last executing test programs:

2m36.397183818s ago: executing program 4:
r0 = userfaultfd(0x80001)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$UFFDIO_ZEROPAGE(r2, 0xc018aa06, &(0x7f0000000100)={{&(0x7f00003ea000/0x400000)=nil, 0x400000}, 0x1})
madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x19)

2m35.636732595s ago: executing program 4:
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000040)='./file1\x00', 0x18005, &(0x7f0000000080)={[{@usebackuproot}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@autodefrag}, {@noflushoncommit}, {@ssd_spread}, {@space_cache_v1}, {@treelog}]}, 0x1, 0x559d, &(0x7f000000ac40)="$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")
mount(&(0x7f0000000300)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./file1\x00', &(0x7f00000002c0)='btrfs\x00', 0x0, 0x0)

2m32.547400792s ago: executing program 4:
sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c06050a020b0243000400ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20", 0x48, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x4b6a, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x95}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='ext4_es_lookup_extent_exit\x00', r2}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
close(0xffffffffffffffff)
io_setup(0x6, &(0x7f0000000600)=<r4=>0x0)
r5 = socket$inet_tcp(0x2, 0x3, 0x6)
shutdown(r5, 0x0)
io_submit(r4, 0x200000000000036f, &(0x7f0000000180)=[&(0x7f0000000240)={0xf6ffffff00000000, 0x5301, 0x0, 0x0, 0x0, r5, 0x0, 0xa910}])

2m32.032603691s ago: executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcb3635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff03291e4443a08df80c9a9315416f7ab3ba6fd732e881a44aa53e5942cd985eeffdfc6dbf63fe78adc62c6f8c9bb9b3a9b9bcbee66f995b5de5e128d72a30e8da34e3f7a8222ca3cf2aa3b7bfc861fec0ac88f3acf3b0394bc1f2fd0535b3b54be5f2f8e9ffc6823c2914c60223e27040f8c324c8d17b8773d460fce3eadc258724038aafffffff7f00000000e82c24a85280f39579abf7f9ac0ce611ad8e7809c6c22aa280cf66f0dbeef9b4018d4901313fbb6437fb0beaedc78bf65de93141a02a3bc89a2ddbfa0615f930ab100790cf69cbc77dbc99742fcd8fab979d9889f359adf0ee3dba1881374e37539dad09ba5273845508384f18863eee3f648d9e72e915db5507dc3e26f37bae241deec4afe7d5a8ffeb5db2e33bf34f16543f271f0f416ea6f85a1154b376c07b3392e35c069d4bf100eac6bc24ea1bfec69431c31598c033a8ec36ca70e7eb0f1753e87cb29dcc3d356f115b16f0c58174dbb7a057f97ca20b6783bbd398b774f0c1b4f51f649470cfb39649acffdad937ed3c031da1d7c28271b5b96036ff7be1fa4827c8b08ec74ced"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106}, 0x18)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b"], 0x34}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x34}}, 0x0)

2m31.408715758s ago: executing program 4:
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file1\x00', 0x2000000c, &(0x7f0000000100)={[{@errors_remount}, {@discard}, {@errors_continue}, {}, {@dmask}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@gid}, {@allow_utime={'allow_utime', 0x3d, 0x7}}, {@dmask={'dmask', 0x3d, 0x5}}]}, 0x1, 0x14fd, &(0x7f0000002a80)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
read$ptp(r0, &(0x7f0000000100)=""/48, 0xfffffdef)
read$FUSE(r0, &(0x7f0000004a40)={0x2020}, 0x2020)

2m31.07283493s ago: executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x57, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x37, 0x1, 0x0, "3ad38e0000000000000e1f60b82726d20fb29634b50b865066c27891ca55e21f"})

21.975912776s ago: executing program 2:
r0 = socket(0x10, 0x3, 0x0)
close(0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10)
symlink(0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000080)=0x45d0f620, 0x4)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}]}, 0x3c}}, 0x0)

21.677229702s ago: executing program 2:
r0 = syz_io_uring_setup(0x7c32, &(0x7f0000000080), &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0})
listen(r3, 0x0)
io_uring_enter(r0, 0x4b5a, 0x0, 0x0, 0x0, 0x0)

21.483287892s ago: executing program 2:
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x0, 0x4}}, 0x26)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x48be, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000011c0), &(0x7f0000001140))
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x105001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100)
io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0)

20.322553671s ago: executing program 2:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r2, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x4e, 0xff, 0x0, 0x0, {0x0, 0x2}}, 0x14}}, 0x0)

20.105734975s ago: executing program 2:
syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009840)='./file1\x00', 0x14800, &(0x7f0000000140)={[{@inode32}, {@allocsize={'allocsize', 0x3d, [0x39, 0x47]}}]}, 0x1, 0x980d, &(0x7f00000130c0)="$eJzs3QXYZHXBsPFnl6UbCwNZGotuDEJBBAEJKSWkJQWUMAARBEQBSUERUKREkO7u7u7u7vyuZXcV1xte/b73+nhf7/u+rueZmTNnznPm/ztznmf2zM4sv9DSCwwMTDQwvJGnf+/glz995OYvL7DD0dcf9tLChy565IjJYww/GTJ0xOkUI06nHBgYGDRiOYOGTxs85PgTBg+MNTAw+J3LHW/scQeNNzCwxoiL8404nXP4yfjXjJzvrVHiFR22GoN2Hv41/IcODAyMPezMMwMzLvfO5YxYr5n+6Y5KW37+hRf6u9Xf3IaN35AR59/5Ncbwr/EvGxgY/9IB3j4Gvb/36O2fP9GeF6yw4vu8Hv8rWn7+hRcZxX/YY3G0EdPmHPYYH/UxaGzU7XzonHeM3AcNwh3n/5KWn3+hxQbefT8/sPKbB2z61tv7zcHjDAwMHndgYPB4AwODxx8YGDzBwMDgCd9vl/p/633d+Kqqqup9af4FZl1g2PO9Uf4eGGvk37X0d+FKbyxxx8DAwOjD5xk8x8jnglVVVVVVVVX1P7P5F5h1QXj+P9F7Pf8/7tRXp+/5f1VVVVVVVdX/nhaZf4FZhz2PH+X5/6Tv9fx/mwdeXH/Ea//nHH6rN9/fO1FVVVVVVVVV79lSX3/7+f+4ozz/H/pez/8fnnenB0fMN/LfDd54xyIHveP1BK+9Y/po75j/1XdMH/KO6e+cf4yBgcFDRkx//e+TB48z7Lp/nn/wRMPWe8T0V94xfaa////mIVO/Y/rM75g+7TumzzJiXYdNn+4d02d/x/zT/ytjW1VVVVVVVVVVVVVVVVVV9f+rN5849cy/v+f7Jwfe8f7tf3sf9xGvCxh0zNlXX/2+rej/jAb98+shtnm/1+n/tWHOYx0xdGBgw2Xf71Wp96H3+/Ma6v0tf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vIX9y7H///2/v+THbrGyP8zP+fBu04+wTtvu+47zo/1/3Wt37f+U4//D6w7aGBghO9Ew1wXn3+pZaYfGBiYYPJdD55t4G/XzTXsunknGW3EGyQMfxuEaYbwgrcZ8ano24yYdcQyjnl7+Yu8ddBog0ZZiXc08YmHHLLO8i/NNurptO9+PwaPPPOhS7ZYcOR7WQweZaZ3205HLn/kfRnVecS6Tz9s3WfcbIONZ9x0y60+t+4Gq6295tprbjj3nHPONfucc8w9y4xrrbv+mjMN//5uYzb07e9T/StjNumoY/bE/O8cs1Hv27uN2dD3HrO3lzjmHqusN3LMRl21/2rMpnrvMRu67ogfNGTo6AOrvj02gwYGhkw9+sAWwy7MPObAwJBpRsw76bB5Pz/J4IGB3f5+R4edG/Nv2+CgbYbNs/xCSy/w94/d/+eP33+Xz7MfY/jJkBFDMmSKEadTDv8xEw38fVMcPOT4EwYPu+//MMzjjT3uoPEGBtYYcXG+Eadzj7j2ypHzvcvnrI+yom+/zcrOw7/+5jH2sDNHLTnhTe9czrsQ/Hf0f/X7/5+85hr0t4EaNOJrxDzDveZfeJG//6y3h2G+ke8JM+x3yzCT/4ePsf8v+6f1HTrW229y+27r+x7vizv8/sP2Ne1j5w3973pfXN53LPb296H/yr5j4L33HaP9/ezfp655xWSj7jsWffdV/IfHxcgxGnOUmd5t3zH9vvNv/fa+6b33HYutO+KDhv6+7xg8MDBkqpH7jmE7kmlHH9ht2IVZhl2YbvSBw4ZdmPXtC2MPnD3swgyrb7T+GoPeftueEcudadhy55tk0Nt3/uoZ5z9ytD3femvqEesy0yg71hHbx9B3/n6cf5LhwzbytrTcuzcbft20I5Y787+x3JG3peXOtcnw66YbsdxZRlnuaO+x3JG3Hfl4GDbr24+H6Qf9wws/4fG70CiP30Ejd+vvuMnIrzGGf41/2cjPhoLHy7+136HH70Tvsb7v8blWuL0Nm7bd4lec+t/1uVa0vmO99/q+2+dwv+v6rjf2Fkv8N6zvoHes7z9sZxvPM3xbmX7Edjb7v7H9jrztqPux0d++djjD9P/Kfmy+f9qPbTva4FFW/h29299Aa8D8w89P+relzX34aBOOHPvRR1nuf/U30PTvvR+baN1RbrfQgQODaMwffvyQdcb8L8Z89IF//Ft95JiPvO17jfl0/zzmg/5pzOd67zH/V//unH6q4deP9h5jPnjHTRcfOeZj/JtjPt2/O+bzDYxGY77bfsPH7b32p+825iNv+49jPmTgKwMDA1OPGPNp/5XtfKb/nu18HJh/+PkH/jbpksnO2OUd+5hB/86YT/vvjvnQv23nU7993ZSDB8YYY2CL1TbbbJOZh38feXGW4d95X/T0/cPH+b1+l76b0cjbvtfjYup/xWjof4/Rx4b88/wjn3SMvLzs2UdN/H+7L5r63zMatNAA74tOvmj4uL3X30XvNuYjb0u/B4e+4/ajPq97j/ejxPs0bNo+++51+8hFjrhZ70f5r/cPm+3If+Nbd9SdfP2n1r//u8vfXf7u8neXv7h3Of7/t/f/f3iipR8b8SR59N3nWXv193t93+f+o4//j/D9h+P/q689z+7DngqOuO49j88On+d/5PHZOYefjH/NyPlGPT7IK/rux2en22OGpQb+/xyf/b9q5GP1X3ge3/7fXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3lL27E8f+BUY7/j3yN8tD937h/mxEHQkffe6/V33h/1/Z97z/6+P8I3384/v/G6nvtPXjgb9e95/H/4fM4jv8vsf+eJwz8Dz7+P/Kx2vH/+i/K313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zFvcv//59v5OsA5lhlrZ1Hvh5gw5m/tP37vb7vc/+px//7/H9v7f/d5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+4v7x////rSXbLjA4/v+/u3fx/0b+mMV/qfwxi//S+WMW/2Xyxyz+y+aPWfy/mT9m8V8uf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+38ofs/h/O3/M4r9y/pjFf5X8MYv/qvljFv/V8scs/t/JH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n8v5s/ZvFfL3/M4r9+/pjFf4P8MYv/hvljFv+N8scs/hvnj1n8v5c/ZvHfJH/M4r9p/pjFf7P8MYv/9/PHLP4/yB+z+G+eP2bx3yJ/zOK/Zf6YxX+r/DGL/w/zxyz+P8ofs/j/OH/M4v+T/DGL/9b5Yxb/bfLHLP7b5o9Z/H+aP2bx3y5/zOL/s/wxi//2+WMW/x3yxyz+P88fs/jvmD9m8d8pf8ziv3P+mMX/F/ljFv9d8scs/r/MH7P4/yp/zOK/a/6YxX+3/DGL/+75Yxb/X+ePWfz3yB+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb/3+SPWfz3yx+z+O+fP2bx/23+mMX/d/ljFv8D8scs/r/PH7P4H5g/ZvE/KH/M4n9w/pjF/w/5Yxb/P+aPWfwPyR+z+P8pf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfz/nD9m8T8qf8zi/5f8MYv/0fljFv9j8scs/n/NH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljFv+38sck/oMG8scs/oPyxyz+g/PHLP6j5Y9Z/Ifkj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+E+QP2bxnzB/zOI/Uf6YxX/i/DGL/yT5Yxb/D+SPWfw/mD9m8f9Q/pjF/8P5Yxb/j+SPWfwnzR+z+H80f8zi/7H8MYv/x/PHLP6fyB+z+E+WP2bx/2T+mMV/8vwxi//Q/DGL/xT5Yxb/KfPHLP5T5Y9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/p/LHLP6fzh+z+H8mf8zi/9n8MYv/5/LHLP4z5I9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjFf9b8MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi//n88cs/l/IH7P4fzF/zOL/pfwxi/98+WMW//nzxyz+C+SPWfwXzB+z+H85f8zi/5X8MYv/QvljFv+F88cs/l/NH7P4L5I/ZvH/Wv6YxX/R/DGL/2L5Yxb/r+ePWfwXzx+z+C+RP2bxXzJ/zOL/jfwxi/9S+WMW/6Xzxyz+y+SPWfyXzR+z+H8zf8ziv1z+mMV/+fwxi/8K+WMW/xXzxyz+K+WPWfy/lT9m8f92/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8v5M/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/h/N3/M4r9e/pjFf/38MYv/BvljFv8N88cs/hvlj1n8N84fs/h/L3/M4r9J/pjFf9P8MYv/ZvljFv/v549Z/H+QP2bx3zx/zOK/Rf6YxX/L/DGL/1b5Yxb/H+aPWfx/lD9m8f9x/pjF/yf5Yxb/rfPHLP7b5I9Z/LfNH7P4/zR/zOK/Xf6Yxf9n+WMW/+3zxyz+O+SPWfx/nj9m8d8xf8ziv1P+mMV/5/wxi/8v8scs/rvkj1n8f5k/ZvH/Vf6YxX/X/DGL/275Yxb/3fPHLP6/zh+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP6/yR+z+O+XP2bx3z9/zOL/2/wxi//v8scs/gfkj1n8f58/ZvE/MH/M4n9Q/pjF/+D8MYv/H/LHLP5/zB+z+B+SP2bx/1P+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+P85f8zif1T+mMX/L/ljFv+j88cs/sfkj1n8/5o/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4v9a/pjF//X8MYv/G/ljFv8388cs/m/lj0n83z6b/z9n8R+UP2bxH5w/ZvEfLX/M4j8kf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP2bxHy9/zOI/fv6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4fyB/zOL/wfwxi/+H8scs/h/OH7P4fyR/zOI/af6Yxf+j+WMW/4/lj1n8P54/ZvH/RP6YxX+y/DGL/yfzxyz+k+ePWfyH5o9Z/KfIH7P4T5k/ZvGfKn/M4j91/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8P5U/ZvH/dP6Yxf8z+WMW/8/mj1n8P5c/ZvGfIX/M4j9j/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8Z8sfs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfw/nz9m8f9C/pjF/4v5Yxb/L+WPWfznyx+z+M+fP2bxXyB/zOK/YP6Yxf/L+WMW/6/kj1n8F8ofs/gvnD9m8f9q/pjFf5H8MYv/1/LHLP6L5o9Z/BfLH7P4fz1/zOK/eP6YxX+J/DGL/5L5Yxb/b+SPWfyXyh+z+C+dP2bxXyZ/zOK/bP6Yxf+b+WMW/+Xyxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOL/rfwxi/+388cs/ivnj1n8V8kfs/ivmj9m8V8tf8zi/538MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMX/u/ljFv/18scs/uvnj1n8N8gfs/hvmD9m8d8of8ziv3H+mMX/e/ljFv9N8scs/pvmj1n8N8sfs/h/P3/M4v+D/DGL/+b5Yxb/LfLHLP5b5o9Z/LfKH7P4/zB/zOL/o/wxi/+P88cs/j/JH7P4b50/ZvHfJn/M4r9t/pjF/6f5Yxb/7fLHLP4/yx+z+G+fP2bx3yF/zOL/8/wxi/+O+WMW/53yxyz+O+ePWfx/kT9m8d8lf8zi/8v8MYv/r/LHLP675o9Z/HfLH7P4754/ZvH/df6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvH/Tf6YxX+//DGL//75Yxb/3+aPWfx/lz9m8T8gf8zi//v8MYv/gfljFv+D8scs/gfnj1n8/5A/ZvH/Y/6Yxf+Q/DGL/5/yxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf/P+WMW/6Pyxyz+f8kfs/gfnT9m8T8mf8zi/9f8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf0ziP9pA/pjFf1D+mMV/cP6YxX+0/DGL/5D8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/wnyxyz+E+aPWfwnyh+z+E+cP2bxnyR/zOL/gfwxi/8H88cs/h/KH7P4fzh/zOL/kfwxi/+k+WMW/4/mj1n8P5Y/ZvH/eP6Yxf8T+WMW/8nyxyz+n8wfs/hPnj9m8R+aP2bxnyJ/zOI/Zf6YxX+q/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvH/VP6Yxf/T+WMW/8/kj1n8P5s/ZvH/XP6YxX+G/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4z5o/ZvGfLX/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8f98/pjF/wv5Yxb/L+aPWfy/lD9m8Z8vf8ziP3/+mMV/gfwxi/+C+WMW/y/nj1n8v5I/ZvFfKH/M4r9w/pjF/6v5Yxb/RfLHLP5fyx+z+C+aP2bxXyx/zOL/9fwxi//i+WMW/yXyxyz+S+aPWfy/kT9m8V8qf8ziv3T+mMV/mfwxi/+y+WMW/2/mj1n8l8sfs/gvnz9m8V8hf8ziv2L+mMV/pfwxi/+38scs/t/OH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/d/LHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/v5o9Z/NfLH7P4r58/ZvHfIH/M4r9h/pjFf6P8MYv/xvljFv/v5Y9Z/DfJH7P4b5o/ZvHfLH/M4v/9/DGL/w/yxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOL/w/wxi/+P8scs/j/OH7P4/yR/zOK/df6YxX+b/DGL/7b5Yxb/n+aPWfy3yx+z+P8sf8ziv33+mMV/h/wxi//P88cs/jvmj1n8d8ofs/jvnD9m8f9F/pjFf5f8MYv/L/PHLP6/yh+z+O+aP2bx3y1/zOK/e/6Yxf/X+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6Yxf83+WMW//3yxyz+++ePWfx/mz9m8f9d/pjF/4D8MYv/7/PHLP4H5o9Z/A/KH7P4H5w/ZvH/Q/6Yxf+P+WMW/0Pyxyz+f8ofs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/z/nj1n8j8ofs/j/JX/M4n90/pjF/5j8MYv/X/PHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYn/kIH8MYv/oPwxi//g/DGL/2j5Yxb/IfljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6Yxf8D+WMW/w/mj1n8P5Q/ZvH/cP6Yxf8j+WMW/0nzxyz+H80fs/h/LH/M4v/x/DGL/yfyxyz+k+WPWfw/mT9m8Z88f8ziPzR/zOI/Rf6YxX/K/DGL/1T5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4v+p/DGL/6fzxyz+n8kfs/h/Nn/M4v+5/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvGfNX/M4j9b/pjFf/b8MYv/HPljFv8588cs/nPlj1n8584fs/jPkz9m8Z83f8zi//n8MYv/F/LHLP5fzB+z+H8pf8ziP1/+mMV//vwxi/8C+WMW/wXzxyz+X84fs/h/JX/M4r9Q/pjFf+H8MYv/V/PHLP6L5I9Z/L+WP2bxXzR/zOK/WP6Yxf/r+WMW/8Xzxyz+S+SPWfyXzB+z+H8jf8ziv1T+mMV/6fwxi/8y+WMW/2Xzxyz+38wfs/gvlz9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/2/lj1n8v50/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/v5I9Z/FfPH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv9188cs/t/NH7P4r5c/ZvFfP3/M4r9B/pjFf8P8MYv/RvljFv+N88cs/t/LH7P4b5I/ZvHfNH/M4r9Z/pjF//v5Yxb/H+SPWfw3zx+z+G+RP2bx3zJ/zOK/Vf6Yxf+H+WMW/x/lj1n8f5w/ZvH/Sf6YxX/r/DGL/zb5Yxb/bfPHLP4/zR+z+G+XP2bx/1n+mMV/+/wxi/8O+WMW/5/nj1n8d8wfs/jvlD9m8d85f8zi/4v8MYv/LvljFv9f5o9Z/H+VP2bx3zV/zOK/W/6YxX/3/DGL/6/zxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/2/yxyz+++WPWfz3zx+z+P82f8zi/7v8MYv/AfljFv/f549Z/A/MH7P4H5Q/ZvE/OH/M4v+H/DGL/x/zxyz+h+SPWfz/lD9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+f84fs/gflT9m8f9L/pjF/+j8MYv/MfljFv+/5o9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX/M4v9G/pjF/838MYv/W/ljEv/RB/LHLP6D8scs/oPzxyz+o+WPWfyH5I9Z/EfPH7P4j5E/ZvEfM3/M4j9W/pjFf+z8MYv/OPljFv9x88cs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/w/kj1n8P5g/ZvH/UP6Yxf/D+WMW/4/kj1n8J80fs/h/NH/M4v+x/DGL/8fzxyz+n8gfs/hPlj9m8f9k/pjFf/L8MYv/0Pwxi/8U+WMW/ynzxyz+U+WPWfynzh+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/6fyxyz+n84fs/h/Jn/M4v/Z/DGL/+fyxyz+M+SPWfxnzB+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/5/PHLP5fyB+z+H8xf8zi/6X8MYv/fPljFv/588cs/gvkj1n8F8wfs/h/OX/M4v+V/DGL/0L5Yxb/hfPHLP5fzR+z+C+SP2bx/1r+mMV/0fwxi/9i+WMW/6/nj1n8F88fs/gvkT9m8V8yf8zi/438MYv/UvljFv+l88cs/svkj1n8l80fs/h/M3/M4r9c/pjFf/n8MYv/CvljFv8V88cs/ivlj1n8v5U/ZvH/dv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/L+TP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4fzd/zOK/Xv6YxX/9/DGL/wb5Yxb/DfPHLP4b5Y9Z/DfOH7P4fy9/zOK/Sf6YxX/T/DGL/2b5Yxb/7+ePWfx/kD9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/x/mj1n8f5Q/ZvH/cf6Yxf8n+WMW/63zxyz+2+SPWfy3zR+z+P80f8ziv13+mMX/Z/ljFv/t88cs/jvkj1n8f54/ZvHfMX/M4r9T/pjFf+f8MYv/L/LHLP675I9Z/H+ZP2bx/1X+mMV/1/wxi/9u+WMW/93zxyz+v84fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+v8kfs/jvlz9m8d8/f8zi/9v8MYv/7/LHLP4H5I9Z/H+fP2bxPzB/zOJ/UP6Yxf/g/DGL/x/yxyz+f8wfs/gfkj9m8f9T/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/j/OX/M4n9U/pjF/y/5Yxb/o/PHLP7H5I9Z/P+aP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/wvzxyz+F+WPWfwvzh+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOL/Wv6Yxf/1/DGL/xv5Yxb/N/PHLP5v5Y9J/McYyB+z+A/KH7P4D84fs/iPlj9m8R+SP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8P5A/ZvH/YP6Yxf9D+WMW/w/nj1n8P5I/ZvGfNH/M4v/R/DGL/8fyxyz+H88fs/h/In/M4j9Z/pjF/5P5Yxb/yfPHLP5D88cs/lPkj1n8p8wfs/hPlT9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+n8ofs/h/On/M4v+Z/DGL/2fzxyz+n8sfs/jPkD9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/1nzxyz+s+WPWfxnzx+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP7z5Y9Z/OfPH7P4L5A/ZvFfMH/M4v/l/DGL/1fyxyz+C+WPWfwXzh+z+H81f8ziv0j+mMX/a/ljFv9F88cs/ovlj1n8v54/ZvFfPH/M4r9E/pjFf8n8MYv/N/LHLP5L5Y9Z/JfOH7P4L5M/ZvFfNn/M4v/N/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvH/Vv6Yxf/b+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bx/07+mMV/9fwxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/3fwxi/96+WMW//Xzxyz+G+SPWfw3zB+z+G+UP2bx3zh/zOL/vfwxi/8m+WMW/03zxyz+m+WPWfy/nz9m8f9B/pjFf/P8MYv/FvljFv8t88cs/lvlj1n8f5g/ZvH/Uf6Yxf/H+WMW/5/kj1n8t84fs/hvkz9m8d82f8zi/9P8MYv/dvljFv+f5Y9Z/LfPH7P475A/ZvH/ef6YxX/H/DGL/075Yxb/nfPHLP6/yB+z+O+SP2bx/2X+mMX/V/ljFv9d88cs/rvlj1n8d88fs/j/On/M4r9H/pjFf8/8MYv/XvljFv+988cs/vvkj1n8980fs/j/Jn/M4r9f/pjFf//8MYv/b/PHLP6/yx+z+B+QP2bx/33+mMX/wPwxi/9B+WMW/4Pzxyz+f8gfs/j/MX/M4n9I/pjF/0/5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4v/n/DGL/1H5Yxb/v+SPWfyPzh+z+B+TP2bx/2v+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VPybxH3Mgf8ziPyh/zOI/OH/M4j9a/pjFf0j+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvH/QP6Yxf+D+WMW/w/lj1n8P5w/ZvH/SP6YxX/S/DGL/0fzxyz+H8sfs/h/PH/M4v+J/DGL/2T5Yxb/T+aPWfwnzx+z+A/NH7P4T5E/ZvGfMn/M4j9V/pjFf+r8MYv/NPljFv9p88cs/tPlj1n8p88fs/h/Kn/M4v/p/DGL/2fyxyz+n80fs/h/Ln/M4j9D/pjFf8b8MYv/TPljFv+Z88cs/rPkj1n8Z80fs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+H8+f8zi/4X8MYv/F/PHLP5fyh+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/5fzxyz+X8kfs/gvlD9m8V84f8zi/9X8MYv/IvljFv+v5Y9Z/BfNH7P4L5Y/ZvH/ev6YxX/x/DGL/xL5Yxb/JfPHLP7fyB+z+C+VP2bxXzp/zOK/TP6YxX/Z/DGL/zfzxyz+y+WPWfyXzx+z+K+QP2bxXzF/zOK/Uv6Yxf9b+WMW/2/nj1n8V84fs/ivkj9m8V81f8ziv1r+mMX/O/ljFv/V88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMV/3fwxi/9388cs/uvlj1n8188fs/hvkD9m8d8wf8ziv1H+mMV/4/wxi//38scs/pvkj1n8N80fs/hvlj9m8f9+/pjF/wf5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvH/Yf6Yxf9H+WMW/x/nj1n8f5I/ZvHfOn/M4r9N/pjFf9v8MYv/T/PHLP7b5Y9Z/H+WP2bx3z5/zOK/Q/6Yxf/n+WMW/x3zxyz+O+WPWfx3zh+z+P8if8ziv0v+mMX/l/ljFv9f5Y9Z/HfNH7P475Y/ZvHfPX/M4v/r/DGL/x75Yxb/PfPHLP575Y9Z/PfOH7P475M/ZvHfN3/M4v+b/DGL/375Yxb//fPHLP6/zR+z+P8uf8zif0D+mMX/9/ljFv8D88cs/gflj1n8D84fs/j/IX/M4v/H/DGL/yH5Yxb/P+WPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/5/zxyz+R+WPWfz/kj9m8T86f8zif0z+mMX/r/ljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT9m8X8zf8zi/1b+mMR/rIH8MYv/oPwxi//g/DGL/2j5Yxb/IfljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6Yxf8D+WMW/w/mj1n8P5Q/ZvH/cP6Yxf8j+WMW/0nzxyz+H80fs/h/LH/M4v/x/DGL/yfyxyz+k+WPWfw/mT9m8Z88f8ziPzR/zOI/Rf6YxX/K/DGL/1T5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4v+p/DGL/6fzxyz+n8kfs/h/Nn/M4v+5/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvGfNX/M4j9b/pjFf/b8MYv/HPljFv8588cs/nPlj1n8584fs/jPkz9m8Z83f8zi//n8MYv/F/LHLP5fzB+z+H8pf8ziP1/+mMV//vwxi/8C+WMW/wXzxyz+X84fs/h/JX/M4r9Q/pjFf+H8MYv/V/PHLP6L5I9Z/L+WP2bxXzR/zOK/WP6Yxf/r+WMW/8Xzxyz+S+SPWfyXzB+z+H8jf8ziv1T+mMV/6fwxi/8y+WMW/2Xzxyz+38wfs/gvlz9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/2/lj1n8v50/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/v5I9Z/FfPH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv9188cs/t/NH7P4r5c/ZvFfP3/M4r9B/pjFf8P8MYv/RvljFv+N88cs/t/LH7P4b5I/ZvHfNH/M4r9Z/pjF//v5Yxb/H+SPWfw3zx+z+G+RP2bx3zJ/zOK/Vf6Yxf+H+WMW/x/lj1n8f5w/ZvH/Sf6YxX/r/DGL/zb5Yxb/bfPHLP4/zR+z+G+XP2bx/1n+mMV/+/wxi/8O+WMW/5/nj1n8d8wfs/jvlD9m8d85f8zi/4v8MYv/LvljFv9f5o9Z/H+VP2bx3zV/zOK/W/6YxX/3/DGL/6/zxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/2/yxyz+++WPWfz3zx+z+P82f8zi/7v8MYv/AfljFv/f549Z/A/MH7P4H5Q/ZvE/OH/M4v+H/DGL/x/zxyz+h+SPWfz/lD9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+f84fs/gflT9m8f9L/pjF/+j8MYv/MfljFv+/5o9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX/M4v9G/pjF/838MYv/W/ljEv+xB/LHLP6D8scs/oPzxyz+o+WPWfyH5I9Z/EfPH7P4j5E/ZvEfM3/M4j9W/pjFf+z8MYv/OPljFv9x88cs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/w/kj1n8P5g/ZvH/UP6Yxf/D+WMW/4/kj1n8J80fs/h/NH/M4v+x/DGL/8fzxyz+n8gfs/hPlj9m8f9k/pjFf/L8MYv/0Pwxi/8U+WMW/ynzxyz+U+WPWfynzh+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/6fyxyz+n84fs/h/Jn/M4v/Z/DGL/+fyxyz+M+SPWfxnzB+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/5/PHLP5fyB+z+H8xf8zi/6X8MYv/fPljFv/588cs/gvkj1n8F8wfs/h/OX/M4v+V/DGL/0L5Yxb/hfPHLP5fzR+z+C+SP2bx/1r+mMV/0fwxi/9i+WMW/6/nj1n8F88fs/gvkT9m8V8yf8zi/438MYv/UvljFv+l88cs/svkj1n8l80fs/h/M3/M4r9c/pjFf/n8MYv/CvljFv8V88cs/ivlj1n8v5U/ZvH/dv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/L+TP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4fzd/zOK/Xv6YxX/9/DGL/wb5Yxb/DfPHLP4b5Y9Z/DfOH7P4fy9/zOK/Sf6YxX/T/DGL/2b5Yxb/7+ePWfx/kD9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/x/mj1n8f5Q/ZvH/cf6Yxf8n+WMW/63zxyz+2+SPWfy3zR+z+P80f8ziv13+mMX/Z/ljFv/t88cs/jvkj1n8f54/ZvHfMX/M4r9T/pjFf+f8MYv/L/LHLP675I9Z/H+ZP2bx/1X+mMV/1/wxi/9u+WMW/93zxyz+v84fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+v8kfs/jvlz9m8d8/f8zi/9v8MYv/7/LHLP4H5I9Z/H+fP2bxPzB/zOJ/UP6Yxf/g/DGL/x/yxyz+f8wfs/gfkj9m8f9T/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/j/OX/M4n9U/pjF/y/5Yxb/o/PHLP7H5I9Z/P+aP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/wvzxyz+F+WPWfwvzh+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOL/Wv6Yxf/1/DGL/xv5Yxb/N/PHLP5v5Y9J/McZyB+z+A/KH7P4D84fs/iPlj9m8R+SP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8P5A/ZvH/YP6Yxf9D+WMW/w/nj1n8P5I/ZvGfNH/M4v/R/DGL/8fyxyz+H88fs/h/In/M4j9Z/pjF/5P5Yxb/yfPHLP5D88cs/lPkj1n8p8wfs/hPlT9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+n8ofs/h/On/M4v+Z/DGL/2fzxyz+n8sfs/jPkD9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/1nzxyz+s+WPWfxnzx+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP7z5Y9Z/OfPH7P4L5A/ZvFfMH/M4v/l/DGL/1fyxyz+C+WPWfwXzh+z+H81f8ziv0j+mMX/a/ljFv9F88cs/ovlj1n8v54/ZvFfPH/M4r9E/pjFf8n8MYv/N/LHLP5L5Y9Z/JfOH7P4L5M/ZvFfNn/M4v/N/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvH/Vv6Yxf/b+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bx/07+mMV/9fwxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/3fwxi/96+WMW//Xzxyz+G+SPWfw3zB+z+G+UP2bx3zh/zOL/vfwxi/8m+WMW/03zxyz+m+WPWfy/nz9m8f9B/pjFf/P8MYv/FvljFv8t88cs/lvlj1n8f5g/ZvH/Uf6Yxf/H+WMW/5/kj1n8t84fs/hvkz9m8d82f8zi/9P8MYv/dvljFv+f5Y9Z/LfPH7P475A/ZvH/ef6YxX/H/DGL/075Yxb/nfPHLP6/yB+z+O+SP2bx/2X+mMX/V/ljFv9d88cs/rvlj1n8d88fs/j/On/M4r9H/pjFf8/8MYv/XvljFv+988cs/vvkj1n8980fs/j/Jn/M4r9f/pjFf//8MYv/b/PHLP6/yx+z+B+QP2bx/33+mMX/wPwxi/9B+WMW/4Pzxyz+f8gfs/j/MX/M4n9I/pjF/0/5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4v/n/DGL/1H5Yxb/v+SPWfyPzh+z+B+TP2bx/2v+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VPybxH3cgf8ziPyh/zOI/OH/M4j9a/pjFf0j+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvH/QP6Yxf+D+WMW/w/lj1n8P5w/ZvH/SP6YxX/S/DGL/0fzxyz+H8sfs/h/PH/M4v+J/DGL/2T5Yxb/T+aPWfwnzx+z+A/NH7P4T5E/ZvGfMn/M4j9V/pjFf+r8MYv/NPljFv9p88cs/tPlj1n8p88fs/h/Kn/M4v/p/DGL/2fyxyz+n80fs/h/Ln/M4j9D/pjFf8b8MYv/TPljFv+Z88cs/rPkj1n8Z80fs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+H8+f8zi/4X8MYv/F/PHLP5fyh+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/5fzxyz+X8kfs/gvlD9m8V84f8zi/9X8MYv/IvljFv+v5Y9Z/BfNH7P4L5Y/ZvH/ev6YxX/x/DGL/xL5Yxb/JfPHLP7fyB+z+C+VP2bxXzp/zOK/TP6YxX/Z/DGL/zfzxyz+y+WPWfyXzx+z+K+QP2bxXzF/zOK/Uv6Yxf9b+WMW/2/nj1n8V84fs/ivkj9m8V81f8ziv1r+mMX/O/ljFv/V88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMV/3fwxi/9388cs/uvlj1n8188fs/hvkD9m8d8wf8ziv1H+mMV/4/wxi//38scs/pvkj1n8N80fs/hvlj9m8f9+/pjF/wf5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvH/Yf6Yxf9H+WMW/x/nj1n8f5I/ZvHfOn/M4r9N/pjFf9v8MYv/T/PHLP7b5Y9Z/H+WP2bx3z5/zOK/Q/6Yxf/n+WMW/x3zxyz+O+WPWfx3zh+z+P8if8ziv0v+mMX/l/ljFv9f5Y9Z/HfNH7P475Y/ZvHfPX/M4v/r/DGL/x75Yxb/PfPHLP575Y9Z/PfOH7P475M/ZvHfN3/M4v+b/DGL/375Yxb//fPHLP6/zR+z+P8uf8zif0D+mMX/9/ljFv8D88cs/gflj1n8D84fs/j/IX/M4v/H/DGL/yH5Yxb/P+WPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/5/zxyz+R+WPWfz/kj9m8T86f8zif0z+mMX/r/ljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT9m8X8zf8zi/1b+mMR/vIH8MYv/oPwxi//g/DGL/2j5Yxb/IfljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6Yxf8D+WMW/w/mj1n8P5Q/ZvH/cP6Yxf8j+WMW/0nzxyz+H80fs/h/LH/M4v/x/DGL/yfyxyz+k+WPWfw/mT9m8Z88f8ziPzR/zOI/Rf6YxX/K/DGL/1T5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4v+p/DGL/6fzxyz+n8kfs/h/Nn/M4v+5/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvGfNX/M4j9b/pjFf/b8MYv/HPljFv8588cs/nPlj1n8584fs/jPkz9m8Z83f8zi//n8MYv/F/LHLP5fzB+z+H8pf8ziP1/+mMV//vwxi/8C+WMW/wXzxyz+X84fs/h/JX/M4r9Q/pjFf+H8MYv/V/PHLP6L5I9Z/L+WP2bxXzR/zOK/WP6Yxf/r+WMW/8Xzxyz+S+SPWfyXzB+z+H8jf8ziv1T+mMV/6fwxi/8y+WMW/2Xzxyz+38wfs/gvlz9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/2/lj1n8v50/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/v5I9Z/FfPH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv9188cs/t/NH7P4r5c/ZvFfP3/M4r9B/pjFf8P8MYv/RvljFv+N88cs/t/LH7P4b5I/ZvHfNH/M4r9Z/pjF//v5Yxb/H+SPWfw3zx+z+G+RP2bx3zJ/zOK/Vf6Yxf+H+WMW/x/lj1n8f5w/ZvH/Sf6YxX/r/DGL/zb5Yxb/bfPHLP4/zR+z+G+XP2bx/1n+mMV/+/wxi/8O+WMW/5/nj1n8d8wfs/jvlD9m8d85f8zi/4v8MYv/LvljFv9f5o9Z/H+VP2bx3zV/zOK/W/6YxX/3/DGL/6/zxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/2/yxyz+++WPWfz3zx+z+P82f8zi/7v8MYv/AfljFv/f549Z/A/MH7P4H5Q/ZvE/OH/M4v+H/DGL/x/zxyz+h+SPWfz/lD9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+f84fs/gflT9m8f9L/pjF/+j8MYv/MfljFv+/5o9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX/M4v9G/pjF/838MYv/W/ljEv/xB/LHLP6D8scs/oPzxyz+o+WPWfyH5I9Z/EfPH7P4j5E/ZvEfM3/M4j9W/pjFf+z8MYv/OPljFv9x88cs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/w/kj1n8P5g/ZvH/UP6Yxf/D+WMW/4/kj1n8J80fs/h/NH/M4v+x/DGL/8fzxyz+n8gfs/hPlj9m8f9k/pjFf/L8MYv/0Pwxi/8U+WMW/ynzxyz+U+WPWfynzh+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/6fyxyz+n84fs/h/Jn/M4v/Z/DGL/+fyxyz+M+SPWfxnzB+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/5/PHLP5fyB+z+H8xf8zi/6X8MYv/fPljFv/588cs/gvkj1n8F8wfs/h/OX/M4v+V/DGL/0L5Yxb/hfPHLP5fzR+z+C+SP2bx/1r+mMV/0fwxi/9i+WMW/6/nj1n8F88fs/gvkT9m8V8yf8zi/438MYv/UvljFv+l88cs/svkj1n8l80fs/h/M3/M4r9c/pjFf/n8MYv/CvljFv8V88cs/ivlj1n8v5U/ZvH/dv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/L+TP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4fzd/zOK/Xv6YxX/9/DGL/wb5Yxb/DfPHLP4b5Y9Z/DfOH7P4fy9/zOK/Sf6YxX/T/DGL/2b5Yxb/7+ePWfx/kD9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/x/mj1n8f5Q/ZvH/cf6Yxf8n+WMW/63zxyz+2+SPWfy3zR+z+P80f8ziv13+mMX/Z/ljFv/t88cs/jvkj1n8f54/ZvHfMX/M4r9T/pjFf+f8MYv/L/LHLP675I9Z/H+ZP2bx/1X+mMV/1/wxi/9u+WMW/93zxyz+v84fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+v8kfs/jvlz9m8d8/f8zi/9v8MYv/7/LHLP4H5I9Z/H+fP2bxPzB/7D/Rf9DAwDYDo/gflD/2n+hPj/+D88cs/n/IH7P4/zF/zOJ/SP6Yxf9P+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOL/5/wxi/9R+WMW/7/kj1n8j84fs/gfkz9m8f9r/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT8m8Z9gIH/M4j8of8ziPzh/zOI/Wv6YxX9I/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/8E+WMW/wnzxyz+E+WPWfwnzh+z+E+SP2bx/0D+mMX/g/ljFv8P5Y9Z/D+cP2bx/0j+mMV/0vwxi/9H88cs/h/LH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/gPzR+z+E+RP2bxnzJ/zOI/Vf6YxX/q/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4fyp/zOL/6fwxi/9n8scs/p/NH7P4fy5/zOI/Q/6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/GfNH7P4z5Y/ZvGfPX/M4j9H/pjFf878MYv/XPljFv+588cs/vPkj1n8580fs/h/Pn/M4v+F/DGL/xfzxyz+X8ofs/jPlz9m8Z8/f8ziv0D+mMV/wfwxi/+X88cs/l/JH7P4L5Q/ZvFfOH/M4v/V/DGL/yL5Yxb/r+WPWfwXzR+z+C+WP2bx/3r+mMV/8fwxi/8S+WMW/yXzxyz+38gfs/gvlT9m8V86f8ziv0z+mMV/2fwxi/8388cs/svlj1n8l88fs/ivkD9m8V8xf8ziv1L+mMX/W/ljFv9v549Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjF/zv5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/d/PHLP7r5Y9Z/NfPH7P4b5A/ZvHfMH/M4r9R/pjFf+P8MYv/9/LHLP6b5I9Z/DfNH7P4b5Y/ZvH/fv6Yxf8H+WMW/83zxyz+W+SPWfy3zB+z+G+VP2bx/2H+mMX/R/ljFv8f549Z/H+SP2bx3zp/zOK/Tf6YxX/b/DGL/0/zxyz+2+WPWfx/lj9m8d8+f8ziv0P+mMX/5/ljFv8d88cs/jvlj1n8d84fs/j/In/M4r9L/pjF/5f5Yxb/X+WPWfx3zR+z+O+WP2bx3z1/zOL/6/wxi/8e+WMW/z3zxyz+e+WPWfz3zh+z+O+TP2bx3zd/zOL/m/wxi/9++WMW//3zxyz+v80fs/j/Ln/M4n9A/pjF//f5Yxb/A/PHLP4H5Y9Z/A/OH7P4/yF/zOL/x/wxi/8h+WMW/z/lj1n8D80fs/gflj82iv+x/6n+h+ePWR7/R+SPWfyPzB+z+P85f8zif1T+mMX/L/ljFv+j88cs/sfkj1n8/5o/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4v9a/pjF//X8MYv/G/ljFv8388cs/m/lj0n8JxzIH7P4D8ofs/gPzh+z+I+WP2bxH5I/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/iPlz9m8R8/f8ziP0H+mMV/wvyx/8PO3Yd7Xdd3HP8CH5TMvJmrhYYRiKKpIKhI5g1a6hE42o2lJCgp3kxQphToSslurK2cxSrWVpI3qSO1cNZcw1HOOV00K6ptNsZmjrXCZTlxq2TXgXOIc3p3Ls+X775e+X48/uCc3+/0/qU8r6sXv8N1ytJ/N/1DWfrvrn8oS//f0D+Upf8e+oey9P9N/UNZ+r9Y/1CW/i/RP5Sl/2/pH8rS/6X6h7L0H65/KEv/PfUPZem/l/6hLP1fpn8oS/8R+oey9N9b/1CW/i/XP5Sl/0j9Q1n6v0L/UJb+o/QPZek/Wv9Qlv776B/K0n+M/qEs/ffVP5Sl/376h7L0H6t/KEv//fUPZel/gP6hLP1fqX8oS/8D9Q9l6X+Q/qEs/Q/WP5Sl/zj9Q1n6j9c/lKX/IfqHsvSfoH8oS/+J+oey9D9U/1CW/ofpH8rS/3D9Q1n6T9I/lKX/EfqHsvSfrH8oS/9X6R/K0v9I/UNZ+r9a/1CW/kfpH8rS/2j9Q1n6H6N/KEv/Y/UPZek/Rf9Qlv7H6R/K0v94/UNZ+r9G/1CW/q/VP5Sl/wn6h7L0P1H/UJb+J+kfytK/Q/9Qlv4n6x/K0n+q/qEs/afpH8rSf7r+oSz9O/UPZel/iv6hLP1P1T+Upf/r9A9l6f96/UNZ+r9B/1CW/m/UP5Sl/2n6h7L0f5P+oSz936x/KEv/0/UPZel/hv6hLP1n6B/K0v8t+oey9D9T/1CW/jP1D2XpP0v/UJb+Z+kfytL/bP1DWfrP1j+Upf9b9Q9l6X+O/qEs/c/VP5Sl/xz9Q1n6n6d/KEv/8/UPZel/gf6hLP0v1D+Upf9v6x/K0v8i/UNZ+s/VP5Sl/zz9Q1n6X6x/KEv/S/QPZek/X/9Qlv6/o38oS/9L9Q9l6X+Z/qEs/RfoH8rS/236h7L0f7v+oSz9F+ofytJ/kf6hLP0v1z+Upf8V+oey9P9d/UNZ+r9D/1CW/u/UP5Sl/5X6h7L0v0r/UJb+i/UPZen/Lv1DWfpfrX8oS/936x/K0v89+oey9H+v/qEs/d+nfyhL/2v0D2Xp/379Q1n6f0D/UJb+v6d/KEv/39c/lKX/B/UPZen/If1DWfpfq38oS/8/0D+Upf91+oey9P+w/qEs/T+ifyhL/yX6h7L0/0P9Q1n6f1T/UJb+H9M/lKX/x/UPZem/VP9Qlv5/pH8oS/9P6B/K0v+P9Q9l6f8n+oey9P+k/qEs/T+lfyhL/+v1D2Xpv0z/UJb+n9Y/lKX/DfqHsvS/Uf9Qlv436R/K0v9m/UNZ+n9G/1CW/rfoH8rS/1b9Q1n636Z/KEv/P9U/lKX/cv1DWfp/Vv9Qlv636x/K0v8O/UNZ+t+pfyhL/8/pH8rS//P6h7L0X6F/KEv/u/QPZen/Z/qHsvS/W/9Qlv5f0D+Upf8X9Q9l6f/n+oey9L9H/1CW/n+hfyhL/y/pH8rS/y/1D2Xpv1L/UJb+9+ofytL/r/QPZem/Sv9Qlv5f1j+Upf9X9A9l6X+f/qEs/f9a/1CW/vfrH8rS/2/0D2Xp/4D+oSz9/1b/UJb+D+ofytL/If1DWfr/nf6hLP2/qn8oS//V+oey9P+a/qEs/f9e/1CW/g/rH8rS/+v6h7L0/4b+oSz9v6l/KEv/NfqHsvT/lv6hLP2/rX8oS//v6B/K0v8f9A9l6f+P+oey9P8n/UNZ+j+ifyhL/+/qH8rS/5/1D2Xpv1b/UJb+/6J/KEv/dfqHsvT/V/1DWfr/m/6hLP0f1T+Upf/39A9l6f+Y/qEs/f9d/1CW/uv1D2Xp/x/6h7L0/77+oSz9/1P/UJb+P9A/lKX/D/UPZem/Qf9Qlv6P6x/K0v+/9A9l6f8j/UNZ+j+hfyhL/x/rH8rS/yf6h7L0f1L/UJb+/61/KEv/p/QPZem/Uf9Qlv5P6x/K0v9/9A9l6f+/+oey9P+p/qEs/X+mfyhL/5/rH8rS/xn9Q1n6b9I/lKT/bpX+oSz9B+kfytJ/sP6hLP2H6B/K0r/oH8rSf6j+oSz9d9A/lKX/jvqHsvQfpn8oS/8X6B/K0n8n/UNZ+r9Q/1CW/jvrH8rS/0X6h7L030X/UJb+u+ofet71BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACqqqNzyoYhg3o9NWTbByNWz9n88dCNp19w881f2L3nY/eXpwYvOXjbB5s2bdo0+Mnqq90Pd6yqquu/bbfux8P6Hne9/lVTlo7d8qiMvOHpA5YvfPq499255taNJ94ydfnQzc8Orc4+78K5c8YPrqoyemi1qOvBIYOqquw7tLqu68GErgf7Da1u7XowcfODF1Sruh4cfM4lc8/temJs7d8zAPh119G5uBrSa7GrXn8a2Hb/r5py1+Kej/28ZM+rlap7/+9Zscfb+3ytx6/Y/57XL6/ou/8D/hcEAH7JwPb/vpE9H/t5yV96/z/94o+tib72q/e/5/XLKPsPAM0Lvv/fa6P7ft+/z/f/oz8HbL2/6KwlO3bt/y0bT1vQ/VR5Nt///8Xrl9F9939wr+//D6qqsk/P9/93rKoyZjt/OwAghY7Od23o7/1///tf9uxzM2jb/d/99lWnde3/2p3ufEn3U0MHuP/79Pf+/4Q+/6wAwLPT0fnpTX3e/w9g/6t9g5fcuv/HL3rwxV37//W13xu5zdcGsv9j+u7/uAXz5o+77PIrDrpw3uzz55w/5+LJkyYdcdikwydPGLf5OwJbft3O3xQAeJ7bvvf/1U59bgZV1WNb7z+4csSDXfs/4RMnXdD91LAB7v++/b7/H+n9PwD0MmpwtcMO1aLZCxZcesiWX3seTtjy65b/WLD/A/j7/9E9P0TX8zODg6rqpVvvOy97/+Cu/b9x9J4ru5/aYYD7v1+/+39s759VBACene18/39un5te+7/rkNsmd+3/yWP2v6b7qYH+/f/Yfvd/mff/AFBHR2f1//omumv/r97559fXuy77+/k/AGheG/v/+Ih3j6p3XQ6w/wDQvDb2f84xL7q73nV5pf0HgOa1sf8PdCyZWe+6HGj/AaB5bez/tItGPFTvuhxk/wGgeW3s/8grzllY77ocbP8BoHlt7P/y0zesq3ddxtl/AGheG/t/5rC1T9S7LuPtPwA0r439/84Bp55X77ocYv8BoHlt7P+Xjjz4kXrXZYL9B4DmtbH/44cvm1bvuky0/wDQvDb2/yOXHH1TvetyqP0HgOa1sf/Dp39uYr3rcpj9B4DmtbH/bzvza9fWuy6H238AaF4b+//MlccOr3ddJtl/AGheG/u/6oG9Z9S7LkfYfwBoXhv7P/Wx61bXuy6T7T8ANK+N/d/vycfn17sur7L/ANC8Nvb/s98+e32963Kk/QeA5rWx/7sse2bXetfl1fYfAJrXxv6/9+r5S+tdl6PsPwA0r439//6SXcbUuy5H238AaF4b+//Wzy9eUe+6HGP/AaB5bez/Nx6dOLXedTnW/gNA89rY/zO+vPK79a7LFPsPAM1rY/8Pe/i+2fWuy3H2HwCa18b+3/vj6U/Vuy7H238AaF4b+/+y93xz73rX5TX2HwCa18b+f/wzMz9Q77q81v4DQPPa2P+ffnH0ofWuywn2HwCa18b+z//o7TfWuy4n2n8AaF4b+9954E/W1bsuJ9l/AGheG/t//y7vXFjvunTYfwBoXhv7f9vLhzxU77qcbP8BoHlt7P+ooz40s951mWr/AaB5bez/4ql73F3vukyz/wDQvDb2/4UXfnJUvesy3f4DQPPa2P/zFz16fb3r0mn/AaB5bez/D2fMG1bvupxi/wGgeW3s/147zRpe77qcav8BoHlt7P91Yx++tt51eZ39B4DmtbH/P5t8x8R61+X19h8AmtfG/i/ca+RN9a7LG+w/ADSvjf3/1rx7p9W7Lm+0/wDQvDb2f9Yp4x+pd11Os/8A0Lw29n/CrM7z6l2XN9l/AGheG/t/zztWPVHvurzZ/gNA89rY/2vu/9SKetfldPsPAM1rY/93Xr/bmHrX5Qz7DwDNa2P/z37q4qX1rssM+w8AzWtj/3+wZt2u9a7LW+w/ADSvjf3vuOHK9fWuy5n2HwCa18b+f2Xxj+bXuy4z7T8ANK+N/b/jw9eurnddZtl/AGheG/s/5q5qRr3rcpb9B4DmXXb5FRfNnjt3zqU+8YlPfLL1k+f6f5kAAICm/eIP/c/1PwkAAAAAAAAAAAAAAAAAAADk1cb/ndhz/e8IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8H/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAIMjfeoUBCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICvAAAA//9oKdIN")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0x71e5b314, 0x0, 0x0, 0x0, 0x100000})

18.71432963s ago: executing program 2:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07})
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
dup3(r0, r1, 0x0)
readv(r1, &(0x7f0000000200)=[{&(0x7f0000000140)=""/89, 0x59}], 0x1)

13.173431715s ago: executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLZFKNiK+IOCWkVj44+WFlQOXjSaeNDERA94rG0hlYUaWhMhjVZj8GhIvBuPJv4FnvRi1JOJV70bEmJ6AT2tmd2ZdrvdLW3ZdtH9fJKB92be5n2/O/N238zrBtC1hrN/koj9EfF7RAzUqmsbDNf+u7m8OPX38uJUEpXKW38l1XY3lheniqbF6/rzykgakX6WxJEm/c5funxuslyeuZjXxxbOvz82f+nys7PnJ8/OnJ25MHHq1MkT4y88P/FcW/LMYrox9NHc0cOvvXP1janTV9/9+dukyL8hjzYZ3ujgE5VKm7vrrAN15aSng4GwJaWIyE5Xb3X8D0QpVk/eQLz6aUeDA3ZUpVKp9Lc+vFQB/seS6HQEQGcUX/TZ/W+x7dLU445w/aXaDVCW9818qx3piTRv09twf9tOwxFxeumfr7ItduY5BADAGt9n859nms3/0ri/rt3d+drQYETcExEHI+LeiDgUEfdFVNs+EBEPbrH/xkWS9fOf9Nq2EtukbP73Yr62tXb+V8z+YrCU1w5U8+9NzsyWZ47n78lI9O7J6uMb9PHDK7990epY/fwv27L+i7lgHse1nj1rXzM9uTB5OznXu/5JxFBPs/yTlZWAJCIOR8TQNvuYfeqbo62O3Tr/DbRhnanydcSTtfO/FA35F5KN1yfH7oryzPGx4qpY75dfr7zZqv/byr8NsvO/r+n1v5L/YFK/Xju/9T6u/PF5y3ua7V7/fcnb1XJfvu/DyYWFi+MRfcnrtaDr90+svraoF+2z/EeONR//B2P1nTgSEdlF/FBEPBwRj+SxPxoRj0XEsQ3y/+nlx9/bfv47K8t/ekvnf7XQF417mhdK5378bk2ng1vJPzv/J6ulkXzPZj7/NhPX9q5mAAAA+O9JI2J/JOnoSjlNR0drfy9/KPal5bn5hafPzH1wYbr2G4HB6E2LJ10Ddc9Dx/Pb+qI+0VA/kT83/rK0t1ofnZorT3c6eehy/S3Gf+bPUqejA3ac32tB9zL+oXsZ/9C9jH/oXk3G/95OxAHsvmbf/x93IA5g9zWMf8t+0EXc/0P3Mv6hexn/0JXm98atfySvoLCuEOkdEYbCDhU6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHv8GAAD//5LX5s8=")
r0 = open(&(0x7f0000000080)='./file1\x00', 0x4e57e, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b)
write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10}, 0x10)

12.421851641s ago: executing program 0:
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000640)=0x8000)
r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file1', [], 0xa, "5233f503dd8ad31feb7649d2f36f51602148f233d2f07c46d48811538630ce115cef7c3020ee1e44c7efd31fcaa4954cbbd4afdb84"}, 0x40)
close_range(r0, 0xffffffffffffffff, 0x0)

11.633425763s ago: executing program 0:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, 0x0)

11.294917305s ago: executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r1=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x4, 0x0, 0x1, 0x0, '\x00', r1}, 0x48)

6.936578168s ago: executing program 3:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, 0x0, 0x200c4000)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000500)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x58, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x8}}}, 0x24}}, 0x0)

6.259370773s ago: executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r2, &(0x7f0000000180), 0x40010)

6.009205552s ago: executing program 3:
timer_settime(0x0, 0x0, 0x0, 0x0)
rt_sigreturn()
mlockall(0x0)
msgget$private(0x0, 0x0)
msgsnd(0x0, 0x0, 0x0, 0x0)
msgget(0x2, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
msgget$private(0x0, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/81)

5.89260474s ago: executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@nobh}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@dioread_nolock}, {@usrjquota}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0x8000c61)
pwritev2(r1, &(0x7f0000000300)=[{&(0x7f0000000140)="e7", 0x1}], 0x1, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x3)
ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000dfff000000000006bb8d8d00"})
syz_open_pts(r2, 0x48f00)
syz_open_dev$tty20(0xc, 0x4, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000440), 0x3, 0x440, &(0x7f00000006c0)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r3, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
creat(&(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.current\x00', 0x26e1, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000500), 0x10, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x13)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x1, 0x3ff, 0x1ff, 0x0, 0x16, "f407a93104d67e1fb6ffffffffffffffffb68e"})

4.450492593s ago: executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x2}]}}}]}, 0x44}}, 0x0)

4.20587017s ago: executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000740)='./file0\x00', 0x4000000)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0)
flock(r1, 0x5)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x18)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58)
r6 = accept$alg(r5, 0x0, 0x0)
syz_pidfd_open(r2, 0x0)
sendmsg$alg(r6, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000100)="f297c0eccf859705acf9834f5b4b6039b63eac610b", 0x15}, {&(0x7f0000001400)="c98812c1be8a", 0xffffffc8}, {&(0x7f00000012c0)="406f2bef596a8a3130012ee7bf", 0xd}, {&(0x7f0000001300)="7f5549f794326461", 0x8}], 0x4, &(0x7f00000000c0)=[@op={0x18}], 0x18}, 0x0)

3.125808057s ago: executing program 1:
syz_mount_image$jfs(&(0x7f0000000180), &(0x7f0000005e00)='./file0\x00', 0x0, &(0x7f0000000880)={[{}, {@uid}, {@uid}, {@errors_continue}, {@errors_continue}, {@quota}, {@quota}]}, 0x0, 0x5f58, &(0x7f000000c3c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
unlink(&(0x7f0000000280)='./file1\x00')
rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000200)='./file1\x00')

1.957826728s ago: executing program 3:
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "2af01c3d0040fbffffffffffffff00"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0))
ioctl$TCSETS(r1, 0x5402, &(0x7f00000002c0)={0xffff, 0x0, 0x0, 0x0, 0x0, "db2d416fbecfb84b5452b768e08ee2df361089"})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x19)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae42, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140))

648.08989ms ago: executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x9a8}, 0x10}, 0x90)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
bpf$BPF_BTF_LOAD(0x6, &(0x7f0000000540)={0x0, 0x0}, 0x20)

647.97363ms ago: executing program 1:
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000640)=0x8000)
r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file1', [], 0xa, "5233f503dd8ad31feb7649d2f36f51602148f233d2f07c46d48811538630ce115cef7c3020ee1e44c7efd31fcaa4954cbbd4afdb84"}, 0x40)
close_range(r0, 0xffffffffffffffff, 0x0)

647.78645ms ago: executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000079381010c2154000fb0707820b0109021b0009000000080904000001e104550009058b37ad"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

135.176509ms ago: executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r1=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x4, 0x0, 0x1, 0x0, '\x00', r1}, 0x48)

110.696263ms ago: executing program 3:
syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f00000002c0)='./file0\x00', 0x98, &(0x7f0000000440), 0x1, 0x10f6, &(0x7f00000022c0)="$eJzs2LFqFEEYB/D/7J6C1cmkXwJaKEhIOF8ghcI1FtZ2h5WdVyn3OD6OpLIPeYAUAXtlb10NIki4JQfH7wfL7vyZb76dciYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQmyUPkxw1SR2zJklJuu5ieZWkG/PHX9smJW/fL9evPi5er4dp6bMmpa/ajuvZk1oXdVHP6suj86d1/enzh/ZWy5Iulzeb1aM315Nupe/dTroiAAAAHIYfO5vvuT8AAADwP5NdJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMoI4fTZKSdN3F8ipJt9/fAgAAAHZU0uTd/F/5cA3wx4t8m5dtPvpe+jmn+TLUP7979wd3LwEAAIADVW6dx59l9vtc3mfHmeXkZBj/euX6PGmTnP61zuXNZrV9jjercp8bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+sgPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAACAqQIAAP//I7HRJg==")
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x6000, 0x700)

0s ago: executing program 0:
r0 = socket(0x2, 0x80805, 0x0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c"], 0x1c}}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x18, &(0x7f0000000000)=@assoc_value, &(0x7f0000000600)=0x8)

kernel console output (not intermixed with test programs):

Æ‹�¡}͸ʼ(©zmÔbE1ôƬÐqd1˜K]
[  165.015480][ T5842] overlayfs: failed to get inode (-116)
[  165.064411][ T5844] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  165.085255][ T5844] Error parsing options; rc = [-22]
[  165.572000][   T22] usbhid 3-1:0.0: can't add hid device: -71
[  165.578064][   T22] usbhid: probe of 3-1:0.0 failed with error -71
[  165.603752][   T22] usb 3-1: USB disconnect, device number 8
[  165.798210][ T5841] loop0: detected capacity change from 0 to 32768
[  165.829638][ T5841] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (5841)
[  165.861137][ T5841] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  165.882530][ T5841] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  165.891291][ T5841] BTRFS info (device loop0): turning off barriers
[  165.911894][ T5841] BTRFS info (device loop0): setting nodatasum
[  165.928353][ T5841] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  165.947801][ T5841] BTRFS info (device loop0): force zstd compression, level 3
[  165.965492][ T5841] BTRFS info (device loop0): using free space tree
[  165.999354][ T5848] loop1: detected capacity change from 0 to 32768
[  166.197763][ T5841] BTRFS info (device loop0): checking UUID tree
[  166.288091][ T3574] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  166.525073][ T5887] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'.
[  166.631430][ T5889] loop1: detected capacity change from 0 to 1024
[  166.696049][ T5889] hfsplus: bad catalog entry type
[  166.773951][ T3802] hfsplus: b-tree write err: -5, ino 4
[  166.791226][ T5897] : Can't open blockdev
[  166.817164][   T27] audit: type=1804 audit(1718250834.459:53): pid=5899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3922151102/syzkaller.5EFAUO/161/file0" dev="sda1" ino=1943 res=1 errno=0
[  166.871009][   T27] audit: type=1804 audit(1718250834.509:54): pid=5899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3922151102/syzkaller.5EFAUO/161/file0" dev="sda1" ino=1943 res=1 errno=0
[  167.020021][ T5905] loop3: detected capacity change from 0 to 1024
[  167.381971][ T3618] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  167.672122][ T3618] usb 2-1: Using ep0 maxpacket: 8
[  167.979838][ T3618] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  168.020873][ T3618] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  168.162107][ T3618] usb 2-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da
[  168.181434][ T3618] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  168.209096][ T3618] usb 2-1: Manufacturer: syz
[  168.225903][ T3618] usb 2-1: config 0 descriptor??
[  168.288961][ T3618] appledisplay 2-1:0.0: Could not find int-in endpoint
[  168.298246][ T3618] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  168.326214][ T5928] loop2: detected capacity change from 0 to 256
[  168.360262][ T5928] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d)
[  168.509499][ T3618] usb 2-1: USB disconnect, device number 6
[  168.730252][ T5926] loop3: detected capacity change from 0 to 32768
[  168.751890][ T5926] XFS (loop3): Mounting V5 Filesystem
[  168.810521][ T5926] XFS (loop3): Ending clean mount
[  168.845112][ T5926] XFS (loop3): Quotacheck needed: Please wait.
[  168.902973][ T5926] XFS (loop3): Quotacheck: Done.
[  169.045020][ T4709] XFS (loop3): Unmounting Filesystem
[  170.259211][ T5951] loop3: detected capacity change from 0 to 2048
[  170.322428][ T5951] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  170.377611][ T5958] loop0: detected capacity change from 0 to 1024
[  173.510227][ T5968] loop3: detected capacity change from 0 to 32768
[  173.625196][ T5968] XFS (loop3): Mounting V5 Filesystem
[  173.654777][ T5968] XFS (loop3): AIL initialisation failed: error -12
[  173.705227][ T5968] XFS (loop3): log mount failed
[  173.904875][ T6003] loop0: detected capacity change from 0 to 4096
[  173.920065][ T6003] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  173.930730][ T6003] ntfs3: loop0: RAW NTFS volume: Filesystem size 0.02 Gb > volume size 0.00 Gb. Mount in read-only
[  174.126336][ T6007] overlayfs: failed to get inode (-116)
[  174.132299][ T6007] overlayfs: failed to get inode (-116)
[  174.213033][ T6011] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  175.386111][ T6027] loop3: detected capacity change from 0 to 2048
[  175.433669][ T6027] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  175.508761][ T6032] loop0: detected capacity change from 0 to 4096
[  175.534141][ T6032] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  175.550738][ T6032] ntfs3: loop0: RAW NTFS volume: Filesystem size 0.02 Gb > volume size 0.00 Gb. Mount in read-only
[  175.602212][ T6035] overlayfs: failed to get inode (-116)
[  175.607938][ T6035] overlayfs: failed to get inode (-116)
[  175.712185][ T6039] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  175.751960][ T3584] Bluetooth: hci0: command 0x0406 tx timeout
[  175.751996][ T3582] Bluetooth: hci3: command 0x0406 tx timeout
[  176.005193][ T6041] loop1: detected capacity change from 0 to 8192
[  176.789647][ T6046] ecryptfs_parse_options: eCryptfs: unrecognized option [l]
[  176.802215][ T6041] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  176.841951][ T6046] ecryptfs_parse_options: eCryptfs: unrecognized option [io%bfq.io_serviced_recuÔèrsiÆ‹�¡}͸ʼ(©zmÔbE1ôƬÐqd1˜K]
[  176.855536][ T6041] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  176.865437][ T6041] REISERFS (device loop1): using ordered data mode
[  176.874102][ T6041] reiserfs: using flush barriers
[  176.882786][ T6041] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  176.904509][ T6041] REISERFS (device loop1): checking transaction log (loop1)
[  176.906674][ T6046] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  176.932165][ T6041] REISERFS (device loop1): Using r5 hash to sort names
[  176.941316][ T6046] Error parsing options; rc = [-22]
[  176.948554][ T6041] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  177.028748][ T6056] : Can't open blockdev
[  177.073617][ T6058] loop3: detected capacity change from 0 to 256
[  177.098077][ T6058] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  177.606154][ T4567] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.632175][ T4276] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  177.718372][ T4567] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.855638][ T4567] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.956984][ T4567] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.005747][ T4276] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  178.029820][ T4276] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  178.058487][ T4276] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 30
[  178.100112][ T4276] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  178.127351][ T4276] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.164074][ T4276] usb 1-1: config 0 descriptor??
[  178.422925][ T3572] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  178.449272][ T3572] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  178.459249][ T3572] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  178.469907][ T3572] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  178.477748][ T3572] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  178.485700][ T3572] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  178.591438][ T6078] loop1: detected capacity change from 0 to 4096
[  178.628335][ T6078] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  178.947677][ T6080] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  179.048629][ T6075] chnl_net:caif_netlink_parms(): no params data found
[  179.134049][ T4567] device hsr_slave_0 left promiscuous mode
[  179.152003][ T4567] device hsr_slave_1 left promiscuous mode
[  179.158747][ T4567] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  179.182550][ T4567] batman_adv: batadv0: Removing interface: batadv_slave_0
[  179.220586][ T4567] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  179.238583][ T4567] batman_adv: batadv0: Removing interface: batadv_slave_1
[  179.262025][ T4567] device bridge_slave_1 left promiscuous mode
[  179.269575][ T4567] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.283568][ T4567] device bridge_slave_0 left promiscuous mode
[  179.293375][ T4567] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.315641][ T4567] device veth1_macvtap left promiscuous mode
[  179.321708][ T4567] device veth0_macvtap left promiscuous mode
[  179.331715][ T4567] device veth1_vlan left promiscuous mode
[  179.339823][ T4567] device veth0_vlan left promiscuous mode
[  179.352526][ T4276] usbhid 1-1:0.0: can't add hid device: -71
[  179.358526][ T4276] usbhid: probe of 1-1:0.0 failed with error -71
[  179.383970][ T4276] usb 1-1: USB disconnect, device number 6
[  179.570872][ T6092] loop1: detected capacity change from 0 to 1024
[  179.596597][ T4567] bond1 (unregistering): Released all slaves
[  179.607050][ T6092] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  179.727235][ T4700] EXT4-fs (loop1): unmounting filesystem.
[  179.848071][ T4567] team0 (unregistering): Port device team_slave_1 removed
[  179.875787][ T4567] team0 (unregistering): Port device team_slave_0 removed
[  179.972738][ T4567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  180.042146][ T4567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  180.216044][   T27] audit: type=1800 audit(1718250847.829:55): pid=6100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1943 res=0 errno=0
[  180.563138][ T3582] Bluetooth: hci2: command tx timeout
[  180.933776][ T4130] kernel write not supported for file bpf-prog (pid: 4130 comm: kworker/1:12)
[  181.008477][ T4567] bond0 (unregistering): Released all slaves
[  181.014481][ T6111] overlayfs: unrecognized mount option "smackfsdef=.!)(\" or missing value
[  181.122029][   T27] audit: type=1800 audit(1718250848.759:56): pid=6113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=1952 res=0 errno=0
[  181.319414][ T6075] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.344031][ T6075] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.377009][ T6075] device bridge_slave_0 entered promiscuous mode
[  181.408631][ T6075] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.440729][ T6075] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.450734][ T6075] device bridge_slave_1 entered promiscuous mode
[  181.497082][ T6075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  181.534734][ T6075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  181.589031][ T6075] team0: Port device team_slave_0 added
[  181.603959][ T6075] team0: Port device team_slave_1 added
[  181.617966][ T6124] loop1: detected capacity change from 0 to 8192
[  181.646718][ T6075] batman_adv: batadv0: Adding interface: batadv_slave_0
[  181.654397][ T6075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.700864][ T6124] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  181.714172][ T6124] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  181.731903][ T6075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  181.732850][ T6124] REISERFS warning (device loop1):  reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device
[  181.772090][ T6124] REISERFS warning (device loop1):  reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition
[  181.830742][ T6129] xt_hashlimit: invalid rate
[  182.055821][ T6124] REISERFS warning (device loop1):  reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to
[  182.073857][ T6075] batman_adv: batadv0: Adding interface: batadv_slave_1
[  182.173300][ T6075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  182.432187][ T6075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  182.604836][ T6075] device hsr_slave_0 entered promiscuous mode
[  182.623599][ T6075] device hsr_slave_1 entered promiscuous mode
[  182.634083][ T6075] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  182.636707][ T3572] Bluetooth: hci2: command tx timeout
[  182.641662][ T6075] Cannot create hsr debugfs directory
[  183.242402][   T27] audit: type=1800 audit(1718250850.789:57): pid=6137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1942 res=0 errno=0
[  183.897330][ T3753] kernel write not supported for file bpf-prog (pid: 3753 comm: kworker/0:9)
[  184.263745][ T6075] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  184.283520][ T6075] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  184.312334][ T6075] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  184.341318][ T6075] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  184.375468][ T6153] overlayfs: unrecognized mount option "smackfsdef=.!)(\" or missing value
[  184.502362][ T6075] 8021q: adding VLAN 0 to HW filter on device bond0
[  184.511546][ T6155] loop0: detected capacity change from 0 to 1024
[  184.531094][ T3753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  184.542496][ T3753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  184.559250][ T6155] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  184.561721][ T6075] 8021q: adding VLAN 0 to HW filter on device team0
[  184.603445][ T3753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  184.615590][ T3753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  184.634136][ T3753] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.641278][ T3753] bridge0: port 1(bridge_slave_0) entered forwarding state
[  184.681325][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  184.707450][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  184.711912][ T3572] Bluetooth: hci2: command tx timeout
[  184.731395][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  184.772868][ T3752] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.780009][ T3752] bridge0: port 2(bridge_slave_1) entered forwarding state
[  184.872529][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  184.929192][ T6075] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  184.972216][ T6075] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  185.003349][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  185.020614][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  185.043832][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  185.058588][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  185.074874][ T6162] loop1: detected capacity change from 0 to 2048
[  185.077775][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  185.112691][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  185.131508][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  185.144433][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  185.182559][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  185.209541][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  185.227884][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  185.269787][ T6162] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  185.318110][ T6162] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  185.426090][   T27] audit: type=1800 audit(1718250853.049:58): pid=6166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1952 res=0 errno=0
[  185.602997][ T6162] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  186.183282][ T6162] EXT4-fs error (device loop1): ext4_find_dest_de:2112: inode #12: block 9: comm syz-executor.1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0
[  186.221383][   T27] audit: type=1800 audit(1718250853.859:59): pid=6171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=1952 res=0 errno=0
[  186.247560][ T6162] EXT4-fs (loop1): Remounting filesystem read-only
[  186.343001][ T4700] EXT4-fs (loop1): unmounting filesystem.
[  186.515733][ T3753] kernel write not supported for file bpf-prog (pid: 3753 comm: kworker/0:9)
[  186.533212][ T6075] 8021q: adding VLAN 0 to HW filter on device batadv0
[  186.549730][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  186.562841][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  186.621100][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  186.635132][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  186.660815][ T6177] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  186.684639][ T6177] 8021q: adding VLAN 0 to HW filter on device bond1
[  186.699784][ T6075] device veth0_vlan entered promiscuous mode
[  186.713545][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  186.722733][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  186.768001][ T6177] 8021q: adding VLAN 0 to HW filter on device bond1
[  186.788892][ T6177] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address
[  186.791905][ T3572] Bluetooth: hci2: command tx timeout
[  186.824462][ T6177] bond1: (slave ip6tnl1): Error -95 calling set_mac_address
[  186.880675][ T6075] device veth1_vlan entered promiscuous mode
[  186.888275][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  186.896849][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  186.904989][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  186.930793][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  186.939728][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  186.949192][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  186.960915][ T6075] device veth0_macvtap entered promiscuous mode
[  186.978761][ T6075] device veth1_macvtap entered promiscuous mode
[  187.016960][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  187.038502][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.052344][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  187.062842][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.081831][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  187.092370][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.112212][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  187.123048][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.147420][ T6075] batman_adv: batadv0: Interface activated: batadv_slave_0
[  187.161663][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  187.184993][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  187.195701][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  187.213055][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  187.234663][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  187.253156][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.281868][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  187.311905][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.331818][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  187.361821][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.381806][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  187.401874][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.423409][ T6075] batman_adv: batadv0: Interface activated: batadv_slave_1
[  187.441333][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  187.458356][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  187.476075][ T6075] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  187.495203][ T6075] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  187.511865][ T6075] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  187.530802][ T6075] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  187.667553][ T6186] loop1: detected capacity change from 0 to 32768
[  187.700602][ T6186] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (6186)
[  187.715055][ T3669] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.724619][ T3669] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  187.765410][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  187.789264][ T6186] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  187.792484][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.811596][ T6191] loop0: detected capacity change from 0 to 1024
[  187.820945][ T6186] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  187.825883][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  187.829846][ T6186] BTRFS info (device loop1): enabling ssd optimizations
[  187.846754][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  187.857432][ T6191] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  187.871227][ T6186] BTRFS info (device loop1): using spread ssd allocation scheme
[  187.886853][ T6186] BTRFS info (device loop1): turning on sync discard
[  187.901976][ T6186] BTRFS error (device loop1): support for check_integrity* not compiled in!
[  187.924555][ T6186] BTRFS error (device loop1): open_ctree failed
[  187.944001][ T6193] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  188.156019][ T6200] netlink: 341 bytes leftover after parsing attributes in process `syz-executor.0'.
[  189.147965][ T6210] mkiss: ax0: crc mode is auto.
[  189.480756][ T6220] loop3: detected capacity change from 0 to 1024
[  189.527000][ T6220] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  189.919662][ T6229] netlink: 341 bytes leftover after parsing attributes in process `syz-executor.3'.
[  190.257047][ T6231] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  190.380168][ T6231] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'.
[  190.521661][ T6231] tipc: Invalid UDP bearer configuration
[  190.524835][ T6231] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  190.736761][ T6236] loop3: detected capacity change from 0 to 128
[  190.788141][ T6236] qnx6: unable to read the first superblock
[  191.131868][ T4133] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  191.312714][ T6259] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  191.322171][ T6259] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'.
[  191.331595][ T6259] tipc: Invalid UDP bearer configuration
[  191.331637][ T6259] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  191.382851][ T4133] usb 2-1: Using ep0 maxpacket: 16
[  191.502903][ T4133] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11
[  191.507084][ T6267] loop3: detected capacity change from 0 to 128
[  191.520236][ T4133] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  191.530403][ T4133] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  191.531187][ T6267] qnx6: unable to read the first superblock
[  191.544719][ T4133] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  191.559396][ T4133] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  191.575276][ T4133] usb 2-1: config 1 interface 0 has no altsetting 0
[  191.584614][ T4133] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  191.597422][ T4133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.645113][ T4133] ums-sddr09 2-1:1.0: USB Mass Storage device detected
[  191.868160][ T4133] scsi host1: usb-storage 2-1:1.0
[  192.113700][ T6285] loop3: detected capacity change from 0 to 47
[  192.187170][ T6285] syz-executor.3: attempt to access beyond end of device
[  192.187170][ T6285] loop3: rw=2049, sector=48, nr_sectors = 2 limit=47
[  192.212367][ T6285] Buffer I/O error on dev loop3, logical block 24, lost async page write
[  192.227909][ T6285] syz-executor.3: attempt to access beyond end of device
[  192.227909][ T6285] loop3: rw=2049, sector=50, nr_sectors = 2 limit=47
[  192.252248][ T6285] Buffer I/O error on dev loop3, logical block 25, lost async page write
[  192.299612][ T6289] loop0: detected capacity change from 0 to 4096
[  192.309013][ T6289] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  192.338287][ T6289] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  192.358646][ T6289] ntfs3: loop0: mft corrupted
[  192.363849][ T6285] syz-executor.3: attempt to access beyond end of device
[  192.363849][ T6285] loop3: rw=2049, sector=48, nr_sectors = 2 limit=47
[  192.381894][ T6285] Buffer I/O error on dev loop3, logical block 24, lost async page write
[  192.385499][ T6289] ntfs3: loop0: Failed to load $Extend.
[  192.396016][ T6285] syz-executor.3: attempt to access beyond end of device
[  192.396016][ T6285] loop3: rw=2049, sector=50, nr_sectors = 2 limit=47
[  192.396049][ T6285] Buffer I/O error on dev loop3, logical block 25, lost async page write
[  192.807919][ T6302] device ipvlan0 entered promiscuous mode
[  192.839392][ T6302] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  192.962320][ T2444] scsi 1:0:0:0: Direct-Access     Sandisk  ImageMate SDDR09 0177 PQ: 0 ANSI: 0
[  193.008687][ T2444] sd 1:0:0:0: Attached scsi generic sg1 type 0
[  193.127577][ T6276] sddr09: could not read card info
[  193.292217][ T6276] usb 2-1: reset high-speed USB device number 7 using dummy_hcd
[  193.447208][ T6308] loop3: detected capacity change from 0 to 32768
[  193.457444][ T6308] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (6308)
[  193.466253][ T6316] loop0: detected capacity change from 0 to 4096
[  193.484928][ T6308] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  193.498793][ T6316] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  193.500723][ T6308] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  193.527509][ T6308] BTRFS info (device loop3): setting nodatacow, compression disabled
[  193.536876][ T6308] BTRFS info (device loop3): setting datacow
[  193.543342][ T6308] BTRFS info (device loop3): doing ref verification
[  193.550218][ T6308] BTRFS info (device loop3): force clearing of disk cache
[  193.558008][ T6308] BTRFS info (device loop3): turning off barriers
[  193.571252][ T6308] BTRFS info (device loop3): enabling ssd optimizations
[  193.579946][ T6308] BTRFS info (device loop3): using spread ssd allocation scheme
[  193.588504][ T6308] BTRFS info (device loop3): not using ssd optimizations
[  193.596178][ T6308] BTRFS info (device loop3): not using spread ssd allocation scheme
[  193.606821][ T6308] BTRFS info (device loop3): using free space tree
[  193.809601][ T6308] BTRFS info (device loop3): rebuilding free space tree
[  194.423674][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  194.430367][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  194.457766][ T6075] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  194.652918][ T6339] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'.
[  194.781907][ T4276] usb 2-1: USB disconnect, device number 7
[  194.831838][ T4567] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B)
[  194.839876][ T4567] sd 1:0:0:0: [sdb] 0-byte physical blocks
[  194.848961][ T6344] fuse: Unknown parameter 'fd0x0000000000000003'
[  194.861994][ T4567] sd 1:0:0:0: [sdb] Write Protect is off
[  194.867827][ T4567] sd 1:0:0:0: [sdb] Asking for cache data failed
[  194.892961][ T6344] cgroup: name respecified
[  194.897493][ T4567] sd 1:0:0:0: [sdb] Assuming drive cache: write through
[  194.902362][ T6346] loop1: detected capacity change from 0 to 256
[  194.918741][ T6344] loop0: detected capacity change from 0 to 512
[  194.965277][ T4567] sd 1:0:0:0: [sdb] Attached SCSI removable disk
[  195.052145][ T6344] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  195.061158][ T6344] ext4 filesystem being mounted at /root/syzkaller-testdir3922151102/syzkaller.5EFAUO/226/file0 supports timestamps until 2038 (0x7fffffff)
[  195.201664][ T6344] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  195.233272][ T6344] EXT4-fs error (device loop0): __ext4_remount:6425: comm syz-executor.0: Abort forced by user
[  195.299689][ T6344] EXT4-fs (loop0): Remounting filesystem read-only
[  195.500026][ T3574] EXT4-fs (loop0): unmounting filesystem.
[  196.162790][ T6367] hugetlbfs: syz-executor.0 (6367): Using mlock ulimits for SHM_HUGETLB is obsolete
[  196.488055][ T6369] loop3: detected capacity change from 0 to 1024
[  196.501350][ T6369] EXT4-fs: Ignoring removed orlov option
[  196.508539][ T6371] loop0: detected capacity change from 0 to 6
[  196.514864][ T6369] EXT4-fs: Ignoring removed nomblk_io_submit option
[  196.536310][ T6371]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12
[  196.551420][ T6371] loop0: p1 start 2539108048 is beyond EOD, truncated
[  196.566470][ T6371] loop0: p2 start 889171192 is beyond EOD, truncated
[  196.578471][ T6371] loop0: p3 start 792581948 is beyond EOD, truncated
[  196.588095][ T6371] loop0: p4 start 1456853722 is beyond EOD, truncated
[  196.599671][ T6371] loop0: p5 start 1141946017 is beyond EOD, truncated
[  196.600627][ T6369] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  196.610359][ T6371] loop0: p6 start 3001765269 is beyond EOD, truncated
[  196.640597][ T6371] loop0: p7 start 968805589 is beyond EOD, truncated
[  196.649694][ T6371] loop0: p8 start 125582381 is beyond EOD, truncated
[  196.656584][ T6371] loop0: p9 start 3183194258 is beyond EOD, truncated
[  196.663953][ T6371] loop0: p10 start 990039342 is beyond EOD, truncated
[  196.670824][ T6371] loop0: p11 start 1027047110 is beyond EOD, truncated
[  196.679841][ T6371] loop0: p12 start 2492809265 is beyond EOD, truncated
[  196.789507][ T6382] loop1: detected capacity change from 0 to 2048
[  196.809749][ T6075] EXT4-fs (loop3): unmounting filesystem.
[  196.853166][ T6382] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  196.947683][ T6382] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor.1: bg 0: block 234: padding at end of block bitmap is not set
[  197.031342][ T6382] EXT4-fs (loop1): Remounting filesystem read-only
[  197.130372][ T4700] EXT4-fs (loop1): unmounting filesystem.
[  197.483562][ T6379] loop0: detected capacity change from 0 to 40427
[  197.496797][ T6379] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  197.512446][ T6379] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  197.536128][ T6379] F2FS-fs (loop0): invalid crc value
[  197.673594][ T6379] F2FS-fs (loop0): Found nat_bits in checkpoint
[  198.129820][ T6379] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  198.189718][ T6379] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  198.463633][ T6379] F2FS-fs (loop0): access invalid blkaddr:3
[  198.470090][ T6379] CPU: 0 PID: 6379 Comm: syz-executor.0 Not tainted 6.1.93-syzkaller #0
[  198.478435][ T6379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  198.488530][ T6379] Call Trace:
[  198.491825][ T6379]  <TASK>
[  198.494760][ T6379]  dump_stack_lvl+0x1e3/0x2cb
[  198.499562][ T6379]  ? nf_tcp_handle_invalid+0x642/0x642
[  198.505030][ T6379]  ? f2fs_get_next_page_offset+0x6c0/0x6c0
[  198.510836][ T6379]  ? register_lock_class+0x100/0x990
[  198.516209][ T6379]  f2fs_is_valid_blkaddr+0xca6/0x1270
[  198.521595][ T6379]  f2fs_map_blocks+0x15fd/0x3ab0
[  198.526553][ T6379]  ? f2fs_do_map_lock+0x70/0x70
[  198.531393][ T6379]  ? rwsem_write_trylock+0x166/0x210
[  198.536688][ T6379]  ? clear_nonspinnable+0x60/0x60
[  198.541736][ T6379]  f2fs_precache_extents+0x278/0x420
[  198.547034][ T6379]  ? f2fs_pin_file_control+0x1d0/0x1d0
[  198.552490][ T6379]  ? kasan_set_track+0x60/0x70
[  198.557249][ T6379]  ? kasan_set_track+0x4b/0x70
[  198.562010][ T6379]  ? kasan_save_free_info+0x27/0x40
[  198.567199][ T6379]  ? __kmem_cache_free+0x25c/0x3c0
[  198.572307][ T6379]  ? tomoyo_path_number_perm+0x61b/0x7f0
[  198.577932][ T6379]  ? security_file_ioctl+0x6d/0xa0
[  198.583033][ T6379]  ? __se_sys_ioctl+0x47/0x160
[  198.587796][ T6379]  ? do_syscall_64+0x3b/0xb0
[  198.592388][ T6379]  __f2fs_ioctl+0x10b7/0xc2a0
[  198.597078][ T6379]  ? do_vfs_ioctl+0xc55/0x2a90
[  198.601842][ T6379]  ? __x64_compat_sys_ioctl+0x80/0x80
[  198.607206][ T6379]  ? __lock_acquire+0x1f80/0x1f80
[  198.612226][ T6379]  ? lockdep_hardirqs_on+0x94/0x130
[  198.617423][ T6379]  ? __kmem_cache_free+0x25c/0x3c0
[  198.622532][ T6379]  ? f2fs_ioctl+0x1d0/0x1d0
[  198.627031][ T6379]  ? tomoyo_path_number_perm+0x61b/0x7f0
[  198.632662][ T6379]  ? tomoyo_path_number_perm+0x68a/0x7f0
[  198.638285][ T6379]  ? tomoyo_path_number_perm+0x1f2/0x7f0
[  198.643908][ T6379]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  198.649375][ T6379]  ? __fget_files+0x28/0x4a0
[  198.653970][ T6379]  ? __fget_files+0x28/0x4a0
[  198.658550][ T6379]  ? __fget_files+0x435/0x4a0
[  198.663217][ T6379]  ? __fget_files+0x28/0x4a0
[  198.667801][ T6379]  ? f2fs_ioctl+0x132/0x1d0
[  198.672302][ T6379]  ? f2fs_precache_extents+0x420/0x420
[  198.677758][ T6379]  __se_sys_ioctl+0xf1/0x160
[  198.682369][ T6379]  do_syscall_64+0x3b/0xb0
[  198.686815][ T6379]  ? clear_bhb_loop+0x45/0xa0
[  198.691506][ T6379]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  198.697401][ T6379] RIP: 0033:0x7f7c2827cea9
[  198.701820][ T6379] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  198.721438][ T6379] RSP: 002b:00007f7c28f9b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  198.729851][ T6379] RAX: ffffffffffffffda RBX: 00007f7c283b3f80 RCX: 00007f7c2827cea9
[  198.737820][ T6379] RDX: 0000000000000000 RSI: 000000000000f50f RDI: 0000000000000004
[  198.745808][ T6379] RBP: 00007f7c282ebff4 R08: 0000000000000000 R09: 0000000000000000
[  198.753807][ T6379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  198.761817][ T6379] R13: 000000000000000b R14: 00007f7c283b3f80 R15: 00007ffd95dd01b8
[  198.769803][ T6379]  </TASK>
[  198.908275][ T6395] loop3: detected capacity change from 0 to 32768
[  198.925234][ T3574] syz-executor.0: attempt to access beyond end of device
[  198.925234][ T3574] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  198.943016][ T6395] resize option for remount only
[  199.018300][ T6414] loop1: detected capacity change from 0 to 1024
[  199.202801][ T3582] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  199.214348][ T3582] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  199.227537][ T3582] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  199.247762][ T3582] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  199.257370][ T3582] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  199.264839][ T3582] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  199.272253][ T6418] loop1: detected capacity change from 0 to 2048
[  199.386410][ T6418] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  199.431203][ T6418] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor.1: bg 0: block 234: padding at end of block bitmap is not set
[  199.487516][ T6418] EXT4-fs (loop1): Remounting filesystem read-only
[  199.554997][ T4700] EXT4-fs (loop1): unmounting filesystem.
[  199.635136][ T6415] chnl_net:caif_netlink_parms(): no params data found
[  199.791888][ T4130] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  199.803553][ T6415] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.831036][ T6415] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.861330][ T6415] device bridge_slave_0 entered promiscuous mode
[  199.905040][ T6434] kvm [6433]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0
[  199.922431][ T6415] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.935620][ T6415] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.942889][ T6434] kvm [6433]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0
[  199.946658][ T6415] device bridge_slave_1 entered promiscuous mode
[  199.972799][ T6434] kvm [6433]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe702111
[  200.035379][ T6415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  200.051946][ T6415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  200.104348][ T6415] team0: Port device team_slave_0 added
[  200.115082][ T6415] team0: Port device team_slave_1 added
[  200.161932][ T4130] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  200.172994][ T4130] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  200.174557][ T6415] batman_adv: batadv0: Adding interface: batadv_slave_0
[  200.196494][ T6415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.211998][ T4130] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  200.232062][ T4130] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.246382][ T6415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  200.262735][ T4130] usb 4-1: config 0 descriptor??
[  200.284015][ T6415] batman_adv: batadv0: Adding interface: batadv_slave_1
[  200.302265][ T6415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.337240][ T6415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  200.420143][ T6415] device hsr_slave_0 entered promiscuous mode
[  200.430838][ T6415] device hsr_slave_1 entered promiscuous mode
[  200.444676][ T6415] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  200.456944][ T6415] Cannot create hsr debugfs directory
[  200.762866][ T6415] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.913229][ T6415] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.028765][ T6415] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.088719][ T6447] loop1: detected capacity change from 0 to 32768
[  201.131012][ T6415] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.193182][ T4130] uclogic 0003:256C:006D.0008: failed retrieving Huion firmware version: -71
[  201.212711][ T4130] uclogic 0003:256C:006D.0008: failed probing parameters: -71
[  201.220504][ T4130] uclogic: probe of 0003:256C:006D.0008 failed with error -71
[  201.221154][ T6447] syz-executor.1: attempt to access beyond end of device
[  201.221154][ T6447] loop1: rw=2049, sector=2621792, nr_sectors = 8 limit=32768
[  201.247632][ T4130] usb 4-1: USB disconnect, device number 3
[  201.352032][ T3578] Bluetooth: hci5: command tx timeout
[  201.365368][  T133] blkno = 5002c, nblocks = 1
[  201.369988][  T133] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[  201.369988][  T133] 
[  201.385587][ T6449] loop0: detected capacity change from 0 to 256
[  201.392516][  T133] ERROR: (device loop1): remounting filesystem as read-only
[  201.421419][ T6415] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  201.431357][ T6415] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  201.441452][ T6415] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  201.452983][ T6415] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  201.620765][ T6415] 8021q: adding VLAN 0 to HW filter on device bond0
[  201.644178][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  201.653133][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  201.667108][ T6415] 8021q: adding VLAN 0 to HW filter on device team0
[  201.700517][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  201.720492][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  201.740125][ T4130] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.747297][ T4130] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.791064][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  201.814520][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  201.831132][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  201.850539][ T4130] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.857743][ T4130] bridge0: port 2(bridge_slave_1) entered forwarding state
[  201.865911][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  201.875133][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  201.933238][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  201.944903][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  201.968681][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  202.000853][ T6465] loop0: detected capacity change from 0 to 1024
[  202.009315][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  202.039946][ T6415] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  202.062892][ T6465] EXT4-fs: Ignoring removed orlov option
[  202.068584][ T6465] EXT4-fs: Ignoring removed nomblk_io_submit option
[  202.075851][ T6415] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  202.079433][ T6467] loop3: detected capacity change from 0 to 256
[  202.107473][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  202.116837][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  202.143522][ T6465] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  202.182825][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  202.217123][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  202.256659][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  202.304741][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  202.349754][ T3574] EXT4-fs (loop0): unmounting filesystem.
[  202.617242][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  202.627562][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  202.656265][ T6415] 8021q: adding VLAN 0 to HW filter on device batadv0
[  202.703045][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  202.715321][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  202.755714][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  202.770997][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  202.792013][ T6415] device veth0_vlan entered promiscuous mode
[  202.814653][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  202.832629][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  202.842943][ T6415] device veth1_vlan entered promiscuous mode
[  202.886958][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  202.903117][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  202.911394][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  202.932732][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  202.943772][ T6415] device veth0_macvtap entered promiscuous mode
[  202.964084][ T6415] device veth1_macvtap entered promiscuous mode
[  203.004323][ T6415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.028003][ T6415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.049590][ T6415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.070471][ T6415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.092432][ T6415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.122689][ T6415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.144681][ T6478] loop0: detected capacity change from 0 to 32768
[  203.151428][ T6415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.165103][ T6415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.177252][ T6478] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (6478)
[  203.191017][ T6415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.206949][ T6478] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  203.217745][ T6415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.237915][ T6478] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  203.257706][ T6415] batman_adv: batadv0: Interface activated: batadv_slave_0
[  203.266480][ T6478] BTRFS info (device loop0): setting nodatacow, compression disabled
[  203.297222][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  203.307163][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  203.314971][ T6478] BTRFS info (device loop0): setting datacow
[  203.320983][ T6478] BTRFS info (device loop0): doing ref verification
[  203.329164][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  203.339954][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  203.351462][ T6478] BTRFS info (device loop0): force clearing of disk cache
[  203.361374][ T6478] BTRFS info (device loop0): turning off barriers
[  203.376822][ T6415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.389676][ T6415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.421972][ T6478] BTRFS info (device loop0): enabling ssd optimizations
[  203.428963][ T6478] BTRFS info (device loop0): using spread ssd allocation scheme
[  203.441961][ T3578] Bluetooth: hci5: command tx timeout
[  203.449555][ T6478] BTRFS info (device loop0): not using ssd optimizations
[  203.460834][ T6415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.479447][ T6478] BTRFS info (device loop0): not using spread ssd allocation scheme
[  203.506393][ T6415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.530388][ T6478] BTRFS info (device loop0): using free space tree
[  203.545988][ T6415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.559742][ T6415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.578745][ T6415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.590739][ T6415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.631685][ T6415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.671384][ T6415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.710734][ T6415] batman_adv: batadv0: Interface activated: batadv_slave_1
[  203.751230][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  203.781572][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  203.781851][ T3756] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  203.808970][ T6478] BTRFS info (device loop0): rebuilding free space tree
[  203.825942][ T6415] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  203.861795][ T6415] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  203.873165][ T6415] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  203.908026][ T6415] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  204.054178][ T3756] usb 4-1: Using ep0 maxpacket: 16
[  204.066626][ T3574] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  204.162278][ T4192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.170493][ T4192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.212301][ T3756] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  204.252104][ T3756] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  204.287369][ T3756] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  204.308272][ T4192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.328399][ T4192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.333573][ T6489] loop1: detected capacity change from 0 to 40427
[  204.336432][ T3756] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.357897][ T6489] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  204.376355][ T6489] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  204.399876][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  204.409776][ T3756] usb 4-1: config 0 descriptor??
[  204.420639][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  204.444445][ T6489] F2FS-fs (loop1): Found nat_bits in checkpoint
[  204.595993][ T6489] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  204.609600][ T6489] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  204.680685][ T6489] syz-executor.1: attempt to access beyond end of device
[  204.680685][ T6489] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  204.903887][ T6490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  204.923289][ T6490] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  204.991379][ T3756] hid (null): unknown global tag 0xe
[  205.010414][ T3756] hid-generic 0003:0158:0100.0009: unknown main item tag 0x0
[  205.028511][ T3756] hid-generic 0003:0158:0100.0009: collection stack underflow
[  205.048729][ T3756] hid-generic 0003:0158:0100.0009: item 0 2 0 12 parsing failed
[  205.069415][ T3756] hid-generic: probe of 0003:0158:0100.0009 failed with error -22
[  205.078172][ T3617] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  205.219563][ T3763] usb 4-1: USB disconnect, device number 4
[  205.472482][ T3617] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  205.512413][ T3578] Bluetooth: hci5: command tx timeout
[  205.523996][ T6531] loop1: detected capacity change from 0 to 1024
[  205.651934][ T3617] usb 1-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84
[  205.671365][ T3617] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.687947][ T3617] usb 1-1: Product: syz
[  205.710563][   T27] audit: type=1800 audit(1718250873.354:60): pid=6536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1962 res=0 errno=0
[  205.731586][ T3617] usb 1-1: Manufacturer: syz
[  205.739875][ T3617] usb 1-1: SerialNumber: syz
[  205.762683][ T3617] usb 1-1: config 0 descriptor??
[  205.805526][ T3617] usb 1-1: bad CDC descriptors
[  205.812691][ T3617] usb 1-1: bad CDC descriptors
[  205.819326][ T3617] option 1-1:0.0: GSM modem (1-port) converter detected
[  205.974107][ T4277] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  206.193033][ T6541] loop3: detected capacity change from 0 to 2048
[  206.221851][ T4277] usb 3-1: Using ep0 maxpacket: 32
[  206.298160][ T6541] UDF-fs: bad mount option "gid=00000000000000060929" or missing value
[  206.342137][ T4277] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36
[  206.542070][ T4277] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  206.562101][ T4277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.595596][ T4277] usb 3-1: Product: syz
[  206.615135][ T4277] usb 3-1: Manufacturer: syz
[  206.641573][ T4277] usb 3-1: SerialNumber: syz
[  206.657895][ T4277] usb 3-1: config 0 descriptor??
[  206.702273][ T6537] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  206.722538][ T4277] hub 3-1:0.0: bad descriptor, ignoring hub
[  206.730027][ T4277] hub: probe of 3-1:0.0 failed with error -5
[  206.757741][ T4277] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input19
[  206.933559][ T4277] usb 3-1: USB disconnect, device number 9
[  206.954067][ T6546] loop1: detected capacity change from 0 to 32768
[  207.097651][ T6546] syz-executor.1: attempt to access beyond end of device
[  207.097651][ T6546] loop1: rw=2049, sector=2621792, nr_sectors = 8 limit=32768
[  207.216454][  T133] blkno = 5002c, nblocks = 1
[  207.221176][  T133] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[  207.221176][  T133] 
[  207.264331][  T133] ERROR: (device loop1): remounting filesystem as read-only
[  207.280586][ T6547] loop0: detected capacity change from 0 to 40427
[  207.331181][ T6547] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  207.353561][ T6547] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  207.363835][ T6547] F2FS-fs (loop0): invalid crc value
[  207.378596][ T6547] F2FS-fs (loop0): Found nat_bits in checkpoint
[  207.453461][ T6547] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  207.460630][ T6547] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  207.521718][ T4127] usb 1-1: USB disconnect, device number 7
[  207.543940][ T4127] option 1-1:0.0: device disconnected
[  207.600458][ T3578] Bluetooth: hci5: command tx timeout
[  208.079399][ T6563] loop1: detected capacity change from 0 to 256
[  208.107586][ T6563] exfat: Deprecated parameter 'namecase'
[  208.142093][ T6563] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  208.180828][ T6557] loop3: detected capacity change from 0 to 32768
[  208.195327][ T6557] resize option for remount only
[  208.592051][ T3756] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  208.767797][ T6577] netlink: 'syz-executor.0': attribute type 21 has an invalid length.
[  208.786513][ T6577] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'.
[  208.818169][ T6577] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  208.861925][ T3756] usb 2-1: Using ep0 maxpacket: 32
[  208.870795][   T27] audit: type=1800 audit(1718250876.514:61): pid=6580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1959 res=0 errno=0
[  209.030031][   T27] audit: type=1326 audit(1718250876.674:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2827cea9 code=0x7fc00000
[  209.058896][ T3756] usb 2-1: config 97 has too many interfaces: 97, using maximum allowed: 32
[  209.079777][ T3756] usb 2-1: config 97 has an invalid descriptor of length 97, skipping remainder of the config
[  209.100765][ T3756] usb 2-1: config 97 has 0 interfaces, different from the descriptor's value: 97
[  209.110119][   T27] audit: type=1326 audit(1718250876.714:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f7c2827cea9 code=0x7fc00000
[  209.251848][ T3615] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  209.301998][ T3756] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  209.321657][ T3756] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  209.340403][ T3756] usb 2-1: Product: syz
[  209.344814][ T3756] usb 2-1: Manufacturer: syz
[  209.349427][ T3756] usb 2-1: SerialNumber: syz
[  209.439412][ T6587] loop3: detected capacity change from 0 to 32768
[  209.450456][ T6587] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (6587)
[  209.495932][ T6587] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  209.506471][ T3615] usb 3-1: Using ep0 maxpacket: 16
[  209.522510][ T6587] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  209.539041][ T6587] BTRFS info (device loop3): using free space tree
[  209.631934][ T3615] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11
[  209.648356][ T3615] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  209.659121][ T3615] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  209.662965][ T3756] usb 2-1: USB disconnect, device number 8
[  209.680862][ T3615] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  209.692773][ T3615] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  209.703730][ T3615] usb 3-1: config 1 interface 0 has no altsetting 0
[  209.710549][ T3615] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  209.729247][ T3615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.737898][ T6587] BTRFS info (device loop3): enabling ssd optimizations
[  209.751543][   T27] audit: type=1326 audit(1718250877.394:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2827cea9 code=0x7fc00000
[  209.789316][ T3615] ums-sddr09 3-1:1.0: USB Mass Storage device detected
[  209.810324][   T27] audit: type=1326 audit(1718250877.394:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f7c2827cea9 code=0x7fc00000
[  209.833644][   T27] audit: type=1326 audit(1718250877.394:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2827cea9 code=0x7fc00000
[  209.858171][   T27] audit: type=1326 audit(1718250877.394:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2827cea9 code=0x7fc00000
[  209.881284][ T6075] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  209.883001][   T27] audit: type=1326 audit(1718250877.394:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2827cea9 code=0x7fc00000
[  209.919506][   T27] audit: type=1326 audit(1718250877.394:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2827cea9 code=0x7fc00000
[  209.956055][ T6609] loop0: detected capacity change from 0 to 1024
[  210.015132][ T3615] scsi host1: usb-storage 3-1:1.0
[  210.157809][ T6609] EXT4-fs: Ignoring removed orlov option
[  210.175204][ T6609] EXT4-fs (loop0): Test dummy encryption mode enabled
[  210.219437][ T6609] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  210.318785][ T3574] EXT4-fs (loop0): unmounting filesystem.
[  210.619327][ T6635] loop3: detected capacity change from 0 to 256
[  210.640891][ T6635] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  210.713641][   T27] kauditd_printk_skb: 55 callbacks suppressed
[  210.713657][   T27] audit: type=1804 audit(1718250878.354:125): pid=6635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir161758536/syzkaller.v2nYDP/63/file0/bus" dev="loop3" ino=1048659 res=1 errno=0
[  210.939244][   T27] audit: type=1326 audit(1718250878.584:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2827cea9 code=0x7fc00000
[  210.971134][   T27] audit: type=1326 audit(1718250878.614:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f7c2827cea9 code=0x7fc00000
[  211.033215][ T4192] scsi 1:0:0:0: Direct-Access     Sandisk  ImageMate SDDR09 0177 PQ: 0 ANSI: 0
[  211.068357][ T4192] sd 1:0:0:0: Attached scsi generic sg1 type 0
[  211.192024][ T6611] sddr09: could not read card info
[  211.369159][ T6611] usb 3-1: reset high-speed USB device number 10 using dummy_hcd
[  211.682809][   T27] audit: type=1326 audit(1718250879.324:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2827cea9 code=0x7fc00000
[  212.043366][   T27] audit: type=1326 audit(1718250879.354:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f7c2827cea9 code=0x7fc00000
[  212.069819][   T27] audit: type=1326 audit(1718250879.354:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2827cea9 code=0x7fc00000
[  212.239914][ T6657] loop3: detected capacity change from 0 to 256
[  212.242233][   T27] audit: type=1326 audit(1718250879.364:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2827cea9 code=0x7fc00000
[  212.258233][ T6657] exfat: Deprecated parameter 'namecase'
[  212.327086][   T27] audit: type=1326 audit(1718250879.364:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2827cea9 code=0x7fc00000
[  212.363182][ T6657] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  212.379647][ T4131] usb 3-1: USB disconnect, device number 10
[  212.410571][   T27] audit: type=1326 audit(1718250879.364:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2827cea9 code=0x7fc00000
[  212.442119][ T4498] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B)
[  212.457683][ T4498] sd 1:0:0:0: [sdb] 0-byte physical blocks
[  212.479644][ T4498] sd 1:0:0:0: [sdb] Write Protect is off
[  212.489813][ T4498] sd 1:0:0:0: [sdb] Asking for cache data failed
[  212.516081][ T4498] sd 1:0:0:0: [sdb] Assuming drive cache: write through
[  212.531966][   T27] audit: type=1326 audit(1718250879.364:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2827cea9 code=0x7fc00000
[  212.578976][ T6666] loop1: detected capacity change from 0 to 256
[  212.588520][ T4498] sd 1:0:0:0: [sdb] Attached SCSI removable disk
[  212.636530][ T6666] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  212.837942][ T6672] Â: renamed from pim6reg1
[  212.843020][ T3617] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  212.946814][ T6655] loop0: detected capacity change from 0 to 40427
[  212.974250][ T6655] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  212.999544][ T6674] loop1: detected capacity change from 0 to 1024
[  213.011959][ T6655] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  213.026521][ T6674] EXT4-fs: Ignoring removed orlov option
[  213.034575][ T6674] EXT4-fs (loop1): Test dummy encryption mode enabled
[  213.051320][ T6655] F2FS-fs (loop0): Found nat_bits in checkpoint
[  213.089985][ T6674] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  213.101931][ T3617] usb 4-1: Using ep0 maxpacket: 32
[  213.222400][ T3617] usb 4-1: config 97 has too many interfaces: 97, using maximum allowed: 32
[  213.232490][ T6655] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  213.239559][ T6655] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  213.252284][ T4700] EXT4-fs (loop1): unmounting filesystem.
[  213.258163][ T3617] usb 4-1: config 97 has an invalid descriptor of length 97, skipping remainder of the config
[  213.290182][ T3617] usb 4-1: config 97 has 0 interfaces, different from the descriptor's value: 97
[  213.336693][ T6655] syz-executor.0: attempt to access beyond end of device
[  213.336693][ T6655] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  213.477900][ T3617] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  213.961867][ T3617] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  213.970435][ T3617] usb 4-1: Product: syz
[  213.975630][ T3617] usb 4-1: Manufacturer: syz
[  213.980400][ T3617] usb 4-1: SerialNumber: syz
[  214.325995][ T3617] usb 4-1: USB disconnect, device number 5
[  214.641535][ T6702] Â: renamed from pim6reg1
[  214.861851][ T4131] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  215.352151][ T4131] usb 2-1: Using ep0 maxpacket: 32
[  215.417286][ T6707] loop3: detected capacity change from 0 to 1024
[  215.425586][ T6707] EXT4-fs: Ignoring removed orlov option
[  215.438035][ T6707] EXT4-fs (loop3): Test dummy encryption mode enabled
[  215.472080][ T4131] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36
[  215.521951][ T6707] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  215.600734][ T6075] EXT4-fs (loop3): unmounting filesystem.
[  215.651917][ T4131] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  215.665560][ T4131] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.688681][ T4131] usb 2-1: Product: syz
[  215.694530][ T4131] usb 2-1: Manufacturer: syz
[  215.699516][ T4131] usb 2-1: SerialNumber: syz
[  215.706273][ T4131] usb 2-1: config 0 descriptor??
[  215.722084][ T6693] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  215.742683][ T4131] hub 2-1:0.0: bad descriptor, ignoring hub
[  215.749150][ T4131] hub: probe of 2-1:0.0 failed with error -5
[  215.767956][ T4131] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input20
[  215.960859][ T4130] usb 2-1: USB disconnect, device number 9
[  215.966806][    C1] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  216.022295][ T6731] Â: renamed from pim6reg1
[  216.214627][ T4131] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  216.239155][ T6735] loop0: detected capacity change from 0 to 256
[  216.268123][ T6735] exfat: Deprecated parameter 'namecase'
[  216.293268][ T6735] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  216.526393][   T27] kauditd_printk_skb: 25 callbacks suppressed
[  216.526408][   T27] audit: type=1326 audit(1718250884.174:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6737 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000ca7cea9 code=0x7fc00000
[  216.570532][   T27] audit: type=1326 audit(1718250884.204:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6737 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f000ca7cea9 code=0x7fc00000
[  216.612066][ T4131] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  216.702041][ T4133] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  216.792112][ T4131] usb 4-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84
[  216.808335][ T4131] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.818968][ T4131] usb 4-1: Product: syz
[  216.829227][ T4131] usb 4-1: Manufacturer: syz
[  216.836789][ T4131] usb 4-1: SerialNumber: syz
[  216.852538][ T4131] usb 4-1: config 0 descriptor??
[  216.912480][ T4131] usb 4-1: bad CDC descriptors
[  216.937188][ T4131] usb 4-1: bad CDC descriptors
[  216.958483][ T4131] option 4-1:0.0: GSM modem (1-port) converter detected
[  216.966777][ T4133] usb 1-1: Using ep0 maxpacket: 32
[  217.092191][ T4133] usb 1-1: config 97 has too many interfaces: 97, using maximum allowed: 32
[  217.115372][ T4133] usb 1-1: config 97 has an invalid descriptor of length 97, skipping remainder of the config
[  217.151865][ T4133] usb 1-1: config 97 has 0 interfaces, different from the descriptor's value: 97
[  217.249948][   T27] audit: type=1326 audit(1718250884.894:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6737 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000ca7cea9 code=0x7fc00000
[  217.301939][   T27] audit: type=1326 audit(1718250884.894:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6737 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f000ca7cea9 code=0x7fc00000
[  217.342178][ T4133] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  217.352101][   T27] audit: type=1326 audit(1718250884.894:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6737 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000ca7cea9 code=0x7fc00000
[  217.376511][ T4133] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  217.405275][ T4133] usb 1-1: Product: syz
[  217.409108][   T27] audit: type=1326 audit(1718250884.894:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6737 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000ca7cea9 code=0x7fc00000
[  217.414853][ T4133] usb 1-1: Manufacturer: syz
[  217.452145][   T27] audit: type=1326 audit(1718250884.894:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6737 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000ca7cea9 code=0x7fc00000
[  217.504116][   T27] audit: type=1326 audit(1718250884.894:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6737 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000ca7cea9 code=0x7fc00000
[  217.571864][   T27] audit: type=1326 audit(1718250884.894:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6737 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000ca7cea9 code=0x7fc00000
[  217.638846][ T4133] usb 1-1: SerialNumber: syz
[  217.662351][   T27] audit: type=1326 audit(1718250884.894:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6737 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000ca7cea9 code=0x7fc00000
[  218.127357][ T6759] loop1: detected capacity change from 0 to 256
[  218.145954][ T4133] usb 1-1: USB disconnect, device number 8
[  218.410316][ T6765] Â: renamed from pim6reg1
[  218.518579][ T6754] loop3: detected capacity change from 0 to 40427
[  218.526847][ T6754] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  218.536285][ T6754] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  218.567936][ T6754] F2FS-fs (loop3): invalid crc value
[  218.598736][ T6754] F2FS-fs (loop3): Found nat_bits in checkpoint
[  218.696085][ T6754] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  218.709494][ T6754] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  218.850831][ T4276] usb 4-1: USB disconnect, device number 6
[  218.858115][ T4276] option 4-1:0.0: device disconnected
[  219.229364][ T6791] loop0: detected capacity change from 0 to 1024
[  220.323493][ T6798] loop1: detected capacity change from 0 to 1024
[  220.462901][ T6798] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  220.682768][ T4700] EXT4-fs (loop1): unmounting filesystem.
[  220.773672][ T3578] Bluetooth: hci3: Malformed HCI Event: 0x22
[  221.051613][ T6819] loop1: detected capacity change from 0 to 8192
[  221.079743][ T6819] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  221.103052][ T6819] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  221.126136][ T6819] REISERFS (device loop1): using ordered data mode
[  221.161897][ T6819] reiserfs: using flush barriers
[  221.198151][ T6819] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  221.292998][ T6819] REISERFS (device loop1): checking transaction log (loop1)
[  221.629741][ T6819] REISERFS (device loop1): Using tea hash to sort names
[  221.653573][ T6819] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  221.710655][ T6819] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  221.943165][ T6819] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  222.360166][ T6842] loop1: detected capacity change from 0 to 1024
[  222.580814][ T6814] loop3: detected capacity change from 0 to 65536
[  222.753835][ T6814] XFS (loop3): Mounting V5 Filesystem
[  223.596701][ T6814] XFS (loop3): Ending clean mount
[  223.807276][ T6860] loop0: detected capacity change from 0 to 1024
[  223.867140][ T6075] XFS (loop3): Unmounting Filesystem
[  223.876392][ T6860] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  223.899909][   T27] kauditd_printk_skb: 129 callbacks suppressed
[  223.899924][   T27] audit: type=1800 audit(1718250891.544:299): pid=6860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=18 res=0 errno=0
[  224.095883][   T27] audit: type=1326 audit(1718250891.744:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6859 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2827cea9 code=0x7ffc0000
[  224.182332][   T27] audit: type=1326 audit(1718250891.774:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6859 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2827cea9 code=0x7ffc0000
[  224.266465][ T3574] EXT4-fs (loop0): unmounting filesystem.
[  224.282880][   T27] audit: type=1326 audit(1718250891.774:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6859 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f7c2827cea9 code=0x7ffc0000
[  224.411840][   T27] audit: type=1326 audit(1718250891.774:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6859 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2827cea9 code=0x7ffc0000
[  224.474907][ T3578] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  224.483652][ T3578] Bluetooth: hci3: Injecting HCI hardware error event
[  224.497773][ T3572] Bluetooth: hci3: hardware error 0x00
[  224.548623][   T27] audit: type=1326 audit(1718250891.774:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6859 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2827cea9 code=0x7ffc0000
[  224.609817][   T27] audit: type=1326 audit(1718250891.774:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6859 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7c2827cea9 code=0x7ffc0000
[  224.633487][   T27] audit: type=1326 audit(1718250891.774:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6859 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2827cea9 code=0x7ffc0000
[  224.656349][   T27] audit: type=1326 audit(1718250891.774:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6859 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2827cea9 code=0x7ffc0000
[  224.685041][   T27] audit: type=1326 audit(1718250891.774:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6859 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7c2827cea9 code=0x7ffc0000
[  225.986855][ T6892] loop0: detected capacity change from 0 to 512
[  226.043314][ T6892] EXT4-fs (loop0): orphan cleanup on readonly fs
[  226.082969][ T6892] EXT4-fs error (device loop0): ext4_acquire_dquot:6777: comm syz-executor.0: Failed to acquire dquot type 0
[  226.095359][ T6892] EXT4-fs error (device loop0): ext4_acquire_dquot:6777: comm syz-executor.0: Failed to acquire dquot type 0
[  226.148643][ T6892] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor.0: bg 0: block 64: padding at end of block bitmap is not set
[  226.191288][ T6892] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6173: Corrupt filesystem
[  226.207058][ T6901] loop1: detected capacity change from 0 to 256
[  226.216567][ T6901] exfat: Deprecated parameter 'utf8'
[  226.231260][ T6882] loop3: detected capacity change from 0 to 32768
[  226.238995][ T6892] EXT4-fs error (device loop0): ext4_acquire_dquot:6777: comm syz-executor.0: Failed to acquire dquot type 0
[  226.251155][ T6901] exfat: Deprecated parameter 'namecase'
[  226.257337][ T6901] exfat: Deprecated parameter 'utf8'
[  226.264727][ T6901] exfat: Deprecated parameter 'namecase'
[  226.273361][ T6892] EXT4-fs (loop0): 1 orphan inode deleted
[  226.292078][ T6892] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  226.331431][ T6901] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d)
[  226.357993][ T6908] befs: (nbd2): No write support. Marking filesystem read-only
[  226.371665][  T120] block nbd2: Attempted send on invalid socket
[  226.378680][  T120] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  226.388925][ T6882] XFS (loop3): Mounting V5 Filesystem
[  226.426363][ T3574] EXT4-fs (loop0): unmounting filesystem.
[  226.514892][ T6882] XFS (loop3): Ending clean mount
[  226.536128][ T6882] XFS (loop3): Quotacheck needed: Please wait.
[  226.552237][ T3572] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  226.611931][ T6882] XFS (loop3): Quotacheck: Done.
[  226.725858][ T6075] XFS (loop3): Unmounting Filesystem
[  226.921834][ T3617] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  226.952424][ T3582] Bluetooth: hci1: command 0x0406 tx timeout
[  227.311888][ T3617] usb 3-1: config 1 has an invalid descriptor of length 99, skipping remainder of the config
[  227.331770][ T3617] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  227.442017][ T3617] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  227.451089][ T3617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  227.471817][ T3617] usb 3-1: SerialNumber: syz
[  227.491855][ T4133] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  227.766594][ T3617] usb 3-1: 0:2 : does not exist
[  227.873892][ T4133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  227.910341][ T4133] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  227.948599][ T4133] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  227.990402][ T4133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.031477][ T4133] usb 4-1: config 0 descriptor??
[  228.199940][ T3756] usb 3-1: USB disconnect, device number 11
[  228.238665][ T3582] Bluetooth: hci1: Malformed HCI Event: 0x22
[  228.514616][ T4133] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  228.535842][ T4133] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving
[  228.571314][ T4133] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  228.612738][ T6960] loop0: detected capacity change from 0 to 256
[  228.631167][ T6960] FAT-fs (loop0): Unrecognized mount option "sTkrtname=winnt" or missing value
[  228.970675][ T6968] netlink: 'syz-executor.2': attribute type 11 has an invalid length.
[  229.020690][ T6968] netlink: 'syz-executor.2': attribute type 11 has an invalid length.
[  229.042795][ T6968] debugfs: Directory 'netdev:' with parent 'phy24' already present!
[  229.085778][ T6968] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[  229.370294][ T4130] usb 4-1: USB disconnect, device number 7
[  229.478147][ T6983] loop3: detected capacity change from 0 to 256
[  229.498478][ T6983] exfat: Deprecated parameter 'utf8'
[  229.540169][ T6983] exfat: Deprecated parameter 'namecase'
[  229.572013][ T6983] exfat: Deprecated parameter 'utf8'
[  229.577380][ T6983] exfat: Deprecated parameter 'namecase'
[  229.627995][ T6983] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d)
[  229.722507][ T6989] loop1: detected capacity change from 0 to 1024
[  229.763387][ T6989] EXT4-fs: Ignoring removed nobh option
[  229.788047][ T6989] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  229.836034][ T6989] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  230.108411][ T6999] xt_CT: You must specify a L4 protocol and not use inversions on it
[  230.129093][ T7000] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'.
[  230.323231][ T6989] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor.1: bg 0: block 2048: padding at end of block bitmap is not set
[  230.381486][ T6986] loop0: detected capacity change from 0 to 32768
[  230.402221][ T6989] EXT4-fs error (device loop1): ext4_find_dest_de:2112: inode #12: block 7: comm syz-executor.1: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=12, rec_len=0, size=68 fake=0
[  230.474084][ T6986] XFS (loop0): Mounting V5 Filesystem
[  230.568063][ T6986] XFS (loop0): Ending clean mount
[  230.605041][ T6986] XFS (loop0): Quotacheck needed: Please wait.
[  230.660421][ T6986] XFS (loop0): Quotacheck: Done.
[  230.778104][ T7014] netlink: 'syz-executor.2': attribute type 11 has an invalid length.
[  230.824159][ T7014] netlink: 'syz-executor.2': attribute type 11 has an invalid length.
[  230.849953][ T7014] debugfs: Directory 'netdev:' with parent 'phy24' already present!
[  230.877373][ T7014] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[  230.894266][ T3574] XFS (loop0): Unmounting Filesystem
[  232.051950][ T3582] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  232.064426][ T3582] Bluetooth: hci1: Injecting HCI hardware error event
[  232.075044][ T3582] Bluetooth: hci1: hardware error 0x00
[  232.150887][ T4700] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor.1: path /root/syzkaller-testdir1747500339/syzkaller.Dc8cJB/183/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  232.352297][ T4700] EXT4-fs error (device loop1): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor.1: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  232.442269][ T4700] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor.1: directory missing '.'
[  232.475452][ T4700] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor.1: path /root/syzkaller-testdir1747500339/syzkaller.Dc8cJB/183/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  232.498825][ T7024] loop3: detected capacity change from 0 to 32768
[  232.532655][ T4700] EXT4-fs error (device loop1): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor.1: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  232.592316][ T4700] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor.1: directory missing '.'
[  232.615472][ T7024] XFS (loop3): Mounting V5 Filesystem
[  232.637562][ T4700] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor.1: path /root/syzkaller-testdir1747500339/syzkaller.Dc8cJB/183/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  232.697211][ T4700] EXT4-fs error (device loop1): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor.1: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  232.752114][ T7024] XFS (loop3): Starting recovery (logdev: internal)
[  232.775875][ T4700] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor.1: directory missing '.'
[  232.777687][ T7024] XFS (loop3): Ending recovery (logdev: internal)
[  232.810529][ T4700] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor.1: path /root/syzkaller-testdir1747500339/syzkaller.Dc8cJB/183/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  232.855462][ T6075] XFS (loop3): Unmounting Filesystem
[  232.874213][ T4700] EXT4-fs error (device loop1): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor.1: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  232.932987][ T4700] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor.1: directory missing '.'
[  232.977625][ T4700] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor.1: directory missing '.'
[  233.038917][ T4700] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor.1: directory missing '.'
[  233.077003][ T4700] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor.1: directory missing '.'
[  233.081575][ T7046] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  233.131903][ T4700] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor.1: directory missing '.'
[  233.172939][ T4700] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor.1: directory missing '.'
[  233.241371][ T4700] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor.1: directory missing '.'
[  234.162384][ T3582] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  235.052069][ T4700] EXT4-fs (loop1): unmounting filesystem.
[  235.134239][ T3669] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.290283][ T3669] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.448753][ T3669] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.561471][ T3669] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.139442][ T7090] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  236.208925][ T7090] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  236.259750][ T3572] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  236.274007][ T3572] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  236.285069][ T3572] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  236.303449][ T3584] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  236.546395][ T3584] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  236.556490][ T3584] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  237.091407][ T7097] loop0: detected capacity change from 0 to 64
[  237.193314][ T7097] syz-executor.0: attempt to access beyond end of device
[  237.193314][ T7097] loop0: rw=2049, sector=72, nr_sectors = 88 limit=64
[  237.237292][ T7100] syz-executor.0: attempt to access beyond end of device
[  237.237292][ T7100] loop0: rw=2049, sector=163, nr_sectors = 97 limit=64
[  237.385230][ T7105] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  237.635647][ T7092] chnl_net:caif_netlink_parms(): no params data found
[  237.758603][ T3669] device hsr_slave_0 left promiscuous mode
[  237.768979][ T3669] device hsr_slave_1 left promiscuous mode
[  237.802617][ T3669] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  237.810073][ T3669] batman_adv: batadv0: Removing interface: batadv_slave_0
[  237.847806][ T3669] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  237.881911][ T3669] batman_adv: batadv0: Removing interface: batadv_slave_1
[  237.903810][ T3669] device bridge_slave_1 left promiscuous mode
[  237.910118][ T3669] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.951145][ T3669] device bridge_slave_0 left promiscuous mode
[  237.967790][ T3669] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.985402][ T3669] device veth1_macvtap left promiscuous mode
[  238.011987][ T3669] device veth0_macvtap left promiscuous mode
[  238.018141][ T3669] device veth1_vlan left promiscuous mode
[  238.041216][ T3669] device veth0_vlan left promiscuous mode
[  238.278274][ T3669] bond1 (unregistering): Released all slaves
[  238.587612][ T7115] loop3: detected capacity change from 0 to 32768
[  238.603830][ T3669] team0 (unregistering): Port device team_slave_1 removed
[  238.632279][ T3584] Bluetooth: hci1: command tx timeout
[  238.650650][ T3669] team0 (unregistering): Port device team_slave_0 removed
[  238.676833][ T3669] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  238.686327][ T7115] XFS (loop3): Mounting V5 Filesystem
[  238.712460][ T3669] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  238.839512][ T7115] XFS (loop3): Ending clean mount
[  238.907064][ T4276] XFS (loop3): Metadata CRC error detected at xfs_agfl_read_verify+0x1ca/0x290, xfs_agfl block 0x3 
[  238.928965][ T4276] XFS (loop3): Unmount and run xfs_repair
[  238.956339][ T4276] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  238.956429][ T3669] bond0 (unregistering): Released all slaves
[  238.969863][ T4276] 00000000: 58 41 46 4c 00 00 00 00 00 00 00 00 00 00 80 86  XAFL............
[  239.011861][ T4276] 00000010: af d4 a8 f7 47 a7 4b ab 00 00 00 00 00 00 00 00  ....G.K.........
[  239.020756][ T4276] 00000020: 5e fe 9e 73 ff ff ff ff 00 00 02 0a 00 00 02 0b  ^..s............
[  239.101785][ T4276] 00000030: 00 00 02 0c 00 00 02 0d 00 00 02 0e 00 00 02 0f  ................
[  239.110683][ T4276] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  239.159577][ T4276] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  239.180854][ T4276] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  239.231932][ T4276] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  239.242300][ T7115] XFS (loop3): metadata I/O error in "xfs_alloc_read_agfl+0x250/0x430" at daddr 0x3 len 1 error 74
[  239.279418][ T7115] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x6a5/0xb80 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  239.375875][ T7115] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  239.432922][ T7092] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.440127][ T7092] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.472114][ T7092] device bridge_slave_0 entered promiscuous mode
[  239.494130][ T7092] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.501327][ T7092] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.516106][ T6075] XFS (loop3): Unmounting Filesystem
[  239.530567][ T7092] device bridge_slave_1 entered promiscuous mode
[  239.762681][ T7092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  239.790950][ T7092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  239.897833][ T7092] team0: Port device team_slave_0 added
[  239.924661][ T7092] team0: Port device team_slave_1 added
[  240.005876][ T7092] batman_adv: batadv0: Adding interface: batadv_slave_0
[  240.042398][ T7092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  240.128834][ T7092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  240.172087][ T7092] batman_adv: batadv0: Adding interface: batadv_slave_1
[  240.179068][ T7092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  240.279197][ T7092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  240.412683][ T7092] device hsr_slave_0 entered promiscuous mode
[  240.442607][ T7092] device hsr_slave_1 entered promiscuous mode
[  240.454383][ T7092] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  240.471082][ T7092] Cannot create hsr debugfs directory
[  240.711827][ T3584] Bluetooth: hci1: command tx timeout
[  240.830673][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  241.280915][ T7092] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  241.333154][ T7092] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  241.365530][ T7092] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  241.396591][ T7092] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  241.612181][ T7092] 8021q: adding VLAN 0 to HW filter on device bond0
[  241.663039][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  241.670999][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  241.703021][ T7092] 8021q: adding VLAN 0 to HW filter on device team0
[  241.735120][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  241.744774][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  241.768989][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.776190][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state
[  241.807560][ T7172] loop0: detected capacity change from 0 to 512
[  241.835725][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  241.845699][ T7172] EXT4-fs: Ignoring removed oldalloc option
[  241.855087][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  241.872659][ T7172] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  241.883520][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  241.902452][ T3756] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.909610][ T3756] bridge0: port 2(bridge_slave_1) entered forwarding state
[  241.939739][ T7172] EXT4-fs (loop0): 1 truncate cleaned up
[  241.945671][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  241.952073][ T7172] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  241.954563][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  242.023130][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  242.037720][ T7168] loop3: detected capacity change from 0 to 32768
[  242.052322][   T27] kauditd_printk_skb: 85 callbacks suppressed
[  242.052334][   T27] audit: type=1800 audit(1718250909.704:388): pid=7172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="loop0" ino=15 res=0 errno=0
[  242.052678][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  242.090954][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  242.100688][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  242.109743][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  242.118577][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  242.127630][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  242.139567][ T7092] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  242.191964][ T7179] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5868: Corrupt filesystem
[  242.207063][ T7168] XFS (loop3): Mounting V5 Filesystem
[  242.262832][ T7092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  242.283064][ T7179] EXT4-fs error (device loop0): ext4_dirty_inode:6072: inode #15: comm syz-executor.0: mark_inode_dirty error
[  242.303743][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  242.322438][ T7179] EXT4-fs error (device loop0): ext4_get_max_inline_size:116: inode #15: comm syz-executor.0: can't get inode location 15
[  242.339253][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  242.443132][ T7168] XFS (loop3): Ending clean mount
[  242.483758][ T3574] EXT4-fs error (device loop0): ext4_map_blocks:607: inode #2: block 13: comm syz-executor.0: lblock 0 mapped to illegal pblock 13 (length 1)
[  242.539528][ T3574] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5868: Corrupt filesystem
[  242.602325][ T3756] XFS (loop3): Metadata CRC error detected at xfs_agfl_read_verify+0x1ca/0x290, xfs_agfl block 0x3 
[  242.621016][ T3574] EXT4-fs error (device loop0): ext4_dirty_inode:6072: inode #2: comm syz-executor.0: mark_inode_dirty error
[  242.621756][ T3756] XFS (loop3): Unmount and run xfs_repair
[  242.671780][ T3756] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  242.707996][ T3574] EXT4-fs (loop0): unmounting filesystem.
[  242.712518][ T3756] 00000000: 58 41 46 4c 00 00 00 00 00 00 00 00 00 00 80 86  XAFL............
[  242.752174][ T3756] 00000010: af d4 a8 f7 47 a7 4b ab 00 00 00 00 00 00 00 00  ....G.K.........
[  242.761391][ T3756] 00000020: 5e fe 9e 73 ff ff ff ff 00 00 02 0a 00 00 02 0b  ^..s............
[  242.802287][ T3584] Bluetooth: hci1: command tx timeout
[  242.821926][ T3756] 00000030: 00 00 02 0c 00 00 02 0d 00 00 02 0e 00 00 02 0f  ................
[  242.830829][ T3756] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  242.862105][ T3756] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  242.871001][ T3756] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  242.912500][ T3756] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  242.921434][ T7168] XFS (loop3): metadata I/O error in "xfs_alloc_read_agfl+0x250/0x430" at daddr 0x3 len 1 error 74
[  242.960844][ T7168] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x6a5/0xb80 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  243.002708][ T7168] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  243.079375][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  243.122270][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  243.147292][ T7092] 8021q: adding VLAN 0 to HW filter on device batadv0
[  243.156918][ T6075] XFS (loop3): Unmounting Filesystem
[  243.222503][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  243.231342][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  243.337272][ T7092] device veth0_vlan entered promiscuous mode
[  243.398316][ T7092] device veth1_vlan entered promiscuous mode
[  243.442180][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  243.459244][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  243.493074][ T3762] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  243.527735][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  243.551532][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  243.717605][ T3669] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.781637][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  243.795903][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  243.837119][ T7092] device veth0_macvtap entered promiscuous mode
[  243.911302][ T3669] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.953883][ T7092] device veth1_macvtap entered promiscuous mode
[  244.005403][ T3669] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.044465][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.063940][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.106744][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.118590][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.135817][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.153677][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.168528][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.179422][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.190140][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.201593][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.217261][ T7092] batman_adv: batadv0: Interface activated: batadv_slave_0
[  244.226241][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  244.235838][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  244.240126][ T7195] fscrypt (sda1, inode 1950): Unsupported encryption flags (0x08)
[  244.255471][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  244.264595][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  244.273685][ T3582] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  244.286794][ T3582] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  244.295547][ T3582] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  244.305518][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.318492][ T3582] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  244.332557][ T3582] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  244.339882][ T3582] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  244.361894][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.406482][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.456178][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.495185][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.556387][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.589005][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.620182][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.641187][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.662976][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.686351][ T7092] batman_adv: batadv0: Interface activated: batadv_slave_1
[  244.786599][ T3669] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.826404][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  244.848290][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  244.871855][ T3582] Bluetooth: hci1: command tx timeout
[  244.881538][ T7092] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  244.907515][ T7092] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  244.935982][ T7092] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  244.956395][ T7092] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  245.532193][ T4014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.540528][ T4014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.593666][ T7196] chnl_net:caif_netlink_parms(): no params data found
[  245.632838][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  245.674720][ T4014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.703996][ T4014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.757243][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  245.973819][ T7196] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.980970][ T7196] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.013012][ T7196] device bridge_slave_0 entered promiscuous mode
[  246.043875][ T7196] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.062021][ T7196] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.070202][ T7196] device bridge_slave_1 entered promiscuous mode
[  246.170457][ T7196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  246.197936][ T7206] loop3: detected capacity change from 0 to 32768
[  246.218976][ T7196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  246.299144][ T7206] XFS (loop3): Mounting V5 Filesystem
[  246.369550][ T7196] team0: Port device team_slave_0 added
[  246.389412][ T7196] team0: Port device team_slave_1 added
[  246.402430][ T3582] Bluetooth: hci3: command tx timeout
[  246.454772][ T7206] XFS (loop3): Ending clean mount
[  246.462199][ T7196] batman_adv: batadv0: Adding interface: batadv_slave_0
[  246.479422][ T7196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  246.541824][ T7196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  246.631356][ T7196] batman_adv: batadv0: Adding interface: batadv_slave_1
[  246.651772][ T7196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  246.681996][ T7211] loop1: detected capacity change from 0 to 32768
[  246.691499][ T6075] XFS (loop3): Unmounting Filesystem
[  246.711213][ T7196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  246.768042][ T7211] XFS (loop1): Mounting V5 Filesystem
[  246.888162][ T3669] device hsr_slave_0 left promiscuous mode
[  246.930459][ T3669] device hsr_slave_1 left promiscuous mode
[  246.977922][ T3669] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  246.999765][ T3669] batman_adv: batadv0: Removing interface: batadv_slave_0
[  247.054756][ T3669] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  247.089171][ T3669] batman_adv: batadv0: Removing interface: batadv_slave_1
[  247.107292][ T7211] XFS (loop1): Ending clean mount
[  247.120007][ T3669] device bridge_slave_1 left promiscuous mode
[  247.128556][ T7211] XFS (loop1): Quotacheck needed: Please wait.
[  247.149411][ T3669] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.200829][ T3669] device bridge_slave_0 left promiscuous mode
[  247.217709][ T7211] XFS (loop1): Quotacheck: Done.
[  247.235846][ T3669] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.294902][ T3669] device veth1_macvtap left promiscuous mode
[  247.300975][ T3669] device veth0_macvtap left promiscuous mode
[  247.323527][ T3669] device veth1_vlan left promiscuous mode
[  247.351882][ T3669] device veth0_vlan left promiscuous mode
[  247.384822][ T7092] XFS (loop1): Unmounting Filesystem
[  248.051133][ T3669] team0 (unregistering): Port device team_slave_1 removed
[  248.077604][ T3669] team0 (unregistering): Port device team_slave_0 removed
[  248.114537][ T3669] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  248.142367][ T3669] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  248.316461][ T3669] bond0 (unregistering): Released all slaves
[  248.414385][ T7239] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  248.451933][ T7241] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  248.480922][ T3582] Bluetooth: hci3: command tx timeout
[  248.578375][ T7196] device hsr_slave_0 entered promiscuous mode
[  248.662253][ T7196] device hsr_slave_1 entered promiscuous mode
[  248.672529][ T7196] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  248.680119][ T7196] Cannot create hsr debugfs directory
[  249.035529][ T7240] loop1: detected capacity change from 0 to 32768
[  249.148179][ T7240] XFS (loop1): Mounting V5 Filesystem
[  249.163930][ T7254] loop3: detected capacity change from 0 to 1024
[  249.252678][ T7254] EXT4-fs: Ignoring removed nobh option
[  249.263020][ T7254] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  249.353230][ T7240] XFS (loop1): Ending clean mount
[  249.379220][ T7240] XFS (loop1): Quotacheck needed: Please wait.
[  249.449862][ T7254] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  249.524163][ T7240] XFS (loop1): Quotacheck: Done.
[  249.665495][ T7196] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  249.682413][ T7196] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  249.704530][ T7196] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  249.705888][ T7092] XFS (loop1): Unmounting Filesystem
[  249.739957][ T7196] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  250.031551][ T7196] 8021q: adding VLAN 0 to HW filter on device bond0
[  250.092964][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  250.100605][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  250.134758][ T7196] 8021q: adding VLAN 0 to HW filter on device team0
[  250.160777][ T7262] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor.3: bg 0: block 2048: padding at end of block bitmap is not set
[  250.175742][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  250.176278][ T4130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  250.219675][ T4130] bridge0: port 1(bridge_slave_0) entered blocking state
[  250.226864][ T4130] bridge0: port 1(bridge_slave_0) entered forwarding state
[  250.310990][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  250.332068][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  250.364061][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  250.392898][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state
[  250.396418][ T7254] EXT4-fs error (device loop3): ext4_find_dest_de:2112: inode #12: block 7: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=12, rec_len=0, size=68 fake=0
[  250.399995][ T4276] bridge0: port 2(bridge_slave_1) entered forwarding state
[  250.523695][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  250.552044][ T3584] Bluetooth: hci3: command tx timeout
[  250.610931][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  250.636027][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  250.678635][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  250.718836][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  250.753681][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  250.796945][ T7196] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  251.723557][ T7196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  251.850605][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  251.860773][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  251.903845][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  251.936495][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  251.974506][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  252.013918][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  252.551878][ T3584] Bluetooth: hci4: command 0x0406 tx timeout
[  252.631979][ T3584] Bluetooth: hci3: command tx timeout
[  252.774633][ T7196] 8021q: adding VLAN 0 to HW filter on device batadv0
[  252.813364][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  252.845545][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  252.896945][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  252.908601][ T6075] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor.3: path /root/syzkaller-testdir161758536/syzkaller.v2nYDP/114/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  252.952962][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  253.009014][ T7196] device veth0_vlan entered promiscuous mode
[  253.019670][ T6075] EXT4-fs error (device loop3): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor.3: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  253.022689][ T7273] loop1: detected capacity change from 0 to 32768
[  253.047797][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  253.062541][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  253.071309][ T6075] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #11: comm syz-executor.3: directory missing '.'
[  253.076141][ T7196] device veth1_vlan entered promiscuous mode
[  253.142143][ T6075] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor.3: path /root/syzkaller-testdir161758536/syzkaller.v2nYDP/114/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  253.168065][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  253.183262][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  253.201377][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  253.230126][ T6075] EXT4-fs error (device loop3): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor.3: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  253.254860][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  253.267726][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  253.280713][ T6075] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #11: comm syz-executor.3: directory missing '.'
[  253.305601][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  253.313541][ T6075] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor.3: path /root/syzkaller-testdir161758536/syzkaller.v2nYDP/114/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  253.347466][ T6075] EXT4-fs error (device loop3): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor.3: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  253.387783][ T7196] device veth0_macvtap entered promiscuous mode
[  253.394856][ T6075] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #11: comm syz-executor.3: directory missing '.'
[  253.422945][ T6075] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor.3: path /root/syzkaller-testdir161758536/syzkaller.v2nYDP/114/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  253.459547][ T7196] device veth1_macvtap entered promiscuous mode
[  253.511639][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.548685][ T6075] EXT4-fs error (device loop3): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor.3: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  253.576280][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.612056][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.631834][ T6075] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #11: comm syz-executor.3: directory missing '.'
[  253.643995][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.662377][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.675934][ T6075] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #11: comm syz-executor.3: directory missing '.'
[  253.704704][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.717609][ T6075] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #11: comm syz-executor.3: directory missing '.'
[  253.741785][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.753314][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.764036][ T6075] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #11: comm syz-executor.3: directory missing '.'
[  253.788727][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.800740][ T6075] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #11: comm syz-executor.3: directory missing '.'
[  253.840468][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.851132][ T6075] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #11: comm syz-executor.3: directory missing '.'
[  253.873411][ T7196] batman_adv: batadv0: Interface activated: batadv_slave_0
[  253.885636][ T6075] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #11: comm syz-executor.3: directory missing '.'
[  253.910525][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  253.919703][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  253.944001][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  253.966224][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  254.003609][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.017073][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.088038][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.100773][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.111824][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.123300][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.133793][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.145091][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.162053][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.175908][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.205146][ T7196] batman_adv: batadv0: Interface activated: batadv_slave_1
[  254.246088][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  254.266211][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  254.289636][ T7196] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  254.321816][ T7196] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  254.331377][ T7196] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  254.376071][ T7196] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  254.462970][ T3756] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  254.572837][ T4498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.598397][ T4498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.625627][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  254.637318][ T3669] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.652371][ T3669] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.682801][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  254.722526][ T3756] usb 2-1: Using ep0 maxpacket: 16
[  254.735425][ T6075] EXT4-fs (loop3): unmounting filesystem.
[  254.799243][ T4498] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.852875][ T3756] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  254.872143][ T3756] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  254.952367][   T28] INFO: task kworker/u4:3:46 blocked for more than 143 seconds.
[  254.960051][   T28]       Not tainted 6.1.93-syzkaller #0
[  254.974729][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  254.977248][ T4498] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2024/06/13 03:55:22 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  255.004260][   T28] task:kworker/u4:3    state:D stack:19936 pid:46    ppid:2      flags:0x00004000
[  255.071805][   T28] Workqueue: writeback wb_workfn (flush-7:4)
[  255.077865][   T28] Call Trace:
[  255.081142][   T28]  <TASK>
[  255.121788][   T28]  __schedule+0x142d/0x4550
[  255.126372][   T28]  ? __sched_text_start+0x8/0x8
[  255.131245][   T28]  ? __mutex_trylock_common+0x8d/0x2e0
[  255.171756][   T28]  ? blk_check_plugged+0x250/0x250
[  255.176944][   T28]  ? wq_worker_sleeping+0x5f/0x270
[  255.192100][   T28]  schedule+0xbf/0x180
[  255.196363][   T28]  schedule_preempt_disabled+0xf/0x20
[  255.211850][   T28]  __mutex_lock+0x6b9/0xd80
[  255.216419][   T28]  ? __mutex_lock+0x53c/0xd80
[  255.221107][   T28]  ? exfat_write_inode+0x65/0x110
[  255.241828][   T28]  ? mutex_lock_nested+0x10/0x10
[  255.246824][   T28]  ? do_raw_spin_unlock+0x137/0x8a0
[  255.262396][   T28]  exfat_write_inode+0x65/0x110
[  255.267300][   T28]  __writeback_single_inode+0x67d/0x11e0
[  255.281758][   T28]  writeback_sb_inodes+0xc2b/0x1b20
[  255.287039][   T28]  ? print_unlock_imbalance_bug+0x2c0/0x2c0
[  255.311932][   T28]  ? queue_io+0x630/0x630
[  255.316326][   T28]  ? __writeback_inodes_wb+0x400/0x400
[  255.341757][   T28]  __writeback_inodes_wb+0x114/0x400
[  255.347096][   T28]  wb_writeback+0x4b1/0xe10
[  255.351623][   T28]  ? percpu_ref_tryget+0x260/0x260
[  255.371851][   T28]  ? _find_next_bit+0x11b/0x120
[  255.376780][   T28]  wb_workfn+0xc9e/0x1020
[  255.381148][   T28]  ? inode_wait_for_writeback+0x280/0x280
[  255.401781][   T28]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  255.407815][   T28]  ? print_irqtrace_events+0x210/0x210
[  255.421762][   T28]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  255.427700][   T28]  ? do_raw_spin_unlock+0x137/0x8a0
[  255.441753][   T28]  ? process_one_work+0x7a9/0x11d0
[  255.446896][   T28]  process_one_work+0x8a9/0x11d0
[  255.471822][   T28]  ? worker_detach_from_pool+0x260/0x260
[  255.477512][   T28]  ? _raw_spin_lock_irqsave+0x120/0x120
[  255.500553][   T28]  ? kthread_data+0x4e/0xc0
[