last executing test programs:

1m28.905463917s ago: executing program 2 (id=3):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000000), &(0x7f0000000140)='%pI4   \x00', 0x2000000}, 0x20)

1m28.749542311s ago: executing program 2 (id=9):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040), 0x3, 0x470, &(0x7f0000000dc0)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000300))
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1m28.096634751s ago: executing program 2 (id=16):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x1cb)
quotactl_fd$Q_SYNC(r0, 0x0, 0x0, 0x0)

1m27.400506293s ago: executing program 2 (id=18):
r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x8, 0x4200)
setuid(0xee00)
ioctl$BLKFRASET(r0, 0x1264, 0x0)

1m27.289166264s ago: executing program 32 (id=18):
r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x8, 0x4200)
setuid(0xee00)
ioctl$BLKFRASET(r0, 0x1264, 0x0)

52.767487007s ago: executing program 3 (id=375):
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'wrr\x00', 0x17, 0xffffbffe, 0x82}, 0x2c)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001800dd88000000000000000202000000000000060000000006001500050000002800168024"], 0x4c}}, 0x0)

52.403975458s ago: executing program 3 (id=381):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000014c0)={r0, &(0x7f0000000400), &(0x7f0000001400)=""/138}, 0x20)

52.218491909s ago: executing program 3 (id=385):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002200)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r1, 0x2, 0xb2, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000)

51.980433965s ago: executing program 3 (id=387):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000040)={[{@nodecompose}, {@nobarrier}, {@nls={'nls', 0x3d, 'cp950'}}]}, 0x9, 0x610, &(0x7f0000000c80)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)

51.724810236s ago: executing program 3 (id=388):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0x161200, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x7fffffffffffffff)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0xc001, 0x0)

50.993498847s ago: executing program 3 (id=399):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000080), 0x8)

50.732953869s ago: executing program 33 (id=399):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000080), 0x8)

36.511066367s ago: executing program 0 (id=513):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r1 = socket$unix(0x1, 0x1, 0x0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040), 0x10c08, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

36.324074008s ago: executing program 0 (id=516):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14}}, 0x70}}, 0x0)

36.230213824s ago: executing program 0 (id=517):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000011000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000034001a8006000000020000002800058024000180080001000100000008000200000001000800030000000000080004"], 0x54}}, 0x0)

35.987782781s ago: executing program 0 (id=518):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x1)

35.852507359s ago: executing program 0 (id=521):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000140)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xdd}}, {@nojournal_checksum}, {@acl}, {@errors_remount}]}, 0x1, 0x4d4, &(0x7f0000000a00)="$eJzs3c1vG2UaAPDHdpMmaXb7savdtittK/XQ/VDjfGjVZHel1Z52OVRCVOICUgmJG0qcOoqd0kQ9pHDrgQMCgYQ4cOcv4EJPVEiIM4gr4oCKoAQJkJCMPLbTfNhpKMFOM7+fNPXMO+4872vreTPzzowngNQ6XfsnEzEYER9FxOH64sY3nK6/rN67MVWbMlGtXvwqk7yvttx8a/P/HYqIlYjoi4gn/hfxbGZr3PLS8uxksVhYaCznK3Pz+fLS8rkrc5MzhZnC1ZHx8xMT48NjoxO71tZbLz9/68K7j/W+891Ld++88v57tWoNNtattWNl18Il6k3viaPryg5ExL93N0zX5Brt6e92RXgote/vdxFxJsn/w5FLvk0gDarVavXH6sF2q1eqwL6VTfaBM9mhiKjPZ7NDQ/V9+N/HQLZYKlf+frm0eHW6vq98JHqyl68UC8ONY4Uj0ZOpLY8k8/eXRzctj0Uk+8Cv5vqT5aGpUnG6s10dsMmhTfn/ba6e/0BKOOSH9JL/kF7yH9JL/kN6yX9IL/kP6SX/Ib3kP6SX/If0kv+QXtvlf28H6wF01OMXLtSmavP+9+lrS4uzpWvnpgvl2aG5xamhqdLC/NBMqTST3LMz96DtFUul+ZF/xOL1fKVQruTLS8uX5kqZiEju679U6OlIq4CdOHrq9ie19Fz5Z38yxbo/+XIV9rdqNRPdvgcZ6I5ctzsgoGsM/UN6/Yxj/LY/EgY82lr8RO8Gfa2L/xPzv0o4oAOy3a4A0DVnTzj/B2ll/B/Sy/g/pFePHQBIvYcc/48Hjf8bQ4C9y/g/pNdgm+d//Wbds7uGI+K3EfFxrudg81lfwH6Q/SLT2P8/e/iPg5vX9ma+T0YIeiPihTcvvn59slJZGKmVf71WXnmjUT7ajfoDO9XM02YeAwDptXrvxlRz6mTcL/9bvwhha/wDjbHJvuQcwsBqZsO1CpldunZh5WZEHG8VP9N43nn9zMfAam5L/GON10x9E0l9DyTPTe9M/BPr4v95XfyTv/hTgXS4Xet/hlvlXzbJ6VjLv439z+Aundts3/9l1/q/XJv+79SGLa0kxSstYjz31ouft41/M+Jky/jNeH1JrM3xa3U7u8M23n36yT+0W1d9u76dVvHXtzVfmZvPl5eWzyW/IzdTuDoyfn5iYnx4bHQin4xR55sj1Vv96/iHd7Zr/0Cb+PX2ftqy/bWyv+6w/T/86YOnTm8T/y9nWn//x5LX1p9/f0T8bYfxvxn97Jl262rxp9u0P7tN/FrZ2A7jl1/7v3uHAWAPKS8tz04Wi4UFM3t/pn9vVMNMGmYe1HO0OtIEHiX3k77bNQEAAAAAAAAAAAB2qhOXE3e7jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+8FPAQAA///u4tdf")
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2100, 0x100)
quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000340)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)={0x40000009, 0x44, 0x0, 0x1})

35.438186153s ago: executing program 0 (id=527):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r0, 0x0)
mmap(&(0x7f0000034000/0xc00000)=nil, 0xc00000, 0xb635773f06ebbeee, 0x13, r0, 0x0)

35.037344784s ago: executing program 34 (id=527):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r0, 0x0)
mmap(&(0x7f0000034000/0xc00000)=nil, 0xc00000, 0xb635773f06ebbeee, 0x13, r0, 0x0)

3.54522859s ago: executing program 7 (id=790):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r1, 0x0, 0x0}, 0x10)

3.296317809s ago: executing program 7 (id=794):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x1, &(0x7f00000000c0)={[{@grpjquota}, {@orlov}, {}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}]}, 0x3, 0x4b2, &(0x7f0000000a40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xd3f, 0x5, 0x5, 0x80006, 0xfffffffe, 0x7})

2.727440836s ago: executing program 7 (id=802):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="20520e000000d26e2179153f567af94e81f4d6a6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.396888568s ago: executing program 6 (id=807):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='ns\x00')
getdents64(r0, &(0x7f0000000380)=""/42, 0x2a)
getdents64(r0, 0x0, 0xffffffff00000018)

2.267336154s ago: executing program 6 (id=809):
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xd, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
ioctl(r0, 0x40186f40, &(0x7f0000000100)="ffffffff00")

2.196940933s ago: executing program 4 (id=811):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201)
ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201)

2.102161949s ago: executing program 6 (id=812):
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
set_mempolicy(0x1, &(0x7f0000000000)=0x7fffffff, 0x8)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x100000000)

2.081198125s ago: executing program 4 (id=813):
r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000500)=[{{}, {<r1=>0x80000000}}]})
ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000300)={r1, 0x0, 0x0})

1.955045289s ago: executing program 6 (id=815):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00')
pread64(r0, &(0x7f0000000000)=""/16, 0x9600, 0x3ff)
pread64(r0, &(0x7f00000000c0)=""/105, 0x69, 0x96)

1.793211514s ago: executing program 4 (id=817):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xa)
shutdown(r0, 0x1)

1.690060263s ago: executing program 6 (id=819):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_read_part_table(0x5e6, &(0x7f0000000c00)="$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")
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x20}, @IFLA_BR_MCAST_QUERIER={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000)

1.577954473s ago: executing program 5 (id=820):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='ns\x00')
getdents64(r0, &(0x7f0000000380)=""/42, 0x2a)
getdents64(r0, 0x0, 0xffffffff00000018)

1.422536747s ago: executing program 5 (id=821):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r0, 0x104, 0x4, &(0x7f00000000c0)=0x1, 0x4)

1.383030618s ago: executing program 6 (id=822):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x1000048, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020)

1.102454675s ago: executing program 1 (id=823):
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010027bd7000fcdbdf25140000004800078008000100390a00000c000400000000000000000008000100080000000c0004004000000000000000080002"], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

1.102275345s ago: executing program 5 (id=824):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000780), &(0x7f0000000900), 0x4, r1, 0x4}, 0x38)

1.009418101s ago: executing program 5 (id=825):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x42, 0x0)

936.114751ms ago: executing program 1 (id=826):
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5)
syz_clone3(&(0x7f0000000240)={0x23800000, &(0x7f0000000040)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58)
readv(r0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000080)=""/84, 0x54}], 0x2)

865.478741ms ago: executing program 5 (id=827):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201)
ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201)

863.959491ms ago: executing program 4 (id=837):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)

801.183028ms ago: executing program 5 (id=828):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./nfs_mnt\x00', 0x1ff)
setxattr(&(0x7f0000000600)='./nfs_mnt\x00', &(0x7f0000000640)=@known='system.posix_acl_access\x00', &(0x7f0000000680)='\x02\x00\x00\x00\x01\x00\a\x00\xff\xff\xff\xff\x04\x00\x05\x00\xff\xff\xff\xff \x00\x05\x00\xff\xff\xff\xff', 0x1c, 0x0)

790.610981ms ago: executing program 4 (id=829):
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
set_mempolicy(0x1, &(0x7f0000000000)=0x7fffffff, 0x8)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x100000000)

683.361751ms ago: executing program 4 (id=830):
syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x0, &(0x7f0000005240), 0x1, 0x51ac, &(0x7f0000005280)="$eJzs3V+IVNcdB/Azuzu7W4Xd8cGyZWHd1rYgtCD9A60+dP1TaCnSUVERH9xaWmh92a4tFCQgiCAYwibBQN6EkEAISdagJJHA+iAxSEII+BBYFR/0QX2ISQwEfQk7955x5ox3Z9xo1ujnI7t3zvzOOffMcB/2O3juBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAghfLD/nX3PPvePHxbVZ8sz5TO3Nq07teLGjlW7tg+HUKo9X8rru9f/acs/t+7e1B8HjG/OjpVK0ZTZ0MtZo7fpyblxzT9/CyGUkwm68+MfuxvGltIThMnWCec1u+3k5PkLG68evT10YuTcpeHWl86c/sVewGLJr6srd6+lsdrvrqRHvd1w6ZWaLtFsfHrBfScvAgC4L6urtUP9z9H8T9x6+0BaT9pjSXsqace/EKYaGwuRzdtbtM7RtL5I6xzLokJf4TqTev7+19vVdHzSTqLGfayzuWseafqL1jmR1BdrnQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACPkp8MLb84+u++7qL6bHmmfObWpnWnVtzYsWrX9uEQKrXnS1m5dGfNS78emPnr6OElM0t3HlrzZpwoHnsaOodP44PfD4awp6FyJU57bSCEanOh1gwvthb+VXvw51gAAADgcfKj2u+uejuLg+WmdqmWJku1f1EWFme3nZw8f2Hj1aO3h06MnLs0vPD5qgXzjd1zvnq7cven1BCMY/xN57tbj10nW+aZXzpjmudXVX7wxbVf/nSicHya/yvz5//4zsn/AAAAfBvyfzrP/Nrl/9+uPP71yMRvisen+X+06ZQt+T+uOOb/rrCw/A8AAACPsoed/8da5plfu/z/yc+2HP3v7g2HC8en+X91Z/m/p3HZ8ckP44L3Doawut3SAQAAgAL1jfz1jw5iXs8+OUjz+msXrxx8vefMe0XzteT/sc7yf/mBvzIAAABgoe5cP77+qafXflRUb8n/1c7yf99DXzkAAADQqXfP/uXIM1+NFtZb8v94Z/l/SX7Mdz5kg96P/wvh+cEQ+uceTGSFs2HqD/UCAAAA8IDEnH5u/8+H//O78y8X9WvJ/xPz3/8/3ukg7v9vuv9fy/7/hkJ217+1bgwAAADAk6h1P3+8PX72zQVF37/f6f7/0/s+nwiv/P/HRedvyf8HOsv/3Y3HB/n9fwAAALAA37fv/9vZMs/82t3///L1v7+1bPMvPiscn+b/qc7yfzwubXx5p+P7c3AwhKG5B/ndBF+Np9ubFKbLDYXsjU9GbI0j8sJ0X0OhZiIZ8avBEGqfdxxICstiYSop3BzIC8eSwsexkF8P9cIbSeF0vNJeGMiXmxbejoV8g8V03EGxtL4lIhnxZdGIucI9R8zWTw4AAPBEieE5z7Ll5mZIo+x0qV2HJe06dLXr0N2uQ0/SIe1Y9HwYby7E5/+3Z+WhkeW9G0KBlvx/rLP8H9+K3uxQtP8/xP3/+fca1vf/j8dCJSlMx0I1vWNANZ4jC7tH4jkq1XzEzaF6AQAAAB5r8XOB7kVeBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADfsHf/MXJc9QHA365vb33n8/nCj2KSiByxSDBqzmdbIRCCcnFJAqGECwqkUUSxic/h8AUb22lxhJCTAE2URgolVSuVqA6BNkguWFT8CA2yFYGhNGqBVBRwSaFAEKIERdAgFISrvZm3N/vmJruOfY4v/Xz+uH273/dj3uzs3ryZ2TcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP8/nHrJn73uuxtftqMqfrhxoPGlX73hoi+c8bOrVl/zltNCmJx9vZaFa0+ef+/64QNvHL118MCyqz9w/qf683J5PCxr/annT94fa/3R8hA+VwuhLw2cM5QFGvnzoVjf6UMhnBLmAu0SU4NZibTh8OWBEPaGuUC7qvsHQhgqBK785oMH7mgl7hoI4SUhhGbaxveaWRsDaeCs/iwwmAa29WWBXx/JtAOfr2cBOGbxw9De6PdPdmYYmb9cxfbXOG4L9sxKu7ckJkaq8/38ogVeqIL+9IXJY3rbStWxIEofj4M+bYvg01Zaz3d624o7UvkeypG5UDPUN09t2XTDzK74Sj2MjS2pqmmB3ufvPP7ea48mvWi2w7gAI8dlO+zbctmRhx+9fNVHJx772r5L681jXcxvF1ZpMb3QmiHf5hbN+xhN+D5ZBB+/0l7SqJ2uEMJt9668/qd/9JldVfHS+H/kqcf/cXOOj/WO3LHWJ4ezsXl8ZSgmfjGcjc0BAABg0VgMR02XXf17A+98bOVZVfWVxv+jvZ3/j6f888F81tuDIUzMJm5ZEcLK2dezwCdic29fEcKLZ1OTnYGLksDBEF44m1jdriopsTSWGE0CPxnOAxNJ4FAMTCaBj8fAnUng/TGwPwlcGwMHk8CGGAjTnf142XDej54DAzGwMVuJ++NVCL8cjq0l6+pwuyoAAIDjJB8dNjqfFq51ONYMcXi5f6BbhngFdmWGZlJDOoJtD6sqa+jrVkO9Ww3tfu956u6Xaq51q7l0GUatM8Or1733N09ceslYqFAa/48/9fi/Oc+C1Ern/0O4YvZvzF3PIzPt+MbJjgwAAADAMfjsR2675Pl3P/r7VfHS+H+it+v/4zGRJYXM4aF4GGLrihDGOwNZta8qB7Kz3svyAAAAACwG7fPx7XPh0/ljdol2Op4u5588yvzxxP/EvPlrI//6/J+/71WfqVre0vh/srfr/wc7H7OFOBSX4sMrQlhaCHwlLmUrMGs0Br5/YWcg7/+huAJuj1XlFya0q7o9ltgYA+NJYG9Via+3S6zsDORvVrvxW9r9mM5LFAIAAABwwsXDAfG8fLz+f9///vuH9v3FmypnHCiN/zce3fX/s+Pg0uX9M8tCWNMXwpL0hwEPDWYTA8bAUC1PfHEwq2tJWtVNgyFc0OpYWtUP8vn/+9I5Br85kFUVAyvPvO/x2fkP7h0IYU0x8K1r7jm3ldiVBNqNv3kghDNavU0b/8zSrPFG2vhfLQ3hRYVAu6q3Lw2h1Vh/WtWDzfw+BmlVrXX93EKgXdXLmyHsDgAsUvFf6ebiizt337h108zM1I4FTMRj+ANhy/TM1Ni122Y2NyuWaXOyzB3TGN1U7lOvd745nE9R9NuLzxzpJd3+neB4sa38OH7pwsH8edwXasz2c12j4+n6tMsvXVVuIhT2pKq6XF/gLg8WK5l7E0v1x/z9YVlYesPOqR1j79m0a9eOtdnfXrOvy/7G00zZulqbrqvB+Zath82jcrasxNNdV2cXK1mz6/rta3buvvGc6es3XTd13dS71q0fX3veeevXv/IVa1q9Gs/+dunq2fNVnXT1yD099us4dvXUvkIlJ+JbQ0JCYrEl7r3wd7/56VUfq7wLRWn8v/2px//xWyd+8+fzM1Sd/x+Jp/mz1+dO82+Mgb29nv8fqTqb374wYDQJ7ImBPU7zAwAA8OwQD0fGo5nxqPSnb73t1svvPqvyNp+l8f+e3n7/f5zm/29PXX9Z1TT/q2OJ8ar5/9Np/tvz/++pmv8/nea/Pf//3mdg/v8b2oFklfzS/P8AAMCzwYmb/7/r9P7pDQJKGbpO75/eIKCUoes0/r3eIOCo5///k/0rdt9z6MsPhAql8f+dvY3/TdwPAAAAJ4/GvgvP+NEDr6uMl8b/e3sb/5/4+f9C1fX/o1WByaqJAc3/BwAAwCJVNf/fy1ft/eAHBl/z8qpypfH//t7G//Gyi3pH7ljrk8PZnHYhndPuF8PtnwwAAADA4lAPY2OVE+slOmZGrZyNv7vv5FOBPlW66O43f2PtKfdM/2VVfaXx/8Hexv8dv8vo23LZkYcfvXzVkx+deOxr+y6tN+fO/wMAAAALp9fjEgAAAAAAAAAAAAAAwDNvwzfe8arTH/vTr1bFS7//D1fMvl71+/9437/4+4LndeSOtXaf/y9/fuXrP7l7dsrCh4ZDWFUMbL156ykhvzf/2cXAgbeufkErcXNa4oFHNvy4lXhbGnjtOc95opW4IAlsjJMkvjANxLsqPrE8CcTpFR9OA3F97E8D/XngtuVZP2rpuvrpULauaum6+u5QCCsKgfa6+txQ1kYt7eBdSaDdwXengdjBy/NAPV2qTy7LlioGhmLRv12WLRUAACetuBfYCFumZ6bG4y58fDy1r/Mx6piy7KZytbUemz+cT03224vPHOklvSTdF52713gjNFtdWFvaXS1mqc328vjU0mXVPa+iy91me6tXlEsd7arrr+7RQNajsWu3zWxudO34+u5Z1vV1zbK2NNgpZqnPrtIeaulhWXroUY/rpodFjs/rYWxsSZLr/BgcCR26bRG9/l6/OM9f1VZQzLPhY/9w/YafPXZ/VX2l8f9Ib+P/ZrFfT+Q3A9gT76x3y4oQVvbYIwAAAKBXh//p2+u2/c0H96WPKza8+CtHzn3kkcpy6fh/tLfxfzyClZ8Kzo52HIz3/2+P/0eywCdic29fEcKLZ1OTsUR2Q/3LYonxLPCJeMBkdSyxcbKzqqUxsD8J/GQ4DxxMAodiID9KcV/ID+V8aDiEc2dTV3SW2B5LjCSBN8bAaBIYi4HxJLA8BiaSwP8szwOTSeBfYiBMd66rf1zu6AoAAPA05OOsRufTkI7z9vd1y1DrlmGwW4Z6twzNbhmqehGffzpmaCQXr9QKmRpprQNJLaUM8Wb4R71cpQzh650504KlpuP1B+3rDWqdGS64+NSf/PHfrfzDUKE0/h/vbfw/2PmYtX4ojv/n7v+XBb4SF+/D8dLx0Rj4/oWdgfzAwKE42L29XdVkXiIftN8eS0zEwGgS2B4DE0lg4xV5YO8LOgP5SLvd+C3txqfzEoUAAAAAnHDxAEE8TBPH/w+85rP7D51+2+aqcqXx/0Rv4//Y3rJiY++Ptf5oeQifq80tTTtwzlAWiMcxhuLP408fCuGUwgGOdompwaxEf9Jw+PJA9gv1/rSq+weyOQbi8yu/+eCBO1qJuwZCeEnh6Eu7je81szYG0sBZ/VlgMA1s68sC8chPO/D5ehaAY9Y+Khg3qPxSl7aR+ctVbH/PlnuCpt0rHQOdJ998v7laKM30hfyYatvRvW2l6lgQpY/HQZ+2xfhpG/FpK+5I5XsoR+ZCzVDfPLVl0w0zu+IrxV+ylizQ+1z8lWov6eOwHe55+kvbXTNdgPHk62N8/nLzb4e1WF3flsuOPPzo5as+OvHY1/ZdWu+6eXbLEH8o/F8bvjjy7cLqXWjNkG9zi+77ZNL3yWL8NzDqbQsh/OaOV79l67abj1TFS+P/yd7G/33JY9ZYXJk7V4Tw0sLKfSiu/j9YkX0PFgLZt+Rzy4HslPsPhyu/OQEAAOB4ax/uaB8vmM4fswvC03FyOf/kUeaPxysm5s3f63Lf/5Ef3v31L/5unuk7M6Xx/8anHv8vTRbT+X/n/1kgzv/P62Q/FL00fWHPMR2KLlXHgnD+f14n+6fN+f95Of/v/P98nP/vwvn/eZ3sb1tpL2m7na7W1/+pV/36kpfc9+aqeGn8v7238b/5/+aftK89/9/Gqvn/tlfN/7fH/H8AAMCCqphoLh3nlWbvK2VIZ+8rZeg6QWDXKQbN/3fU8/897+oHH1n56BP/HSqUxv97ehv/x81hWbH1xTL/3+gVFVXdGQPbTQwIAADAyajqAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPrF3/sec///yrpz2nKn64caDxpV+94aIvnPGzq1Zf85bTQpiefb2WhWtPnn/v+uEDbxy9dfDAsqs/cP6nmnm5Rv54WkfuWOuTwyHsLbwyFBO/GG49mQtc+fpP7u5rJR4aDmFVMbD15q2ntBIfHw7h7GLgwFtXv6CVuDkt8cAjG37cSrwtDbz2nOc80UpckAdq6eJ+ZHm2uLV0ce9YHsKKQqC9uO9c3llVu41L80A9bePvh7I2YmAoFv3roayNGJiJJaaXhrCmL4QlaVX/3MyqWpJW9YVmVtWStKr3NUO4IITQl1b1SH9WVV/a83/rz6qKgZVn3vf4Wa3E3v4Q1hQD37rmnnNbiXcngXbjb+oP4YzWJpM2/ulG1ngjbfyuRggvCiH0pyV+1ZeV6E9L/KAvhOcWAu3G39EXwu7As0L88tlcfHHn7hu3bpqZmdqxgIn+vK2BsGV6Zmrs2m0zm5vJMlWpFdJHbnr6fT/8+HuvbT3+9uIzR3pJ9+XlGrOLvK7R8XT9yb70cbkGi5XMvR+l+mP+/rAsLL1h59SOsfds2rVrx9rsb6/Z12V/l+TRbF2tXSzr6uxiJWt2Xb99zc7dN54zff2m66aum3rXuvXja887b/36V75iTatX49nf49HVe058V0/tK1RyIr4AJCQkFlui3vHtNn6yf5GXdvTnFrQRmrNf0KVhRTFLbbaXx6PTFz3NHj+d/ZSuPVpbGjiUsqzrnmV9aTAxl2UgyzK7X1caHBZrqs+u0vi8HsbGllSth5HOp8XV+/NjWL3fyVddr2kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlwIAAP//7rXqTQ==")
r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x42, 0x18)
fallocate(r0, 0x40, 0x0, 0x8ffff)

681.813201ms ago: executing program 1 (id=841):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000002a00), r0)
sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="11042abd7000fbdbdf2506"], 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x20000800)

485.764855ms ago: executing program 7 (id=831):
syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2800440, &(0x7f0000000100)={[{@gid}, {@creator={'creator', 0x3d, "fc487a23"}}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@codepage={'codepage', 0x3d, 'cp1250'}}]}, 0x46, 0x327, &(0x7f0000000a40)="$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")
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xd280, 0x0, 0x1, 0x0, &(0x7f00000007c0))
openat(0xffffffffffffff9c, 0x0, 0xe042, 0x184)

438.198749ms ago: executing program 1 (id=832):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r0, 0xee01, 0x0)
keyctl$KEYCTL_MOVE(0x11, r0, 0x0, r0, 0x1)

262.560227ms ago: executing program 7 (id=833):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffff9}, 0x70bd2a, 0x0, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@flushsa={0x14, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x33}}, 0x14}, 0x1, 0x0, 0x0, 0x40011}, 0x20040110)

231.102826ms ago: executing program 1 (id=834):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0x2)
getsockopt(r0, 0x110, 0x6, 0x0, 0x0)

52.635785ms ago: executing program 1 (id=835):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010600000000ffdbdf25090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800050001007515"], 0x40}, 0x1, 0x0, 0x0, 0x20044885}, 0x0)

0s ago: executing program 7 (id=836):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000f1bcd30703e08c11f5aa6a5c", 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

ilter on device bond0
[   93.032897][ T4237] Bluetooth: hci2: command 0x040f tx timeout
[   93.077937][ T4326] 8021q: adding VLAN 0 to HW filter on device team0
[   93.225521][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   93.293622][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   93.415758][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   93.466785][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   93.529723][ T4253] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.539733][ T4253] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.653325][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   93.753891][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   93.829144][ T4253] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.837450][ T4253] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.974317][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   93.990327][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   94.064787][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   94.103722][ T4537] loop3: detected capacity change from 0 to 16
[   94.147912][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   94.177528][ T4537] erofs: (device loop3): mounted with root inode @ nid 36.
[   94.223875][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   94.275204][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   94.321364][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   94.515764][ T4546] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   94.577579][ T4326] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   94.682774][ T4326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   94.744257][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   94.776234][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   94.823437][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   94.895761][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   94.943636][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   94.983997][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   94.994334][ T4554] loop0: detected capacity change from 0 to 512
[   95.035072][ T4554] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   95.113315][ T4505] Bluetooth: hci2: command 0x0419 tx timeout
[   95.592381][ T4571] loop1: detected capacity change from 0 to 2048
[   95.640407][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   95.693190][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   95.737014][ T4571] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[   95.758847][ T4545] loop3: detected capacity change from 0 to 32768
[   95.802916][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.828230][ T4545] =======================================================
[   95.828230][ T4545] WARNING: The mand mount option has been deprecated and
[   95.828230][ T4545]          and is ignored by this kernel. Remove the mand
[   95.828230][ T4545]          option from the mount to silence this warning.
[   95.828230][ T4545] =======================================================
[   95.884441][ T4571] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   96.180979][ T4593] loop4: detected capacity change from 0 to 64
[   96.459142][ T4605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.89'.
[   96.664574][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   96.675126][ T4270] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   96.688418][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   96.737908][   T26] audit: type=1400 audit(1790795797.389:4): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626200D3ABEEED78F5128D1B7D39C3A7FCA9460DD404CB7C838FF47A79A4F235112B5A1EAC506BE6D5716D72BFF5FCFB587D1A13B737964DEEF75E0C05AE552E26144AC844B11EF03981DEFE0A26AFBBD5A41A2C7415B9803ABD062A2EEE8AB180B3193B972E3BD615F700B4FEA42EC6F36FC175A8DF54E7C42DE443082CEEECA04824BDA5C1A40417927A0F4F7FD75C7E94FA12AB3D0498A81DF9A5F1E2D285A39FB7A114F61A05254A5A4C99D1A75994F2EE7B7A9B8807DC7C6F11296CADAE6EDBF465690420C2789607118BA01F64638DE57391F7F1178928F2E86F38DFA402E90C2D2CF0A8845FA1599C60EE904F26504 pid=4611 comm="syz.1.91"
[   96.833904][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   96.873795][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   96.910697][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   96.957991][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   96.986064][ T4326] device veth0_vlan entered promiscuous mode
[   97.061466][ T4326] device veth1_vlan entered promiscuous mode
[   97.151292][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   97.162930][ T4270] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   97.203434][ T4270] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   97.224278][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   97.266296][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   97.283818][ T4270] usb 1-1: config 0 interface 0 has no altsetting 0
[   97.291289][ T4270] usb 1-1: New USB device found, idVendor=045e, idProduct=076c, bcdDevice= 0.00
[   97.305625][ T4626] loop1: detected capacity change from 0 to 256
[   97.314273][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   97.332484][ T4270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.350548][ T4326] device veth0_macvtap entered promiscuous mode
[   97.378312][ T4326] device veth1_macvtap entered promiscuous mode
[   97.396295][ T4270] usb 1-1: config 0 descriptor??
[   97.432454][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.446131][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.457465][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.502491][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.541059][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.563010][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.603074][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.631016][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.651843][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.667105][ T3157] cfg80211: failed to load regulatory.db
[   97.684653][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   97.715973][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   97.756872][ T4636] loop4: detected capacity change from 0 to 512
[   97.773479][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   97.815900][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   97.835304][ T4636] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   97.894633][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.920512][ T4270] input: HID 045e:076c as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:076C.0003/input/input6
[   97.946916][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.958992][ T4636] EXT4-fs (loop4): invalid journal inode
[   97.993095][ T4636] EXT4-fs (loop4): can't get journal size
[   98.016515][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.059292][ T4270] microsoft 0003:045E:076C.0003: input,hidraw0: USB HID v36.2c Joystick [HID 045e:076c] on usb-dummy_hcd.0-1/input0
[   98.102843][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.142400][ T4270] usb 1-1: USB disconnect, device number 4
[   98.184151][ T4636] EXT4-fs (loop4): 1 truncate cleaned up
[   98.232828][ T4636] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none.
[   98.236795][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.357737][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.379774][ T4649] fido_id[4649]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[   98.402068][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.430809][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.476427][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.521196][ T4648] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   98.534996][ T4648] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   98.547467][ T4648] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   98.559913][ T4648] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   98.636073][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   98.636103][ T4648] Zero length message leads to an empty skb
[   98.677045][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   98.747243][ T4326] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.790847][ T4326] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.837746][ T4326] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.882719][ T4326] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.008124][ T4657] loop0: detected capacity change from 0 to 2048
[   99.165058][ T4334]  loop0: p1 < >
[   99.225060][ T4670] ubi0: attaching mtd0
[   99.264983][ T4670] ubi0: scanning is finished
[   99.276133][ T4670] ubi0: empty MTD device detected
[   99.287184][ T4253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.312325][ T4657]  loop0: p1 < >
[   99.321026][ T4253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.344255][ T4647] loop3: detected capacity change from 0 to 32768
[   99.378275][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   99.441632][ T4253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.495153][ T4253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.542282][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   99.724976][ T4670] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[   99.760721][ T4334] udevd[4334]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   99.781005][ T4679] loop4: detected capacity change from 0 to 512
[   99.798329][ T4670] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[   99.881784][ T4679] EXT4-fs (loop4): Ignoring removed orlov option
[   99.893434][ T4670] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[   99.962546][ T4679] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,orlov,bsddf,auto_da_alloc=0x0000000000000004,,errors=continue. Quota mode: writeback.
[   99.980268][ T4670] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[   99.991981][ T4670] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  100.001615][ T4670] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  100.015153][ T4670] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3483919354
[  100.155991][   T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  100.202062][ T4670] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  100.274406][ T4674] ubi0: background thread "ubi_bgt0d" started, PID 4674
[  100.603169][   T23] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  100.651324][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.680103][ T4705] loop5: detected capacity change from 0 to 128
[  100.704933][   T23] usb 4-1: config 0 descriptor??
[  100.744417][ T4701] loop0: detected capacity change from 0 to 4096
[  100.785230][   T23] cp210x 4-1:0.0: cp210x converter detected
[  100.843845][ T4705] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  100.869629][ T4701] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  100.921316][ T4705] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  100.949098][ T4701] NILFS (loop0): mounting unchecked fs
[  100.978636][ T4701] NILFS (loop0): recovery required for readonly filesystem
[  101.017691][ T4701] NILFS (loop0): write access will be enabled during recovery
[  101.091067][ T4715] netlink: 48 bytes leftover after parsing attributes in process `syz.4.123'.
[  101.129309][ T4701] NILFS (loop0): norecovery option specified, skipping roll-forward recovery
[  101.160759][ T4330] udevd[4330]: incorrect nilfs2 checksum on /dev/loop0
[  101.249762][   T23] usb 4-1: cp210x converter now attached to ttyUSB0
[  101.410643][ T4726] loop1: detected capacity change from 0 to 256
[  101.455388][   T23] usb 4-1: USB disconnect, device number 3
[  101.483655][   T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  101.572270][   T23] cp210x 4-1:0.0: device disconnected
[  101.621244][ T4735] capability: warning: `syz.4.132' uses 32-bit capabilities (legacy support in use)
[  101.932318][ T4746] loop4: detected capacity change from 0 to 2048
[  101.956437][ T4749] loop1: detected capacity change from 0 to 1024
[  102.123133][ T4753] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  102.133211][ T1335] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  102.270060][ T4749] hfsplus: invalid length 1280 has been corrected to 255
[  102.523116][ T1335] usb 1-1: config index 0 descriptor too short (expected 7768, got 18)
[  102.549986][ T1335] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d
[  102.567905][ T4768] loop4: detected capacity change from 0 to 64
[  102.586723][ T4766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.141'.
[  102.598079][ T1335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.620848][ T1335] usb 1-1: config 0 descriptor??
[  102.648951][ T4761] loop3: detected capacity change from 0 to 4096
[  102.718046][ T1335] ftdi_sio 1-1:0.0: Ignoring interface reserved for JTAG
[  102.888533][ T4772] loop1: detected capacity change from 0 to 256
[  102.975733][ T4772] exfat: Deprecated parameter 'utf8'
[  103.000439][ T4761] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  103.001707][ T4232] usb 1-1: USB disconnect, device number 5
[  103.028425][ T4742] loop5: detected capacity change from 0 to 40427
[  103.133796][ T4742] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1ffff
[  103.156000][ T4772] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  103.239268][ T4761] ntfs3: loop3: failed to convert "0080" to macturkish
[  103.263039][ T4761] ntfs3: loop3: failed to convert name for inode 1e.
[  103.279921][ T4742] F2FS-fs (loop5): invalid crc value
[  103.308261][ T4742] F2FS-fs (loop5): Found nat_bits in checkpoint
[  103.460882][ T4742] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  103.749426][ T4798] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  103.792877][ T4798] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  103.801166][ T4798] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  103.811110][ T4798] comedi comedi3: 8255: I/O port conflict (0xe,4)
[  103.820266][ T4798] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  103.872993][ T4798] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  103.913529][ T4798] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  104.040053][ T4806] mmap: syz.4.154 (4806) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  104.121627][   T26] audit: type=1326 audit(1790795804.769:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4809 comm="syz.0.156" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f036ce6d159 code=0x0
[  104.157614][ T4811] Cannot find add_set index 46338 as target
[  104.300544][ T4817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.158'.
[  104.354859][ T4821] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[  104.404790][ T4235] kernel write not supported for file /sg0 (pid: 4235 comm: kworker/0:7)
[  104.691416][ T4840] loop3: detected capacity change from 0 to 1024
[  104.881249][ T4840] hfsplus: xattr search failed
[  104.906762][ T4840] hfsplus: xattr searching failed
[  105.175772][ T4864] tipc: Started in network mode
[  105.199815][ T4864] tipc: Node identity S, cluster identity 4711
[  105.232979][ T4864] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  105.647088][ T3157] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  105.883922][ T4900] sg_write: data in/out 455644/242 bytes for SCSI command 0x0-- guessing data in;
[  105.883922][ T4900]    program syz.1.192 not setting count and/or reply_len properly
[  105.954068][ T3157] usb 4-1: Using ep0 maxpacket: 32
[  105.970835][ T4907] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  106.083169][ T3157] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.131539][ T3157] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  106.189372][ T4921] netlink: 8 bytes leftover after parsing attributes in process `syz.5.200'.
[  106.201060][ T3157] usb 4-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00
[  106.222095][ T3157] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.235317][ T4924] set_capacity_and_notify: 2 callbacks suppressed
[  106.235334][ T4924] loop4: detected capacity change from 0 to 64
[  106.286350][ T3157] usb 4-1: config 0 descriptor??
[  106.806637][ T3157] wacom 0003:056A:00FA.0004: unbalanced collection at end of report description
[  106.838591][ T3157] wacom 0003:056A:00FA.0004: parse failed
[  106.858621][ T3157] wacom: probe of 0003:056A:00FA.0004 failed with error -22
[  106.898025][ T4949] loop4: detected capacity change from 0 to 1024
[  107.041047][ T4949] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  107.065636][ T4232] usb 4-1: USB disconnect, device number 4
[  107.173647][ T4949] EXT4-fs error (device loop4): ext4_check_all_de:667: inode #12: block 7: comm syz.4.209: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0
[  107.354716][ T4965] 0x000200000001-0x000277594ace : ""
[  107.388324][ T4965] mtd: partition "" is out of reach -- disabled
[  107.496391][ T4943] loop1: detected capacity change from 0 to 32768
[  107.529273][ T4965] ftl_cs: FTL header not found.
[  107.816246][ T4977] loop5: detected capacity change from 0 to 512
[  107.881987][ T4977] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.217: invalid indirect mapped block 4294967295 (level 1)
[  107.944074][ T4977] EXT4-fs (loop5): Remounting filesystem read-only
[  107.970755][ T4977] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.217: invalid indirect mapped block 4294967295 (level 1)
[  108.012961][ T4232] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  108.038391][ T4960] loop0: detected capacity change from 0 to 32768
[  108.055098][ T4977] EXT4-fs (loop5): Remounting filesystem read-only
[  108.071969][ T4985] device dummy0 entered promiscuous mode
[  108.080146][ T4977] EXT4-fs (loop5): 2 truncates cleaned up
[  108.098420][ T4988] bond0: (slave wlan0): Error: Device can not be enslaved while up
[  108.109914][ T4977] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000004004,barrier=0x0000000000000005,. Quota mode: writeback.
[  108.171003][ T4960] XFS (loop0): Mounting V5 Filesystem
[  108.213591][ T4977] EXT4-fs error (device loop5): ext4_get_parent:1908: inode #11: comm syz.5.217: bad parent inode number: 3
[  108.292271][ T4977] EXT4-fs (loop5): Remounting filesystem read-only
[  108.363144][ T4960] XFS (loop0): Ending clean mount
[  108.392958][ T4232] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 127, changing to 10
[  108.431314][ T4232] usb 4-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  108.476283][ T5008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.225'.
[  108.505062][ T5008] netlink: 24 bytes leftover after parsing attributes in process `syz.4.225'.
[  108.530258][ T4232] usb 4-1: config 0 interface 0 has no altsetting 0
[  108.551981][ T4232] usb 4-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00
[  108.566570][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.580419][ T4232] usb 4-1: config 0 descriptor??
[  108.691416][ T5017] process 'syz.1.229' launched '/dev/fd/3' with NULL argv: empty string added
[  108.829762][ T4191] XFS (loop0): Unmounting Filesystem
[  108.924896][ T5025] loop5: detected capacity change from 0 to 512
[  108.977156][ T5025] EXT4-fs (loop5): Ignoring removed orlov option
[  109.041789][ T5025] EXT4-fs error (device loop5): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  109.078045][ T5025] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #11: comm syz.5.232: corrupted inode contents
[  109.096743][ T4232] wacom 0003:056A:00B5.0005: Unknown device_type for 'HID 056a:00b5'. Assuming pen.
[  109.114875][ T4232] wacom 0003:056A:00B5.0005: hidraw0: USB HID v10.01 Device [HID 056a:00b5] on usb-dummy_hcd.3-1/input0
[  109.134302][ T4232] input: Wacom Intuos3 6x11 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00B5.0005/input/input7
[  109.147162][ T5025] EXT4-fs error (device loop5): ext4_dirty_inode:6087: inode #11: comm syz.5.232: mark_inode_dirty error
[  109.206798][ T5028] loop1: detected capacity change from 0 to 128
[  109.216261][ T5025] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.232: invalid indirect mapped block 1 (level 1)
[  109.299846][ T5028] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  109.329165][ T5025] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #11: comm syz.5.232: corrupted inode contents
[  109.374861][ T3157] usb 4-1: USB disconnect, device number 5
[  109.387650][ T5028] hpfs: filesystem error: improperly stopped
[  109.458048][ T5028] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  109.463481][ T5025] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[  109.536928][ T5028] hpfs: You really don't want any checks? You are crazy...
[  109.566249][ T5029] fido_id[5029]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  109.571392][ T5025] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #11: comm syz.5.232: corrupted inode contents
[  109.593344][ T5028] hpfs: Code page index out of array
[  109.625638][ T5028] hpfs: code page support is disabled
[  109.647836][ T5025] EXT4-fs error (device loop5): ext4_truncate:4286: inode #11: comm syz.5.232: mark_inode_dirty error
[  109.660926][ T5028] hpfs: hpfs_map_4sectors(): unaligned read
[  109.689707][ T5028] hpfs: hpfs_map_4sectors(): unaligned read
[  109.693009][ T5025] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem
[  109.715804][ T5028] hpfs: filesystem error: unable to find root dir
[  109.724299][ T5025] EXT4-fs (loop5): 1 truncate cleaned up
[  109.740681][ T5025] EXT4-fs (loop5): mounted filesystem without journal. Opts: stripe=0x0000000000000001,nodelalloc,orlov,,errors=continue. Quota mode: none.
[  109.901836][ T5025] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 13: comm syz.5.232: path /23/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0
[  110.039112][ T5021] loop4: detected capacity change from 0 to 32768
[  110.088077][ T5021] XFS: attr2 mount option is deprecated.
[  110.221039][ T5021] XFS (loop4): Mounting V5 Filesystem
[  110.332187][ T5069] sg_write: data in/out 19942/1 bytes for SCSI command 0x32-- guessing data in;
[  110.332187][ T5069]    program syz.3.243 not setting count and/or reply_len properly
[  110.437744][ T5021] XFS (loop4): Ending clean mount
[  110.518441][ T5074] loop1: detected capacity change from 0 to 2048
[  110.600265][ T4203] XFS (loop4): Unmounting Filesystem
[  110.619031][ T5074] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  110.631114][ T4232] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  110.651390][ T5074] NILFS (loop1): mounting unchecked fs
[  110.670869][ T4334] udevd[4334]: incorrect nilfs2 checksum on /dev/loop1
[  110.728890][ T5082] loop0: detected capacity change from 0 to 512
[  110.775117][ T5074] NILFS (loop1): recovery complete
[  110.810220][ T5085] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  110.945082][ T5082] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #15: comm syz.0.248: inode has both inline data and extents flags
[  111.003036][ T4232] usb 6-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.021366][ T4232] usb 6-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0
[  111.036013][ T4232] usb 6-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  111.054515][ T4232] usb 6-1: config 0 interface 0 has no altsetting 0
[  111.065042][ T5082] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.248: couldn't read orphan inode 15 (err -117)
[  111.082731][ T4232] usb 6-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00
[  111.092161][ T4232] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.112737][ T5082] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  111.150111][ T4232] usb 6-1: config 0 descriptor??
[  111.318272][ T5099] loop1: detected capacity change from 0 to 1764
[  111.669872][ T5109] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  111.825587][ T5111] loop1: detected capacity change from 0 to 4096
[  111.861450][ T5111] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  111.882854][ T4232] sony 0003:054C:042F.0006: failed to retrieve feature report 0xf2 with the Sixaxis MAC address
[  111.905995][ T5116] loop0: detected capacity change from 0 to 128
[  111.934702][ T4232] sony 0003:054C:042F.0006: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.5-1/input0
[  111.983802][ T4232] sony 0003:054C:042F.0006: failed to claim input
[  112.007303][ T4232] usb 6-1: USB disconnect, device number 2
[  112.073130][ T5116] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  112.166793][ T5111] ntfs3: loop1: Failed to load $Extend.
[  112.206568][ T5116] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  112.299510][ T5119] fido_id[5119]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  112.309500][ T5123] loop3: detected capacity change from 0 to 164
[  112.418617][ T5105] loop4: detected capacity change from 0 to 32768
[  112.778300][ T5135] comedi: valid board names for 8255 driver are:
[  112.846668][ T5135]  8255
[  112.866498][ T5135] comedi: valid board names for vmk80xx driver are:
[  112.914231][ T5135]  vmk80xx
[  112.943016][ T5135] comedi: valid board names for usbduxsigma driver are:
[  112.982594][ T5135]  usbduxsigma
[  113.007414][ T5135] comedi: valid board names for usbduxfast driver are:
[  113.019950][ T5147] loop5: detected capacity change from 0 to 128
[  113.033349][ T5135]  usbduxfast
[  113.037884][ T5135] comedi: valid board names for usbdux driver are:
[  113.102826][ T5135]  usbdux
[  113.120772][ T5135] comedi: valid board names for ni6501 driver are:
[  113.168597][ T5135]  ni6501
[  113.198118][ T5135] comedi: valid board names for dt9812 driver are:
[  113.215864][ T5147] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  113.238015][ T5135]  dt9812
[  113.270451][ T5135] comedi: valid board names for ni_labpc_cs driver are:
[  113.319076][ T5147] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  113.321817][ T5135]  ni_labpc_cs
[  113.398579][ T5135] comedi: valid board names for ni_daq_700 driver are:
[  113.452877][ T5135]  ni_daq_700
[  113.477492][ T5135] comedi: valid board names for labpc_pci driver are:
[  113.519730][ T5135]  labpc_pci
[  113.546644][ T5135] comedi: valid board names for adl_pci9118 driver are:
[  113.591157][ T5135]  pci9118dg
[  113.612764][ T5135]  pci9118hg
[  113.616929][ T5171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.280'.
[  113.639258][ T5135]  pci9118hr
[  113.643812][ T5135] comedi: valid board names for 8255_pci driver are:
[  113.686844][ T5135]  8255_pci
[  113.691156][ T5135] comedi: valid board names for s526 driver are:
[  113.754531][ T5135]  s526
[  113.757742][ T5135] comedi: valid board names for multiq3 driver are:
[  113.812777][ T5135]  multiq3
[  113.816891][ T5135] comedi: valid board names for pcmuio driver are:
[  113.863063][ T5135]  pcmuio48
[  113.873141][ T5135]  pcmuio96
[  113.877072][ T5135] comedi: valid board names for pcmmio driver are:
[  113.924999][ T5186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.286'.
[  113.932989][ T5135]  pcmmio
[  113.973256][ T5186] nbd: socks must be embedded in a SOCK_ITEM attr
[  113.992922][ T5135] comedi: valid board names for pcmda12 driver are:
[  114.042464][ T5135]  pcmda12
[  114.077629][ T5135] comedi: valid board names for pcmad driver are:
[  114.092956][ T1108] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  114.133111][ T5135]  pcmad12
[  114.137011][ T5135]  pcmad16
[  114.167423][ T5135] comedi: valid board names for ni_labpc driver are:
[  114.222367][ T5135]  lab-pc-1200
[  114.246765][ T5135]  lab-pc-1200ai
[  114.251334][ T5135]  lab-pc+
[  114.267646][ T5135] comedi: valid board names for atmio16 driver are:
[  114.278431][ T5135]  atmio16
[  114.282099][ T5135]  atmio16d
[  114.310899][ T5135] comedi: valid board names for ni_at_ao driver are:
[  114.340100][ T5135]  at-ao-6
[  114.347650][ T5135]  at-ao-10
[  114.363068][ T5135] comedi: valid board names for ni_at_a2150 driver are:
[  114.390638][ T1108] usb 1-1: Using ep0 maxpacket: 8
[  114.413570][ T5135]  ni_at_a2150
[  114.418162][ T5135] comedi: valid board names for adq12b driver are:
[  114.441858][ T5135]  adq12b
[  114.455027][ T5135] comedi: valid board names for mpc624 driver are:
[  114.463685][ T5135]  mpc624
[  114.467098][ T5135] comedi: valid board names for c6xdigio driver are:
[  114.475684][ T5135]  c6xdigio
[  114.479684][ T5135] comedi: valid board names for aio_iiro_16 driver are:
[  114.487924][ T5135]  aio_iiro_16
[  114.491484][ T5135] comedi: valid board names for aio_aio12_8 driver are:
[  114.510786][ T5135]  aio_aio12_8
[  114.515202][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11
[  114.528960][ T5135]  aio_ai12_8
[  114.533352][ T5135]  aio_ao12_4
[  114.537160][ T5135] comedi: valid board names for fl512 driver are:
[  114.544868][ T1108] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  114.560996][ T5135]  fl512
[  114.564503][ T5135] comedi: valid board names for dmm32at driver are:
[  114.574396][ T1108] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00
[  114.585321][ T5135]  dmm32at
[  114.589279][ T5135] comedi: valid board names for dt282x driver are:
[  114.598048][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.617798][ T1108] usb 1-1: config 0 descriptor??
[  114.624081][ T5135]  dt2821
[  114.627821][ T5135]  dt2821-f
[  114.631296][ T5135]  dt2821-g
[  114.641787][ T5135]  dt2823
[  114.645582][ T5135]  dt2824-pgh
[  114.649985][ T5135]  dt2824-pgl
[  114.655647][ T5135]  dt2825
[  114.660601][ T5135]  dt2827
[  114.669403][ T5135]  dt2828
[  114.673627][ T5177] loop5: detected capacity change from 0 to 32768
[  114.688388][ T5135]  dt2829
[  114.697100][ T5135]  dt21-ez
[  114.700750][ T5135]  dt23-ez
[  114.705077][ T5135]  dt24-ez
[  114.710033][ T5135]  dt24-ez-pgl
[  114.713815][ T5135] comedi: valid board names for dt2817 driver are:
[  114.724643][ T5135]  dt2817
[  114.729228][ T5135] comedi: valid board names for dt2815 driver are:
[  114.765720][ T5135]  dt2815
[  114.785528][ T5135] comedi: valid board names for dt2814 driver are:
[  114.803606][ T5135]  dt2814
[  114.806634][ T5135] comedi: valid board names for dt2811 driver are:
[  114.828676][ T5205] loop4: detected capacity change from 0 to 128
[  114.840931][ T5135]  dt2811-pgh
[  114.848152][ T5135]  dt2811-pgl
[  114.851707][ T5135] comedi: valid board names for dt2801 driver are:
[  114.913601][ T5135]  dt2801
[  114.918668][ T5135] comedi: valid board names for das6402 driver are:
[  114.931078][ T5205] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  114.974816][ T5135]  das6402-12
[  114.990603][ T5135]  das6402-16
[  115.010895][ T5135] comedi: valid board names for das1800 driver are:
[  115.031802][ T5135]  das-1701st
[  115.054987][ T5206] loop5: detected capacity change from 0 to 4096
[  115.072816][ T5135]  das-1701st-da
[  115.076890][ T5135]  das-1702st
[  115.080739][ T5135]  das-1702st-da
[  115.105349][ T5135]  das-1702hr
[  115.109608][ T5135]  das-1702hr-da
[  115.132219][ T1108] input: HID 054c:03d5 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:03D5.0007/input/input11
[  115.153819][ T5135]  das-1701ao
[  115.157777][ T5135]  das-1702ao
[  115.162543][ T5135]  das-1801st
[  115.166816][ T5135]  das-1801st-da
[  115.176701][ T5135]  das-1802st
[  115.180185][ T5135]  das-1802st-da
[  115.206925][ T5135]  das-1802hr
[  115.211245][ T5135]  das-1802hr-da
[  115.246995][ T1108] sony 0003:054C:03D5.0007: input,hidraw0: USB HID v0.be Joystick [HID 054c:03d5] on usb-dummy_hcd.0-1/input0
[  115.270194][ T5135]  das-1801hc
[  115.289370][ T5135]  das-1802hc
[  115.296574][ T5135]  das-1801ao
[  115.303036][ T5135]  das-1802ao
[  115.311575][ T5135] comedi: valid board names for das800 driver are:
[  115.354133][ T5135]  das-800
[  115.384684][ T5135]  cio-das800
[  115.413470][ T4505] usb 1-1: USB disconnect, device number 6
[  115.432105][ T5135]  das-801
[  115.452002][ T5214] netlink: 24 bytes leftover after parsing attributes in process `syz.4.297'.
[  115.474036][ T5135]  cio-das801
[  115.478844][ T5135]  das-802
[  115.482336][ T5135]  cio-das802
[  115.543413][ T5135]  cio-das802/16
[  115.547158][ T5135] comedi: valid board names for isa-das08 driver are:
[  115.581667][ T5135]  isa-das08
[  115.602829][ T5135]  das08-pgm
[  115.617423][ T5135]  das08-pgh
[  115.621232][ T5135]  das08-pgl
[  115.627497][ T5212] fido_id[5212]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  115.643510][ T5135]  das08-aoh
[  115.666419][ T5135]  das08-aol
[  115.670001][ T5135]  das08-aom
[  115.690135][ T5135]  das08/jr-ao
[  115.707870][ T5135]  das08jr-16-ao
[  115.712494][ T5135]  pc104-das08
[  115.721456][ T5221] loop4: detected capacity change from 0 to 2048
[  115.736805][ T5135]  das08jr/16
[  115.742116][ T5135] comedi: valid board names for das16m1 driver are:
[  115.792406][ T5135]  das16m1
[  115.838370][ T5135] comedi: valid board names for dac02 driver are:
[  115.874899][ T5221] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  115.892504][ T5135]  dac02
[  115.902736][ T5221] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.927972][ T5225] block device autoloading is deprecated and will be removed.
[  115.967886][ T5135] comedi: valid board names for rti802 driver are:
[  115.979051][ T5135]  rti802
[  115.983449][ T5135] comedi: valid board names for rti800 driver are:
[  115.996300][ T5135]  rti800
[  116.000834][ T5135]  rti815
[  116.005686][ T5135] comedi: valid board names for pcm3724 driver are:
[  116.017723][ T5135]  pcm3724
[  116.027523][ T5135] comedi: valid board names for pcl818 driver are:
[  116.038060][ T5135]  pcl818l
[  116.044526][ T5135]  pcl818h
[  116.060862][ T5135]  pcl818hd
[  116.106760][ T5135]  pcl818hg
[  116.110170][ T5135]  pcl818
[  116.140592][ T5135]  pcl718
[  116.158682][ T5135]  pcm3718
[  116.188699][ T5135] comedi: valid board names for pcl816 driver are:
[  116.216183][ T5135]  pcl816
[  116.220678][ T5135]  pcl814b
[  116.225706][ T5135] comedi: valid board names for pcl812 driver are:
[  116.278563][ T5135]  pcl812
[  116.296548][ T5135]  pcl812pg
[  116.324082][ T5135]  acl8112pg
[  116.338210][ T5135]  acl8112dg
[  116.347008][ T5135]  acl8112hg
[  116.351283][ T5135]  a821pgl
[  116.358103][ T5135]  a821pglnda
[  116.366727][ T5135]  a821pgh
[  116.370475][ T5135]  a822pgl
[  116.378684][ T5239] device dummy0 entered promiscuous mode
[  116.394267][ T5135]  a822pgh
[  116.403351][ T5135]  a823pgl
[  116.421512][ T5135]  a823pgh
[  116.437084][ T5135]  pcl813
[  116.441236][ T5135]  pcl813b
[  116.455838][ T5135]  acl8113
[  116.460249][ T5135]  iso813
[  116.485302][ T5135]  acl8216
[  116.502774][ T5135]  a826pg
[  116.505960][ T5135] comedi: valid board names for pcl730 driver are:
[  116.549262][ T5135]  pcl730
[  116.566982][ T5135]  iso730
[  116.581532][ T5135]  acl7130
[  116.598130][ T5135]  pcm3730
[  116.601589][ T5135]  pcl725
[  116.655390][ T5135]  p8r8dio
[  116.671311][ T5135]  acl7225b
[  116.682890][ T5135]  p16r16dio
[  116.709153][ T5135]  pcl733
[  116.714488][ T5135]  pcl734
[  116.718721][ T5135]  opmm-1616-xt
[  116.752735][ T5135]  pearl-mm-p
[  116.757483][ T5135]  ir104-pbf
[  116.777389][ T5135] comedi: valid board names for pcl726 driver are:
[  116.788509][ T5254] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[  116.805510][ T5135]  pcl726
[  116.819788][ T5135]  pcl727
[  116.831220][ T5135]  pcl728
[  116.843137][ T5135]  acl6126
[  116.875767][ T5135]  acl6128
[  116.884943][ T5135] comedi: valid board names for pcl724 driver are:
[  116.908054][ T5135]  pcl724
[  116.911870][ T5135]  pcl722
[  116.925908][ T5135]  pcl731
[  116.940941][ T5135]  acl7122
[  116.960581][ T5135]  acl7124
[  116.977153][ T5135]  pet48dio
[  116.992929][ T5135]  pcmio48
[  116.996869][ T5135]  onyx-mm-dio
[  117.011432][ T5135] comedi: valid board names for pcl711 driver are:
[  117.039379][ T5135]  pcl711
[  117.054262][ T5135]  pcl711b
[  117.057998][ T5135]  acl8112hg
[  117.072245][ T5135]  acl8112dg
[  117.090688][ T5135] comedi: valid board names for amplc_pc263 driver are:
[  117.109285][ T5135]  pc263
[  117.129671][ T5135] comedi: valid board names for amplc_pc236 driver are:
[  117.161880][ T5135]  pc36at
[  117.176309][ T5135] comedi: valid board names for amplc_dio200 driver are:
[  117.216417][ T5135]  pc212e
[  117.231549][ T5135]  pc214e
[  117.246530][ T5135]  pc215e
[  117.255339][ T5233] loop0: detected capacity change from 0 to 32768
[  117.262266][ T5135]  pc218e
[  117.286117][ T5135]  pc272e
[  117.291143][ T5135] comedi: valid board names for comedi_parport driver are:
[  117.303465][ T5135]  comedi_parport
[  117.308641][ T5135] comedi: valid board names for comedi_test driver are:
[  117.318862][ T5135]  comedi_test
[  117.325003][ T5135] comedi: valid board names for comedi_bond driver are:
[  117.337240][ T5233] XFS: attr2 mount option is deprecated.
[  117.345527][ T5135]  comedi_bond
[  117.441740][ T5280] loop3: detected capacity change from 0 to 512
[  117.458475][ T5233] XFS (loop0): Mounting V5 Filesystem
[  117.550727][ T5233] XFS (loop0): Ending clean mount
[  117.732887][ T4191] XFS (loop0): Unmounting Filesystem
[  117.765143][ T5280] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  117.812739][    T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  117.978241][ T5307] netlink: 16 bytes leftover after parsing attributes in process `syz.5.324'.
[  118.025627][ T5280] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.319: invalid indirect mapped block 4294967295 (level 0)
[  118.052803][    T7] usb 2-1: Using ep0 maxpacket: 16
[  118.143734][ T5280] EXT4-fs (loop3): Remounting filesystem read-only
[  118.150326][ T5280] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.319: invalid indirect mapped block 4294967295 (level 1)
[  118.204526][ T5280] EXT4-fs (loop3): Remounting filesystem read-only
[  118.223078][    T7] usb 2-1: unable to get BOS descriptor or descriptor too short
[  118.254176][ T5280] EXT4-fs (loop3): 1 orphan inode deleted
[  118.302786][ T5280] EXT4-fs (loop3): 1 truncate cleaned up
[  118.330133][ T5280] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,lazytime,block_validity,block_validity,block_validity,quota,jqfmt=vfsv0,. Quota mode: writeback.
[  118.374292][    T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  118.402861][    T7] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  118.437684][    T7] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  118.546627][ T5330] netlink: 8 bytes leftover after parsing attributes in process `syz.5.334'.
[  118.643344][    T7] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  118.674209][    T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.682504][    T7] usb 2-1: Product: syz
[  118.707926][    T7] usb 2-1: Manufacturer: syz
[  118.725318][ T5341] loop5: detected capacity change from 0 to 64
[  118.726466][    T7] usb 2-1: SerialNumber: syz
[  119.031018][    T7] usb 2-1: Audio class v2/v3 interfaces need an interface association
[  119.083851][ T5364] netlink: 20 bytes leftover after parsing attributes in process `syz.5.345'.
[  119.109568][    T7] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[  119.148559][ T3157] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  119.243029][    T7] usb 2-1: 2:1 : can't get High Capability descriptor
[  119.268416][ T5375] overlayfs: unrecognized mount option "\']*=°¢°­ô[\1\@" or missing value
[  119.449995][ T3157] usb 5-1: Using ep0 maxpacket: 32
[  119.473241][ T4505] usb 2-1: USB disconnect, device number 3
[  119.594698][ T3157] usb 5-1: config 0 has an invalid interface number: 35 but max is 0
[  119.613911][ T3157] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  119.627181][ T3157] usb 5-1: config 0 has no interface number 0
[  119.635686][ T3157] usb 5-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  119.689907][ T5393] netlink: 72 bytes leftover after parsing attributes in process `syz.3.356'.
[  119.730790][ T5393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.356'.
[  119.779429][ T5398] loop5: detected capacity change from 0 to 1024
[  119.838099][ T3157] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  119.858481][ T3157] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.891952][ T5398] hfsplus: invalid length 2325 has been corrected to 255
[  119.906437][ T3157] usb 5-1: Product: syz
[  119.930692][ T3157] usb 5-1: Manufacturer: syz
[  119.942921][ T3157] usb 5-1: SerialNumber: syz
[  119.943938][ T5398] hfsplus: invalid length 2325 has been corrected to 255
[  119.988951][ T3157] usb 5-1: config 0 descriptor??
[  120.054065][ T5398] hfsplus: invalid length 2325 has been corrected to 255
[  120.095658][ T3157] radio-si470x 5-1:0.35: could not find interrupt in endpoint
[  120.124308][ T3157] radio-si470x: probe of 5-1:0.35 failed with error -5
[  120.302967][ T3157] radio-raremono 5-1:0.35: this is not Thanko's Raremono.
[  120.303269][ T3157] usbhid 5-1:0.35: couldn't find an input interrupt endpoint
[  120.391372][ T5424] loop3: detected capacity change from 0 to 512
[  120.423399][ T5415] loop1: detected capacity change from 0 to 8192
[  120.491055][ T5415] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  120.504614][ T5415] REISERFS (device loop1): using ordered data mode
[  120.523181][ T3157] usb 5-1: USB disconnect, device number 3
[  120.607374][ T5415] reiserfs: using flush barriers
[  120.620317][ T5424] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  120.646465][ T5415] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  120.709829][ T5424] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c01c, mo2=0002]
[  120.735625][ T5415] REISERFS (device loop1): checking transaction log (loop1)
[  120.760855][ T5424] EXT4-fs (loop3): orphan cleanup on readonly fs
[  120.773969][ T5415] REISERFS (device loop1): Using r5 hash to sort names
[  120.841919][ T5424] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #13: comm syz.3.366: iget: bad i_size value: 12154761577498
[  120.857472][ T5415] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  120.895999][ T4235] kernel write not supported for file /111/net/sockstat6 (pid: 4235 comm: kworker/0:7)
[  120.911636][ T5415] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  120.924439][ T5424] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.366: couldn't read orphan inode 13 (err -117)
[  120.953435][ T5424] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,noblock_validity,nodelalloc,,errors=continue. Quota mode: none.
[  121.065915][   T26] audit: type=1326 audit(1790795821.719:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5447 comm="syz.5.374" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c5a49159 code=0x7ffc0000
[  121.097496][ T5415] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  121.119293][ T5415] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  121.145139][   T26] audit: type=1326 audit(1790795821.719:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5447 comm="syz.5.374" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c5a49159 code=0x7ffc0000
[  121.173428][ T5415] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  121.310171][   T26] audit: type=1326 audit(1790795821.719:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5447 comm="syz.5.374" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c5a49159 code=0x7ffc0000
[  121.416602][   T26] audit: type=1326 audit(1790795821.719:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5447 comm="syz.5.374" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fe0c5a49159 code=0x7ffc0000
[  121.530011][   T26] audit: type=1326 audit(1790795821.719:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5447 comm="syz.5.374" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c5a49159 code=0x7ffc0000
[  121.673795][   T26] audit: type=1326 audit(1790795821.719:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5447 comm="syz.5.374" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe0c5a49159 code=0x7ffc0000
[  121.700420][    C1] vkms_vblank_simulate: vblank timer overrun
[  121.739899][ T5474] loop0: detected capacity change from 0 to 4096
[  121.757341][ T5473] loop5: detected capacity change from 0 to 4096
[  121.822921][   T26] audit: type=1326 audit(1790795821.719:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5447 comm="syz.5.374" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe0c5a49159 code=0x7ffc0000
[  121.849828][ T5486] loop3: detected capacity change from 0 to 1024
[  121.963820][ T5486] hfsplus: invalid length 1280 has been corrected to 255
[  122.044518][ T5474] ntfs3: loop0: failed to convert "0080" to cp869
[  122.045505][ T5474] ntfs3: loop0: failed to convert name for inode 1e.
[  122.082025][ T4198] hfsplus: invalid length 1280 has been corrected to 255
[  122.660944][ T5503] loop0: detected capacity change from 0 to 4096
[  122.875799][  T154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.996799][  T154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.131560][ T5529] netlink: 'syz.4.402': attribute type 4 has an invalid length.
[  123.160828][  T154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.198319][ T5529] netlink: 'syz.4.402': attribute type 8 has an invalid length.
[  123.238115][ T5529] netlink: 197324 bytes leftover after parsing attributes in process `syz.4.402'.
[  123.298908][  T154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.643716][ T5554] loop5: detected capacity change from 0 to 256
[  123.888945][ T3157] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  124.026544][ T5564] loop5: detected capacity change from 0 to 16
[  124.102574][ T5564] erofs: (device loop5): mounted with root inode @ nid 36.
[  124.284467][ T5547] chnl_net:caif_netlink_parms(): no params data found
[  124.314479][ T3157] usb 5-1: config 1 has an invalid interface number: 7 but max is 0
[  124.339884][ T3157] usb 5-1: config 1 has no interface number 0
[  124.364277][ T3157] usb 5-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping
[  124.415470][ T3157] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.649858][ T3157] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  124.680357][ T3157] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.718299][ T3157] usb 5-1: Product: syz
[  124.735406][ T3157] usb 5-1: Manufacturer: syz
[  124.740767][ T3157] usb 5-1: SerialNumber: syz
[  124.817542][ T5552] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  124.861726][ T5547] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.885125][ T3157] usb 5-1: Expected 3 endpoints, found: 2
[  124.913996][ T5547] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.949920][ T5547] device bridge_slave_0 entered promiscuous mode
[  124.968602][ T5547] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.997513][ T5547] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.031076][ T5547] device bridge_slave_1 entered promiscuous mode
[  125.109763][ T5547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  125.157114][ T5547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  125.266556][ T5547] team0: Port device team_slave_0 added
[  125.437389][ T5547] team0: Port device team_slave_1 added
[  125.453153][ T5583] loop5: detected capacity change from 0 to 40427
[  125.491215][ T5622] loop1: detected capacity change from 0 to 512
[  125.522322][ T5547] batman_adv: batadv0: Adding interface: batadv_slave_0
[  125.541324][ T5583] F2FS-fs (loop5): Invalid SB checksum offset: 0
[  125.561543][ T5583] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  125.572696][ T5547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.581915][ T5622] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  125.638662][ T5583] F2FS-fs (loop5): invalid crc value
[  125.662984][ T4270] Bluetooth: hci3: command 0x0409 tx timeout
[  125.687591][ T5583] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  125.707373][ T5547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  125.801085][ T5622] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002]
[  125.820406][ T5622] EXT4-fs (loop1): orphan cleanup on readonly fs
[  125.831171][ T5547] batman_adv: batadv0: Adding interface: batadv_slave_1
[  125.882762][ T5547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.977866][ T5622] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3894: comm syz.1.430: Allocating blocks 41-42 which overlap fs metadata
[  126.024517][ T5547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  126.081788][ T5622] EXT4-fs (loop1): Remounting filesystem read-only
[  126.125560][ T5622] Quota error (device loop1): write_blk: dquota write failed
[  126.163661][ T5622] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  126.179495][  T154] device hsr_slave_0 left promiscuous mode
[  126.200781][ T5583] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  126.210789][  T154] device hsr_slave_1 left promiscuous mode
[  126.229484][ T5583] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  126.231253][ T5622] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.430: Failed to acquire dquot type 0
[  126.256451][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  126.281584][ T5622] EXT4-fs (loop1): Remounting filesystem read-only
[  126.286443][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  126.301902][ T5622] EXT4-fs error (device loop1): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  126.336295][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.355080][ T5622] EXT4-fs (loop1): Remounting filesystem read-only
[  126.361961][ T5622] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.430: corrupted inode contents
[  126.372972][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  126.388839][   T26] audit: type=1800 audit(1790795827.039:13): pid=5583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.416" name="file1" dev="loop5" ino=10 res=0 errno=0
[  126.416224][ T5622] EXT4-fs (loop1): Remounting filesystem read-only
[  126.430844][ T5622] EXT4-fs error (device loop1): ext4_dirty_inode:6087: inode #12: comm syz.1.430: mark_inode_dirty error
[  126.437816][  T154] device bridge_slave_1 left promiscuous mode
[  126.472937][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.482052][  T154] device bridge_slave_0 left promiscuous mode
[  126.492473][ T5622] EXT4-fs (loop1): Remounting filesystem read-only
[  126.494871][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.520591][ T5622] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.430: corrupted inode contents
[  126.545313][ T4326] attempt to access beyond end of device
[  126.545313][ T4326] loop5: rw=2049, want=45104, limit=40427
[  126.571837][  T154] device veth1_macvtap left promiscuous mode
[  126.583912][  T154] device veth0_macvtap left promiscuous mode
[  126.592022][ T4232] usb 5-1: USB disconnect, device number 4
[  126.594076][  T154] device veth1_vlan left promiscuous mode
[  126.614643][ T5622] EXT4-fs (loop1): Remounting filesystem read-only
[  126.648970][ T5622] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #12: comm syz.1.430: mark_inode_dirty error
[  126.663408][  T154] device veth0_vlan left promiscuous mode
[  126.687042][ T5622] EXT4-fs (loop1): Remounting filesystem read-only
[  126.697282][ T5622] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.430: corrupted inode contents
[  126.724779][ T5641] ip_tables: iptables: counters copy to user failed while replacing table
[  126.747697][ T5622] EXT4-fs (loop1): Remounting filesystem read-only
[  126.763284][ T5622] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  126.808450][ T5622] EXT4-fs (loop1): Remounting filesystem read-only
[  126.823597][ T5622] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.430: corrupted inode contents
[  126.853190][ T5622] EXT4-fs (loop1): Remounting filesystem read-only
[  126.866227][ T5622] EXT4-fs error (device loop1): ext4_truncate:4286: inode #12: comm syz.1.430: mark_inode_dirty error
[  126.878566][ T5624] loop0: detected capacity change from 0 to 32768
[  126.898099][ T5622] EXT4-fs (loop1): Remounting filesystem read-only
[  126.913101][ T5622] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  126.990826][ T5622] EXT4-fs (loop1): Remounting filesystem read-only
[  127.013974][ T5622] EXT4-fs (loop1): 1 truncate cleaned up
[  127.028397][ T5622] EXT4-fs (loop1): pa ffff8880744cf8c0: logic 1, phys. 41, len 23
[  127.039134][ T5622] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4904: group 0, free 22, pa_free 23
[  127.115310][ T5622] EXT4-fs (loop1): Remounting filesystem read-only
[  127.122470][ T5622] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,errors=remount-ro,data_err=ignore,debug,resgid=0x000000000000ee01,noinit_itable,noinit_itable,journal_dev=0x0000000000000afb2. Quota mode: writeback.
[  127.161102][ T5624] JBD2: Ignoring recovery information on journal
[  127.192349][ T5648] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma?
[  127.215918][ T5624] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75
[  127.300253][ T5624] JBD2: bad block at offset 32
[  127.394119][ T5624] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  127.511666][ T5624] ocfs2: Unmounting device (7,0) on (node local)
[  127.744400][ T3157] Bluetooth: hci3: command 0x041b tx timeout
[  127.961971][  T154] team0 (unregistering): Port device team_slave_1 removed
[  128.015374][  T154] team0 (unregistering): Port device team_slave_0 removed
[  128.063908][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  128.143013][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  128.273553][ T5657] loop4: detected capacity change from 0 to 40427
[  128.310704][ T5657] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  128.349723][ T5657] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  128.353277][ T5655] loop1: detected capacity change from 0 to 32768
[  128.405067][ T5657] F2FS-fs (loop4): invalid crc value
[  128.493362][ T5657] F2FS-fs (loop4): Found nat_bits in checkpoint
[  128.505332][ T5655] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop1 scanned by syz.1.435 (5655)
[  128.580892][  T154] bond0 (unregistering): Released all slaves
[  128.588665][ T5655] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  128.618460][ T5659] loop5: detected capacity change from 0 to 32768
[  128.639179][ T5655] BTRFS info (device loop1): using free space tree
[  128.663429][ T5655] BTRFS info (device loop1): has skinny extents
[  128.678924][ T5659] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz.5.438 (5659)
[  128.728957][ T5657] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  128.748109][ T5659] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  128.777580][ T5657] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  128.826593][ T5659] BTRFS info (device loop5): turning off barriers
[  128.845509][ T5547] device hsr_slave_0 entered promiscuous mode
[  128.923619][ T5547] device hsr_slave_1 entered promiscuous mode
[  128.932191][ T5659] BTRFS info (device loop5): enabling auto defrag
[  128.973492][ T5659] BTRFS info (device loop5): enabling ssd optimizations
[  128.980856][ T5659] BTRFS info (device loop5): using spread ssd allocation scheme
[  129.071572][ T5655] BTRFS info (device loop1): enabling ssd optimizations
[  129.084633][ T5659] BTRFS info (device loop5): using free space tree
[  129.142893][ T5659] BTRFS info (device loop5): has skinny extents
[  129.833126][ T4505] Bluetooth: hci3: command 0x040f tx timeout
[  129.938343][ T5547] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  130.210277][ T5547] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  130.286657][ T5547] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  130.401247][ T5547] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  130.521540][ T5745] loop0: detected capacity change from 0 to 8
[  130.990561][ T5759] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  131.200417][ T5768] loop4: detected capacity change from 0 to 256
[  131.225334][ T5547] 8021q: adding VLAN 0 to HW filter on device bond0
[  131.321356][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  131.352056][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  131.367242][ T5764] loop0: detected capacity change from 0 to 4096
[  131.384796][ T5771] loop1: detected capacity change from 0 to 128
[  131.408110][ T5547] 8021q: adding VLAN 0 to HW filter on device team0
[  131.500599][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  131.518985][ T5771] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  131.564916][ T5778] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  131.610646][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  131.634970][ T5771] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  131.733216][ T4518] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.743114][ T4518] bridge0: port 1(bridge_slave_0) entered forwarding state
[  131.789044][ T5771] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:510: comm syz.1.458: Block bitmap for bg 0 marked uninitialized
[  131.853699][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  131.943230][ T3157] Bluetooth: hci3: command 0x0419 tx timeout
[  131.951271][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  131.973561][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  132.021416][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.031895][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  132.133401][ T5754] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  132.149574][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  132.200578][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  132.279767][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  132.352053][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  132.385417][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  132.423797][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  132.459886][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  132.490292][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  132.521703][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  132.523801][ T5754] usb 6-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  132.595572][ T5754] usb 6-1: config 0 interface 0 has no altsetting 0
[  132.616418][ T5547] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  132.636184][ T5754] usb 6-1: New USB device found, idVendor=0079, idProduct=1803, bcdDevice= 0.00
[  132.648369][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  132.669635][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  132.671169][ T5754] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.700124][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  132.761068][ T5754] usb 6-1: config 0 descriptor??
[  133.194381][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  133.219490][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  133.258500][ T5754] hid_mf 0003:0079:1803.0008: hidraw0: USB HID v10.01 Device [HID 0079:1803] on usb-dummy_hcd.5-1/input0
[  133.281389][ T5547] 8021q: adding VLAN 0 to HW filter on device batadv0
[  133.317524][ T5844] loop1: detected capacity change from 0 to 512
[  133.329027][ T5754] hid_mf 0003:0079:1803.0008: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler <mahasler@gmail.com>
[  133.439416][ T5844] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  133.530979][ T3157] usb 6-1: USB disconnect, device number 3
[  133.642543][ T5844] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  133.712814][ T5854] fido_id[5854]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  133.780336][ T5844] EXT4-fs warning (device loop1): verify_group_input:147: Cannot add at group 49 (only 1 groups)
[  134.246080][ T5878] ip_tables: iptables: counters copy to user failed while replacing table
[  134.267429][ T5853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  134.291852][ T5853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  134.343517][   T23] usb 2-1: new low-speed USB device number 4 using dummy_hcd
[  134.380806][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  134.405467][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  134.453442][ T5547] device veth0_vlan entered promiscuous mode
[  134.464457][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  134.493599][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  134.519598][ T5547] device veth1_vlan entered promiscuous mode
[  134.665008][ T5853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  134.699203][ T5853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  134.732909][ T5547] device veth0_macvtap entered promiscuous mode
[  134.771516][ T5547] device veth1_macvtap entered promiscuous mode
[  134.800049][   T23] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 64, setting to 8
[  134.869724][   T23] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  134.899624][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.941764][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.955538][   T23] usb 2-1: config 0 interface 0 has no altsetting 0
[  134.973018][   T23] usb 2-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00
[  134.985197][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.009976][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.033789][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.052781][   T23] usb 2-1: config 0 descriptor??
[  135.071837][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.090855][ T5897] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  135.104855][ T5869] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  135.115897][ T5897] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  135.123539][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.152154][ T5897] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  135.179791][ T5875] loop4: detected capacity change from 0 to 32768
[  135.182399][ T5897] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  135.200668][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.234562][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.284740][ T5547] batman_adv: batadv0: Interface activated: batadv_slave_0
[  135.303501][ T5897] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  135.318185][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  135.334019][ T5897] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  135.341978][ T5897] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  135.359541][ T5897] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  135.373963][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  135.384769][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  135.396124][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  135.396150][ T5875] JBD2: Ignoring recovery information on journal
[  135.417920][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.430207][ T5897] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  135.449177][ T5897] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  135.462676][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.482962][ T5897] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  135.492892][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.507290][ T5897] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  135.547724][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.592711][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.616968][   T23] input: HID 17ef:60a4 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:17EF:60A4.0009/input/input12
[  135.632807][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.672753][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.697776][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.700070][ T5875] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  135.735525][ T5547] batman_adv: batadv0: Interface activated: batadv_slave_1
[  135.759706][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  135.795654][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  135.838030][ T5547] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.861005][   T23] lenovo 0003:17EF:60A4.0009: input,hiddev0,hidraw0: USB HID v0.01 Device [HID 17ef:60a4] on usb-dummy_hcd.1-1/input0
[  135.886508][ T5547] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.915084][ T5547] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.945866][   T23] usb 2-1: USB disconnect, device number 4
[  135.966357][ T5547] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  136.044784][ T4203] ocfs2: Unmounting device (7,4) on (node local)
[  136.229939][ T5889] loop5: detected capacity change from 0 to 40427
[  136.290341][ T5913] fido_id[5913]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  136.389888][ T5889] F2FS-fs (loop5): invalid crc value
[  136.443565][ T1275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.486077][ T1275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.500129][ T5889] F2FS-fs (loop5): Found nat_bits in checkpoint
[  136.541603][ T1276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.597674][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  136.599176][ T1276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.712572][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  136.803755][ T5889] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0
[  136.887570][ T5889] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  137.165854][ T5889] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=74736f6e, run fsck to fix.
[  137.207286][ T5951] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  137.241293][ T5951] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on.
[  137.590010][ T5965] loop4: detected capacity change from 0 to 1024
[  137.682790][ T5965] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  137.795373][ T5965] hfsplus: bad catalog entry type
[  138.090845][ T5942] loop6: detected capacity change from 0 to 32768
[  138.239400][ T5942] XFS (loop6): Mounting V5 Filesystem
[  138.394079][  T155] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.418155][ T5942] XFS (loop6): Ending clean mount
[  138.528061][  T155] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.543051][ T5752] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  138.559221][ T5547] XFS (loop6): Unmounting Filesystem
[  138.630676][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  138.654913][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  138.821916][  T155] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.851814][ T6010] loop4: detected capacity change from 0 to 2048
[  138.936526][ T5752] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  138.995128][ T5752] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  139.013113][ T6010] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  139.046903][  T155] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.062772][ T6010] NILFS (loop4): segment count 8142508126285856831 exceeds upper limit (1152921504606846975 segments)
[  139.106718][ T5752] usb 2-1: config 0 interface 0 has no altsetting 0
[  139.162720][ T5752] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00
[  139.210078][ T5752] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.345830][ T5752] usb 2-1: config 0 descriptor??
[  139.384276][ T5994] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  139.504446][ T6024] loop5: detected capacity change from 0 to 24
[  139.538196][ T6022] loop6: detected capacity change from 0 to 4096
[  139.897345][ T5752] kye 0003:0458:4018.000A: item 0 4 0 11 parsing failed
[  139.923981][ T5752] kye 0003:0458:4018.000A: parse failed
[  139.962138][ T5752] kye: probe of 0003:0458:4018.000A failed with error -22
[  140.100649][ T5752] usb 2-1: USB disconnect, device number 5
[  140.276133][ T6043] netlink: 72 bytes leftover after parsing attributes in process `syz.5.538'.
[  140.304399][ T6010] loop4: detected capacity change from 0 to 32768
[  140.321572][ T6010] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.531 (6010)
[  140.414834][ T6010] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  140.426822][ T6010] BTRFS info (device loop4): enabling ssd optimizations
[  140.446424][ T6010] BTRFS info (device loop4): not using ssd optimizations
[  140.485346][ T6010] BTRFS info (device loop4): turning off barriers
[  140.544472][ T6010] BTRFS info (device loop4): using free space tree
[  140.576105][ T6010] BTRFS info (device loop4): has skinny extents
[  140.655096][ T6023] chnl_net:caif_netlink_parms(): no params data found
[  140.875254][ T6081] loop5: detected capacity change from 0 to 128
[  141.113368][ T6081] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  141.250659][ T6081] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  141.584124][ T5752] Bluetooth: hci0: command 0x0409 tx timeout
[  141.781175][ T6061] loop1: detected capacity change from 0 to 32768
[  141.879652][ T6023] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.892850][ T6023] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.913280][ T6023] device bridge_slave_0 entered promiscuous mode
[  141.927768][ T6023] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.939422][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.950765][ T6023] device bridge_slave_1 entered promiscuous mode
[  141.989240][ T6023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  142.008098][ T6023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  142.098740][ T6061] XFS (loop1): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent.
[  142.125200][ T6023] team0: Port device team_slave_0 added
[  142.237599][ T6023] team0: Port device team_slave_1 added
[  142.363713][ T6023] batman_adv: batadv0: Adding interface: batadv_slave_0
[  142.380325][ T6023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.383827][ T5724] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  142.526148][ T6023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  142.579990][ T6023] batman_adv: batadv0: Adding interface: batadv_slave_1
[  142.603360][ T4192] XFS (loop1): Unmounting Filesystem
[  142.623059][ T6023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.722964][ T6023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  142.825119][ T5724] usb 6-1: too many endpoints for config 0 interface 0 altsetting 7: 132, using maximum allowed: 30
[  142.847651][ T5724] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 132
[  142.867864][ T5724] usb 6-1: config 0 interface 0 has no altsetting 0
[  142.880945][ T5724] usb 6-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00
[  142.902990][ T5724] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.963678][ T5724] usb 6-1: config 0 descriptor??
[  143.077670][ T6023] device hsr_slave_0 entered promiscuous mode
[  143.118954][ T6023] device hsr_slave_1 entered promiscuous mode
[  143.214769][ T6023] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  143.262766][ T6023] Cannot create hsr debugfs directory
[  143.387574][ T6149] loop6: detected capacity change from 0 to 256
[  143.446070][ T5724] saitek 0003:06A3:0CCD.000B: hidraw0: USB HID v28.a9 Device [HID 06a3:0ccd] on usb-dummy_hcd.5-1/input0
[  143.650733][ T5724] usb 6-1: USB disconnect, device number 4
[  143.674755][ T5752] Bluetooth: hci0: command 0x041b tx timeout
[  143.731098][ T6157] fido_id[6157]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  144.177814][  T155] device hsr_slave_0 left promiscuous mode
[  144.201566][  T155] device hsr_slave_1 left promiscuous mode
[  144.249492][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.265720][ T6172] netlink: 256 bytes leftover after parsing attributes in process `syz.4.569'.
[  144.281030][  T155] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.294993][ T6172] unsupported nlmsg_type 40
[  144.308899][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.329436][  T155] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.346537][  T155] device bridge_slave_1 left promiscuous mode
[  144.370278][  T155] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.432557][  T155] device bridge_slave_0 left promiscuous mode
[  144.446768][  T155] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.487420][  T155] device veth1_macvtap left promiscuous mode
[  144.506657][  T155] device veth0_macvtap left promiscuous mode
[  144.522176][  T155] device veth1_vlan left promiscuous mode
[  144.542561][  T155] device veth0_vlan left promiscuous mode
[  144.652548][ T6156] loop1: detected capacity change from 0 to 40427
[  144.701995][ T6156] F2FS-fs (loop1): invalid crc value
[  144.714756][ T6156] F2FS-fs (loop1): Found nat_bits in checkpoint
[  144.786122][ T6156] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0
[  144.810290][ T6156] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  145.040108][ T6156] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=74736f6e, run fsck to fix.
[  145.387652][  T155] team0 (unregistering): Port device team_slave_1 removed
[  145.416876][  T155] team0 (unregistering): Port device team_slave_0 removed
[  145.439663][  T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  145.462439][  T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  145.676580][  T155] bond0 (unregistering): Released all slaves
[  145.742786][ T5724] Bluetooth: hci0: command 0x040f tx timeout
[  145.780281][ T6023] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  145.854876][ T6023] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  145.916842][ T6023] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  145.958120][ T6198] loop6: detected capacity change from 0 to 512
[  146.001646][ T6023] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  146.042250][ T6198] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  146.098948][ T6205] loop5: detected capacity change from 0 to 128
[  146.115784][ T6204] capability: warning: `syz.4.579' uses deprecated v2 capabilities in a way that may be insecure
[  146.171872][ T6205] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  146.328836][ T6205] hpfs: filesystem error: improperly stopped
[  146.380498][ T6205] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  146.433548][ T6205] hpfs: You really don't want any checks? You are crazy...
[  146.445476][ T6023] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.469367][ T6215] loop6: detected capacity change from 0 to 512
[  146.492783][ T6205] hpfs: Code page index out of array
[  146.500280][ T6205] hpfs: code page support is disabled
[  146.554163][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  146.567033][ T6215] EXT4-fs (loop6): orphan cleanup on readonly fs
[  146.603377][ T6205] hpfs: hpfs_map_4sectors(): unaligned read
[  146.624746][ T6215] EXT4-fs warning (device loop6): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  146.644661][ T6215] EXT4-fs (loop6): Cannot turn on quotas: error -22
[  146.654579][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  146.662493][ T6215] EXT4-fs error (device loop6): ext4_ext_check_inode:501: inode #13: comm syz.6.581: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  146.694173][ T6205] hpfs: hpfs_map_4sectors(): unaligned read
[  146.699360][ T6215] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.581: couldn't read orphan inode 13 (err -117)
[  146.702142][ T6205] hpfs: filesystem error: unable to find root dir
[  146.733394][ T6215] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  146.770791][ T6023] 8021q: adding VLAN 0 to HW filter on device team0
[  146.801526][ T6205] 
[  146.809830][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  146.856504][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  146.893319][ T1275] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.902453][ T1275] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.949828][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  146.983553][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  147.058489][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  147.091209][ T1275] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.099220][ T1275] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.129044][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  147.152177][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  147.162832][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  147.203323][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  147.222972][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  147.258378][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  147.270310][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  147.298585][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  147.320983][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  147.348850][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  147.376557][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  147.404382][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  147.419546][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  147.444357][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  147.467010][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  147.483819][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  147.500692][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  147.539450][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  147.550182][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  147.573041][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  147.582188][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  147.595489][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  147.614845][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  147.625267][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  147.632115][ T5853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  147.653864][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  147.664177][ T5853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  147.692851][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  147.701843][ T6023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  147.722984][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  147.742875][ T4527] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  147.772822][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  147.791635][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  147.810630][ T6216] loop4: detected capacity change from 0 to 40427
[  147.843401][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  147.873071][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  147.893094][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  147.895039][ T6216] F2FS-fs (loop4): invalid crc value
[  147.936347][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  147.983520][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  147.989889][ T6216] F2FS-fs (loop4): Found nat_bits in checkpoint
[  148.037673][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  148.088425][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  148.121148][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  148.155294][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  148.172252][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  148.193657][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  148.211466][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  148.222539][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  148.249812][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  148.263672][ T6216] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0
[  148.282188][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  148.306432][ T6216] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  148.317738][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  148.343149][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  148.353497][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  148.366265][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  148.385598][ T6023] 8021q: adding VLAN 0 to HW filter on device batadv0
[  148.393218][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  148.393359][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  148.393509][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  148.414107][ T4527] usb 6-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40
[  148.439748][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  148.462766][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  148.481423][ T4527] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.496822][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  148.522763][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  148.530944][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  148.532877][ T4527] usb 6-1: Product: syz
[  148.573087][ T4527] usb 6-1: Manufacturer: syz
[  148.588183][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  148.598278][ T4527] usb 6-1: SerialNumber: syz
[  148.655290][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  148.688251][ T6216] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=74736f6e, run fsck to fix.
[  148.712788][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  148.722230][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  148.809025][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  148.819285][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  148.838346][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  148.860172][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  148.898437][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  148.931804][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  148.947395][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  148.972853][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  148.982047][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  149.012751][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  149.021859][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  149.052869][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  149.072786][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  149.081824][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  149.159401][ T5853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  149.182275][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  149.186559][ T5853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  149.242868][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  149.251468][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  149.279859][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  149.294374][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  149.313131][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  149.327394][ T4527] usb 6-1: USB disconnect, device number 5
[  149.330127][ T6023] device veth0_vlan entered promiscuous mode
[  149.350945][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  149.367198][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  149.380718][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  149.391864][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  149.405897][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  149.423222][ T6023] device veth1_vlan entered promiscuous mode
[  149.442100][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  149.480390][ T5735] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  149.532902][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  149.555218][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  149.590866][ T5735] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz1
[  149.603340][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  149.630243][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  149.666151][ T5753] Bluetooth: hci0: command 0x0419 tx timeout
[  149.680107][ T6023] device veth0_macvtap entered promiscuous mode
[  149.752901][ T6023] device veth1_macvtap entered promiscuous mode
[  149.833627][ T6272] fido_id[6272]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  149.859155][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.908542][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.911345][ T6275] netlink: 4 bytes leftover after parsing attributes in process `syz.6.591'.
[  149.943154][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.959079][ T5724] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  149.996983][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.042739][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.082880][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.119053][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.152792][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.212128][ T6023] batman_adv: batadv0: Interface activated: batadv_slave_0
[  150.281355][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  150.283894][ T5724] usb 2-1: device descriptor read/all, error -71
[  150.333698][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  150.371262][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  150.411370][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  150.461678][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.492291][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.539622][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.603245][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.655454][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.703124][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.750328][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.782518][ T6299] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  150.801880][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.852856][ T6023] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.864882][ T6292] loop5: detected capacity change from 0 to 8192
[  150.881137][ T6288] netlink: 24 bytes leftover after parsing attributes in process `syz.1.595'.
[  150.901842][ T4518] bond0: (slave bond_slave_0): interface is now down
[  150.916858][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  150.929891][ T4518] bond0: (slave bond_slave_1): interface is now down
[  150.954641][ T6292] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  150.956388][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  150.992928][ T4237] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  151.062898][ T6292] REISERFS (device loop5): using ordered data mode
[  151.091734][ T6023] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.114634][ T6023] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.130099][ T1276] bond0: (slave bond_slave_0): interface is now down
[  151.141640][ T6292] reiserfs: using flush barriers
[  151.150113][ T1276] bond0: (slave bond_slave_1): interface is now down
[  151.160259][ T6023] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.182542][ T6292] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  151.204173][ T6023] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  151.224648][ T6292] REISERFS (device loop5): checking transaction log (loop5)
[  151.351602][ T5516] bond0: (slave bond_slave_0): interface is now down
[  151.401453][ T5516] bond0: (slave bond_slave_1): interface is now down
[  151.425502][ T4237] usb 7-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30
[  151.439797][ T5724] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  151.475429][ T4237] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  151.520262][ T4237] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  151.515476][ T5516] bond0: now running without any active interface!
[  151.552144][ T4237] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  151.576199][ T4237] usb 7-1: config 0 interface 0 has no altsetting 0
[  151.588704][ T4237] usb 7-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00
[  151.601566][ T6292] REISERFS (device loop5): Using tea hash to sort names
[  151.607189][ T4237] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.636143][ T6292] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  151.646033][ T4237] usb 7-1: config 0 descriptor??
[  151.682369][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.700774][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.738627][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  151.750153][ T5724] usb 2-1: Using ep0 maxpacket: 16
[  151.788259][ T5516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.819031][ T5516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.843677][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  151.893087][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.156416][ T4237] hid-alps 0003:044E:120C.000D: unknown main item tag 0x0
[  152.208467][ T4237] hid-alps 0003:044E:120C.000D: hidraw0: USB HID v0.04 Device [HID 044e:120c] on usb-dummy_hcd.6-1/input0
[  152.298891][ T6317] loop4: detected capacity change from 0 to 32768
[  152.310146][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  152.321575][ T5724] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  152.338876][ T5724] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  152.362179][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.379374][ T4237] usb 7-1: USB disconnect, device number 2
[  152.403905][ T5724] usb 2-1: config 0 descriptor??
[  152.425980][ T6317] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  152.435035][ T6317] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  152.468270][ T6317] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  152.468270][ T6317]   inode = 1 18
[  152.468270][ T6317]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 453
[  152.494011][ T6317] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  152.511950][ T6317] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  152.524528][ T6317] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  152.533533][ T6317] gfs2: fsid=syz:syz.0: File system withdrawn
[  152.542275][ T6317] CPU: 0 PID: 6317 Comm: syz.4.602 Not tainted syzkaller #0
[  152.550875][ T6317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  152.562901][ T6317] Call Trace:
[  152.567038][ T6317]  <TASK>
[  152.571693][ T6317]  dump_stack_lvl+0x188/0x250
[  152.577924][ T6317]  ? show_regs_print_info+0x20/0x20
[  152.585259][ T6317]  ? load_image+0x410/0x410
[  152.591521][ T6317]  ? lockref_put_or_lock+0x6e/0xb0
[  152.597059][ T6317]  gfs2_withdraw+0xb9a/0x14e0
[  152.603656][ T6317]  ? gfs2_meta_new+0x160/0x160
[  152.609559][ T6317]  ? gfs2_lm+0x240/0x240
[  152.615385][ T6317]  ? make_kgid+0x1c4/0x650
[  152.620696][ T6317]  ? gfs2_consist_inode_i+0xc0/0xe0
[  152.628867][ T6317]  gfs2_inode_refresh+0xc80/0x11a0
[  152.636714][ T6317]  ? gfs2_inode_metasync+0xf0/0xf0
[  152.644252][ T6317]  inode_go_lock+0x127/0x450
[  152.653014][ T6317]  do_promote+0x75b/0xb20
[  152.658641][ T6317]  finish_xmote+0x4c2/0xaf0
[  152.664088][ T6317]  do_xmote+0x752/0x10a0
[  152.669234][ T6317]  gfs2_glock_nq+0xc6b/0x1510
[  152.675323][ T6317]  init_journal+0xcc2/0x22d0
[  152.681217][ T6317]  ? end_bio_io_page+0x100/0x100
[  152.686949][ T6317]  ? vsnprintf+0x1b22/0x1c20
[  152.692434][ T6317]  ? snprintf+0xe5/0x140
[  152.699266][ T6317]  ? init_journal+0x749/0x22d0
[  152.712474][ T6317]  ? vscnprintf+0x80/0x80
[  152.719412][ T6317]  ? gfs2_glock_nq_num+0x170/0x1b0
[  152.725584][ T6317]  init_inodes+0xdb/0x320
[  152.732046][ T6317]  gfs2_fill_super+0x1671/0x1ea0
[  152.738344][ T6317]  ? gfs2_reconfigure+0xd80/0xd80
[  152.745307][ T6317]  ? gfs2_glock_nq_num+0x7e/0x1b0
[  152.752930][ T6317]  ? sb_set_blocksize+0xa5/0xe0
[  152.760199][ T6317]  get_tree_bdev+0x3e6/0x610
[  152.768199][ T6317]  ? gfs2_reconfigure+0xd80/0xd80
[  152.774102][ T6317]  gfs2_get_tree+0x4d/0x1e0
[  152.780792][ T6317]  vfs_get_tree+0x88/0x270
[  152.786919][ T6317]  do_new_mount+0x247/0xa40
[  152.793895][ T6317]  __se_sys_mount+0x2e3/0x3d0
[  152.803854][ T6317]  ? __x64_sys_mount+0xc0/0xc0
[  152.812002][ T6317]  ? lockdep_hardirqs_on+0x94/0x140
[  152.818499][ T6317]  ? __x64_sys_mount+0x1c/0xc0
[  152.825179][ T6317]  do_syscall_64+0x4c/0xa0
[  152.832245][ T6317]  ? clear_bhb_loop+0x30/0x80
[  152.838360][ T6317]  ? clear_bhb_loop+0x30/0x80
[  152.844461][ T6317]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  152.852515][ T6317] RIP: 0033:0x7f7f611123ca
[  152.858946][ T6317] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  152.882819][ T6317] RSP: 002b:00007f7f5f368e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  152.894818][ T6317] RAX: ffffffffffffffda RBX: 00007f7f5f368ee0 RCX: 00007f7f611123ca
[  152.906710][ T6317] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007f7f5f368ea0
[  152.917676][ T6317] RBP: 00002000000124c0 R08: 00007f7f5f368ee0 R09: 0000000000000000
[  152.926487][ T6317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500
[  152.936609][ T6317] R13: 00007f7f5f368ea0 R14: 0000000000012620 R15: 0000200000000180
[  152.946194][ T6317]  </TASK>
[  152.952380][ T6317] gfs2: fsid=syz:syz.0: can't acquire journal inode glock: -5
[  153.024527][ T6329] loop5: detected capacity change from 0 to 512
[  153.140252][ T5724] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000E/input/input13
[  153.175077][ T5724] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  153.253154][ T6325] fido_id[6325]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  153.295501][ T6329] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  153.371507][ T4529] usb 2-1: USB disconnect, device number 7
[  153.480224][ T6329] EXT4-fs error (device loop5): ext4_orphan_get:1410: inode #15: comm syz.5.603: inode has both inline data and extents flags
[  153.504149][ T6329] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.603: couldn't read orphan inode 15 (err -117)
[  153.602911][ T6329] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc=0x0000000000000002,discard,dioread_nolock,debug_want_extra_isize=0x0000000000000004,,errors=continue. Quota mode: none.
[  153.757852][ T6351] fido_id[6351]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  154.002430][ T6366] loop7: detected capacity change from 0 to 1024
[  154.583828][ T6387] netlink: 'syz.5.623': attribute type 2 has an invalid length.
[  154.768863][ T6392] bridge0: port 3(veth0_vlan) entered blocking state
[  154.807212][ T6392] bridge0: port 3(veth0_vlan) entered disabled state
[  154.832782][ T5752] usb 8-1: new low-speed USB device number 2 using dummy_hcd
[  154.855994][ T6394] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '
'
[  154.914631][ T6348] loop4: detected capacity change from 0 to 32768
[  155.025578][ T6360] loop6: detected capacity change from 0 to 32768
[  155.080304][ T6348] XFS (loop4): Mounting V5 Filesystem
[  155.108477][ T6402] usb usb7: check_ctrlrecip: process 6402 (syz.1.629) requesting ep 01 but needs 81
[  155.164327][ T6360] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop6 scanned by syz.6.615 (6360)
[  155.209733][ T6360] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm
[  155.213540][ T5752] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  155.242435][ T5752] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8
[  155.255081][ T5752] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[  155.275279][ T5752] usb 8-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00
[  155.286034][ T5752] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.309327][ T5752] usb 8-1: config 0 descriptor??
[  155.327179][ T6360] BTRFS info (device loop6): using free space tree
[  155.334466][ T6381] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  155.387677][ T6348] XFS (loop4): Ending clean mount
[  155.401756][ T6360] BTRFS info (device loop6): has skinny extents
[  155.554668][ T4203] XFS (loop4): Unmounting Filesystem
[  155.774091][ T6360] BTRFS info (device loop6): enabling ssd optimizations
[  155.841289][ T5752] hid (null): unknown global tag 0xa3
[  155.872309][ T5752] asus 0003:0B05:17E0.000F: unexpected long global item
[  155.915625][ T5752] asus 0003:0B05:17E0.000F: Asus hid parse failed: -22
[  155.970091][ T5752] asus: probe of 0003:0B05:17E0.000F failed with error -22
[  156.048314][ T5753] usb 8-1: USB disconnect, device number 2
[  156.717603][ T6417] loop1: detected capacity change from 0 to 32768
[  157.431823][ T6481] loop1: detected capacity change from 0 to 8192
[  157.450234][ T6488] loop7: detected capacity change from 0 to 4096
[  157.529507][ T6481] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  157.564019][ T6481] REISERFS (device loop1): using journaled data mode
[  157.576527][ T6481] reiserfs: using flush barriers
[  157.588943][ T6481] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  157.615274][ T6488] ntfs: (device loop7): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  157.673294][ T6481] REISERFS (device loop1): checking transaction log (loop1)
[  157.736261][ T6481] REISERFS (device loop1): Using r5 hash to sort names
[  157.753904][ T6488] ntfs: (device loop7): ntfs_mapping_pairs_decompress(): Corrupt attribute.  deltaxcn = 0x1, max_cluster = 0x0
[  157.807636][ T6488] ntfs: (device loop7): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute.
[  157.833852][ T6481] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  157.873100][ T6488] ntfs: (device loop7): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  157.946055][ T6481] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  157.970939][ T6488] ntfs: (device loop7): ntfs_mapping_pairs_decompress(): Corrupt attribute.  deltaxcn = 0x1, max_cluster = 0x0
[  158.048219][ T6488] ntfs: (device loop7): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute.
[  158.121599][ T6488] ntfs: (device loop7): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5).
[  158.236511][ T6488] ntfs: (device loop7): check_mft_mirror(): Failed to read $MFTMirr.
[  158.310753][ T6471] loop5: detected capacity change from 0 to 32768
[  158.325947][ T6488] ntfs: (device loop7): load_system_files(): $MFTMirr does not match $MFT.  Will not be able to remount read-write.  Run ntfsfix and/or chkdsk.
[  158.423701][ T6488] ntfs: (device loop7): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  158.471756][ T6488] ntfs: volume version 3.1.
[  158.517095][ T6471] XFS (loop5): Mounting V5 Filesystem
[  158.696542][ T6471] XFS (loop5): Ending clean mount
[  158.816343][ T6528] loop1: detected capacity change from 0 to 512
[  158.897630][ T6528] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  158.933505][ T4326] XFS (loop5): Unmounting Filesystem
[  158.945269][ T6528] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  158.957563][ T6528] System zones: 0-1, 15-15, 18-18, 34-34
[  158.966148][ T6528] EXT4-fs (loop1): orphan cleanup on readonly fs
[  158.974868][ T6528] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  158.999738][ T6528] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  159.011046][ T6528] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.660: bg 0: block 40: padding at end of block bitmap is not set
[  159.039484][ T6528] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  159.062137][ T6528] EXT4-fs (loop1): 1 truncate cleaned up
[  159.069908][ T6528] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  159.389042][ T6538] loop1: detected capacity change from 0 to 256
[  159.899509][ T6530] loop7: detected capacity change from 0 to 32768
[  159.940999][ T6556] tipc: Enabling <ib:lo> not permitted
[  159.966551][ T6556] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  160.011401][ T6530] add_index: next_index = 0.  Resetting!
[  160.045582][ T6530] non-latin1 character 0x3ff found in JFS file name
[  160.070355][ T6530] mount with iocharset=utf8 to access
[  160.181362][ T6564] tipc: Started in network mode
[  160.214072][ T6564] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  160.229651][ T6564] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  160.242528][ T6564] tipc: Enabled bearer <udp:syz0>, priority 10
[  160.257587][ T6566] loop4: detected capacity change from 0 to 1024
[  160.763065][ T4513] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  160.978993][ T6589] lec:lec_atm_close: lec0: Shut down!
[  161.112032][ T6571] loop1: detected capacity change from 0 to 32768
[  161.152123][ T6598] loop4: detected capacity change from 0 to 4096
[  161.209352][ T6571] JBD2: Ignoring recovery information on journal
[  161.243367][ T6598] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  161.299760][ T6571] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  161.314701][ T4513] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  161.335845][ T4513] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  161.356732][ T5735] tipc: Node number set to 1
[  161.373621][ T4513] usb 8-1: Product: syz
[  161.392703][ T4513] usb 8-1: SerialNumber: syz
[  161.441332][ T4513] usb 8-1: config 0 descriptor??
[  161.526801][ T4192] ocfs2: Unmounting device (7,1) on (node local)
[  161.730985][ T6620] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.686'.
[  161.747277][ T6620] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4.
[  161.758297][ T4513] hso 8-1:0.0: Failed to find BULK IN ep
[  161.864339][ T6623] netlink: 16 bytes leftover after parsing attributes in process `syz.4.687'.
[  161.916390][ T6623] netlink: 'syz.4.687': attribute type 1 has an invalid length.
[  161.972957][ T5735] usb 8-1: USB disconnect, device number 3
[  162.229048][ T6640] lo speed is unknown, defaulting to 1000
[  162.249095][ T6640] lo speed is unknown, defaulting to 1000
[  162.292047][ T6640] lo speed is unknown, defaulting to 1000
[  162.348406][ T6640] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  162.400630][ T6640] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  162.511146][ T6653] loop5: detected capacity change from 0 to 4096
[  162.588620][ T6650] loop4: detected capacity change from 0 to 8192
[  162.609065][ T6640] lo speed is unknown, defaulting to 1000
[  162.627448][ T6640] lo speed is unknown, defaulting to 1000
[  162.642015][ T6640] lo speed is unknown, defaulting to 1000
[  162.713613][ T6650] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  162.743076][ T6640] lo speed is unknown, defaulting to 1000
[  162.751186][ T6640] lo speed is unknown, defaulting to 1000
[  162.758953][ T6663] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  162.830293][ T6650] REISERFS (device loop4): using ordered data mode
[  162.892034][ T6650] reiserfs: using flush barriers
[  162.938726][ T6653] NILFS (loop5): nilfs_sufile_do_free: segment 9 is already clean
[  162.987607][ T6650] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  163.114830][ T6650] REISERFS (device loop4): checking transaction log (loop4)
[  163.151841][ T6650] REISERFS (device loop4): Using r5 hash to sort names
[  163.221886][ T6650] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  163.293019][ T6650] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  163.455704][ T6681] loop5: detected capacity change from 0 to 4096
[  163.607549][ T6692] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  163.651547][ T6681] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0
[  163.807628][ T6681] Remounting filesystem read-only
[  163.973433][ T4519] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  164.166697][ T6710] loop6: detected capacity change from 0 to 4096
[  164.297279][ T4519] usb 2-1: Using ep0 maxpacket: 32
[  164.360061][ T6725] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  164.433400][ T6710] NILFS (loop6): nilfs_sufile_do_free: segment 9 is already clean
[  164.503310][ T4519] usb 2-1: unable to get BOS descriptor or descriptor too short
[  164.576300][ T6732] netlink: 16 bytes leftover after parsing attributes in process `syz.7.722'.
[  164.637241][ T4519] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  164.652991][ T6732] netlink: 'syz.7.722': attribute type 1 has an invalid length.
[  164.682831][ T4519] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  164.750203][ T6735] loop6: detected capacity change from 0 to 256
[  164.913162][ T4519] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  164.952998][ T4519] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.984108][ T4519] usb 2-1: Product: syz
[  164.990884][ T4519] usb 2-1: Manufacturer: syz
[  165.023316][ T4519] usb 2-1: SerialNumber: syz
[  165.143229][ T3852] lec:lec_start_xmit: lec0:No lecd attached
[  165.170847][ T6721] loop4: detected capacity change from 0 to 32768
[  165.337278][ T6721] JBD2: Ignoring recovery information on journal
[  165.518789][ T6760] loop7: detected capacity change from 0 to 128
[  165.533147][ T4519] usb 2-1: cannot find UAC_HEADER
[  165.550930][ T6721] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  165.632828][ T6760] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  165.669936][ T4519] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[  165.707891][ T6760] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  165.745023][ T4519] usb 2-1: USB disconnect, device number 8
[  166.008470][ T4203] ocfs2: Unmounting device (7,4) on (node local)
[  166.022465][ T6774] loop6: detected capacity change from 0 to 128
[  166.064207][ T4334] udevd[4334]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  166.097065][ T6776] loop7: detected capacity change from 0 to 256
[  166.148550][ T6774] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  166.268207][ T6774] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  166.626893][ T6791] 0x000200000001-0x000277594ace : ""
[  166.626948][ T6791] mtd: partition "" is out of reach -- disabled
[  166.639221][ T6791] ftl_cs: FTL header not found.
[  166.879346][ T6799] loop6: detected capacity change from 0 to 64
[  167.348767][ T6825] exfat: Deprecated parameter 'utf8'
[  167.463931][ T6827] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  167.499841][ T6831] 0x000200000001-0x000277594ace : ""
[  167.530553][ T6831] mtd: partition "" is out of reach -- disabled
[  167.544790][ T6825] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  167.570199][ T6827] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  167.615039][ T6831] ftl_cs: FTL header not found.
[  167.699384][ T6841] set_capacity_and_notify: 2 callbacks suppressed
[  167.699401][ T6841] loop7: detected capacity change from 0 to 64
[  167.976380][ T6848] loop4: detected capacity change from 0 to 256
[  168.059723][ T6848] exfat: Deprecated parameter 'utf8'
[  168.166899][ T6848] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  168.202027][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.5.760'.
[  168.283864][ T6863] loop1: detected capacity change from 0 to 64
[  168.410769][ T6861] loop6: detected capacity change from 0 to 4096
[  168.604034][ T6861] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  168.623795][ T6872] loop7: detected capacity change from 0 to 2048
[  168.645387][ T6876] loop4: detected capacity change from 0 to 1024
[  168.714749][ T6861] ntfs3: loop6: failed to convert "0080" to macturkish
[  168.795428][ T6861] ntfs3: loop6: failed to convert name for inode 1e.
[  168.807335][ T6881] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  168.839417][ T6876] hfsplus: invalid length 1280 has been corrected to 255
[  169.007529][ T6888] loop5: detected capacity change from 0 to 256
[  169.546673][ T6915] netlink: 48 bytes leftover after parsing attributes in process `syz.5.778'.
[  169.651659][ T6923] loop7: detected capacity change from 0 to 128
[  169.745300][ T6923] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  169.831315][ T6923] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  169.843357][ T6925] loop6: detected capacity change from 0 to 2048
[  169.864335][ T6927] loop5: detected capacity change from 0 to 4096
[  169.957551][ T6927] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  170.008570][ T6933] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  170.053135][ T6927] NILFS (loop5): mounting unchecked fs
[  170.061776][ T6927] NILFS (loop5): recovery required for readonly filesystem
[  170.125678][ T6927] NILFS (loop5): write access will be enabled during recovery
[  170.211388][ T4330] udevd[4330]: incorrect nilfs2 checksum on /dev/loop5
[  170.292893][ T6927] NILFS (loop5): norecovery option specified, skipping roll-forward recovery
[  170.431901][ T4334] udevd[4334]: incorrect nilfs2 checksum on /dev/loop5
[  170.754299][ T6951] EXT4-fs (loop7): Ignoring removed orlov option
[  170.791016][ T6962] ubi: mtd0 is already attached to ubi0
[  170.859476][ T6951] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpjquota=,orlov,bsddf,auto_da_alloc=0x0000000000000004,,errors=continue. Quota mode: writeback.
[  171.049373][ T6918] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1ffff
[  171.133161][ T6918] F2FS-fs (loop1): invalid crc value
[  171.217713][ T6918] F2FS-fs (loop1): Found nat_bits in checkpoint
[  171.277443][ T4329]  loop5: p1 < >
[  171.323728][ T6975]  loop5: p1 < >
[  171.421569][ T6918] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  171.483270][ T5752] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  171.514554][ T4334] udevd[4334]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  171.625462][ T6997] ubi: mtd0 is already attached to ubi0
[  171.649466][ T4334] udevd[4334]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  171.923013][ T5752] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  171.956799][ T5752] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.042504][ T5752] usb 8-1: config 0 descriptor??
[  172.084388][ T5752] cp210x 8-1:0.0: cp210x converter detected
[  172.291515][ T7022]  loop6: p1 < >
[  172.331487][ T3559]  loop6: p1 < >
[  172.526775][ T5752] usb 8-1: cp210x converter now attached to ttyUSB0
[  172.556018][ T4330] udevd[4330]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  172.736536][ T4507] usb 8-1: USB disconnect, device number 4
[  172.774163][ T4507] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  172.804586][ T7042] netlink: 20 bytes leftover after parsing attributes in process `syz.1.823'.
[  172.826029][ T4507] cp210x 8-1:0.0: device disconnected
[  173.181610][ T7063] netlink: 16 bytes leftover after parsing attributes in process `syz.1.841'.
[  173.337619][ T7036] set_capacity_and_notify: 4 callbacks suppressed
[  173.337638][ T7036] loop6: detected capacity change from 0 to 40427
[  173.384703][ T7069] loop7: detected capacity change from 0 to 64
[  173.477002][ T7036] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x1ffff
[  173.526241][ T7036] F2FS-fs (loop6): invalid crc value
[  173.590383][ T7036] F2FS-fs (loop6): Found nat_bits in checkpoint
[  173.802020][ T7036] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  173.832661][    C1] ------------[ cut here ]------------
[  173.839918][    C1] NETDEV WATCHDOG: lec0 (): transmit queue 0 timed out
[  173.849678][    C1] WARNING: CPU: 1 PID: 7034 at net/sched/sch_generic.c:481 dev_watchdog+0x85d/0xa40
[  173.860697][    C1] Modules linked in:
[  173.867671][    C1] CPU: 1 PID: 7034 Comm: syz.6.822 Not tainted syzkaller #0
[  173.877885][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.835'.
[  173.878494][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  173.903353][    C1] RIP: 0010:dev_watchdog+0x85d/0xa40
[  173.909059][    C1] Code: f6 71 05 01 48 8b 5c 24 20 48 89 df e8 9c d6 e3 ff 48 c7 c7 80 53 22 8b 48 89 de 48 8b 1c 24 48 89 c2 44 89 e1 e8 d3 d8 b0 01 <0f> 0b e9 51 fe ff ff e8 97 a3 73 f9 0f 0b e9 33 fe ff ff 89 d9 80
[  173.934367][    C1] RSP: 0000:ffffc90000dd0af0 EFLAGS: 00010246
[  173.940950][    C1] RAX: 4fb6a82ac8c0b600 RBX: ffff8880197e4448 RCX: ffff888022dabb80
[  173.953153][    C1] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000
[  173.962194][    C1] RBP: dffffc0000000000 R08: ffffc90000dd0627 R09: 1ffff920001ba0c4
[  173.972141][    C1] R10: dffffc0000000000 R11: fffff520001ba0c5 R12: 0000000000000000
[  173.981950][    C1] R13: ffff8880197e4540 R14: 0000000000000000 R15: dffffc0000000000
[  173.991202][    C1] FS:  00005555891f5500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  174.001074][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  174.008129][    C1] CR2: 0000001b2e923ff8 CR3: 000000007e5c8000 CR4: 00000000003506e0
[  174.017111][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  174.027776][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  174.036660][    C1] Call Trace:
[  174.040340][    C1]  <IRQ>
[  174.043309][    C1]  ? dev_init_scheduler+0x360/0x360
[  174.049767][    C1]  call_timer_fn+0x17b/0x540
[  174.054641][    C1]  ? dev_init_scheduler+0x360/0x360
[  174.061497][    C1]  ? __run_timers+0x810/0x810
[  174.068249][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  174.074821][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  174.081994][    C1]  ? dev_init_scheduler+0x360/0x360
[  174.088615][    C1]  __run_timers+0x56c/0x810
[  174.095119][    C1]  ? detach_timer+0x2b0/0x2b0
[  174.100307][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  174.107090][    C1]  ? sched_clock_cpu+0x15/0x3c0
[  174.112048][    C1]  ? seqcount_lockdep_reader_access+0x177/0x1d0
[  174.118948][    C1]  run_timer_softirq+0x63/0xf0
[  174.123927][    C1]  handle_softirqs+0x336/0x830
[  174.128955][    C1]  ? __irq_exit_rcu+0x13b/0x230
[  174.133982][    C1]  ? do_softirq+0x210/0x210
[  174.139512][    C1]  ? hrtimer_interrupt+0x6a2/0x8b0
[  174.145580][    C1]  __irq_exit_rcu+0x13b/0x230
[  174.150939][    C1]  ? irq_exit_rcu+0x20/0x20
[  174.155560][    C1]  irq_exit_rcu+0x5/0x20
[  174.162367][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  174.169200][    C1]  </IRQ>
[  174.172370][    C1]  <TASK>
[  174.175507][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  174.183258][    C1] RIP: 0010:__find_get_block+0x268/0x10d0
[  174.190416][    C1] Code: fe 10 a1 ff 49 83 c6 08 49 ff cc e9 f4 fe ff ff e8 ed 10 a1 ff 31 db 49 bc 00 00 00 00 00 fc ff df e8 ac 3c a7 ff fb 48 85 db <74> 5e e8 d1 10 a1 ff 48 89 df e8 69 d9 ff ff 48 c7 44 24 60 0e 36
[  174.211851][    C1] RSP: 0000:ffffc90003387560 EFLAGS: 00000246
[  174.219150][    C1] RAX: 4fb6a82ac8c0b600 RBX: 0000000000000000 RCX: 4fb6a82ac8c0b600
[  174.230708][    C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a48c0
[  174.240316][    C1] RBP: ffffc900033876a8 R08: ffffffff901f116f R09: 1ffffffff203e22d
[  174.250904][    C1] R10: dffffc0000000000 R11: fffffbfff203e22e R12: dffffc0000000000
[  174.263438][    C1] R13: 000000000000010f R14: 00000000000365f0 R15: 0000000000000110
[  174.274645][    C1]  ? write_boundary_block+0x150/0x150
[  174.280739][    C1]  ? rcu_lock_release+0x5/0x20
[  174.286731][    C1]  ? __lock_acquire+0x7b50/0x7b50
[  174.293949][    C1]  ? ext4_dirty_inode+0x8b/0x100
[  174.300108][    C1]  ? generic_update_time+0x1cd/0x1f0
[  174.306659][    C1]  ? file_update_time+0x3c0/0x440
[  174.313774][    C1]  ? ext4_page_mkwrite+0x1bc/0x1250
[  174.320118][    C1]  __getblk_gfp+0x2c/0xb20
[  174.325013][    C1]  ? ext4_get_group_desc+0x433/0x4d0
[  174.333489][    C1]  __ext4_get_inode_loc+0x45b/0xcb0
[  174.339129][    C1]  ? ext4_get_inode_loc+0x120/0x120
[  174.346212][    C1]  ? __might_sleep+0xf0/0xf0
[  174.352311][    C1]  ? slab_post_alloc_hook+0x68/0x380
[  174.358058][    C1]  ext4_reserve_inode_write+0x140/0x2e0
[  174.367010][    C1]  __ext4_mark_inode_dirty+0x13b/0x6c0
[  174.373389][    C1]  ext4_dirty_inode+0xbf/0x100
[  174.379360][    C1]  ? __ext4_expand_extra_isize+0x3e0/0x3e0
[  174.387909][    C1]  __mark_inode_dirty+0x2c8/0xc90
[  174.395233][    C1]  generic_update_time+0x1cd/0x1f0
[  174.401403][    C1]  file_update_time+0x3c0/0x440
[  174.407763][    C1]  ? file_remove_privs+0x5d0/0x5d0
[  174.413067][    C1]  ? mark_lock+0x94/0x320
[  174.417475][    C1]  ext4_page_mkwrite+0x1bc/0x1250
[  174.423011][    C1]  ? mapping_seek_hole_data+0x1300/0x1300
[  174.430369][    C1]  ? pte_alloc_one+0x287/0x310
[  174.435631][    C1]  ? ext4_change_inode_journal_flag+0x710/0x710
[  174.442288][    C1]  ? count_memcg_event_mm+0x324/0x370
[  174.450274][    C1]  ? remove_device_exclusive_entry+0xac0/0xac0
[  174.457405][    C1]  ? verify_lock_unused+0x140/0x140
[  174.463967][    C1]  do_page_mkwrite+0x168/0x3c0
[  174.469611][    C1]  handle_mm_fault+0x1e47/0x4440
[  174.477903][    C1]  ? get_page+0xe0/0xe0
[  174.482160][    C1]  ? vmacache_find+0x4f0/0x590
[  174.487929][    C1]  ? vmacache_update+0xa0/0x100
[  174.494115][    C1]  ? find_vma+0x1df/0x230
[  174.499424][    C1]  do_user_addr_fault+0x494/0xc90
[  174.504847][    C1]  exc_page_fault+0x60/0x100
[  174.509504][    C1]  asm_exc_page_fault+0x22/0x30
[  174.515649][    C1] RIP: 0033:0x7f7cc45c17a9
[  174.520135][    C1] Code: 83 e6 07 0f 85 10 01 00 00 be 08 00 00 00 4c 89 ff 83 c5 01 e8 78 92 fe ff 49 8b 47 40 41 83 47 30 08 48 8d 48 f8 49 89 4f 40 <48> 89 58 f8 49 83 c5 01 45 3b 6c 24 04 0f 82 f4 fe ff ff 41 80 7f
[  174.540927][    C1] RSP: 002b:00007ffda2becee0 EFLAGS: 00010202
[  174.548150][    C1] RAX: 0000001b2e924000 RBX: ffffffff819d6ed2 RCX: 0000001b2e923ff8
[  174.557497][    C1] RDX: 00000000005ffde8 RSI: 00000000005ffde8 RDI: 00007f7cc54a4700
[  174.567795][    C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 00007f7cc4961000
[  174.579040][    C1] R10: 00007f7cc54a4700 R11: 0000000000000000 R12: 00007f7cc4975038
[  174.589234][    C1] R13: 0000000000000000 R14: ffffffff819d67b8 R15: 00007f7cc54a4720
[  174.599647][    C1]  ? trace_user_exit+0x8/0x190
[  174.605514][    C1]  ? memremap+0x362/0x650
[  174.612693][    C1]  </TASK>
[  174.617171][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  174.627738][    C1] CPU: 1 PID: 7034 Comm: syz.6.822 Not tainted syzkaller #0
[  174.636431][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  174.649163][    C1] Call Trace:
[  174.653904][    C1]  <IRQ>
[  174.657029][    C1]  dump_stack_lvl+0x188/0x250
[  174.661958][    C1]  ? show_regs_print_info+0x20/0x20
[  174.669994][    C1]  ? load_image+0x410/0x410
[  174.676121][    C1]  panic+0x2f8/0x850
[  174.680614][    C1]  ? bpf_jit_dump+0xd0/0xd0
[  174.686710][    C1]  ? dev_watchdog+0x85d/0xa40
[  174.692977][    C1]  __warn+0x248/0x2b0
[  174.698011][    C1]  ? dev_watchdog+0x85d/0xa40
[  174.703820][    C1]  report_bug+0x1b9/0x2e0
[  174.709059][    C1]  handle_bug+0x3a/0x70
[  174.714660][ T7064] loop4: detected capacity change from 0 to 32768
[  174.714891][    C1]  exc_invalid_op+0x16/0x40
[  174.714922][    C1]  asm_exc_invalid_op+0x16/0x20
[  174.714948][    C1] RIP: 0010:dev_watchdog+0x85d/0xa40
[  174.742139][    C1] Code: f6 71 05 01 48 8b 5c 24 20 48 89 df e8 9c d6 e3 ff 48 c7 c7 80 53 22 8b 48 89 de 48 8b 1c 24 48 89 c2 44 89 e1 e8 d3 d8 b0 01 <0f> 0b e9 51 fe ff ff e8 97 a3 73 f9 0f 0b e9 33 fe ff ff 89 d9 80
[  174.763141][    C1] RSP: 0000:ffffc90000dd0af0 EFLAGS: 00010246
[  174.770163][    C1] RAX: 4fb6a82ac8c0b600 RBX: ffff8880197e4448 RCX: ffff888022dabb80
[  174.780449][    C1] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000
[  174.790360][    C1] RBP: dffffc0000000000 R08: ffffc90000dd0627 R09: 1ffff920001ba0c4
[  174.799471][    C1] R10: dffffc0000000000 R11: fffff520001ba0c5 R12: 0000000000000000
[  174.809343][    C1] R13: ffff8880197e4540 R14: 0000000000000000 R15: dffffc0000000000
[  174.818356][    C1]  ? dev_init_scheduler+0x360/0x360
[  174.823851][    C1]  call_timer_fn+0x17b/0x540
[  174.828704][    C1]  ? dev_init_scheduler+0x360/0x360
[  174.834583][    C1]  ? __run_timers+0x810/0x810
[  174.840615][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  174.846321][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  174.852376][    C1]  ? dev_init_scheduler+0x360/0x360
[  174.857934][    C1]  __run_timers+0x56c/0x810
[  174.862073][ T7064] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop4 scanned by syz.4.830 (7064)
[  174.863349][    C1]  ? detach_timer+0x2b0/0x2b0
[  174.863383][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  174.863414][    C1]  ? sched_clock_cpu+0x15/0x3c0
[  174.863436][    C1]  ? seqcount_lockdep_reader_access+0x177/0x1d0
[  174.863462][    C1]  run_timer_softirq+0x63/0xf0
[  174.863485][    C1]  handle_softirqs+0x336/0x830
[  174.863516][    C1]  ? __irq_exit_rcu+0x13b/0x230
[  174.863541][    C1]  ? do_softirq+0x210/0x210
[  174.863561][    C1]  ? hrtimer_interrupt+0x6a2/0x8b0
[  174.863591][    C1]  __irq_exit_rcu+0x13b/0x230
[  174.863610][    C1]  ? irq_exit_rcu+0x20/0x20
[  174.863669][    C1]  irq_exit_rcu+0x5/0x20
[  174.946399][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  174.952884][    C1]  </IRQ>
[  174.955855][    C1]  <TASK>
[  174.960230][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  174.966715][    C1] RIP: 0010:__find_get_block+0x268/0x10d0
[  174.973874][    C1] Code: fe 10 a1 ff 49 83 c6 08 49 ff cc e9 f4 fe ff ff e8 ed 10 a1 ff 31 db 49 bc 00 00 00 00 00 fc ff df e8 ac 3c a7 ff fb 48 85 db <74> 5e e8 d1 10 a1 ff 48 89 df e8 69 d9 ff ff 48 c7 44 24 60 0e 36
[  174.996689][    C1] RSP: 0000:ffffc90003387560 EFLAGS: 00000246
[  175.003517][    C1] RAX: 4fb6a82ac8c0b600 RBX: 0000000000000000 RCX: 4fb6a82ac8c0b600
[  175.012885][    C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a48c0
[  175.022603][    C1] RBP: ffffc900033876a8 R08: ffffffff901f116f R09: 1ffffffff203e22d
[  175.032486][    C1] R10: dffffc0000000000 R11: fffffbfff203e22e R12: dffffc0000000000
[  175.042328][    C1] R13: 000000000000010f R14: 00000000000365f0 R15: 0000000000000110
[  175.050926][    C1]  ? write_boundary_block+0x150/0x150
[  175.057026][    C1]  ? rcu_lock_release+0x5/0x20
[  175.062739][    C1]  ? __lock_acquire+0x7b50/0x7b50
[  175.069378][    C1]  ? ext4_dirty_inode+0x8b/0x100
[  175.076199][    C1]  ? generic_update_time+0x1cd/0x1f0
[  175.082980][    C1]  ? file_update_time+0x3c0/0x440
[  175.089107][    C1]  ? ext4_page_mkwrite+0x1bc/0x1250
[  175.094768][    C1]  __getblk_gfp+0x2c/0xb20
[  175.099855][    C1]  ? ext4_get_group_desc+0x433/0x4d0
[  175.105931][    C1]  __ext4_get_inode_loc+0x45b/0xcb0
[  175.111446][    C1]  ? ext4_get_inode_loc+0x120/0x120
[  175.117122][    C1]  ? __might_sleep+0xf0/0xf0
[  175.122077][    C1]  ? slab_post_alloc_hook+0x68/0x380
[  175.127927][    C1]  ext4_reserve_inode_write+0x140/0x2e0
[  175.133805][    C1]  __ext4_mark_inode_dirty+0x13b/0x6c0
[  175.139475][    C1]  ext4_dirty_inode+0xbf/0x100
[  175.144434][    C1]  ? __ext4_expand_extra_isize+0x3e0/0x3e0
[  175.151915][    C1]  __mark_inode_dirty+0x2c8/0xc90
[  175.157111][    C1]  generic_update_time+0x1cd/0x1f0
[  175.163113][    C1]  file_update_time+0x3c0/0x440
[  175.169296][    C1]  ? file_remove_privs+0x5d0/0x5d0
[  175.175022][    C1]  ? mark_lock+0x94/0x320
[  175.183158][    C1]  ext4_page_mkwrite+0x1bc/0x1250
[  175.190049][    C1]  ? mapping_seek_hole_data+0x1300/0x1300
[  175.198802][    C1]  ? pte_alloc_one+0x287/0x310
[  175.205210][    C1]  ? ext4_change_inode_journal_flag+0x710/0x710
[  175.213546][    C1]  ? count_memcg_event_mm+0x324/0x370
[  175.219890][    C1]  ? remove_device_exclusive_entry+0xac0/0xac0
[  175.227040][    C1]  ? verify_lock_unused+0x140/0x140
[  175.233184][    C1]  do_page_mkwrite+0x168/0x3c0
[  175.239016][    C1]  handle_mm_fault+0x1e47/0x4440
[  175.245690][    C1]  ? get_page+0xe0/0xe0
[  175.251679][    C1]  ? vmacache_find+0x4f0/0x590
[  175.260253][    C1]  ? vmacache_update+0xa0/0x100
[  175.267270][    C1]  ? find_vma+0x1df/0x230
[  175.273813][    C1]  do_user_addr_fault+0x494/0xc90
[  175.281495][    C1]  exc_page_fault+0x60/0x100
[  175.287031][    C1]  asm_exc_page_fault+0x22/0x30
[  175.293974][    C1] RIP: 0033:0x7f7cc45c17a9
[  175.299906][    C1] Code: 83 e6 07 0f 85 10 01 00 00 be 08 00 00 00 4c 89 ff 83 c5 01 e8 78 92 fe ff 49 8b 47 40 41 83 47 30 08 48 8d 48 f8 49 89 4f 40 <48> 89 58 f8 49 83 c5 01 45 3b 6c 24 04 0f 82 f4 fe ff ff 41 80 7f
[  175.324936][    C1] RSP: 002b:00007ffda2becee0 EFLAGS: 00010202
[  175.331793][    C1] RAX: 0000001b2e924000 RBX: ffffffff819d6ed2 RCX: 0000001b2e923ff8
[  175.341273][    C1] RDX: 00000000005ffde8 RSI: 00000000005ffde8 RDI: 00007f7cc54a4700
[  175.352825][    C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 00007f7cc4961000
[  175.364208][    C1] R10: 00007f7cc54a4700 R11: 0000000000000000 R12: 00007f7cc4975038
[  175.374666][    C1] R13: 0000000000000000 R14: ffffffff819d67b8 R15: 00007f7cc54a4720
[  175.383399][    C1]  ? trace_user_exit+0x8/0x190
[  175.389426][    C1]  ? memremap+0x362/0x650
[  175.393801][    C1]  </TASK>
[  175.397516][    C1] Kernel Offset: disabled
[  175.402849][    C1] Rebooting in 86400 seconds..