last executing test programs:

5.034384413s ago: executing program 1 (id=281):
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x244021, 0x0, 0x0, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002fc0), 0x3000000, 0x0)
syz_mount_image$fuse(&(0x7f0000000100), &(0x7f00000003c0)='./file0\x00', 0x40800, &(0x7f0000001540), 0xfe, 0x0, 0x0)

4.874543158s ago: executing program 1 (id=283):
syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
pread64(r0, 0x0, 0xea, 0x6)

3.081099904s ago: executing program 1 (id=296):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)={[{@nls={'nls', 0x3d, 'cp1251'}}, {}, {@uid}, {}, {@nobarrier}, {@part={'part', 0x3d, 0x6}}]}, 0x20, 0x6de, &(0x7f0000001f80)="$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")
mount$nfs(&(0x7f0000000540)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0)
mount$nfs(&(0x7f0000000300)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0)

2.493745102s ago: executing program 0 (id=301):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5f090930f70e0dd038e7ff7fc6e5539b324c078b089b32333b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f347cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea56777e001cd34e5cb2f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf054135bbafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd731a0bfc1cb1a4c78f9ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b01979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e49336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba80900000000000000d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)

2.381778146s ago: executing program 1 (id=303):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000070000090500040000000000050005"], 0x34}, 0x2, 0x34005}, 0x0)

2.263173649s ago: executing program 2 (id=304):
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil)

2.071675485s ago: executing program 2 (id=306):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x6)

2.055798986s ago: executing program 1 (id=307):
syz_mount_image$minix(&(0x7f0000000100), &(0x7f00000066c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1810002, &(0x7f0000028f40)=ANY=[], 0x1, 0x1f4, &(0x7f0000000740)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')

1.779494514s ago: executing program 0 (id=309):
syz_mount_image$hfs(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1218001, &(0x7f0000000080)={[{@file_umask={'file_umask', 0x3d, 0x40}}, {@file_umask={'file_umask', 0x3d, 0x1}}]}, 0x2, 0x34e, &(0x7f0000002280)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x184a438, &(0x7f0000000280)=ANY=[], 0x0, 0x0, &(0x7f0000000180))
syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000004140)=ANY=[@ANYRES16, @ANYRES64, @ANYRES16, @ANYRES16, @ANYRESDEC, @ANYRES16, @ANYRES16, @ANYBLOB="9a7f40ad4c7145903a868b9020e1e8899ed5747db23004fc9d248900abcaa6b065cf0800930a71dcd8b8955d93c78b9d4e5e06d8d5c9ac9b75d177754d6eba23e6d2be546c0dfecdf61baf732950a5729c01fbdc11e36cb411be200a9135657acd97d21ee46aac313ebdddd9265af16558dd3e5ba4836659a6abfe08aad84276acf949bdaa34bdf7f7b2dfb2fe8b9d6d225dcecebeb6e15f649994728842bd99fc94897d24315ac2d17bf6c2acfbfa8464d80f36304f88b906b78ab359be3479db5b0e7555f04416807c2202d6551f2425440be741dbe053e0bfeb845623e722a9293843f1cf0a71119dcadf7e353af4da52aed3086d6e5a095774248be9a1b1418dec1c03a2cb0ece0840ebeaaf7b67867da45943b700e2d6dad775ae6f33e55aa86ca84c336c91e3b7d7224f7a9a10d5b45a6ce0769d875415bea136b5508e5e0a88290792da3b11b2284a3d757c301cec78b55d3fcfa073615ccb089f66c5b9a5c84f6c1bb78c3370c4687eab260711fa05525687c7709e15cddea061f70798cbf940ad929eb80f33ad8bb4fcd322dd0558f111d7d01351147976b425a27e573402490055054cf3d80bebde6a89f3086170633740f08780aac3a73f17eaeda8deb642c2887962596b4d78c0ffffb28d0e64073b0641f89cf83a69afaaea03ba6070838fdbdaccb81630a6fdaa77fc10146013b9fd79e965a320daf81c1a51f032a3f462f2740e579eb116cad80b4e233326bf94fea52184517accf608b1fbfb395942869841b9ca0f314beff6b2dc0a74d7599012274b24775f0382e72907c1f0c571b994f048c0266feb775d893fec84e5733cd66a96cd45b60f63743b17b05d99c427a2d00a27fef17cadf128059a2e227b80701755b0bc706f32255c8cd619fa995cc7649f28337361a62cff46669fa4cf095a2d148987a9fafa6e1fb9f59b5ac5ff10a4c62e0187a3c75a983f7f5211142c6c09170a13e29c2044e5568bda8055cee4722e445e83ea01307c42cbe63a5bc529e1200e5874f7500275abacd6cc0e3bf8fd38ab7bab39f54d180d60892e2e3a713a3e654c89b8e9ba4474909991844514c04b655c66ccd6f2a17e29ff69d343ebac7ac5e1510ad4ff52e6a932a97bb0d814259da6545022152dd63f06219a1d66ec2278b694876ed6195b0543b8c9289b8438e8ee57dd38bcdb045a6fc4cede28effaa0354afbd4190fcbccd9a0e91508e4399e0e30a0bfdedcc19454b6dd7c2785a6e4fe74a0ece1d683ad07d76eafec02fb0d88debfeacd3531413185da0ffa4fb9b5e6d5a916f7bb5d51efc8ab61e4953fc6b2d1e670769f3ca56d51b804ceb118278acc90422e1f51e448a27d2fe4f93c88cf7c6148474bf650902dd6dd96541044113d244cf938150ec426e7ed63e1f153bbe328f4232552b104c8dee60b0c4e4c25f2605e97cc6f4263d32e8340be2d167137682373ae4cd501fdc9c5359b40f52803a5e4c0e04a5de0412c5cbd4d05e6135a1209d4b2dff50d39e481f1d1b01ed71004fb0c18e736af8ab176f833a439a85c9132e6d2296f665771c6a284eadc08c94ffa520dcc37fd6426c152364699514b15d4df6732fff39834e8ba29688b19db27a970d9d7fbee973c76bee04fb6164963969ebde0f785606781d63726736d8b60a713d5f72207a23f6f00420fdf24d14c069f36a7e236620481cc7a63857cc1355bac8d4f9a3f32785ad4d9d81719077a816b33b98006c322ee473aa9f8f83fae86a4d421104b298a9e42357c44b773e3504b3f9eb5b29330411b776b78fdb6dd9713dd1aee0cc9c7ee8bd23a50d4c8babaf6d74bc25377009a8c57c941f80e58ac08c93a275656cbad3864df9e791305d66103ab30983b07553ede5b5d5b0aab157f805eb6c11c75dd7f297c2cc9110551131a797164dec422b13799f1c261464c765a62c201eb9c8686eee94642d59f429cd137cba0d1a8126dcdfc28ea5c201526c61164a86f480dfde0c60fdf6afd3cd64719de1d89b5a362e058054a9db73aaffac324b04e8903060e1f14ca4ac31c82183066e6d581685efbe3452a20a665166b03808220770d66051971b61d8114376e22a4511cae9fdf7bbed68bb9f45b57eee1c15775730ef1434731d7b82a7cbcd6155396263984edfcea62196189da0ba9908d7d5ef514d75a3e1d4ae42654365083873fc4ce969fa4fac51d640be8d948bb9464d1a7e494c8df98bd5a569ff7fe1aca542c34610148a8f1dc9d60ff0f761270577f286a362f32164184ffce3ad132637e9f0381e9ce76a11f296f9d1e835cdc44926104e1df4d0a282a84b9fbc23064bfcab0d221c6e3124ae8ba6022e62f170dcc2d655f73b40f83fd65f5c705bc1f9e8df13adeadff9e1fe4660a55be7dc969cfffaed607190162dcd09d0cd86a297b22142b88f0eb28dd1a45152a4f4f2dca0d96d39fa594349040f486cd486af619b7083236cf90324cddc6f1ed0f6a103c8d936d7f2f31d420ef50931838e66721bff7494617b6b4bc385f3e51b3f81cf5d6953ac7fddc0f3466682911b38bc7f082e0c18e3ae0badf7f3fd3e186ebc2bab71fa26f77bb14cd97e6761c93c8c25887c0ef1f3dc1d8d86ce0fb73190f66f4deca77977e8d6064bfeeac3fad2bc50488c144e2a1a82fcc1e1c12ac54bf3e2d468e8f53241e4a6ad9e466746a45b053452ded5caa20461881d78d8235e986ba8b77e83601655d2650bf1b64ce17c75314216b43bbd1101a2e12e57525bb7d3b136a70635bdac8af24367a24ce2fe2a72ef2b0e56ff8dc62a82946f86f9b6b1418a89b1971372dfe7d5ce2e6611befff721f04a19bce7f90b1551a4cdead136662c50513fdde6f9d4a199c3907ed8799f231f54dd8347c71d829ff8ddc5d96b5aac2fe58652c81ff7f54e2568119dff2763ef435aa420630dacc7e9414340ee8688f46c7a8ab96d860937641042b3cdf6857ff1d2d4e47cec1f23e65fe541f38cb96b132666f999002e89cd1896ca58c2e63b87382e1a6c1ee9afa56cf3ba923fa9c989e20bff313f37252632fdcff03fbdd2d334ee93baf75c1bdae30feaa81fb2ac1b63c42dda06f20ce8c9d003eb3efed7931def342fb874fce92763f6f477c7f589b75d2129419fc4cb7a8893a1d3f94533ed9fdf9f21fc254fd80aa74750833d390327a2107e761240928d35a36c5eaca61fd848116b8dd7ec8157928bc2dd87f7756aa517cf6a61d2009fd4ba0579ca3b3129cfd5403546f5ab6d0575799a008fc67da9658427636d8f806d9b8cad64aee438d0a9b45957f31a5afe3ed894add9acadfd347246099c6ff0b4ec6f19ac61557daf8739e528185ab1468ca72d6d72e4f026e371e540b774b6576df3014dcc9e91b2cd1f0403a4fcaa6627b22682bb54f92150c2917acaee1972b2b03bc2bd37fdb9e7352c654d94ef196b7229e4da5ee62b7d395ecdd5177f2563242ea49ff78151a4a816a94e89b03f41c7e6684f8be3e5802e9338e7cbd3b43f708c062f944a59f31b02ca9a177e6b681accee8785d2467d2d78636be4330febaa3f6907db07992a2de74e459f3ae8ee6adae20cbc75aabd2d5d3424de0ddcc3ddd981c3a4966c57f8fdb1c42db87395f0bc800ff8ddb4c228a7d793d8a997885494a8578f5433d3f82886ea573641bf16065efbc25718c88f7277ce04c94af560d8deb7968496f849d3fad78741272b08bf7aec3f3c777428d3b8b897333ae5afb6823af63cb7347601ee2e8d4e21b21a12e6d42f66a1aac26d296bc68a998d8ba179ed5f756c2efd8a7acc0e3f08093bb4a83d37f15b4fe07c90858058ad1ff0e21bb7bf4363079c5d452dba5972b21c8f41daf6f11a51d321d3c1d544190238036d907d965ff469ce4895eb7675f3e94a15f83b837b892a40390d87d76e9b15eda02366299d3dd93943466bceeb2f9e465adccc08e1a02c3ac01815931627ed327e0ffbe09563221a365b88c4f2449bd3634920d5bfbde7cdc92c4cb16a579f35f07dafc87ce6ce4de7bf9e8ff0e80b81cdab8f2164a25a0a6929679ce9ae0dc2ac7ed41a787446676f091597551dc2e8c054224bac6652bba5fb675c0b2c94d2faac160f11b7b96fc96415aca8a47fa03658b8afa24b6bd97f7dbeead9ae5f7ec1cb0d000055f41a5043c6c4c97212398b168b5cb9ee650726eabcc31b6712e815fdaae77885350884fb36d6d5444d5e5500a7d636d4eced14b9d411c765b36a4be06ca9be2965d6d6c06c3b6bcb38babeb2999ee71295d48926bf6e39363fabf74de5e57aa0b59f9dddeca142d0c50ab7ff198196c69c971e6ab591220f4e42d6525e2dbd99b6c57949c854e4ee0e4581f9e3e160b3f66b01f23f4d0472c0a1f307837ac8dac0a257d09ab82975148dcd764fe6359a5f21b9cbe2ae7b9b277489a8b3285b8289a84ff854508b4488ffcf68f47ec7a5c18a8c3d06e26b32f754ac74ea8e93a554147fd3b3daf1fbe924e2e389cac13a5f80f3a21dbd250d3917f7b5acfc739a63f2b3d6b3f099efb4be7a842215c89fc87bd8550d11ba2a4af0f111ab124503b26feeae3be3ee24168dd4553a226b9168edb11c3e61bc850adf995b4d6f1aace6db0b91f805c3d1789a3e6b470e5470968f429d5b05c8f76ca2981e37f5bde4ad00a09755c76774ead7d93f3f41255b1d56152e3699b133b2e0b277427c992323d1b4d8c438434e9e901ddd43788f80cb9a975e9dd1671ce16be5ff8033d5da824f00fd78b540edbcd69a2e9aff03e31af9afefb809434f52b4a1239fdd241ed3a268258addde19d1724155a1a4c877bd59b0659b7a786886f6ffcb5999d1f9c007d615020926f7165a9ddd4aaa3c7b631d30cc951e328131d99282ac06a18f88373092320ea5308f06c376e711aecda4cd1c2b639d9ea7a2613d4e9eaa9a0ef72774fdec622f7d131b45135d577897bf686b460a371083070139ea544bda15012251d6c8e7163c25412841faefba76765648ca7cd1b423403a654b6b5754588ae6c309621477db20f7c9236af1e422ebd3fb6d6a712e7a6d00d58416b7d65a53a2514bf51bedfe9207f16a4d79418600389b98ea8b9e06b8da708a86f191e567925af39a09ac9fd7902e8f8e77567baf1b75c05ba1eb7089b424801405afc982a8d79c80fada184a1ab3bab526a3b0a5e20d2dc6bcdd2c5cb7c49f735f3e8f4d36a388ca805876ae08f0e3acca5dd864c1fa1552068bf799095221480374fd2dcaeddb74be93470eff4fe278e190f0a131f32340ada9cca518af769f42943875f4c5707beee2179771da21cd66405b9973648bd047a516d1cf902fa1f0fcdcbc3f4c1f20fc22f9a7e9f4c3a52576399604c46f83ede44f542d06d54e6e8a1e693a2cfcbb16c178d1bace976133e72cc4533bd02b1c4ec2cc22097435aff5a682ca7227414895450831560fa682493f4814ce8fbdb190f8ce2b533ed9582638511bda93aeae5d0690f745b788db622864ba3fb60952f119427fbe66754c5c038c5fb2cb87c326d65862e353c14950bd1fa7c70e36323e9cf90c81f6275e59c7926acac1560a0b6bbc7a850817f2effa19d485315a219d49e293f871278294d02765cf72caa2f438de3337ed205bf68ff6ddaaa5e4b80de5fba022dfcf9cf074a319678df11eb77b3ef66e512b67ba5182265a60eaf457691e973d23cbaf6000537f886695074ebb616f9cdad9de7c6fe9ecfbd13d537d64c34a7c90ca56b50e60d6a7067e391e63561793edf6ed3c2eeb8555909a59ce73da1f096d41fb42de44494128324a9", @ANYRESHEX=0x0, @ANYRES32], 0x5, 0x0, &(0x7f0000000000))

1.779393694s ago: executing program 2 (id=310):
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e23, 0x1b4bebdb, @loopback, 0x9}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x60, @mcast1}, 0x18)

1.761782915s ago: executing program 3 (id=311):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}}, {0xb, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

1.711427946s ago: executing program 1 (id=312):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d01"], 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[])

1.550386551s ago: executing program 2 (id=313):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000005300)=[{0x80000006, 0x66, 0x0, 0x30}]}, 0x10)
syz_emit_ethernet(0xfc6, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0xf90, 0x2c, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}, @mcast2, {[@hopopts={0x84}, @hopopts={0x88, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x8}]}, @hopopts={0x88, 0x1ed, '\x00', [@generic={0x10, 0xf67, "2f324a17162047b7409cb725fd8d1f52df624d72a5a321cae384729c0e5d58e555876a93d19ed7b37d8bdf36ab2b7766e030784280a3f90bc34e8b12f2dd14db05ad504687ba25652dc3e97ebcda9eaf1a1cabdb30600c814ea8073d5126ab2ff2e283208a5bdcaee7c6d499ac71d83f701d3de41c410aa53b590c35ffefff8aed8a594798ccb53380b26bcdb12eea1812ed155e14a3429c06fb379f69a0c48db5ba6e7d28c7da02c3e0b43981f7d84ef3f96e52ac060668ad761874af501a2c39f1b606ab5eac7f76c04b74023ebd4e53607c12d5ee2a5ed082c16125140124cdb5494eb301feb181fb2f3477481e02488475007a26957c8febe494657632f71031f3b4c6534c283c6b2e4f1b1c1ce86d88989c71c680270fabe1f277fe79f6ec2a78ae85736b66e8e61ea28df2b4413219de20716bfab5ef295cdb2d5daa333192ff4bcb91b3e8d80ba803d1f72140ae5e578e6d1929f7f5674863483325dc851760f683e7fe8e27b4abec1b94d0a90313a6c6872a9e7ad80efdb25e6c980f2c071a620df5bfe1dd4d2aeb475a647836397e939040d79d4483bd8ed0bd76c6b7468f208c437541fc54976fbf66113bc12d80c24fb84fdca89417403c0c9263fed90d8442061736bdfae644584893af8e74c50e3c973707624769cc40e4a2a03dc7d2690181d9d2c5a93f0c93443a33eab3a68e9d215ddf23d98c32da72b0cc2a86b735ae52331d4f74135c0b745670478ba8ea25db84caffb473ef8549bd57b284f0ec885dcb5f7aa82375a0d79187c34ae3e46ffeb2205c6bbd54ad0b523eded5d8d5e75ce5bd8aa6ec7b558f9b4f0dfaf8ca9f679a9a92845b4a76d88c5072f9766daeb5d16a94ad8d46f06886053fd3890699a5b2e1139950b949737a26316ea677655fde1c05b845a8ded5d2783fa4499b060600832f68601cc85c3569258780064db6a505602d027a696e6d90e36222bf8199c4c3e90392e9956a96041d454e0b1d2c6737a27d2ec4b2154c03813cbd29c54cac5390ca30e63357d28139e7bc5edaf2cbb7bacd151afa2bfcb48d5325e70c431ddfcefd49a8ac58d2efed5931ce55772420c0d8120d29b3c1a3c598d9643bb5bae09468e8c3ad25a09061fd925448d25afa8b4b29752d429811b82f96c5dab2bc9be23b0a498aa2fb5e3d0c9996e56eaf331b8ba0349ccc0e9ac253d553fc7cd974a86e3a52f28787ab8101aebe1eec90d605c1d4776693c0fad90b95e7332fdce115759f04446a5e7230b8810e79050b9ac8313bddacfdb5ac3f0f8f17e36014cd45619372058809030b3fef152dbaefd98ed76c3114ea9de3c87c15ed2077ae9b6da8904bad8e4bf3a74359a5a77f27ec7795f0ad7e66149a17c40cd635bca63f459f2f8d304a25780a9b9ecb1e852d89a0bab5784098d008bbb87a4d9fb28f0f3b785ce6d870f2b3fb1c74b22a82841a34656c090ebe93941c6e1b8187a554ccb5d8194f1abb16bf7dd31d1b6a53ec78da7bad410b40d42e05270ccfec80d9bc41f4176959cfe2d5d98a989747b484824521489d8dc4d5e512e39a36b8434ed30da7bd7aa74c9838207a8884a52f9a29e8bccb46c648f8cf3729ebd49aa2b6908a79b059c024eb737ecaf71d45ff8e568a39eb40dbd5f221bd139df10d2b2567068586e9e9fe3c938218e57674c81d9e7332dde902a0d717fd030a8f7dc754825dea22e209a13b10dc3eeac3a3f1e24248fbef81b333948bc6314af24b5a613b85c84f3921f88c4509bd3b713513d8abf78a480d6302c3641d5336a5d11f095df101d77ed47601f58f3bbec80344b8ef3c3df2c5544601d5161ddcf54bef456e1ec74e0273a5c3b0d96b7939adeedcf64ae49ccb6466be98fb3afce26816a67c420b61e198ddc20e15c186e6c1b7379489570f119556847029ff71a5da6594537f8ec9f5f560b3c33f43b2f0aedc630fab20b5e72d69f05ed1fadec43a60102e92d17f786b66d95acdca7e34a6f49c42dbb3eedd9c5936a3a3158fd2d0029b7192948375e2d7342f2e57aa835fbd5f41f3a6ba22b5f799fee7576ce2f34e3dc60dae84cf708a4c5819acc2287b0d9d5a4331618976ca9b141b72261df37fd3f7b8e8ff33eb11a6c4444740c3f756f52a6dc0a6fb37d7a5cc5599d51fd149e11d0d8bfd4d956d06cfa40d68635fc0f898355d32eb68725ac972a528de40b1e02698cd88a054a039a9186fc3847573dbbd040e74cc688840da75e541aff5542d22967971cc168adfc8339a051b6896a04737f883a17968e67dc6900f259950c6730ce53de781870a7f8c9db19c275f7fc9b9ec97d8b388f4d0315bc4399602a919e7c56fd0a244286e31ee16491826d8eba940128ab94095df81d9996ab480b1de36f31d48ad7f2e0f2d3bacd7865585e092da31103ab8bd4613c98d62c6ae916de8b121626f4d30ba7970dc12118d782682d8f54a186959848204805ccb329d28d3f38b22ad613d1ade13906b1d82d65d31a328db09dd3364d7e1394eef1dbdfbb0f3aa8ffa736b27e53a0f49e7efe8554feb7500ee6d8403d2af9ce52bb442568257403c8ca38236085c68cbd022f32821874e3bd4e82c00da62620eded7ae6185534896c5f5cd4998b05676c3ce0025adde87d4cfdaeefd1c6a3fd73b72f391490e7658187b5e76b88458126a523f03b0feab922d825c209c6892fc8b6dce9e9008ee0b7e7639cd3bab94722772f9f3fd8390d43660dc23a82dd17e5fbea21bf60a21ab687b4eaba108c05a21ec143a354604b39f31ef580e9fe1873c1ba8046f5ccf2770ee7bfc8ac5b93c3f29bd3d8d9e984ecb5fac01b45834167222bb0af7025160b1f2c3264e00392750687479dcc1d1287be404e02f6ee5606eb8f368f1b4190bb23d0d61bb8164980c4f5eb1a16a155f879472527f511c039725b6f504d3bae68a3bc69db094d818f3c90e8688e4e0b60628b89ea92f7a5b4ba31aac1120bb394d7aac71481b265964d3011b212b4f7f6d6ac123e26dd028c0a5ec0db1aa2c1d41d6a9930a84ce9f98330a28ef7bfadfca7245d11be16398c44b78d7d0399fff33672c759060ed086f672ad2ac05d45694be51afb37c5b8ac654958f6d6e50a75e162910beae4939150006d91379ac9b144ff8153bb02e59abe85f2120732d863aa9b17bf5bf3b09e7bce461f0073583b065bead574ffe4f3ee843a402fc6e3a93f4cddeefcaa14d3c4a0d654a0a8c0aa146d14500e86beea70146ab6cfa0a7ea7aaf4311cdc456cb5f399864323c553c46f84202a49e42b469dbc4762c3cd84adb74eecc25b642e900f4b39cef91ed34fe4bf48a231f1a34b91f2e17914078e17444296b1399a97dd21014b4f3afbc41780df8452816a157722ceb10ecbbb49f3d891a65df2b6b718a8fb3bf826ab1b8bc6d97b43a76af953db8a8d802fb786834da94d2d84ad33bbb8739a5f1f7573e85f6706d8f26ecbdf1ec8b026f59b9a4c6107e9600af21e58c77a426ef54320814d13457bfd8684ab09914fe88ad1c41672c5b09a94c399aceaeb1020cc055b0997ca4ee488bcc777b55a7569df13b3faea32fa59ebc125c237dc402793d1a59b7018760cc049010cdf6504706cb5f586f0f2724dc0438cdabc3c7cf171aea9b0960202d1fe6381885ef809e2134b3641406b0ee6e485245403da49e5fb1199e459b80344f771d6504c1a433b205acfc5120a0e49dc58420bc00acea34b3c83721b24710597990950d18af3006945ae0224e19b05b71a7664d5d4701c242b42dd662b10f87af54eddce9eff0fb30c355651648a101bc05dc36261127160e5beaf3bec527ca8dff8d7d56484bb1a59c3ee94d0af22fe4cd39fe039eadc757408040d84ea573032b3c444d42bec9b1285f62ae11ec9499d1eb8b63181cbe2699c375b44e191fd2d87e425c2bc49bfcc39c2350d5aaed1902c2fa288077a3e36a7714b99e676b476887a57c749ae783a2fbcc480d62555fa5f0112b9797e1d07ca457e052e227b1aee753add5df01ff8e8526212f8c20d084b3e6dbfe9101897fc9b00edc35ee533c40d97a8dc455436a58eb238a7cde544ae215eb2654dc82afc1696570bf6b4caff43526b77c9aec9e32d664d414d4a044ffcea57ce17c6bc0a1d87450ce4eae26113201c3733eaa9d8f92c52ed6c5ca8865e28086df92e865b19159906bb01bf0cefb543da2679eefd02f1d29e8b1740bd1ad921b3bfb7df7043cd1823308d14c3f56d9248b697bf68e195b4e2dc0ee84b5bbf80cd5197b79d4cd0a624c63443f1f94243b1b08369ede9e0a971653f31e83f57bf22dbbf32b4992a3ce54d1d9d6f4af852aefc16d882097935faf069d3ce50f599363ef298bb7dd009fbd4abd9a5689362a1034fe11d3c0a2f9fc2e514c6d9614afd2af67a01801db0f7817fd47f0098e229c823cb91e7cefa47af200bf6fbe9d8d06f17f9d115a628446817e6518e876322d103beb1ec0808a5cb3a41a5bb80cf5de977577a7a30691e3fb1cc8cadf4f33ae163fcfe4a89962cf06a0e3764ee69023245848d32b12f96e5de33f9d3796b438d54fe4b6e2424e3e31343cbccfa84e72563fc61182663d7352521908ea4cc211c0565e29425681edb4a037899c9deaf6ce1da9dce0ca6ad5cd25cc51afabe90815ecd0defb05ab640869206535a55b51296411828d632251a453708bda3dc7a3c3482204969d95fe499f03c5084e22f23711fdc908e648c2a221c9713242086d151788fe55feed34571ca915b9a142e846dec197881ecc19df06df9eb9c1d94bdf62f3d378d775fc811ab0421899f5d68fecb3ddc80b471fb25a9864ec2338748a947b596967d4e9a6276e8634700e13fd9cd0330f2372b21e528b6df99debf7ce160aadc8d292c2b48fc0af96ddd0352785f98ff384cf411242e1bcf0dcaaf5668eb123f6a59fd7b2a8c545885deb90bb85014e2c52f1b98ad13871e38714d95ef472ac86668b02239741d7ae673e4e7d90f8269da314d09beab1799b500129a16bad3c920fa12090559bbed2267b8be08b9e72389b716b8ff9281bb97357c2e0193430afa74be3d5a0351e2df579b311ca5c5ee618d0aecf85de5aae2cc98c6e2d900724570419a126e785694f2721e88efc45f8b83b4088863c4d49f4bc5b1ed5ad6f921f25100ced9ad51abbef953efabc8687473c47c6681f6fc73379b734080d4b7127ba4dacef4f97be8f97279e165c486a09252fa7308df7bc6e9043121f60a0d5f92fa1136ac0217299708b5f7e3e0c78d84aaab00c7fda2db97a5271e0a4667fa7ffb141c1a2a05a8dd3ac6503a01b968afc115627b1adcbba8b0bcc9693d1dea6bfb55d952cf08ed955bc5ed69c15a3284a862eec522126d205447e4d8590bff0622b817f6100503b833571ea3ec85f8b6e0f03dff2c355965f50cbc54270b476c9a29fccb5f7b407e5bdf2a62ac6a6dd2a9e35eea92f6ae0074a096fe39eb57806955f071f6af8892397aa180a80d18f2cd14f7d78872152474d0ec96de74ba42c33b9a8fb61e29545e5bf30683ac2c470c9638d797502d26fb2ed510f43241d3585e6ca2d17adea3"}]}]}}}}}, 0x0)

1.471100874s ago: executing program 0 (id=314):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1010000, &(0x7f0000000280)={[{@utf8no}, {@shortname_winnt}, {@uni_xlate}, {@shortname_lower}, {@fat=@nfs_nostale_ro}, {@utf8no}, {@shortname_lower}, {@shortname_win95}, {@shortname_win95}, {@uni_xlateno}, {@utf8no}, {@uni_xlate}, {@utf8no}, {@utf8no}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@fat=@codepage={'codepage', 0x3d, '936'}}]}, 0x1, 0x384, &(0x7f0000000540)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

1.431136405s ago: executing program 3 (id=315):
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
write$proc_mixer(r0, &(0x7f0000000040)=ANY=[@ANYBLOB=' \''], 0x33)
close(r0)

1.356605617s ago: executing program 2 (id=316):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x836d9fb164f927b3)
vmsplice(r0, &(0x7f0000000040)=[{&(0x7f00000003c0)="ee", 0x1}], 0x1, 0xa)

1.26059399s ago: executing program 3 (id=317):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x48, 0xffffffffffffffff)

1.166394503s ago: executing program 2 (id=318):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x625c, &(0x7f000000bdc0)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEQEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRCMhFjwECIklIJaseIAs2LLjAbBkIwFZpVDNnDOuabrdvmS6eub8ftKk6qtTNX0q/67pbldVnwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4nvf/cGZKiIu/TwtOBbxmehH9CJWmnotIlbWjuX1BxHxXGw3x7MRMVyKqHLj0xGvRcRHRyPu3ru13iw6+5D9+M6f/v67Hx75/t/+MDz1nz/f6L8+bb2bN3/977/cfvz9BQAAgBLVdV1X6WP+8fT5vtd1pwCAuciv/3WSl6sXrt5csP6o1Wq1+gDWbfVkt9tFRGy2t2neMzgdDwAHzGZ83HUX6JD8izaIiCNddwJYaFXXHWBf3L13a71K+Vbt14O1nfZ8Lcie/Der3fs7pk1nGb/GZF7Pr63oxzNT+rMypz4skpx/bzz/Szvto7Tefuc/L9PyH+3c+lScnH9/PP8xhyf/3sT8S5XzHzxS/n35AwAAAADAAsv//n+s4/O/S0++Kw/lQed/1+bUBwAAAAAAAAD4tD3p+H+7KuP/AQAAwKJqPqs3fnP0/rJp38XWLL9YRTw1tj5QmHSzzGrX/QAAAAAAAAAAAACAkgx2ruG9WEUMI+Kp1dW6rpuftvH6UT3p9gdd6fsPJev6jzwAAOz46OjYvfxVxHJEXEzf9TdcXV2t6+WV1Xq1XlnK72dHS8v1SutzbZ42y5ZGs98Pr8Sobn7Zcmu7tlmfl2e1j/++5rFGdX92x+akw8ABICJ2Xo3uekU6ZOr66ej6XQ4Hg+P/8HH88zC6fp4CAAAA+6+u67pKX+d9PJ3z73XdKQBgLvLr//h5AbVarVar1Yevbqsnu90uImKzvU3znsFw/ABwwGzGxxOX/9IAv0WYlj9FGETEc113AlhoVdcdYF/cvXdrvUr5Vu3XgzS+e74WZE/+m9X2dnn7SdNZxq8xmdfzayv68cyU/jw7pz4skpx/bzz/Szvto7Tefuc/L9Pyb/bzWAf96VrOvz+e/5jDk39vYv6lyvkPHin/vvwBAAAAAGCB5X//P7ZQ539Hj7s7Mz3o/O/avj0qAAAAAAAAAOyvu/duref7XvP5/89NWM/9n4dTzr+Sf5Fy/un+/90Lb14aW6/fmr/z1v38/3Xv1vrvb/zzs3n6sPkv5ZkqPbOq9Iyo0iNVgzR9zB2bYmvYHzWPNKx6/UG65qcevhNX4mpsxOk96/bS8XC//cye9qanw+32ur/TfnZP+2C3PW9/bk/7MF3pVK/k9pOxHj+Jq/H2dnvTtjRj/5dntNcz2nP+fcd/kXL+g9ZPk/9qaq/Gpo07H/b+77hvTyc9zptXPv+r0/u/OzNtRX9339qa/Xuhg/5s/z85MoqfXd+4dvLm5Rs3rp2JNNmz9Gykyacs5z9MPzn/l17cac9/99vH650PR4+c/6LYisHU/F9szTf7+/Kc+9aFnP8o/eT8307tk4//g5z/9OP/lQ76AwAAAAAAAAAAAAAAAA9S1/X2LaJvRsT5dP9PV/dmAgDzlV//6yQvn1fdf9zt/7h3P7rqv1o957pasP7Mtf6kXqz+qBey/u+C9Wfh6rZ6sjfaRUT8tb1N857hF5N+GQCwyD6JiH903Qk6I/+C5e/7a6Ynuu4MMFfX3//gR5evXt24dr3rngAAAAAAAAAAjyuP/7nWGv/5RF3Xt8fW2zP+61ux9qTjfw7yzO4Ao1MGqu4/+j49yFZv1O+1hht/PqaN/z3cnXvQ+N+DGY83nNE+mtG+NKN9eUb7xBs9WnL+z7fGOz8REcfHhl8vYfzX8THvS5Dzf6H1fG7y/9LYeu38698e5Px7e/I/deO9n566/v4Hr1557/K7G+9u/PjcmTOnz50/f+HChVPvXLm6cXrnvx32eH/l/PPY164DLUvOP2cu/7Lk/L+QavmXJef/xVTLvyw5//x+T/5lyfnnzz7yL0vO/+VUy78sOf8vp1r+Zcn5v5Jq+Zcl5/+VVMu/LDn/V1Mt/7Lk/E+mWv5lyfmfSvVD5r+y3/1iPnL++QyX478sOf98ZYP8y5LzP5tq+Zcl538u1fIvS87/tVTLvyw5/6+mWv5lyfmfT7X8y5Lz/1qq5V+WnP+FVMu/LDn/r6da/mXJ+X8j1fIvS87/9VTLvyw5/2+mWv5lyfl/K9XyL0vO/9upln9Zcv5vpFr+Zbn//f9mzJgxk2e6/ssEAAAAAAAAAAAAAIybx+XEXe8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyPHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh7+5i5Drr+4Gf2TdvHEgMhPyd/E3YOCaEZJNd24lfaFNMeG14Kwmh0Bds17s2C37Da5dAo9pRoETCqKiibbhoCwi1uamIWi5oBSgXqFXVStBe0BtEhcpFVAUUkFBpBWw15zzPszOzZ2d2vWNn5pzPR0p+2Zkzc86ceWZ2v3a+OwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ6ubXzX+ikWVZo9EoLtiSZS9ozqumtuSXvPr5PT4AAABg436e//u5a9MFB9Zwo5Zt/vGmb355aWlpKXvP6B+Pf2ZpKV0xlWXjm7Isvy566nvvbbRuEzyWTTZGWr4e6bH70R7Xj/W4frzH9RM9rt/U4/rJHtevOAErXJU10p3tyP9zS3FKs+uy8fy6HSW3eqyxaaR57tJts0Z+m6Xxo9lCdjybz2bbti+2beTbf/Xm5r7enMV9jbTsa1tzhfzokSPxGBrhHO9o29fyfUY/eG029eMfPXLkL88+e0PZ7Hka2u6vOM7btjeP82PhkuJYG9mmdE7icY60HOe2kudktO04G/ntmv/deZzPrfE4R5cP84rqfM4ns5H8v7+Vn6exRlZynraFy356S5ZlF5YPu3ObFfvKRrLNbZeMLD8/k8WKbN5Hcym9OBtb1zq9eQ3rtDnndrSv087XRHz+bw63G1vlGFqfph88OtHyvP9s6VLWadR81Ku9VjrXYL9fK4OyBuO6+Fb+oB8vXYM7wuN/5NbV12Dp2ilZg+lxt6zB7b3W4MjEaH7M6Ulo5LdZXoM727YfzffUyOczt3ZfgzNnT5yeWfzIR+9cOHH42Pyx+ZO7d+6c3b1nz759+2aOLhyfny3+fYlne/BtzkbSa2B7OHfxNfDKjm1bl+rS5ydWvP9e6utwssvrcEvHtv1+HY51PrjGlXlBrlzTxWvjXc2TPnlxJFvlNZY/P7dv/HWYHnfL63Cs5XVY+j2l5HU4tobXYXOb07ev7WeWsZZ/yo5h9e8FG1uDW1rWYOfPI51rsN8/jwzKGpwM6+I7t6/+vWBbON7Hp9f788joijWYHm5472lekn7en9yXj7J1eWPziqsnsnOL82fuevjw2bNndmZhXBEvaVkrnet1c8tjylas15F1r9cDCzc9fmPJ5VvCuZq8s/mvyVWfq+Y2d9/V/bnKv7uVn8+2S3dlYfTZlT6fZd/Nm+dzIss++41HH/jaI5993arns5k3Pzaz8Z/FUy5tef8dX+X9N+b+XxT7S3f12Oj4WPH6HU1nZ7zt/bj9qRrL37sa+b6fm1nb+/F4+OdKvx9f1+X9eGvHtv1+Px7vfHDx/bjR6087Nqbz+ZwM6+T4bPf34+Y2W3etd02OdX0/viXMRjj/rwpJIeWilrWz2rpN+xobGw+PayzuoX2d7m7bfjxks+a+ntx1aev0tluK+xpNj27ZlVqnUx3b9nudpj/7Wm2dNnr96dul6Xw+J8O6uG5393Xa3Obpuzf+3nlV/M+W986JXmtwfHSieczjaRHm7/fZ0lVxDd6VHclOZcezufzaiXw9NfJ9Td+ztjU4Ef650u+VW7uswds6tu33Gkzfx1Zbe42xlQ++Dzqfz8mwLp64p/sabG7z+r39/dn1tnBJ2qblZ9fOP19b7c+8buw4TZdrrYyF4/zG3u5/Ntvc5vi+9ebM7ufpjnDJ1SXnqfP1u9prai67MudpazjOZ/etfp6ax9Pc5jP717ieDmRZdv5D9+V/3hv+fuVvzn37y21/71L2dzrnP3TfD1949B/Wc/wADL9fFGNz8b2u5W+m1vL3/wAAAMBQiLl/JMxE/gcAAIDKiLk//l/hifwPAAAAlRFz/1iYSU3y/9bXP7vwi/NZauYvBfH6dBruL7aLHdfZ8PXU0rLm5fd9cf4nf39+bfseybLsZ/f/Xun2W++Px1WYCsf51BvaL1/hy3euad+HHjqf9tvaX/9cuP/4eNa6DMoquLNZln312k/l+5l678V8Pn3/oXw+cOHxx5rbPLe/+Dre/pmXFNv/WSj/Hjh6uO32z4Tz8P0wZ99Sfj7i7b508VXb9r57eX/xdo3t1+QP+4n3Ffcbf0/Opx8rto/nebXj/9onn/xSc/uHX1F+/OdHyo//yXC/Xwzzf15WbN/6HDS/jrf7eDj+uL94u7u+8PXS43/qE8X2p99YbHcozLj/28LXO9747ELr+Xq4cbjtcWVvKraL+5/99h/m18f7i/ffefyTBy+2nY/O9fH0vxX3M9Oxfbw87if6u479N++ndX3G/T/5B4faznOv/T/1wDMva95v5/7v6Nju9Iduz/e/fH/tv7Hpzz/+qdL9xeM58Nen2x7PgXeG13HY/xPvC+sxXP+/TxX31/nbFQ69s/39J27/uS3n2x5P9OYfF/t/6jXH8rlp8qrNV7/ghddceHnz3GXZtzYV99dr/8f+4lTb8X/++uJ8xOtjR79z/6uJ+z/z4emTpxbPLcyls/rItfnvznlrcTzxeK8N762dXx88dfb982emZqdms2yqur9C75J9IcwfFuNC962XVryD3v5QeD5v/NOvbr71Xz8ZL//3dxWXX3xL8X3rlWG7T4fLt4Tnb337X+mJm6/PX9+Np8MRLq38fcEbsW3Hf+1b04bh8Xf+XBDX++mXvj8/D83r8u8b8XW9weP/7lxxP18J53Up/Gbm7dcv7691+/i7ES4+WLzeN3z+wttcfF7/Kjzfb/t+cf/xuOLj/W74OebrW9vf7+L6+Mr5kc77z3+Lx4XwfpJdKK6PW8XzffG560sPL/4ekuzCDfnXf5Tu54Z1PczVLH5kceb4wslzD8+cnV88O7P4kY8ePHHq3MmzB/Pf5XnwA71uv/z+tDl/f5qb33N3lr9bnSrGZfZ8H//ph47M7Z29dW7+6OFzR88+dHr+zLEji4tH5ucWbz189Oj8h3vdfmHu3p279u/eu2v62MLcvfv279+9f3rh5KnmYRQH1cOe2Q9OnzxzML/J4r137995zz13z06fODU3f+/e2dnpc71un39vmm7e+nenz8wfP3x24cT89OLCR+fv3bl/z55dLb8N8Celtz9x+uji1MyZcydnzi3On5kpHsvU2fzi5ve+Xvunmhb/o/h5tlOj+EV82Tvu2JN+P2vTFx9d9a6KTTp+geiz4XfR/NOLTu9by9cx94+HmdQk/wMAAEAdxNw/EWYi/wMAAEBlxNy/KcxE/gcAAIDKiLl/MsykJvm/cv3/refXtH/9f/3/1vOl/1+z/v+Dg9b/L94v9P/7Y6P9e/3/QP9f/1//X/9/1f5/Of1/ygxa/z/m/quyrJb5HwAAAOog5v7NYSbyPwAAAFRGzP1Xh5nI/wAAAFAZMfe/IMykJvlf/1//X/9f/1//v3z/+v/DSf+/O/3/HvT/Z7J69f8v9PP49f/1/1lp0Pr/Mfe/MMykJvkfAAAA6iDm/mvCTOR/AAAAqIyY+68NM5H/AQAAoDJi7t8SZlKT/K//r/+v/6//r/9fvn/9/+Gk/9+d/n8P+v8+/1//X/+fvhq0/n/M/S8KM6lJ/gcAAIA6iLn/xWEm8j8AAAAMnrFLu1nM/S8JM1mR/y9xBwAAAMDzLub+67KOInhN/v5f/1//f/D7/5vSdfr/+v/ZQPb/RzP9/8Gh/9+d/n8P+v/6//r/+v/01aD1//Pcn01mLw0zqUn+BwAAgDqIuf/6MBP5HwAAACoj5v7/F2Yi/wMAAEBlxNy/NcykJvlf/1//f/D7/z7/X/9/0Pv/Pv9/kOj/d6f/34P+v/6//r/+P301aP3/mPtvCDOpSf4HAACAOoi5/8YwE/kfAAAAKiPm/v8fZiL/AwAAQGXE3L8tzKQm+V//f8D7/7E5qv+v/6//r/+v/78m+v/d6f/3oP+v/6//r/9PXw1a/z/m/peFmdQk/wMAAEAdxNx/U5iJ/A8AAACVEXP/y8NM5H8AAACojJj7p8JMapL/9f8HvP9f9OAnfP6//r/+v/6//v/a6P93p//fg/6//n9f+v9L5/X/9f8pDFr/P+b+m8NMapL/AQAAoA5i7t8eZiL/AwAAQGXE3H9LmIn8DwAAAJURc/+OMJOa5H/9/6Ho/2f6//r/+v/6//r/a6P/353+fw/6//r/Pv9f/5++GrT+f8z9rwgzqUn+BwAAgDqIuf/WMBP5HwAAACoj5v5XhpnI/wAAAFAZMfffFmZSk/yv/6//r/+v/6//X75//f/hpP/fnf5/D/r/+v/6//r/9NWg9f9j7n9VmElN8j8AAADUQcz9t4eZyP8AAABQGTH33xFmIv8DAABAZcTcPx1mUpP8r/+v/6//r/+v/7/8HOr/Dz/9/+70/3vQ/9f/1//X/6evBq3/H3P/nWEmNcn/AAAAUAcx998VZiL/AwAAQGXE3D8TZiL/AwAAQGXE3D8bZlKT/K//r/+v/6//v67+/8uX77dK/f+y/ev/Dyf9/+70/3vQ/9f/f977/+P6/1TKoPX/Y+7fGWZSk/wPAAAAdRBz/64wE/kfAAAAKiPm/t1hJvI/AAAAVEbM/XeHmdQk/+v/6//r/+v/+/z/8v3r/w8n/f/u+t//jw9R/1//X//f5//r/7PSoPX/Y+6/J8ykJvkfAAAA6iDm/j1hJvI/AAAAVEbM/XvDTOR/AAAAqIyY+/eFmdQk/+v/6//r/+v/6/+X71//fzjp/3fn8/970P/X/9f/1/9ngx78/davLq3/P1F2x33p/8fcvz/MpCb5HwAAAOog5v5Xh5nI/wAAAFAZMff/Uj7/efkK+R8AAAAqo8j9k9kvh5nUJP/r/7d1z5sPV/9f/1//X/8/p/8/nPT/u9P/70H/X/9f/1//n75atf8fond5/79UX/r/MfffG2ZSk/wPAAAAdRBz/6+Emcj/AAAAUBkx978mzET+BwAAgMqIuf9AmElN8r/+v8//1//X/9f/L9//le7/x0+61f/fGP3/7vT/e9D/1//X/9f/p68u7fP/S/Wl/x9z/2vDTGqS/wEAAKAOYu6/L8xE/gcAAIDKiLn/dWEm8j8AAABURsz9rw8zqUn+1//X/9f/1//X/y/fv8//H076/93p//eg/6//r/+v/09fDVr/P+b+N4SZ1CT/AwAAQB3E3P/GMBP5HwAAACoj5v43hZnI/wAAAFAZMfe/OcykJvlf/1//X/9f/1//v3z/+v/DSf+/O/3/HvT/9f/1//X/6atB6//H3P+rYSY1yf8AAAAwlCbXt3nM/fd33lj+BwAAgMqIuf8tYSbyPwAAAFRGzP1vDTOpSf7X/9f/1//X/9f/L9+//v9w0v/vbsj6/z+/Jlyu/1/Q/x/s419v/3+s4+vL0v//3mr9/6VNnbfX/+dyGLT+f8z9bwszqUn+BwAAgDqIuf/tYSbyPwAAAFRGzP3vCDOR/wEAAKAyYu7/tTCTmuR//f/mcSy3l/X/q9r/H9H/H7z+/99+J8v0//X/+07/v7sh6//7/P8O+v+Dffw+/1//n5UGrf8fc/87w0xqkv8BAACgDmLufyDMRP4HAACAyoi5/8EwE/kfAAAAKiPm/neFmdQk/+v/+/z/evT/ff5/Nnj9f5//33JW9f/7R/+/O/3/HvT/9f8Hrf//n/r/DLdB6//H3P9QmElN8j8AAADUQcz97w4zkf8BAACgMmLu//UwE/kfAAAAKiPm/veEmdQk/+v/D0v/f2pI+/+P6v9fxv7/TdcU2+n/6/+zTP+/O/3/HvT/9f8Hrf/v8/8ZcoPW/4+5/71hJmvP/5Nr3hIAAAB4XsTc/xthJjX5+38AAACog5j7fzPMRP4HAACAyoi5/7fCTGqS//X/h6X/7/P/M/1/n//f8Xj0//X/y1y5/n9859H/1//X/4/0//X/9f/pNGj9/5j7fzvMpCb5HwAAAOog5v73hZnI/wAAADAUyv6f7E4x9x8MM5H/AQAAoDJi7j8UZlKT/K//v4b+/6be96f/3378+v/l62Nd/f8/2f4v3/nm2w/t1P/X/9f/X5cr+vn/zRe/z//X/9f/T/T/9f/1/+k0aP3/mPsPh5nUJP8DAABAHcTc/zthJvI/AAAAVEbM/UfCTOR/AAAAqIyY++fCTGqS//X/ff6//v+A9v+H+PP/4/nQ/2/Xt/5/fNPV/y9V9O/TKrq8/f93L/fE9f/X2/+fKL1U/1//f5iPX/9f/5+VBq3/H3P/fJhJTfI/AAAA1EHI/SNHi7l8hfwPAAAAlRFz/7EwE/kfAAAAKiPm/veHmdQk/+v/6//r/+v/+/z/8v136/83xnz+/6BK/fuf5i8U/f8Og9P/L6f/r/8/zMev/6//z0qD1v+PuX8hzKQm+R8AAADqIOb+D4SZyP8AAABQGTH3fzDMRP4HAACAyoi5/3iYSU3yv/7/8PX/47b6//r/+v81/fx//f+uNtq/1/8P9P/r3f//b/1//X/9f/pj0Pr/MfefCDP5P/bu5MnWur7j+Onkktu3yCKLVGWRTaqyzDJLFsk6+QOyyCabVFkucEDFmYvziKLirAjOAw4giKjgPIATijOoOM8DDiBKXYvu7/fb09Pn9HC6+3l+v9drwRcbmnOgbjV8bt+3Tyf7HwAAAHqQu//CuMX+BwAAgGbk7n9Y3GL/AwAAQDNy9z88bulk/+v/D9P/b1TKnv+/9f2Pov//D/3/bq+v/9f/t0z/P5/+fwH9v+f/6//1/yzV2Pr/3P2PiFs62f8AAADQg9z9j4xb7H8AAABoRu7+i+IW+x8AAACakbv/UXFLJ/t/W/+/Muuz/8+MdxLP/9f/e/6//n+d/l//P+R4+/9LH/zKp//X/+v/g/5/T/3/6d0+X/9Pi8bW/+fuf3Tc0sn+BwAAgB7k7n9M3GL/AwAAQDNy918ct9j/AAAA0Izc/Y+NWzrZ/8t7/v+ZtY9PtP8v+n/9/9oH9P/6f/3/ZHn+/3w99f8X3XH+hffc8M837uf19f/6f8//1/+zXGPr/3P3Py5u6WT/AwAAQA9y9z8+brH/AQAAoBm5+58Qt9j/AAAA0Izc/U+MWzrZ/8vr/yf9/P+i/9f/r31A/6//1/9Plv5/vp76/4O8vv5f/6//1/+zXGPr/3P3Pylu6WT/AwAAQA9y9z85brH/AQAAoBm5+y+JW+x/AAAAaEbu/rNxSyf7X/9/9P3/A/p//X9c/b/+X/9/9PT/8+n/F9D/6//1//p/lmps/X/u/kvjlk72PwAAAPQgd/9T4hb7HwAAAJqRu/+pcYv9DwAAAM3I3f+0uKWT/a//9/x//b/+X/8//Pr6/2nS/8+n/19A/3/Yfv48/b/+X//PZvvs/++f82V7Kf1/7v6nxy2d7H8AAADoQe7+Z8Qt9j8AAAA0I3f/M+MW+x8AAACakbv/WXFLJ/tf/6//1//r/w/c/+/8obdG/z9M/3889P/zjab/Xzk1+GH9/+T7f8//1//r/9libM//z93/7Lilk/0PAAAAPcjd/5y4Zc7+3/dP5gMAAAAnKnf/c+MW3/8HAACAycvqLHf/8+KWTva//l//r//X/3v+//Drz+v/b9z0/vT/46L/n280/f8u9P/6/ym/f/2//p+dxtb/5+5/ftzSyf4HAACAHuTuvyxusf8BAACgGbn7XxC32P8AAADQjNz9L4xbOtn/w/3/xh/X/++N/n/r+9f/D//4WFb/n39F/f/c/v8/Pf+/T/r/+Y6//z+t/9/61z9g/7/+FUf/P+7333j/f2bR5+v/GTK2/j93/+VxSyf7HwAAAHqQu/9FcYv9DwAAAM3I3f/iuMX+BwAAgEn793/caMFy978kbulk/3v+v/5f/z+9/t/z/9ed5PP/Z8fe/5/S/++R/n8+z/9fYLT9/zr9/7jff+P9v+f/cyBj6/9z918Rt3Sy/wEAAKAHV9w3W9v9L53N7H8AAACYos2/dmD7LygNuftfFrfY/wAAANCM3P0vj1s62f/6f/2//l//r/8ffv1x9f+e/79Xk+7/T238rv5f/z9kov3/qcb6/yt3+/wx9P+X6P8ZmS39/80bHz+p/j93/yvilk72PwAAAPQgd/8r4xb7HwAAAJqRu/9VcYv9DwAAAM3I3f/quKWT/X/k/f+Z3V9b/6//1//r//X/+v9lm3T/7/n/+v82+3/P//f8f/1/xzb6/61fD0+q/8/d/5q4pZP9DwAAAD3I3f/auMX+BwAAgGbk7r8ybrH/AQAAoBm5+18Xt3Sy/z3/X/+v/9f/6/+HX1//P036//n0/wvo//X/+n/9P0u15fn/m5xU/5+7/6q4pZP9DwAAAD3I3X913GL/AwAAQDNy978+brH/AQAAoBm5+98Qt3Sy//X/R9v/58f1//r/mf5f/6//Pxbd9v8rQ/8m2mmX/v+2h5z9760f0f/r//X/+n/9P0swiv7/3MZ/Xebuf2Pc0sn+BwAAgB7k7n9T3GL/AwAAQDNy9785brH/AQAAoBm5+98St+xz///DUt/V8dH/e/6//l//r/8ffn39/zR12//vkef/L6D/1//r//X/LNWR9P/3bnxx3+/z/3P3vzVu8f1/AAAAaEbu/rfFLfY/AAAANCN3/9vjFvsfAAAAmpG7/x1xSyf7X/+v/9f/6//1/8Ovf9D+f3U2TP9/PPT/8+n/F9D/6//1//p/lupI+v9N9tv/5+6/Jm7pZP8DAABAD3L3vzNusf8BAACgGbn73xW32P8AAADQjNz9745bOtn/+n/9v/5f/6//H359z/+fJv3/fPr/2Wx27Zw3MNT/nzut/9f/6//1/xzQ2Pr/3P3viVs62f8AAADQg9z918Yt9j8AAAA0I3f/dXGL/Q8AAADNyN3/3rilk/2v/9f/6//1//r/4dfX/0+T/n8+/f8Cnv9/2H7+nP5f/6//Z7Ox9f+5+6+PWzrZ/wAAANCD3P03xC32PwAAADQjd//74hb7HwAAAJqRu//GuKWT/a//1//r//X/R9L/n9X/b6f/Px5H1//P9P/6f/3/Ap7/r//X/7PdcfX/98fX+0X9f+7+98ctnex/AAAA6EHu/pviFvsfAAAAmpG7/wNxi/0PAAAAzcjd/8G4pZP9r//X/+v/9f+e/z/8+vr/afL8//n0/wvo//X/+n/9P0t1XP3/br3/9v+du/9DcUsn+x8AAAB6kLv/5rjF/gcAAIBm5O6/JW6x/wEAAKAZufs/HLd0sv/1//r/rf3/bKb/1//r/9cdQ/+/OtP/L53+fz79/wL6/zb7/7+ZNdT/n9n18/X/jNHY+v/c/R+JWzrZ/wAAANCD3P0fjVvsfwAAAGhG7v6PxS32PwAAADQjd//H45aW9v8Du6dv0+//T2/7RP3/bDa782LP/9f/z3l9/f9o+v/6p6r/Xx79/3z6/wX0/232/57/r//nxIyt/8/d/4m4paX9DwAAAJ3L3f/JuMX+BwAAgGbk7v9U3GL/AwAAQDNy9386bulk/2/p/+/dCM/yj4+//9/+ifr/2aGe/6//X/uA/l//r/+frMP291etxr/T9P/6f/3/YD+/sst/98z0//p//T8Dxtb/5+7/TNzSyf4HAACAHuTuvzVusf8BAACgGbn7b4tb7H8AAABoRu7+z8Ytnez/6T//f/sn6v9n+v8u+v9V/b/+X/8/aCzP/7/ggv+6Xf+v/2+x/59H/6//1/+z3dj6/9z9n4tbOtn/AAAA0IPc/Z+PW+x/AAAAaEbu/i/ELfY/AAAANCN3/xfjlk72/87+/7zZeqG6bqj/j0ZN/7+J/n/r+9f/D//48Px//b/+/+iNpf/3/P+DvX/9v/5/yu9/X/3/v+z8fP0/LRpb/5+7//a4pZP9DwAAAD3I3f+luMX+BwAAgGbk7v9y3GL/AwAAQDNy998Rt3Sy/z3/X/+v/9f/6/+HX1//P036//n0/wvo/w/fz+dXVf3/dJ///7f6f5ZnbP1/7v6vxC1rw+9f//6Af5sAAADAiOTu/2rc0sn3/wEAAKAHufu/FrfY/wAAANCM3P1fj1s62f/6f/2//l//r/8ffn39/zTp/+fT/y/QT/+/OvTBk+7nD+uk338z/b/n/7NEY+v/c/d/I27pZP8DAABA2+5b+23u/m/GLfY/AAAANCN3/7fiFvsfAAAAmpG7/864pZP9r//X/7ff//+f/n/b6+v/9f8t0//nv9GH6f8X6Kf/H3TS/fzU33/1/+dO6//1/4Sx9f+5+++KWzrZ/wAAANCD3P3fjlvsfwAAAGhG7v7vxC32PwAAADQjd/9345ZO9r/+v6/+f2XWY//v+f+t9P+r2/5+9P/6/yHT6f+vPjX0Uc//1//r/6f7/j3/X//PTmPr/3P3371yqsv9DwAAAFP1P//20Lv2+ufevfbb1dn34hb7HwAAAJqRu//7cYv9DwAAAM3I3f+DuKWT/a//76v/7/P5//r/Vvp/z//X/+/FdPr/Yfp//b/+f7rvX/+v/2ensfX/uft/GLdsGn6D/wc9AAAAwMn5u/396bn7fxS3dPL9fwAAAOhB7v4fxy079v+5Pf6qdgAAAGBscvf/JG7p5Pv/+v+R9/+zI+r/48/T/6/T/+v/h15f/z9N+v/5Dtn/n1vR/+v/59D/6//1/2w3tv4/d/9N18+63P8AAADQqC0/o/DTtd+uzn4Wt9j/AAAA0Izc/T+PW+x/AAAAaEbu/l/ELZ3sf/3/yPv/Az3//0z9nuf/d97/X7Y6+Pr6f/1/y/T/83n+/wL6f/2//l//z1Lto/9fG6RH3f/n7v9l3NLJ/gcAAIAe5O7/Vdxi/wMAAEAzcvf/Om6x/wEAAKAZuft/E7d0sv/1/yfQ/19+ejY70v5/D8//1//30f/v8vrt9P//dP7ZW//3/6+7Rv/PhuPs//PHgv5f/6//X6f/1//r/9lubM//z93/27ilk/0PAAAAPcjdf0/cYv8DAABAM3L3/y5ueXD/33JS7woAAABYptz9v49bOvn+v/6/xef/T7P/z3/WJ9D/n51e/59Nce/9v+f/6/938vz/+fT/C+j/9f/6f/0/SzW2/j93/x/ilk72PwAAAPQgd/8f45bc/yv7/ql7AAAAYGRy998bt/j+PwAAADQjd/99cUsn+1//r/8fS/+fPP9/4/M8/3+d/l//vx/6//n0/wvo//X/+n/9P0s1tv4/d/+f4pZO9j8AAAD0IHf//XGL/Q8AAADNyN3/57jF/gcAAIBm5O7/S9zSyf7X/+v/9f/6f/3/8Ovr/6dJ/z+f/n8B/b/+X/+v/2epxtb/5+7/awAAAP//Tx5w3g==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [], {0x10, 0x3}, {0x20, 0x7}}, 0x24, 0x1)

1.115833155s ago: executing program 3 (id=319):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvtap0\x00'}}]}]}, 0x2c}}, 0x0)

904.542261ms ago: executing program 3 (id=320):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000140)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@nobarrier}]}, 0x1, 0x625, &(0x7f0000000800)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001080)=ANY=[@ANYBLOB="000000004c900200000000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000009000000000000000a"])

832.922744ms ago: executing program 0 (id=321):
r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f00000000c0)={0x385200080, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

379.429578ms ago: executing program 3 (id=322):
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0)
syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)

162.699275ms ago: executing program 0 (id=323):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, r1, 0x207, 0x0, 0x3, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x28}}, 0x800)

0s ago: executing program 0 (id=324):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x4f27, 0xf, 0x3, 0xfffffffb, 0x3, 0x2649113e, 0x8, 0x7, 0xa, 0x100, 0x2, 0x800001, 0x1, 0x1, 0x6, 0x7537e112, 0x2, 0x9, 0x6, 0x40000003, 0x89, 0x1002, 0xf28, 0x20001e57, 0xb, 0x6, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]})

kernel console output (not intermixed with test programs):

no interfaces have a carrier
[   53.605959][ T5433] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.618120][ T5433] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK

syzkaller
Warning: Permanently added '10.128.1.132' (ED25519) to the list of known hosts.
syzkaller login: [   76.565314][ T5761] cgroup: Unknown subsys name 'net'
[   76.697813][ T5761] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   78.373935][ T5761] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   80.316048][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   80.330117][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   80.340185][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   80.370115][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   80.380581][ T5775] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   80.388035][ T5775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   80.432212][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   80.443270][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   80.459954][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   80.467555][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   80.481268][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   80.490322][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   80.498319][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   80.505750][ T5775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   80.513393][ T5775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   80.539888][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   80.547395][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   80.555268][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   80.556338][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   80.562667][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   80.570532][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   80.576821][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   80.584219][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   80.597849][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   81.004453][ T5772] chnl_net:caif_netlink_parms(): no params data found
[   81.021088][ T5778] chnl_net:caif_netlink_parms(): no params data found
[   81.152477][ T5782] chnl_net:caif_netlink_parms(): no params data found
[   81.262795][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.270595][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.277863][ T5772] bridge_slave_0: entered allmulticast mode
[   81.285154][ T5772] bridge_slave_0: entered promiscuous mode
[   81.310110][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.317245][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.324868][ T5778] bridge_slave_0: entered allmulticast mode
[   81.331735][ T5778] bridge_slave_0: entered promiscuous mode
[   81.348585][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.355966][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.363350][ T5772] bridge_slave_1: entered allmulticast mode
[   81.370530][ T5772] bridge_slave_1: entered promiscuous mode
[   81.380673][ T5776] chnl_net:caif_netlink_parms(): no params data found
[   81.402789][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.410153][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.417363][ T5778] bridge_slave_1: entered allmulticast mode
[   81.426488][ T5778] bridge_slave_1: entered promiscuous mode
[   81.464774][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.495056][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.502527][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.510158][ T5782] bridge_slave_0: entered allmulticast mode
[   81.517379][ T5782] bridge_slave_0: entered promiscuous mode
[   81.544492][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.565365][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.578694][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.585995][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.593316][ T5782] bridge_slave_1: entered allmulticast mode
[   81.600629][ T5782] bridge_slave_1: entered promiscuous mode
[   81.625515][ T5772] team0: Port device team_slave_0 added
[   81.633572][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.671186][ T5772] team0: Port device team_slave_1 added
[   81.707222][ T5778] team0: Port device team_slave_0 added
[   81.726908][ T5778] team0: Port device team_slave_1 added
[   81.765117][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.779038][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.809533][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.816676][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.844039][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.856447][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.863909][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.871220][ T5776] bridge_slave_0: entered allmulticast mode
[   81.878033][ T5776] bridge_slave_0: entered promiscuous mode
[   81.907201][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.914262][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.940235][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.954750][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.961883][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.988111][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.013710][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.021409][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.028608][ T5776] bridge_slave_1: entered allmulticast mode
[   82.035725][ T5776] bridge_slave_1: entered promiscuous mode
[   82.045835][ T5782] team0: Port device team_slave_0 added
[   82.053700][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.063344][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.089578][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.150129][ T5782] team0: Port device team_slave_1 added
[   82.163080][ T5778] hsr_slave_0: entered promiscuous mode
[   82.169435][ T5778] hsr_slave_1: entered promiscuous mode
[   82.182981][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.235770][ T5772] hsr_slave_0: entered promiscuous mode
[   82.242644][ T5772] hsr_slave_1: entered promiscuous mode
[   82.248729][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   82.256648][ T5772] Cannot create hsr debugfs directory
[   82.264316][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.274872][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.281918][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.307910][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.345574][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.352901][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.379031][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.450884][ T5785] Bluetooth: hci0: command tx timeout
[   82.471267][ T5776] team0: Port device team_slave_0 added
[   82.479494][ T5776] team0: Port device team_slave_1 added
[   82.537466][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.544678][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.570989][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.589247][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.598409][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.624593][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.690200][ T5785] Bluetooth: hci2: command tx timeout
[   82.690219][   T51] Bluetooth: hci3: command tx timeout
[   82.690449][   T51] Bluetooth: hci1: command tx timeout
[   82.714413][ T5782] hsr_slave_0: entered promiscuous mode
[   82.721090][ T5782] hsr_slave_1: entered promiscuous mode
[   82.727132][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   82.734981][ T5782] Cannot create hsr debugfs directory
[   82.837770][ T5776] hsr_slave_0: entered promiscuous mode
[   82.844924][ T5776] hsr_slave_1: entered promiscuous mode
[   82.853571][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   82.861855][ T5776] Cannot create hsr debugfs directory
[   83.026549][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   83.064081][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   83.079509][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   83.123795][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   83.170271][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   83.194319][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   83.204619][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   83.220039][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   83.316893][ T5782] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   83.338893][ T5782] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   83.349869][ T5782] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   83.373975][ T5782] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   83.472758][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   83.492096][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   83.503817][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   83.514096][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   83.606762][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.654308][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.678110][ T5772] 8021q: adding VLAN 0 to HW filter on device team0
[   83.708810][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.719565][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.726966][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.751356][ T5778] 8021q: adding VLAN 0 to HW filter on device team0
[   83.764466][ T2884] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.771666][ T2884] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.798210][ T2884] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.805503][ T2884] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.825740][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.842075][ T5782] 8021q: adding VLAN 0 to HW filter on device team0
[   83.856547][ T2884] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.863715][ T2884] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.929205][ T5776] 8021q: adding VLAN 0 to HW filter on device team0
[   83.944860][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.952062][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.977553][ T2884] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.984745][ T2884] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.023010][ T2884] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.030199][ T2884] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.093810][ T2884] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.101241][ T2884] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.245182][ T5782] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   84.260100][ T5782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   84.451447][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.534879][   T51] Bluetooth: hci0: command tx timeout
[   84.600204][ T5772] veth0_vlan: entered promiscuous mode
[   84.663026][ T5772] veth1_vlan: entered promiscuous mode
[   84.753487][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.765769][ T5772] veth0_macvtap: entered promiscuous mode
[   84.773964][   T51] Bluetooth: hci2: command tx timeout
[   84.774016][ T5786] Bluetooth: hci3: command tx timeout
[   84.785660][   T51] Bluetooth: hci1: command tx timeout
[   84.797997][ T5772] veth1_macvtap: entered promiscuous mode
[   84.863863][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.911335][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.950820][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.971989][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.983246][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.995105][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.004049][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.014225][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.058891][ T5778] veth0_vlan: entered promiscuous mode
[   85.116679][ T5778] veth1_vlan: entered promiscuous mode
[   85.148906][ T5782] veth0_vlan: entered promiscuous mode
[   85.194675][ T5782] veth1_vlan: entered promiscuous mode
[   85.227308][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.227744][ T5776] veth0_vlan: entered promiscuous mode
[   85.245785][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.269198][ T5776] veth1_vlan: entered promiscuous mode
[   85.317290][ T2884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.325083][ T5782] veth0_macvtap: entered promiscuous mode
[   85.331622][ T2884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.348400][ T5782] veth1_macvtap: entered promiscuous mode
[   85.399581][ T5776] veth0_macvtap: entered promiscuous mode
[   85.423714][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.434662][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.456373][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.473381][ T5776] veth1_macvtap: entered promiscuous mode
[   85.492757][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.504383][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.517142][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.532211][ T5778] veth0_macvtap: entered promiscuous mode
[   85.563431][ T5782] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.594618][ T5782] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.605800][ T5782] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.615689][ T5782] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.631260][ T5836] Driver unsupported XDP return value 0 on prog  (id 2) dev N/A, expect packet loss!
[   85.647498][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.669482][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.679930][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.692757][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.704492][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.715949][ T5778] veth1_macvtap: entered promiscuous mode
[   85.749259][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.761772][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.772146][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.782923][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.795494][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.819045][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.828488][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.847774][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.857187][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.517224][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.539563][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.556600][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.568612][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.592199][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.603216][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.613368][ T5786] Bluetooth: hci0: command tx timeout
[   86.627026][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.701637][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.716659][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.725583][ T5786] Bluetooth: hci0: hcon ffff888078f1c000 sent 1 < count 107
[   86.727078][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.745477][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.755547][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.766346][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.778555][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.791506][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.801214][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.810532][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.819271][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.850375][ T5786] Bluetooth: hci1: command tx timeout
[   86.850421][ T5785] Bluetooth: hci3: command tx timeout
[   86.861989][   T51] Bluetooth: hci2: command tx timeout
[   86.894842][ T2896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.906870][ T2896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.976741][ T2916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.985888][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.997174][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.005200][ T2916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.116549][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.130452][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.138344][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.160058][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.298725][ T5847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'.
[   87.396244][ T2916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.430324][ T2916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.676393][ T5853] syz.3.8[5853]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   87.708585][ T5853] loop3: detected capacity change from 0 to 256
[   87.758015][ T5853] exfat: Deprecated parameter 'utf8'
[   87.795281][ T5853] exfat: Deprecated parameter 'utf8'
[   87.808397][ T5853] exfat: Deprecated parameter 'utf8'
[   87.826886][ T5853] exfat: Deprecated parameter 'utf8'
[   87.840499][ T5853] exfat: Deprecated parameter 'namecase'
[   87.925584][ T5853] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[   88.709710][   T51] Bluetooth: hci0: command tx timeout
[   88.933503][   T51] Bluetooth: hci2: command tx timeout
[   88.939699][ T5785] Bluetooth: hci3: command tx timeout
[   88.939713][ T5786] Bluetooth: hci1: command tx timeout
[   89.008667][ T5858] loop0: detected capacity change from 0 to 40427
[   89.039858][ T5858] F2FS-fs (loop0): build fault injection attr: rate: 14, type: 0x7ffff
[   89.120366][ T5858] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0xe4
[   89.138394][ T5858] F2FS-fs (loop0): invalid crc value
[   89.159315][ T5858] F2FS-fs (loop0): Found nat_bits in checkpoint
[   89.241869][ T5863] loop1: detected capacity change from 0 to 32768
[   89.257988][ T5858] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0
[   89.290790][ T5863] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.11 (5863)
[   89.368429][ T5863] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   89.409936][ T5863] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[   89.449899][ T5863] BTRFS info (device loop1): using free space tree
[   89.463002][ T5858] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   89.535127][ T5865] loop3: detected capacity change from 0 to 32768
[   89.666374][ T5863] BTRFS info (device loop1): enabling ssd optimizations
[   89.697381][ T5863] BTRFS info (device loop1): auto enabling async discard
[   90.194668][ T5776] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   90.491501][ T5773] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop1 scanned by udevd (5773)
[   90.541277][ T5875] loop2: detected capacity change from 0 to 32768
[   90.645115][ T5900] loop0: detected capacity change from 0 to 512
[   90.702845][ T5900] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   90.819691][ T5900] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   90.911959][ T5900] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   91.009865][ T5900] EXT4-fs (loop0): 1 truncate cleaned up
[   91.017159][ T5900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   91.346896][ T5911] loop1: detected capacity change from 0 to 512
[   91.402590][ T5911] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   91.467872][ T5911] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.25: bad orphan inode 131083
[   91.533602][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.656189][ T5911] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   91.884965][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.233591][    T9] cfg80211: failed to load regulatory.db
[   92.349891][ T5909] loop3: detected capacity change from 0 to 32768
[   92.422978][ T5913] loop2: detected capacity change from 0 to 32768
[   92.495491][ T5909] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   92.763557][ T5909] XFS (loop3): Ending clean mount
[   92.979807][   T28] audit: type=1800 audit(1779324887.396:2): pid=5909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.24" name="file1" dev="loop3" ino=6150 res=0 errno=0
[   93.130736][ T5939] loop2: detected capacity change from 0 to 2048
[   93.133849][ T5782] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   93.189941][ T5928] loop0: detected capacity change from 0 to 32768
[   93.213820][ T5928] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[   93.239562][ T5939] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.284320][ T5939] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   93.583268][ T5901] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[   93.592246][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.820299][ T5937] loop1: detected capacity change from 0 to 32768
[   93.842542][ T5937] =======================================================
[   93.842542][ T5937] WARNING: The mand mount option has been deprecated and
[   93.842542][ T5937]          and is ignored by this kernel. Remove the mand
[   93.842542][ T5937]          option from the mount to silence this warning.
[   93.842542][ T5937] =======================================================
[   94.139274][ T5937] JBD2: Ignoring recovery information on journal
[   94.327418][ T5937] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   94.598649][ T5956] loop2: detected capacity change from 0 to 64
[   94.749183][ T5776] ocfs2: Unmounting device (7,1) on (node local)
[   95.003711][ T5960] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.40'.
[   95.014827][ T5946] loop3: detected capacity change from 0 to 32768
[   95.023020][ T5960] openvswitch: netlink: Tunnel attr 255 out of range max 16
[   95.107706][ T5946] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   95.335761][ T5946] XFS (loop3): Ending clean mount
[   95.403249][ T5946] XFS (loop3): Quotacheck needed: Please wait.
[   95.515827][ T5980] dummy0: entered promiscuous mode
[   95.536764][ T5946] XFS (loop3): Quotacheck: Done.
[   95.543437][ T5980] dummy0: left promiscuous mode
[   95.875684][ T5782] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   95.888173][ T5984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.49'.
[   95.908197][ T5984] vlan2: entered promiscuous mode
[   95.915193][ T5984] dummy0: entered promiscuous mode
[   96.263295][ T5987] loop0: detected capacity change from 0 to 4096
[   96.285163][ T5987] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[   96.483814][ T5987] ntfs: volume version 3.1.
[   97.121525][ T6005] [U] ø
[   97.186781][ T6010] loop0: detected capacity change from 0 to 512
[   97.233979][ T6008] loop2: detected capacity change from 0 to 4096
[   97.263023][ T6010] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002]
[   97.322601][ T6010] System zones: 1-12
[   97.336822][ T6008] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[   97.360525][ T6010] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.58: Directory hole found for htree index block 0
[   97.403813][ T6008] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[   97.422799][ T6010] EXT4-fs (loop0): Remounting filesystem read-only
[   97.452583][ T6010] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117
[   97.479789][ T6008] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[   97.509856][ T6010] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[   97.518245][ T6008] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[   97.554066][ T6010] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.559861][ T6008] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[   97.656375][ T6008] ntfs: volume version 3.1.
[   97.663667][ T6008] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[   97.678609][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.686312][ T6008] ntfs: (device loop2): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[   97.721928][ T6008] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[   98.067603][ T6013] loop1: detected capacity change from 0 to 32768
[   98.195113][ T6013] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   98.315635][ T6013] XFS (loop1): Ending clean mount
[   98.386892][ T6016] loop3: detected capacity change from 0 to 32768
[   98.424559][   T28] kauditd_printk_skb: 8 callbacks suppressed
[   98.424576][   T28] audit: type=1800 audit(1779324892.846:3): pid=6013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.62" name="file1" dev="loop1" ino=6150 res=0 errno=0
[   98.505432][ T6016] ERROR: (device loop3): dbDiscardAG: -EIO
[   98.505432][ T6016] 
[   98.552505][ T6016] ERROR: (device loop3): remounting filesystem as read-only
[   98.583518][ T5776] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   98.954246][ T6036] loop2: detected capacity change from 0 to 4096
[   99.012300][ T6036] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.235373][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.315368][ T6042] loop3: detected capacity change from 0 to 512
[   99.360380][ T6042] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   99.434311][ T6042] EXT4-fs (loop3): 1 truncate cleaned up
[   99.478923][ T6042] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.697332][ T6048] loop2: detected capacity change from 0 to 64
[   99.763146][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.966549][ T6040] loop1: detected capacity change from 0 to 32768
[  100.077048][ T6040] JBD2: Ignoring recovery information on journal
[  100.283098][ T6040] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  100.535610][ T6040] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048
[  100.579975][ T6040] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  100.640336][ T6040] OCFS2: File system is now read-only.
[  100.650124][ T6040] (syz.1.69,6040,0):ocfs2_search_chain:1761 ERROR: status = -30
[  100.679283][ T6040] (syz.1.69,6040,0):ocfs2_search_chain:1871 ERROR: status = -30
[  100.709966][ T6040] (syz.1.69,6040,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30
[  100.718329][ T6040] (syz.1.69,6040,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[  100.758140][ T6040] (syz.1.69,6040,0):ocfs2_claim_new_inode:2226 ERROR: status = -30
[  100.779728][ T6040] (syz.1.69,6040,0):ocfs2_claim_new_inode:2241 ERROR: status = -30
[  100.810017][ T6040] (syz.1.69,6040,0):ocfs2_mknod_locked:639 ERROR: status = -30
[  100.817661][ T6040] (syz.1.69,6040,0):ocfs2_mknod:385 ERROR: status = -30
[  100.853082][ T6040] (syz.1.69,6040,0):ocfs2_mknod:502 ERROR: status = -30
[  100.871476][ T6040] (syz.1.69,6040,0):ocfs2_create:676 ERROR: status = -30
[  101.221533][ T5776] ocfs2: Unmounting device (7,1) on (node local)
[  101.627330][ T6086] loop1: detected capacity change from 0 to 256
[  101.666564][   T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  101.726535][ T6075] loop3: detected capacity change from 0 to 40427
[  101.747683][ T6075] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[  101.756443][ T6075] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  101.795454][ T6075] F2FS-fs (loop3): Found nat_bits in checkpoint
[  101.890231][   T23] usb 1-1: Using ep0 maxpacket: 16
[  101.926756][   T23] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[  101.956614][   T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  101.984938][   T23] usb 1-1: config 0 has no interface number 0
[  102.003527][ T6075] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  102.015898][   T23] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  102.030492][ T6075] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  102.038272][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.066823][   T23] usb 1-1: Product: syz
[  102.077215][   T23] usb 1-1: Manufacturer: syz
[  102.086278][   T23] usb 1-1: SerialNumber: syz
[  102.119706][   T23] usb 1-1: config 0 descriptor??
[  102.257668][ T5782] syz-executor: attempt to access beyond end of device
[  102.257668][ T5782] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  102.285506][ T5782] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  102.391140][   T23] usb 1-1: Found UVC 0.00 device syz (046d:08f3)
[  102.397857][   T23] usb 1-1: No valid video chain found.
[  102.704747][ T5812] usb 1-1: USB disconnect, device number 2
[  103.032793][ T6095] loop1: detected capacity change from 0 to 32768
[  103.068623][ T6095] 
[  103.068623][ T6095]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  103.068623][ T6095] 
[  103.163456][ T6095] ERROR: (device loop1): dbDiscardAG: -EIO
[  103.163456][ T6095] 
[  103.280460][ T5776] 
[  103.280460][ T5776]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  103.280460][ T5776] 
[  103.321674][ T5776] 
[  103.321674][ T5776]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  103.321674][ T5776] 
[  103.913154][ T6101] loop2: detected capacity change from 0 to 32768
[  104.040351][ T6101] JBD2: Ignoring recovery information on journal
[  104.041831][ T6121] capability: warning: `syz.0.106' uses deprecated v2 capabilities in a way that may be insecure
[  104.229043][ T6101] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  104.504929][ T6101] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048
[  104.562862][ T6101] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  104.566690][ T6113] loop3: detected capacity change from 0 to 32768
[  104.611774][ T6101] OCFS2: File system is now read-only.
[  104.615553][ T6113] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.103 (6113)
[  104.617305][ T6101] (syz.2.97,6101,0):ocfs2_search_chain:1761 ERROR: status = -30
[  104.677522][ T6101] (syz.2.97,6101,0):ocfs2_search_chain:1871 ERROR: status = -30
[  104.694301][ T6101] (syz.2.97,6101,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30
[  104.708593][ T6113] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  104.710220][ T6101] (syz.2.97,6101,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[  104.740607][ T6113] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  104.756198][ T6101] (syz.2.97,6101,0):ocfs2_claim_new_inode:2226 ERROR: status = -30
[  104.769878][ T6113] BTRFS info (device loop3): allowing degraded mounts
[  104.774582][ T6101] (syz.2.97,6101,0):ocfs2_claim_new_inode:2241 ERROR: status = -30
[  104.793255][ T6113] BTRFS info (device loop3): turning on flush-on-commit
[  104.819924][ T6113] BTRFS info (device loop3): max_inline at 0
[  104.829110][ T6101] (syz.2.97,6101,0):ocfs2_mknod_locked:639 ERROR: status = -30
[  104.861243][ T6101] (syz.2.97,6101,0):ocfs2_mknod:385 ERROR: status = -30
[  104.861278][ T6113] BTRFS info (device loop3): setting nodatasum
[  104.868513][ T6101] (syz.2.97,6101,0):ocfs2_mknod:502 ERROR: status = -30
[  104.909986][ T6113] BTRFS info (device loop3): turning on sync discard
[  104.929766][ T6101] (syz.2.97,6101,0):ocfs2_create:676 ERROR: status = -30
[  104.929826][ T6113] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  104.976111][ T6113] BTRFS info (device loop3): trying to use backup root at mount time
[  105.002245][ T6113] BTRFS info (device loop3): using free space tree
[  105.136338][ T5778] ocfs2: Unmounting device (7,2) on (node local)
[  105.226826][ T6113] BTRFS info (device loop3): enabling ssd optimizations
[  105.267011][   T28] audit: type=1326 audit(1779324899.686:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6159 comm="syz.0.118" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b0f9ce59 code=0x7ffc0000
[  105.349783][   T28] audit: type=1326 audit(1779324899.716:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6159 comm="syz.0.118" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b0f9ce59 code=0x7ffc0000
[  105.410611][   T28] audit: type=1326 audit(1779324899.726:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6159 comm="syz.0.118" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc9b0f9ce59 code=0x7ffc0000
[  105.473882][ T6160] loop0: detected capacity change from 0 to 4096
[  105.490229][   T28] audit: type=1326 audit(1779324899.726:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6159 comm="syz.0.118" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc9b0f9cbc2 code=0x7ffc0000
[  105.531215][ T6160] EXT4-fs: Ignoring removed mblk_io_submit option
[  105.609298][   T28] audit: type=1326 audit(1779324899.816:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6159 comm="syz.0.118" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc9b0f5d68e code=0x7ffc0000
[  105.715233][   T28] audit: type=1326 audit(1779324899.876:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6159 comm="syz.0.118" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc9b0f9cc87 code=0x7ffc0000
[  105.814375][   T28] audit: type=1326 audit(1779324899.896:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6159 comm="syz.0.118" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc9b0f5d68e code=0x7ffc0000
[  105.857211][   T28] audit: type=1326 audit(1779324899.896:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6159 comm="syz.0.118" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc9b0f9caeb code=0x7ffc0000
[  105.867661][ T5782] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  105.929721][ T6160] EXT4-fs (loop0): Test dummy encryption mode enabled
[  105.967613][   T28] audit: type=1326 audit(1779324899.946:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6159 comm="syz.0.118" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc9b0f5d68e code=0x7ffc0000
[  105.968417][ T6160] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.991445][    C1] vkms_vblank_simulate: vblank timer overrun
[  106.064045][   T28] audit: type=1326 audit(1779324899.956:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6159 comm="syz.0.118" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc9b0f5d68e code=0x7ffc0000
[  106.329122][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.575078][ T6185] loop2: detected capacity change from 0 to 256
[  106.818881][ T6193] netlink: 20 bytes leftover after parsing attributes in process `syz.1.129'.
[  107.089771][ T6190] loop3: detected capacity change from 0 to 32768
[  107.124160][ T6190] JBD2: Ignoring recovery information on journal
[  107.196907][ T6190] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  107.274795][ T6190] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048
[  107.293324][ T6190] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  107.304365][ T6190] OCFS2: File system is now read-only.
[  107.310044][ T6190] (syz.3.126,6190,0):ocfs2_search_chain:1761 ERROR: status = -30
[  107.319330][ T6190] (syz.3.126,6190,0):ocfs2_search_chain:1871 ERROR: status = -30
[  107.327725][ T6190] (syz.3.126,6190,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30
[  107.337089][ T6190] (syz.3.126,6190,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[  107.345875][ T6190] (syz.3.126,6190,0):ocfs2_claim_new_inode:2226 ERROR: status = -30
[  107.354871][ T6190] (syz.3.126,6190,0):ocfs2_claim_new_inode:2241 ERROR: status = -30
[  107.362995][ T6190] (syz.3.126,6190,0):ocfs2_mknod_locked:639 ERROR: status = -30
[  107.371594][ T6190] (syz.3.126,6190,0):ocfs2_mknod:385 ERROR: status = -30
[  107.378896][ T6190] (syz.3.126,6190,0):ocfs2_mknod:502 ERROR: status = -30
[  107.386880][ T6190] (syz.3.126,6190,0):ocfs2_create:676 ERROR: status = -30
[  107.476386][ T5782] ocfs2: Unmounting device (7,3) on (node local)
[  107.702170][ T6204] loop1: detected capacity change from 0 to 128
[  107.756657][ T6204] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  107.783859][ T6204] hpfs: filesystem error: improperly stopped
[  107.799808][ T6204] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  107.807632][ T6204] hpfs: You really don't want any checks? You are crazy...
[  107.834595][ T6204] hpfs: Code page index out of array
[  107.849822][ T6204] hpfs: code page support is disabled
[  107.857302][ T6204] hpfs: hpfs_map_4sectors(): unaligned read
[  107.884932][ T6204] hpfs: hpfs_map_4sectors(): unaligned read
[  107.905648][ T6204] hpfs: filesystem error: unable to find root dir
[  109.427014][ T6247] loop3: detected capacity change from 0 to 2048
[  109.506617][ T6247] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  109.558684][ T6247] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  109.782249][ T6252] loop2: detected capacity change from 0 to 64
[  110.234510][ T6242] loop1: detected capacity change from 0 to 32768
[  110.276869][ T6242] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.152 (6242)
[  110.279514][ T6250] loop0: detected capacity change from 0 to 32768
[  110.318258][ T6242] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  110.348906][ T6242] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  110.366734][ T6242] BTRFS info (device loop1): using free space tree
[  110.385018][ T6250] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  110.420773][    T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  110.511632][ T6250] XFS (loop0): Ending clean mount
[  110.517544][ T6242] BTRFS info (device loop1): enabling ssd optimizations
[  110.554487][ T6242] BTRFS info (device loop1): auto enabling async discard
[  110.619116][ T5772] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  110.628047][    T9] usb 4-1: Using ep0 maxpacket: 32
[  110.643373][    T9] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  110.670825][    T9] usb 4-1: config 0 has no interface number 0
[  110.702494][    T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  110.732188][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.753024][ T5776] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  110.763680][    T9] usb 4-1: Product: syz
[  110.767885][    T9] usb 4-1: Manufacturer: syz
[  110.781606][    T9] usb 4-1: SerialNumber: syz
[  110.819426][    T9] usb 4-1: config 0 descriptor??
[  110.828225][    T9] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  111.173230][    T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  111.245291][    T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  111.264572][ T6268] loop2: detected capacity change from 0 to 32768
[  111.295892][ T6291] vivid-000: disconnect
[  111.322305][ T6287] vivid-000: reconnect
[  111.477491][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short
[  111.520207][ T6290] sp0: Synchronizing with TNC
[  111.681164][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  111.684785][   T23] usb 4-1: USB disconnect, device number 2
[  111.797036][   T23] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  111.878515][   T23] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  111.931737][   T23] quatech2 4-1:0.51: device disconnected
[  112.664594][ T6298] loop2: detected capacity change from 0 to 32768
[  112.733781][ T6298] JBD2: Ignoring recovery information on journal
[  112.761170][ T6315] loop1: detected capacity change from 0 to 1024
[  112.862939][ T6322] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  112.914039][ T6298] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  113.101099][   T42] hfsplus: b-tree write err: -5, ino 25
[  113.107037][ T6327] loop3: detected capacity change from 0 to 256
[  113.107476][   T42] hfsplus: b-tree write err: -5, ino 4
[  113.130228][   T42] hfsplus: b-tree write err: -5, ino 2
[  113.153930][ T6327] exfat: Deprecated parameter 'utf8'
[  113.265052][ T6327] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf8a64500, utbl_chksum : 0xe619d30d)
[  113.390474][ T5778] ocfs2: Unmounting device (7,2) on (node local)
[  113.512665][ T6333] loop0: detected capacity change from 0 to 64
[  114.161476][ T6354] loop0: detected capacity change from 0 to 512
[  114.199906][ T6354] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  114.260050][ T6356] warning: `syz.1.191' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  114.310280][ T6354] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.190: invalid indirect mapped block 4294967295 (level 0)
[  114.429711][ T6354] EXT4-fs (loop0): Remounting filesystem read-only
[  114.437403][ T6354] EXT4-fs (loop0): 1 orphan inode deleted
[  114.469829][ T6354] EXT4-fs (loop0): 1 truncate cleaned up
[  114.477110][ T6354] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.645439][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.647753][ T6369] loop2: detected capacity change from 0 to 2048
[  114.753568][ T6374] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  114.983642][ T6369] NILFS error (device loop2): nilfs_dotdot: directory #12 missing '.'
[  115.017093][ T6369] Remounting filesystem read-only
[  115.244675][ T6387] loop1: detected capacity change from 0 to 256
[  115.314434][ T6387] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  115.452601][ T6387] exFAT-fs (loop1): error, invalid size(size(0) > aligned(9223372036854777344)
[  115.452601][ T6387] 
[  115.499930][ T6387] exFAT-fs (loop1): Filesystem has been set read-only
[  116.482238][ T6420] futex_wake_op: syz.0.219 tries to shift op by 36; fix this program
[  116.675656][ T6405] loop1: detected capacity change from 0 to 32768
[  116.719736][ T6405] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.212 (6405)
[  116.759468][ T6405] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  116.771983][ T6405] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  116.790650][ T6405] BTRFS info (device loop1): enabling ssd optimizations
[  116.822122][ T6405] BTRFS info (device loop1): not using ssd optimizations
[  116.839759][ T6405] BTRFS info (device loop1): turning off barriers
[  116.846708][ T6405] BTRFS info (device loop1): using free space tree
[  117.000033][ T6445] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) !
[  117.480452][ T5776] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  117.686301][ T6427] loop2: detected capacity change from 0 to 32768
[  117.801115][   T28] kauditd_printk_skb: 12 callbacks suppressed
[  117.801132][   T28] audit: type=1800 audit(1779324912.226:26): pid=6427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.222" name="file1" dev="loop2" ino=7 res=0 errno=0
[  117.877847][ T6463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.228'.
[  117.898417][ T6459] loop0: detected capacity change from 0 to 512
[  117.956246][ T6463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.228'.
[  118.012938][ T6459] EXT4-fs warning (device loop0): ext4_xattr_inode_get:546: inode #11: comm syz.0.230: ea_inode file size=16777216 entry size=6
[  118.160987][ T6459] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.230: iget: bad extra_isize 90 (inode size 256)
[  118.219696][ T6459] EXT4-fs (loop0): Remounting filesystem read-only
[  118.226568][ T6459] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -5)
[  118.280232][ T6459] EXT4-fs (loop0): 1 orphan inode deleted
[  118.339954][ T6459] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.535449][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.892806][ T6487] loop1: detected capacity change from 0 to 8
[  118.964918][ T6487] SQUASHFS error: lzo decompression failed, data probably corrupt
[  119.029835][ T6487] SQUASHFS error: Failed to read block 0x91: -5
[  119.049177][ T6487] SQUASHFS error: Unable to read metadata cache entry [8f]
[  119.057898][ T6487] SQUASHFS error: Unable to read inode 0x7
[  119.371552][ T6500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.246'.
[  119.784819][ T6493] loop0: detected capacity change from 0 to 32768
[  119.829339][ T6493] JBD2: Ignoring recovery information on journal
[  119.940830][ T6493] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  120.196412][ T6487] loop1: detected capacity change from 0 to 32768
[  120.208745][ T6487] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.240 (6487)
[  120.257344][ T5772] ocfs2: Unmounting device (7,0) on (node local)
[  120.281413][ T6487] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  120.307062][ T6487] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  120.322638][  T788] usb 4-1: new low-speed USB device number 3 using dummy_hcd
[  120.349301][ T6487] BTRFS info (device loop1): force zlib compression, level 3
[  120.394884][ T6487] BTRFS info (device loop1): force clearing of disk cache
[  120.410231][ T6487] BTRFS info (device loop1): setting nodatasum
[  120.416473][ T6487] BTRFS info (device loop1): allowing degraded mounts
[  120.469752][ T6487] BTRFS info (device loop1): enabling disk space caching
[  120.477773][ T6487] BTRFS info (device loop1): disk space caching is enabled
[  120.558389][  T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  120.604420][  T788] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  120.664190][  T788] usb 4-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00
[  120.673782][ T6487] BTRFS info (device loop1): auto enabling async discard
[  120.692439][ T6487] BTRFS info (device loop1): rebuilding free space tree
[  120.709832][  T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.744204][  T788] usb 4-1: config 0 descriptor??
[  120.750498][ T6517] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  120.771917][ T6487] BTRFS info (device loop1): disabling free space tree
[  120.780364][ T6487] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  120.793744][ T6487] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  120.890225][ T6487] BTRFS warning (device loop1): can't set the compat_ro:1 feature bit while mounted
[  121.046841][ T5776] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  121.273559][  T788] kye 0003:0458:5017.0001: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  121.300821][  T788] kye 0003:0458:5017.0001: unknown main item tag 0x2
[  121.310505][  T788] kye 0003:0458:5017.0001: unknown main item tag 0x3
[  121.317277][  T788] kye 0003:0458:5017.0001: unknown main item tag 0x0
[  121.338899][  T788] kye 0003:0458:5017.0001: unknown main item tag 0x0
[  121.375967][  T788] kye 0003:0458:5017.0001: unknown main item tag 0x0
[  121.403711][  T788] kye 0003:0458:5017.0001: unknown main item tag 0x0
[  121.427417][  T788] kye 0003:0458:5017.0001: unknown main item tag 0x0
[  121.448285][  T788] kye 0003:0458:5017.0001: unknown main item tag 0x0
[  121.465984][  T788] kye 0003:0458:5017.0001: unknown main item tag 0x0
[  121.527457][  T788] kye 0003:0458:5017.0001: hidraw0: USB HID v0.74 Device [HID 0458:5017] on usb-dummy_hcd.3-1/input0
[  121.596191][  T788] kye 0003:0458:5017.0001: tablet-enabling feature report not found
[  121.625207][  T788] kye 0003:0458:5017.0001: tablet enabling failed
[  121.675051][  T788] usb 4-1: USB disconnect, device number 3
[  121.929278][ T6551] fido_id[6551]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  121.956534][ T6541] loop2: detected capacity change from 0 to 32768
[  122.019105][ T6541] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.257 (6541)
[  122.106155][ T6541] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  122.141196][ T6541] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  122.156813][ T6561] loop1: detected capacity change from 0 to 128
[  122.166841][ T6541] BTRFS info (device loop2): enabling ssd optimizations
[  122.188005][ T6541] BTRFS info (device loop2): not using ssd optimizations
[  122.201372][ T6541] BTRFS info (device loop2): turning off barriers
[  122.211602][ T6561] VFS: Found a Xenix FS (block size = 1024) on device loop1
[  122.225016][ T6541] BTRFS info (device loop2): using free space tree
[  122.470657][ T5776] sysv_free_block: flc_count > flc_size
[  122.511702][ T5776] sysv_free_block: flc_count > flc_size
[  122.542097][ T5776] sysv_free_block: flc_count > flc_size
[  122.547737][ T5776] sysv_free_block: flc_count > flc_size
[  122.565028][ T5776] sysv_free_block: flc_count > flc_size
[  122.585192][ T5776] sysv_free_block: flc_count > flc_size
[  122.609201][ T5776] sysv_free_block: flc_count > flc_size
[  122.630054][ T5776] sysv_free_block: flc_count > flc_size
[  122.635689][ T5776] sysv_free_block: flc_count > flc_size
[  122.659659][ T5776] sysv_free_block: flc_count > flc_size
[  122.681652][ T5776] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  122.779375][ T5778] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  122.859921][ T6587] loop0: detected capacity change from 0 to 512
[  122.874866][ T6587] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  122.968783][ T6587] EXT4-fs (loop0): 1 truncate cleaned up
[  123.002528][ T6587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  123.109216][ T6595] Bluetooth: MGMT ver 1.22
[  123.298305][ T5773] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 10 /dev/loop2 scanned by udevd (5773)
[  123.403247][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.549063][ T6601] loop3: detected capacity change from 0 to 8192
[  123.621126][ T6608] netlink: 72 bytes leftover after parsing attributes in process `syz.2.279'.
[  123.649340][ T6610] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  123.768413][ T6611] use of bytesused == 0 is deprecated and will be removed in the future,
[  123.830704][ T6611] use the actual size instead.
[  124.158031][ T6622] process 'syz.3.284' launched './file0' with NULL argv: empty string added
[  124.283812][   T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  124.380846][  T787] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  124.467788][ T6627] loop3: detected capacity change from 0 to 512
[  124.479801][   T23] usb 2-1: Using ep0 maxpacket: 8
[  124.500241][   T23] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  124.502146][ T6627] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  124.517445][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.536270][ T6627] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  124.545859][ T6627] EXT4-fs (loop3): orphan cleanup on readonly fs
[  124.554922][   T23] usb 2-1: Product: syz
[  124.555306][ T6627] Quota error (device loop3): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6).
[  124.575513][ T6627] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  124.576621][   T23] usb 2-1: Manufacturer: syz
[  124.596191][  T787] usb 1-1: Using ep0 maxpacket: 32
[  124.601855][ T6627] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  124.621904][  T787] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  124.642652][ T6627] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.288: bg 0: block 15: invalid block bitmap
[  124.668200][  T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.676582][   T23] usb 2-1: SerialNumber: syz
[  124.676816][ T6627] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  124.689180][  T787] usb 1-1: Product: syz
[  124.696342][   T23] usb 2-1: config 0 descriptor??
[  124.705639][ T6627] EXT4-fs (loop3): 1 truncate cleaned up
[  124.706539][  T787] usb 1-1: Manufacturer: syz
[  124.715200][ T6627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  124.720988][   T23] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  124.747396][  T787] usb 1-1: SerialNumber: syz
[  124.755325][   T23] pctv452e: pctv452e_power_ctrl: 1
[  124.755325][   T23] 
[  124.769408][  T787] usb 1-1: config 0 descriptor??
[  124.792119][  T787] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  124.804817][ T6627] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  124.809705][   T23] usb 2-1: selecting invalid altsetting 3
[  124.819316][  T787] dvb-usb: bulk message failed: -22 (4/0)
[  124.829789][  T787] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  124.844219][   T23] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  124.844219][   T23] 
[  124.855882][  T787] dvb-usb: bulk message failed: -22 (5/0)
[  124.873650][   T23] dvb-usb: bulk message failed: -22 (5/0)
[  124.884170][  T787] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  124.889448][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.913758][   T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  124.929942][   T23] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600)
[  124.938679][   T23] usb 2-1: media controller created
[  124.944816][  T787] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  124.950836][ T6617] pctv452e: I2C error -22; AA 01  00 00 EA -> 00 00 00 00 00 00 00
[  124.966718][  T787] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  124.967749][ T6634] loop2: detected capacity change from 0 to 128
[  124.975989][  T787] usb 1-1: media controller created
[  124.999387][   T23] dvb-usb: bulk message failed: -22 (8/0)
[  125.010136][   T23] pctv452e: I2C error -22; AA 02  A0 01 14 -> aa 02 31 04 a0 01 14
[  125.050334][   T23] dvb-usb: MAC address reading failed.
[  125.056028][ T6619] dvb-usb: bulk message failed: -22 (7/0)
[  125.075260][ T6619] pctv452e: I2C error -22; AA 03  0A 00 00 -> aa 03 31 03 0a 00 00
[  125.109258][  T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  125.158002][  T787] usb 1-1: selecting invalid altsetting 3
[  125.183537][  T787] ttusb2: set interface to alts=3 failed
[  125.194220][   T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  125.302282][  T787] DVB: Unable to find symbol tda10086_attach()
[  125.313387][  T787] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  125.332251][  T787] dvb-usb: bulk message failed: -22 (4/0)
[  125.339668][  T787] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  125.362711][  T787] dvb-usb: bulk message failed: -22 (5/0)
[  125.368504][  T787] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  125.386171][   T23] DVB: Unable to find symbol stb0899_attach()
[  125.392777][   T23] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600'
[  125.401573][  T787] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  125.419923][  T787] usb 1-1: USB disconnect, device number 3
[  125.601838][  T787] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  125.639804][   T23] rc_core: IR keymap rc-tt-1500 not found
[  125.652125][   T23] Registered IR keymap rc-empty
[  125.671302][   T23] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  125.709202][   T23] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input5
[  125.749132][   T23] dvb-usb: schedule remote query interval to 100 msecs.
[  125.776876][   T23] pctv452e: pctv452e_power_ctrl: 0
[  125.776876][   T23] 
[  125.807667][   T23] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected.
[  125.822839][ T6649] loop1: detected capacity change from 0 to 1024
[  125.847296][   T23] usb 2-1: USB disconnect, device number 2
[  126.055350][   T23] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected.
[  126.365603][ T2916] hfsplus: b-tree write err: -5, ino 25
[  126.372906][ T2916] hfsplus: b-tree write err: -5, ino 4
[  126.378515][ T2916] hfsplus: b-tree write err: -5, ino 2
[  126.603460][ T6666] netlink: 16 bytes leftover after parsing attributes in process `syz.1.303'.
[  126.797961][ T6672] loop1: detected capacity change from 0 to 64
[  127.063211][ T6679] loop0: detected capacity change from 0 to 64
[  127.084650][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.311'.
[  127.148040][ T6680] tipc: Started in network mode
[  127.162250][ T6680] tipc: Node identity ac14140f, cluster identity 4711
[  127.193753][ T6680] tipc: New replicast peer: 172.30.1.0
[  127.244570][ T6680] tipc: Enabled bearer <udp:syz2>, priority 10
[  127.365537][ T6686] loop0: detected capacity change from 0 to 256
[  127.410379][ T6688] ALSA: mixer_oss: invalid OSS volume ''
[  127.439679][   T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  127.486283][ T6686] FAT-fs (loop0): Directory bread(block 64) failed
[  127.514255][ T6686] FAT-fs (loop0): Directory bread(block 65) failed
[  127.536304][ T6686] FAT-fs (loop0): Directory bread(block 66) failed
[  127.557855][ T6686] FAT-fs (loop0): Directory bread(block 67) failed
[  127.567211][ T6686] FAT-fs (loop0): Directory bread(block 68) failed
[  127.577842][ T6686] FAT-fs (loop0): Directory bread(block 69) failed
[  127.602194][ T6686] FAT-fs (loop0): Directory bread(block 70) failed
[  127.609282][ T6686] FAT-fs (loop0): Directory bread(block 71) failed
[  127.622352][ T6686] FAT-fs (loop0): Directory bread(block 72) failed
[  127.633389][ T6686] FAT-fs (loop0): Directory bread(block 73) failed
[  127.650113][   T23] usb 2-1: Using ep0 maxpacket: 8
[  127.697516][ T6696] tipc: Enabled bearer <eth:macvtap0>, priority 10
[  127.710028][   T23] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  127.718355][   T23] usb 2-1: config 179 has no interface number 0
[  127.749689][   T23] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  127.770085][   T23] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  127.814036][   T23] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  127.845260][   T23] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  127.889716][   T23] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  127.903510][   T23] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  127.915729][ T6698] loop3: detected capacity change from 0 to 1024
[  127.922230][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.935758][ T6682] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  127.977693][ T6698] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  128.029810][ T6698] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  128.083294][ T6698] EXT4-fs error (device loop3): ext4_get_journal_inode:5820: inode #32: comm syz.3.320: iget: special inode unallocated
[  128.113755][ T6698] EXT4-fs (loop3): no journal found
[  128.119296][ T6698] EXT4-fs (loop3): can't get journal size
[  128.130956][ T6698] EXT4-fs (loop3): filesystem is read-only
[  128.143902][ T6698] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  128.277261][ T6682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.290598][ T6682] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.355214][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.692120][   T23] tipc: Node number set to 2886997007
[  128.730212][ T6694] loop2: detected capacity change from 0 to 32768
[  128.758989][ T6694] 
[  128.758989][ T6694]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  128.758989][ T6694] 
[  128.776842][  T788] usb 2-1: USB disconnect, device number 3
[  128.776858][    C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  128.776911][    C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  128.800269][    C1] ==================================================================
[  128.808370][    C1] BUG: KASAN: slab-use-after-free in register_lock_class+0x80b/0x8a0
[  128.816632][    C1] Read of size 1 at addr ffff888060084891 by task kworker/u4:7/2896
[  128.824709][    C1] 
[  128.827140][    C1] CPU: 1 PID: 2896 Comm: kworker/u4:7 Not tainted syzkaller #0
[  128.834765][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  128.844829][    C1] Workqueue: bat_events batadv_nc_worker
[  128.850504][    C1] Call Trace:
[  128.853804][    C1]  <IRQ>
[  128.856648][    C1]  dump_stack_lvl+0x18c/0x250
[  128.861320][    C1]  ? __lock_acquire+0x7d40/0x7d40
[  128.866345][    C1]  ? show_regs_print_info+0x20/0x20
[  128.871533][    C1]  ? load_image+0x420/0x420
[  128.876053][    C1]  ? __virt_addr_valid+0x469/0x540
[  128.881187][    C1]  print_report+0xa8/0x210
[  128.885631][    C1]  ? register_lock_class+0x80b/0x8a0
[  128.890945][    C1]  kasan_report+0x117/0x150
[  128.895681][    C1]  ? register_lock_class+0x80b/0x8a0
[  128.900967][    C1]  register_lock_class+0x80b/0x8a0
[  128.906081][    C1]  ? __down_timeout+0x10/0x10
[  128.910752][    C1]  ? is_dynamic_key+0x260/0x260
[  128.915686][    C1]  ? prb_read_valid+0x3d/0x60
[  128.920376][    C1]  __lock_acquire+0x188/0x7d40
[  128.925151][    C1]  ? mark_lock+0x94/0x320
[  128.929500][    C1]  ? __lock_acquire+0x1347/0x7d40
[  128.934901][    C1]  ? vprintk_emit+0x30b/0x610
[  128.939593][    C1]  ? mark_lock+0x94/0x320
[  128.943946][    C1]  ? __lock_acquire+0x1347/0x7d40
[  128.948994][    C1]  ? verify_lock_unused+0x140/0x140
[  128.954202][    C1]  lock_acquire+0x19e/0x420
[  128.958718][    C1]  ? __wake_up+0x10b/0x1a0
[  128.963236][    C1]  ? read_lock_is_recursive+0x20/0x20
[  128.968619][    C1]  _raw_spin_lock_irqsave+0xb4/0x100
[  128.973910][    C1]  ? __wake_up+0x10b/0x1a0
[  128.978344][    C1]  ? _raw_spin_lock+0x40/0x40
[  128.983082][    C1]  __wake_up+0x10b/0x1a0
[  128.987330][    C1]  ? __wake_up_bit+0x210/0x210
[  128.992120][    C1]  __usb_hcd_giveback_urb+0x396/0x520
[  128.997497][    C1]  dummy_timer+0x8de/0x3320
[  129.002004][    C1]  ? mark_lock+0x94/0x320
[  129.006334][    C1]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  129.012307][    C1]  ? lock_chain_count+0x20/0x20
[  129.017159][    C1]  ? dummy_free_streams+0x530/0x530
[  129.022358][    C1]  __hrtimer_run_queues+0x520/0xc40
[  129.027550][    C1]  ? ktime_get_update_offsets_now+0x99/0x3f0
[  129.033526][    C1]  ? dummy_free_streams+0x530/0x530
[  129.038718][    C1]  ? hrtimer_interrupt+0x9c0/0x9c0
[  129.043823][    C1]  ? ktime_get_update_offsets_now+0x3d2/0x3f0
[  129.049898][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  129.055023][    C1]  handle_softirqs+0x280/0x820
[  129.059825][    C1]  ? __irq_exit_rcu+0xd3/0x190
[  129.064679][    C1]  ? do_softirq+0x1a0/0x1a0
[  129.069187][    C1]  __irq_exit_rcu+0xd3/0x190
[  129.073775][    C1]  ? irq_exit_rcu+0x20/0x20
[  129.078273][    C1]  irq_exit_rcu+0x9/0x20
[  129.082507][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  129.088399][    C1]  </IRQ>
[  129.091326][    C1]  <TASK>
[  129.094279][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  129.100296][    C1] RIP: 0010:__local_bh_enable_ip+0x142/0x1c0
[  129.106291][    C1] Code: 8a e8 02 96 34 09 65 66 8b 05 ba 4a b1 7e 66 85 c0 75 54 bf 01 00 00 00 e8 3b 23 0a 00 e8 d6 2e 3b 00 fb 65 8b 05 86 4a b1 7e <85> c0 75 05 e8 05 32 ae ff 48 c7 04 24 0e 36 e0 45 4b c7 04 37 00
[  129.125995][    C1] RSP: 0018:ffffc9000bb3fa20 EFLAGS: 00000282
[  129.132074][    C1] RAX: 0000000080000000 RBX: 0000000000000201 RCX: 3f9a563bb305e800
[  129.140048][    C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1c9860
[  129.148012][    C1] RBP: ffffc9000bb3fab8 R08: ffffffff911c75df R09: 1ffffffff2238ebb
[  129.156062][    C1] R10: dffffc0000000000 R11: fffffbfff2238ebc R12: ffffffff8a4ea631
[  129.164030][    C1] R13: dffffc0000000000 R14: dffffc0000000000 R15: 1ffff92001767f44
[  129.172002][    C1]  ? batadv_nc_purge_paths+0x311/0x3a0
[  129.177462][    C1]  ? _local_bh_enable+0xa0/0xa0
[  129.182306][    C1]  ? do_raw_spin_unlock+0x121/0x230
[  129.187782][    C1]  ? batadv_nc_purge_paths+0x311/0x3a0
[  129.193253][    C1]  ? batadv_nc_purge_paths+0x3a0/0x3a0
[  129.198717][    C1]  batadv_nc_purge_paths+0x311/0x3a0
[  129.204003][    C1]  batadv_nc_worker+0x328/0x610
[  129.208869][    C1]  ? process_scheduled_works+0x96f/0x15d0
[  129.214687][    C1]  process_scheduled_works+0xa5d/0x15d0
[  129.220233][    C1]  ? worker_attach_to_pool+0x380/0x380
[  129.225686][    C1]  ? assign_work+0x3d2/0x5d0
[  129.230274][    C1]  worker_thread+0xa55/0xfc0
[  129.234873][    C1]  kthread+0x2fa/0x390
[  129.238994][    C1]  ? pr_cont_work+0x560/0x560
[  129.243665][    C1]  ? kthread_blkcg+0xd0/0xd0
[  129.248250][    C1]  ret_from_fork+0x48/0x80
[  129.252670][    C1]  ? kthread_blkcg+0xd0/0xd0
[  129.257429][    C1]  ret_from_fork_asm+0x11/0x20
[  129.262195][    C1]  </TASK>
[  129.265208][    C1] 
[  129.267522][    C1] Allocated by task 23:
[  129.271662][    C1]  kasan_set_track+0x4e/0x70
[  129.276250][    C1]  __kasan_kmalloc+0x8f/0xa0
[  129.280852][    C1]  xpad_probe+0x41c/0x1ec0
[  129.285264][    C1]  usb_probe_interface+0x5c9/0xb20
[  129.290411][    C1]  really_probe+0x25b/0xb20
[  129.294929][    C1]  __driver_probe_device+0x1ef/0x390
[  129.300234][    C1]  driver_probe_device+0x4f/0x420
[  129.305339][    C1]  __device_attach_driver+0x2ca/0x510
[  129.310721][    C1]  bus_for_each_drv+0x252/0x2e0
[  129.315567][    C1]  __device_attach+0x2c2/0x420
[  129.320324][    C1]  bus_probe_device+0x180/0x260
[  129.325166][    C1]  device_add+0x88e/0xc50
[  129.329503][    C1]  usb_set_configuration+0x1a79/0x20c0
[  129.334974][    C1]  usb_generic_driver_probe+0x8d/0x150
[  129.340442][    C1]  usb_probe_device+0x13d/0x270
[  129.345382][    C1]  really_probe+0x25b/0xb20
[  129.349892][    C1]  __driver_probe_device+0x1ef/0x390
[  129.355209][    C1]  driver_probe_device+0x4f/0x420
[  129.360240][    C1]  __device_attach_driver+0x2ca/0x510
[  129.365612][    C1]  bus_for_each_drv+0x252/0x2e0
[  129.370462][    C1]  __device_attach+0x2c2/0x420
[  129.375216][    C1]  bus_probe_device+0x180/0x260
[  129.380089][    C1]  device_add+0x88e/0xc50
[  129.384411][    C1]  usb_new_device+0xa3c/0x1660
[  129.389165][    C1]  hub_event+0x29bf/0x49f0
[  129.393576][    C1]  process_scheduled_works+0xa5d/0x15d0
[  129.399293][    C1]  worker_thread+0xa55/0xfc0
[  129.403874][    C1]  kthread+0x2fa/0x390
[  129.407947][    C1]  ret_from_fork+0x48/0x80
[  129.412353][    C1]  ret_from_fork_asm+0x11/0x20
[  129.417110][    C1] 
[  129.419427][    C1] Freed by task 788:
[  129.423310][    C1]  kasan_set_track+0x4e/0x70
[  129.427955][    C1]  kasan_save_free_info+0x2e/0x50
[  129.432972][    C1]  ____kasan_slab_free+0x126/0x1e0
[  129.438082][    C1]  slab_free_freelist_hook+0x130/0x1a0
[  129.443541][    C1]  __kmem_cache_free+0xba/0x1e0
[  129.448474][    C1]  xpad_disconnect+0x350/0x480
[  129.453329][    C1]  usb_unbind_interface+0x1f2/0x870
[  129.458524][    C1]  device_release_driver_internal+0x4cb/0x7a0
[  129.464594][    C1]  bus_remove_device+0x342/0x400
[  129.469529][    C1]  device_del+0x522/0x910
[  129.473853][    C1]  usb_disable_device+0x3e9/0x8a0
[  129.478874][    C1]  usb_disconnect+0x34c/0x8a0
[  129.483538][    C1]  hub_event+0x1d0f/0x49f0
[  129.487946][    C1]  process_scheduled_works+0xa5d/0x15d0
[  129.493481][    C1]  worker_thread+0xa55/0xfc0
[  129.498150][    C1]  kthread+0x2fa/0x390
[  129.502210][    C1]  ret_from_fork+0x48/0x80
[  129.506618][    C1]  ret_from_fork_asm+0x11/0x20
[  129.511374][    C1] 
[  129.513691][    C1] The buggy address belongs to the object at ffff888060084800
[  129.513691][    C1]  which belongs to the cache kmalloc-1k of size 1024
[  129.527740][    C1] The buggy address is located 145 bytes inside of
[  129.527740][    C1]  freed 1024-byte region [ffff888060084800, ffff888060084c00)
[  129.541612][    C1] 
[  129.543924][    C1] The buggy address belongs to the physical page:
[  129.550324][    C1] page:ffffea0001802000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x60080
[  129.560460][    C1] head:ffffea0001802000 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  129.569813][    C1] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  129.577781][    C1] page_type: 0xffffffff()
[  129.582102][    C1] raw: 00fff00000000840 ffff888017c41dc0 dead000000000100 dead000000000122
[  129.590688][    C1] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  129.599255][    C1] page dumped because: kasan: bad access detected
[  129.605737][    C1] page_owner tracks the page as allocated
[  129.611445][    C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 49, tgid 49 (kworker/u4:3), ts 93732016232, free_ts 93730386753
[  129.632017][    C1]  post_alloc_hook+0x1c1/0x200
[  129.636789][    C1]  get_page_from_freelist+0x1951/0x19e0
[  129.642326][    C1]  __alloc_pages+0x1f0/0x460
[  129.646904][    C1]  alloc_slab_page+0x5d/0x160
[  129.651601][    C1]  new_slab+0x87/0x2d0
[  129.655696][    C1]  ___slab_alloc+0xc5d/0x12f0
[  129.660376][    C1]  __kmem_cache_alloc_node+0x19e/0x250
[  129.665828][    C1]  __kmalloc+0xa4/0x230
[  129.670007][    C1]  ieee802_11_parse_elems_full+0xb9/0x20c0
[  129.675833][    C1]  ieee80211_ibss_rx_queued_mgmt+0x4b5/0x2c80
[  129.681914][    C1]  ieee80211_iface_work+0x717/0xc70
[  129.687103][    C1]  cfg80211_wiphy_work+0x225/0x260
[  129.692206][    C1]  process_scheduled_works+0xa5d/0x15d0
[  129.697757][    C1]  worker_thread+0xa55/0xfc0
[  129.702388][    C1]  kthread+0x2fa/0x390
[  129.706469][    C1]  ret_from_fork+0x48/0x80
[  129.710898][    C1] page last free stack trace:
[  129.715560][    C1]  free_unref_page_prepare+0x7b2/0x8c0
[  129.721018][    C1]  free_unref_page+0x32/0x2e0
[  129.725691][    C1]  __unfreeze_partials+0x1cf/0x210
[  129.730794][    C1]  put_cpu_partial+0x17c/0x250
[  129.735575][    C1]  __slab_free+0x319/0x400
[  129.740021][    C1]  qlist_free_all+0x75/0xd0
[  129.744535][    C1]  kasan_quarantine_reduce+0x143/0x160
[  129.749998][    C1]  __kasan_slab_alloc+0x22/0x80
[  129.754842][    C1]  slab_post_alloc_hook+0x6e/0x4b0
[  129.759968][    C1]  kmem_cache_alloc+0x11a/0x2d0
[  129.764812][    C1]  __anon_vma_prepare+0x68/0x430
[  129.769755][    C1]  handle_mm_fault+0x401d/0x4c00
[  129.774697][    C1]  do_user_addr_fault+0x730/0x12c0
[  129.779815][    C1]  exc_page_fault+0x64/0x100
[  129.784409][    C1]  asm_exc_page_fault+0x26/0x30
[  129.789257][    C1] 
[  129.791574][    C1] Memory state around the buggy address:
[  129.797190][    C1]  ffff888060084780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  129.805240][    C1]  ffff888060084800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  129.813289][    C1] >ffff888060084880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  129.821337][    C1]                          ^
[  129.825934][    C1]  ffff888060084900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  129.833986][    C1]  ffff888060084980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  129.842138][    C1] ==================================================================
[  129.850191][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  129.857373][    C1] CPU: 1 PID: 2896 Comm: kworker/u4:7 Not tainted syzkaller #0
[  129.864930][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  129.874976][    C1] Workqueue: bat_events batadv_nc_worker
[  129.880612][    C1] Call Trace:
[  129.883889][    C1]  <IRQ>
[  129.886734][    C1]  dump_stack_lvl+0x18c/0x250
[  129.891437][    C1]  ? show_regs_print_info+0x20/0x20
[  129.896810][    C1]  ? load_image+0x420/0x420
[  129.901308][    C1]  panic+0x2dc/0x730
[  129.905197][    C1]  ? bpf_jit_dump+0xd0/0xd0
[  129.909698][    C1]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  129.915582][    C1]  ? _raw_spin_unlock+0x40/0x40
[  129.920433][    C1]  ? print_memory_metadata+0x314/0x400
[  129.925883][    C1]  ? register_lock_class+0x80b/0x8a0
[  129.931167][    C1]  check_panic_on_warn+0x84/0xa0
[  129.936104][    C1]  ? register_lock_class+0x80b/0x8a0
[  129.941379][    C1]  end_report+0x6f/0x130
[  129.945613][    C1]  kasan_report+0x128/0x150
[  129.950194][    C1]  ? register_lock_class+0x80b/0x8a0
[  129.955558][    C1]  register_lock_class+0x80b/0x8a0
[  129.960758][    C1]  ? __down_timeout+0x10/0x10
[  129.965422][    C1]  ? is_dynamic_key+0x260/0x260
[  129.970271][    C1]  ? prb_read_valid+0x3d/0x60
[  129.974957][    C1]  __lock_acquire+0x188/0x7d40
[  129.979812][    C1]  ? mark_lock+0x94/0x320
[  129.984179][    C1]  ? __lock_acquire+0x1347/0x7d40
[  129.989195][    C1]  ? vprintk_emit+0x30b/0x610
[  129.993866][    C1]  ? mark_lock+0x94/0x320
[  129.998212][    C1]  ? __lock_acquire+0x1347/0x7d40
[  130.003249][    C1]  ? verify_lock_unused+0x140/0x140
[  130.008457][    C1]  lock_acquire+0x19e/0x420
[  130.012952][    C1]  ? __wake_up+0x10b/0x1a0
[  130.017361][    C1]  ? read_lock_is_recursive+0x20/0x20
[  130.022739][    C1]  _raw_spin_lock_irqsave+0xb4/0x100
[  130.028106][    C1]  ? __wake_up+0x10b/0x1a0
[  130.032514][    C1]  ? _raw_spin_lock+0x40/0x40
[  130.037184][    C1]  __wake_up+0x10b/0x1a0
[  130.041419][    C1]  ? __wake_up_bit+0x210/0x210
[  130.046178][    C1]  __usb_hcd_giveback_urb+0x396/0x520
[  130.051557][    C1]  dummy_timer+0x8de/0x3320
[  130.056081][    C1]  ? mark_lock+0x94/0x320
[  130.060409][    C1]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  130.066380][    C1]  ? lock_chain_count+0x20/0x20
[  130.071232][    C1]  ? dummy_free_streams+0x530/0x530
[  130.076426][    C1]  __hrtimer_run_queues+0x520/0xc40
[  130.081615][    C1]  ? ktime_get_update_offsets_now+0x99/0x3f0
[  130.087586][    C1]  ? dummy_free_streams+0x530/0x530
[  130.092777][    C1]  ? hrtimer_interrupt+0x9c0/0x9c0
[  130.097894][    C1]  ? ktime_get_update_offsets_now+0x3d2/0x3f0
[  130.103960][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  130.109063][    C1]  handle_softirqs+0x280/0x820
[  130.113819][    C1]  ? __irq_exit_rcu+0xd3/0x190
[  130.118661][    C1]  ? do_softirq+0x1a0/0x1a0
[  130.123154][    C1]  __irq_exit_rcu+0xd3/0x190
[  130.127735][    C1]  ? irq_exit_rcu+0x20/0x20
[  130.132228][    C1]  irq_exit_rcu+0x9/0x20
[  130.136462][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  130.142091][    C1]  </IRQ>
[  130.145014][    C1]  <TASK>
[  130.147939][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  130.153917][    C1] RIP: 0010:__local_bh_enable_ip+0x142/0x1c0
[  130.159937][    C1] Code: 8a e8 02 96 34 09 65 66 8b 05 ba 4a b1 7e 66 85 c0 75 54 bf 01 00 00 00 e8 3b 23 0a 00 e8 d6 2e 3b 00 fb 65 8b 05 86 4a b1 7e <85> c0 75 05 e8 05 32 ae ff 48 c7 04 24 0e 36 e0 45 4b c7 04 37 00
[  130.179706][    C1] RSP: 0018:ffffc9000bb3fa20 EFLAGS: 00000282
[  130.185784][    C1] RAX: 0000000080000000 RBX: 0000000000000201 RCX: 3f9a563bb305e800
[  130.193924][    C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1c9860
[  130.201885][    C1] RBP: ffffc9000bb3fab8 R08: ffffffff911c75df R09: 1ffffffff2238ebb
[  130.209851][    C1] R10: dffffc0000000000 R11: fffffbfff2238ebc R12: ffffffff8a4ea631
[  130.217812][    C1] R13: dffffc0000000000 R14: dffffc0000000000 R15: 1ffff92001767f44
[  130.225785][    C1]  ? batadv_nc_purge_paths+0x311/0x3a0
[  130.231244][    C1]  ? _local_bh_enable+0xa0/0xa0
[  130.236284][    C1]  ? do_raw_spin_unlock+0x121/0x230
[  130.241499][    C1]  ? batadv_nc_purge_paths+0x311/0x3a0
[  130.246962][    C1]  ? batadv_nc_purge_paths+0x3a0/0x3a0
[  130.252453][    C1]  batadv_nc_purge_paths+0x311/0x3a0
[  130.257768][    C1]  batadv_nc_worker+0x328/0x610
[  130.262634][    C1]  ? process_scheduled_works+0x96f/0x15d0
[  130.268357][    C1]  process_scheduled_works+0xa5d/0x15d0
[  130.273949][    C1]  ? worker_attach_to_pool+0x380/0x380
[  130.279431][    C1]  ? assign_work+0x3d2/0x5d0
[  130.284019][    C1]  worker_thread+0xa55/0xfc0
[  130.288613][    C1]  kthread+0x2fa/0x390
[  130.292740][    C1]  ? pr_cont_work+0x560/0x560
[  130.297456][    C1]  ? kthread_blkcg+0xd0/0xd0
[  130.302124][    C1]  ret_from_fork+0x48/0x80
[  130.306567][    C1]  ? kthread_blkcg+0xd0/0xd0
[  130.311155][    C1]  ret_from_fork_asm+0x11/0x20
[  130.315919][    C1]  </TASK>
[  131.443296][    C1] Shutting down cpus with NMI
[  131.448604][    C1] Kernel Offset: disabled
[  131.452963][    C1] Rebooting in 86400 seconds..