last executing test programs:

9.570491247s ago: executing program 0 (id=1433):
syz_mount_image$cramfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x146, &(0x7f0000000ac0)="$eJzs0E9LInEYwPHvb2dcl13ddVkX3MO6C3vYITHHEbt10EgSsoHCSyfBJgr8EwnhsYJuHXoBHiqhk3iIjh3KulgKYa9D6BB0LIaxwqhL59/nMsz3eXgYZnK8q+EDBcdEubiyalUq1sLfWTOTmjs8Ov5qdzfwaWju7J8kYMl+qtDfADufeWFxuWCN5ssF+72fAA1IfnG6jrP72W5+p0UHTfsHrZ9OM15pMXANPpWSypP7Pfhv3/v+fO8WqNZCzcbFTKedDo8c/FbYSof+/BDDPWhtG6lfdU9AIWud75MUAriOtMNXkWaj1+1kps2M2Y0ZxlhMj+p6vGdedtLx9R3UKc8azL+495FAUM3CpoCaePyz/VPhBVq7d2bxm9sP3JR8IKq1tyf5XMBVz/l9H1A0BJIkSZIkSZIkSZL0Tg8BAAD//+y5ZtQ=")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

9.418957563s ago: executing program 0 (id=1435):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000540)="2a078e4a32626a43ca63e5792e6285c31a3f19", 0x13}], 0x1)

8.387041583s ago: executing program 2 (id=1444):
unshare(0x22060600)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e22, @multicast2}, 0x10)

8.255505693s ago: executing program 2 (id=1445):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4)

8.254952852s ago: executing program 4 (id=1447):
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$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")
chdir(&(0x7f00000001c0)='./file0\x00')
statx(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0xffff4a9c0080ffff, &(0x7f0000000400))

8.152435485s ago: executing program 3 (id=1449):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0)
fcntl$setstatus(r0, 0x4, 0x2800)

8.076178854s ago: executing program 2 (id=1450):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x93, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x7, {0x7, 0x0, "c827831962"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

8.071723911s ago: executing program 4 (id=1451):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000001c0)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

8.007666783s ago: executing program 3 (id=1453):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0)
recvmmsg(r0, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000a80)=""/4114, 0x1012}, {&(0x7f00000003c0)=""/138, 0x8a}, {&(0x7f00000023c0)=""/235, 0xeb}, {&(0x7f0000000480)=""/137, 0x89}], 0x4}}], 0x1, 0x0, 0x0)

7.84309606s ago: executing program 3 (id=1456):
syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000009840)='./file1\x00', 0x0, &(0x7f0000000000)={[{@pqnoenforce}, {@noquota}, {@nouuid}, {@usrquota}, {@uquota}, {@prjquota}, {@noikeep}]}, 0x1, 0x985b, &(0x7f000001c900)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x85002, 0x1db)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="1093c17d373764ffbd742a272b54744919b6b6511a155ca17ca937dcffd8591c6c22a8bd7dd8c75894eed2d36c58fd6e083c4c9368734a361ae329e1ec3dce36c51de78d3fa6b61765860c239513acbdeee34c854c09d97f86703e51a1e181a97d6e5cc195f960e516d1a9bea481777877132b4ffc6c54f7ea7aaec474d909f1457f27b698cd7b055227e01f1bc2c59217ea2588f67dc4f2e26929503ae5f4ca77de98552c71d172e3b4b2f0d897343c529b6fda28b3c0990971f0f396d280a40651b5988b330d7bc07d6716cac3d471f595aa6190745508c3ff389747d204fd60f1638150a90a834cab8477a91530444dfc49bd41b3059b84c5c74357373fd1d493259524cb090df7a943352d5d9b602b040aab24cbb2a235c009753eb14c94de417b03855c37af8cbf88f4ecab496f27df821f776952f83a20587e3550c3e02aa0ba9fe4ebc4e2b54dd83d20090590d5318b560bae38dbb7dd6169b6bd977b2dbabb69c5d55986accfe6475eb7e7e0896b4aa727e12996cbc9f6ca7623e1c30ab401a2ec70cf299405d580402a821a7f9c1e6cc2f012a4e095bcf55f0ea66520034ebfa03c36aa213f56d595681d0caa5606443fd44d5bf84c95a7d8d3ff220036fbdba0f55b695ee4465e027276fe4d72feaf2a33425a0e1572c98def8ef36b9e3c6a5caa1b0345c588cdc1e458e7acbc5809ed6f12163de19eaf9ec4177d", 0x200}], 0x1)

7.568110467s ago: executing program 0 (id=1462):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r1, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0)

7.436378887s ago: executing program 0 (id=1465):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d362c6163746976655f6c6f67733d362c6661756c745f696e6a656374696f6e3d303030303030303030303030303030303132363600006c6c6f635f6d08006e6f61636c2c686561702c616c6c6f635f6d6f64653d64656661756c742c6e6f657874656e745f63616368652c636f6d70726573735f63616368652c6a71666d743d7666736f6c642c006c27715578049a57a70544af8735aac0ef19142df79cebff54cc2c2975122bd1a6c9ddce762d"], 0x1, 0x5505, &(0x7f0000002480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
open_by_handle_at(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="080000000100000008"], 0xffa1)

7.162628273s ago: executing program 1 (id=1467):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000001580)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x2}}}}}, 0x28}}, 0x0)

7.017913095s ago: executing program 1 (id=1469):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x8, 0x8, 0x2, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = syz_open_procfs(0x0, &(0x7f0000000340)='fdinfo/3\x00')
read$FUSE(r0, &(0x7f0000001640)={0x2020}, 0x2020)

6.847690793s ago: executing program 1 (id=1471):
creat(&(0x7f0000000340)='./file0\x00', 0x38)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x0, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x500}}]}})

6.779191476s ago: executing program 1 (id=1472):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r1, 0x601, 0x8000000, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x1}]}]}]}, 0x38}}, 0x0)

6.687426931s ago: executing program 1 (id=1473):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000040))

6.524422849s ago: executing program 3 (id=1476):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)

6.523582026s ago: executing program 1 (id=1477):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0x1c1e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x18, &(0x7f0000000040)={0x0, 0x0, 0x5, {0x5, 0x0, "a7ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

6.105796935s ago: executing program 2 (id=1480):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$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")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.stat\x00', 0x26e1, 0x0)

6.105004239s ago: executing program 3 (id=1481):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000001400030073797a5f74756e00000000000000000008000a00", @ANYRES32=r1], 0x3c}}, 0x0)

6.062361445s ago: executing program 4 (id=1482):
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'sit0\x00', 0x100})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000001800000001"], 0x17)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x3, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

5.965107292s ago: executing program 4 (id=1484):
r0 = add_key$keyring(&(0x7f0000001ec0), &(0x7f0000001f00)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000001fc0), &(0x7f0000002000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$search(0xa, r0, &(0x7f0000001f40)='keyring\x00', &(0x7f0000001f80)={'syz', 0x2}, r1)

5.861422575s ago: executing program 0 (id=1486):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1080c, &(0x7f0000000180)=ANY=[], 0x3, 0xa53, &(0x7f0000000bc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0xc0185879, &(0x7f0000000b00)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

5.86072312s ago: executing program 2 (id=1487):
syz_mount_image$ocfs2(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x8008c4, &(0x7f0000000480)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119, @ANYRES32], 0x1, 0x4436, &(0x7f0000004480)="$eJzs3c9rm+cdAPDnfe0sdpZkdpZDBoMJFtjYhrFz2ubAHMeJYyeeR9aE0osi20riVraCLZcecnBvgZ4KPZQeQguFUnwKPvSa/gm99JieA+2hl0Ih1EXSK1vvawmrxrKb8PlA9Oh9fitfvY8eHeQnTlTuL67mFldzheVcef7u6oXc2+XS2lIxxIfkqMenM92Ik9gfndnLV/9/+0IIXy58/Xxra2srVPWGlkaanv/w/cP55rQhzrSp9tu6t4PyRgjh7K55VfWEEF7/IoQohHApyRtP0v4QwulQL7v98L07uQOazZNnxYv5FzOPNkfPT2883mz/2qMQPir94R/3lr79c8/oN387oOEBAAAAAAAAAAAAAAAAAHjJTd6cvfW/4ZHwNAq9G9Hu3+tOJmmL38fOfl5Ptw7Gnw7j5QIAAAAAAAAAAAAAAAAAAMCv0s7v/3PRmRa//59I0rE27bf+0/050j1T/52duDI8kpz/Hu0q/2eS9d2lnjDY4tz37PnvlzLtW5//vnuc/WrMrzHuQIjiodR1HA8NhfBJcvD7uehEXCqvVv5+t7y2vHBg03hppeNfP70/FZ3kQP9O4z+e6b/75///fte7qXp95+DeYq+0dPx72tb79N2oo/hfzrQ7jPizf+n499by+psrjNUXgGr83+/dO/4Tmf67Ff/TIYRcVJ1rLrUCVPcw1fx2+xXS0vE/VstLLZ3Jf2S7+//HTPyvZPo/qvV/PftBREvp+P+mlteXqrFz/w/Ge93/feHq9vP6G+co4l+d/7rP/46k43+8ntnb9JgsB52u/5OZ/rsV/1txMsPTUeodsBHV81v8vTpaSMe/b1f5zve/uKP937VM+8P6/tcYt/H9r7H8/zWqf/+jtXT8+9vW6/T+n8q06/b6P1bb/7Ff6fifqOWl984DtcdO4z+d6b9b8a/tSvoa8d9ZT346Xs//2P6vI+n4/7aeGTfXWK891vZ/0d77/+uZ/o9i/1ed/3rc3VFfFen4n2xb77PFKHzVwef/jUy7ar/HujP1bcP2+vuWjv+ptvVq93/f3vGfybTr9v3/l252DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPASGE/SgRDFQ6nrOB4aCuFycn0unIjmCgv5uVJ5/q3VECaS/Fw4E90rlecKpfzicnmhmC+USuX5EK4k5WdDX7RaKlfyS4UHV7f76o/uFwsrlblioRJCmEzy/xhONfqaW6wsFR6EEK5tl/0uLq88uF9Yzi8srvx7eHh4OExtz2EwKr5TKS5X6qPXS0OY3m47EDVNrlZ8fXsuJ6M3y2sry4VSLf9GU5tSeb5Qamozk5R9EAajysra8nyhUsyXyvca4x2lsSSdmLr52s0bI7vK70T1dPxwpwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAL/R09F8fhhB661dxCCEXJU+i5F/Kk2fFi/kXM482R89PbzzefN6qDgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8zA4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV26RilgSAKA/CbAdHSY1gtu53tiiJauCJ4Aj2Gh9GjeAnvYJEibYoQSGYh7E6xTVJ9X/Ngfmbeg3kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMByj2/D+2vbRaS42l5G/H7+/R/nz6V+31UuX5xnRk7n6WW4f2i78u9plt+Wo1Wf9+lm/fURlTr6mezJdJ8O5n2mqvtWMc439r2OlJuI6Et+k3JummVvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADs2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAsAAAAACPO3jqJvAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//6KfHYs=")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001000)='pids.current\x00', 0x275a, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))

5.860459873s ago: executing program 4 (id=1488):
r0 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x8, &(0x7f0000000100)="5fa80000000000000400", 0x10)

5.506971752s ago: executing program 3 (id=1490):
r0 = eventfd2(0x7, 0x800)
unshare(0x22020600)
poll(&(0x7f0000000140)=[{r0, 0x6002}], 0x1, 0x3)

5.431653857s ago: executing program 4 (id=1491):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400)
ioctl$TUNSETOFFLOAD(r0, 0x4004743b, 0xf0ff1f00000000)

5.172105474s ago: executing program 5 (id=1492):
ioperm(0x0, 0x3, 0x2000007fffffff)
iopl(0x3)
iopl(0x0)

4.906737816s ago: executing program 5 (id=1493):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
read(r0, &(0x7f0000000180)=""/239, 0xef)

4.653379528s ago: executing program 5 (id=1494):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)

4.532262408s ago: executing program 5 (id=1495):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000003000)={0x4}, 0x2)

4.347939309s ago: executing program 5 (id=1496):
syz_mount_image$jfs(&(0x7f0000000a00), &(0x7f0000000080)='./bus\x00', 0xc001, &(0x7f0000001900)=ANY=[@ANYBLOB='discard=0x0000000000000004,usrquota,iocharset=ascii,errors=remount-ro,nointegrity,noquota,nodiscard\x00noquota,nointegresize,discard=0x000000000000043a,iocharset=macromanian,nointegridiscard,dont_appraise,defcontext=sysadm_u,subj_type={[,smackfsdef=nointeerity,func=CREDS_CLECK,audit,fowne2=\x00\x00\x00\x00\x00', @ANYRESOCT=0x0, @ANYBLOB="2c6d65b47d7189617375"], 0x1, 0x61f7, &(0x7f0000002240)="$eJzs3c1vHGcdB/DfvvolNLV6qEqEkJuWl1KaxEkJgQJtD3Dg0gPKFSVy3SoiBZQElFYWceULB078BSAkjghxRBz4A3rgyo0TJyLZSKCeGDT28ySzk92uU8c7a8/nIzkzv3lmvc/4u7Mv2Zl5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACI73/vB2udiLj287RgJeIz0YvoRiyV9WpELK2u5PX7EfFc7DXHsxExWIgob7/3z9MRr0bER6cjdnY318vFFw/Yj+/+8e+/++Gpt/72h8H5//7pTu+1Sevdvfur//z53uG2GQAAANqmKIqikz7mn0mf77tNdwoAmIn8+l8kefmJr3/9z7f+Mk/9UavVarV6BnVVMd69ahERW9XblO8ZfB0PAMfMVnzcdBdokPxbrR8Rp5ruBDDXOk13gCOxs7u53kn5dqqvB6v77flYkJH8tzoPzu+YNJ2mfozJrB5f29GLZyb0Z2lGfZgnOf9uPf9r++3DtN5R5z8rk/If7p/61Do5/149/5qTk393bP5tlfPvP1b+PfkDAAAAAMAcy///v9Lw978Lh9+UA/mk739XZ9QHAAAAAAAAAHjSDjv+3wPG/wMAAIC5VX5WL/3m9MNlk67FVi6/2ol4qrY+0DLpZJnlpvsBAAAAAAAAAAAAAG3S3z+G92onYhARTy0vF0VR/lTV68d12Nsfd23ffmizpp/kAQBg30ena+fydyIWI+JqutbfYHl5uSgWl5aL5WJpIb+fHS4sFkuVz7V5Wi5bGB7gDXF/WJS/bLFyu6ppn5entdd/X3lfw6J3gI49IYP015zQ3FDYAJDsvxrteEU6YYri6UlvPmCE/f8EWomVph9XzL+mH6YAAADA0SuKouiky3mfSd/5d5vuFAAwE/n1v/69wKHq7oT2iCfz+9VqtVqtVn+quqoY7161iIit6m3K9wyG4weAY2YrPm66CzRI/q3Wj4jnmu4EMNc6TXeAI7Gzu7neSfl2qq8HaXz3fCzISP5bnb3b5duPm05TP8ZkVo+v7ejFMxP68+yM+jBPcv7dev7X9tuHab2jzn9WJuU/3Dtlrn1y/r16/jUnJ//u2PzbKufff6z8e/IHAAAAAIA5lv//f8X3v3mTAQAAAAAAAODY2dndXM/nvebv/z83Zj3nf55MOf/O4+a/lOblf6zl/Lu1/L9cW69Xmb//5sP9/9+7m+u/v/Ovz+bpQfNfyDOd9MjqpEdEJ91Tp5+mh9m6R20PesPyngadbq+fjvkpBu/EjbgZG3FhZN1u+ns8bF8baS97OhhpvzjS3n+k/dJI+yBdd6BYyu3nYj1+Ejfj7b32sm1hyvYvTmkvprTn/Hue/1sp59+v/JT5L6f2Tm1auv9h95H9vjoddz9v3Pj8Ly8c/eZMtR29B9tWVW7f2Qb6s/c3OTWMn93euHXu7vU7d26tRZqMLL0YafKE5fwHez8LD5//X9hvz8/71f31/ofDx85/XmxHf2L+L1Tmy+19acZ9a0LOf5h+cv5vp/bx+/9xzn/y/v9yA/0BAAAAAAAAAAAAAACAT1IUxd4pom9ExOV0/k9T52YCALOVX/+LJC9Xq9VqtVp98uqqYrzXq0VE/LV6m/I9wy/G/TIAYJ79LyL+0XQnaIz8Wyxf76+cvth0Z4CZuv3+Bz+6fvPmxq3bTfcEAAAAAAAAAPi08vifq5Xxn1+MiJXaeiPjv74Zq4cd/7OfZx4MMPqEB/qeYLs77HUrw40/H3vjc5+bNP732Xh0/O88Jm6vuh0TDKa0D6e0L0xpX3xkyegVHMae6FGR83++Mt55mf+Z2vDrbRj/tT7mfRvk/M9WHs9l/l+qrVfNv/jt3OW/ddAVt6M7kv/5O+/99Pzt9z945cZ719/deHfjx5fW1i5cunz5ypUr59+5cXPjwv6/R9PrOZDzz2NfOw60XXL+OXP5t0vO/wupln+75Py/mGr5t0vOP7/fk3+75PzzZx/5t0vO/6VUy79dcv5fSbX822Vnd3OhzP/lVMu/XfL+/9VUy79dcv6vpFr+7ZLzP5dq+bdLzv98qg+Qv8vDnyA5//wNl/2/XXL+a6mWf7vk/C+mWv7tkvO/lGr5t0vO/9VUy79dcv5fS7X82yXnfznV8m+XnP/XU33A/Kcd9swxkfO/kmr7f7vk/L+Ravm3S87/m6mWf7vk/F9LtfzbJef/rVTLv11y/t9OtfzbJef/nVTLv11y/q+nWv7t8vD6/2bMmDGTZ5p+ZgIAAAAAAAAAAAAA6mZxOHHT2wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/J8dOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWHvXmPkOuv7gZ/Zm9cOIQZCcPI3ZJOYEJwlu77EF/51MSFcGqAUSAL0gu1612bBN7x2CRTJpoESCaOiior0RVtAqI1UVVgVLyiiNC+qXl6V9gV9U1FVQmpUGRRQkdqKZquZ8zyPZ2Zn5+x6x+uz53w+kv3bnTlnzjNnnnN2fmt/5wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ7q43zX62kWVZ80/rr81Z9qLm1xsnNrdue/2NHiEAAACwWv/b+vv5W9INB5exUtsyf/uqf/jGwsLCQvb+4d8b/eLCQrpjIstGN2RZ677o8r99oNG+TPBkNt4Yavt+qGDzwwX3jxTcP1pw/1jB/RsK7h8vuH/RDlhkY/77mNaDbWt9uTnfpdmt2Wjrvm091nqysWFoKP4up6XRWmdh9Fg2l53IZrPpjuXzZRut5b99V3Nbb8vitobatrW1OUN+/MmjcQyNsI+3dWzr6mNGP3xjNvGTH3/y6B+fu3J7r1q4GzoeLx/nfXc3x/npcEs+1ka2Ie2TOM6htnFu7fGaDHeMs9Far/l19zifX+Y4h68Oc011v+bj2VDr6++29tNI+6/10n7aGm77r3uyLLt4ddjdyyzaVjaUbeq4Zejq6zOez8jmYzSn0kuzkRXN07uWMU+bdWZb5zztPibi639XWG9kiTG0v0w//NTYotd9pfM0aj7rpY6V7jk46GOlLHMwzovvtp70Uz3n4Lbw/D9579JzsOfc6TEH0/Num4N3F83BobHh1pjTi9BorXN1Du7oWH64taVGqz53b/85OHXu5Jmp+Y9/4nVzJ48cnz0+e2rXjh3Tu/bs2bdv39SxuROz0/nf17i3y29TNpSOgbvDvovHwGu6lm2fqgtfGdxxON7nONzcteygj8OR7ifXWJsDcvGczo+NR5s7ffzSULbEMdZ6fbav/jjs9bNgpO047PkzpcdxOLKM47C5zJnty3vPMtL2p9cYrtfPgs1tc7D7/Uj3HBz0+5GyzMHm+5HmWP5l+9I/C7aG8T41udL3I8OL5mB6uuHc07wlvd8f39cqveblHc07bhrLzs/Pnn3giSPnzp3dkYWyJl7WNle65+umtueULZqvQyuerwfnXvXUHT1u3xz21fjrmn+NL/laNZfZ/UD/16r10633/uy4dWcWyoCt9f7s9dO8uT9TL9lnfzaX+fTU6t+Lp7607fw7usT5N/b9L+TbSw/15PDoSH78Dqe9M9pxPu58qUZa565Ga9vPTy3vfDwa/qz1+fjWPufjLV3LDvp8PNr95OL5uFH0247V6X49x8M8OTHd/3zcXGbLzpXOyZG+5+N7Qm2E/f/a8K4h9UVtc2epeZu2NTIyGp7XSNxC5zzd1bH8aOjNmtt6Zue1zdP77skfazg9u6vWap5OdC076HmazldLzdNG0W/frk336zke5sWtu/rP0+Yyz+5e/blzY/yy7dw5VjQHR4fHmmMeTZMwP98vbIxz8IHsaHY6O5HNtO4da82nRmtbkw8ubw6OhT9rfa7c0mcO3te17KDnYPo5ttTca4wsfvID0P16jod58fSD/edgc5mH9w72vet94Za0TNt71+7fry31O687unbT9fydV3Ocf723/+9mm8uc2LfSPrP/fro/3HJTj/3UffwudUzNZGuzn7aEcV7Zt/R+ao6nucwX9y9zPh3MsuzCRx9q/b43/PvKn5//3jc6/t2l17/pXPjoQz+6+djfrGT8AKx/L+RlU/6zru1fppbz7/8AAADAuhD7/qFQE/0/AAAAVEbs++P/Ck/0/wAAAFAZse8fCTWpSf+/5eErcy9cyFIyfyGI96fd8Ei+XMy4TofvJxauat7+0Ndmf/qtC8vb9lCWZT975Dd7Lr/lkTiu3EQY5+U3d96+eMULy9r+4ceuLteeX/9yePz4fJY7DXpFcKezLPv2LZ9vbWfiA5da9dlHDrfqey4+9WRzmef359/H9Z97Wb78H4Tw78FjRzrWfy7shx+EOv323vsjrvf1S6/duvfxq9uL6zXufnHraT/9wfxx4+fkfOHJfPm4n5ca/19+7pmvN5d/4tW9x39hqPf4nwmP+7VQ//uV+fLtr0Hz+7jeZ8L44/bieg989Ts9x3/5s/nyZ96SL3c41Lj9+8L3295yZa59fz3RONLxvLK35svF7U9/73da98fHi4/fPf7xQ5c69kf3/Hj2n/LHmepaPt4etxP9Rdf2m4/TPj/j9p/57cMd+7lo+5ff89wrm4/bvf37u5Yb7lq/+xOb/vAzn++5vTieg392puP5HHx3OI7D9p/+YJiP4f7/ufz5ju1Gh9/def6Jy39584WO5xO97Sf59i+/4Xir/vvET3//phfd/OKLdzb3XZZ997354xVt//gfne4Y/1du2956PeL9MaPfvf2lxO2f/djkqdPz5+dm2vZq67Nz3pGPZ8P4xk3N8d4Szq3d3x86fe5Ds2cnpiems2yiuh+hd82+GuqP8nJxpetvfyy8nnd86dub7v3Hz8Xb//nR/PZLb89/br0mLPeFcPvm/PVbaKxy+0/fdVvr+G48m3/fkWMfgK3b/mPfshYMz7/7fUGc72de/qHWfmje1/q5EY/rVY7/+zP543wz7NeF8MnMd992dXvty8fPRrj03vx4X/X+C6e5+Lr+SXi93/mD/PHjuOLz/X54H/OdLZ3nuzg/vnlhqPvxW5/icTGcT7KL+f1xqbi/Lz1/W8/hxc8hyS7e3vr+d9Pj3L6ip7mU+Y/PT52YO3X+ialzs/PnpuY//olDJ0+fP3XuUOuzPA99uGj9q+enTa3z08zsnt3Z9MYsy05n02twwro+429+tbzxn3ns6Mze6XtnZo8dOX/s3GNnZs8ePzo/f3R2Zv7eI8eOzX6saP25mQM7du7ftXfn5PG5mQP79u/ftX9y7tTp5jDyQRXYM/2RyVNnD7VWmT+we/+OBx/cPT158vTM7IG909OT54vWb/1smmyu/RuTZ2dPHDk3d3J2cn7uE7MHduzfs2dn4acBnjxzbH5i6uz5U1Pn52fPTuXPZeJc6+bmz76i9amm+X/N3892a+QfxJe96/496fNZm772qSUfKl+k6wNEr4TPovn7l5zZt5zvY98/GmpSk/4fAAAA6iD2/WOhJvp/AAAAqIzY928INdH/AwAAQGXEvn881KQm/b/8v/z/8vL/+f3y//XK/5/5aJ4rXe/5/5ifl/+vhxuc/1/19geQ/7+z353y/wXk/29ofn5Vhm78+OX/5f9ZrGz5/9j3b8yyWvb/AAAAUAex798UaqL/BwAAgMqIff9NoSb6fwAAAKiM2Pe/KNSkJv2//P+y8v87iwJX1c//u/6//H+2PvP/8cWR/6+NFefvH3+049sK5P/7kv8vIP+/fvP/JRi//L/8P91Gl7znRuX/Y99/c6hJTfp/AAAAqIPY97841ET/DwAAAJUR+/5bQk30/wAAAFAZse/fHGpSk/5f/t/1/+X/5f8rnf9f7fX/2wYj/78+uP5/f/L/Ba45/z8u/78e8/+jgx1/ufP/hcOX/+e6KNv1/2Pf/5JQk5r0/wAAAFAHse9/aaiJ/h8AAAAqI/b9Lws10f8DAABAZcS+/9ZQk5r0//L/8v/y//L/8v+9t198/f/8K/n/cpH/70/+v4Dr/9cr/z/g8Zc7/z/o6/+Pvrl7ffl/eilb/j/2/S8PNalJ/w8AAAB1EPv+20JN9P8AAABQGbHvf0Woif4fAAAAKiP2/VtCTWrS/8v/y//L/8v/y//33n5x/j8n/18u8v/9yf8XkP+X/5f/X17+v8ebX/l/eilb/j/2/beHmtSk/wcAAIA6iH3/HaEm+n8AAACojNj3/79QE/0/AAAAVEbs+7eGmtSk/9/y8JXHv9T6Sv4/k/+X/69B/v/+Mfl/+f9qk//vT/6/gPy//L/8/zKv/7/YSvL/G4oejMooW/4/9v2vDDWpSf8PAAAAdRD7/leFmuj/AQAAoDJi339nqIn+HwAAACoj9v0ToSbrr/9/39A1rOT6/9XK///pXz19Zyb/L/9fsP2K5v/jNJD/rzn5//7k/wvI/8v/y/+vSf6f+ihb/j/2/XeFmqy//h8AAABYQuz77w410f8DAABAZcS+/55QE/0/AAAAVEbs+7eFmtSk/5f/r1b+P5L/l//vt/2K5v8T+f96k//voe0gXSf5/wn5f/n/9Tj+65n/H1/G8x9M/j+++5X/ZzDKlv+Pff+rQ01q0v8DAABAHcS+/95QE/0/AAAAVEbs+18TaqL/BwAAgMqIff99oSY16f/l/+X/5f/l/+X/e29f/n99kv/vb6X5/zHX/5f/l/8vRf7f9f9Zr8qW/499/2tDTWrS/wMAAEAdxL5/e6iJ/h8AAAAqI/7/zfz/ver/AQAAoIpi3z8ZalKT/n8V+f+FYfn/RP6/c/xlzf835P/l/+X/K0/+v791cv1/+f8S5f+bt8v/y//L/3Otypb/j33/60JNatL/AwAAQB3Evv+BUBP9PwAAAFRG7PunQk30/wAAAFAZse+fDjWpSf/v+v+1y/9vqHP+3/X/l5X/vynLMvl/+f91S/6/P/n/AvL/rv9ftfx/lsn/c0OVLf8f+/4doSY16f8BAACgDmLfvzPURP8PAAAAlRH7/l2hJvp/AAAAqIzY9+8ONalJ/y//X7v8f62v/y//7/r/8v/VJ//fn/x/Afl/+f+q5f9d/58brGz5/9j3PxhqUpP+HwAAAOog9v17Qk30/wAAAFAZse/fG2oS+v9e/68bAAAAWF9i378v1KQm//4v/1+R/P9v/V3HtuX/5f/7bX8w+f+N8v+hyv+XS0Xz/92HxTWT/y8g/y//L/8v/89AlS3/H/v+/aEmNen/AQAAoA5i3//6UBP9PwAAAFRG7Pv/f6iJ/h8AAAAqI/b9PxdqUpP+X/6/Ivn/LvL/8v/9tu/6//L/VVbR/P/AVCr/PyT/L/9frvHL/8v/s9j1z//Hr5aX/499/4FQk5r0/wAAAFAHse//+VAT/T8AAABURuz73xBqov8HAACAyoh9/8FQk5r0//L/8v/y//L/1yf//4asWxnz/83JI/9fLfL//VUq/+/6//L/JRu//L/8P4uV7fr/se9/Y6hJTfp/AAAAqIPY9z8UaqL/BwAAgMqIff+bQk30/wAAAFAZse9/ONSkJv2//L/8v/y//L/r//fevvz/+iT/35/8fwH5f/l/+X/5fwaqbPn/2Pe/OdSkJv0/AAAA1EHs+98SaqL/BwAAgMqIff9bQ030/wAAAFAZse9/W6hJTfp/+X/5f/l/+X/5/97bl/9fn+T/+5P/LyD/L/8v/y//z0CVLf8f+/5fCDWpSf8PAAAAdRD7/kdCTfT/AAAAUBmx7397qIn+HwAAACoj9v3vCDWpSf8v/y//L/8v/y//33v78v/rk/x/f/L/BeT/5f/l/+X/Gaiy5f9j3//OUJOa9P8AAABQB7Hv/8VQE/0/AAAAVEbs+98VaqL/BwAAgMqIff8vhZrUpP+X/5f/L1f+f+FC+3ry//L/2aDy/82V5P9rQf6/P/n/Aj3y/xvk/+X/5f/l/7lmZcv/x77/3aEmNen/AQAAoA5i3/+eUBP9PwAAAFRG7PvfG2qi/wcAAIDKiH3/o6EmNen/5f9LkP/P1jz/n55y+fL/WfatC2NZlsn/Z/L/iev/y/+vhPx/f/L/BVz/X/5f/l/+n4EqW/4/9v2PhZrUpP8HAACAOoh9/+OhJvp/AAAAqIzY978v1ET/DwAAAJUR+/73h5rUpP+X/y/O/3dnkXtx/f/O8a8u/1+l6/+PdMyPOuX/x9tezzQv5f/l/9eA/H9/8v8F5P9Dfj4bkv8vYf4/zOaNS6wv/08ZlS3/H/v+D4Sa1KT/BwAAgDqIff8vh5ro/wEAAKAyYt//K6Em+n8AAACojNj3/2qoSU36f/n/Elz/X/6/wvn/zvlRp/y/6/8vJv+/NuT/+5P/LyD/7/r/Zc7/F5D/p4zKlv+Pff+vhZos2fj96D+X8TQBAACAEol9/wdDTWry7/8AAABQB7HvPxRqov8HAACAyoh9/+FQk5r0/zcy/x+VK/8fr6gq/y//v+7y/yPy/zn5/3obXP7/FTdnmfy//L/8v/y//L/8P6tRtvx/7PuPhJrUpP8HAACAOoh9/6+Hmuj/AQAAoDJi33801ET/DwAAAJUR+/6ZUJOa9P+u/+/6/4PK//9M/v9G5/9d/z+Q/6831//vT/6/gPy//L/8v/w/A1W2/H/s+2dDTWrS/wMAAECFpV8Hx77/WKiJ/h8AAAAqI/b9x0NN9P8AAABQGbHv/1CoSU36f/l/+X/X/78R+f+RjuXl/3Py//L/gyD/35/8fwH5f/l/+X/5fwaqbPn/2PfPhZrUpP8HAACAOoh9/4dDTfT/AAAAUBmx7/9IqIn+HwAAACoj9v0nQk1q0v/L/8v/1z3/38iyi67/L//fa/vy/+uT/H9/8v8F5P/l/+X//4+9+3iy6yzzOH7HI0tqNvAHsGDNiiUsKLNhz5adq1ibaHKQTc5gMiabnHNOJuecsQGTczTJhipR7n6eR2rdq3Mk9VHfc97389k8I800fRtrZuqH6luv/p9Jza3/z91/RdzSyf4HAACAHuTuv2/cYv8DAABAM3L33y9usf8BAACgGbn77x+3dLL/9f/6/977/9VW3v/f/z+v/9+j/9f/T2Gtvz9yfl9/1v7/Lne98nL9v/5f/z9I/6//1/9zprn1/7n7HxC3dLL/AQAAoAe5+x8Yt9j/AAAA0Izc/Q+KW+x/AAAAaEbu/ivjlk72f8f9/42nf46k/9f/7/5Gz/3/9fp//f+yef9/mP5/hP5f/6//1/8zqbn1/7n7Hxy3dLL/AQAAoAe5+x8St9j/AAAA0Izc/Q+NW+x/AAAAaEbu/ofFLZ3s/477f+//6//LMvr/o97/P+Pn0f/r/zfR/w/T/4/Q/+v/9f/6fyY1t/4/d//D45ZO9j8AAAD0IHf/I+IW+x8AAACakbv/kXGL/Q8AAADNyN3/qLilk/2v/9f/6/+X0v8f0vv/+n/9/8Jdtzr1fxP0/+v0/yNG+v/VSv8/5Jz7+c0/3nI+/1no//X/rJtb/5+7/9Fxyz1Wq6MX+kMCAAAAs5K7/zFxSyd//w8AAAA9yN1/Im6x/wEAAKAZufuvils62f/6f/2//l//r//f/P31/8t0bv39sbN+vf4/nLX/v/MdrrhPv/2/9/+Hef9f/6//50xz6/9z918dt3Sy/wEAAKAHufsfG7fY/wAAANCM3P2Pi1vsfwAAAGhG7v7Hxy2d7H/9f2v9///v+7rT+v/d2kX/r//X/+v/W3fQ/l7/H7p+/3+nfqn/1//r//X/HMzc+v/c/U+IWzrZ/wAAANCD3P1PjFvsfwAAAGhG7v4nxS32PwAAADQjd/+T45ZO9r/+v7X+f//Xef9f/7/p++v/9f8t0/8P0/+PaOX9/wv8U7Ptfv6gtv359f/6f9bNrf/P3f+UuKWT/Q8AAAA9yN3/1LjF/gcAAIBm5O5/Wtxi/wMAAEAzcvc/PW7pZP/r//X/y+j/8zvo//X/F7//T/r/ZdL/D9P/j2il/79A2+7nl/759f/6f9bNrf/P3f+MuKWT/Q8AAAA9yN3/zLjF/gcAAIBm5O5/Vtxi/wMAAEAzcvc/O27pZP/r//X/y+j/vf+v//f+v/7/3Oj/h+n/R+j/9f/6f/0/k5pb/5+7/5q4pZP9DwAAAD3I3f+cuMX+BwAAgGbk7n9u3GL/AwAAQDNy9z8vbulk/+v/9f/6f/2//n/z99f/L5P+f5j+f4T+X/+v/9f/M6kZ9f+nfdXx1fPjlk72PwAAAPQgd/8L4hb7HwAAAJqRu/+FcYv9DwAAAM3I3f+iuKWT/a//n03/v5vztdX/76xWqwvu/++p/192/79z2j/P+nOp/9f/HwL9/7Al9v8n9P9F/z/vz6//1/+zbkb9/+6vc/e/OG7pZP8DAABAD3L3Xxu32P8AAADQjNz9L4lb7H8AAABoRu7+l8Ytnex//f9s+v9dbfX/3v8/889HT/2/9//X6f8Ph/5/2BL7/5X+v+j/5/359f/6f9bNrf/P3f+yuOnopRf8IwIAAAAzk7v/5XFLJ3//DwAAAD3I3f+KuMX+BwAAgIW6Zu13cve/Mm7pZP/r/6ft/4+e9nv6f/3/mX8+9P/6f/3/xaf/H6b/H6H/1//r//X/TGpu/X/u/lfFLZ3sfwAAAOhB7v7r4hb7HwAAAJqRu//VcYv9DwAAAM3I3f+auKWT/a//9/6//l//r//f/P31/8uk/x+m/x+h/9f/b7f/P3bqv9T/04bz6P9Pnjx54qL3/7n7Xxu3dLL/AQAAoAe5+18Xt9j/AAAA0Izc/a+PW+x/AAAAaEbu/jfELZ3sf/3/xej/92rFWff/+Ud9Wf3/VauV/l//r//X/w/T/w/T/4/Q/+v/vf+v/2dSc3v/P3f/G+OWTvY/AAAA9CB3/5viFvsfAAAAmpG7/81xi/0PAAAAzcjd/5a4pZP9r//3/v+C+n/v/+v/9/08C+v/b13p/w/FIvr/nbN//7n3/1fr//X/A7rr/+91t32/1P/r/1k3t/4/d/9b45ZO9j8AAAD0IHf/2+IW+x8AAACakbv/7XGL/Q8AAADNyN3/jrjpSCf7X/+v/9f/6//1/5u//yG//390tVrp/yewiP5/wNz7f+//6/+HdNf/n0H/r/9n3dz6/9z974xbOtn/AAAA0IPc/e+KW+x/AAAAaEbu/nfHLfY/AAAANCN3/3vilk72v/5f/6//1/833/9fvYj+3/v/E9H/Dzmi/x+j/9f/6//1/xyKbfX/ufvfG7d0sv8BAACgB7n73xe32P8AAADQjNz9749b7H8AAABoRu7+D8Qtje//o3H1//r/8+n/83Pq/9vq/4/Nrv8/vu9fr5P3//X/E9H/D9P/j9D/6//1/9fo/5nS3N7/z93/wbil8f0PAAAAPcnd/6G49R/d2v8AAADQjNz9H45b7H8AAABoRu7+j8Qtnex//b/+3/v/+v/m3//X/3dF/z9M/z9iTv3/3W9Z+3j6/3l//kb6f+//M6m59f+5+z8at3Sy/wEAAKAHufs/FrfY/wAAANCM3P0fj1vsfwAAAGhG7v7r45ZO9r/+X/+v/9f/6//3/hnq/9ug/x92OP3/jv7f+//Vz/9f/G+B/l//P/b1tGlu/X/u/k/ELZ3sfwAAAOhB7v5Pxi32PwAAADQjd/+n4hb7HwAAABbpyIbfy93/6bilk/2v/9f/6//1//r/zd9f/79M+v9h3v8/m9tde/qv9P/n2s/fad+vlvb+/5n//0v/r/9nenPr/3P3fyZu6WT/AwAAQA9y9382brH/AQAAoBm5+z8Xt9j/AAAA0Izc/Z+PWzrZ//p//X8z/f9tH0L/r//X/3dP/z9M/z/C+/9bfT9/6Z9f/6//Z93c+v/c/V+IWzrZ/wAAANCD3P1fjFvsfwAAAGhG7v4vxS32PwAAADRjd/dnXNbh/tf/b63/3/3X1/97/1//r//X/09L/z9M/z9C/6//1//r/5nU3Pr/L+9+1fHVV+KWTvY/AAAA9CB3/1fjFvsfAAAAmpG7/2txi/0PAAAAzcjd//W4pZP9r//3/v8y+v+TJ0+e0P/r//f/PKf6/5v0/xT9/zD9/wj9v/5f/6//Z1Jz6/9z938jbulk/wMAAEAPcvd/M26x/wEAAKAZufu/FbfY/wAAANCM3P3fjls62f/6/xn0/8f1/97/1/+vvP+v/5+I/n+znbj6/xEt9v/Hz/3H33Y/f1Db/vz6f/0/6+bW/+fu/07c0sn+BwAAgB7k7v9u3LK2/284xE8FAAAATCl3//fiFn//DwAAAM3I3f/9uKWT/a//P7z+/7Z/73p5/39ntfnz6//1//p//f/Fpv8fpv8f0WL/fx623c8v/fPr//X/rJtb/5+7/wdxy/7hd+n5/ZQAAADAnOTu/2Hc0snf/wMAAEAPcvffELfY/wAAANCM3P03xi2d7H/9/wze/2+w/z+c9/+P6//1/1P2/5fo/9ug/x+m/x+h/9f/6/8n6v/zT7P+v3dz6/9z9/8obulk/wMAAEAPcvf/OG6x/wEAAKAZuft/ErfY/wAAANCM3P03xS2n7f9NbXcr9P/6/+X2/97/1/97/1//v07/vzP43z3X/v/Y6mD9f9L/6//1/732/97/Z8/c+v/c/T+NW/z9PwAAACzOpWf5/dz9P4tb7H8AAABoRu7+n8ct9j8AAAA0I3f/L+KWmy/Z1kc6VPp//b/+X/+v/9/8/fX/y6T/H+b9/xH6/yn6+cv0/230/6uV/p+Dm1v/n7v/l3GLv/8HAACAZuTu/1XcYv8DAABAM3L3/zpusf8BAACgGbn7fxO3dLL/9f/6/wP2/7tppv5/j/5/j/5/M/3/4dD/D9P/j9D/e/9f/+/9fyY1t/4/d/9v45ZO9j8AAAD0IHf/7+IW+x8AAACakbv/93GL/Q8AAADNyN3/h7ilk/2/tf4//q3W/2+3/7/E+/+79P/6/03fX/+/TPr/Yfr/Efp//b/+X//PpObW/+fu/2Pc0sn+BwAAgB7k7v9T3GL/AwAAQDNy9/85brH/AQAAoBm5+/8St3Sy/73/33f/P8H7/xP1/5ffMT+7/v/U1+n/9+j/9f/nQ/8/TP+/Wf2D0v/r//X/+n8mNbf+P3f/X+OWTvY/AAAA9CB3/9/iFvsfAAAAmpG7/+a4xf4HAACAZuTu/3vc0sn+1//r/+fR/5+i/z/1dfr/Pfp//f/50P8P22b/f+/bj3/bi97/Hxv5APr//Aj6f/2//p9JzK3/z93/j7ilk/0PAAAAPcjd/8+4xf4HAACAZuTu/1fcYv8DAABAM3L3/ztu6WT/j/T/pyo5/f8g/f/+z6//3/znQ/+v/9f/X3z6/2He/x+h//f+v/5f/8+k5tb/5+6/JW7pZP8DAABAD3L33xq32P8AAADQjNz9/4lb7H8AAABoRu7+/8Ytnex/7/8vqf+/TP/fQf9/VP+v/9f/H4j+f5j+f4T+X/+v/9f/M6m59f+5+/8XAAD//zhVUCE=")
r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
fdatasync(r0)

3.396097464s ago: executing program 5 (id=1497):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0202ff000000000100000058000b4824caff0f00000000000025010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200050c10000000010000000000", 0x58}], 0x1)

3.303627812s ago: executing program 2 (id=1498):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280))
socket$netlink(0x10, 0x3, 0xf)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)

0s ago: executing program 0 (id=1499):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x5d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002b00)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000cab000)=0x2)

kernel console output (not intermixed with test programs):

n journal
[  157.380538][ T7566] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  157.624788][ T5230] ocfs2: Unmounting device (7,2) on (node local)
[  158.120741][ T7608] Invalid logical block size (18)
[  158.544847][ T7586] loop4: detected capacity change from 0 to 32768
[  158.616937][ T7586] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  158.846264][ T7597] loop5: detected capacity change from 0 to 32768
[  158.868462][ T7586] XFS (loop4): Ending clean mount
[  158.902612][ T7586] XFS (loop4): Quotacheck needed: Please wait.
[  158.904962][ T7636] loop1: detected capacity change from 0 to 1024
[  158.913724][ T7597] XFS: ikeep mount option is deprecated.
[  158.948617][ T7597] XFS: ikeep mount option is deprecated.
[  158.961718][ T7636] EXT4-fs: Ignoring removed bh option
[  159.046873][ T7586] XFS (loop4): Quotacheck: Done.
[  159.062295][ T7597] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  159.076683][ T7645] loop0: detected capacity change from 0 to 128
[  159.115180][ T7636] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.254282][ T5723] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  159.278167][ T7645] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  159.311892][ T7645] ext4 filesystem being mounted at /122/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  159.400141][ T5224] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.478814][ T5228] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  159.617078][ T7659] loop3: detected capacity change from 0 to 2048
[  159.632731][ T7661] netlink: 6 bytes leftover after parsing attributes in process `syz.1.776'.
[  159.719925][ T7597] XFS (loop5): Ending clean mount
[  159.732738][ T7659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.745996][ T7597] XFS (loop5): Quotacheck needed: Please wait.
[  159.753944][ T7659] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  159.916825][ T5223] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.983716][ T7597] XFS (loop5): Quotacheck: Done.
[  160.125669][ T7675] loop0: detected capacity change from 0 to 1764
[  160.146878][ T7677] loop3: detected capacity change from 0 to 256
[  160.191220][ T5236] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  160.216161][ T7675] iso9660: Corrupted directory entry in block 2 of inode 1920
[  160.483194][ T7683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.787'.
[  160.703651][ T7691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.789'.
[  160.813120][   T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  160.995093][   T25] usb 4-1: Using ep0 maxpacket: 8
[  161.011953][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.042522][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  161.091671][   T25] usb 4-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00
[  161.133907][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.163274][    T8] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  161.164157][   T25] usb 4-1: config 0 descriptor??
[  161.183428][ T5286] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  161.327091][    T8] usb 6-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5
[  161.342988][ T5286] usb 5-1: Using ep0 maxpacket: 8
[  161.352131][ T5286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  161.353007][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.383802][ T5286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  161.414126][    T8] usb 6-1: config 0 descriptor??
[  161.434538][ T5286] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  161.484827][ T5286] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 30
[  161.517632][ T5286] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  161.542943][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.565313][ T7718] loop2: detected capacity change from 0 to 4096
[  161.590718][ T5286] usb 5-1: config 0 descriptor??
[  161.611542][ T7719] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  161.623585][ T7699] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  161.639519][   T25] lenovo 0003:17EF:60A3.0011: item fetching failed at offset 2/5
[  161.699062][   T25] lenovo 0003:17EF:60A3.0011: hid_parse failed
[  161.740848][   T25] lenovo 0003:17EF:60A3.0011: probe with driver lenovo failed with error -22
[  161.865427][    T8] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  161.888228][   T25] usb 5-1: USB disconnect, device number 6
[  161.894855][ T5244] Bluetooth: hci6: Opcode 0x0c03 failed: -71
[  161.932798][    T8] asix 6-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  161.949614][ T5327] usb 4-1: USB disconnect, device number 4
[  161.990472][    T8] asix 6-1:0.0: probe with driver asix failed with error -71
[  162.038753][    T8] usb 6-1: USB disconnect, device number 9
[  162.271243][ T7726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.806'.
[  162.285546][ T7711] loop0: detected capacity change from 0 to 32768
[  162.319597][ T7711] (syz.0.800,7711,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  162.343481][ T7711] (syz.0.800,7711,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  162.420289][ T7711] JBD2: Ignoring recovery information on journal
[  162.476311][ T7711] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  162.613149][    T8] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  162.682870][ T7738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.812'.
[  162.858583][ T5348] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  162.883877][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  162.895342][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  162.905235][    T8] usb 2-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00
[  162.914423][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.917720][ T5228] ocfs2: Unmounting device (7,0) on (node local)
[  162.930609][    T8] usb 2-1: config 0 descriptor??
[  163.003086][ T5327] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  163.033473][ T5348] usb 3-1: Using ep0 maxpacket: 16
[  163.042475][ T5348] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  163.058137][ T5348] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  163.072948][ T5348] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  163.086877][ T5348] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  163.096494][ T5348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.145080][ T5348] usb 3-1: config 0 descriptor??
[  163.198813][ T5327] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  163.210344][ T5327] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  163.221575][ T5327] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  163.234809][ T5327] usb 5-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00
[  163.245011][ T5327] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.256952][ T5327] usb 5-1: config 0 descriptor??
[  163.387352][    T8] elecom 0003:056E:00FE.0012: unknown main item tag 0x0
[  163.395722][    T8] elecom 0003:056E:00FE.0012: unknown main item tag 0x6
[  163.402811][    T8] elecom 0003:056E:00FE.0012: unknown main item tag 0x5
[  163.412648][ T5287] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  163.430533][    T8] elecom 0003:056E:00FE.0012: unknown main item tag 0x4
[  163.444228][    T8] elecom 0003:056E:00FE.0012: unknown main item tag 0x0
[  163.451369][    T8] elecom 0003:056E:00FE.0012: unknown main item tag 0x0
[  163.459534][    T8] elecom 0003:056E:00FE.0012: unknown main item tag 0x0
[  163.473399][    T8] elecom 0003:056E:00FE.0012: unknown main item tag 0x0
[  163.482170][    T8] elecom 0003:056E:00FE.0012: unknown main item tag 0x0
[  163.491031][    T8] elecom 0003:056E:00FE.0012: unknown main item tag 0x0
[  163.499418][    T8] elecom 0003:056E:00FE.0012: unknown global tag 0xd
[  163.506811][    T8] elecom 0003:056E:00FE.0012: item 0 4 1 13 parsing failed
[  163.538422][    T8] elecom 0003:056E:00FE.0012: probe with driver elecom failed with error -22
[  163.578449][ T7754] loop3: detected capacity change from 0 to 1024
[  163.590217][ T7756] netlink: 'syz.0.820': attribute type 21 has an invalid length.
[  163.599004][ T5287] usb 6-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  163.639073][ T5348] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[  163.639609][ T7754] hfsplus: bad catalog entry type
[  163.647020][ T5348] microsoft 0003:045E:07DA.0013: ignoring exceeding usage max
[  163.655389][ T5365] usb 2-1: USB disconnect, device number 8
[  163.663049][ T5287] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.690494][ T5348] microsoft 0003:045E:07DA.0013: unsupported Resolution Multiplier 0
[  163.700921][ T5348] microsoft 0003:045E:07DA.0013: unsupported Resolution Multiplier 0
[  163.709857][ T5348] microsoft 0003:045E:07DA.0013: No inputs registered, leaving
[  163.733358][ T5348] microsoft 0003:045E:07DA.0013: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  163.751307][ T5348] microsoft 0003:045E:07DA.0013: no inputs found
[  163.757780][ T5348] microsoft 0003:045E:07DA.0013: could not initialize ff, continuing anyway
[  163.771278][ T5327] elecom 0003:056E:00FD.0014: unknown main item tag 0x0
[  163.778521][ T5327] elecom 0003:056E:00FD.0014: unknown main item tag 0x0
[  163.786371][ T5327] elecom 0003:056E:00FD.0014: unknown main item tag 0x0
[  163.794209][ T5327] elecom 0003:056E:00FD.0014: unknown main item tag 0x0
[  163.801211][ T5327] elecom 0003:056E:00FD.0014: unknown main item tag 0x0
[  163.814842][ T5287] usb 6-1: config 0 descriptor??
[  163.820400][ T5327] elecom 0003:056E:00FD.0014: hidraw1: USB HID v0.00 Device [HID 056e:00fd] on usb-dummy_hcd.4-1/input0
[  163.919101][   T62] hfsplus: b-tree write err: -5, ino 4
[  163.940931][ T5327] usb 3-1: USB disconnect, device number 6
[  163.960635][ T5365] usb 5-1: USB disconnect, device number 7
[  164.253990][ T5287] gs_usb 6-1:0.0: Configuring for 198 interfaces
[  164.260387][ T5287] gs_usb 6-1:0.0: Driver cannot handle more that 3 CAN interfaces
[  164.280591][ T5287] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -22
[  164.391796][ T7770] loop1: detected capacity change from 0 to 1024
[  164.473954][ T7770] UBIFS error (pid: 7770): cannot open "", error -22
[  164.478786][ T5365] usb 6-1: USB disconnect, device number 10
[  164.926881][ T7791] netlink: 60 bytes leftover after parsing attributes in process `syz.2.835'.
[  164.958984][ T7791] unsupported nlmsg_type 40
[  165.068793][ T7796] netlink: 'syz.0.838': attribute type 142 has an invalid length.
[  165.292297][ T5365] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  165.511076][ T7817] netlink: 4088 bytes leftover after parsing attributes in process `syz.5.847'.
[  165.520631][ T7817] openvswitch: netlink: Actions may not be safe on all matching packets
[  165.623022][ T5365] usb 4-1: Using ep0 maxpacket: 32
[  165.712644][ T7786] loop4: detected capacity change from 0 to 32768
[  165.719404][ T5365] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 251, using maximum allowed: 30
[  165.730274][ T5365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  165.735257][ T7786] XFS: noikeep mount option is deprecated.
[  165.741962][ T5365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  165.757731][ T5365] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 251
[  165.770760][ T5365] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  165.779886][ T5365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.793757][ T7819] vim2m vim2m.0: vidioc_s_fmt queue busy
[  165.801599][ T5365] usb 4-1: config 0 descriptor??
[  165.980849][ T7786] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  166.269073][ T5365] koneplus 0003:1E7D:2D51.0015: unknown main item tag 0x0
[  166.312036][ T5365] koneplus 0003:1E7D:2D51.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0
[  166.314715][ T7786] XFS (loop4): Ending clean mount
[  166.358985][ T7786] XFS (loop4): Quotacheck needed: Please wait.
[  166.440172][ T7786] XFS (loop4): Quotacheck: Done.
[  166.507535][ T5327] usb 4-1: USB disconnect, device number 5
[  166.632654][ T5723] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  166.784897][ T7854] loop5: detected capacity change from 0 to 4096
[  166.864033][ T7856] loop1: detected capacity change from 0 to 1024
[  166.896304][ T7856] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  166.933063][ T7856] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  166.997880][ T7856] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  167.006811][ T7840] loop0: detected capacity change from 0 to 32768
[  167.045155][ T7859] tmpfs: Cannot change global quota limit on remount
[  167.049969][ T7840] JBD2: Ignoring recovery information on journal
[  167.107569][ T7856] EXT4-fs error (device loop1): ext4_get_journal_inode:5762: inode #5: comm syz.1.862: unexpected bad inode w/o EXT4_IGET_BAD
[  167.173145][ T7856] EXT4-fs (loop1): no journal found
[  167.178410][ T7856] EXT4-fs (loop1): can't get journal size
[  167.224398][ T7856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  167.255544][ T7840] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  167.257164][ T7863] mkiss: ax0: crc mode is auto.
[  167.357313][ T7840] (syz.0.853,7840,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #17: directory entry too close to end - offset=32, inode=16945, rec_len=280, name_len=10
[  167.406483][ T7870] netlink: 'syz.5.865': attribute type 29 has an invalid length.
[  167.426454][ T5224] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.438057][ T7870] netlink: 'syz.5.865': attribute type 29 has an invalid length.
[  167.508577][ T5228] ocfs2: Unmounting device (7,0) on (node local)
[  167.824261][ T7876] loop2: detected capacity change from 0 to 32768
[  167.861132][ T7878] loop5: detected capacity change from 0 to 64
[  167.937075][ T7876] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.869 (7876)
[  168.124754][ T7876] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  168.135211][ T7876] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  168.144021][ T7876] BTRFS info (device loop2): using free-space-tree
[  168.753307][ T5287] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  168.780476][ T5230] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  168.959867][ T5287] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  169.003671][ T5287] usb 6-1: config 0 has no interface number 0
[  169.040411][ T5287] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  169.055100][ T5287] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.133643][ T7913] loop3: detected capacity change from 0 to 32768
[  169.140245][ T5287] usb 6-1: Product: syz
[  169.155201][ T5287] usb 6-1: Manufacturer: syz
[  169.180980][ T5287] usb 6-1: SerialNumber: syz
[  169.226597][ T5287] usb 6-1: config 0 descriptor??
[  169.260151][ T7913] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  169.416387][ T7888] loop4: detected capacity change from 0 to 32768
[  169.490201][ T5287] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  169.529333][ T5287] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  169.547916][ T5287] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  169.557034][ T5287] usb 6-1: media controller created
[  169.577144][ T5287] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  169.700791][ T5287] usb 6-1: DVB: registering adapter 1 frontend 0 (E3C EC100 DVB-T)...
[  169.721769][ T5287] dvbdev: dvb_create_media_entity: media entity 'E3C EC100 DVB-T' registered.
[  169.760904][ T7947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.887'.
[  169.785573][ T7888] ERROR: (device loop4): diWrite: ixpxd invalid
[  169.785573][ T7888] 
[  169.850442][ T7953] cgroup: Unexpected value for 'cpuset_v2_mode'
[  169.857709][ T7888] ERROR: (device loop4): remounting filesystem as read-only
[  169.857728][ T5287] DVB: Unable to find symbol mxl5005s_attach()
[  169.865188][ T7888] ERROR: (device loop4): txCommit: 
[  169.865188][ T7888] 
[  169.926443][ T7946] 9pnet: Could not find request transport: f
[  169.940905][ T7913] XFS (loop3): Ending clean mount
[  170.058487][ T5287] usb 6-1: USB disconnect, device number 11
[  170.200367][ T7961] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.893'.
[  170.233117][ T7961] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes.
[  170.296828][ T5223] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  170.604765][ T7972] ubi0: attaching mtd0
[  170.611905][ T7972] ubi0: scanning is finished
[  170.661035][ T7972] ubi0: empty MTD device detected
[  170.717818][ T7978] loop5: detected capacity change from 0 to 512
[  170.937235][ T7978] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.003127][ T7978] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  171.076237][ T7972] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  171.109851][ T7972] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3520 bytes
[  171.143401][ T7978] EXT4-fs: Cannot change journaled quota options when quota turned on
[  171.162847][ T7972] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  171.218138][ T7972] ubi0: VID header offset: 512 (aligned 512), data offset: 576
[  171.248707][ T7972] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  171.273077][ T7972] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 20
[  171.285582][ T5236] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.321796][ T7972] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 335846371
[  171.343474][ T7972] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  171.366324][ T7997] ubi0: background thread "ubi_bgt0d" started, PID 7997
[  171.403252][ T8001] loop3: detected capacity change from 0 to 256
[  171.517091][ T7989] loop0: detected capacity change from 0 to 32768
[  171.622614][ T8001] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f50, chksum : 0xa6aae999, utbl_chksum : 0xe619d30d)
[  171.814372][ T7989] JBD2: Ignoring recovery information on journal
[  171.957331][ T7989] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  172.058433][ T7989] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid bg_blkno of 0
[  172.109886][ T7989] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  172.143139][ T7989] OCFS2: File system is now read-only.
[  172.148683][ T7989] (syz.0.904,7989,0):ocfs2_trim_mainbm:7610 ERROR: status = -30
[  172.294644][ T7999] loop4: detected capacity change from 0 to 32768
[  172.423394][ T5228] ocfs2: Unmounting device (7,0) on (node local)
[  172.457049][ T8010] loop5: detected capacity change from 0 to 32768
[  172.471751][ T7999] XFS (loop4): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  172.583037][   T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  172.609467][ T8010] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  172.640622][ T7999] XFS (loop4): Ending clean mount
[  172.651783][ T7999] XFS (loop4): Quotacheck needed: Please wait.
[  172.689158][   T35] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x10 
[  172.753086][   T35] XFS (loop4): Unmount and run xfs_repair
[  172.758880][   T35] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  172.779927][   T35] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  172.788940][   T35] 00000010: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 40  ...............@
[  172.795703][ T8063] loop0: detected capacity change from 0 to 128
[  172.799026][   T35] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6  .~!...H8.-v7.. .
[  172.814976][   T35] 00000030: 00 00 00 00 5a a8 54 aa 00 00 00 05 00 00 00 03  ....Z.T.........
[  172.824196][   T35] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60  .......\.......`
[  172.833540][   T35] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  172.842511][   T35] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  172.851920][   T35] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  172.861047][   T35] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x10 len 8 error 74
[  172.875207][ T7999] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  172.895189][ T8010] XFS (loop5): Ending clean mount
[  172.915374][ T8063] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  172.934508][   T25] usb 3-1: Using ep0 maxpacket: 16
[  172.940317][ T8063] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.960010][ T5723] XFS (loop4): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  173.004779][ T5723] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair.
[  173.005076][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  173.015429][ T5228] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  173.025005][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  173.044162][   T25] usb 3-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[  173.053322][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.063469][   T25] usb 3-1: config 0 descriptor??
[  173.068241][ T5236] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  173.798106][ T8070] loop0: detected capacity change from 0 to 40427
[  173.818082][   T25] ntrig 0003:1B96:0008.0016: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.2-1/input0
[  173.823880][ T8085] netlink: 'syz.1.938': attribute type 29 has an invalid length.
[  173.855955][   T25] usb 3-1: USB disconnect, device number 7
[  173.865123][ T8070] F2FS-fs (loop0): invalid crc value
[  173.891096][ T8090] netlink: 'syz.1.938': attribute type 29 has an invalid length.
[  173.930028][ T8070] F2FS-fs (loop0): Found nat_bits in checkpoint
[  174.017980][ T8070] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  174.154099][ T5228] syz-executor: attempt to access beyond end of device
[  174.154099][ T5228] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  174.203495][ T5228] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  174.691141][ T8112] loop5: detected capacity change from 0 to 4096
[  174.784383][ T8112] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  174.922436][ T8112] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  174.990501][ T8112] ntfs3(loop5): Failed to load $Extend (-22).
[  174.999551][ T8128] nbd: socks must be embedded in a SOCK_ITEM attr
[  175.006821][ T8112] ntfs3(loop5): Failed to initialize $Extend.
[  175.189454][ T8135] loop2: detected capacity change from 0 to 736
[  175.273087][ T8141] random: crng reseeded on system resumption
[  175.296478][ T8135] rock: directory entry would overflow storage
[  175.340557][ T8135] rock: sig=0x3b10, size=4, remaining=3
[  175.441320][ T8149] loop3: detected capacity change from 0 to 256
[  175.519604][ T8149] FAT-fs (loop3): Directory bread(block 64) failed
[  175.532842][ T8149] FAT-fs (loop3): Directory bread(block 65) failed
[  175.548829][ T8149] FAT-fs (loop3): Directory bread(block 66) failed
[  175.563271][ T8149] FAT-fs (loop3): Directory bread(block 67) failed
[  175.582547][ T8149] FAT-fs (loop3): Directory bread(block 68) failed
[  175.600587][ T8149] FAT-fs (loop3): Directory bread(block 69) failed
[  175.618636][ T8149] FAT-fs (loop3): Directory bread(block 70) failed
[  175.640034][ T8149] FAT-fs (loop3): Directory bread(block 71) failed
[  175.661276][ T8149] FAT-fs (loop3): Directory bread(block 72) failed
[  175.683167][ T8149] FAT-fs (loop3): Directory bread(block 73) failed
[  176.026455][ T8169] loop2: detected capacity change from 0 to 512
[  176.065988][ T8169] EXT4-fs (loop2): 1 orphan inode deleted
[  176.085022][ T8169] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  176.184510][ T8176] loop3: detected capacity change from 0 to 2048
[  176.203410][ T5230] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.216587][ T8176] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  176.280942][ T8184] loop2: detected capacity change from 0 to 512
[  176.307110][ T8184] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  176.321058][ T5223] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.362588][ T8184] EXT4-fs (loop2): 1 orphan inode deleted
[  176.370840][ T8184] EXT4-fs (loop2): 1 truncate cleaned up
[  176.384182][ T8184] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.451685][ T5287] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  176.470992][ T5230] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.612996][ T5287] usb 1-1: Using ep0 maxpacket: 16
[  176.620154][ T5287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  176.637637][ T5287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  176.653063][ T5287] usb 1-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00
[  176.662222][ T5287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.668990][ T5286] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  176.692854][ T5287] usb 1-1: config 0 descriptor??
[  176.709388][ T8195] loop2: detected capacity change from 0 to 128
[  176.842300][ T8197] loop4: detected capacity change from 0 to 512
[  176.859152][ T5286] usb 4-1: Using ep0 maxpacket: 8
[  176.867658][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  176.879742][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  176.899807][ T8182] loop5: detected capacity change from 0 to 40427
[  176.901831][ T8197] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  176.909580][ T8199] loop2: detected capacity change from 0 to 1024
[  176.917027][ T5286] usb 4-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00
[  176.925519][ T8182] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  176.931866][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.949978][ T8182] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  176.950623][ T5286] usb 4-1: config 0 descriptor??
[  176.973469][ T8182] F2FS-fs (loop5): invalid crc value
[  176.983590][ T8197] EXT4-fs (loop4): 1 truncate cleaned up
[  176.986954][ T8182] F2FS-fs (loop5): Found nat_bits in checkpoint
[  176.990483][ T8197] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  177.022562][ T8199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  177.036273][ T8199] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  177.121832][ T8182] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  177.129380][ T8182] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  177.175252][ T5230] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.193246][ T5287] hid-led 0003:1294:1320.0017: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.0-1/input0
[  177.216124][ T5287] hid-led 0003:1294:1320.0017: Riso Kagaku Webmail Notifier initialized
[  177.262515][ T5723] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.413733][ T5287] usb 1-1: USB disconnect, device number 6
[  177.425673][ T5327] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38)
[  177.434190][ T5327] leds riso_kagaku0:green: Setting an LED's brightness failed (-38)
[  177.434846][ T5327] leds riso_kagaku0:red: Setting an LED's brightness failed (-38)
[  177.447284][ T5286] waltop 0003:172F:0038.0018: item fetching failed at offset 5/8
[  177.447810][ T5286] waltop 0003:172F:0038.0018: probe with driver waltop failed with error -22
[  177.685815][ T5286] usb 4-1: USB disconnect, device number 6
[  177.821520][ T8225] dvmrp0: entered allmulticast mode
[  177.829868][ T8225] dvmrp0: left allmulticast mode
[  178.322442][ T8227] loop5: detected capacity change from 0 to 32768
[  178.371214][ T8235] netlink: 'syz.2.1001': attribute type 3 has an invalid length.
[  178.397435][ T8235] netlink: 'syz.2.1001': attribute type 1 has an invalid length.
[  178.421760][ T8240] nbd: must specify a size in bytes for the device
[  178.434721][ T8235] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.1001'.
[  178.446308][ T8227] JBD2: Ignoring recovery information on journal
[  178.574495][ T8227] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  178.844217][ T5236] ocfs2: Unmounting device (7,5) on (node local)
[  179.318562][ T8281] loop0: detected capacity change from 0 to 2048
[  179.331968][ T8281] NILFS (loop0): invalid segment: Checksum error in segment payload
[  179.342139][ T8281] NILFS (loop0): trying rollback from an earlier position
[  179.370022][ T8281] NILFS (loop0): recovery complete
[  179.379733][ T8286] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  179.414521][ T8285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1024'.
[  179.432329][ T8288] loop5: detected capacity change from 0 to 256
[  179.434448][ T8285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1024'.
[  179.522989][ T5327] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  179.568699][ T8293] loop3: detected capacity change from 0 to 512
[  179.612423][ T8293] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  179.703002][ T5327] usb 2-1: Using ep0 maxpacket: 8
[  179.720911][ T5327] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  179.742152][ T5327] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  179.752749][ T5327] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  179.763802][ T5327] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.776583][ T5327] usb 2-1: config 0 descriptor??
[  179.779838][ T5223] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.981043][ T8306] loop4: detected capacity change from 0 to 4096
[  180.202083][ T5327] hid-picolcd 0003:04D8:F002.0019: unknown main item tag 0x0
[  180.284320][ T5327] hid-picolcd 0003:04D8:F002.0019: No report with id 0xf3 found
[  180.308999][ T5327] hid-picolcd 0003:04D8:F002.0019: No report with id 0xf4 found
[  180.405200][ T5327] usb 2-1: USB disconnect, device number 9
[  180.527740][ T8295] loop2: detected capacity change from 0 to 32768
[  180.543958][ T8322] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1037'.
[  180.569214][ T8299] loop5: detected capacity change from 0 to 32768
[  180.584528][ T8322] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes.
[  180.598539][ T8295] (syz.2.1029,8295,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  180.624822][ T8299] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1030 (8299)
[  180.637899][ T8295] (syz.2.1029,8295,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  180.664139][ T8299] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  180.680442][ T8299] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm
[  180.689741][ T8299] BTRFS info (device loop5): using free-space-tree
[  180.737059][ T8295] JBD2: Ignoring recovery information on journal
[  181.069507][ T8295] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  181.150194][ T8319] loop3: detected capacity change from 0 to 32768
[  181.163280][ T5327] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  181.202335][ T8341] loop1: detected capacity change from 0 to 256
[  181.217267][ T8341] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  181.346912][ T5327] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.379060][ T5327] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.399679][ T5327] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  181.416310][ T5327] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  181.426087][ T5327] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.455131][ T8319] JBD2: Ignoring recovery information on journal
[  181.474831][ T5230] ocfs2: Unmounting device (7,2) on (node local)
[  181.525197][ T5327] usb 5-1: config 0 descriptor??
[  181.546064][  T934] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  181.578340][ T8319] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  181.676858][ T8323] syz.0.1040: vmalloc error: size 3633152, failed to allocated page array size 7096, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  181.695303][ T8323] CPU: 1 UID: 0 PID: 8323 Comm: syz.0.1040 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0
[  181.706004][ T8323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  181.716078][ T8323] Call Trace:
[  181.716356][  T934] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  181.719352][ T8323]  <TASK>
[  181.719392][ T8323]  dump_stack_lvl+0x241/0x360
[  181.719432][ T8323]  ? __pfx_dump_stack_lvl+0x10/0x10
[  181.742285][ T8323]  ? __pfx__printk+0x10/0x10
[  181.746920][ T8323]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  181.753363][ T8323]  ? srso_alias_return_thunk+0x5/0xfbef5
[  181.755545][ T8299] BTRFS info (device loop5): rebuilding free space tree
[  181.759000][ T8323]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  181.772442][ T8323]  warn_alloc+0x278/0x410
[  181.776804][ T8323]  ? __pfx_warn_alloc+0x10/0x10
[  181.781682][ T8323]  ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60
[  181.783094][  T934] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3
[  181.787842][ T8323]  ? srso_alias_return_thunk+0x5/0xfbef5
[  181.787879][ T8323]  ? srso_alias_return_thunk+0x5/0xfbef5
[  181.787910][ T8323]  ? __get_vm_area_node+0x23d/0x270
[  181.813185][ T8323]  __vmalloc_node_range_noprof+0x691/0x13f0
[  181.819199][ T8323]  ? __kmalloc_cache_node_noprof+0x1d3/0x300
[  181.825199][ T8323]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  181.831534][ T8323]  ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60
[  181.837704][ T8323]  ? srso_alias_return_thunk+0x5/0xfbef5
[  181.843356][ T8323]  ? srso_alias_return_thunk+0x5/0xfbef5
[  181.848998][ T8323]  ? __get_vm_area_node+0x23d/0x270
[  181.854222][ T8323]  __vmalloc_node_range_noprof+0x59c/0x13f0
[  181.860124][ T8323]  ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60
[  181.866299][ T8323]  ? __pfx___alloc_pages_noprof+0x10/0x10
[  181.872059][ T8323]  ? rcu_is_watching+0x15/0xb0
[  181.876836][ T8323]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  181.883172][ T8323]  ? srso_alias_return_thunk+0x5/0xfbef5
[  181.888818][ T8323]  ? rcu_is_watching+0x15/0xb0
[  181.893598][ T8323]  ? srso_alias_return_thunk+0x5/0xfbef5
[  181.899240][ T8323]  ? __kmalloc_node_noprof+0x247/0x440
[  181.904726][ T8323]  ? __kvmalloc_node_noprof+0x72/0x190
[  181.910203][ T8323]  __kvmalloc_node_noprof+0x142/0x190
[  181.915596][ T8323]  ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60
[  181.921775][ T8323]  __v4l2_ctrl_modify_dimensions+0x43b/0xb60
[  181.927772][ T8323]  ? tpg_update_mv_step+0x361/0x4f0
[  181.932997][ T8323]  vivid_update_format_cap+0x133c/0x2090
[  181.938644][ T8323]  ? v4l2_valid_dv_timings+0x58b/0xf60
[  181.944133][ T8323]  ? __pfx_vivid_update_format_cap+0x10/0x10
[  181.950208][ T8323]  ? srso_alias_return_thunk+0x5/0xfbef5
[  181.955858][ T8323]  ? srso_alias_return_thunk+0x5/0xfbef5
[  181.961509][ T8323]  vivid_vid_cap_s_dv_timings+0x535/0x1230
[  181.967351][ T8323]  __video_do_ioctl+0xc25/0xdd0
[  181.972242][ T8323]  ? __pfx___video_do_ioctl+0x10/0x10
[  181.977643][ T8323]  ? srso_alias_return_thunk+0x5/0xfbef5
[  181.983285][ T8323]  ? __might_fault+0xc6/0x120
[  181.987973][ T8323]  video_usercopy+0x89d/0x1180
[  181.992769][ T8323]  ? __pfx___video_do_ioctl+0x10/0x10
[  181.998160][ T8323]  ? __pfx_video_usercopy+0x10/0x10
[  182.003392][ T8323]  ? __fget_files+0x29/0x470
[  182.008022][ T8323]  ? __fget_files+0x3f3/0x470
[  182.012725][ T8323]  v4l2_ioctl+0x18b/0x1e0
[  182.017087][ T8323]  ? __pfx_v4l2_ioctl+0x10/0x10
[  182.021961][ T8323]  __se_sys_ioctl+0xfb/0x170
[  182.026577][ T8323]  do_syscall_64+0xf3/0x230
[  182.031091][ T8323]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.037002][ T8323] RIP: 0033:0x7fe04a37dff9
[  182.041448][ T8323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  182.061147][ T8323] RSP: 002b:00007fe04b137038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  182.069576][ T8323] RAX: ffffffffffffffda RBX: 00007fe04a535f80 RCX: 00007fe04a37dff9
[  182.077553][ T8323] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000003
[  182.085526][ T8323] RBP: 00007fe04a3f0296 R08: 0000000000000000 R09: 0000000000000000
[  182.093504][ T8323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  182.101484][ T8323] R13: 0000000000000000 R14: 00007fe04a535f80 R15: 00007ffe7fcaa4a8
[  182.109478][ T8323]  </TASK>
[  182.114008][ T8323] Mem-Info:
[  182.118644][ T8323] active_anon:14043 inactive_anon:0 isolated_anon:0
[  182.118644][ T8323]  active_file:1844 inactive_file:38343 isolated_file:0
[  182.118644][ T8323]  unevictable:767 dirty:369 writeback:0
[  182.118644][ T8323]  slab_reclaimable:9797 slab_unreclaimable:97709
[  182.118644][ T8323]  mapped:24653 shmem:11671 pagetables:764
[  182.118644][ T8323]  sec_pagetables:0 bounce:0
[  182.118644][ T8323]  kernel_misc_reclaimable:0
[  182.118644][ T8323]  free:1283714 free_pcp:4119 free_cma:0
[  182.163859][  T934] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  182.163899][  T934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.181670][ T8323] Node 0 active_anon:52268kB inactive_anon:0kB active_file:7260kB inactive_file:153292kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98500kB dirty:1416kB writeback:0kB shmem:41348kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10956kB pagetables:3056kB sec_pagetables:0kB all_unreclaimable? no
[  182.184849][ T5327] lenovo 0003:17EF:6047.001A: unknown main item tag 0x0
[  182.214293][ T8323] Node 1 active_anon:4kB inactive_anon:0kB active_file:116kB inactive_file:80kB unevictable:1532kB isolated(anon):0kB isolated(file):0kB mapped:112kB dirty:60kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  182.214368][ T8323] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  182.281035][ T8323] lowmem_reserve[]: 0 2465 2466 0 0
[  182.283918][  T934] usb 2-1: config 0 descriptor??
[  182.299361][ T8323] Node 0 DMA32 free:1209952kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:47200kB inactive_anon:0kB active_file:7260kB inactive_file:152512kB unevictable:1536kB writepending:1396kB present:3129332kB managed:2552504kB mlocked:0kB bounce:0kB free_pcp:14308kB local_pcp:14180kB free_cma:0kB
[  182.299637][ T5327] lenovo 0003:17EF:6047.001A: unknown main item tag 0x0
[  182.330875][ T8323] lowmem_reserve[]: 0 0 0 0 0
[  182.343318][ T8323] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  182.370199][ T8323] lowmem_reserve[]: 0 0 0 0 0
[  182.375021][ T8323] Node 1 Normal free:3920512kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:116kB inactive_file:80kB unevictable:1532kB writepending:60kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB
[  182.404527][ T8323] lowmem_reserve[]: 0 0 0 0 0
[  182.405084][ T5327] lenovo 0003:17EF:6047.001A: unknown main item tag 0x0
[  182.409400][ T8323] Node 0 
[  182.417163][ T5327] lenovo 0003:17EF:6047.001A: unknown main item tag 0x0
[  182.421611][ T8323] DMA: 
[  182.432040][ T5327] lenovo 0003:17EF:6047.001A: unknown main item tag 0x0
[  182.443044][ T8323] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  182.445239][ T5327] lenovo 0003:17EF:6047.001A: hidraw0: USB HID v0.06 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0
[  182.454831][ T8323] Node 0 DMA32: 22*4kB (ME) 250*8kB (UME) 274*16kB (M) 135*32kB (UM) 65*64kB (UM) 11*128kB (UM) 2*256kB (UM) 29*512kB (UME) 6*1024kB (UME) 5*2048kB (ME) 283*4096kB (M) = 1207272kB
[  182.505982][ T8323] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  182.529062][ T8323] Node 1 Normal: 154*4kB (UME) 46*8kB (UME) 30*16kB (UME) 158*32kB (UME) 82*64kB (UE) 31*128kB (UME) 12*256kB (UME) 11*512kB (UME) 7*1024kB (UME) 5*2048kB (UE) 947*4096kB (M) = 3920760kB
[  182.553355][ T8323] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  182.563646][ T8323] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  182.570770][ T5223] ocfs2: Unmounting device (7,3) on (node local)
[  182.578692][ T8323] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  182.589253][ T8323] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  182.598766][ T8323] 49592 total pagecache pages
[  182.603564][ T8323] 0 pages in swap cache
[  182.607726][ T8323] Free swap  = 124456kB
[  182.611885][ T8323] Total swap = 124996kB
[  182.616159][ T8323] 2097051 pages RAM
[  182.619978][ T8323] 0 pages HighMem/MovableOnly
[  182.624718][ T8323] 427075 pages reserved
[  182.631044][ T8323] 0 pages cma reserved
[  182.643108][ T5327] usb 5-1: USB disconnect, device number 8
[  182.796503][ T5236] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  183.058494][  T934] Bluetooth: Can't get version to change to load ram patch err
[  183.066514][  T934] Bluetooth: Loading sysconfig file failed
[  183.084818][  T934] ath3k 2-1:0.0: probe with driver ath3k failed with error -71
[  183.113109][  T934] usb 2-1: USB disconnect, device number 10
[  183.140423][ T8364] [U] #! ./file1 GMÝu
[  183.163676][ T8365] loop2: detected capacity change from 0 to 2048
[  183.245820][   T29] audit: type=1800 audit(1728942349.820:37): pid=8365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1052" name="file1" dev="loop2" ino=1048719 res=0 errno=0
[  183.551745][ T8372] loop5: detected capacity change from 0 to 4096
[  183.597437][ T8372] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  183.780883][ T8372] ntfs3(loop5): ino=3, ntfs_set_state failed, -22.
[  183.818090][ T8372] ntfs3(loop5): ino=1e, "file1" attr_set_size
[  183.949818][ T8393] loop3: detected capacity change from 0 to 256
[  183.975594][ T1047] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22.
[  183.989953][ T5236] ntfs3(loop5): ino=3, ntfs_set_state failed, -22.
[  184.019513][ T5236] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  184.033090][ T5236] ntfs3(loop5): ino=3, ntfs_set_state failed, -22.
[  184.044872][ T1047] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22.
[  184.459546][ T8391] loop4: detected capacity change from 0 to 32768
[  184.472688][ T8391] bcachefs: bch2_parse_one_mount_opt() Invalid mount option data_replicas: must be a number
[  184.989123][ T8395] loop1: detected capacity change from 0 to 32768
[  185.143049][  T931] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  186.496067][ T8432] loop4: detected capacity change from 0 to 2048
[  186.541563][ T8432] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  186.627811][ T8411] loop3: detected capacity change from 0 to 32768
[  186.643186][ T8432] cifs: Unknown parameter 'anchor'
[  186.664472][ T8411] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1074 (8411)
[  187.098730][ T8411] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  187.116101][ T8411] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm
[  187.153487][ T8440] Cannot find add_set index 0 as target
[  187.183253][ T8411] BTRFS info (device loop3): using free-space-tree
[  187.395224][ T8457] loop0: detected capacity change from 0 to 16
[  187.413154][ T8457] erofs: (device loop0): mounted with root inode @ nid 36.
[  187.443297][ T5327] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  187.477289][ T8457] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1089'.
[  187.546507][  T931] usb 3-1: Using ep0 maxpacket: 32
[  187.553908][  T931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  187.572975][  T931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  187.593840][  T931] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  187.594851][ T5327] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  187.602871][  T931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.612993][ T5286] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  187.632033][  T931] usb 3-1: config 0 descriptor??
[  187.638100][ T5223] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  187.638544][ T8469] loop0: detected capacity change from 0 to 2048
[  187.661116][ T5327] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  187.679266][ T5327] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  187.691731][ T8469] EXT4-fs: Ignoring removed mblk_io_submit option
[  187.698568][ T5327] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.729357][ T5327] usb 5-1: config 0 descriptor??
[  187.741134][ T8469] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  187.795464][ T5286] usb 6-1: Using ep0 maxpacket: 16
[  187.813966][ T8469] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1093: bg 0: block 234: padding at end of block bitmap is not set
[  187.818283][ T5286] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  187.861823][ T8469] EXT4-fs (loop0): Remounting filesystem read-only
[  187.863127][ T5286] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  187.878615][ T5286] usb 6-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00
[  187.923956][ T5286] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.932651][  T931] usbhid 3-1:0.0: can't add hid device: -71
[  187.939110][  T931] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  187.954858][ T5286] usb 6-1: config 0 descriptor??
[  187.965276][  T931] usb 3-1: USB disconnect, device number 8
[  188.090756][ T5228] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.253239][ T8482] loop1: detected capacity change from 0 to 256
[  188.330511][ T5327] sony 0003:054C:0268.001B: hiddev0,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.4-1/input0
[  188.351637][ T5327] sony 0003:054C:0268.001B: failed to claim input
[  188.379144][ T5286] hid-led 0003:1294:1320.001C: unbalanced delimiter at end of report description
[  188.399325][ T5286] hid-led 0003:1294:1320.001C: probe with driver hid-led failed with error -22
[  188.410620][ T8490] loop3: detected capacity change from 0 to 64
[  188.512166][  T931] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  188.601419][ T5348] usb 5-1: USB disconnect, device number 9
[  188.618821][ T5286] usb 6-1: USB disconnect, device number 12
[  188.685420][  T931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  188.698063][  T931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  188.717090][  T931] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  188.731115][  T931] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  188.740572][  T931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.751824][  T931] usb 3-1: config 0 descriptor??
[  188.824170][ T8506] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  188.825767][ T8508] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1111'.
[  189.174345][  T931] hid-udraw 0003:20D6:CB17.001D: unbalanced delimiter at end of report description
[  189.223634][  T931] hid-udraw 0003:20D6:CB17.001D: parse failed
[  189.229809][  T931] hid-udraw 0003:20D6:CB17.001D: probe with driver hid-udraw failed with error -22
[  189.363027][ T5286] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  189.388180][  T934] usb 3-1: USB disconnect, device number 9
[  189.462807][ T8530] loop4: detected capacity change from 0 to 1024
[  189.524820][ T5286] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  189.545297][ T5286] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  189.550161][ T5723] hfsplus: bad catalog entry type
[  189.571843][ T5286] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  189.582320][ T8510] loop3: detected capacity change from 0 to 32768
[  189.589045][ T5286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  189.608444][ T8510] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1113 (8510)
[  189.622539][ T5286] usb 1-1: SerialNumber: syz
[  189.636328][ T8510] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  189.653095][ T8510] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm
[  189.670128][ T8510] BTRFS info (device loop3): using free-space-tree
[  189.832169][ T5789] hfsplus: b-tree write err: -5, ino 4
[  189.838607][ T5286] usb 1-1: 0:2 : does not exist
[  189.908219][ T5286] usb 1-1: USB disconnect, device number 7
[  190.007054][ T1089] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.043419][ T5223] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  190.210727][ T1089] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.214597][ T8555] loop2: detected capacity change from 0 to 8
[  190.359700][ T8555] SQUASHFS error: xz decompression failed, data probably corrupt
[  190.389917][ T8555] SQUASHFS error: Failed to read block 0xa8: -5
[  190.422871][ T1089] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.451011][ T8555] SQUASHFS error: xz decompression failed, data probably corrupt
[  190.501257][ T8555] SQUASHFS error: Failed to read block 0xa8: -5
[  190.521830][   T29] audit: type=1800 audit(1728942357.090:38): pid=8555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1129" name="file0" dev="loop2" ino=3 res=0 errno=0
[  190.624089][ T1089] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.704503][ T8565] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  190.758424][ T4618] Bluetooth: hci1: command 0x0406 tx timeout
[  190.765307][   T54] Bluetooth: hci0: command 0x0406 tx timeout
[  190.765358][ T5248] Bluetooth: hci5: command 0x0406 tx timeout
[  190.771318][   T54] Bluetooth: hci4: command 0x0406 tx timeout
[  190.784703][ T5242] Bluetooth: hci2: command 0x0406 tx timeout
[  190.856883][ T5242] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  190.868440][ T5242] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  190.879313][ T5242] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  190.891814][ T5242] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  190.902703][ T5242] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  190.912665][ T5242] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  190.929309][ T8569] netlink: 'syz.2.1134': attribute type 5 has an invalid length.
[  190.961047][ T8578] loop1: detected capacity change from 0 to 256
[  191.063860][ T8574] loop5: detected capacity change from 0 to 4096
[  191.079939][ T8574] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  191.166354][ T8571] chnl_net:caif_netlink_parms(): no params data found
[  191.649764][ T8591] loop3: detected capacity change from 0 to 32768
[  191.719537][ T8581] loop0: detected capacity change from 0 to 32768
[  191.769482][ T1089] bridge_slave_1: left allmulticast mode
[  191.782187][ T1089] bridge_slave_1: left promiscuous mode
[  191.809211][ T1089] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.839210][ T8581] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  191.856984][ T1089] bridge_slave_0: left allmulticast mode
[  191.860434][ T8591] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  191.862678][ T1089] bridge_slave_0: left promiscuous mode
[  191.878113][ T1089] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.999318][ T8581] XFS (loop0): Ending clean mount
[  192.030440][ T5223] ocfs2: Unmounting device (7,3) on (node local)
[  192.141028][ T5228] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  192.799110][ T8633] loop3: detected capacity change from 0 to 1024
[  192.828829][ T8621] loop2: detected capacity change from 0 to 32768
[  192.843665][ T8621] XFS: ikeep mount option is deprecated.
[  192.877332][ T8633] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  192.932000][ T8621] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  193.036222][ T8633] EXT4-fs: Ignoring sb option on remount
[  193.041937][ T8633] EXT4-fs: Ignoring removed orlov option
[  193.047758][ T8633] EXT4-fs: Ignoring removed bh option
[  193.103394][ T8633] EXT4-fs error (device loop3): __ext4_remount:6522: comm syz.3.1155: Abort forced by user
[  193.117770][ T8633] EXT4-fs (loop3): Remounting filesystem read-only
[  193.148490][ T8621] XFS (loop2): Ending clean mount
[  193.190801][  T934] kernel write not supported for file /sg0 (pid: 934 comm: kworker/0:2)
[  193.205361][ T8621] XFS (loop2): Quotacheck needed: Please wait.
[  193.228845][ T8660] loop5: detected capacity change from 0 to 1764
[  193.248023][ T5223] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.287645][ T8621] XFS (loop2): Quotacheck: Done.
[  193.351934][ T5227] Bluetooth: hci3: command tx timeout
[  193.376514][ T8664] netlink: 'syz.3.1164': attribute type 3 has an invalid length.
[  193.469875][ T8669] netlink: 'syz.3.1167': attribute type 12 has an invalid length.
[  193.478739][ T8669] netlink: 'syz.3.1167': attribute type 11 has an invalid length.
[  193.488730][ T8669] netlink: 190580 bytes leftover after parsing attributes in process `syz.3.1167'.
[  193.566431][ T8671] ALSA: seq fatal error: cannot create timer (-19)
[  193.588168][ T5230] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  193.642188][ T1089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  193.679671][ T1089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  193.745528][ T1089] bond0 (unregistering): Released all slaves
[  193.787972][ T8674] loop3: detected capacity change from 0 to 4096
[  193.805029][ T1262] ieee802154 phy0 wpan0: encryption failed: -22
[  193.921163][ T8682] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  194.117690][ T8679] loop1: detected capacity change from 0 to 32768
[  194.129572][ T8679] 
[  194.129572][ T8679]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  194.129572][ T8679] 
[  194.259049][ T8571] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.283096][ T8571] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.301696][ T8571] bridge_slave_0: entered allmulticast mode
[  194.318078][ T8571] bridge_slave_0: entered promiscuous mode
[  194.475882][ T1047] 
[  194.475882][ T1047]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  194.475882][ T1047] 
[  194.507594][ T1047] 
[  194.507594][ T1047]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  194.507594][ T1047] 
[  194.564079][ T1047] 
[  194.564079][ T1047]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  194.564079][ T1047] 
[  194.572738][ T8702] loop3: detected capacity change from 0 to 128
[  194.645813][ T8699] loop5: detected capacity change from 0 to 4096
[  194.661807][ T8699] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  194.682601][ T8702] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  194.716684][ T8702] ext4 filesystem being mounted at /211/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  194.744710][ T8571] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.767564][ T8571] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.775719][ T8571] bridge_slave_1: entered allmulticast mode
[  194.791080][ T8571] bridge_slave_1: entered promiscuous mode
[  194.797278][ T5223] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  194.831955][ T8699] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  194.875797][ T8679] 
[  194.875797][ T8679]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  194.875797][ T8679] 
[  194.952848][ T8571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  194.955959][ T8712] loop3: detected capacity change from 0 to 64
[  195.013662][ T8679] 
[  195.013662][ T8679]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  195.013662][ T8679] 
[  195.040974][ T8571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  195.092820][ T5224] 
[  195.092820][ T5224]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  195.092820][ T5224] 
[  195.108947][ T5224] 
[  195.108947][ T5224]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  195.108947][ T5224] 
[  195.179961][ T8720] netlink: 134732 bytes leftover after parsing attributes in process `syz.2.1192'.
[  195.180697][ T8718] loop3: detected capacity change from 0 to 1024
[  195.310577][ T8722] loop5: detected capacity change from 0 to 4096
[  195.358471][ T8722] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  195.409398][ T5227] Bluetooth: hci3: command tx timeout
[  195.561575][ T8734] loop0: detected capacity change from 0 to 512
[  195.579819][ T8736] loop2: detected capacity change from 0 to 512
[  195.580472][ T8736] EXT4-fs: Ignoring removed orlov option
[  195.581781][ T8729] netlink: 'syz.1.1190': attribute type 1 has an invalid length.
[  195.598242][ T8736] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  195.627428][   T29] audit: type=1800 audit(1728942362.190:39): pid=8722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1191" name="file1" dev="loop5" ino=30 res=0 errno=0
[  195.684993][ T8571] team0: Port device team_slave_0 added
[  195.687539][ T8571] team0: Port device team_slave_1 added
[  195.709645][ T8736] EXT4-fs (loop2): 1 truncate cleaned up
[  195.710624][ T8736] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.731997][ T8734] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.732102][ T8734] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  195.904568][ T5228] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.907600][ T8571] batman_adv: batadv0: Adding interface: batadv_slave_0
[  195.907619][ T8571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.907650][ T8571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  195.909510][ T8571] batman_adv: batadv0: Adding interface: batadv_slave_1
[  195.909526][ T8571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.909557][ T8571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  195.916961][ T5230] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.964925][ T8746] netlink: 4072 bytes leftover after parsing attributes in process `syz.0.1201'.
[  195.965010][ T8746] openvswitch: netlink: Actions may not be safe on all matching packets
[  195.975131][ T1089] hsr_slave_0: left promiscuous mode
[  195.987903][ T1089] hsr_slave_1: left promiscuous mode
[  196.015161][    C0] vkms_vblank_simulate: vblank timer overrun
[  196.120013][ T1089] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  196.120059][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_0
[  196.129984][ T1089] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  196.130032][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_1
[  196.150289][ T1089] veth1_macvtap: left promiscuous mode
[  196.182790][ T1089] veth0_macvtap: left promiscuous mode
[  196.183120][ T1089] veth1_vlan: left promiscuous mode
[  196.183248][ T1089] veth0_vlan: left promiscuous mode
[  196.413094][ T5327] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  196.568634][ T5327] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[  196.589581][ T5327] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  196.621777][ T5327] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  196.650646][ T5327] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  196.674676][ T5327] usb 6-1: Manufacturer: syz
[  196.688708][ T5327] usb 6-1: config 0 descriptor??
[  196.793523][ T5327] rc_core: IR keymap rc-hauppauge not found
[  196.800369][ T5327] Registered IR keymap rc-empty
[  196.812125][ T5327] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  196.837197][ T5327] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input14
[  196.943373][ T5365] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  197.085214][ T1089] team0 (unregistering): Port device team_slave_1 removed
[  197.120449][ T5365] usb 4-1: Using ep0 maxpacket: 16
[  197.123361][    C0] igorplugusb 6-1:0.0: receive overflow invalid: 33
[  197.130125][ T5365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  197.156528][ T5365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  197.169230][ T1089] team0 (unregistering): Port device team_slave_0 removed
[  197.174601][ T5365] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[  197.194852][ T5365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.219147][ T5365] usb 4-1: config 0 descriptor??
[  197.345026][ T5286] usb 6-1: USB disconnect, device number 13
[  197.483446][ T5227] Bluetooth: hci3: command tx timeout
[  197.647091][ T5365] samsung 0003:0419:0001.001E: unknown main item tag 0x0
[  197.654905][ T5365] samsung 0003:0419:0001.001E: unknown main item tag 0x0
[  197.662057][ T5365] samsung 0003:0419:0001.001E: unknown main item tag 0x0
[  197.669266][ T5365] samsung 0003:0419:0001.001E: unknown main item tag 0x0
[  197.676457][ T5365] samsung 0003:0419:0001.001E: unknown main item tag 0x0
[  197.694487][ T5365] samsung 0003:0419:0001.001E: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.3-1/input0
[  197.773059][  T931] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  197.852720][ T5327] usb 4-1: USB disconnect, device number 7
[  197.968295][  T931] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[  197.982395][ T8571] hsr_slave_0: entered promiscuous mode
[  198.008489][  T931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.028543][  T931] usb 2-1: Product: syz
[  198.032726][  T931] usb 2-1: Manufacturer: syz
[  198.040829][ T8571] hsr_slave_1: entered promiscuous mode
[  198.054244][ T8571] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  198.072180][  T931] usb 2-1: SerialNumber: syz
[  198.078048][ T8571] Cannot create hsr debugfs directory
[  198.085381][  T931] usb 2-1: config 0 descriptor??
[  198.552459][  T931] mos7840 2-1:0.0: required endpoints missing
[  198.571928][  T931] usb 2-1: USB disconnect, device number 11
[  198.589853][ T8785] loop5: detected capacity change from 0 to 32768
[  198.600902][ T8785] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1217 (8785)
[  198.614121][ T8794] loop3: detected capacity change from 0 to 512
[  198.625403][ T8785] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  198.635426][ T8794] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  198.637020][ T8785] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  198.653247][ T8785] BTRFS info (device loop5): using free-space-tree
[  198.668321][ T8794] EXT4-fs (loop3): invalid journal inode
[  198.674444][ T8794] EXT4-fs (loop3): can't get journal size
[  198.708857][ T8796] lo speed is unknown, defaulting to 1000
[  198.717304][ T8796] lo speed is unknown, defaulting to 1000
[  198.725195][ T8794] EXT4-fs (loop3): 1 truncate cleaned up
[  198.725206][ T8796] lo speed is unknown, defaulting to 1000
[  198.731926][ T8794] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.742089][ T8796] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  198.813817][ T8796] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  198.832252][ T8571] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  198.868557][ T8571] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  198.884677][ T8571] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  198.911945][ T8571] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  198.955263][ T8796] lo speed is unknown, defaulting to 1000
[  198.989364][ T5223] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.013881][ T8796] lo speed is unknown, defaulting to 1000
[  199.099728][ T8796] lo speed is unknown, defaulting to 1000
[  199.118201][ T5236] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  199.134147][ T8796] lo speed is unknown, defaulting to 1000
[  199.166508][ T8571] 8021q: adding VLAN 0 to HW filter on device bond0
[  199.195197][ T8796] lo speed is unknown, defaulting to 1000
[  199.204920][ T8796] lo speed is unknown, defaulting to 1000
[  199.244663][ T8571] 8021q: adding VLAN 0 to HW filter on device team0
[  199.280233][ T8571] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  199.290670][ T8571] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  199.314151][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.321268][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[  199.332723][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.339878][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[  199.553768][ T5227] Bluetooth: hci3: command tx timeout
[  199.698758][ T8821] loop1: detected capacity change from 0 to 1764
[  199.783390][ T8824] loop0: detected capacity change from 0 to 256
[  199.842239][ T8571] 8021q: adding VLAN 0 to HW filter on device batadv0
[  199.948774][ T8831] loop5: detected capacity change from 0 to 256
[  200.000070][ T8831] exfat: Deprecated parameter 'utf8'
[  200.022600][ T8824] FAT-fs (loop0): Directory bread(block 64) failed
[  200.061572][ T8831] exfat: Deprecated parameter 'utf8'
[  200.067373][ T8824] FAT-fs (loop0): Directory bread(block 65) failed
[  200.100585][ T8824] FAT-fs (loop0): Directory bread(block 66) failed
[  200.130876][ T8824] FAT-fs (loop0): Directory bread(block 67) failed
[  200.141622][ T8824] FAT-fs (loop0): Directory bread(block 68) failed
[  200.176768][ T8824] FAT-fs (loop0): Directory bread(block 69) failed
[  200.196416][ T8831] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d)
[  200.203217][ T8824] FAT-fs (loop0): Directory bread(block 70) failed
[  200.229880][ T8824] FAT-fs (loop0): Directory bread(block 71) failed
[  200.254983][ T8840] loop1: detected capacity change from 0 to 64
[  200.273797][ T8824] FAT-fs (loop0): Directory bread(block 72) failed
[  200.283570][ T8840] hfs: unable to locate alternate MDB
[  200.289381][ T8840] hfs: continuing without an alternate MDB
[  200.292977][ T8824] FAT-fs (loop0): Directory bread(block 73) failed
[  200.377215][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1232'.
[  200.430615][ T8842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1232'.
[  200.450285][ T8817] loop2: detected capacity change from 0 to 40427
[  200.467500][ T8817] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  200.500878][ T8817] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  200.513484][ T8817] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x1fffff
[  200.522276][ T8817] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x6
[  200.560208][ T8817] F2FS-fs (loop2): invalid crc value
[  200.591247][ T8571] veth0_vlan: entered promiscuous mode
[  200.615369][ T8571] veth1_vlan: entered promiscuous mode
[  200.639255][ T8817] F2FS-fs (loop2): Found nat_bits in checkpoint
[  200.681444][ T8571] veth0_macvtap: entered promiscuous mode
[  200.707873][ T8571] veth1_macvtap: entered promiscuous mode
[  200.763373][ T8571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  200.790951][ T8571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.810409][ T8571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  200.821415][ T8571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.832416][ T8571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  200.844696][ T8571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.862174][ T8817] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  200.889811][ T8571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  200.895242][ T8817] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  200.900533][ T8571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.919617][ T8571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  200.930569][ T8571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.942512][ T8571] batman_adv: batadv0: Interface activated: batadv_slave_0
[  200.957559][ T8571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  200.973051][ T5327] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  200.990855][ T8571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.011295][ T8571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  201.032378][ T8571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.056663][ T8571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  201.078977][ T8571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.098464][ T8571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  201.111097][ T8571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.128436][ T8571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  201.140275][ T8571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.150416][ T5327] usb 4-1: Using ep0 maxpacket: 32
[  201.168421][ T5327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  201.184805][ T8571] batman_adv: batadv0: Interface activated: batadv_slave_1
[  201.185323][ T5230] syz-executor: attempt to access beyond end of device
[  201.185323][ T5230] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  201.227875][ T5230] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  201.229623][ T5327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  201.255862][ T8571] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  201.265642][ T8571] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  201.274992][ T5327] usb 4-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00
[  201.284583][ T8571] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  201.293420][ T5327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.303017][ T8571] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  201.340460][ T5327] usb 4-1: config 0 descriptor??
[  201.538822][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  201.560793][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.601484][ T8876] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1246'.
[  201.622292][ T2989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  201.645035][ T2989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.773717][ T5327] waltop 0003:172F:0501.001F: item fetching failed at offset 2/5
[  201.798437][ T5327] waltop 0003:172F:0501.001F: probe with driver waltop failed with error -22
[  202.173566][ T8896] loop4: detected capacity change from 0 to 256
[  202.253078][ T5327] usb 4-1: USB disconnect, device number 8
[  202.547331][ T8875] loop5: detected capacity change from 0 to 40427
[  202.563473][ T8875] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x7
[  202.575193][ T8875] F2FS-fs (loop5): invalid crc value
[  202.585209][ T8875] F2FS-fs (loop5): Found nat_bits in checkpoint
[  202.670655][ T8875] F2FS-fs (loop5): Start checkpoint disabled!
[  202.685536][ T8875] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  202.776279][ T8875] F2FS-fs (loop5): Checkpoint should be enabled.
[  202.893211][ T5289] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  202.948190][   T52] kworker/u8:3: attempt to access beyond end of device
[  202.948190][   T52] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  202.973119][   T52] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  202.980143][   T52] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  203.076831][ T8928] loop4: detected capacity change from 0 to 256
[  203.082945][ T5289] usb 3-1: Using ep0 maxpacket: 16
[  203.091259][ T5289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  203.109314][ T5289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  203.130695][ T5289] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00
[  203.147258][ T8930] loop1: detected capacity change from 0 to 1024
[  203.162549][ T8928] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  203.175912][ T5289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.216157][ T5289] usb 3-1: config 0 descriptor??
[  203.353235][   T62] hfsplus: b-tree write err: -5, ino 4
[  203.458996][ T8940] loop5: detected capacity change from 0 to 1024
[  203.554494][ T8940] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.616791][ T8946] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1274'.
[  203.649489][ T8932] loop3: detected capacity change from 0 to 32768
[  203.653387][ T5289] mcp2200 0003:04D8:00DF.0020: item fetching failed at offset 0/2
[  203.657425][ T8932] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1271 (8932)
[  203.695112][ T8940] EXT4-fs error (device loop5): ext4_generic_delete_entry:2680: inode #12: block 7: comm syz.5.1267: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0
[  203.712128][ T5289] mcp2200 0003:04D8:00DF.0020: can't parse reports
[  203.716582][ T8932] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  203.738374][ T8948] loop4: detected capacity change from 0 to 128
[  203.743174][ T8932] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm
[  203.744933][ T5289] mcp2200 0003:04D8:00DF.0020: probe with driver mcp2200 failed with error -22
[  203.764344][ T8932] BTRFS info (device loop3): using free-space-tree
[  203.771421][ T8940] EXT4-fs (loop5): Remounting filesystem read-only
[  203.833128][ T5236] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.866814][ T5286] usb 3-1: USB disconnect, device number 10
[  204.155903][ T5223] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  204.202991][  T934] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  204.373022][  T934] usb 6-1: Using ep0 maxpacket: 8
[  204.390391][  T934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  204.422755][  T934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  204.453026][  T934] usb 6-1: New USB device found, idVendor=056a, idProduct=4135, bcdDevice= 0.cc
[  204.482435][  T934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.505924][  T934] usb 6-1: config 0 descriptor??
[  204.630066][ T8990] loop2: detected capacity change from 0 to 1024
[  204.687013][ T8990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.695059][ T8994] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1290'.
[  204.727610][ T8994] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1290'.
[  204.854523][ T8978] loop0: detected capacity change from 0 to 32768
[  204.870333][ T8978] XFS (loop0): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  204.881980][ T5230] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.968804][  T934] wacom 0003:056A:4135.0021: unknown main item tag 0x0
[  204.986567][  T934] wacom 0003:056A:4135.0021: Unknown device_type for 'HID 056a:4135'. Ignoring.
[  205.036220][ T9012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1296'.
[  205.165575][ T9019] tc_dump_action: action bad kind
[  205.180959][  T934] usb 6-1: USB disconnect, device number 14
[  205.187107][ T8978] XFS (loop0): Ending clean mount
[  205.300180][ T5228] XFS (loop0): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  205.698498][ T9040] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  205.731717][ T9044] loop4: detected capacity change from 0 to 256
[  205.953229][ T9052] loop5: detected capacity change from 0 to 512
[  206.228764][ T9072] loop3: detected capacity change from 0 to 128
[  206.267205][ T9052] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  206.280410][ T9052] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  206.331749][ T9072] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  206.347779][ T9072] ext4 filesystem being mounted at /230/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  206.402635][   T29] audit: type=1800 audit(1728942372.970:40): pid=9072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1325" name="bus" dev="loop3" ino=12 res=0 errno=0
[  206.465047][ T9084] Quota error (device loop5): do_check_range: Getting block 4128768 out of range 0-5
[  206.609208][ T5223] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  206.659313][ T5236] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.854736][ T9110] loop4: detected capacity change from 0 to 1024
[  206.894949][ T9110] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.032239][ T8571] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.043028][ T5327] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  207.207242][ T5327] usb 2-1: Using ep0 maxpacket: 16
[  207.219793][ T5327] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  207.234038][ T9128] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1348'.
[  207.239422][ T5327] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  207.252104][ T9130] loop2: detected capacity change from 0 to 512
[  207.284538][ T5327] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  207.310395][ T5327] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  207.331080][ T9130] EXT4-fs (loop2): orphan cleanup on readonly fs
[  207.350711][ T9130] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1349: bg 0: block 248: padding at end of block bitmap is not set
[  207.372633][ T9130] Quota error (device loop2): write_blk: dquota write failed
[  207.381260][ T9130] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  207.382561][ T5327] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.399877][ T9130] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.1349: Failed to acquire dquot type 1
[  207.459923][ T5327] usb 2-1: config 0 descriptor??
[  207.463601][ T9130] EXT4-fs (loop2): 1 truncate cleaned up
[  207.490102][ T9130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  207.519740][ T9142] loop5: detected capacity change from 0 to 512
[  207.575360][ T9130] EXT4-fs error (device loop2): ext4_lookup:1817: inode #2: comm syz.2.1349: deleted inode referenced: 12
[  207.636348][ T9142] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  207.700816][ T9142] EXT4-fs (loop5): orphan cleanup on readonly fs
[  207.712575][ T5230] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.752349][ T9142] EXT4-fs warning (device loop5): ext4_enable_quotas:7097: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  207.859160][ T9142] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  207.873083][ T9142] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #13: comm syz.5.1354: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  207.881797][ T5327] microsoft 0003:045E:07DA.0022: ignoring exceeding usage max
[  207.926348][ T5327] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[  207.934771][ T9142] EXT4-fs error (device loop5): ext4_orphan_get:1393: comm syz.5.1354: couldn't read orphan inode 13 (err -117)
[  207.963316][ T5327] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[  207.970920][ T5327] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[  207.985891][ T9142] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  208.003640][ T5327] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[  208.010878][ T5327] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0
[  208.074966][ T5327] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0022/input/input18
[  208.097960][ T9142] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  208.135039][ T9142] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  208.223245][ T5327] microsoft 0003:045E:07DA.0022: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  208.274857][ T9144] loop3: detected capacity change from 0 to 40427
[  208.303410][ T5327] usb 2-1: USB disconnect, device number 12
[  208.311725][ T9144] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[  208.331599][ T9144] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  208.385675][ T9142] EXT4-fs warning (device loop5): ext4_enable_quotas:7097: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  208.437414][ T9144] F2FS-fs (loop3): Found nat_bits in checkpoint
[  208.456525][ T9164] Bluetooth: MGMT ver 1.23
[  208.470622][ T9147] loop0: detected capacity change from 0 to 32768
[  208.497387][ T9142] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  208.543121][ T9142] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  208.567376][ T9142] EXT4-fs warning (device loop5): ext4_enable_quotas:7097: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  208.614800][ T9144] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  208.631179][ T9144] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  208.747461][ T5236] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.906551][ T5223] syz-executor: attempt to access beyond end of device
[  208.906551][ T5223] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  208.921518][ T5223] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  209.136274][ T9183] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1372'.
[  209.204208][ T9173] loop4: detected capacity change from 0 to 32768
[  209.218671][ T9183] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes.
[  209.233515][ T9173] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1367 (9173)
[  209.290761][ T9173] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  209.301885][ T9173] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm
[  209.311105][ T9173] BTRFS info (device loop4): using free-space-tree
[  209.687952][  T931] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  209.696117][  T931] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  209.712160][  T931] hid-generic 0000:0000:0000.0023: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  209.758181][ T9175] loop1: detected capacity change from 0 to 32768
[  209.800105][ T9175] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  209.828013][ T9175] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  209.959602][ T8571] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  209.965851][ T9175] XFS (loop1): Ending clean mount
[  210.018811][ T9175] XFS (loop1): Quotacheck needed: Please wait.
[  210.096582][ T9234] loop5: detected capacity change from 0 to 16
[  210.124345][ T9232] loop3: detected capacity change from 0 to 4096
[  210.131577][ T9238] loop2: detected capacity change from 0 to 512
[  210.153236][ T9238] ext4: Bad value for 'min_batch_time'
[  210.158006][ T9232] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  210.190644][ T9175] XFS (loop1): Quotacheck: Done.
[  210.197137][ T9234] erofs: (device loop5): mounted with root inode @ nid 36.
[  210.563353][ T9240] tipc: Started in network mode
[  210.568758][ T9240] tipc: Node identity , cluster identity 4711
[  210.602725][ T5224] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  210.636680][ T9240] tipc: Failed to set node id, please configure manually
[  210.663903][ T9240] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  210.697429][ T9247] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1394'.
[  211.166097][ T9258] loop1: detected capacity change from 0 to 4096
[  211.413437][ T9277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1406'.
[  211.458610][ T9277] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1406'.
[  211.518959][ T9283] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  211.570873][ T9286] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem
[  211.713244][ T5287] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  211.883118][ T5287] usb 3-1: Using ep0 maxpacket: 16
[  211.895846][ T5287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  211.929094][ T5287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  211.953091][ T5287] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  211.975525][ T5327] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  211.998464][ T5287] usb 3-1: New USB device found, idVendor=056a, idProduct=2a22, bcdDevice=32.49
[  212.017268][ T5287] usb 3-1: New USB device strings: Mfr=132, Product=0, SerialNumber=0
[  212.029194][ T5287] usb 3-1: Manufacturer: syz
[  212.038993][ T5287] usb 3-1: config 0 descriptor??
[  212.093279][ T9300] loop0: detected capacity change from 0 to 2048
[  212.120098][ T9304] loop4: detected capacity change from 0 to 512
[  212.144425][ T9258] nfs4: Deprecated parameter 'intr'
[  212.155212][ T9306] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  212.172328][ T5327] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  212.174581][ T9304] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.195366][ T9304] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  212.198886][ T5327] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  212.272070][ T8571] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.284486][ T5327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.340922][ T5327] gspca_main: stv0680-2.14.0 probing 041e:4007
[  212.427906][ T9316] loop4: detected capacity change from 0 to 512
[  212.435556][ T9316] EXT4-fs: inline encryption not supported
[  212.455766][ T9316] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  212.469925][ T5287] wacom 0003:056A:2A22.0024: unknown main item tag 0x0
[  212.475150][ T9316] EXT4-fs (loop4): 1 truncate cleaned up
[  212.487215][ T5287] wacom 0003:056A:2A22.0024: unknown main item tag 0x0
[  212.495063][ T9316] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.508171][ T5287] wacom 0003:056A:2A22.0024: Unknown device_type for 'syz'. Ignoring.
[  212.558784][ T9316] EXT4-fs (loop4): Online resizing not supported with sparse_super2
[  212.584458][ T9323] loop0: detected capacity change from 0 to 256
[  212.631702][ T8571] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.687119][ T9323] FAT-fs (loop0): Directory bread(block 64) failed
[  212.700352][ T9323] FAT-fs (loop0): Directory bread(block 65) failed
[  212.706732][ T5287] usb 3-1: USB disconnect, device number 11
[  212.717886][ T9323] FAT-fs (loop0): Directory bread(block 66) failed
[  212.735413][ T9323] FAT-fs (loop0): Directory bread(block 67) failed
[  212.742031][ T9323] FAT-fs (loop0): Directory bread(block 68) failed
[  212.757059][ T9323] FAT-fs (loop0): Directory bread(block 69) failed
[  212.767437][ T9323] FAT-fs (loop0): Directory bread(block 70) failed
[  212.778356][ T9323] FAT-fs (loop0): Directory bread(block 71) failed
[  212.788524][ T9323] FAT-fs (loop0): Directory bread(block 72) failed
[  212.798681][ T9323] FAT-fs (loop0): Directory bread(block 73) failed
[  212.971846][ T9339] loop0: detected capacity change from 0 to 8
[  212.973019][ T9335] loop4: detected capacity change from 0 to 2048
[  212.978826][ T9339] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  213.007237][ T9340] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  213.203004][  T931] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  213.313328][ T5348] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  213.383002][  T931] usb 2-1: Using ep0 maxpacket: 8
[  213.397194][ T5327] stv0680 4-1:4.0: STV(e): camera ping failed!!
[  213.397856][  T931] usb 2-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=14.ec
[  213.424962][ T9344] loop4: detected capacity change from 0 to 32768
[  213.439140][  T931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.458719][  T931] usb 2-1: config 0 descriptor??
[  213.464763][ T5348] usb 1-1: too many configurations: 9, using maximum allowed: 8
[  213.476858][  T931] ttusb_dec_send_command: command bulk message failed: error -22
[  213.486910][  T931] ttusb-dec 2-1:0.0: probe with driver ttusb-dec failed with error -22
[  213.490558][ T5348] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  213.525145][ T5348] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  213.553318][ T5348] usb 1-1: config 0 interface 0 has no altsetting 0
[  213.573056][ T5348] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  213.582010][ T5348] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  213.613780][ T9344] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  213.627091][ T5327] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  213.636417][ T5348] usb 1-1: config 0 interface 0 has no altsetting 0
[  213.662964][ T5327] stv0680 4-1:4.0: last error: 173,  command = 0xa9
[  213.683403][ T5348] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  213.692350][ T5348] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  213.704896][ T5327] usb 4-1: USB disconnect, device number 9
[  213.712708][  T931] usb 2-1: USB disconnect, device number 13
[  213.733075][ T5348] usb 1-1: config 0 interface 0 has no altsetting 0
[  213.742843][ T5348] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  213.752221][ T5348] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  213.766423][ T5348] usb 1-1: config 0 interface 0 has no altsetting 0
[  213.774336][ T5348] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  213.784959][ T8571] ocfs2: Unmounting device (7,4) on (node local)
[  213.786945][ T5348] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  213.802365][ T5348] usb 1-1: config 0 interface 0 has no altsetting 0
[  213.824508][ T5348] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  213.834001][ T5348] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  213.845655][ T5348] usb 1-1: config 0 interface 0 has no altsetting 0
[  213.853758][ T5348] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  213.864603][ T5348] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  213.890690][ T5348] usb 1-1: config 0 interface 0 has no altsetting 0
[  213.903933][ T5348] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  213.913380][ T5348] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  213.934897][ T5348] usb 1-1: config 0 interface 0 has no altsetting 0
[  213.951981][ T5348] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  213.962701][ T5348] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  213.980291][ T5348] usb 1-1: Product: syz
[  213.984765][ T5348] usb 1-1: Manufacturer: syz
[  213.989377][ T5348] usb 1-1: SerialNumber: syz
[  214.001723][ T5348] usb 1-1: config 0 descriptor??
[  214.018426][ T5348] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0
[  214.056481][ T9360] loop4: detected capacity change from 0 to 256
[  214.090707][ T9360] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  214.264826][ T5348] usb 1-1: USB disconnect, device number 8
[  214.288673][ T9368] loop4: detected capacity change from 0 to 16
[  214.290479][ T5348] yurex 1-1:0.0: USB YUREX #0 now disconnected
[  214.320103][ T9368] erofs: (device loop4): mounted with root inode @ nid 36.
[  214.481744][ T9376] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1452'.
[  214.684972][ T5287] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  214.713340][ T5327] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  214.853036][ T5287] usb 3-1: Using ep0 maxpacket: 16
[  214.862375][ T5287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  214.881658][ T5287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  214.918136][ T5327] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  214.927439][ T5287] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  214.947726][ T5327] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  214.974180][ T5327] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  214.990175][ T5287] usb 3-1: New USB device found, idVendor=056a, idProduct=0093, bcdDevice= 0.00
[  215.002976][ T5327] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  215.018817][ T5327] usb 5-1: Manufacturer: syz
[  215.024606][ T5287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.041657][ T5327] usb 5-1: config 0 descriptor??
[  215.053895][ T5287] usb 3-1: config 0 descriptor??
[  215.097146][ T9402] loop5: detected capacity change from 0 to 512
[  215.123454][ T5327] rc_core: IR keymap rc-hauppauge not found
[  215.129470][ T5327] Registered IR keymap rc-empty
[  215.149913][ T9402] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  215.171367][ T5327] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  215.198185][ T5327] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input22
[  215.229639][ T9402] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128
[  215.432755][ T9412] loop5: detected capacity change from 0 to 16
[  215.464829][ T9412] erofs: (device loop5): mounted with root inode @ nid 36.
[  215.489225][ T9386] loop3: detected capacity change from 0 to 32768
[  215.506893][ T9386] XFS: noikeep mount option is deprecated.
[  215.515669][ T5287] wacom 0003:056A:0093.0025: hidraw0: USB HID v0.00 Device [HID 056a:0093] on usb-dummy_hcd.2-1/input0
[  215.571518][ T9386] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  215.697472][ T9386] XFS (loop3): Ending clean mount
[  215.712132][ T9386] XFS (loop3): Quotacheck needed: Please wait.
[  215.713482][ T5287] usb 3-1: USB disconnect, device number 12
[  215.720616][ T5286] usb 5-1: USB disconnect, device number 10
[  215.791978][ T9386] XFS (loop3): Quotacheck: Done.
[  215.849849][   T29] audit: type=1800 audit(1728942382.430:41): pid=9386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1456" name="file1" dev="loop3" ino=1062 res=0 errno=0
[  215.954471][ T5223] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  216.185797][ T9405] loop0: detected capacity change from 0 to 40427
[  216.192481][ T9438] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1478'.
[  216.214866][ T9405] F2FS-fs (loop0): build fault injection attr: rate: 694, type: 0x1fffff
[  216.242366][ T9440] tipc: Started in network mode
[  216.248405][ T9405] F2FS-fs (loop0): invalid crc value
[  216.248490][ T9440] tipc: Node identity ac1414aa, cluster identity 4711
[  216.274823][ T9440] tipc: New replicast peer: 100.1.1.1
[  216.280344][ T9440] tipc: Enabled bearer <udp:syz2>, priority 10
[  216.284405][ T9405] F2FS-fs (loop0): Found nat_bits in checkpoint
[  216.309598][ T5286] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  216.389401][ T9446] loop2: detected capacity change from 0 to 128
[  216.436870][ T9405] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  216.503100][ T5286] usb 2-1: Using ep0 maxpacket: 16
[  216.510067][ T5286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  216.549988][ T5286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  216.575922][ T5286] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c1e, bcdDevice= 0.00
[  216.585208][ T5286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.625795][ T5286] usb 2-1: config 0 descriptor??
[  216.650075][ T9448] team0: Port device syz_tun added
[  217.077650][ T5286] corsair-psu 0003:1B1C:1C1E.0026: item fetching failed at offset 2/5
[  217.093627][ T5286] corsair-psu 0003:1B1C:1C1E.0026: probe with driver corsair-psu failed with error -22
[  217.118774][ T5228] F2FS-fs (loop0): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x4f6/0x1ca0
[  217.156747][ T5228] F2FS-fs (loop0): invalid blkaddr: 515, type: 10, run fsck to fix.
[  217.298889][ T5286] usb 2-1: USB disconnect, device number 14
[  218.295099][ T9463] loop2: detected capacity change from 0 to 32768
[  218.397230][ T9463] JBD2: Ignoring recovery information on journal
[  218.656468][ T9463] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  218.887707][ T9480] loop5: detected capacity change from 0 to 32768
[  218.908679][ T9483] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (0, expected 74)
[  218.941699][ T9483] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  218.958798][ T9483] OCFS2: File system is now read-only.
[  218.968959][ T9483] (syz.2.1487,9483,1):ocfs2_search_one_group:1736 ERROR: status = -30
[  218.987371][ T9483] (syz.2.1487,9483,1):ocfs2_claim_suballoc_bits:1975 ERROR: status = -30
[  218.996723][ T9483] (syz.2.1487,9483,1):ocfs2_claim_suballoc_bits:2038 ERROR: status = -30
[  219.007252][ T9483] (syz.2.1487,9483,1):ocfs2_claim_new_inode:2273 ERROR: status = -30
[  219.015785][ T9483] (syz.2.1487,9483,1):ocfs2_claim_new_inode:2288 ERROR: status = -30
[  219.040000][ T9483] (syz.2.1487,9483,1):ocfs2_mknod_locked:637 ERROR: status = -30
[  219.062651][ T9483] (syz.2.1487,9483,1):ocfs2_mknod:383 ERROR: status = -30
[  219.073563][ T9483] (syz.2.1487,9483,1):ocfs2_mknod:500 ERROR: status = -30
[  219.082756][ T9483] (syz.2.1487,9483,1):ocfs2_mkdir:657 ERROR: status = -30
[  221.865123][ T5327] tipc: Node number set to 2886997162
[  222.334450][ T9486] loop0: detected capacity change from 0 to 2048
[  222.356630][ T9486] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  222.392803][ T9487] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  226.389084][ T5244] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  226.406823][ T5244] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  226.415558][ T5244] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  226.425922][ T5244] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  226.440762][ T5244] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  226.448554][ T5244] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  228.248239][ T5227] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  228.263688][ T5227] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  228.272284][ T5227] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  228.283967][ T5227] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  228.292660][ T5227] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  228.301411][ T5227] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  228.354094][ T5227] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  228.371421][ T5227] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  228.380419][ T5227] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  228.388946][ T5227] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  228.399111][ T5227] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  228.407869][ T5227] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  228.513276][ T5227] Bluetooth: hci6: command tx timeout
[  230.214131][ T5244] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  230.227206][ T5244] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  230.237141][ T5244] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  230.248378][ T5244] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  230.262163][ T5244] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  230.271226][ T5244] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  230.332089][ T5244] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  230.342559][ T5244] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  230.354173][ T5227] Bluetooth: hci7: command tx timeout
[  230.361467][ T5244] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  230.378933][ T5244] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  230.389303][ T5244] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  230.403089][ T5244] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  230.433122][ T5242] Bluetooth: hci8: command tx timeout
[  230.593206][ T5242] Bluetooth: hci6: command tx timeout
[  231.872929][    C0] sched: DL replenish lagged too much
[  232.353329][ T5242] Bluetooth: hci9: command tx timeout
[  232.433243][ T5242] Bluetooth: hci10: command tx timeout
[  232.440444][ T5242] Bluetooth: hci7: command tx timeout
[  232.521493][ T5242] Bluetooth: hci8: command tx timeout
[  232.683328][ T5242] Bluetooth: hci6: command tx timeout
[  232.948219][ T5244] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  232.968625][ T5244] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  232.979758][ T5244] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  232.989275][ T5244] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  233.003517][ T5244] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  233.016488][ T5244] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  234.433221][ T5244] Bluetooth: hci9: command tx timeout
[  234.515560][ T5242] Bluetooth: hci10: command tx timeout
[  234.522648][ T5244] Bluetooth: hci7: command tx timeout
[  234.597661][ T5244] Bluetooth: hci8: command tx timeout
[  234.753117][ T5244] Bluetooth: hci6: command tx timeout
[  235.073085][ T5244] Bluetooth: hci11: command tx timeout
[  236.513150][ T5244] Bluetooth: hci9: command tx timeout
[  236.613044][ T5244] Bluetooth: hci7: command tx timeout
[  236.618543][ T5244] Bluetooth: hci10: command tx timeout
[  236.673189][ T5244] Bluetooth: hci8: command tx timeout
[  237.155915][ T5244] Bluetooth: hci11: command tx timeout
[  238.593274][ T5244] Bluetooth: hci9: command tx timeout
[  238.673160][ T5244] Bluetooth: hci10: command tx timeout
[  239.233205][ T5244] Bluetooth: hci11: command tx timeout
[  241.313190][ T5244] Bluetooth: hci11: command tx timeout
[  255.240101][ T1262] ieee802154 phy0 wpan0: encryption failed: -22
[  289.979709][ T5242] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  289.989622][ T5242] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  290.003729][ T5242] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  290.012482][ T5242] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  290.020391][ T5242] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  290.027826][ T5242] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  290.983747][ T5244] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  291.003302][ T5244] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  291.011778][ T5244] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  291.023995][ T5244] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  291.031773][ T5244] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  291.039790][ T5244] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  291.148858][ T5244] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  291.158833][ T5244] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  291.168948][ T5244] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  291.184261][ T5244] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  291.196734][ T5244] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  291.205285][ T5244] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  291.324367][ T5244] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  291.335169][ T5244] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  291.344489][ T5244] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  291.352739][ T5244] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  291.362544][ T5244] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3
[  291.370329][ T5244] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  291.512030][ T5242] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  291.521688][ T5242] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  291.530691][ T5242] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  291.539238][ T5242] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  291.547530][ T5242] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3
[  291.556839][ T5242] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  292.113626][ T5244] Bluetooth: hci12: command tx timeout
[  293.079826][ T5244] Bluetooth: hci13: command tx timeout
[  293.243466][ T5244] Bluetooth: hci14: command tx timeout
[  293.472283][ T5242] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  293.481585][ T5227] Bluetooth: hci15: command tx timeout
[  293.502914][ T5242] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  293.512283][ T5242] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  293.523907][ T5242] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  293.534830][ T5242] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3
[  293.542690][ T5242] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  293.633198][ T5242] Bluetooth: hci16: command tx timeout
[  294.193068][ T5242] Bluetooth: hci12: command tx timeout
[  295.153048][ T5242] Bluetooth: hci13: command tx timeout
[  295.313205][ T5242] Bluetooth: hci14: command tx timeout
[  295.553205][ T5242] Bluetooth: hci15: command tx timeout
[  295.633219][ T5242] Bluetooth: hci17: command tx timeout
[  295.713174][ T5242] Bluetooth: hci16: command tx timeout
[  296.272991][ T5242] Bluetooth: hci12: command tx timeout
[  297.233065][ T5242] Bluetooth: hci13: command tx timeout
[  297.393201][ T5242] Bluetooth: hci14: command tx timeout
[  297.633243][ T5242] Bluetooth: hci15: command tx timeout
[  297.713071][ T5242] Bluetooth: hci17: command tx timeout
[  297.793295][ T5242] Bluetooth: hci16: command tx timeout
[  298.369810][ T5242] Bluetooth: hci12: command tx timeout
[  299.313123][ T5242] Bluetooth: hci13: command tx timeout
[  299.477655][ T5242] Bluetooth: hci14: command tx timeout
[  299.713207][ T5242] Bluetooth: hci15: command tx timeout
[  299.793113][ T5242] Bluetooth: hci17: command tx timeout
[  299.873167][ T5242] Bluetooth: hci16: command tx timeout
[  301.873132][ T5242] Bluetooth: hci17: command tx timeout
[  313.650317][ T5242] Bluetooth: hci3: command 0x0406 tx timeout
[  316.679614][ T1262] ieee802154 phy0 wpan0: encryption failed: -22
[  342.141748][ T5230] ocfs2: Unmounting device (7,2) on (node local)
[  349.483080][ T5242] Bluetooth: hci6: command 0x0406 tx timeout
[  350.132366][ T9521] lo speed is unknown, defaulting to 1000
[  350.320831][ T9523] lo speed is unknown, defaulting to 1000
[  350.484447][ T9525] lo speed is unknown, defaulting to 1000
[  350.636263][ T9528] lo speed is unknown, defaulting to 1000
[  351.429066][ T5227] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  351.444703][ T5227] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  351.453262][ T5227] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  351.474700][ T5227] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  351.482487][ T5227] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3
[  351.503012][ T5227] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  351.686186][ T5238] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1
[  351.697885][ T5238] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9
[  351.708429][ T5238] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9
[  351.717482][ T5238] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4
[  351.726806][ T5238] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3
[  351.734667][ T5238] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2
[  351.836233][ T9537] lo speed is unknown, defaulting to 1000
[  351.888077][ T5248] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1
[  351.904206][ T5248] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9
[  351.913036][ T5248] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9
[  351.922088][ T5248] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4
[  351.931853][ T5248] Bluetooth: hci20: unexpected cc 0x0c25 length: 249 > 3
[  351.939341][ T5248] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2
[  352.049543][ T5232] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1
[  352.063887][ T5232] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9
[  352.083527][ T5232] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9
[  352.091644][ T5232] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4
[  352.102772][ T5232] Bluetooth: hci21: unexpected cc 0x0c25 length: 249 > 3
[  352.113248][ T5232] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2
[  352.131642][ T9528] chnl_net:caif_netlink_parms(): no params data found
[  352.229988][ T9539] lo speed is unknown, defaulting to 1000
[  352.329566][ T5241] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1
[  352.339186][ T5241] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9
[  352.347996][ T5241] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9
[  352.357750][ T5241] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4
[  352.373615][ T5241] Bluetooth: hci22: unexpected cc 0x0c25 length: 249 > 3
[  352.381113][ T5241] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2
[  352.391924][ T9542] lo speed is unknown, defaulting to 1000
[  352.451136][ T9544] lo speed is unknown, defaulting to 1000
[  353.654218][ T9551] Bluetooth: hci23: unexpected cc 0x0c03 length: 249 > 1
[  353.673148][ T9551] Bluetooth: hci23: unexpected cc 0x1003 length: 249 > 9
[  353.681145][ T9551] Bluetooth: hci23: unexpected cc 0x1001 length: 249 > 9
[  353.690959][ T9551] Bluetooth: hci23: unexpected cc 0x0c23 length: 249 > 4
[  353.699054][ T9551] Bluetooth: hci23: unexpected cc 0x0c25 length: 249 > 3
[  353.707004][ T9551] Bluetooth: hci23: unexpected cc 0x0c38 length: 249 > 2
[  354.609807][ T9548] Bluetooth: hci10: command 0x0406 tx timeout
[  354.622989][ T9548] Bluetooth: hci7: command 0x0406 tx timeout
[  354.629113][ T5247] Bluetooth: hci8: command 0x0406 tx timeout
[  354.635797][ T5247] Bluetooth: hci9: command 0x0406 tx timeout
[  359.717983][ T9554] Bluetooth: hci11: command 0x0406 tx timeout
[  378.118690][ T1262] ieee802154 phy0 wpan0: encryption failed: -22
[  411.542637][ T9548] Bluetooth: hci24: unexpected cc 0x0c03 length: 249 > 1
[  411.561722][ T9548] Bluetooth: hci24: unexpected cc 0x1003 length: 249 > 9
[  411.569694][ T9548] Bluetooth: hci24: unexpected cc 0x1001 length: 249 > 9
[  411.577805][ T9548] Bluetooth: hci24: unexpected cc 0x0c23 length: 249 > 4
[  411.585558][ T9548] Bluetooth: hci24: unexpected cc 0x0c25 length: 249 > 3
[  411.597365][ T9548] Bluetooth: hci24: unexpected cc 0x0c38 length: 249 > 2
[  412.759467][ T5247] Bluetooth: hci25: unexpected cc 0x0c03 length: 249 > 1
[  412.769086][ T5247] Bluetooth: hci25: unexpected cc 0x1003 length: 249 > 9
[  412.781694][ T5247] Bluetooth: hci25: unexpected cc 0x1001 length: 249 > 9
[  412.790220][ T5247] Bluetooth: hci25: unexpected cc 0x0c23 length: 249 > 4
[  412.798951][ T5247] Bluetooth: hci25: unexpected cc 0x0c25 length: 249 > 3
[  412.806510][ T5247] Bluetooth: hci25: unexpected cc 0x0c38 length: 249 > 2
[  412.898743][ T9564] Bluetooth: hci26: unexpected cc 0x0c03 length: 249 > 1
[  412.931068][ T9564] Bluetooth: hci26: unexpected cc 0x1003 length: 249 > 9
[  412.939297][ T9564] Bluetooth: hci26: unexpected cc 0x1001 length: 249 > 9
[  412.948285][ T9564] Bluetooth: hci26: unexpected cc 0x0c23 length: 249 > 4
[  412.956453][ T9564] Bluetooth: hci26: unexpected cc 0x0c25 length: 249 > 3
[  412.964121][ T9564] Bluetooth: hci26: unexpected cc 0x0c38 length: 249 > 2
[  413.085839][ T9570] Bluetooth: hci27: unexpected cc 0x0c03 length: 249 > 1
[  413.096052][ T9570] Bluetooth: hci27: unexpected cc 0x1003 length: 249 > 9
[  413.104413][ T9570] Bluetooth: hci27: unexpected cc 0x1001 length: 249 > 9
[  413.112690][ T9570] Bluetooth: hci27: unexpected cc 0x0c23 length: 249 > 4
[  413.121238][ T9570] Bluetooth: hci27: unexpected cc 0x0c25 length: 249 > 3
[  413.131899][ T9570] Bluetooth: hci27: unexpected cc 0x0c38 length: 249 > 2
[  413.218271][ T9567] Bluetooth: hci28: unexpected cc 0x0c03 length: 249 > 1
[  413.229765][ T9567] Bluetooth: hci28: unexpected cc 0x1003 length: 249 > 9
[  413.242472][ T9567] Bluetooth: hci28: unexpected cc 0x1001 length: 249 > 9
[  413.251663][ T9567] Bluetooth: hci28: unexpected cc 0x0c23 length: 249 > 4
[  413.263706][ T9567] Bluetooth: hci28: unexpected cc 0x0c25 length: 249 > 3
[  413.271640][ T9567] Bluetooth: hci28: unexpected cc 0x0c38 length: 249 > 2
[  414.229772][ T9582] Bluetooth: hci29: unexpected cc 0x0c03 length: 249 > 1
[  414.243697][ T9582] Bluetooth: hci29: unexpected cc 0x1003 length: 249 > 9
[  414.252755][ T9582] Bluetooth: hci29: unexpected cc 0x1001 length: 249 > 9
[  414.264136][ T9582] Bluetooth: hci29: unexpected cc 0x0c23 length: 249 > 4
[  414.272394][ T9582] Bluetooth: hci29: unexpected cc 0x0c25 length: 249 > 3
[  414.280299][ T9582] Bluetooth: hci29: unexpected cc 0x0c38 length: 249 > 2
[  416.053094][ T9580] Bluetooth: hci12: command 0x0406 tx timeout
[  416.059295][ T9580] Bluetooth: hci13: command 0x0406 tx timeout
[  416.072756][ T9580] Bluetooth: hci14: command 0x0406 tx timeout
[  416.078973][ T9580] Bluetooth: hci15: command 0x0406 tx timeout
[  416.085150][ T9580] Bluetooth: hci16: command 0x0406 tx timeout
[  416.091403][ T9580] Bluetooth: hci17: command 0x0406 tx timeout
[  439.557926][ T1262] ieee802154 phy0 wpan0: encryption failed: -22
[  470.916945][ T9579] Bluetooth: hci30: unexpected cc 0x0c03 length: 249 > 1
[  470.928103][ T9579] Bluetooth: hci30: unexpected cc 0x1003 length: 249 > 9
[  470.936144][ T9579] Bluetooth: hci30: unexpected cc 0x1001 length: 249 > 9
[  470.944500][ T9579] Bluetooth: hci30: unexpected cc 0x0c23 length: 249 > 4
[  470.954981][ T9579] Bluetooth: hci30: unexpected cc 0x0c25 length: 249 > 3
[  470.962427][ T9579] Bluetooth: hci30: unexpected cc 0x0c38 length: 249 > 2
[  471.398732][ T9584] Bluetooth: hci31: unexpected cc 0x0c03 length: 249 > 1
[  471.421645][ T9584] Bluetooth: hci31: unexpected cc 0x1003 length: 249 > 9
[  471.432150][ T9584] Bluetooth: hci31: unexpected cc 0x1001 length: 249 > 9
[  471.443937][ T9584] Bluetooth: hci31: unexpected cc 0x0c23 length: 249 > 4
[  471.453051][ T9584] Bluetooth: hci31: unexpected cc 0x0c25 length: 249 > 3
[  471.460833][ T9584] Bluetooth: hci31: unexpected cc 0x0c38 length: 249 > 2
[  472.741742][ T9600] Bluetooth: hci32: unexpected cc 0x0c03 length: 249 > 1
[  472.750959][ T9600] Bluetooth: hci32: unexpected cc 0x1003 length: 249 > 9
[  472.774581][ T9600] Bluetooth: hci32: unexpected cc 0x1001 length: 249 > 9
[  472.804057][ T9600] Bluetooth: hci32: unexpected cc 0x0c23 length: 249 > 4
[  472.815581][ T9600] Bluetooth: hci32: unexpected cc 0x0c25 length: 249 > 3
[  472.823421][ T9600] Bluetooth: hci32: unexpected cc 0x0c38 length: 249 > 2
[  473.254501][ T9604] Bluetooth: hci33: unexpected cc 0x0c03 length: 249 > 1
[  473.273259][ T9604] Bluetooth: hci33: unexpected cc 0x1003 length: 249 > 9
[  473.282429][ T9604] Bluetooth: hci33: unexpected cc 0x1001 length: 249 > 9
[  473.305306][ T9604] Bluetooth: hci33: unexpected cc 0x0c23 length: 249 > 4
[  473.314118][ T9604] Bluetooth: hci33: unexpected cc 0x0c25 length: 249 > 3
[  473.335599][ T9604] Bluetooth: hci33: unexpected cc 0x0c38 length: 249 > 2
[  473.765621][ T9608] Bluetooth: hci34: unexpected cc 0x0c03 length: 249 > 1
[  473.783140][ T9608] Bluetooth: hci34: unexpected cc 0x1003 length: 249 > 9
[  473.792228][ T9608] Bluetooth: hci34: unexpected cc 0x1001 length: 249 > 9
[  473.803138][ T9608] Bluetooth: hci34: unexpected cc 0x0c23 length: 249 > 4
[  473.814006][ T9608] Bluetooth: hci34: unexpected cc 0x0c25 length: 249 > 3
[  473.821469][ T9608] Bluetooth: hci34: unexpected cc 0x0c38 length: 249 > 2
[  474.809220][ T9612] Bluetooth: hci35: unexpected cc 0x0c03 length: 249 > 1
[  474.831779][ T9612] Bluetooth: hci35: unexpected cc 0x1003 length: 249 > 9
[  474.843380][ T9612] Bluetooth: hci35: unexpected cc 0x1001 length: 249 > 9
[  474.851453][ T9612] Bluetooth: hci35: unexpected cc 0x0c23 length: 249 > 4
[  474.861509][ T9612] Bluetooth: hci35: unexpected cc 0x0c25 length: 249 > 3
[  474.869274][ T9612] Bluetooth: hci35: unexpected cc 0x0c38 length: 249 > 2
[  500.999984][ T1262] ieee802154 phy0 wpan0: encryption failed: -22
[  508.033192][   T30] INFO: task kworker/u9:0:54 blocked for more than 143 seconds.
[  508.040921][   T30]       Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  508.087978][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  508.133077][   T30] task:kworker/u9:0    state:D stack:25048 pid:54    tgid:54    ppid:2      flags:0x00004000
[  508.170420][   T30] Workqueue: hci8 hci_cmd_sync_work
[  508.245362][   T30] Call Trace:
[  508.248706][   T30]  <TASK>
[  508.251664][   T30]  __schedule+0x1895/0x4b30
[  508.372505][   T30]  ? __pfx___schedule+0x10/0x10
[  508.402972][   T30]  ? __pfx_lock_release+0x10/0x10
[  508.408091][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  508.472812][   T30]  ? kthread_data+0x52/0xd0
[  508.477525][   T30]  ? schedule+0x90/0x320
[  508.513295][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  508.519064][   T30]  ? wq_worker_sleeping+0x66/0x240
[  508.580726][   T30]  ? schedule+0x90/0x320
[  508.599880][   T30]  schedule+0x14b/0x320
[  508.622977][   T30]  schedule_preempt_disabled+0x13/0x30
[  508.628521][   T30]  __mutex_lock+0x6a7/0xd70
[  508.667672][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  508.693090][   T30]  ? __mutex_lock+0x52a/0xd70
[  508.697857][   T30]  ? hci_conn_failed+0x15d/0x300
[  508.702846][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  508.738039][   T30]  ? __pfx_lock_release+0x10/0x10
[  508.782609][   T30]  ? hci_disconnect_sync+0x218/0x3d0
[  508.812939][   T30]  hci_conn_failed+0x15d/0x300
[  508.817906][   T30]  hci_abort_conn_sync+0x583/0xde0
[  508.857619][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  508.883191][   T30]  ? hci_abort_conn_sync+0x1f6/0xde0
[  508.888547][   T30]  ? __pfx_hci_abort_conn_sync+0x10/0x10
[  508.922930][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  508.928225][   T30]  ? hci_conn_valid+0x1f/0x210
[  508.961866][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  509.003146][   T30]  ? hci_conn_valid+0x1f4/0x210
[  509.008109][   T30]  ? __pfx_abort_conn_sync+0x10/0x10
[  509.042964][   T30]  hci_cmd_sync_work+0x22d/0x400
[  509.048028][   T30]  ? process_scheduled_works+0x976/0x1850
[  509.082964][   T30]  process_scheduled_works+0xa65/0x1850
[  509.088641][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  509.136576][   T30]  ? assign_work+0x364/0x3d0
[  509.141360][   T30]  worker_thread+0x870/0xd30
[  509.179894][   T30]  ? __kthread_parkme+0x169/0x1d0
[  509.203062][   T30]  ? __pfx_worker_thread+0x10/0x10
[  509.208296][   T30]  kthread+0x2f2/0x390
[  509.212419][   T30]  ? __pfx_worker_thread+0x10/0x10
[  509.250112][   T30]  ? __pfx_kthread+0x10/0x10
[  509.263439][   T30]  ret_from_fork+0x4d/0x80
[  509.267960][   T30]  ? __pfx_kthread+0x10/0x10
[  509.272599][   T30]  ret_from_fork_asm+0x1a/0x30
[  509.310740][   T30]  </TASK>
[  509.317591][   T30] INFO: task kworker/u8:7:1089 blocked for more than 144 seconds.
[  509.350147][   T30]       Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0
[  509.373114][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  509.381888][   T30] task:kworker/u8:7    state:D stack:20792 pid:1089  tgid:1089  ppid:2      flags:0x00004000
[  509.463664][   T30] Workqueue: events_unbound linkwatch_event
[  509.469715][   T30] Call Trace:
[  509.494344][   T30]  <TASK>
[  509.497371][   T30]  __schedule+0x1895/0x4b30
[  509.517506][   T30]  ? __pfx___schedule+0x10/0x10
[  509.522637][   T30]  ? __pfx_lock_release+0x10/0x10
[  509.540773][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  509.558108][   T30]  ? kthread_data+0x52/0xd0
[  509.562713][   T30]  ? schedule+0x90/0x320
[  509.583080][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  509.588807][   T30]  ? wq_worker_sleeping+0x66/0x240
[  509.623098][   T30]  ? schedule+0x90/0x320
[  509.627507][   T30]  schedule+0x14b/0x320
[  509.631720][   T30]  schedule_preempt_disabled+0x13/0x30
[  509.670400][   T30]  __mutex_lock+0x6a7/0xd70
[  509.682932][   T30]  ? __mutex_lock+0x52a/0xd70
[  509.687676][   T30]  ? linkwatch_event+0xe/0x60
[  509.709101][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  509.726132][   T30]  ? process_scheduled_works+0x976/0x1850
[  509.731923][   T30]  linkwatch_event+0xe/0x60
[  509.756926][   T30]  process_scheduled_works+0xa65/0x1850
[  509.762648][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  509.790793][   T30]  ? assign_work+0x364/0x3d0
[  509.818064][   T30]  worker_thread+0x870/0xd30
[  509.822796][   T30]  ? __kthread_parkme+0x169/0x1d0
[  509.861050][   T30]  ? __pfx_worker_thread+0x10/0x10
[  509.866494][   T30]  kthread+0x2f2/0x390
[  509.870634][   T30]  ? __pfx_worker_thread+0x10/0x10
[  509.895587][   T30]  ? __pfx_kthread+0x10/0x10
[  509.912999][   T30]  ret_from_fork+0x4d/0x80
[  509.917534][   T30]  ? __pfx_kthread+0x10/0x10
[  509.922190][   T30]  ret_from_fork_asm+0x1a/0x30
[  509.953403][   T30]  </TASK>
[  509.973236][   T30] INFO: task kworker/u9:1:4618 blocked for more than 145 seconds.
[  509.981197][   T30]       Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0
[  510.033352][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  510.042137][   T30] task:kworker/u9:1    state:D stack:25808 pid:4618  tgid:4618  ppid:2      flags:0x00004000
[  510.088599][   T30] Workqueue: hci7 hci_cmd_sync_work
[  510.112468][   T30] Call Trace:
[  510.120370][   T30]  <TASK>
[  510.133040][   T30]  __schedule+0x1895/0x4b30
[  510.137672][   T30]  ? __pfx___schedule+0x10/0x10
[  510.142588][   T30]  ? __pfx_lock_release+0x10/0x10
[  510.178445][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  510.197766][   T30]  ? kthread_data+0x52/0xd0
[  510.202371][   T30]  ? schedule+0x90/0x320
[  510.227638][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  510.250147][   T30]  ? wq_worker_sleeping+0x66/0x240
[  510.262966][   T30]  ? schedule+0x90/0x320
[  510.267324][   T30]  schedule+0x14b/0x320
[  510.271544][   T30]  schedule_preempt_disabled+0x13/0x30
[  510.300519][   T30]  __mutex_lock+0x6a7/0xd70
[  510.322337][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  510.340844][   T30]  ? __mutex_lock+0x52a/0xd70
[  510.352207][   T30]  ? hci_conn_failed+0x15d/0x300
[  510.367769][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  510.385343][   T30]  ? __pfx_lock_release+0x10/0x10
[  510.390470][   T30]  ? hci_disconnect_sync+0x218/0x3d0
[  510.423603][   T30]  hci_conn_failed+0x15d/0x300
[  510.428501][   T30]  hci_abort_conn_sync+0x583/0xde0
[  510.483201][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  510.488354][   T30]  ? hci_abort_conn_sync+0x1f6/0xde0
[  510.513126][   T30]  ? __pfx_hci_abort_conn_sync+0x10/0x10
[  510.518897][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  510.547509][   T30]  ? hci_conn_valid+0x1f/0x210
[  510.552433][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  510.576359][   T30]  ? hci_conn_valid+0x1f4/0x210
[  510.581361][   T30]  ? __pfx_abort_conn_sync+0x10/0x10
[  510.610610][   T30]  hci_cmd_sync_work+0x22d/0x400
[  510.631440][   T30]  ? process_scheduled_works+0x976/0x1850
[  510.650652][   T30]  process_scheduled_works+0xa65/0x1850
[  510.670864][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  510.691976][   T30]  ? assign_work+0x364/0x3d0
[  510.710667][   T30]  worker_thread+0x870/0xd30
[  510.723304][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  510.729028][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  510.761882][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  510.782944][   T30]  ? __kthread_parkme+0x169/0x1d0
[  510.788112][   T30]  ? __pfx_worker_thread+0x10/0x10
[  510.812931][   T30]  kthread+0x2f2/0x390
[  510.817124][   T30]  ? __pfx_worker_thread+0x10/0x10
[  510.856886][   T30]  ? __pfx_kthread+0x10/0x10
[  510.861573][   T30]  ret_from_fork+0x4d/0x80
[  510.889762][   T30]  ? __pfx_kthread+0x10/0x10
[  510.899393][   T30]  ret_from_fork_asm+0x1a/0x30
[  510.920499][   T30]  </TASK>
[  510.925314][   T30] INFO: task syz-executor:5223 blocked for more than 146 seconds.
[  510.945068][   T30]       Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0
[  510.962230][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  510.971441][   T30] task:syz-executor    state:D stack:19600 pid:5223  tgid:5223  ppid:1      flags:0x00004006
[  510.990387][   T30] Call Trace:
[  510.998955][   T30]  <TASK>
[  511.001942][   T30]  __schedule+0x1895/0x4b30
[  511.015991][   T30]  ? __pfx___schedule+0x10/0x10
[  511.020941][   T30]  ? __pfx_lock_release+0x10/0x10
[  511.038355][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  511.049485][   T30]  ? schedule+0x90/0x320
[  511.057681][   T30]  schedule+0x14b/0x320
[  511.061946][   T30]  schedule_preempt_disabled+0x13/0x30
[  511.072496][   T30]  __mutex_lock+0x6a7/0xd70
[  511.082928][   T30]  ? __mutex_lock+0x52a/0xd70
[  511.087661][   T30]  ? synchronize_rcu_expedited+0x451/0x830
[  511.101746][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  511.107178][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  511.112853][   T30]  ? do_raw_spin_unlock+0x13c/0x8b0
[  511.129153][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  511.143265][   T30]  synchronize_rcu_expedited+0x451/0x830
[  511.149123][   T30]  ? __pfx_synchronize_rcu_expedited+0x10/0x10
[  511.166020][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  511.171737][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  511.183261][   T30]  ? __pfx___might_resched+0x10/0x10
[  511.188606][   T30]  ? skb_queue_purge_reason+0x2de/0x500
[  511.203876][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  511.210285][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  511.222956][   T30]  synchronize_rcu+0x11b/0x360
[  511.227818][   T30]  ? __pfx_synchronize_rcu+0x10/0x10
[  511.246653][   T30]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  511.252712][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  511.265744][   T30]  hci_conn_del+0x578/0xc40
[  511.270323][   T30]  hci_conn_hash_flush+0x18e/0x240
[  511.281159][   T30]  hci_dev_close_sync+0x9ef/0x11a0
[  511.291550][   T30]  hci_unregister_dev+0x20b/0x510
[  511.301427][   T30]  vhci_release+0x80/0xd0
[  511.309423][   T30]  ? __pfx_vhci_release+0x10/0x10
[  511.319964][   T30]  __fput+0x241/0x880
[  511.329209][   T30]  task_work_run+0x251/0x310
[  511.341407][   T30]  ? kasan_quarantine_put+0xdc/0x230
[  511.351172][   T30]  ? __pfx_task_work_run+0x10/0x10
[  511.361201][   T30]  ? do_exit+0xa2a/0x28e0
[  511.370832][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  511.381384][   T30]  ? kmem_cache_free+0x1a2/0x420
[  511.390160][   T30]  ? do_exit+0xa2a/0x28e0
[  511.399839][   T30]  do_exit+0xa2f/0x28e0
[  511.407775][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  511.420029][   T30]  ? __pfx_do_exit+0x10/0x10
[  511.429153][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  511.441583][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  511.458168][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  511.467819][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  511.490655][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[  511.497793][   T30]  do_group_exit+0x207/0x2c0
[  511.502437][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  511.513028][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  511.518795][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  511.533792][   T30]  get_signal+0x16a3/0x1740
[  511.540584][   T30]  ? __pfx_get_signal+0x10/0x10
[  511.553069][   T30]  arch_do_signal_or_restart+0x96/0x860
[  511.558681][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  511.573444][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  511.579502][   T30]  ? syscall_exit_to_user_mode+0xa3/0x370
[  511.593110][   T30]  syscall_exit_to_user_mode+0xc9/0x370
[  511.598723][   T30]  do_syscall_64+0x100/0x230
[  511.610998][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  511.620211][   T30] RIP: 0033:0x7fd427974257
[  511.633145][   T30] RSP: 002b:00007ffe8ee001b0 EFLAGS: 00000293 ORIG_RAX: 000000000000003d
[  511.652601][   T30] RAX: fffffffffffffe00 RBX: 0000000000000211 RCX: 00007fd427974257
[  511.670793][   T30] RDX: 0000000040000000 RSI: 00007ffe8ee0020c RDI: 00000000ffffffff
[  511.679472][   T30] RBP: 00007ffe8ee0020c R08: 0000000000000000 R09: 7fffffffffffffff
[  511.693221][   T30] R10: 0000000000000000 R11: 0000000000000293 R12: 000055559342f5eb
[  511.701284][   T30] R13: 000055559342f590 R14: 0000000000035014 R15: 00007ffe8ee00260
[  511.719608][   T30]  </TASK>
[  511.722763][   T30] INFO: task kworker/u9:2:5227 blocked for more than 147 seconds.
[  511.733112][   T30]       Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0
[  511.751624][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  511.762861][   T30] task:kworker/u9:2    state:D stack:25584 pid:5227  tgid:5227  ppid:2      flags:0x00004000
[  511.781295][   T30] Workqueue: hci21 hci_rx_work
[  511.795353][   T30] Call Trace:
[  511.799314][   T30]  <TASK>
[  511.802303][   T30]  __schedule+0x1895/0x4b30
[  511.814341][   T30]  ? __pfx___schedule+0x10/0x10
[  511.819256][   T30]  ? __pfx_lock_release+0x10/0x10
[  511.831928][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  511.840352][   T30]  ? kthread_data+0x52/0xd0
[  511.852921][   T30]  ? schedule+0x90/0x320
[  511.857243][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  511.871461][   T30]  ? wq_worker_sleeping+0x66/0x240
[  511.885449][   T30]  ? schedule+0x90/0x320
[  511.889755][   T30]  schedule+0x14b/0x320
[  511.902476][   T30]  schedule_preempt_disabled+0x13/0x30
[  511.909768][   T30]  __mutex_lock+0x6a7/0xd70
[  511.922580][   T30]  ? __mutex_lock+0x52a/0xd70
[  511.927632][   T30]  ? hci_remote_features_evt+0x473/0xaa0
[  511.941493][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  511.949094][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  511.958810][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  511.971775][   T30]  ? skb_queue_tail+0x36/0x120
[  511.978592][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  511.991149][   T30]  ? hci_send_cmd+0xb6/0x180
[  511.996001][   T30]  hci_remote_features_evt+0x473/0xaa0
[  512.001556][   T30]  ? __pfx_hci_remote_features_evt+0x10/0x10
[  512.017498][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  512.026825][   T30]  ? skb_pull_data+0x112/0x230
[  512.031647][   T30]  hci_event_packet+0xac4/0x1540
[  512.043008][   T30]  ? __pfx_hci_remote_features_evt+0x10/0x10
[  512.050410][   T30]  ? __pfx_hci_event_packet+0x10/0x10
[  512.065642][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  512.071336][   T30]  ? send_count+0x1b0/0x1b0
[  512.082922][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  512.088700][   T30]  ? kcov_remote_start+0x97/0x7d0
[  512.102634][   T30]  hci_rx_work+0x3fe/0xd80
[  512.107414][   T30]  ? process_scheduled_works+0x976/0x1850
[  512.122448][   T30]  process_scheduled_works+0xa65/0x1850
[  512.128154][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  512.142932][   T30]  ? assign_work+0x364/0x3d0
[  512.147758][   T30]  worker_thread+0x870/0xd30
[  512.163201][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  512.169434][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  512.183716][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  512.189694][   T30]  ? __kthread_parkme+0x169/0x1d0
[  512.204413][   T30]  ? __pfx_worker_thread+0x10/0x10
[  512.209594][   T30]  kthread+0x2f2/0x390
[  512.221738][   T30]  ? __pfx_worker_thread+0x10/0x10
[  512.227218][   T30]  ? __pfx_kthread+0x10/0x10
[  512.231846][   T30]  ret_from_fork+0x4d/0x80
[  512.246178][   T30]  ? __pfx_kthread+0x10/0x10
[  512.250818][   T30]  ret_from_fork_asm+0x1a/0x30
[  512.263002][   T30]  </TASK>
[  512.269869][   T30] INFO: task syz-executor:5228 blocked for more than 147 seconds.
[  512.282917][   T30]       Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0
[  512.290576][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  512.309006][   T30] task:syz-executor    state:D stack:20368 pid:5228  tgid:5228  ppid:1      flags:0x00004006
[  512.328050][   T30] Call Trace:
[  512.331365][   T30]  <TASK>
[  512.339844][   T30]  __schedule+0x1895/0x4b30
[  512.349269][   T30]  ? __pfx___schedule+0x10/0x10
[  512.360686][   T30]  ? __pfx_lock_release+0x10/0x10
[  512.377831][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  512.388069][   T30]  ? schedule+0x90/0x320
[  512.392452][   T30]  schedule+0x14b/0x320
[  512.400453][   T30]  schedule_preempt_disabled+0x13/0x30
[  512.409849][   T30]  __mutex_lock+0x6a7/0xd70
[  512.420582][   T30]  ? __mutex_lock+0x52a/0xd70
[  512.429162][   T30]  ? hci_conn_hash_flush+0xa6/0x240
[  512.439856][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  512.450078][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  512.458456][   T30]  hci_conn_hash_flush+0xa6/0x240
[  512.471250][   T30]  hci_dev_close_sync+0x9ef/0x11a0
[  512.478530][   T30]  hci_unregister_dev+0x20b/0x510
[  512.492253][   T30]  vhci_release+0x80/0xd0
[  512.498142][   T30]  ? __pfx_vhci_release+0x10/0x10
[  512.510041][   T30]  __fput+0x241/0x880
[  512.522825][   T30]  task_work_run+0x251/0x310
[  512.527598][   T30]  ? kasan_quarantine_put+0xdc/0x230
[  512.542724][   T30]  ? __pfx_task_work_run+0x10/0x10
[  512.548850][   T30]  ? do_exit+0xa2a/0x28e0
[  512.561041][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  512.569564][   T30]  ? kmem_cache_free+0x1a2/0x420
[  512.582572][   T30]  ? do_exit+0xa2a/0x28e0
[  512.589467][   T30]  do_exit+0xa2f/0x28e0
[  512.599684][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  512.607985][   T30]  ? __pfx_do_exit+0x10/0x10
[  512.612610][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  512.628002][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  512.636270][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  512.642306][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  512.657433][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[  512.669781][   T30]  do_group_exit+0x207/0x2c0
[  512.680921][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  512.689745][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  512.700348][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  512.710578][   T30]  get_signal+0x16a3/0x1740
[  512.719880][   T30]  ? __pfx_get_signal+0x10/0x10
[  512.728356][   T30]  ? path_umount+0x284/0xf70
[  512.737751][   T30]  arch_do_signal_or_restart+0x96/0x860
[  512.748521][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  512.760683][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  512.773085][   T30]  ? __x64_sys_umount+0x123/0x170
[  512.778151][   T30]  ? syscall_exit_to_user_mode+0xa3/0x370
[  512.793896][   T30]  syscall_exit_to_user_mode+0xc9/0x370
[  512.799501][   T30]  do_syscall_64+0x100/0x230
[  512.812210][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  512.819148][   T30] RIP: 0033:0x7fe04a37f327
[  512.832765][   T30] RSP: 002b:00007ffe7fca9748 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  512.841725][   T30] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fe04a37f327
[  512.857806][   T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7fca9800
[  512.871328][   T30] RBP: 00007ffe7fca9800 R08: 0000000000000000 R09: 0000000000000000
[  512.886536][   T30] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe7fcaa880
[  512.899326][   T30] R13: 00007fe04a3f0134 R14: 000000000003643b R15: 00007ffe7fcaa8c0
[  512.911588][   T30]  </TASK>
[  512.923088][   T30] INFO: task syz-executor:5230 blocked for more than 148 seconds.
[  512.930948][   T30]       Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0
[  512.946372][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  512.959951][   T30] task:syz-executor    state:D stack:19120 pid:5230  tgid:5230  ppid:1      flags:0x00004006
[  512.980765][   T30] Call Trace:
[  512.986844][   T30]  <TASK>
[  512.990570][   T30]  __schedule+0x1895/0x4b30
[  513.002957][   T30]  ? __pfx___schedule+0x10/0x10
[  513.007951][   T30]  ? __pfx_lock_release+0x10/0x10
[  513.020775][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  513.026665][   T30]  ? schedule+0x90/0x320
[  513.030965][   T30]  schedule+0x14b/0x320
[  513.042939][   T30]  schedule_preempt_disabled+0x13/0x30
[  513.048479][   T30]  __mutex_lock+0x6a7/0xd70
[  513.060643][   T30]  ? __mutex_lock+0x52a/0xd70
[  513.065898][   T30]  ? hci_conn_hash_flush+0xa6/0x240
[  513.071157][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  513.086384][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  513.100862][   T30]  hci_conn_hash_flush+0xa6/0x240
[  513.106539][   T30]  hci_dev_close_sync+0x9ef/0x11a0
[  513.111745][   T30]  hci_unregister_dev+0x20b/0x510
[  513.122929][   T30]  vhci_release+0x80/0xd0
[  513.127320][   T30]  ? __pfx_vhci_release+0x10/0x10
[  513.132428][   T30]  __fput+0x241/0x880
[  513.144375][   T30]  task_work_run+0x251/0x310
[  513.149043][   T30]  ? kasan_quarantine_put+0xdc/0x230
[  513.164096][   T30]  ? __pfx_task_work_run+0x10/0x10
[  513.169273][   T30]  ? do_exit+0xa2a/0x28e0
[  513.182939][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  513.188715][   T30]  ? kmem_cache_free+0x1a2/0x420
[  513.201642][   T30]  ? do_exit+0xa2a/0x28e0
[  513.208576][   T30]  do_exit+0xa2f/0x28e0
[  513.212786][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  513.223359][   T30]  ? __pfx_do_exit+0x10/0x10
[  513.227994][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  513.243723][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  513.249412][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  513.262928][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  513.269402][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[  513.286581][   T30]  do_group_exit+0x207/0x2c0
[  513.291232][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  513.305891][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  513.311630][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  513.327467][   T30]  get_signal+0x16a3/0x1740
[  513.332038][   T30]  ? __pfx_get_signal+0x10/0x10
[  513.341881][   T30]  ? path_umount+0x284/0xf70
[  513.350210][   T30]  arch_do_signal_or_restart+0x96/0x860
[  513.360708][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  513.372007][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  513.382924][   T30]  ? __x64_sys_umount+0x123/0x170
[  513.388172][   T30]  ? syscall_exit_to_user_mode+0xa3/0x370
[  513.402139][   T30]  syscall_exit_to_user_mode+0xc9/0x370
[  513.408108][   T30]  do_syscall_64+0x100/0x230
[  513.412745][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  513.429243][   T30] RIP: 0033:0x7fafd997f327
[  513.437470][   T30] RSP: 002b:00007ffe346de1e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  513.450605][   T30] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fafd997f327
[  513.462999][   T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe346de2a0
[  513.471002][   T30] RBP: 00007ffe346de2a0 R08: 0000000000000000 R09: 0000000000000000
[  513.489429][   T30] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe346df320
[  513.501880][   T30] R13: 00007fafd99f0134 R14: 0000000000034fa4 R15: 00007ffe346df360
[  513.513159][   T30]  </TASK>
[  513.516218][   T30] INFO: task kworker/u9:3:5232 blocked for more than 148 seconds.
[  513.531654][   T30]       Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0
[  513.541598][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  513.568367][   T30] task:kworker/u9:3    state:D stack:25816 pid:5232  tgid:5232  ppid:2      flags:0x00004000
[  513.582772][   T30] Workqueue: hci10 hci_cmd_sync_work
[  513.598980][   T30] Call Trace:
[  513.602298][   T30]  <TASK>
[  513.608010][   T30]  __schedule+0x1895/0x4b30
[  513.612688][   T30]  ? __pfx___schedule+0x10/0x10
[  513.627941][   T30]  ? __pfx_lock_release+0x10/0x10
[  513.638382][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  513.648406][   T30]  ? kthread_data+0x52/0xd0
[  513.657716][   T30]  ? schedule+0x90/0x320
[  513.662008][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  513.672822][   T30]  ? wq_worker_sleeping+0x66/0x240
[  513.678119][   T30]  ? schedule+0x90/0x320
[  513.682402][   T30]  schedule+0x14b/0x320
[  513.697139][   T30]  schedule_preempt_disabled+0x13/0x30
[  513.702652][   T30]  __mutex_lock+0x6a7/0xd70
[  513.713055][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  513.718734][   T30]  ? __mutex_lock+0x52a/0xd70
[  513.731753][   T30]  ? hci_conn_failed+0x15d/0x300
[  513.738310][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  513.751617][   T30]  ? __pfx_lock_release+0x10/0x10
[  513.758672][   T30]  ? hci_disconnect_sync+0x218/0x3d0
[  513.770964][   T30]  hci_conn_failed+0x15d/0x300
[  513.777363][   T30]  hci_abort_conn_sync+0x583/0xde0
[  513.782522][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  513.803011][   T30]  ? hci_abort_conn_sync+0x1f6/0xde0
[  513.809161][   T30]  ? __pfx_hci_abort_conn_sync+0x10/0x10
[  513.822797][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  513.829614][   T30]  ? hci_conn_valid+0x1f/0x210
[  513.842990][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  513.848681][   T30]  ? hci_conn_valid+0x1f4/0x210
[  513.862454][   T30]  ? __pfx_abort_conn_sync+0x10/0x10
[  513.870010][   T30]  hci_cmd_sync_work+0x22d/0x400
[  513.883140][   T30]  ? process_scheduled_works+0x976/0x1850
[  513.888914][   T30]  process_scheduled_works+0xa65/0x1850
[  513.906183][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  513.912237][   T30]  ? assign_work+0x364/0x3d0
[  513.926532][   T30]  worker_thread+0x870/0xd30
[  513.931212][   T30]  ? __kthread_parkme+0x169/0x1d0
[  513.940301][   T30]  ? __pfx_worker_thread+0x10/0x10
[  513.950995][   T30]  kthread+0x2f2/0x390
[  513.963028][   T30]  ? __pfx_worker_thread+0x10/0x10
[  513.968334][   T30]  ? __pfx_kthread+0x10/0x10
[  513.982850][   T30]  ret_from_fork+0x4d/0x80
[  513.987518][   T30]  ? __pfx_kthread+0x10/0x10
[  513.992156][   T30]  ret_from_fork_asm+0x1a/0x30
[  514.009191][   T30]  </TASK>
[  514.012409][   T30] INFO: task syz-executor:5236 blocked for more than 149 seconds.
[  514.026605][   T30]       Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0
[  514.044895][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  514.060870][   T30] task:syz-executor    state:D stack:20016 pid:5236  tgid:5236  ppid:1      flags:0x00004006
[  514.071591][   T30] Call Trace:
[  514.083486][   T30]  <TASK>
[  514.086617][   T30]  __schedule+0x1895/0x4b30
[  514.091196][   T30]  ? __pfx___schedule+0x10/0x10
[  514.107610][   T30]  ? __pfx_lock_release+0x10/0x10
[  514.112722][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  514.126120][   T30]  ? schedule+0x90/0x320
[  514.130449][   T30]  schedule+0x14b/0x320
[  514.141994][   T30]  synchronize_rcu_expedited+0x70a/0x830
[  514.149262][   T30]  ? __pfx_synchronize_rcu_expedited+0x10/0x10
[  514.162683][   T30]  ? __pfx_autoremove_wake_function+0x10/0x10
[  514.171849][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.186408][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.192114][   T30]  ? __pfx___might_resched+0x10/0x10
[  514.207653][   T30]  ? rcu_is_watching+0x15/0xb0
[  514.212472][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.226369][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.232187][   T30]  synchronize_rcu+0x11b/0x360
[  514.243007][   T30]  ? __pfx_synchronize_rcu+0x10/0x10
[  514.248369][   T30]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  514.263304][   T30]  hci_chan_del+0x119/0x1b0
[  514.267907][   T30]  ? __pfx_l2cap_disconn_cfm+0x10/0x10
[  514.282929][   T30]  l2cap_conn_del+0x4ed/0x690
[  514.287689][   T30]  ? __pfx_l2cap_disconn_cfm+0x10/0x10
[  514.302704][   T30]  hci_conn_hash_flush+0x101/0x240
[  514.310926][   T30]  hci_dev_close_sync+0x9ef/0x11a0
[  514.322568][   T30]  hci_unregister_dev+0x20b/0x510
[  514.330150][   T30]  vhci_release+0x80/0xd0
[  514.341787][   T30]  ? __pfx_vhci_release+0x10/0x10
[  514.349598][   T30]  __fput+0x241/0x880
[  514.362613][   T30]  task_work_run+0x251/0x310
[  514.367664][   T30]  ? kasan_quarantine_put+0xdc/0x230
[  514.382849][   T30]  ? __pfx_task_work_run+0x10/0x10
[  514.388047][   T30]  ? do_exit+0xa2a/0x28e0
[  514.392402][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.408736][   T30]  ? kmem_cache_free+0x1a2/0x420
[  514.418813][   T30]  ? do_exit+0xa2a/0x28e0
[  514.429744][   T30]  do_exit+0xa2f/0x28e0
[  514.438227][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.448717][   T30]  ? __pfx_do_exit+0x10/0x10
[  514.457057][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  514.462480][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.474553][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  514.480589][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  514.492917][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[  514.498089][   T30]  do_group_exit+0x207/0x2c0
[  514.502704][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  514.519089][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.529679][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  514.539750][   T30]  get_signal+0x16a3/0x1740
[  514.549335][   T30]  ? __pfx_get_signal+0x10/0x10
[  514.560366][   T30]  ? path_umount+0x284/0xf70
[  514.568686][   T30]  arch_do_signal_or_restart+0x96/0x860
[  514.579032][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  514.589530][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  514.609680][   T30]  ? __x64_sys_umount+0x123/0x170
[  514.619583][   T30]  ? syscall_exit_to_user_mode+0xa3/0x370
[  514.629902][   T30]  syscall_exit_to_user_mode+0xc9/0x370
[  514.641949][   T30]  do_syscall_64+0x100/0x230
[  514.649127][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.661190][   T30] RIP: 0033:0x7f6138b7f327
[  514.669738][   T30] RSP: 002b:00007ffe7d6ac858 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  514.682916][   T30] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f6138b7f327
[  514.690923][   T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7d6ac910
[  514.707991][   T30] RBP: 00007ffe7d6ac910 R08: 0000000000000000 R09: 0000000000000000
[  514.723004][   T30] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe7d6ad990
[  514.731580][   T30] R13: 00007f6138bf0134 R14: 0000000000035439 R15: 00007ffe7d6ad9d0
[  514.748625][   T30]  </TASK>
[  514.751759][   T30] INFO: task kworker/u9:4:5238 blocked for more than 150 seconds.
[  514.765157][   T30]       Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0
[  514.772844][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  514.787622][   T30] task:kworker/u9:4    state:D stack:25496 pid:5238  tgid:5238  ppid:2      flags:0x00004000
[  514.802119][   T30] Workqueue: hci19 hci_rx_work
[  514.813644][   T30] Call Trace:
[  514.816955][   T30]  <TASK>
[  514.819907][   T30]  __schedule+0x1895/0x4b30
[  514.833845][   T30]  ? __pfx___schedule+0x10/0x10
[  514.838765][   T30]  ? __pfx_lock_release+0x10/0x10
[  514.853038][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  514.858546][   T30]  ? kthread_data+0x52/0xd0
[  514.873299][   T30]  ? schedule+0x90/0x320
[  514.877602][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.891749][   T30]  ? wq_worker_sleeping+0x66/0x240
[  514.897259][   T30]  ? schedule+0x90/0x320
[  514.901567][   T30]  schedule+0x14b/0x320
[  514.913397][   T30]  schedule_preempt_disabled+0x13/0x30
[  514.925169][   T30]  __mutex_lock+0x6a7/0xd70
[  514.937534][   T30]  ? __mutex_lock+0x52a/0xd70
[  514.942293][   T30]  ? hci_remote_features_evt+0x473/0xaa0
[  514.950935][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  514.962925][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.968617][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.983148][   T30]  ? skb_queue_tail+0x36/0x120
[  514.987973][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  515.002926][   T30]  ? hci_send_cmd+0xb6/0x180
[  515.007608][   T30]  hci_remote_features_evt+0x473/0xaa0
[  515.021161][   T30]  ? __pfx_hci_remote_features_evt+0x10/0x10
[  515.030739][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  515.041824][   T30]  ? skb_pull_data+0x112/0x230
[  515.051793][   T30]  hci_event_packet+0xac4/0x1540
[  515.061646][   T30]  ? __pfx_hci_remote_features_evt+0x10/0x10
[  515.071433][   T30]  ? __pfx_hci_event_packet+0x10/0x10
[  515.082941][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  515.088652][   T30]  ? send_count+0x1b0/0x1b0
[  515.102530][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  515.108540][   T30]  ? kcov_remote_start+0x97/0x7d0
[  515.123934][   T30]  hci_rx_work+0x3fe/0xd80
[  515.128413][   T30]  ? process_scheduled_works+0x976/0x1850
[  515.144602][   T30]  process_scheduled_works+0xa65/0x1850
[  515.150240][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  515.163316][   T30]  ? assign_work+0x364/0x3d0
[  515.167959][   T30]  worker_thread+0x870/0xd30
[  515.172607][   T30]  ? __kthread_parkme+0x169/0x1d0
[  515.186442][   T30]  ? __pfx_worker_thread+0x10/0x10
[  515.191691][   T30]  kthread+0x2f2/0x390
[  515.200944][   T30]  ? __pfx_worker_thread+0x10/0x10
[  515.211786][   T30]  ? __pfx_kthread+0x10/0x10
[  515.221179][   T30]  ret_from_fork+0x4d/0x80
[  515.231513][   T30]  ? __pfx_kthread+0x10/0x10
[  515.245389][   T30]  ret_from_fork_asm+0x1a/0x30
[  515.250224][   T30]  </TASK>
[  515.259724][   T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  515.272370][   T30] INFO: task kworker/u9:5:5241 blocked for more than 150 seconds.
[  515.285122][   T30]       Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0
[  515.292776][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  515.311604][   T30] task:kworker/u9:5    state:D stack:25392 pid:5241  tgid:5241  ppid:2      flags:0x00004000
[  515.326610][   T30] Workqueue: hci22 hci_rx_work
[  515.331433][   T30] Call Trace:
[  515.346347][   T30]  <TASK>
[  515.349320][   T30]  __schedule+0x1895/0x4b30
[  515.359558][   T30]  ? __pfx___schedule+0x10/0x10
[  515.368311][   T30]  ? __pfx_lock_release+0x10/0x10
[  515.380063][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  515.389496][   T30]  ? kthread_data+0x52/0xd0
[  515.399862][   T30]  ? schedule+0x90/0x320
[  515.407792][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  515.419823][   T30]  ? wq_worker_sleeping+0x66/0x240
[  515.431616][   T30]  ? schedule+0x90/0x320
[  515.440727][   T30]  schedule+0x14b/0x320
[  515.449915][   T30]  schedule_preempt_disabled+0x13/0x30
[  515.459601][   T30]  __mutex_lock+0x6a7/0xd70
[  515.470116][   T30]  ? __mutex_lock+0x52a/0xd70
[  515.478075][   T30]  ? hci_remote_features_evt+0x473/0xaa0
[  515.489711][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  515.497773][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  515.510876][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  515.519386][   T30]  ? skb_queue_tail+0x36/0x120
[  515.531381][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  515.541005][   T30]  ? hci_send_cmd+0xb6/0x180
[  515.552582][   T30]  hci_remote_features_evt+0x473/0xaa0
[  515.563220][   T30]  ? __pfx_hci_remote_features_evt+0x10/0x10
[  515.569297][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  515.582943][   T30]  ? skb_pull_data+0x112/0x230
[  515.587804][   T30]  hci_event_packet+0xac4/0x1540
[  515.602569][   T30]  ? __pfx_hci_remote_features_evt+0x10/0x10
[  515.609016][   T30]  ? __pfx_hci_event_packet+0x10/0x10
[  515.622802][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  515.628977][   T30]  ? send_count+0x1b0/0x1b0
[  515.654087][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  515.659875][   T30]  ? kcov_remote_start+0x97/0x7d0
[  515.674877][   T30]  hci_rx_work+0x3fe/0xd80
[  515.679430][   T30]  ? process_scheduled_works+0x976/0x1850
[  515.693255][   T30]  process_scheduled_works+0xa65/0x1850
[  515.698899][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  515.720922][   T30]  ? assign_work+0x364/0x3d0
[  515.733002][   T30]  worker_thread+0x870/0xd30
[  515.739975][   T30]  ? __kthread_parkme+0x169/0x1d0
[  515.752654][   T30]  ? __pfx_worker_thread+0x10/0x10
[  515.760261][   T30]  kthread+0x2f2/0x390
[  515.770749][   T30]  ? __pfx_worker_thread+0x10/0x10
[  515.779324][   T30]  ? __pfx_kthread+0x10/0x10
[  515.789806][   T30]  ret_from_fork+0x4d/0x80
[  515.799328][   T30]  ? __pfx_kthread+0x10/0x10
[  515.810068][   T30]  ret_from_fork_asm+0x1a/0x30
[  515.817823][   T30]  </TASK>
[  515.821105][   T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  515.837625][   T30] INFO: task kworker/u9:6:5242 blocked for more than 151 seconds.
[  515.852793][   T30]       Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0
[  515.864381][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  515.880751][   T30] task:kworker/u9:6    state:D stack:25656 pid:5242  tgid:5242  ppid:2      flags:0x00004000
[  515.895591][   T30] Workqueue: hci18 hci_rx_work
[  515.900516][   T30] Call Trace:
[  515.911377][   T30]  <TASK>
[  515.915851][   T30]  __schedule+0x1895/0x4b30
[  515.920525][   T30]  ? __pfx___schedule+0x10/0x10
[  515.933154][   T30]  ? __pfx_lock_release+0x10/0x10
[  515.938291][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  515.953217][   T30]  ? kthread_data+0x52/0xd0
[  515.958454][   T30]  ? schedule+0x90/0x320
[  515.973163][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  515.978888][   T30]  ? wq_worker_sleeping+0x66/0x240
[  515.992939][   T30]  ? schedule+0x90/0x320
[  515.997562][   T30]  schedule+0x14b/0x320
[  516.001921][   T30]  schedule_preempt_disabled+0x13/0x30
[  516.015838][   T30]  __mutex_lock+0x6a7/0xd70
[  516.020405][   T30]  ? __mutex_lock+0x52a/0xd70
[  516.030550][   T30]  ? hci_remote_features_evt+0x473/0xaa0
[  516.043508][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  516.048632][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  516.065623][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  516.071329][   T30]  ? skb_queue_tail+0x36/0x120
[  516.083391][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  516.089082][   T30]  ? hci_send_cmd+0xb6/0x180
[  516.102242][   T30]  hci_remote_features_evt+0x473/0xaa0
[  516.108088][   T30]  ? __pfx_hci_remote_features_evt+0x10/0x10
[  516.122926][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  516.128607][   T30]  ? skb_pull_data+0x112/0x230
[  516.142312][   T30]  hci_event_packet+0xac4/0x1540
[  516.149957][   T30]  ? __pfx_hci_remote_features_evt+0x10/0x10
[  516.161495][   T30]  ? __pfx_hci_event_packet+0x10/0x10
[  516.171181][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  516.180735][   T30]  ? send_count+0x1b0/0x1b0
[  516.190006][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  516.199392][   T30]  ? kcov_remote_start+0x97/0x7d0
[  516.209716][   T30]  hci_rx_work+0x3fe/0xd80
[  516.218532][   T30]  ? process_scheduled_works+0x976/0x1850
[  516.229426][   T30]  process_scheduled_works+0xa65/0x1850
[  516.239147][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  516.252242][   T30]  ? assign_work+0x364/0x3d0
[  516.262653][   T30]  worker_thread+0x870/0xd30
[  516.272007][   T30]  ? __kthread_parkme+0x169/0x1d0
[  516.281888][   T30]  ? __pfx_worker_thread+0x10/0x10
[  516.291882][   T30]  kthread+0x2f2/0x390
[  516.300429][   T30]  ? __pfx_worker_thread+0x10/0x10
[  516.310341][   T30]  ? __pfx_kthread+0x10/0x10
[  516.319224][   T30]  ret_from_fork+0x4d/0x80
[  516.328544][   T30]  ? __pfx_kthread+0x10/0x10
[  516.337664][   T30]  ret_from_fork_asm+0x1a/0x30
[  516.342500][   T30]  </TASK>
[  516.350457][   T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  516.376541][   T30] INFO: task kworker/u9:7:5244 blocked for more than 151 seconds.
[  516.389289][   T30]       Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0
[  516.400664][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  516.412919][   T30] task:kworker/u9:7    state:D stack:25656 pid:5244  tgid:5244  ppid:2      flags:0x00004000
[  516.432759][   T30] Workqueue: hci6 hci_cmd_sync_work
[  516.439209][   T30] Call Trace:
[  516.442525][   T30]  <TASK>
[  516.454448][   T30]  __schedule+0x1895/0x4b30
[  516.459147][   T30]  ? __pfx___schedule+0x10/0x10
[  516.472795][   T30]  ? __pfx_lock_release+0x10/0x10
[  516.477989][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  516.492087][   T30]  ? kthread_data+0x52/0xd0
[  516.497671][   T30]  ? schedule+0x90/0x320
[  516.501993][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  516.511044][   T30]  ? wq_worker_sleeping+0x66/0x240
[  516.522412][   T30]  ? schedule+0x90/0x320
[  516.529296][   T30]  schedule+0x14b/0x320
[  516.540022][   T30]  schedule_preempt_disabled+0x13/0x30
[  516.548939][   T30]  __mutex_lock+0x6a7/0xd70
[  516.561663][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  516.570752][   T30]  ? __mutex_lock+0x52a/0xd70
[  516.582264][   T30]  ? hci_conn_failed+0x15d/0x300
[  516.590013][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  516.598196][   T30]  ? __pfx_lock_release+0x10/0x10
[  516.609828][   T30]  ? hci_disconnect_sync+0x218/0x3d0
[  516.616791][   T30]  hci_conn_failed+0x15d/0x300
[  516.621768][   T30]  hci_abort_conn_sync+0x583/0xde0
[  516.632954][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  516.638158][   T30]  ? hci_abort_conn_sync+0x1f6/0xde0
[  516.652295][   T30]  ? __pfx_hci_abort_conn_sync+0x10/0x10
[  516.661298][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  516.675448][   T30]  ? hci_conn_valid+0x1f/0x210
[  516.680330][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  516.700472][   T30]  ? hci_conn_valid+0x1f4/0x210
[  516.709040][   T30]  ? __pfx_abort_conn_sync+0x10/0x10
[  516.720566][   T30]  hci_cmd_sync_work+0x22d/0x400
[  516.728331][   T30]  ? process_scheduled_works+0x976/0x1850
[  516.740174][   T30]  process_scheduled_works+0xa65/0x1850
[  516.748499][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  516.763068][   T30]  ? assign_work+0x364/0x3d0
[  516.767757][   T30]  worker_thread+0x870/0xd30
[  516.772417][   T30]  ? __kthread_parkme+0x169/0x1d0
[  516.786008][   T30]  ? __pfx_worker_thread+0x10/0x10
[  516.791214][   T30]  kthread+0x2f2/0x390
[  516.801798][   T30]  ? __pfx_worker_thread+0x10/0x10
[  516.810674][   T30]  ? __pfx_kthread+0x10/0x10
[  516.820179][   T30]  ret_from_fork+0x4d/0x80
[  516.829986][   T30]  ? __pfx_kthread+0x10/0x10
[  516.842113][   T30]  ret_from_fork_asm+0x1a/0x30
[  516.850813][   T30]  </TASK>
[  516.858655][   T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  516.874244][   T30] INFO: task kworker/u9:8:5245 blocked for more than 152 seconds.
[  516.893138][   T30]       Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0
[  516.900984][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  516.919986][   T30] task:kworker/u9:8    state:D stack:25960 pid:5245  tgid:5245  ppid:2      flags:0x00004000
[  516.934926][   T30] Workqueue: hci9 hci_cmd_sync_work
[  516.940287][   T30] Call Trace:
[  516.950453][   T30]  <TASK>
[  516.953890][   T30]  __schedule+0x1895/0x4b30
[  516.958480][   T30]  ? __pfx___schedule+0x10/0x10
[  516.975784][   T30]  ? __pfx_lock_release+0x10/0x10
[  516.981531][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  516.996522][   T30]  ? kthread_data+0x52/0xd0
[  517.001119][   T30]  ? schedule+0x90/0x320
[  517.012716][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.021199][   T30]  ? wq_worker_sleeping+0x66/0x240
[  517.032260][   T30]  ? schedule+0x90/0x320
[  517.039331][   T30]  schedule+0x14b/0x320
[  517.050554][   T30]  schedule_preempt_disabled+0x13/0x30
[  517.058860][   T30]  __mutex_lock+0x6a7/0xd70
[  517.067231][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.080001][   T30]  ? __mutex_lock+0x52a/0xd70
[  517.093914][   T30]  ? hci_conn_failed+0x15d/0x300
[  517.098946][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  517.112245][   T30]  ? __pfx_lock_release+0x10/0x10
[  517.117673][   T30]  ? hci_disconnect_sync+0x218/0x3d0
[  517.132210][   T30]  hci_conn_failed+0x15d/0x300
[  517.137333][   T30]  hci_abort_conn_sync+0x583/0xde0
[  517.142525][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  517.157887][   T30]  ? hci_abort_conn_sync+0x1f6/0xde0
[  517.169615][   T30]  ? __pfx_hci_abort_conn_sync+0x10/0x10
[  517.180943][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  517.189264][   T30]  ? hci_conn_valid+0x1f/0x210
[  517.200428][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.209975][   T30]  ? hci_conn_valid+0x1f4/0x210
[  517.220718][   T30]  ? __pfx_abort_conn_sync+0x10/0x10
[  517.228682][   T30]  hci_cmd_sync_work+0x22d/0x400
[  517.239957][   T30]  ? process_scheduled_works+0x976/0x1850
[  517.249373][   T30]  process_scheduled_works+0xa65/0x1850
[  517.261203][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  517.271201][   T30]  ? assign_work+0x364/0x3d0
[  517.283302][   T30]  worker_thread+0x870/0xd30
[  517.288007][   T30]  ? __kthread_parkme+0x169/0x1d0
[  517.303457][   T30]  ? __pfx_worker_thread+0x10/0x10
[  517.308755][   T30]  kthread+0x2f2/0x390
[  517.312862][   T30]  ? __pfx_worker_thread+0x10/0x10
[  517.328506][   T30]  ? __pfx_kthread+0x10/0x10
[  517.342633][   T30]  ret_from_fork+0x4d/0x80
[  517.347570][   T30]  ? __pfx_kthread+0x10/0x10
[  517.352245][   T30]  ret_from_fork_asm+0x1a/0x30
[  517.362957][   T30]  </TASK>
[  517.366012][   T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  517.386110][   T30] INFO: task kworker/u9:10:5248 blocked for more than 152 seconds.
[  517.402698][   T30]       Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0
[  517.419628][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  517.431763][   T30] task:kworker/u9:10   state:D stack:25752 pid:5248  tgid:5248  ppid:2      flags:0x00004000
[  517.448101][   T30] Workqueue: hci20 hci_rx_work
[  517.457543][   T30] Call Trace:
[  517.460869][   T30]  <TASK>
[  517.469712][   T30]  __schedule+0x1895/0x4b30
[  517.479426][   T30]  ? __pfx___schedule+0x10/0x10
[  517.491476][   T30]  ? __pfx_lock_release+0x10/0x10
[  517.501010][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  517.512393][   T30]  ? kthread_data+0x52/0xd0
[  517.519620][   T30]  ? schedule+0x90/0x320
[  517.529923][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.540235][   T30]  ? wq_worker_sleeping+0x66/0x240
[  517.551249][   T30]  ? schedule+0x90/0x320
[  517.558446][   T30]  schedule+0x14b/0x320
[  517.562659][   T30]  schedule_preempt_disabled+0x13/0x30
[  517.572919][   T30]  __mutex_lock+0x6a7/0xd70
[  517.580906][   T30]  ? __mutex_lock+0x52a/0xd70
[  517.592999][   T30]  ? hci_remote_features_evt+0x473/0xaa0
[  517.599570][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  517.613426][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.619190][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.636251][   T30]  ? skb_queue_tail+0x36/0x120
[  517.641115][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.653311][   T30]  ? hci_send_cmd+0xb6/0x180
[  517.658010][   T30]  hci_remote_features_evt+0x473/0xaa0
[  517.671937][   T30]  ? __pfx_hci_remote_features_evt+0x10/0x10
[  517.678443][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.692918][   T30]  ? skb_pull_data+0x112/0x230
[  517.698391][   T30]  hci_event_packet+0xac4/0x1540
[  517.712204][   T30]  ? __pfx_hci_remote_features_evt+0x10/0x10
[  517.727072][   T30]  ? __pfx_hci_event_packet+0x10/0x10
[  517.732524][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.746195][   T30]  ? send_count+0x1b0/0x1b0
[  517.750812][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.763009][   T30]  ? kcov_remote_start+0x97/0x7d0
[  517.768680][   T30]  hci_rx_work+0x3fe/0xd80
[  517.780825][   T30]  ? process_scheduled_works+0x976/0x1850
[  517.789144][   T30]  process_scheduled_works+0xa65/0x1850
[  517.804491][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  517.810599][   T30]  ? assign_work+0x364/0x3d0
[  517.822960][   T30]  worker_thread+0x870/0xd30
[  517.827610][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.842921][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.848609][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  517.861769][   T30]  ? __kthread_parkme+0x169/0x1d0
[  517.867648][   T30]  ? __pfx_worker_thread+0x10/0x10
[  517.872810][   T30]  kthread+0x2f2/0x390
[  517.882917][   T30]  ? __pfx_worker_thread+0x10/0x10
[  517.897569][   T30]  ? __pfx_kthread+0x10/0x10
[  517.902759][   T30]  ret_from_fork+0x4d/0x80
[  517.911148][   T30]  ? __pfx_kthread+0x10/0x10
[  517.921756][   T30]  ret_from_fork_asm+0x1a/0x30
[  517.930226][   T30]  </TASK>
[  517.938076][   T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  517.950872][   T30] INFO: task kworker/1:6:5289 blocked for more than 153 seconds.
[  517.962916][   T30]       Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0
[  517.979822][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  517.993390][   T30] task:kworker/1:6     state:D stack:21424 pid:5289  tgid:5289  ppid:2      flags:0x00004000
[  518.012418][   T30] Workqueue: events free_ipc
[  518.018664][   T30] Call Trace:
[  518.021968][   T30]  <TASK>
[  518.032050][   T30]  __schedule+0x1895/0x4b30