   95.333147][ T5938] XFS (loop3): Quotacheck needed: Please wait.
[   95.425310][ T5938] XFS (loop3): Quotacheck: Done.
[   95.756086][ T5249] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[   96.050301][ T5966] netlink: 16 bytes leftover after parsing attributes in process `syz.4.194'.
[   96.491248][ T5962] loop0: detected capacity change from 0 to 32768
[   96.526749][ T5973] loop4: detected capacity change from 0 to 2048
[   96.592541][ T5954] loop1: detected capacity change from 0 to 32768
[   96.621418][ T5962] JBD2: Ignoring recovery information on journal
[   96.638874][ T5975] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   96.722835][ T5964] loop2: detected capacity change from 0 to 32768
[   96.739284][ T5954] JBD2: Ignoring recovery information on journal
[   96.740104][ T5962] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   96.795022][ T5964] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[   96.847413][ T5954] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   97.017339][ T5964] XFS (loop2): Ending clean mount
[   97.050859][ T5991] tipc: Started in network mode
[   97.055967][ T5991] tipc: Node identity 469de0bd8946, cluster identity 4711
[   97.111826][ T5244] ocfs2: Unmounting device (7,0) on (node local)
[   97.159868][ T5991] tipc: Enabled bearer <eth:xfrm0>, priority 10
[   97.172167][ T5237] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[   97.185512][ T5236] ocfs2: Unmounting device (7,1) on (node local)
[   97.243631][ T5971] loop3: detected capacity change from 0 to 40427
[   97.327015][ T5993] loop4: detected capacity change from 0 to 4096
[   97.417129][ T5971] F2FS-fs (loop3): invalid crc value
[   97.432651][ T5993] NILFS (loop4): invalid segment: Checksum error in segment payload
[   97.441072][ T5993] NILFS (loop4): trying rollback from an earlier position
[   97.461313][ T5993] NILFS (loop4): recovery complete
[   97.473728][ T5971] F2FS-fs (loop3): Found nat_bits in checkpoint
[   97.492033][ T5996] netlink: 'syz.0.198': attribute type 1 has an invalid length.
[   97.514950][ T5996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'.
[   97.524212][ T5997] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   97.691710][ T5971] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   97.838712][ T6003] loop4: detected capacity change from 0 to 512
[   97.874147][ T6003] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   97.916854][ T6003] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[   97.963297][ T6003] System zones: 1-12
[   97.973746][ T6008] loop0: detected capacity change from 0 to 128
[   97.985019][ T6003] EXT4-fs (loop4): 1 truncate cleaned up
[   98.044953][ T6003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.073402][ T6008] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[   98.133283][ T6008] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   98.200734][ T5999] loop1: detected capacity change from 0 to 32768
[   98.219672][ T6003] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[   98.247191][ T5999] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.199 (5999)
[   98.289592][ T6013] loop3: detected capacity change from 0 to 2048
[   98.299142][ T5246] tipc: Node number set to 3487293629
[   98.306770][    T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   98.332511][ T6013] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   98.398344][ T5999] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   98.439164][ T5999] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[   98.455098][ T5999] BTRFS info (device loop1): using free-space-tree
[   98.477994][    T8] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x54, changing to 0x4
[   98.490713][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[   98.557531][    T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   98.631402][    T8] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[   98.681731][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.693728][ T5243] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.695591][ T6034] loop3: detected capacity change from 0 to 128
[   98.717081][ T6036] loop0: detected capacity change from 0 to 512
[   98.792874][ T6036] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.210: invalid block
[   98.816465][ T6036] EXT4-fs (loop0): Remounting filesystem read-only
[   98.824202][ T6036] EXT4-fs (loop0): 2 truncates cleaned up
[   98.832055][ T6036] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.876167][ T6034] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   98.893327][ T6034] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.917522][    T8] usb 3-1: config 0 descriptor??
[   98.941396][    T8] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[   98.978109][ T6034] ./file0: Can't lookup blockdev
[   99.006829][ T5244] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.025379][ T5236] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   99.038896][ T5249] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   99.042268][ T2640] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   99.271407][ T2640] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   99.291278][ T2640] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   99.302815][ T2640] usb 5-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00
[   99.324433][ T5292] usb 3-1: USB disconnect, device number 5
[   99.341573][ T2640] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.374680][ T2640] usb 5-1: config 0 descriptor??
[   99.417452][ T6046] loop0: detected capacity change from 0 to 32768
[   99.491609][ T6053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.214'.
[   99.501793][ T6053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.214'.
[   99.745842][ T6046] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   99.804133][ T2640] wacom 0003:056A:00B1.0008: unknown main item tag 0x0
[   99.817077][ T2640] wacom 0003:056A:00B1.0008: Unknown device_type for 'HID 056a:00b1'. Assuming pen.
[   99.829382][ T6046] XFS (loop0): Ending clean mount
[   99.852714][ T6046] XFS (loop0): Quotacheck needed: Please wait.
[   99.866972][ T2640] wacom 0003:056A:00B1.0008: hidraw0: USB HID v0.00 Device [HID 056a:00b1] on usb-dummy_hcd.4-1/input0
[   99.878399][ T5292] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   99.908051][ T2640] input: Wacom Intuos3 6x8 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00B1.0008/input/input5
[   99.933821][ T6046] XFS (loop0): Quotacheck: Done.
[   99.938840][ T6067] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0
[  100.030808][    T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  100.045532][ T2640] usb 5-1: USB disconnect, device number 3
[  100.052346][ T5292] usb 3-1: Using ep0 maxpacket: 8
[  100.063173][ T5292] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  100.074420][ T5244] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  100.082187][ T5292] usb 3-1: config 0 has no interface number 0
[  100.099205][ T5292] usb 3-1: config 0 interface 1 altsetting 1 has an endpoint descriptor with address 0x54, changing to 0x4
[  100.127773][ T5292] usb 3-1: config 0 interface 1 altsetting 1 endpoint 0x4 has invalid wMaxPacketSize 0
[  100.146321][ T5292] usb 3-1: config 0 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  100.161393][ T5292] usb 3-1: config 0 interface 1 has no altsetting 0
[  100.168065][ T5292] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[  100.180743][ T5292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.191410][ T5292] usb 3-1: config 0 descriptor??
[  100.209311][ T5292] hso 3-1:0.1: Failed to find BULK IN ep
[  100.231607][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  100.234083][ T6072] loop1: detected capacity change from 0 to 128
[  100.265427][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  100.322063][    T8] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00
[  100.355133][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.400131][    T8] usb 4-1: config 0 descriptor??
[  100.448051][ T5290] usb 3-1: USB disconnect, device number 6
[  100.805852][ T6080] loop4: detected capacity change from 0 to 4096
[  100.891157][    T8] dragonrise 0003:0079:0011.0009: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.3-1/input0
[  100.933845][ T6086] loop1: detected capacity change from 0 to 4096
[  100.972032][ T6086] NILFS (loop1): invalid segment: Checksum error in segment payload
[  100.982909][ T6086] NILFS (loop1): trying rollback from an earlier position
[  101.043428][ T6086] NILFS (loop1): norecovery option specified, skipping roll-forward recovery
[  101.083571][    T8] usb 4-1: USB disconnect, device number 5
[  101.635789][ T6091] loop0: detected capacity change from 0 to 32768
[  101.689055][ T5290] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  101.849088][ T5290] usb 2-1: Using ep0 maxpacket: 32
[  101.858871][ T5290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.899871][ T6091] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  101.924030][ T5290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.984874][ T5290] usb 2-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00
[  102.007821][ T6091] XFS (loop0): Ending clean mount
[  102.023322][ T6091] XFS (loop0): Quotacheck needed: Please wait.
[  102.049844][ T5290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.119965][ T5290] usb 2-1: config 0 descriptor??
[  102.155597][ T6091] XFS (loop0): Quotacheck: Done.
[  102.210912][ T5244] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  102.350942][ T6101] loop4: detected capacity change from 0 to 40427
[  102.365247][ T6106] loop2: detected capacity change from 0 to 32768
[  102.380193][ T6106] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.235 (6106)
[  102.397559][ T6101] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[  102.417396][ T6101] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  102.452605][ T6106] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  102.463645][ T6106] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  102.474196][ T6106] BTRFS info (device loop2): using free-space-tree
[  102.504296][ T6101] F2FS-fs (loop4): Found nat_bits in checkpoint
[  102.631749][ T6101] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  102.715835][ T6101] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  102.878804][ T5295] usb 2-1: USB disconnect, device number 3
[  103.098140][ T6146] capability: warning: `syz.0.238' uses 32-bit capabilities (legacy support in use)
[  103.105892][ T5237] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  103.411021][ T6123] loop3: detected capacity change from 0 to 40427
[  103.451810][ T6123] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[  103.458490][ T6123] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  103.632034][ T6123] F2FS-fs (loop3): Found nat_bits in checkpoint
[  103.661567][ T6159] loop1: detected capacity change from 0 to 64
[  103.716557][   T29] audit: type=1800 audit(1729035364.411:4): pid=6159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.245" name="file0" dev="loop1" ino=21 res=0 errno=0
[  103.772027][ T6162] loop4: detected capacity change from 0 to 512
[  103.779147][ T6162] EXT4-fs: Ignoring removed mblk_io_submit option
[  103.802175][ T6162] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  103.825903][ T6162] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec118, mo2=0002]
[  103.837089][ T6162] System zones: 1-12
[  103.873257][ T6123] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  103.881690][ T6123] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  103.898145][ T6162] EXT4-fs (loop4): 1 truncate cleaned up
[  103.932207][ T6162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.990867][ T6166] loop2: detected capacity change from 0 to 512
[  104.000549][ T5236] hfs: node 4:3 still has 1 user(s)!
[  104.030429][ T5249] syz-executor: attempt to access beyond end of device
[  104.030429][ T5249] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  104.090431][ T5249] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  104.100655][ T6166] EXT4-fs: Ignoring removed nobh option
[  104.206941][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.250'.
[  104.299256][ T5243] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.400611][ T6166] fscrypt (loop2, inode 2): Error -61 getting encryption context
[  104.411875][ T6166] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61
[  104.474273][ T6166] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #13: comm syz.2.246: casefold flag without casefold feature
[  104.653088][ T6166] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.246: couldn't read orphan inode 13 (err -117)
[  104.668546][ T6184] loop0: detected capacity change from 0 to 64
[  104.811343][ T6166] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.909537][ T5237] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.029469][   T29] audit: type=1800 audit(1729035365.731:5): pid=6184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.253" name="file1" dev="loop0" ino=5 res=0 errno=0
[  105.479248][ T6186] loop4: detected capacity change from 0 to 40427
[  105.488913][ T6196] loop2: detected capacity change from 0 to 1024
[  105.499768][ T6186] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  105.540213][ T6198] dvmrp0: entered allmulticast mode
[  105.544887][ T6196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.545712][ T6186] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  105.594553][ T6200] dvmrp4: entered allmulticast mode
[  105.677038][ T6186] F2FS-fs (loop4): invalid crc value
[  105.699149][ T6186] F2FS-fs (loop4): Found nat_bits in checkpoint
[  105.773490][ T6185] loop3: detected capacity change from 0 to 32768
[  105.778551][ T6196] EXT4-fs error (device loop2): ext4_lookup:1805: inode #2: comm syz.2.261: bad inode number: 6
[  105.855419][ T6185] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  105.874742][ T6186] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  105.906238][ T6196] EXT4-fs (loop2): Remounting filesystem read-only
[  105.916361][ T6186] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  106.119130][ T5295] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  106.130887][ T6185] XFS (loop3): Ending clean mount
[  106.140504][ T5237] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.159913][ T5243] syz-executor: attempt to access beyond end of device
[  106.159913][ T5243] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  106.200626][ T5243] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  106.248145][ T6185] XFS (loop3): Quotacheck needed: Please wait.
[  106.309194][ T5295] usb 1-1: Using ep0 maxpacket: 16
[  106.315957][ T5295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.329418][ T5295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  106.345059][ T5295] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  106.380380][ T6185] XFS (loop3): Quotacheck: Done.
[  106.438034][ T5295] usb 1-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00
[  106.455033][ T5295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.475913][ T5295] usb 1-1: config 0 descriptor??
[  106.485788][ T6192] loop1: detected capacity change from 0 to 32768
[  106.493851][ T5249] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  106.534315][ T6192] XFS (loop1): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  106.698476][ T6192] XFS (loop1): Ending clean mount
[  106.974556][ T5295] wacom 0003:056A:030C.000B: hidraw0: USB HID v0.00 Device [HID 056a:030c] on usb-dummy_hcd.0-1/input0
[  107.092758][ T5236] XFS (loop1): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  107.144454][    T8] usb 1-1: USB disconnect, device number 5
[  107.549120][ T5295] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  107.722870][ T5295] usb 3-1: Using ep0 maxpacket: 16
[  107.742712][ T5295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 31551, setting to 1024
[  107.814005][ T5295] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  107.866409][ T5295] usb 3-1: New USB device found, idVendor=061d, idProduct=c160, bcdDevice=8f.9a
[  107.888455][ T5295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.892488][ T6248] loop3: detected capacity change from 0 to 1024
[  107.909065][ T5295] usb 3-1: Product: syz
[  107.913256][ T5295] usb 3-1: Manufacturer: syz
[  107.942230][ T5295] usb 3-1: SerialNumber: syz
[  107.956014][ T5295] usb 3-1: config 0 descriptor??
[  107.977978][ T6236] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  108.064906][ T6248] hfsplus: bad catalog entry type
[  108.161093][   T35] hfsplus: b-tree write err: -5, ino 4
[  108.319544][ T5295] quatech2 3-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected
[  108.523227][    C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  108.533821][ T5295] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  108.576447][ T5295] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  108.619928][ T5295] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2
[  108.684648][ T5295] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB3
[  108.836105][ T5295] usb 3-1: USB disconnect, device number 7
[  108.880742][ T5295] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  108.890025][ T6240] loop4: detected capacity change from 0 to 32768
[  108.952318][ T5295] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  108.986257][ T6240] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  109.004685][ T6240] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  109.005639][ T5295] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2
[  109.028090][ T5295] quatech-serial ttyUSB3: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB3
[  109.040536][ T5295] quatech2 3-1:0.0: device disconnected
[  109.079211][ T6247] loop0: detected capacity change from 0 to 32768
[  109.089662][ T6247] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.274 (6247)
[  109.129095][ T6247] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  109.148380][ T6247] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  109.170387][ T6240] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  109.189371][ T6247] BTRFS info (device loop0): disk space caching is enabled
[  109.209332][ T6247] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  109.263684][ T5292] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  109.279316][ T5292] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  109.444031][ T6250] loop1: detected capacity change from 0 to 32768
[  109.479500][ T6247] BTRFS info (device loop0): rebuilding free space tree
[  109.506335][ T5292] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 227ms
[  109.549567][ T6247] BTRFS info (device loop0): disabling free space tree
[  109.557135][ T6247] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  109.558547][ T5292] gfs2: fsid=syz:syz.0: jid=0: Done
[  109.578459][ T6247] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  109.611770][ T6250] JFS: block map error in dbBackSplit
[  109.628746][ T6240] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  109.631327][ T6250] ERROR: (device loop1): dbDiscardAG: -EIO
[  109.631327][ T6250] 
[  109.699042][ T6250] ERROR: (device loop1): remounting filesystem as read-only
[  109.731564][ T6250] syz.1.276: attempt to access beyond end of device
[  109.731564][ T6250] loop1: rw=2051, sector=2629632, nr_sectors = 8192 limit=32768
[  109.810099][ T6250] JFS: sb_issue_discard(ffff88806510e000, 328704, 1024, GFP_NOFS, 0) = -5 => failed!
[  109.832132][ T6250] blkno = 50400, nblocks = 400
[  109.843788][ T6250] ERROR: (device loop1): dbFree: block to be freed is outside the map
[  109.843788][ T6250] 
[  109.858791][ T6278] netlink: 'syz.2.280': attribute type 4 has an invalid length.
[  109.912810][ T6256] loop3: detected capacity change from 0 to 32768
[  110.056644][ T6256] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  110.120420][ T5244] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  110.419059][    T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  110.522360][ T6256] XFS (loop3): Ending clean mount
[  110.531012][ T6256] XFS (loop3): Quotacheck needed: Please wait.
[  110.572715][ T6256] XFS (loop3): Quotacheck: Done.
[  110.582117][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  110.604090][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  110.635621][    T8] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  110.668148][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.698850][    T8] usb 5-1: config 0 descriptor??
[  110.931125][ T6299] loop0: detected capacity change from 0 to 32768
[  110.969375][ T5249] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  111.056856][   T29] audit: type=1800 audit(1729035371.771:6): pid=6299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.286" name="file1" dev="loop0" ino=4 res=0 errno=0
[  111.145007][    T8] uclogic 0003:145F:0212.000C: interface is invalid, ignoring
[  111.286614][ T6291] loop2: detected capacity change from 0 to 32768
[  111.375029][    T8] usb 5-1: USB disconnect, device number 4
[  111.481416][ T6291] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  111.538780][ T6295] loop1: detected capacity change from 0 to 32768
[  111.706520][ T6308] loop0: detected capacity change from 0 to 64
[  111.808548][   T29] audit: type=1800 audit(1729035372.521:7): pid=6308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.289" name="file2" dev="loop0" ino=19 res=0 errno=0
[  111.860734][ T5237] ocfs2: Unmounting device (7,2) on (node local)
[  111.938415][ T6303] loop3: detected capacity change from 0 to 32768
[  111.967032][ T6303] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.287 (6303)
[  111.997330][ T6303] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  112.022424][ T6303] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  112.038566][ T6303] BTRFS info (device loop3): using free-space-tree
[  112.208566][ T6325] loop4: detected capacity change from 0 to 4096
[  112.354519][ T6325] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  112.483461][ T5249] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  112.567479][ T6338] loop2: detected capacity change from 0 to 2048
[  112.606550][ T6325] ntfs3(loop4): failed to convert "c46c" to cp866
[  112.727598][ T6338] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  113.169030][    T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  113.302374][ T6359] loop2: detected capacity change from 0 to 1024
[  113.329196][    T9] usb 4-1: Using ep0 maxpacket: 16
[  113.340520][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  113.362741][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  113.373198][    T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[  113.382523][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.393965][    T9] usb 4-1: config 0 descriptor??
[  113.467253][ T6359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.642636][ T5237] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.648588][ T6351] loop0: detected capacity change from 0 to 32768
[  113.667691][ T6351] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.301 (6351)
[  113.702099][ T6351] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  113.737452][ T5295] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  113.744488][ T6351] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  113.750132][ T6370] loop4: detected capacity change from 0 to 256
[  113.766961][ T6351] BTRFS info (device loop0): using free-space-tree
[  113.806144][ T6370] exfat: Deprecated parameter 'namecase'
[  113.817153][    T9] kye 0003:0458:5012.000D: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  113.831604][    T9] kye 0003:0458:5012.000D: hidraw0: USB HID v0.00 Device [HID 0458:5012] on usb-dummy_hcd.3-1/input0
[  113.837560][ T6370] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x1380c30a, utbl_chksum : 0xe619d30d)
[  113.842609][    T9] kye 0003:0458:5012.000D: tablet-enabling feature report not found
[  113.842631][    T9] kye 0003:0458:5012.000D: tablet enabling failed
[  113.909182][ T5295] usb 2-1: Using ep0 maxpacket: 8
[  113.936158][ T5295] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  114.034671][ T5295] usb 2-1: language id specifier not provided by device, defaulting to English
[  114.049038][ T5290] usb 4-1: USB disconnect, device number 6
[  114.066993][ T5295] usb 2-1: New USB device found, idVendor=05ac, idProduct=0280, bcdDevice= 0.40
[  114.100960][ T5295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.140862][ T5295] usbhid 2-1:1.0: couldn't find an input interrupt endpoint
[  114.242501][   T52] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[  114.271712][ T6392] loop2: detected capacity change from 0 to 4096
[  114.300500][ T5244] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  114.310934][ T6392] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  114.470448][ T6392] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  114.492990][ T6400] loop4: detected capacity change from 0 to 128
[  114.615565][ T6402] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false
[  114.875242][ T6410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.322'.
[  115.079082][ T5290] usb 2-1: USB disconnect, device number 4
[  115.784214][ T6426] loop0: detected capacity change from 0 to 64
[  115.885098][ T6426] hfs: keylen 94 too large
[  116.210883][ T6408] loop3: detected capacity change from 0 to 131072
[  116.453348][ T6408] F2FS-fs (loop3): Test dummy encryption mode enabled
[  116.461950][ T6408] F2FS-fs (loop3): invalid crc value
[  116.471410][ T6408] F2FS-fs (loop3): SIT is corrupted node# 0 vs 1
[  116.483936][ T6408] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117)
[  116.591321][ T6414] loop2: detected capacity change from 0 to 32768
[  116.609724][ T6414] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.324 (6414)
[  116.645442][ T6414] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  116.709091][ T6414] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  116.778803][ T6414] BTRFS info (device loop2): using free-space-tree
[  116.864338][ T6440] loop0: detected capacity change from 0 to 128
[  116.953188][ T6422] loop1: detected capacity change from 0 to 32768
[  117.024961][   T29] audit: type=1800 audit(1729035377.741:8): pid=6422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.326" name="file1" dev="loop1" ino=4 res=0 errno=0
[  117.164377][ T5237] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  117.391700][ T6429] loop4: detected capacity change from 0 to 32768
[  117.831091][ T6458] loop3: detected capacity change from 0 to 32768
[  117.858427][ T6458] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.333 (6458)
[  117.875233][ T6429] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  117.885694][ T6458] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  117.896155][ T6458] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  117.905123][ T6458] BTRFS info (device loop3): using free-space-tree
[  117.937255][   T29] audit: type=1800 audit(1729035378.651:9): pid=6429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.329" name="file1" dev="loop4" ino=17058 res=0 errno=0
[  117.996682][ T6478] loop2: detected capacity change from 0 to 1024
[  118.076712][ T6478] EXT4-fs: Ignoring removed oldalloc option
[  118.146699][ T6493] loop1: detected capacity change from 0 to 1024
[  118.195430][ T6478] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.217037][ T5243] ocfs2: Unmounting device (7,4) on (node local)
[  118.227555][ T6493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.332612][ T5237] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.394486][ T5249] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  118.406962][ T5236] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.478876][ T5295] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  118.627530][ T6506] loop4: detected capacity change from 0 to 4096
[  118.638760][ T6506] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  118.672265][ T6510] pim6reg527: entered allmulticast mode
[  118.714139][ T5295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  118.738079][ T5295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  118.769394][ T5295] usb 1-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00
[  118.799063][ T5295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.801017][ T6506] ntfs3(loop4): ino=1e, "file1" attr_set_size
[  118.850097][ T5295] usb 1-1: config 0 descriptor??
[  118.853038][ T6506] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  118.873118][ T6512] loop1: detected capacity change from 0 to 512
[  118.905292][ T6506] ntfs3(loop4): ino=3, ntfs_set_state failed, -22.
[  118.942121][ T6512] EXT4-fs (loop1): 1 truncate cleaned up
[  118.953115][ T6512] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  119.036757][   T12] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22.
[  119.199842][ T6522] loop4: detected capacity change from 0 to 2048
[  119.209179][ T5236] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.234867][ T6522] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  119.248654][ T6522] UDF-fs: Scanning with blocksize 512 failed
[  119.269173][ T5290] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  119.313544][ T6522] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  119.321955][ T5295] wacom 0003:056A:00B1.000E: unknown main item tag 0x0
[  119.330230][ T5295] wacom 0003:056A:00B1.000E: Unknown device_type for 'HID 056a:00b1'. Assuming pen.
[  119.347303][ T5295] wacom 0003:056A:00B1.000E: hidraw0: USB HID v0.00 Device [HID 056a:00b1] on usb-dummy_hcd.0-1/input0
[  119.362135][ T5295] input: Wacom Intuos3 6x8 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00B1.000E/input/input11
[  119.543122][ T5290] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02
[  119.556262][ T5290] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.556421][ T5295] usb 1-1: USB disconnect, device number 6
[  119.578523][ T5290] usb 3-1: Product: syz
[  119.629257][ T5290] usb 3-1: Manufacturer: syz
[  119.633911][ T5290] usb 3-1: SerialNumber: syz
[  119.650443][ T5290] usb 3-1: config 0 descriptor??
[  120.059047][ T5295] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  120.129469][    T9] usb 3-1: USB disconnect, device number 8
[  120.229296][ T5295] usb 2-1: Using ep0 maxpacket: 8
[  120.236389][ T5295] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  120.247972][ T5295] usb 2-1: config 179 has no interface number 0
[  120.258143][ T5295] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  120.279441][ T5295] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  120.279481][ T5295] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  120.279512][ T5295] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  120.279544][ T5295] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  120.279587][ T5295] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  120.279614][ T5295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.295140][ T6542] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  120.530203][ T4632] Bluetooth: Frame is too long (len 186, expected len 4)
[  120.531072][ T2640] usb 2-1: USB disconnect, device number 5
[  120.537327][    C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  120.551576][    C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  120.560427][    C0] ==================================================================
[  120.568526][    C0] BUG: KASAN: slab-use-after-free in register_lock_class+0x8db/0x980
[  120.576652][    C0] Read of size 1 at addr ffff888031a3b091 by task kworker/u9:1/4632
[  120.584656][    C0] 
[  120.587015][    C0] CPU: 0 UID: 0 PID: 4632 Comm: kworker/u9:1 Not tainted 6.12.0-rc3-next-20241015-syzkaller #0
[  120.597330][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  120.607375][    C0] Workqueue: hci0 hci_rx_work
[  120.612056][    C0] Call Trace:
[  120.615339][    C0]  <IRQ>
[  120.618173][    C0]  dump_stack_lvl+0x241/0x360
[  120.622846][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  120.628042][    C0]  ? __pfx__printk+0x10/0x10
[  120.632636][    C0]  ? _printk+0xd5/0x120
[  120.636809][    C0]  ? __virt_addr_valid+0x183/0x530
[  120.641916][    C0]  ? __virt_addr_valid+0x183/0x530
[  120.647021][    C0]  print_report+0x169/0x550
[  120.651522][    C0]  ? __virt_addr_valid+0x183/0x530
[  120.656717][    C0]  ? __virt_addr_valid+0x183/0x530
[  120.661837][    C0]  ? __virt_addr_valid+0x45f/0x530
[  120.666958][    C0]  ? __phys_addr+0xba/0x170
[  120.671473][    C0]  ? register_lock_class+0x8db/0x980
[  120.676775][    C0]  kasan_report+0x143/0x180
[  120.681285][    C0]  ? register_lock_class+0x8db/0x980
[  120.686580][    C0]  register_lock_class+0x8db/0x980
[  120.691697][    C0]  ? __pfx_register_lock_class+0x10/0x10
[  120.697334][    C0]  ? __lock_acquire+0x1384/0x2050
[  120.702357][    C0]  __lock_acquire+0xf0/0x2050
[  120.707038][    C0]  ? mark_lock+0x9a/0x360
[  120.711370][    C0]  ? __lock_acquire+0x1384/0x2050
[  120.716388][    C0]  lock_acquire+0x1ed/0x550
[  120.720899][    C0]  ? __wake_up_common_lock+0x25/0x1e0
[  120.726279][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  120.731311][    C0]  ? kcov_remote_stop+0x78/0x6e0
[  120.736279][    C0]  ? do_raw_spin_lock+0x14f/0x370
[  120.741301][    C0]  ? __pfx_lock_release+0x10/0x10
[  120.746324][    C0]  _raw_spin_lock_irqsave+0xd5/0x120
[  120.751610][    C0]  ? __wake_up_common_lock+0x25/0x1e0
[  120.756977][    C0]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  120.762859][    C0]  ? do_raw_spin_unlock+0x13c/0x8b0
[  120.768085][    C0]  __wake_up_common_lock+0x25/0x1e0
[  120.773279][    C0]  __usb_hcd_giveback_urb+0x4ff/0x6e0
[  120.778659][    C0]  ? __pfx___usb_hcd_giveback_urb+0x10/0x10
[  120.784543][    C0]  ? do_raw_spin_unlock+0x13c/0x8b0
[  120.789747][    C0]  dummy_timer+0x830/0x45a0
[  120.794253][    C0]  ? __pfx_lock_release+0x10/0x10
[  120.799275][    C0]  ? mark_lock+0x9a/0x360
[  120.803604][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  120.809611][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  120.814596][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  120.819554][    C0]  __hrtimer_run_queues+0x59b/0xd50
[  120.824840][    C0]  ? ktime_get_update_offsets_now+0x3c/0x250
[  120.830831][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  120.836560][    C0]  ? ktime_get_update_offsets_now+0x22d/0x250
[  120.842631][    C0]  hrtimer_run_softirq+0x19a/0x2c0
[  120.847740][    C0]  handle_softirqs+0x2c5/0x980
[  120.852505][    C0]  ? __irq_exit_rcu+0xf4/0x1c0
[  120.857286][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  120.862569][    C0]  ? irqtime_account_irq+0xd4/0x1e0
[  120.867757][    C0]  __irq_exit_rcu+0xf4/0x1c0
[  120.872345][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  120.877549][    C0]  irq_exit_rcu+0x9/0x30
[  120.881809][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  120.887445][    C0]  </IRQ>
[  120.890388][    C0]  <TASK>
[  120.893310][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  120.899288][    C0] RIP: 0010:console_flush_all+0x996/0xeb0
[  120.905004][    C0] Code: 48 21 c3 0f 85 16 02 00 00 e8 06 84 20 00 4c 8b 7c 24 10 4d 85 f6 75 07 e8 f7 83 20 00 eb 06 e8 f0 83 20 00 fb 48 8b 5c 24 18 <48> 8b 44 24 30 42 80 3c 28 00 74 08 48 89 df e8 56 57 8a 00 4c 8b
[  120.924600][    C0] RSP: 0018:ffffc9000d4bf4e0 EFLAGS: 00000283
[  120.930663][    C0] RAX: ffffffff81745db0 RBX: ffffffff8f187cb8 RCX: 0000000000100000
[  120.938628][    C0] RDX: ffffc90013512000 RSI: 0000000000002191 RDI: 0000000000002192
[  120.946601][    C0] RBP: ffffc9000d4bf690 R08: ffffffff81745d87 R09: 1ffffffff285d11a
[  120.954574][    C0] R10: dffffc0000000000 R11: fffffbfff285d11b R12: ffffffff8f187c60
[  120.962572][    C0] R13: dffffc0000000000 R14: 0000000000000200 R15: ffffc9000d4bf6e0
[  120.970539][    C0]  ? console_flush_all+0x967/0xeb0
[  120.975664][    C0]  ? console_flush_all+0x990/0xeb0
[  120.980773][    C0]  ? console_flush_all+0x1a3/0xeb0
[  120.985879][    C0]  ? __pfx_console_flush_all+0x10/0x10
[  120.991329][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  120.997309][    C0]  ? this_cpu_in_panic+0x4f/0x80
[  121.002233][    C0]  ? is_printk_legacy_deferred+0x43/0x50
[  121.007880][    C0]  ? printk_get_console_flush_type+0x1fe/0x4f0
[  121.014022][    C0]  console_unlock+0x14f/0x3b0
[  121.018712][    C0]  ? __pfx_console_unlock+0x10/0x10
[  121.023997][    C0]  ? this_cpu_in_panic+0x4f/0x80
[  121.028942][    C0]  ? is_printk_legacy_deferred+0x43/0x50
[  121.034576][    C0]  ? printk_get_console_flush_type+0x1fe/0x4f0
[  121.040748][    C0]  vprintk_emit+0x730/0xa10
[  121.045266][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  121.050284][    C0]  ? stack_depot_save_flags+0x6e4/0x830
[  121.055832][    C0]  ? kasan_save_track+0x51/0x80
[  121.060676][    C0]  ? kasan_save_free_info+0x40/0x50
[  121.065862][    C0]  ? __kasan_slab_free+0x59/0x70
[  121.070794][    C0]  ? kmem_cache_free+0x1a2/0x440
[  121.075733][    C0]  ? hci_rx_work+0x768/0xdd0
[  121.080317][    C0]  _printk+0xd5/0x120
[  121.084310][    C0]  ? __pfx__printk+0x10/0x10
[  121.088902][    C0]  ? hci_rx_work+0x770/0xdd0
[  121.093504][    C0]  bt_err+0x127/0x180
[  121.097487][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  121.103818][    C0]  ? l2cap_recv_acldata+0x4e8/0x1560
[  121.109096][    C0]  ? l2cap_recv_acldata+0x96/0x1560
[  121.114286][    C0]  ? __pfx_bt_err+0x10/0x10
[  121.118801][    C0]  ? __mutex_unlock_slowpath+0x21d/0x750
[  121.124428][    C0]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  121.130404][    C0]  ? hci_conn_enter_active_mode+0x260/0x370
[  121.136298][    C0]  l2cap_recv_acldata+0x505/0x1560
[  121.141409][    C0]  hci_rx_work+0x78a/0xdd0
[  121.145840][    C0]  ? process_scheduled_works+0x976/0x1850
[  121.151560][    C0]  process_scheduled_works+0xa63/0x1850
[  121.157135][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  121.163115][    C0]  ? assign_work+0x364/0x3d0
[  121.167706][    C0]  worker_thread+0x870/0xd30
[  121.172299][    C0]  ? __kthread_parkme+0x169/0x1d0
[  121.177325][    C0]  ? __pfx_worker_thread+0x10/0x10
[  121.182436][    C0]  kthread+0x2f0/0x390
[  121.186497][    C0]  ? __pfx_worker_thread+0x10/0x10
[  121.191611][    C0]  ? __pfx_kthread+0x10/0x10
[  121.196192][    C0]  ret_from_fork+0x4b/0x80
[  121.200598][    C0]  ? __pfx_kthread+0x10/0x10
[  121.205285][    C0]  ret_from_fork_asm+0x1a/0x30
[  121.210048][    C0]  </TASK>
[  121.213055][    C0] 
[  121.215362][    C0] Allocated by task 5295:
[  121.219672][    C0]  kasan_save_track+0x3f/0x80
[  121.224356][    C0]  __kasan_kmalloc+0x98/0xb0
[  121.228935][    C0]  __kmalloc_cache_noprof+0x243/0x390
[  121.234411][    C0]  xpad_probe+0x3c8/0x1b90
[  121.238828][    C0]  usb_probe_interface+0x645/0xbb0
[  121.243950][    C0]  really_probe+0x2b8/0xad0
[  121.248448][    C0]  __driver_probe_device+0x1a2/0x390
[  121.253728][    C0]  driver_probe_device+0x50/0x430
[  121.258744][    C0]  __device_attach_driver+0x2d6/0x530
[  121.264117][    C0]  bus_for_each_drv+0x24e/0x2e0
[  121.268969][    C0]  __device_attach+0x333/0x520
[  121.273720][    C0]  bus_probe_device+0x189/0x260
[  121.278584][    C0]  device_add+0x856/0xbf0
[  121.282925][    C0]  usb_set_configuration+0x1976/0x1fb0
[  121.288369][    C0]  usb_generic_driver_probe+0x88/0x140
[  121.293818][    C0]  usb_probe_device+0x1b8/0x380
[  121.298661][    C0]  really_probe+0x2b8/0xad0
[  121.303165][    C0]  __driver_probe_device+0x1a2/0x390
[  121.308535][    C0]  driver_probe_device+0x50/0x430
[  121.313574][    C0]  __device_attach_driver+0x2d6/0x530
[  121.318936][    C0]  bus_for_each_drv+0x24e/0x2e0
[  121.323795][    C0]  __device_attach+0x333/0x520
[  121.328557][    C0]  bus_probe_device+0x189/0x260
[  121.333407][    C0]  device_add+0x856/0xbf0
[  121.337725][    C0]  usb_new_device+0x104a/0x19a0
[  121.342579][    C0]  hub_event+0x2d6d/0x5150
[  121.346982][    C0]  process_scheduled_works+0xa63/0x1850
[  121.352562][    C0]  worker_thread+0x870/0xd30
[  121.357170][    C0]  kthread+0x2f0/0x390
[  121.361229][    C0]  ret_from_fork+0x4b/0x80
[  121.365635][    C0]  ret_from_fork_asm+0x1a/0x30
[  121.370429][    C0] 
[  121.372762][    C0] Freed by task 2640:
[  121.376750][    C0]  kasan_save_track+0x3f/0x80
[  121.381450][    C0]  kasan_save_free_info+0x40/0x50
[  121.386479][    C0]  __kasan_slab_free+0x59/0x70
[  121.391246][    C0]  kfree+0x1a0/0x460
[  121.395146][    C0]  xpad_disconnect+0x359/0x490
[  121.399928][    C0]  usb_unbind_interface+0x25e/0x940
[  121.405118][    C0]  device_release_driver_internal+0x503/0x7c0
[  121.411179][    C0]  bus_remove_device+0x34f/0x420
[  121.416133][    C0]  device_del+0x57a/0x9b0
[  121.420461][    C0]  usb_disable_device+0x3bf/0x850
[  121.425493][    C0]  usb_disconnect+0x340/0x950
[  121.430163][    C0]  hub_event+0x1ebc/0x5150
[  121.434576][    C0]  process_scheduled_works+0xa63/0x1850
[  121.440135][    C0]  worker_thread+0x870/0xd30
[  121.444731][    C0]  kthread+0x2f0/0x390
[  121.448810][    C0]  ret_from_fork+0x4b/0x80
[  121.453212][    C0]  ret_from_fork_asm+0x1a/0x30
[  121.458008][    C0] 
[  121.460317][    C0] The buggy address belongs to the object at ffff888031a3b000
[  121.460317][    C0]  which belongs to the cache kmalloc-1k of size 1024
[  121.474371][    C0] The buggy address is located 145 bytes inside of
[  121.474371][    C0]  freed 1024-byte region [ffff888031a3b000, ffff888031a3b400)
[  121.488259][    C0] 
[  121.490573][    C0] The buggy address belongs to the physical page:
[  121.496979][    C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31a38
[  121.505817][    C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  121.514311][    C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  121.521862][    C0] page_type: f5(slab)
[  121.525843][    C0] raw: 00fff00000000040 ffff88801ac41dc0 ffffea0001fa1400 dead000000000002
[  121.534417][    C0] raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000
[  121.542991][    C0] head: 00fff00000000040 ffff88801ac41dc0 ffffea0001fa1400 dead000000000002
[  121.551650][    C0] head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000
[  121.560328][    C0] head: 00fff00000000003 ffffea0000c68e01 ffffffffffffffff 0000000000000000
[  121.568999][    C0] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[  121.577666][    C0] page dumped because: kasan: bad access detected
[  121.584092][    C0] page_owner tracks the page as allocated
[  121.589795][    C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5249, tgid 5249 (syz-executor), ts 70154195269, free_ts 70151541307
[  121.610544][    C0]  post_alloc_hook+0x1f3/0x230
[  121.615308][    C0]  get_page_from_freelist+0x3123/0x3270
[  121.620937][    C0]  __alloc_pages_noprof+0x292/0x710
[  121.626142][    C0]  alloc_pages_mpol_noprof+0x3e8/0x680
[  121.631612][    C0]  alloc_slab_page+0x6a/0x120
[  121.636286][    C0]  allocate_slab+0x5a/0x2f0
[  121.640788][    C0]  ___slab_alloc+0xcd1/0x14b0
[  121.645569][    C0]  __slab_alloc+0x58/0xa0
[  121.650024][    C0]  __kmalloc_node_track_caller_noprof+0x2e9/0x4c0
[  121.656726][    C0]  kmalloc_reserve+0x111/0x2a0
[  121.661500][    C0]  __alloc_skb+0x1f3/0x440
[  121.665911][    C0]  inet6_rt_notify+0xdf/0x290
[  121.670586][    C0]  fib6_add+0x1e33/0x4430
[  121.674909][    C0]  ip6_route_add+0x8b/0x160
[  121.679502][    C0]  addrconf_permanent_addr+0x7c7/0xc50
[  121.684962][    C0]  addrconf_notify+0x9f5/0x1020
[  121.689813][    C0] page last free pid 5297 tgid 5297 stack trace:
[  121.696127][    C0]  free_unref_page+0xcfb/0xf20
[  121.700886][    C0]  __put_partials+0xeb/0x130
[  121.705464][    C0]  put_cpu_partial+0x17c/0x250
[  121.710219][    C0]  __slab_free+0x2ea/0x3d0
[  121.714626][    C0]  qlist_free_all+0x9a/0x140
[  121.719289][    C0]  kasan_quarantine_reduce+0x14f/0x170
[  121.724743][    C0]  __kasan_slab_alloc+0x23/0x80
[  121.729589][    C0]  kmem_cache_alloc_noprof+0x1d9/0x380
[  121.735045][    C0]  getname_flags+0xb7/0x540
[  121.739633][    C0]  do_sys_openat2+0xd2/0x1d0
[  121.744221][    C0]  __x64_sys_openat+0x247/0x2a0
[  121.749067][    C0]  do_syscall_64+0xf3/0x230
[  121.753559][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.759442][    C0] 
[  121.761757][    C0] Memory state around the buggy address:
[  121.767372][    C0]  ffff888031a3af80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  121.775435][    C0]  ffff888031a3b000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  121.783481][    C0] >ffff888031a3b080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  121.791526][    C0]                          ^
[  121.796113][    C0]  ffff888031a3b100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  121.804174][    C0]  ffff888031a3b180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  121.812230][    C0] ==================================================================
[  121.820284][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  121.827502][    C0] CPU: 0 UID: 0 PID: 4632 Comm: kworker/u9:1 Not tainted 6.12.0-rc3-next-20241015-syzkaller #0
[  121.837815][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  121.847859][    C0] Workqueue: hci0 hci_rx_work
[  121.852550][    C0] Call Trace:
[  121.855909][    C0]  <IRQ>
[  121.858748][    C0]  dump_stack_lvl+0x241/0x360
[  121.863419][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  121.868610][    C0]  ? __pfx__printk+0x10/0x10
[  121.873197][    C0]  ? rcu_is_watching+0x15/0xb0
[  121.877964][    C0]  ? lock_release+0xbf/0xa30
[  121.882554][    C0]  ? vscnprintf+0x5d/0x90
[  121.886877][    C0]  panic+0x349/0x880
[  121.890771][    C0]  ? check_panic_on_warn+0x21/0xb0
[  121.895875][    C0]  ? __pfx_panic+0x10/0x10
[  121.900286][    C0]  ? do_raw_spin_unlock+0x13c/0x8b0
[  121.905531][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  121.911435][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  121.917758][    C0]  ? print_report+0x502/0x550
[  121.922446][    C0]  check_panic_on_warn+0x86/0xb0
[  121.927374][    C0]  ? register_lock_class+0x8db/0x980
[  121.932677][    C0]  end_report+0x77/0x160
[  121.936916][    C0]  kasan_report+0x154/0x180
[  121.941464][    C0]  ? register_lock_class+0x8db/0x980
[  121.946750][    C0]  register_lock_class+0x8db/0x980
[  121.951858][    C0]  ? __pfx_register_lock_class+0x10/0x10
[  121.957514][    C0]  ? __lock_acquire+0x1384/0x2050
[  121.962525][    C0]  __lock_acquire+0xf0/0x2050
[  121.967199][    C0]  ? mark_lock+0x9a/0x360
[  121.971518][    C0]  ? __lock_acquire+0x1384/0x2050
[  121.976529][    C0]  lock_acquire+0x1ed/0x550
[  121.981030][    C0]  ? __wake_up_common_lock+0x25/0x1e0
[  121.986388][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  121.991400][    C0]  ? kcov_remote_stop+0x78/0x6e0
[  121.996330][    C0]  ? do_raw_spin_lock+0x14f/0x370
[  122.001346][    C0]  ? __pfx_lock_release+0x10/0x10
[  122.006456][    C0]  _raw_spin_lock_irqsave+0xd5/0x120
[  122.011745][    C0]  ? __wake_up_common_lock+0x25/0x1e0
[  122.017113][    C0]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  122.022991][    C0]  ? do_raw_spin_unlock+0x13c/0x8b0
[  122.028180][    C0]  __wake_up_common_lock+0x25/0x1e0
[  122.033365][    C0]  __usb_hcd_giveback_urb+0x4ff/0x6e0
[  122.038726][    C0]  ? __pfx___usb_hcd_giveback_urb+0x10/0x10
[  122.044617][    C0]  ? do_raw_spin_unlock+0x13c/0x8b0
[  122.049809][    C0]  dummy_timer+0x830/0x45a0
[  122.054312][    C0]  ? __pfx_lock_release+0x10/0x10
[  122.059331][    C0]  ? mark_lock+0x9a/0x360
[  122.063655][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  122.069639][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  122.074577][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  122.079514][    C0]  __hrtimer_run_queues+0x59b/0xd50
[  122.084725][    C0]  ? ktime_get_update_offsets_now+0x3c/0x250
[  122.090730][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  122.096442][    C0]  ? ktime_get_update_offsets_now+0x22d/0x250
[  122.102503][    C0]  hrtimer_run_softirq+0x19a/0x2c0
[  122.107602][    C0]  handle_softirqs+0x2c5/0x980
[  122.112356][    C0]  ? __irq_exit_rcu+0xf4/0x1c0
[  122.117105][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  122.122377][    C0]  ? irqtime_account_irq+0xd4/0x1e0
[  122.127564][    C0]  __irq_exit_rcu+0xf4/0x1c0
[  122.132145][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  122.137338][    C0]  irq_exit_rcu+0x9/0x30
[  122.141577][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  122.147238][    C0]  </IRQ>
[  122.150181][    C0]  <TASK>
[  122.153106][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  122.159085][    C0] RIP: 0010:console_flush_all+0x996/0xeb0
[  122.164808][    C0] Code: 48 21 c3 0f 85 16 02 00 00 e8 06 84 20 00 4c 8b 7c 24 10 4d 85 f6 75 07 e8 f7 83 20 00 eb 06 e8 f0 83 20 00 fb 48 8b 5c 24 18 <48> 8b 44 24 30 42 80 3c 28 00 74 08 48 89 df e8 56 57 8a 00 4c 8b
[  122.184405][    C0] RSP: 0018:ffffc9000d4bf4e0 EFLAGS: 00000283
[  122.190503][    C0] RAX: ffffffff81745db0 RBX: ffffffff8f187cb8 RCX: 0000000000100000
[  122.198473][    C0] RDX: ffffc90013512000 RSI: 0000000000002191 RDI: 0000000000002192
[  122.206425][    C0] RBP: ffffc9000d4bf690 R08: ffffffff81745d87 R09: 1ffffffff285d11a
[  122.214387][    C0] R10: dffffc0000000000 R11: fffffbfff285d11b R12: ffffffff8f187c60
[  122.222448][    C0] R13: dffffc0000000000 R14: 0000000000000200 R15: ffffc9000d4bf6e0
[  122.230415][    C0]  ? console_flush_all+0x967/0xeb0
[  122.235524][    C0]  ? console_flush_all+0x990/0xeb0
[  122.240653][    C0]  ? console_flush_all+0x1a3/0xeb0
[  122.245767][    C0]  ? __pfx_console_flush_all+0x10/0x10
[  122.251232][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  122.257216][    C0]  ? this_cpu_in_panic+0x4f/0x80
[  122.262148][    C0]  ? is_printk_legacy_deferred+0x43/0x50
[  122.267777][    C0]  ? printk_get_console_flush_type+0x1fe/0x4f0
[  122.273933][    C0]  console_unlock+0x14f/0x3b0
[  122.278606][    C0]  ? __pfx_console_unlock+0x10/0x10
[  122.283800][    C0]  ? this_cpu_in_panic+0x4f/0x80
[  122.288745][    C0]  ? is_printk_legacy_deferred+0x43/0x50
[  122.294381][    C0]  ? printk_get_console_flush_type+0x1fe/0x4f0
[  122.300525][    C0]  vprintk_emit+0x730/0xa10
[  122.305019][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  122.310032][    C0]  ? stack_depot_save_flags+0x6e4/0x830
[  122.315579][    C0]  ? kasan_save_track+0x51/0x80
[  122.320511][    C0]  ? kasan_save_free_info+0x40/0x50
[  122.325698][    C0]  ? __kasan_slab_free+0x59/0x70
[  122.330628][    C0]  ? kmem_cache_free+0x1a2/0x440
[  122.335572][    C0]  ? hci_rx_work+0x768/0xdd0
[  122.340151][    C0]  _printk+0xd5/0x120
[  122.344128][    C0]  ? __pfx__printk+0x10/0x10
[  122.348736][    C0]  ? hci_rx_work+0x770/0xdd0
[  122.353346][    C0]  bt_err+0x127/0x180
[  122.357335][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  122.363673][    C0]  ? l2cap_recv_acldata+0x4e8/0x1560
[  122.368955][    C0]  ? l2cap_recv_acldata+0x96/0x1560
[  122.374155][    C0]  ? __pfx_bt_err+0x10/0x10
[  122.378654][    C0]  ? __mutex_unlock_slowpath+0x21d/0x750
[  122.384295][    C0]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  122.390290][    C0]  ? hci_conn_enter_active_mode+0x260/0x370
[  122.396180][    C0]  l2cap_recv_acldata+0x505/0x1560
[  122.401284][    C0]  hci_rx_work+0x78a/0xdd0
[  122.405690][    C0]  ? process_scheduled_works+0x976/0x1850
[  122.411418][    C0]  process_scheduled_works+0xa63/0x1850
[  122.416992][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  122.422964][    C0]  ? assign_work+0x364/0x3d0
[  122.427542][    C0]  worker_thread+0x870/0xd30
[  122.432125][    C0]  ? __kthread_parkme+0x169/0x1d0
[  122.437169][    C0]  ? __pfx_worker_thread+0x10/0x10
[  122.442267][    C0]  kthread+0x2f0/0x390
[  122.446321][    C0]  ? __pfx_worker_thread+0x10/0x10
[  122.451434][    C0]  ? __pfx_kthread+0x10/0x10
[  122.456032][    C0]  ret_from_fork+0x4b/0x80
[  122.460446][    C0]  ? __pfx_kthread+0x10/0x10
[  122.465043][    C0]  ret_from_fork_asm+0x1a/0x30
[  122.469832][    C0]  </TASK>
[  123.619551][    C0] Shutting down cpus with NMI
[  123.624700][    C0] Kernel Offset: disabled
[  123.629370][    C0] Rebooting in 86400 seconds..