last executing test programs:

2m21.954722289s ago: executing program 4 (id=591):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1m59.75628057s ago: executing program 4 (id=591):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1m33.027457548s ago: executing program 4 (id=591):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1m5.424971762s ago: executing program 4 (id=591):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

39.504251931s ago: executing program 4 (id=591):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

19.553208333s ago: executing program 0 (id=1557):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x2810000, &(0x7f0000000240)={[{@user_xattr}, {@nogrpid}, {@noinit_itable}, {@nogrpid}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nojournal_checksum}, {@errors_remount}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@data_err_ignore}]}, 0x1, 0x57a, &(0x7f0000000300)="$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")
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x1000000, 0x0, 0x2, 0x9, 0x0, 0x0, 0x5}, 0x20)
syz_open_procfs(0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newtaction={0x48, 0x30, 0x1, 0x5000000, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x21}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x48}}, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./bus\x00', 0x2200000, &(0x7f0000000880)=ANY=[@ANYBLOB='decompose,gid=', @ANYRESHEX=0x0, @ANYBLOB=',barrier,uid=', @ANYRESHEX, @ANYBLOB="2c666f7263652c666f7263652c6e6c733d6d616363656e746575726f00006172743d3078283a0f909e303030303030303030303030303030362c666f7263652c00b20a970faa9c317b6bcabe474cae31ba89c1625a2e9ee8a7648d4ffdae5266f879928f1e02635af5f47c0e5c4fba4c704be62a11d3462794532032457a1293a8950acffefbf2378e73ea9ae55a57ddb4c9be1aecc0ba25fd359c02636f7d3d9532e5e050859f2d2b4bffca2d8376e71c93f1153a992683cfe7", @ANYRES64=0x0, @ANYRESOCT=r0, @ANYRES8=r2, @ANYBLOB="36b76bdb30ea0d2e9a409b27e62207808523cff3bf7ab65f6bea2d2316bcc62b778ec8bf0bc45c4e52f0c3aee85742cbab1e5d0e88de817ff522816d4e40e01febeebf8b34610aabb8823aacfabbb62953a2b984adf5817def8d452329bebc460aa51833364e6ef89f1e97aaa7833f50ac51834052088a0de11c1c4beed190746e895521fad270d3b292360ff35ede7f4f"], 0x1, 0x705, &(0x7f0000002080)="$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")
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1245d, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getdents64(r3, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20)

19.122848888s ago: executing program 0 (id=1560):
syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x2, 0x2de}, 0x0, 0x0)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64], 0x80}, 0x1, 0x0, 0x0, 0x20040004}, 0x0)

18.594059825s ago: executing program 0 (id=1563):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x785, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000c40)=[{0x8, 0x3, 0x6, 0x6}, {0x5, 0x1, 0xb, 0x9}, {0x100001, 0x1, 0x4, 0xb}], 0x10, 0x3, @void, @value}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800786a00"/28, @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c018"], 0x230}, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)

18.231805371s ago: executing program 0 (id=1566):
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b000000"], 0x4c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
futimesat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, 0x0)

14.785917922s ago: executing program 1 (id=1573):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
syz_mount_image$xfs(&(0x7f0000000480), &(0x7f0000009740)='./file0\x00', 0x4000040, &(0x7f0000000200), 0x1, 0x97ef, &(0x7f0000012f40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x9, 0x22244068, 0xf, 0x8003, 0x7fa, 0x5, 0x0, 0x0, 0x2, 0x2}}, 0xfee1)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x8840)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x1)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)

12.924580434s ago: executing program 4 (id=591):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

11.037545264s ago: executing program 1 (id=1577):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0)
r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file4\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0)
landlock_restrict_self(r0, 0x0)
linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0)

11.009344497s ago: executing program 2 (id=1578):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl(r0, 0x2, &(0x7f0000000340))

10.796621031s ago: executing program 1 (id=1581):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'})
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3})
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)

10.73869033s ago: executing program 2 (id=1582):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x19)
bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map=r1, 0x4, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

10.314686676s ago: executing program 1 (id=1584):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
setuid(0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0)
ioctl$EVIOCRMFF(r0, 0x550c, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000500)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)

10.146374041s ago: executing program 2 (id=1585):
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f00000002c0)={0xc})
ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x1)
ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[], 0x1, 0x6276, &(0x7f0000003680)="$eJzs3c1vHGcdB/Df7JtfStOoh6pECLlteCmleS0hUKDtAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFBQogjJ/6AHrhy4w8gUoIE6qmD1n4eZzxde+2k3ln7+XwkZ+Y3z4z3mXx3vLueGT8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMQPf/Dj81VEXP1VWnAy4nPRj+hFLI3rlYhYWjmZ1x9ExPOx2RzPRcRwIaLKjc9EvBYRH52IePDw7up40YV99uP7f/nnH37y1I/+8efh2f/99Xb/9d3Wu3Pnt//9273H318AAAAoUV3XdZU+5p9Kn+97XXcKAJiJ/PpfJ3m5eu7q9Tnrj1qtVquPYN1UT3avWUTEenOb8XsGp+MB4IhZj4+77gIdkn/RBhHxVNedAOZa1XUHOBQPHt5drVK+VfP1YGWrPV8LsiP/9Wr7/o7dptO0rzGZ1fNrI/rx7C79WZpRH+ZJzr/Xzv/qVvsorXfY+c/KbvmPtm59Kk7Ov9/Ov+X45N+bmH+pcv6DA+Xflz8AAAAAAMyx/Pv/kx2f/1148l3Zl73O/67MqA8AAAAAAAAA8Fl70vH/tlXG/wMAAIB5Nf6sPva7E4+WNa/1H8XO5VeqiKdb6wOFSTfLLHfdDwAAAAAAAAAAAAAoyWDrGt4rVcQwIp5eXq7revzV1K4P6km3P+pK338oWdc/5AEAYMtHJ1r38lcRixFxJf2tv+Hy8nJdLy4t18v10kJ+PztaWKyXGp9r83S8bGG0jzfEg1E9/maLje2apn1entbe/n7jxxrV/X10bDY6DBwAImLr1eiBV6Rjpq6fia7f5XA0OP6PH8c/+9H18xQAAAA4fHVd11X6c96n0jn/XtedAgBmIr/+t88LqNVqtVqtPn51Uz3ZvWYREevNbcbvGQzHDwBHzHp83HUX6JD8izaIiOe77gQw16quO8ChePDw7mqV8q2arwdpfPd8LciO/Nerze3y9pOm07SvMZnV82sj+vHsLv15bkZ9mCc5/147/6tb7aO03mHnPyu75T/ez5Md9KdrOf9+O/+W45N/b2L+pcr5Dw6Uf1/+AAAAAAAwx/Lv/0/O1fnf0ePuzlR7nf9dObRHBQAAAAAAAIDD9eDh3dV832s+//+FCeu5//N4yvlX8i9Szr/Xyv+rrfX6jfn7bz3K/z8P767+8fa/P5+n+81/Ic9U6ZlVpWdElR6pGqTpk+zdp20M+6PxIw2rXn+Qrvmph+/E9bgRa3Fux7q99P/xqP38jvZxT4eb7XV/q/3CjvbBdnve/uKO9mG60qleyu1nYjV+Hjfi7c32cdvClP1fnNJeT2nP+fcd/0XK+Q8aX+P8l1N71ZqO3f+w96njvjmd9DhvXv/ib84d/u5MtRH97X1rGu/fix30Z/P/5KlR/PLW2s0zd67dvn3zfKTJjqUXIk0+Yzn/Yfra/vn/0lZ7/rnfPF7vfzg6cP7zYiMGu+b/UmN+vL8vz7hvXcj5j9JXzv/t1D75+D9A/r0/zWxf9mOv4/+VDvoDAAAAAAAAAAAAAAAAe6nrevMW0Tcj4lK6/6erezMBgNnKr/91kpfPqu7P+PHU6iNeV3PWn5nWn9Tz1R+1+ijWTfVkbzSLiPh7c5vxe4ZfT/pmAMA8+yQi/tV1J+iM/AuW/97feHq6684AM3Xr/Q9+eu3GjbWbt7ruCQAAAAAAAADwuPL4nyuN8Z9P13V9r7XejvFf34qVJx3/dZBntgcY3WWg6v7B92kvG71Rv9cYbvyF2G387+H23F7jfw+mPN5wSvtoSvvClPbFKe0Tb/RoyPm/0Bjv/HREnGoNv/7Y47/Omb3Gf22PeV+CnP+LjefzOP+vtNZr5l///ijn39uR/9nb7/3i7K33P3j1+nvX3l17d+1nF8+fP3fx0qXLly+ffef6jbVzW/922OPDlfPPY1+7DrQsOf+cufzLkvP/UqrlX5ac/5dTLf+y5Pzz+z35lyXnnz/7yL8sOf+XUy3/suT8v5Zq+Zcl5/9KquVflpz/11Mt/7Lk/F9NtfzLkvM/k2r5lyXnfzbV+8x/6bD7xWzk/PMZLsd/WXL++coG+Zcl538h1fIvS87/YqrlX5ac/2upln9Zcv7fSLX8y5Lzv5Rq+Zcl5//NVMu/LDn/y6mWf1ly/t9KtfzLkvP/dqrlX5ac/+upln9Zcv7fSbX8y5Lz/26q5V+WnP/3Ui3/suT830i1/Mvy6O//mzFjxkye6fonEwAAAAAAAAAAAADQNovLibveRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCnt3FyPXWd4B/Mx+eeNAYiCkTmrCxjHGOJvs+iP+oHUx4bPhqySEQj+wXe/aLPgLr10CjWpHgRIJo6KKtuGiLSDU5qbCqrigFaBcoFaVKkF7QW8QFSoXURVQQKrUVsBWM+d9352ZnZ3Z9Y7XZ875/ST78c6cmfedM++c2WfX/zkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANLv7DbOfqmVZVqvV8gs2ZdmL6vWmiU2NS157Y+cHAAAArN3PG3+/cGu64PAKbtS0zT/d9e2vLiwsLGTvG/7T0c8tLKQrJrJsdEOWNa6Lrv7g/bXmbYIns/HaUNPXQz2GH+5x/UiP60d7XD/W4/oNPa4f73H9kh2wxE1ZLd3ZtsY/N+W7NLstG21ct63DrZ6sbRiq77t026zWuM3C6IlsLjuVzWbTLdvn29Ya23/97vpYb83iWENNY22pr5CfPH48zqEW9vG2lrEW7zP60euziZ/+5PHjf33h+Ts61Z67oeX+8nnu2Fqf5yfCJflca9mGtE/iPIea5rmlw3My3DLPWuN29X+3z/OFFc5zeHGa66r9OR/Phhr//k5jP43Usg77aUu47H/uybLs8uK027dZMlY2lG1suWRo8fkZz1dk/T7qS+ml2Uj3dbpQa1mnd69gndbrzLbWddr+mojP/93hdiPLzKH5afrRE2NNz/vPFq5lnUb1R73ca6V9Dfb7tVKUNRjXxXcaD/qpjmtwW3j8j29ffg12XDsd1mB63E1rcGuvNTg0NtyYc3oSao3bLK7BXS3bDzdGqjXqc9u7r8GpC6fPTc1/7OP3zZ0+dnL25OyZPbt2Te/Zt+/AgQNTJ+ZOzU7nf1/j3i6+jdlQeg1sDfsuvgZe3bZt81Jd+OLYkuPvtb4Ox7u8Dje1bdvv1+FI+4Orrc8Lcumazl8b76nv9PErQ9kyr7HG87Nz7a/D9LibXocjTa/Dju8pHV6HIyt4Hda3ObdzZd+zjDT96TSH5d8L1rYGNzWtwfbvR9rXYL+/HynKGhwP6+J7O5d/L9gS5vvU5Gq/HxlesgbTww3Hnvol6fv98QON0mld3lm/4uax7OL87Pn7Hzt24cL5XVko6+JlTWulfb1ubHpM2ZL1OrTq9Xp47q6n7uxw+aawr8bvq/81vuxzVd9m7/3dn6vGu1vn/dly6e4slD4L+3Nhwzrtz07v5vX9OZZln//WEw9/4/HPv2HZ/VnvNz8xtfbvxVNf2nT8HV3m+Bv7/l/k46W7enJ4dCR//Q6nvTPacjxufapGGseuWmPsF6ZWdjweDX/W+3h8W5fj8ea2bft9PB5tf3DxeFzr9dOOtWl/PsfDOjk13f14XN9m8+7VrsmRrsfje0Kthf3/mtAppL6oae0st27TWCMjo+FxjcQRWtfpnpbtR0NvVh/rmd3Xtk533JPf13B6dIvWa51OtG3b73Wafva13Dqt9frp27Vpfz7Hw7q4bU/3dVrf5tm9az923hT/2XTsHOu1BkeHx+pzHk2LsHG8zxZuimvw/ux4djY7lc00rh1rrKdaY6zJB1a2BsfCn/U+Vm7usgZ3tG3b7zWY3seWW3u1kaUPvg/an8/xsC6efqD7Gqxv88b9/f3edUe4JG3T9L1r+8/XlvuZ151tu+l6rZWRMM9v7e/+s9n6NqcOrLbP7L6f7g2X3NxhP7W/fpd7Tc1k67OfNod5Pn9g+f1Un099m88dXOF6Opxl2aWPPNj4eW/4/crfXfzuV1t+79LpdzqXPvLgj1984h9XM38ABt8v8rIxf69r+s3USn7/DwAAAAyE2PcPhZro/wEAAKA0Yt8f/1d4ov8HAACA0oh9/0ioSUX6/81vfH7uF5eylMxfCOL1aTc8lG8XM67T4euJhUX1yx/88ux//8OllY09lGXZzx76g47bb34ozis3EeZ59U2tly/x1ftWNPbRRy+lcZvz618I9x8fz0qXQacI7nSWZV+/9TONcSbef6VRn33oaKM+fPmpJ+vbvHAw/zre/rmX5dv/RQj/Hj5xrOX2z4X98MNQp9/WeX/E233lymu27H/v4njxdrWttzQe9tMfyO83fk7OZ5/Mt4/7ebn5f+PTz3ylvv1jr+o8/0tDnef/TLjfL4f6v6/It29+Dupfx9t9Msw/jhdvd/+Xvtlx/lc/lW9/7s35dkdDjePvCF9ve/Pzc83767HasZbHlb0l3y6OP/3dP25cH+8v3n/7/MePXGnZH+3r49l/y+9nqm37eHkcJ/r7tvHr99O8PuP4z/zR0Zb93Gv8qw8/94r6/baPf2/bduc+srMx/uL9tX5i019+8jMdx4vzOfy351oez+F3h9dxGP/pD4T1GK7/v6v5/bV/usLRd7cef+L2X9h0qeXxRG/9aT7+1dedbNQN4zdtvPlFL77l8ivr+y7LvrMhv79e45/8q7Mt8//i7fn+iNfHjH77+MuJ45//6OSZs/MX52bSXn381sZn57w9n0+c763h2Nr+9ZGzFz44e35iemI6yybK+xF61+xLof44L5e7b72w5Ai689HwfN7551/fuP1fPx0v//f35JdfeVv+vvXqsN1nw+WbwvO3uvGXevru2xuv79qzYYYLSz8veC22bPuvAyvaMDz+9u8L4no/9/IPNvZD/brG+0Z8Xa9x/t+fye/na2G/LoRPZt56++J4zdvHz0a48kj+el/z/guHufi8/k14vt/xw/z+47zi4/1++D7mm5tbj3dxfXzt0lD7/Tc+xeNyOJ5kl/Pr41Zxf1954faO04ufQ5JdvqPx9Z+k+7ljVQ9zOfMfm586NXfm4mNTF2bnL0zNf+zjR06fvXjmwpHGZ3ke+VCv2y8enzY2jk8zs/v2Zo2j1dm8XGc3ev7nHj0+s396+8zsiWMXT1x49Nzs+ZPH5+ePz87Mbz924sTsR3vdfm7m0K7dB/fs3z15cm7m0IGDB/ccnJw7c7Y+jXxSPeyb/vDkmfNHGjeZP7T34K4HHtg7PXn67Mzsof3T05MXe92+8d40Wb/170+enz117MLc6dnJ+bmPzx7adXDfvt09Pw3w9LkT8xNT5y+embo4P3t+Kn8sExcaF9ff+3rdnnKa/4/8+9l2tfyD+LJ33bsvfT5r3ZefWPau8k3aPkD0+fBZNP/8knMHVvJ17PtHQ00q0v8DAABAFcS+fyzURP8PAAAApRH7/g2hJvp/AAAAKI3Y94+HmlSk/y9d/n/zpRWNL/8v/9+8v+T/K5b/f6Ro+f/8eCH/3x9rzd/L/wfy//L/8v8Dk/9fCG9I8v8UUdHy/7HvvynLKtn/AwAAQBXEvn9jqIn+HwAAAEoj9v03h5ro/wEAAKA0Yt//olCTivT/8v/y//L/8v/y/53Hl/8fTPL/3cn/9yD/P5VVK/9/uZ/zd/5/+X+WKlr+P/b9Lw41qUj/DwAAAFUQ+/5bQk30/wAAAFAase+/NdRE/w8AAAClEfv+TaEmFen/5f/l/+X/5f/l/zuPL/8/mOT/u5P/70H+3/n/5f/l/+mrouX/Y9//klCTivT/AAAAUAWx739pqIn+HwAAAIpn5NpuFvv+l4WaLOn/r3EAAAAA4IaLff9tWVsQvCK//5f/l/8vfv5/Q7pO/l/+Pytk/n84k/8vDvn/7uT/e5D/l/+X/5f/p6+Klv9v9P3ZePbyUJOK9P8AAABQBbHvvz3URP8PAAAApRH7/l8KNdH/AwAAQGnEvn9zqElF+n/5f/n/G53/H22bu/P/L95O/j9X/Py/8/8Xifx/d/L/Pcj/y//L/8v/01dFy//Hvv+OUJOK9P8AAABQBbHvvzPURP8PAAAApRH7/l8ONdH/AwAAQGnEvn9LqElF+n/5/4Ln/2NytMT5/97n/5f/l/+X/5f/Xzn5/+7k/3uQ/5f/l/+X/6evipb/j33/K0JNKtL/AwAAQBXEvv+uUBP9PwAAAJRG7PtfGWqi/wcAAIDSiH3/RKhJRfp/+f+C5//zHPxYmc//L/8v/y//L//fT/L/3cn/9xAOcz/Kskz+X/5f/l/+n7UrWv4/9v13h5pUpP8HAACAKoh9/9ZQE/0/AAAAlEbs++8JNdH/AwAAQGnEvn9bqElF+n/5/4HI/2fy//L/8v/y//L/KyP/3538fw/O/y//L/8v/09fFS3/H/v+V4WaVKT/BwAAgCqIff/2UBP9PwAAAJRG7PtfHWqi/wcAAIDSiH3/jlCTivT/8v/y//L/8v/y/53Hl/8fTPL/3cn/9yD/L/8v/y//T18VLf8f+/7XhJpUpP8HAACAKoh9/85QE/0/AAAAlEbs++8NNdH/AwAAQGnEvn8y1KQi/b/8v/y//L/8v/x/5/Hl/weT/H938v89yP/L/8v/y//TV0XL/8e+/75Qk4r0/wAAAFAFse+/P9RE/w8AAAClEfv+qVAT/T8AAACURuz7p0NNKtL/y//L/8v/y/+vKv//ysX7lf/Pyf8Xi/x/d/L/Pcj/y//f8Pz/qPw/pVK0/H/s+3eFmqTGb+waHiUAAABQJLHv3x1qUpHf/wMAAEAVxL5/T6iJ/h8AAABKI/b9e0NNKtL/y//L/8v/y/87/3/n8eX/B5P8f3f9z//Hhyj/L/8v/+/8//L/LFW0/H/s+x8INalI/w8AAABVEPv+faEm+n8AAAAojdj37w810f8DAABAacS+/0CoSUX6f/l/+X/5f/l/+f/O48v/Dyb5/+6c/7+H4uX/X9d88/XM/9fHkv+X/5f/Z/Ue+cPmr4qW/499/8FQk4r0/wAAAFAFse9/baiJ/h8AAABKI/b9vxJq0r3/33B9ZwUAAAD0U+z7fzXUpCK//5f/l/+X/5f/l//vPL78/2CS/+9O/r+H4uX/Wzj/f7HnL/8v/89SRcv/x77/UKhJRfp/AAAAqILY9/9aqIn+HwAAAEoj9v2vCzXR/wMAAEBpxL7/cKhBpzh3Kcn/y/8PZv5/XP5f/r90+f+xeL/y/2si/9+d/H8P8v/y//L/8v/0VdHy/7Hvf32oid//AwAAQGnEvv/BUBP9PwAAAJRG7PvfEGqi/wcAAIDSiH3/G0NNKtL/y//L/w9m/t/5/zP5/9Ll/53/vz/k/7uT/+9B/l/+X/5f/p++Klr+P/b9bwo1qUj/DwAAAFUQ+/43h5ro/wEAAKA0Yt//llAT/T8AAACURuz73xpqUpH+X/5f/v9G5v9zl+X/5f8b5P/l//tB/r87+f8e5P/l/+X/5f/pq6Ll/2Pf/+uhJhXp/wEAAKAKYt//UKiJ/h8AAABKI/b9bws10f8DAABAacS+/+2hJhXp/+X/5f+d/1/+X/6/8/jy/4NJ/r+7Acv///yWcLn8f07+v9jzX23+f6Tt6+uS///Bcvn/hQ3tt5f/53ooWv4/9v3vCDWpSP8PAAAAVRD7/neGmuj/AQAAoDRi3/+uUJOm/r+v//EOAAAAWHex7/+NUJOK/P5f/r8+j8X0svy//H/jAvl/+X/5/4El/9/dgOX/nf+/jfx/sefv/P/y/yxVtPx/7PvfHWpSkf4fAAAAqiD2/Q+Hmuj/AQAAoDRi3/9IqIn+HwAAAEoj9v3vCTWpSP8v/+/8//L/8v/y/53Hl/8fTPL/3cn/9yD/L/9ftPz/f8r/M9iKlv+Pff+joSYV6f8BAACgCmLf/95QE/0/AAAAlEbs+38z1ET/DwAAAKUR+/73hZpUpP+X/x+U/P/EgOb/n5D/v475/7tuybeT/5f/Z5H8f3fy/z3I/8v/Fy3/7/z/DLii5f9j3//+UJOV9//jK94SAAAAuI5Glr0m9v2/FWpSkd//AwAAQBXEvv+3Q030/wAAAFAase//nVCTivT/8v+Dkv93/v9M/t/5/9sej/y//H8n65f/j0ce+X/5/2Ll/zet6gG3utH5+bW60fOvbv4/f2eU/6eTouX/Y9//u6EmFen/AQAAoApi3/+BUBP9PwAAAAyETv8nu13s+4+Emuj/AQAAoDRi33801KQi/b/8v/y//H9B8/9/tvVfvvftdx7dJf8v/y//vyrrev7/+ovf+f/l/wuW/1+LG52fX6/515Y5NZj8v/P/039Fy//Hvv9YqElF+n8AAACogtj3/16oif4fAAAASiP2/cdDTfT/AAAAUBqx758JNalI/y//L/8v/1/Q/P8An/8/7g/5/1Z9y//Hg678f0frmv9/72JOXP5/tfn/sY6Xyv/L/w/y/OX/5f9Zqmj5/9j3z4aaVKT/BwAAgCoIff/QibwuXqH/BwAAgNKIff/JUBP9PwAAAJRG7Ps/GGpSkf5f/l/+X/5f/t/5/zuP3y3/Xxtx/v+ikv/vrjj5/87k/+X/B3n+8v/y/yxVtPx/7PvnQk0q0v8DAABAFcS+/0OhJvp/AAAAKI3Y93841ET/DwAAAKUR+/5ToSYV6f/l/+X/5f/l/+X/O49f2PP/y/93Jf/fnfx/D/L/8v/y//L//8/enXxZWtd3HL8FDV19yCK7LLLJOVnmT2AR1sk+WWSTRXJOTs4JRFFxpnEeUVScFcVZwQEEERXnCZxQnEFFxXnECVFPe6j6fr9dw1P3VlXf6vs8v9/rteCbrlB9r31a6E9Xv31YqrH1/7n7/y9u6WT/AwAAQA9y918ct9j/AAAA0Izc/ZfELfY/AAAANCN3///HLZ3sf/2//r/Z/v+f9f97vb7+X//fMv3/fPr/BfT/+n/9v/6fpRpb/5+7/2FxSyf7HwAAAHqQu//hcYv9DwAAAM3I3X9p3GL/AwAAQDNy9z8ibulk/+/o/9dmffb/mfHq/1vq/z3/f8/X1/+fQf9/rv5/7M5u/3/FQ//k0//r//X/Qf+/r/7/+F6fr/+nRWPr/3P3PzJu6WT/AwAAQA9y9z8qbrH/AQAAoBm5+y+LW+x/AAAAaEbu/kfHLZ3s/+U9///Exscn2v8X/b/+f+MD+n/9/179/7HT39b/j5Pn/8/XU/9/6V0XXHz/zX9/y0FeX/+v//f8f/0/yzW2/j93/2Pilk72PwAAAPQgd/9j4xb7HwAAAJqRu/9xcYv9DwAAAM3I3f/4uKWT/b+8/n/Sz/8v+n/9/8YH9P/6/736/3/z/P+x0//P11P/f5jX1//r//X/+n+Wa9X9f37H+e3c/U+IWzrZ/wAAANCD3P1PjFvsfwAAAGhG7v7L4xb7HwAAAJqRu/9k3NLJ/tf/H33//xf9v/4/rv5f/6//P3r6//n0/wvo//X/+n/9P0u16v5/57dz918Rt3Sy/wEAAKAHufufFLfY/wAAANCM3P1PjlvsfwAAAGhG7v6nxC2d7H/9v+f/6//1//r/4dfX/0+T/n8+/f8C+v8z7efP0/9PsP+PX0jp/zkKB+z/H5zzj+2l9P+5+58at3Sy/wEAAKAHufufFrfY/wAAANCM3P1Pj1vsfwAAAGhG7v5nxC2d7H/9v/5f/6//P3T/v/un3gb9/zD9/9mh/59vNP3/2rHBD+v/J9//e/7/FPv/oP/nKIzt+f+5+58Zt3Sy/wEAAKAHufufFbfM2f8H/s18AAAAYKVy9z87bvH1fwAAAJi8rM5y9z8nbulk/+v/9f/6f/2/5/8Pv/68/v+WLe9P/z8u+v/5RtP/70H/r/+f8vvX/+v/2W1s/X/u/ufGLZ3sfwAAAOhB7v4r4xb7HwAAAJqRu/95cYv9DwAAAM3I3f/8uKWT/T/c/5/+/+v/90f/v/396/+Hf34sq//P71H/P7f/v8jz//uk/5/v7Pf/x/X/279//f8RWvX7b7z/P7Ho8/X/DBlb/5+7/6q4pZP9DwAAAD3I3f+CuMX+BwAAgGbk7n9h3GL/AwAAQDNy978obulk/6/4+f9XnL/X+9L/b9D/6/89/3+cz/+fnfX+/5j+f5/0//N5/v8C+n/9v/7f8/9ZqrH1/7n7r45bOtn/AAAA0IOrH5ht7P4Xz2b2PwAAAEzR1j87sPMPlIbc/S+JW+x/AAAAaEbu/pfGLZ3s/xX3/0f1/P/zFr22/l//v/XHS/+v/x96/XH1/57/v1/6//n0/wvo/4+inz/WWP9/zV6fP4b+/3L9PyOzrf+/7fTHV9X/5+5/WdzSyf4HAACAHuTuf3ncYv8DAABAM3L3vyJusf8BAACgGbn7Xxm3dLL/j7z/P7H3ax9h/7+Q/l//v/XHS/+v/x96ff3/NOn/59P/L6D/9/x/z//X/7NU2/r/LVbV/+fuf1Xc0sn+BwAAgB7k7n913GL/AwAAQDNy918Tt9j/AAAA0Izc/a+JWzrZ/40+/38h/b/+f+uPl/5f/z/0+vr/adL/z6f/X0D/r//X/y/u/3f+izro/xkytv4/d/9r45ZO9j8AAAD0IHf/tXGL/Q8AAADNyN3/urjF/gcAAIBm5O5/fdzSyf7X/x9t/58f1//r/2cH6f/jE/T/m/T/+v+DmFr/v/O/P4fu19eG/k202x79/x3/c/Jft39E/6//1//r/z3/nyUYRf9/6vSvLnP3vyFu6WT/AwAAQA9y978xbrH/AQAAoBm5+98Ut9j/AAAA0Izc/W+OWw64//92qe/q7NH/e/6//n+E/X/Q/2/S/+v/D2Jq/f9Onv+v/9f/T/f96//1/+w2iv5/y7dz978lbvH1fwAAAGhG7v63xi32PwAAADQjd//b4hb7HwAAAJqRu/+6uKWT/a//1//r//X/+v/h1z9s/78+G6b/Pzv0//Pp/xfQ/+v/9f/6f5ZqbP1/7v7r45ZO9j8AAAD0IHf/2+MW+x8AAACakbv/HXGL/Q8AAABTkunYoNz974xbOtn/+n/9v/5f/6//H359z/+fpon2//WPwan2/+dOqf+/Yc4bGOr/Tx3X/+v/9f/6fw5pbP1/7v53xS2d7H8AAADoQe7+G+IW+x8AAACakbv/xrjF/gcAAIBm5O5/d9zSyf7X/+v/9f/6f/3/8Ovr/6dpov1/mWr/7/n/+v+Z/l//r/9nwNj6/9z9N8Utnex/AAAA6EHu/pvjFvsfAAAAmpG7/z1xi/0PAAAAzcjdf0vc0sn+1//r//X/+n/9//Dr6/+n6ej6/9nq+v/7zjnod7Mn/f8C+n/9v/5f/89Sja3/z93/3rilk/0PAAAAPcjdf2vcYv8DAABAM3L3vy9usf8BAACgGbn73x+3dLL/9f/6/2n2/1etD71//b/+f6b/757n/8+n/19A/6//1//r/1mqsfX/ufs/ELd0sv8BAACgB7n7b4tb7H8AAABoRu7+D8Yt9j8AAAA0I3f/h+KWTva//l//v73/n82m0f97/v9M/99C/78+0/8vnf5/vv31/xfp//X/bfX/58wa6v9P7Pn5+n/GaGz9f+7+D8ctnex/AAAA6EHu/o/ELfY/AAAANGDzz87k7v9o3GL/AwAAwJgdO8jfnLv/Y3FLJ/t/+v3/8R2fqP+fzWZ3X9b88//1/zP9fwv9f/2o6v+XR/8/n+f/L6D/b7P/9/x//T8rM7b+P3f/x+OWTvY/AAAA9CB3/yfiFvsfAAAAmpG7/5Nxi/0PAAAAzcjd/6m4pZP9P/3+f+cn6v9nZ/T8f/3/xgf0//p//f9k6f/n0/8voP9f2M+v7fHrnpn+X/+v/2fA2Pr/3P2fjls62f8AAADQg9z9t8ct9j8AAAA0I3f/HXGL/Q8AAADNyN3/mbilk/2v/9f/6/+n2f+v6//1//r/QWPp/y+88F/u1P/r/1vs/+fR/+v/9f/sNLb+P3f/Z+OWTvY/AAAA9CB3/+fiFvsfAAAAmpG7//Nxi/0PAAAAzcjd/4W4pZP9v7v/P2+2WahuGur/o1HT/2+h/9/+/vX/wz8/PP9f/6//P3pj6f89//9w71//r/+f8vs/UP//D7s/X/9Pi8bW/+fuvzNu6WT/AwAAQA9y938xbrH/AQAAoBm5+78Ut9j/AAAA0Izc/XfFLZ3sf8//1//r//X/+v/h19f/T5P+fz79/wL6f/2/5/9f8l/n6v9ZnrH1/7n7vxy3bAy/f/ybQ/7HBAAAAEYkd/9X4pZOvv4PAAAAPcjd/9W4xf4HAACAZuTu/1rc0sn+1//r//X/+n/9//Dr6/+nSf8/n/5/gX76//WhD666nz9Tq37/zfT/nv/PEo2t/8/d//W4pZP9DwAAAD3I3f+NuMX+BwAAgGbk7v9m3GL/AwAAQDNy998dt3Sy//X/+v/2+///1P/veH39v/6/Zfr//Df6MP3/Av30/4NW3c9P/f3r//X/7Da2/j93/z1xSyf7HwAAAHqQu/9bcYv9DwAAAM3I3f/tuMX+BwAAgGbk7v9O3NLJ/tf/99X/r8167P89/1//r//vyXT6/2uPDX3U8//1//r/6b5//b/+n93G1v/n7r937ViX+x8AAACm6t//6X/v2e/fe+/GX9dn341b7H8AAABoRu7+78Ut9j8AAAA0I3f/9+OWTva//r+v/r/P5//r//X/+v+eTKf/H6b/1//r/6f7/vX/+n92G1v/n7v/vrhly/Ab/B/oAQAAACYjd/8P4pZOvv4PAAAAPcjd/8O4Zdf+P7XPP9UOAAAAjE3u/h/FLZ18/V//P/L+f3ZE/X/8ffr/Tfp//f/Q6+v/p6m1/v/4bFT9/6k1/b/+fw79v/5f/89OY+v/c/ffetOsy/0PAAAAjdr2Owo/3vjr+uwncYv9DwAAAM3I3f/TuMX+BwAAgGbk7v9Z3NLJ/tf/j7z/P9Tz/0/U/+X5/533/1euD76+/l//37LW+n/P/9/8uP5/k/5/3O9f/6//Z7cD9P8bg/So+//c/T+PWzrZ/wAAANCD3P2/iFvsfwAAAGhG7v5fxi32PwAAADQjd/+v4pZO9r/+fwX9/1XHZ7Mj7f/38fx//X8f/f8er99O//93F5y8/T/++8br9f+cdjb7//y5oP/X/6+g/78ufv7p/0f0/vX/+n92G9vz/3P3/zpu6WT/AwAAQA9y998ft9j/AAAA0Izc/b+JW+x/AAAAaEbu/t/GLZ3sf/1/i8//n2b/nz/WK+j/T06v/8+muPf+3/P/9f+7ef7/fPr/BabT/2982/P/x/X+9f/6f3YbW/+fu/93cUsn+x8AAAB6kLv/93FL7v+1A//WPQAAADAyufv/ELf4+j8AAAA0I3f/A3FLJ/tf/6//H0v/nzz///Tnef7/Jv2//v8g9P/z6f8X0P/r//X/+n+Wamz9f+7+P8Ytnex/AAAA6EHu/gfjFvsfAAAAmpG7/09xi/0PAAAAzcjd/+e4pZP9r//X/+v/9f/6/+HX1/9Pk/5/Pv3/Q87f+w3o//X/+n/9P0s1tv4/d/9fAwAA//+9M2Fu")
socket$alg(0x26, 0x5, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
symlink(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

6.924174818s ago: executing program 1 (id=1588):
socket$netlink(0x10, 0x3, 0x0)
syz_open_dev$loop(&(0x7f0000000fc0), 0x81, 0x8041)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0)
syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x40)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0)

6.830730002s ago: executing program 5 (id=1589):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
io_setup(0x1, &(0x7f00000004c0)=<r0=>0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0)
io_submit(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='\x00', 0x1}])

6.470293524s ago: executing program 5 (id=1590):
syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x8000e6, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

5.477769669s ago: executing program 2 (id=1591):
syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002a2b8d240bb2170200b87010203010902240001a00800040904c81e010103f70909050803ff"], 0x0)

5.274284885s ago: executing program 5 (id=1593):
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000080)=0xd)
ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000040)=0x1)

5.02405974s ago: executing program 0 (id=1595):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
syz_pidfd_open(0x0, 0x0)
prlimit64(0x0, 0x2, &(0x7f0000000000)={0x2, 0x5}, &(0x7f0000000040))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000540)={[{@nodiscard}, {@flush_merge}, {@background_gc_on}, {@prjjquota={'prjjquota', 0x3d, '#'}}, {@noquota}, {@disable_roll_forward}, {@gc_merge}, {@nouser_xattr}, {@fastboot}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@age_extent_cache}, {@noinline_dentry}]}, 0x2, 0x5505, &(0x7f0000002480)="$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")

4.894319382s ago: executing program 5 (id=1596):
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3})
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)

4.743647152s ago: executing program 0 (id=1597):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f00000000c0)={[{@noblock_validity}, {@norecovery}, {@mblk_io_submit}, {@noload}, {@resgid}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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")
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{0x0, 0x0, 0x32000000}, {0xffffffff}]})
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d)
ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6)
unshare(0x40000000)
syz_clone(0x8040000, &(0x7f0000000580), 0x0, &(0x7f0000000180), 0x0, &(0x7f00000004c0)="b78f71c4077d2c8d3319b11b32dfea925c6dfc9260d72663744f5336add6ad8f9e6d6c73af29b3b8e9f416c606e1c8977ad62c9f9d17485a38f18b78c6e19b1450542c36a893dbc190857f2d36816c5e6d9f98e736")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xe41f}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x20050800)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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")
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x0, 0x2, {0x0, 0x1}, {0x7f, 0x2}, @cond=[{0x22d, 0x3ff, 0x404, 0x2, 0x1, 0xa}, {0x0, 0xa0, 0x1, 0x21, 0x800, 0xff01}]})
write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x12d8)

4.53815298s ago: executing program 5 (id=1598):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x2800000, &(0x7f0000000380)=ANY=[@ANYRES16, @ANYRESDEC=0x0, @ANYRESHEX=0x0, @ANYRES8, @ANYRES16], 0xfd, 0x5aca, &(0x7f0000006340)="$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")
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x4020bc10, &(0x7f0000000280)=0x1)

3.070143775s ago: executing program 1 (id=1599):
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r0}, 0x10)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0)
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000780)=ANY=[], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

2.769689281s ago: executing program 5 (id=1601):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
recvmsg$can_j1939(r0, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x10000)

2.158147743s ago: executing program 2 (id=1602):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@measure}, {@smackfsfloor}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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")
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x1, 0x2}, [], {}, [], {0x10, 0x5}}, 0x24, 0x2)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50)
listxattr(&(0x7f0000001140)='./file1\x00', &(0x7f0000001180)=""/191, 0xbf)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7020000030000008500000086000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002700)=""/4096, 0x1000}], &(0x7f0000000200), 0x1}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18)

2.034487297s ago: executing program 3 (id=1603):
socket(0x10, 0x3, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+  \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

1.87474913s ago: executing program 3 (id=1604):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x0, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000001]})

1.823690232s ago: executing program 2 (id=1605):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x0)

1.667144977s ago: executing program 3 (id=1606):
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=fscache'])
truncate(&(0x7f0000000240)='./file0\x00', 0x206b12)
creat(&(0x7f00000001c0)='./file0\x00', 0x28)
fsmount(r2, 0x0, 0x70)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)

1.399496945s ago: executing program 3 (id=1607):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})

1.22241609s ago: executing program 3 (id=1608):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x3, @loopback, 0x6}]}, &(0x7f0000000080)=0x10)

0s ago: executing program 3 (id=1609):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
unshare(0x2000400)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000180), 0xfea7)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r2, r0, 0x0, 0x100000000)

kernel console output (not intermixed with test programs):

263][T10372] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  408.606359][T10370] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[  408.606397][T10370]   allowing incompatible features above 0.0: (unknown version)
[  408.606420][T10370]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  408.611867][T10372] F2FS-fs (loop2): invalid crc value
[  408.621411][T10370] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  408.658946][T10370] bcachefs (loop5): initializing new filesystem
[  408.673714][T10370] bcachefs (loop5): going read-write
[  408.781413][T10115] 8021q: adding VLAN 0 to HW filter on device batadv0
[  408.789903][T10372] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  408.797709][T10372] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  408.821698][T10374] f2fs_ckpt-7:2: attempt to access beyond end of device
[  408.821698][T10374] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  408.867050][T10374] CPU: 0 UID: 0 PID: 10374 Comm: f2fs_ckpt-7:2 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) 
[  408.867104][T10374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  408.867126][T10374] Call Trace:
[  408.867138][T10374]  <TASK>
[  408.867152][T10374]  dump_stack_lvl+0x16c/0x1f0
[  408.867218][T10374]  f2fs_handle_critical_error+0x621/0x9f0
[  408.867267][T10374]  ? srso_alias_return_thunk+0x5/0xfbef5
[  408.867312][T10374]  ? f2fs_build_fault_attr+0x53/0x1f0
[  408.867362][T10374]  f2fs_write_end_io+0x785/0xc20
[  408.867417][T10374]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  408.867474][T10374]  ? srso_alias_return_thunk+0x5/0xfbef5
[  408.867540][T10374]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  408.867588][T10374]  bio_endio+0x70d/0x850
[  408.867630][T10374]  submit_bio_noacct+0x56d/0x1eb0
[  408.867692][T10374]  __submit_merged_bio+0x33c/0x770
[  408.867748][T10374]  __submit_merged_write_cond+0x319/0x3f0
[  408.867813][T10374]  f2fs_write_cache_pages+0x2067/0x2570
[  408.867906][T10374]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  408.868046][T10374]  ? srso_alias_return_thunk+0x5/0xfbef5
[  408.868136][T10374]  ? __bfs+0x148/0x290
[  408.868194][T10374]  ? srso_alias_return_thunk+0x5/0xfbef5
[  408.868248][T10374]  f2fs_write_data_pages+0x4ad/0xd90
[  408.868316][T10374]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  408.868396][T10374]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  408.868457][T10374]  do_writepages+0x27a/0x600
[  408.868529][T10374]  ? __pfx_do_writepages+0x10/0x10
[  408.868585][T10374]  ? do_raw_spin_unlock+0x172/0x230
[  408.868626][T10374]  ? srso_alias_return_thunk+0x5/0xfbef5
[  408.868670][T10374]  ? _raw_spin_unlock+0x28/0x50
[  408.868729][T10374]  filemap_fdatawrite_wbc+0x104/0x160
[  408.868795][T10374]  __filemap_fdatawrite_range+0xb2/0xf0
[  408.868841][T10374]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[  408.868956][T10374]  ? find_held_lock+0x2b/0x80
[  408.869002][T10374]  ? srso_alias_return_thunk+0x5/0xfbef5
[  408.869048][T10374]  ? do_raw_spin_unlock+0x172/0x230
[  408.869089][T10374]  ? srso_alias_return_thunk+0x5/0xfbef5
[  408.869142][T10374]  f2fs_sync_dirty_inodes+0x2a9/0x990
[  408.869227][T10374]  block_operations+0x2a3/0xfd0
[  408.869300][T10374]  ? __pfx_block_operations+0x10/0x10
[  408.869426][T10374]  ? srso_alias_return_thunk+0x5/0xfbef5
[  408.869470][T10374]  ? down_write+0x14d/0x200
[  408.869514][T10374]  ? __pfx_down_write+0x10/0x10
[  408.869555][T10374]  ? srso_alias_return_thunk+0x5/0xfbef5
[  408.869600][T10374]  ? rcu_is_watching+0x12/0xc0
[  408.869653][T10374]  f2fs_write_checkpoint+0x2b8/0x4c60
[  408.869718][T10374]  ? srso_alias_return_thunk+0x5/0xfbef5
[  408.869766][T10374]  ? srso_alias_return_thunk+0x5/0xfbef5
[  408.869810][T10374]  ? down_write+0x14d/0x200
[  408.869848][T10374]  ? __pfx_down_write+0x10/0x10
[  408.869903][T10374]  __checkpoint_and_complete_reqs+0xe8/0x350
[  408.869975][T10374]  ? __pfx___checkpoint_and_complete_reqs+0x10/0x10
[  408.870063][T10374]  issue_checkpoint_thread+0xe8/0x2e0
[  408.870129][T10374]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  408.870197][T10374]  ? __pfx_autoremove_wake_function+0x10/0x10
[  408.870252][T10374]  ? lockdep_hardirqs_on+0x7c/0x110
[  408.870309][T10374]  ? srso_alias_return_thunk+0x5/0xfbef5
[  408.870357][T10374]  ? srso_alias_return_thunk+0x5/0xfbef5
[  408.870400][T10374]  ? __kthread_parkme+0x19e/0x250
[  408.870480][T10374]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  408.870542][T10374]  kthread+0x3c5/0x780
[  408.870578][T10374]  ? __pfx_kthread+0x10/0x10
[  408.870614][T10374]  ? srso_alias_return_thunk+0x5/0xfbef5
[  408.870658][T10374]  ? rcu_is_watching+0x12/0xc0
[  408.870704][T10374]  ? __pfx_kthread+0x10/0x10
[  408.870741][T10374]  ret_from_fork+0x5d7/0x6f0
[  408.870794][T10374]  ? __pfx_kthread+0x10/0x10
[  408.870829][T10374]  ret_from_fork_asm+0x1a/0x30
[  408.870897][T10374]  </TASK>
[  410.260466][T10374] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  410.277782][T10370] bcachefs (loop5): marking superblocks
[  410.293216][T10370] bcachefs (loop5): initializing freespace
[  410.303890][T10370] bcachefs (loop5): done initializing freespace
[  410.313441][T10370] bcachefs (loop5): reading snapshots table
[  410.319419][T10370] bcachefs (loop5): reading snapshots done
[  410.531699][T10370] bcachefs (loop5):  loop5: Superblock write was silently dropped! (seq 0 expected 42)
[  410.542337][T10370] bcachefs (loop5): done starting filesystem
[  410.739445][ T5849] bcachefs (loop5): shutting down
[  410.767553][ T5849] bcachefs (loop5): going read-only
[  410.792021][ T5849] bcachefs (loop5): finished waiting for writes to stop
[  410.891250][ T5849] bcachefs (loop5): flushing journal and stopping allocators, journal seq 3
[  410.932221][T10371] loop3: detected capacity change from 0 to 40427
[  410.962774][T10371] F2FS-fs (loop3): build fault injection rate: 771
[  410.987132][ T5849] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3
[  411.009809][T10371] F2FS-fs (loop3): invalid crc value
[  411.047452][ T5849] bcachefs (loop5): clean shutdown complete, journal seq 4
[  411.085169][T10115] veth0_vlan: entered promiscuous mode
[  411.091382][ T5849] bcachefs (loop5): marking filesystem clean
[  411.131117][T10115] veth1_vlan: entered promiscuous mode
[  411.234876][ T5849] bcachefs (loop5): shutdown complete
[  411.240500][T10115] veth0_macvtap: entered promiscuous mode
[  411.283548][T10115] veth1_macvtap: entered promiscuous mode
[  411.374346][T10115] batman_adv: batadv0: Interface activated: batadv_slave_0
[  411.414175][T10115] batman_adv: batadv0: Interface activated: batadv_slave_1
[  411.439612][T10115] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  411.448766][T10115] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  411.457610][T10115] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  411.467041][T10115] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  411.664468][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  411.693612][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  411.785225][ T5997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  411.813068][ T5997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  412.100297][   T43] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  412.266155][   T43] usb 3-1: config 2 has an invalid interface number: 174 but max is 0
[  412.276960][   T43] usb 3-1: config 2 has no interface number 0
[  412.296043][   T43] usb 3-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E
[  412.325307][   T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.330209][   T43] usb 3-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023
[  412.368588][   T43] usb 3-1: config 2 interface 174 altsetting 0 endpoint 0x82 has invalid maxpacket 12592, setting to 1024
[  412.411867][   T43] usb 3-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  412.463912][   T43] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e
[  412.480456][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  412.495213][   T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.519400][   T43] usb 3-1: Product: syz
[  412.525389][   T43] usb 3-1: Manufacturer: syz
[  412.540275][   T43] usb 3-1: SerialNumber: syz
[  412.566806][T10422] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  412.590026][T10422] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  412.649264][   T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.832162][   T43] usb 3-1: probing VID:PID(0424:012C)   
[  412.849953][   T43] usb 3-1: vub300 testing BULK IN EndPoint(0) 8E
[  412.858962][   T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.869547][   T43] usb 3-1: vub300 testing BULK IN EndPoint(1) 82
[  412.889810][   T43] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs
[  412.912411][   T43] vub300 3-1:2.174: probe with driver vub300 failed with error -22
[  412.924455][   T43] usb 3-1: USB disconnect, device number 10
[  412.943365][T10426] loop0: detected capacity change from 0 to 40427
[  412.953242][T10426] F2FS-fs (loop0): build fault injection rate: 690
[  412.959797][T10426] F2FS-fs (loop0): Image doesn't support compression
[  412.968610][T10426] F2FS-fs (loop0): Image doesn't support compression
[  412.977607][T10426] F2FS-fs (loop0): invalid crc value
[  413.056386][T10426] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  413.077038][   T30] kauditd_printk_skb: 79 callbacks suppressed
[  413.077064][   T30] audit: type=1800 audit(1750046245.099:475): pid=10426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1367" name="file1" dev="loop0" ino=10 res=0 errno=0
[  413.126863][ T5837] syz-executor: attempt to access beyond end of device
[  413.126863][ T5837] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  413.149879][ T5837] CPU: 1 UID: 0 PID: 5837 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) 
[  413.149929][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  413.149951][ T5837] Call Trace:
[  413.149963][ T5837]  <TASK>
[  413.149976][ T5837]  dump_stack_lvl+0x16c/0x1f0
[  413.150044][ T5837]  f2fs_handle_critical_error+0x621/0x9f0
[  413.150093][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  413.150139][ T5837]  ? f2fs_build_fault_attr+0x53/0x1f0
[  413.150195][ T5837]  f2fs_write_end_io+0x785/0xc20
[  413.150251][ T5837]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  413.150307][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  413.150366][ T5837]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  413.150415][ T5837]  bio_endio+0x70d/0x850
[  413.150486][ T5837]  submit_bio_noacct+0x56d/0x1eb0
[  413.150548][ T5837]  __submit_merged_bio+0x33c/0x770
[  413.150605][ T5837]  __submit_merged_write_cond+0x319/0x3f0
[  413.150670][ T5837]  f2fs_write_cache_pages+0x2067/0x2570
[  413.150760][ T5837]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  413.150827][ T5837]  ? do_raw_spin_lock+0x12c/0x2b0
[  413.150869][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  413.150914][ T5837]  ? find_held_lock+0x2b/0x80
[  413.150963][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  413.151035][ T5837]  ? __pfx_debug_object_activate+0x10/0x10
[  413.151154][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  413.151198][ T5837]  ? mod_memcg_lruvec_state+0x394/0x610
[  413.151269][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  413.151323][ T5837]  f2fs_write_data_pages+0x4ad/0xd90
[  413.151392][ T5837]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  413.151447][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  413.151513][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  413.151566][ T5837]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  413.151629][ T5837]  do_writepages+0x27a/0x600
[  413.151696][ T5837]  ? __pfx_do_writepages+0x10/0x10
[  413.151753][ T5837]  ? do_raw_spin_unlock+0x172/0x230
[  413.151802][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  413.151846][ T5837]  ? _raw_spin_unlock+0x28/0x50
[  413.151907][ T5837]  filemap_fdatawrite_wbc+0x104/0x160
[  413.151974][ T5837]  __filemap_fdatawrite_range+0xb2/0xf0
[  413.152022][ T5837]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[  413.152136][ T5837]  ? find_held_lock+0x2b/0x80
[  413.152183][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  413.152228][ T5837]  ? do_raw_spin_unlock+0x172/0x230
[  413.152269][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  413.152323][ T5837]  f2fs_sync_dirty_inodes+0x2a9/0x990
[  413.152408][ T5837]  block_operations+0x2a3/0xfd0
[  413.152474][ T5837]  ? __pfx___schedule+0x10/0x10
[  413.152538][ T5837]  ? __pfx_block_operations+0x10/0x10
[  413.152664][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  413.152708][ T5837]  ? down_write+0x14d/0x200
[  413.152746][ T5837]  ? __pfx_down_write+0x10/0x10
[  413.152789][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  413.152834][ T5837]  ? rcu_is_watching+0x12/0xc0
[  413.152888][ T5837]  f2fs_write_checkpoint+0x2b8/0x4c60
[  413.152967][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  413.153011][ T5837]  ? rcu_is_watching+0x12/0xc0
[  413.153055][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  413.153099][ T5837]  ? kthread_stop+0x273/0x650
[  413.153165][ T5837]  kill_f2fs_super+0x3c2/0x470
[  413.153227][ T5837]  ? __pfx_kill_f2fs_super+0x10/0x10
[  413.153286][ T5837]  ? lockdep_hardirqs_on+0x7c/0x110
[  413.153369][ T5837]  deactivate_locked_super+0xc1/0x1a0
[  413.153411][ T5837]  deactivate_super+0xde/0x100
[  413.153452][ T5837]  cleanup_mnt+0x225/0x450
[  413.153503][ T5837]  task_work_run+0x150/0x240
[  413.153544][ T5837]  ? __pfx_task_work_run+0x10/0x10
[  413.153579][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  413.153627][ T5837]  ? __pfx___x64_sys_umount+0x10/0x10
[  413.153686][ T5837]  exit_to_user_mode_loop+0xeb/0x110
[  413.153730][ T5837]  do_syscall_64+0x3f6/0x4c0
[  413.153771][ T5837]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.153809][ T5837] RIP: 0033:0x7f08ea78fc57
[  413.153838][ T5837] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  413.153873][ T5837] RSP: 002b:00007ffcbadb1338 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  413.153907][ T5837] RAX: 0000000000000000 RBX: 00007f08ea810925 RCX: 00007f08ea78fc57
[  413.153931][ T5837] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcbadb13f0
[  413.153953][ T5837] RBP: 00007ffcbadb13f0 R08: 0000000000000000 R09: 0000000000000000
[  413.153976][ T5837] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcbadb2480
[  413.154000][ T5837] R13: 00007f08ea810925 R14: 0000000000064d7e R15: 00007ffcbadb24c0
[  413.154054][ T5837]  </TASK>
[  413.628868][ T5837] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  413.927623][T10437] loop1: detected capacity change from 0 to 1024
[  413.986205][T10437] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  414.100995][T10437] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.1370: missing EA_INODE flag
[  414.134294][T10437] EXT4-fs (loop1): Remounting filesystem read-only
[  414.146631][   T59] bridge_slave_1: left allmulticast mode
[  414.156131][   T59] bridge_slave_1: left promiscuous mode
[  414.170519][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[  414.301567][   T59] bridge_slave_0: left allmulticast mode
[  414.322727][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  414.332519][   T59] bridge_slave_0: left promiscuous mode
[  414.338430][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[  414.701237][T10450] loop3: detected capacity change from 0 to 40427
[  414.709891][T10450] F2FS-fs (loop3): Wrong NAT boundary, start(2560) end(3584) blocks(512)
[  414.718648][T10450] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  414.730528][T10450] F2FS-fs (loop3): invalid crc value
[  414.743589][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  414.754118][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  414.763608][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  414.772558][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  414.781309][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  414.850405][ T6215] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  414.891107][T10450] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  414.898266][T10450] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  415.030736][ T6215] usb 1-1: Using ep0 maxpacket: 8
[  415.051334][ T6215] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3
[  415.067871][ T6215] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  415.077360][ T6215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.092143][ T6215] usb 1-1: Product: syz
[  415.097080][ T6215] usb 1-1: Manufacturer: syz
[  415.101866][ T6215] usb 1-1: SerialNumber: syz
[  415.109761][ T6215] usb 1-1: config 0 descriptor??
[  415.151043][ T5838] syz-executor: attempt to access beyond end of device
[  415.151043][ T5838] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  415.169520][ T6215] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  415.197245][ T6215] usb 1-1: setting power ON
[  415.210509][ T5838] CPU: 1 UID: 0 PID: 5838 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) 
[  415.210558][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  415.210579][ T5838] Call Trace:
[  415.210590][ T5838]  <TASK>
[  415.210602][ T5838]  dump_stack_lvl+0x16c/0x1f0
[  415.210664][ T5838]  f2fs_handle_critical_error+0x621/0x9f0
[  415.210708][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.210757][ T5838]  ? f2fs_build_fault_attr+0x53/0x1f0
[  415.210801][ T5838]  f2fs_write_end_io+0x785/0xc20
[  415.210850][ T5838]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  415.210901][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.210952][ T5838]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  415.210997][ T5838]  bio_endio+0x70d/0x850
[  415.211035][ T5838]  submit_bio_noacct+0x56d/0x1eb0
[  415.211090][ T5838]  __submit_merged_bio+0x33c/0x770
[  415.211141][ T5838]  __submit_merged_write_cond+0x319/0x3f0
[  415.211199][ T5838]  f2fs_write_cache_pages+0x2067/0x2570
[  415.211279][ T5838]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  415.211333][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.211376][ T5838]  ? exit_to_user_mode_loop+0xeb/0x110
[  415.211420][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.211461][ T5838]  ? __lock_acquire+0xb8a/0x1c90
[  415.211550][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.211617][ T5838]  ? isp1760_register+0x52f/0x12a0
[  415.211707][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.211753][ T5838]  ? _raw_spin_unlock+0x28/0x50
[  415.211801][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.211842][ T5838]  ? free_unref_folios+0x1195/0x1800
[  415.211885][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.211934][ T5838]  f2fs_write_data_pages+0x4ad/0xd90
[  415.211997][ T5838]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  415.212065][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.212107][ T5838]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  415.212164][ T5838]  do_writepages+0x27a/0x600
[  415.212226][ T5838]  ? __pfx_do_writepages+0x10/0x10
[  415.212279][ T5838]  ? do_raw_spin_unlock+0x172/0x230
[  415.212318][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.212359][ T5838]  ? _raw_spin_unlock+0x28/0x50
[  415.212414][ T5838]  filemap_fdatawrite_wbc+0x104/0x160
[  415.212476][ T5838]  __filemap_fdatawrite_range+0xb2/0xf0
[  415.212520][ T5838]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[  415.212619][ T5838]  ? find_held_lock+0x2b/0x80
[  415.212663][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.212707][ T5838]  ? do_raw_spin_unlock+0x172/0x230
[  415.212749][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.212798][ T5838]  f2fs_sync_dirty_inodes+0x2a9/0x990
[  415.212875][ T5838]  block_operations+0x2a3/0xfd0
[  415.212936][ T5838]  ? __pfx___schedule+0x10/0x10
[  415.212992][ T5838]  ? __pfx_block_operations+0x10/0x10
[  415.213103][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.213144][ T5838]  ? down_write+0x14d/0x200
[  415.213180][ T5838]  ? __pfx_down_write+0x10/0x10
[  415.213220][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.213261][ T5838]  ? rcu_is_watching+0x12/0xc0
[  415.213311][ T5838]  f2fs_write_checkpoint+0x2b8/0x4c60
[  415.213377][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.213419][ T5838]  ? kfree+0x2b4/0x4d0
[  415.213472][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.213517][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.213557][ T5838]  ? rcu_is_watching+0x12/0xc0
[  415.213600][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.213644][ T5838]  ? kthread_stop+0x273/0x650
[  415.213709][ T5838]  kill_f2fs_super+0x3c2/0x470
[  415.213781][ T5838]  ? __pfx_kill_f2fs_super+0x10/0x10
[  415.213841][ T5838]  ? lockdep_hardirqs_on+0x7c/0x110
[  415.213920][ T5838]  deactivate_locked_super+0xc1/0x1a0
[  415.213961][ T5838]  deactivate_super+0xde/0x100
[  415.214000][ T5838]  cleanup_mnt+0x225/0x450
[  415.214045][ T5838]  task_work_run+0x150/0x240
[  415.214084][ T5838]  ? __pfx_task_work_run+0x10/0x10
[  415.214119][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.214167][ T5838]  ? __pfx___x64_sys_umount+0x10/0x10
[  415.214224][ T5838]  exit_to_user_mode_loop+0xeb/0x110
[  415.214267][ T5838]  do_syscall_64+0x3f6/0x4c0
[  415.214306][ T5838]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.214344][ T5838] RIP: 0033:0x7f704ed8fc57
[  415.214373][ T5838] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  415.214410][ T5838] RSP: 002b:00007ffdec966398 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  415.214444][ T5838] RAX: 0000000000000000 RBX: 00007f704ee10925 RCX: 00007f704ed8fc57
[  415.214468][ T5838] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdec966450
[  415.214491][ T5838] RBP: 00007ffdec966450 R08: 0000000000000000 R09: 0000000000000000
[  415.214515][ T5838] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdec9674e0
[  415.214538][ T5838] R13: 00007f704ee10925 R14: 00000000000654e5 R15: 00007ffdec967520
[  415.214589][ T5838]  </TASK>
[  415.214602][ T5838] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  415.227666][ T6215] dvb-usb: bulk message failed: -22 (2/0)
[  415.820858][T10470] block nbd5: Device being setup by another task
[  415.829696][ T6215] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  415.829864][T10465] block nbd5: shutting down sockets
[  415.854445][ T6215] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  415.873785][ T6215] usb 1-1: media controller created
[  415.977484][ T6215] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  416.080320][ T6215] usb 1-1: selecting invalid altsetting 6
[  416.110925][ T6215] usb 1-1: digital interface selection failed (-22)
[  416.117641][ T6215] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  416.171926][ T6215] usb 1-1: setting power OFF
[  416.177121][ T6215] dvb-usb: bulk message failed: -22 (2/0)
[  416.189081][ T6215] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  416.212351][ T6215] (NULL device *): no alternate interface
[  416.306477][T10478] loop5: detected capacity change from 0 to 512
[  416.396973][T10478] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  416.507467][T10478] EXT4-fs (loop5): orphan cleanup on readonly fs
[  416.529303][T10478] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.1381: bg 0: block 248: padding at end of block bitmap is not set
[  416.546429][T10478] Quota error (device loop5): write_blk: dquota write failed
[  416.554509][T10478] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  416.564855][T10478] EXT4-fs error (device loop5): ext4_acquire_dquot:6931: comm syz.5.1381: Failed to acquire dquot type 1
[  416.591270][T10478] EXT4-fs (loop5): 1 truncate cleaned up
[  416.642917][T10478] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  416.882235][ T5844] Bluetooth: hci4: command tx timeout
[  417.264177][ T6215] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  417.373997][ T6215] usb 1-1: USB disconnect, device number 4
[  418.327593][T10485] loop3: detected capacity change from 0 to 512
[  418.335026][T10485] EXT4-fs: Ignoring removed mblk_io_submit option
[  418.812280][T10485] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  418.880847][T10485] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.1377: iget: bad extended attribute block 1
[  418.896257][T10485] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1377: couldn't read orphan inode 15 (err -117)
[  418.929894][T10485] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  418.984526][T10485] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  419.003014][ T5844] Bluetooth: hci4: command tx timeout
[  419.065443][ T5849] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  419.369985][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  419.399887][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  419.424209][   T59] bond0 (unregistering): Released all slaves
[  419.497016][T10485] lo speed is unknown, defaulting to 1000
[  419.895216][T10453] lo speed is unknown, defaulting to 1000
[  420.130398][ T5913] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  420.178214][T10509] block nbd5: shutting down sockets
[  420.300292][ T5913] usb 2-1: Using ep0 maxpacket: 8
[  420.339948][ T5913] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  420.384023][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  420.392702][   T59] hsr_slave_0: left promiscuous mode
[  420.415413][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  420.435627][   T59] hsr_slave_1: left promiscuous mode
[  420.449797][ T5913] pvrusb2: Hardware description: Terratec Grabster AV400
[  420.471299][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  420.478757][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[  420.500492][ T5913] pvrusb2: **********
[  420.504538][ T5913] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  420.524694][ T5913] pvrusb2: Important functionality might not be entirely working.
[  420.532806][ T5913] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  420.549390][ T5913] pvrusb2: **********
[  420.556229][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  420.571820][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[  420.686482][ T2340] pvrusb2: Invalid write control endpoint
[  420.686486][T10521] loop3: detected capacity change from 0 to 64
[  420.706826][   T59] veth1_macvtap: left promiscuous mode
[  420.718261][   T59] veth0_macvtap: left promiscuous mode
[  420.734956][   T59] veth1_vlan: left promiscuous mode
[  420.750421][   T59] veth0_vlan: left promiscuous mode
[  420.775498][T10521] hfs: hfs: Invalid key length: 94
[  420.834516][ T2340] pvrusb2: Invalid write control endpoint
[  420.854336][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  420.895366][T10526] loop5: detected capacity change from 0 to 1024
[  420.900354][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  420.909404][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  420.944346][ T2340] pvrusb2: Device being rendered inoperable
[  420.965676][T10501] pvrusb2: Attempted to execute control transfer when device not ok
[  420.975313][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  420.978172][  T972] usb 2-1: USB disconnect, device number 6
[  421.006154][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  421.014510][T10526] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  421.021580][ T2340] pvrusb2: Attached sub-driver cx25840
[  421.031259][ T5844] Bluetooth: hci4: command tx timeout
[  421.075183][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  421.133387][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  421.170832][T10526] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #11: comm syz.5.1400: missing EA_INODE flag
[  421.198493][T10526] EXT4-fs (loop5): Remounting filesystem read-only
[  421.429618][ T5849] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  421.689009][T10517] loop2: detected capacity change from 0 to 40427
[  421.719922][T10517] F2FS-fs (loop2): build fault injection rate: 690
[  421.744663][T10517] F2FS-fs (loop2): Image doesn't support compression
[  421.758667][T10517] F2FS-fs (loop2): Image doesn't support compression
[  421.783212][T10517] F2FS-fs (loop2): invalid crc value
[  421.988836][T10546] loop0: detected capacity change from 0 to 256
[  422.018068][T10546] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  422.061520][T10547] block nbd1: shutting down sockets
[  422.068058][T10546] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  422.097778][T10517] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  422.170415][   T30] audit: type=1800 audit(1750046254.189:476): pid=10517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1398" name="file1" dev="loop2" ino=10 res=0 errno=0
[  422.295090][ T5831] syz-executor: attempt to access beyond end of device
[  422.295090][ T5831] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  422.345460][ T5831] CPU: 1 UID: 0 PID: 5831 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) 
[  422.345525][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  422.345548][ T5831] Call Trace:
[  422.345560][ T5831]  <TASK>
[  422.345573][ T5831]  dump_stack_lvl+0x16c/0x1f0
[  422.345644][ T5831]  f2fs_handle_critical_error+0x621/0x9f0
[  422.345698][ T5831]  ? srso_alias_return_thunk+0x5/0xfbef5
[  422.345744][ T5831]  ? f2fs_build_fault_attr+0x53/0x1f0
[  422.345796][ T5831]  f2fs_write_end_io+0x785/0xc20
[  422.345851][ T5831]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  422.345909][ T5831]  ? srso_alias_return_thunk+0x5/0xfbef5
[  422.345967][ T5831]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  422.346016][ T5831]  bio_endio+0x70d/0x850
[  422.346058][ T5831]  submit_bio_noacct+0x56d/0x1eb0
[  422.346121][ T5831]  __submit_merged_bio+0x33c/0x770
[  422.346180][ T5831]  __submit_merged_write_cond+0x319/0x3f0
[  422.346246][ T5831]  f2fs_write_cache_pages+0x2067/0x2570
[  422.346339][ T5831]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  422.346413][ T5831]  ? srso_alias_return_thunk+0x5/0xfbef5
[  422.346457][ T5831]  ? __lock_acquire+0x622/0x1c90
[  422.346539][ T5831]  ? srso_alias_return_thunk+0x5/0xfbef5
[  422.346688][ T5831]  ? srso_alias_return_thunk+0x5/0xfbef5
[  422.346733][ T5831]  ? mod_memcg_lruvec_state+0x394/0x610
[  422.346805][ T5831]  ? srso_alias_return_thunk+0x5/0xfbef5
[  422.346860][ T5831]  f2fs_write_data_pages+0x4ad/0xd90
[  422.346929][ T5831]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  422.346983][ T5831]  ? srso_alias_return_thunk+0x5/0xfbef5
[  422.347043][ T5831]  ? srso_alias_return_thunk+0x5/0xfbef5
[  422.347095][ T5831]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  422.347158][ T5831]  do_writepages+0x27a/0x600
[  422.347226][ T5831]  ? __pfx_do_writepages+0x10/0x10
[  422.347283][ T5831]  ? do_raw_spin_unlock+0x172/0x230
[  422.347324][ T5831]  ? srso_alias_return_thunk+0x5/0xfbef5
[  422.347369][ T5831]  ? _raw_spin_unlock+0x28/0x50
[  422.347430][ T5831]  filemap_fdatawrite_wbc+0x104/0x160
[  422.347503][ T5831]  __filemap_fdatawrite_range+0xb2/0xf0
[  422.347550][ T5831]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[  422.347667][ T5831]  ? find_held_lock+0x2b/0x80
[  422.347715][ T5831]  ? srso_alias_return_thunk+0x5/0xfbef5
[  422.347761][ T5831]  ? do_raw_spin_unlock+0x172/0x230
[  422.347802][ T5831]  ? srso_alias_return_thunk+0x5/0xfbef5
[  422.347856][ T5831]  f2fs_sync_dirty_inodes+0x2a9/0x990
[  422.347942][ T5831]  block_operations+0x2a3/0xfd0
[  422.348008][ T5831]  ? __pfx___schedule+0x10/0x10
[  422.348068][ T5831]  ? __pfx_block_operations+0x10/0x10
[  422.348196][ T5831]  ? srso_alias_return_thunk+0x5/0xfbef5
[  422.348241][ T5831]  ? down_write+0x14d/0x200
[  422.348280][ T5831]  ? __pfx_down_write+0x10/0x10
[  422.348322][ T5831]  ? srso_alias_return_thunk+0x5/0xfbef5
[  422.348367][ T5831]  ? rcu_is_watching+0x12/0xc0
[  422.348422][ T5831]  f2fs_write_checkpoint+0x2b8/0x4c60
[  422.348509][ T5831]  ? srso_alias_return_thunk+0x5/0xfbef5
[  422.348554][ T5831]  ? rcu_is_watching+0x12/0xc0
[  422.348599][ T5831]  ? srso_alias_return_thunk+0x5/0xfbef5
[  422.348644][ T5831]  ? kthread_stop+0x273/0x650
[  422.348711][ T5831]  kill_f2fs_super+0x3c2/0x470
[  422.348774][ T5831]  ? __pfx_kill_f2fs_super+0x10/0x10
[  422.348833][ T5831]  ? lockdep_hardirqs_on+0x7c/0x110
[  422.348917][ T5831]  deactivate_locked_super+0xc1/0x1a0
[  422.348958][ T5831]  deactivate_super+0xde/0x100
[  422.349000][ T5831]  cleanup_mnt+0x225/0x450
[  422.349047][ T5831]  task_work_run+0x150/0x240
[  422.349088][ T5831]  ? __pfx_task_work_run+0x10/0x10
[  422.349124][ T5831]  ? srso_alias_return_thunk+0x5/0xfbef5
[  422.349173][ T5831]  ? __pfx___x64_sys_umount+0x10/0x10
[  422.349232][ T5831]  exit_to_user_mode_loop+0xeb/0x110
[  422.349276][ T5831]  do_syscall_64+0x3f6/0x4c0
[  422.349317][ T5831]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  422.349355][ T5831] RIP: 0033:0x7f9bf678fc57
[  422.349385][ T5831] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  422.349421][ T5831] RSP: 002b:00007fffb1600848 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  422.349458][ T5831] RAX: 0000000000000000 RBX: 00007f9bf6810925 RCX: 00007f9bf678fc57
[  422.349489][ T5831] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffb1600900
[  422.349513][ T5831] RBP: 00007fffb1600900 R08: 0000000000000000 R09: 0000000000000000
[  422.349537][ T5831] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffb1601990
[  422.349561][ T5831] R13: 00007f9bf6810925 R14: 0000000000067106 R15: 00007fffb16019d0
[  422.349616][ T5831]  </TASK>
[  422.349631][ T5831] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  423.110701][ T5844] Bluetooth: hci4: command tx timeout
[  423.272260][T10554] loop0: detected capacity change from 0 to 512
[  423.285170][T10554] EXT4-fs: Ignoring removed mblk_io_submit option
[  423.365130][T10554] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  423.456251][T10535] loop3: detected capacity change from 0 to 40427
[  424.023137][T10554] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.1409: iget: bad extended attribute block 1
[  424.037523][T10554] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1409: couldn't read orphan inode 15 (err -117)
[  424.051559][T10554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  424.075927][T10553] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  424.104427][T10535] F2FS-fs (loop3): build fault injection rate: 771
[  424.227367][T10535] F2FS-fs (loop3): invalid crc value
[  424.325291][T10537] loop5: detected capacity change from 0 to 32768
[  424.643704][T10537] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  424.643756][T10537]   allowing incompatible features above 0.0: (unknown version)
[  424.643778][T10537]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  424.692951][   T59] team0 (unregistering): Port device team_slave_1 removed
[  424.698147][T10537] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  424.698203][T10537] bcachefs (loop5): initializing new filesystem
[  424.732304][T10537] syz.5.1403: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  424.781857][T10537] CPU: 1 UID: 0 PID: 10537 Comm: syz.5.1403 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) 
[  424.781914][T10537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  424.781938][T10537] Call Trace:
[  424.781949][T10537]  <TASK>
[  424.781963][T10537]  dump_stack_lvl+0x16c/0x1f0
[  424.782032][T10537]  warn_alloc+0x248/0x3a0
[  424.782077][T10537]  ? __pfx_warn_alloc+0x10/0x10
[  424.782141][T10537]  ? bch2_fs_journal_start+0x3b2/0x14a0
[  424.782177][T10537]  ? srso_alias_return_thunk+0x5/0xfbef5
[  424.782224][T10537]  ? __vmalloc_node_noprof+0xad/0xf0
[  424.782295][T10537]  __vmalloc_node_range_noprof+0x101b/0x14b0
[  424.782377][T10537]  ? bch2_fs_journal_start+0x3b2/0x14a0
[  424.782423][T10537]  ? srso_alias_return_thunk+0x5/0xfbef5
[  424.782473][T10537]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  424.782545][T10537]  ? srso_alias_return_thunk+0x5/0xfbef5
[  424.782591][T10537]  ? __alloc_pages_noprof+0xb/0x1b0
[  424.782633][T10537]  ? ___kmalloc_large_node+0x84/0x1e0
[  424.782690][T10537]  ? srso_alias_return_thunk+0x5/0xfbef5
[  424.782740][T10537]  ? srso_alias_return_thunk+0x5/0xfbef5
[  424.782795][T10537]  __kvmalloc_node_noprof+0x30a/0x620
[  424.782835][T10537]  ? bch2_fs_journal_start+0x3b2/0x14a0
[  424.782870][T10537]  ? __genradix_iter_peek_prev+0x28c/0x4c0
[  424.782937][T10537]  ? rcu_is_watching+0x12/0xc0
[  424.782988][T10537]  ? bch2_fs_journal_start+0x3b2/0x14a0
[  424.783035][T10537]  ? bch2_fs_journal_start+0x3b2/0x14a0
[  424.783076][T10537]  bch2_fs_journal_start+0x3b2/0x14a0
[  424.783115][T10537]  ? bch2_trans_put+0x86c/0x10d0
[  424.783178][T10537]  ? srso_alias_return_thunk+0x5/0xfbef5
[  424.783229][T10537]  ? srso_alias_return_thunk+0x5/0xfbef5
[  424.783276][T10537]  ? find_held_lock+0x2b/0x80
[  424.783321][T10537]  ? __pfx_bch2_fs_journal_start+0x10/0x10
[  424.783361][T10537]  ? enumerated_ref_put+0xc3/0x270
[  424.783402][T10537]  ? srso_alias_return_thunk+0x5/0xfbef5
[  424.783448][T10537]  ? bch2_fs_journal_alloc+0x3f6/0x5e0
[  424.783529][T10537]  bch2_fs_initialize+0xd94/0x25b0
[  424.783590][T10537]  ? sscanf+0x100/0x100
[  424.783652][T10537]  ? __pfx_bch2_fs_initialize+0x10/0x10
[  424.783704][T10537]  ? vsnprintf+0x318/0x1160
[  424.783793][T10537]  ? srso_alias_return_thunk+0x5/0xfbef5
[  424.783843][T10537]  ? rcu_is_watching+0x12/0xc0
[  424.783919][T10537]  ? srso_alias_return_thunk+0x5/0xfbef5
[  424.783965][T10537]  ? __lock_acquire+0xb8a/0x1c90
[  424.784099][T10537]  ? srso_alias_return_thunk+0x5/0xfbef5
[  424.784146][T10537]  ? srso_alias_return_thunk+0x5/0xfbef5
[  424.784195][T10537]  ? srso_alias_return_thunk+0x5/0xfbef5
[  424.784253][T10537]  ? bch2_fs_start+0xf50/0x1410
[  424.784287][T10537]  ? srso_alias_return_thunk+0x5/0xfbef5
[  424.784332][T10537]  bch2_fs_start+0xf50/0x1410
[  424.784386][T10537]  bch2_fs_get_tree+0xdb4/0x1b20
[  424.784447][T10537]  ? __pfx_bch2_fs_get_tree+0x10/0x10
[  424.784501][T10537]  ? srso_alias_return_thunk+0x5/0xfbef5
[  424.784574][T10537]  ? kfree+0x24f/0x4d0
[  424.784636][T10537]  ? __pfx_aa_get_newest_label+0x10/0x10
[  424.784680][T10537]  ? srso_alias_return_thunk+0x5/0xfbef5
[  424.784726][T10537]  ? trace_cap_capable+0x18d/0x200
[  424.784795][T10537]  ? srso_alias_return_thunk+0x5/0xfbef5
[  424.784841][T10537]  ? apparmor_capable+0x114/0x1d0
[  424.784881][T10537]  ? srso_alias_return_thunk+0x5/0xfbef5
[  424.784927][T10537]  ? srso_alias_return_thunk+0x5/0xfbef5
[  424.784982][T10537]  vfs_get_tree+0x8e/0x340
[  424.785045][T10537]  path_mount+0x1414/0x2020
[  424.785100][T10537]  ? srso_alias_return_thunk+0x5/0xfbef5
[  424.785147][T10537]  ? kmem_cache_free+0x2d1/0x4d0
[  424.785186][T10537]  ? __pfx_path_mount+0x10/0x10
[  424.785245][T10537]  ? srso_alias_return_thunk+0x5/0xfbef5
[  424.785291][T10537]  ? putname+0x154/0x1a0
[  424.785351][T10537]  __x64_sys_mount+0x28d/0x310
[  424.785406][T10537]  ? __pfx___x64_sys_mount+0x10/0x10
[  424.785458][T10537]  ? srso_alias_return_thunk+0x5/0xfbef5
[  424.785525][T10537]  do_syscall_64+0xcd/0x4c0
[  424.785566][T10537]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.785604][T10537] RIP: 0033:0x7f243af900ca
[  424.785633][T10537] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  424.785671][T10537] RSP: 002b:00007f243bd18e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  424.785706][T10537] RAX: ffffffffffffffda RBX: 00007f243bd18ef0 RCX: 00007f243af900ca
[  424.785732][T10537] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 00007f243bd18eb0
[  424.785757][T10537] RBP: 0000200000000140 R08: 00007f243bd18ef0 R09: 0000000002800000
[  424.785783][T10537] R10: 0000000002800000 R11: 0000000000000246 R12: 0000200000000100
[  424.785808][T10537] R13: 00007f243bd18eb0 R14: 0000000000005a96 R15: 0000200000000000
[  424.785858][T10537]  </TASK>
[  424.785947][T10537] Mem-Info:
[  425.361716][T10537] active_anon:12253 inactive_anon:0 isolated_anon:0
[  425.361716][T10537]  active_file:11470 inactive_file:39969 isolated_file:0
[  425.361716][T10537]  unevictable:768 dirty:154 writeback:0
[  425.361716][T10537]  slab_reclaimable:12669 slab_unreclaimable:100848
[  425.361716][T10537]  mapped:38585 shmem:9627 pagetables:974
[  425.361716][T10537]  sec_pagetables:0 bounce:0
[  425.361716][T10537]  kernel_misc_reclaimable:0
[  425.361716][T10537]  free:1287045 free_pcp:17634 free_cma:0
[  425.415118][   T59] team0 (unregistering): Port device team_slave_0 removed
[  425.425856][T10537] Node 0 active_anon:45712kB inactive_anon:0kB active_file:45880kB inactive_file:159672kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:154340kB dirty:616kB writeback:0kB shmem:33472kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12044kB pagetables:3760kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  425.519172][T10537] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  425.553479][T10537] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  425.582715][T10537] lowmem_reserve[]: 0 2481 2482 2482 2482
[  425.588565][T10537] Node 0 DMA32 free:1238780kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44164kB inactive_anon:0kB active_file:45880kB inactive_file:158360kB unevictable:1536kB writepending:612kB present:3129332kB managed:2540784kB mlocked:0kB bounce:0kB free_pcp:50140kB local_pcp:21740kB free_cma:0kB
[  425.621478][T10537] lowmem_reserve[]: 0 0 1 1 1
[  425.626450][T10537] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:4kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  425.676576][T10537] lowmem_reserve[]: 0 0 0 0 0
[  425.687084][T10576] loop3: detected capacity change from 0 to 1024
[  425.700665][T10537] Node 1 Normal free:3896320kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:22416kB local_pcp:10924kB free_cma:0kB
[  425.733826][T10537] lowmem_reserve[]: 0 0 0 0 0
[  425.751594][T10537] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  425.777117][T10537] Node 0 DMA32: 1133*4kB (UM) 135*8kB (UM) 766*16kB (UM) 504*32kB (UM) 156*64kB (UME) 77*128kB (UM) 90*256kB (UME) 59*512kB (UM) 41*1024kB (UM) 6*2048kB (UM) 263*4096kB (UM) = 1238604kB
[  425.816979][T10537] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB
[  425.834344][ T5997] hfsplus: b-tree write err: -5, ino 4
[  425.835355][T10537] Node 1 Normal: 60*4kB (U) 14*8kB (UME) 50*16kB (UME) 124*32kB (UME) 38*64kB (UME) 9*128kB (UME) 4*256kB (UM) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3896320kB
[  425.870750][T10537] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  425.889286][T10537] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[  425.914647][T10537] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  425.931762][T10537] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  425.954583][T10537] 59863 total pagecache pages
[  425.966122][T10537] 0 pages in swap cache
[  425.981327][T10537] Free swap  = 124996kB
[  425.991532][T10537] Total swap = 124996kB
[  425.995715][T10537] 2097051 pages RAM
[  425.999534][T10537] 0 pages HighMem/MovableOnly
[  426.012085][T10537] 429877 pages reserved
[  426.016284][T10537] 0 pages cma reserved
[  426.044038][T10537] bcachefs (loop5): error reallocating journal fifo (32768 open entries)
[  426.063864][T10537] bcachefs (loop5): bch2_fs_initialize(): error ENOMEM_journal_pin_fifo
[  426.075159][T10537] bcachefs (loop5): bch2_fs_start(): error starting filesystem ENOMEM_journal_pin_fifo
[  426.091098][T10537] bcachefs (loop5): shutting down
[  426.119192][T10580] loop3: detected capacity change from 0 to 1024
[  426.148603][T10580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  426.166363][T10580] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.1416: missing EA_INODE flag
[  426.168014][T10537] bcachefs (loop5): shutdown complete
[  426.185582][T10580] EXT4-fs (loop3): Remounting filesystem read-only
[  426.238578][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  426.536329][T10553] lo speed is unknown, defaulting to 1000
[  427.076864][T10453] chnl_net:caif_netlink_parms(): no params data found
[  427.245363][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  427.592968][T10453] bridge0: port 1(bridge_slave_0) entered blocking state
[  427.620427][T10453] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.627750][T10453] bridge_slave_0: entered allmulticast mode
[  427.646086][T10453] bridge_slave_0: entered promiscuous mode
[  427.666883][T10453] bridge0: port 2(bridge_slave_1) entered blocking state
[  427.690385][T10453] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.714952][T10453] bridge_slave_1: entered allmulticast mode
[  427.728934][T10453] bridge_slave_1: entered promiscuous mode
[  427.932688][T10453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  427.985122][T10453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  428.138318][T10623] loop3: detected capacity change from 0 to 256
[  428.191517][T10453] team0: Port device team_slave_0 added
[  428.203400][T10623] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  428.224664][T10453] team0: Port device team_slave_1 added
[  428.250754][T10537] bcachefs: bch2_fs_get_tree() error: ENOMEM_journal_pin_fifo
[  428.305123][T10602] loop1: detected capacity change from 0 to 40427
[  428.352608][T10602] F2FS-fs (loop1): build fault injection rate: 690
[  428.377723][T10602] F2FS-fs (loop1): Image doesn't support compression
[  428.401350][T10602] F2FS-fs (loop1): Image doesn't support compression
[  428.445676][T10602] F2FS-fs (loop1): invalid crc value
[  428.574139][T10453] batman_adv: batadv0: Adding interface: batadv_slave_0
[  428.614769][T10453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  428.658364][T10612] loop2: detected capacity change from 0 to 40427
[  428.685987][T10453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  428.702595][T10612] F2FS-fs (loop2): build fault injection rate: 771
[  428.723779][T10602] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  428.739683][T10453] batman_adv: batadv0: Adding interface: batadv_slave_1
[  428.757713][   T30] audit: type=1800 audit(1750046260.779:477): pid=10602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1422" name="file1" dev="loop1" ino=10 res=0 errno=0
[  428.770249][T10453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  428.804319][T10612] F2FS-fs (loop2): invalid crc value
[  428.858553][T10453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  429.017672][ T5833] syz-executor: attempt to access beyond end of device
[  429.017672][ T5833] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  429.080395][ T5833] CPU: 0 UID: 0 PID: 5833 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) 
[  429.080449][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  429.080471][ T5833] Call Trace:
[  429.080493][ T5833]  <TASK>
[  429.080507][ T5833]  dump_stack_lvl+0x16c/0x1f0
[  429.080576][ T5833]  f2fs_handle_critical_error+0x621/0x9f0
[  429.080626][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  429.080674][ T5833]  ? f2fs_build_fault_attr+0x53/0x1f0
[  429.080725][ T5833]  f2fs_write_end_io+0x785/0xc20
[  429.080780][ T5833]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  429.080838][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  429.080896][ T5833]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  429.080946][ T5833]  bio_endio+0x70d/0x850
[  429.080989][ T5833]  submit_bio_noacct+0x56d/0x1eb0
[  429.081052][ T5833]  __submit_merged_bio+0x33c/0x770
[  429.081110][ T5833]  __submit_merged_write_cond+0x319/0x3f0
[  429.081177][ T5833]  f2fs_write_cache_pages+0x2067/0x2570
[  429.081274][ T5833]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  429.081344][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  429.081389][ T5833]  ? __lock_acquire+0x622/0x1c90
[  429.081462][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  429.081566][ T5833]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  429.081664][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  429.081707][ T5833]  ? __lock_acquire+0x622/0x1c90
[  429.081773][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  429.081826][ T5833]  f2fs_write_data_pages+0x4ad/0xd90
[  429.081895][ T5833]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  429.081949][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  429.082006][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  429.082057][ T5833]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  429.082118][ T5833]  do_writepages+0x27a/0x600
[  429.082184][ T5833]  ? __pfx_do_writepages+0x10/0x10
[  429.082239][ T5833]  ? do_raw_spin_unlock+0x172/0x230
[  429.082279][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  429.082324][ T5833]  ? _raw_spin_unlock+0x28/0x50
[  429.082385][ T5833]  filemap_fdatawrite_wbc+0x104/0x160
[  429.082453][ T5833]  __filemap_fdatawrite_range+0xb2/0xf0
[  429.082605][ T5833]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[  429.082791][ T5833]  ? find_held_lock+0x2b/0x80
[  429.082841][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  429.082896][ T5833]  ? do_raw_spin_unlock+0x172/0x230
[  429.082947][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  429.083012][ T5833]  f2fs_sync_dirty_inodes+0x2a9/0x990
[  429.083118][ T5833]  block_operations+0x2a3/0xfd0
[  429.083188][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  429.083251][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  429.083315][ T5833]  ? __pfx_block_operations+0x10/0x10
[  429.083474][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  429.083618][ T5833]  ? down_write+0x14d/0x200
[  429.083660][ T5833]  ? __pfx_down_write+0x10/0x10
[  429.083703][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  429.083758][ T5833]  ? rcu_is_watching+0x12/0xc0
[  429.083813][ T5833]  f2fs_write_checkpoint+0x2b8/0x4c60
[  429.083879][ T5833]  ? __pfx_try_to_wake_up+0x10/0x10
[  429.083943][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  429.083989][ T5833]  ? rcu_is_watching+0x12/0xc0
[  429.084036][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  429.084081][ T5833]  ? kthread_stop+0x273/0x650
[  429.084150][ T5833]  kill_f2fs_super+0x3c2/0x470
[  429.084214][ T5833]  ? __pfx_kill_f2fs_super+0x10/0x10
[  429.084275][ T5833]  ? lockdep_hardirqs_on+0x7c/0x110
[  429.084362][ T5833]  deactivate_locked_super+0xc1/0x1a0
[  429.084404][ T5833]  deactivate_super+0xde/0x100
[  429.084446][ T5833]  cleanup_mnt+0x225/0x450
[  429.084492][ T5833]  task_work_run+0x150/0x240
[  429.084535][ T5833]  ? __pfx_task_work_run+0x10/0x10
[  429.084571][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  429.084621][ T5833]  ? __pfx___x64_sys_umount+0x10/0x10
[  429.084682][ T5833]  exit_to_user_mode_loop+0xeb/0x110
[  429.084733][ T5833]  do_syscall_64+0x3f6/0x4c0
[  429.084775][ T5833]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  429.084813][ T5833] RIP: 0033:0x7f794f78fc57
[  429.084843][ T5833] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  429.084881][ T5833] RSP: 002b:00007ffd06df7ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  429.084917][ T5833] RAX: 0000000000000000 RBX: 00007f794f810925 RCX: 00007f794f78fc57
[  429.084942][ T5833] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd06df7f90
[  429.084966][ T5833] RBP: 00007ffd06df7f90 R08: 0000000000000000 R09: 0000000000000000
[  429.084990][ T5833] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd06df9020
[  429.085014][ T5833] R13: 00007f794f810925 R14: 0000000000068b6e R15: 00007ffd06df9060
[  429.085070][ T5833]  </TASK>
[  429.089019][ T5833] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  429.380665][T10612] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  429.595102][T10612] syz.2.1425: attempt to access beyond end of device
[  429.595102][T10612] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  429.818824][T10453] hsr_slave_0: entered promiscuous mode
[  429.848574][T10453] hsr_slave_1: entered promiscuous mode
[  429.894268][   T30] audit: type=1326 audit(1750046261.889:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10646 comm="syz.3.1439" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f704ed8e929 code=0x0
[  430.528000][T10662] loop3: detected capacity change from 0 to 256
[  430.572923][T10662] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  431.603549][T10670] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1447'.
[  432.902371][T10453] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  432.964993][T10453] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  432.990610][T10660] loop0: detected capacity change from 0 to 32768
[  433.030235][T10453] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  433.092327][T10453] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  433.249775][T10660] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  433.249827][T10660]   allowing incompatible features above 0.0: (unknown version)
[  433.249850][T10660]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  433.430682][T10660] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  433.438932][T10660] bcachefs (loop0): initializing new filesystem
[  433.554348][T10660] bcachefs (loop0): error reallocating journal fifo (32768 open entries)
[  433.590361][T10660] bcachefs (loop0): bch2_fs_initialize(): error ENOMEM_journal_pin_fifo
[  433.596263][T10453] 8021q: adding VLAN 0 to HW filter on device bond0
[  433.623746][T10660] bcachefs (loop0): bch2_fs_start(): error starting filesystem ENOMEM_journal_pin_fifo
[  433.681426][T10660] bcachefs (loop0): shutting down
[  433.692798][T10682] loop3: detected capacity change from 0 to 40427
[  433.694936][T10453] 8021q: adding VLAN 0 to HW filter on device team0
[  433.726330][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  433.728210][T10682] F2FS-fs (loop3): build fault injection rate: 771
[  433.733545][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  433.772749][T10682] F2FS-fs (loop3): invalid crc value
[  433.802866][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  433.810052][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  433.816520][T10660] bcachefs (loop0): shutdown complete
[  433.838512][T10709] netlink: 'syz.5.1459': attribute type 1 has an invalid length.
[  433.958812][T10709] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  434.023286][T10684] loop1: detected capacity change from 0 to 32768
[  434.072986][T10682] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  434.082243][T10709] veth3: entered promiscuous mode
[  434.088646][T10682] syz.3.1452: attempt to access beyond end of device
[  434.088646][T10682] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  434.091613][T10709] bond1: (slave veth3): Enslaving as a backup interface with a down link
[  434.120103][T10684] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  434.137878][T10684] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  434.187023][T10684] XFS (loop1): Ending clean mount
[  434.202023][T10453] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  434.219795][T10684] XFS (loop1): Quotacheck needed: Please wait.
[  434.248331][ T5997] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_cntbt block 0x10 
[  434.280668][ T5913] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  434.291516][ T5997] XFS (loop1): Unmount and run xfs_repair
[  434.319255][ T5997] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  434.340396][ T5997] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  434.358206][ T5997] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  434.374740][ T5997] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  434.418874][ T5997] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  434.439912][ T5997] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  434.450253][ T5913] usb 3-1: Using ep0 maxpacket: 32
[  434.461509][ T5913] usb 3-1: config 0 has an invalid interface number: 100 but max is 0
[  434.469711][ T5913] usb 3-1: config 0 has no interface number 0
[  434.486180][ T5997] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  434.499281][ T5913] usb 3-1: New USB device found, idVendor=1b80, idProduct=e349, bcdDevice=df.52
[  434.513888][ T5997] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  434.523117][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  434.532340][ T5997] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  434.548273][ T5913] usb 3-1: Product: syz
[  434.553998][ T5913] usb 3-1: Manufacturer: syz
[  434.558621][ T5913] usb 3-1: SerialNumber: syz
[  434.563898][ T5997] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x23f/0x4f0" at daddr 0x10 len 8 error 74
[  434.586579][ T5913] usb 3-1: config 0 descriptor??
[  434.597574][ T5913] em28xx 3-1:0.100: New device syz syz @ 480 Mbps (1b80:e349, interface 100, class 100)
[  434.630548][T10684] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  434.660615][ T5913] em28xx 3-1:0.100: Video interface 100 found: bulk
[  434.698992][T10684] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  434.719555][T10684] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair.
[  434.869793][ T5913] em28xx 3-1:0.100: unknown em28xx chip ID (0)
[  434.886722][T10453] 8021q: adding VLAN 0 to HW filter on device batadv0
[  434.965856][ T5913] em28xx 3-1:0.100: reading from i2c device at 0xa0 failed (error=-5)
[  434.996183][ T5913] em28xx 3-1:0.100: board has no eeprom
[  435.081391][ T5913] em28xx 3-1:0.100: Identified as Magix USB Videowandler-2 (card=103)
[  435.099861][ T5913] em28xx 3-1:0.100: analog set to bulk mode.
[  435.128285][   T43] em28xx 3-1:0.100: Registering V4L2 extension
[  435.160306][ T5913] usb 3-1: USB disconnect, device number 11
[  435.209795][ T5913] em28xx 3-1:0.100: Disconnecting em28xx
[  435.292262][   T43] em28xx 3-1:0.100: Config register raw data: 0xffffffed
[  435.335760][   T43] em28xx 3-1:0.100: AC97 chip type couldn't be determined
[  435.363821][   T43] em28xx 3-1:0.100: No AC97 audio processor
[  435.385309][   T43] usb 3-1: Decoder not found
[  435.389948][   T43] em28xx 3-1:0.100: failed to create media graph
[  435.428512][   T43] em28xx 3-1:0.100: V4L2 device video103 deregistered
[  435.470260][   T43] em28xx 3-1:0.100: Remote control support is not available for this card.
[  435.483210][ T5913] em28xx 3-1:0.100: Closing input extension
[  435.509893][ T5913] em28xx 3-1:0.100: Freeing device
[  435.537193][T10740] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1464'.
[  435.807868][T10660] bcachefs: bch2_fs_get_tree() error: ENOMEM_journal_pin_fifo
[  435.913687][T10755] loop5: detected capacity change from 0 to 256
[  436.001192][T10755] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  436.088208][T10453] veth0_vlan: entered promiscuous mode
[  436.143554][T10754] loop3: detected capacity change from 0 to 32768
[  436.155942][T10754] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1468 (10754)
[  436.189015][T10754] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  436.199280][T10754] BTRFS info (device loop3): using crc32c (crc32c-x86_64) checksum algorithm
[  436.208268][T10754] BTRFS info (device loop3): using free-space-tree
[  436.209849][T10453] veth1_vlan: entered promiscuous mode
[  436.312885][T10453] veth0_macvtap: entered promiscuous mode
[  436.398644][T10453] veth1_macvtap: entered promiscuous mode
[  436.488504][T10453] batman_adv: batadv0: Interface activated: batadv_slave_0
[  436.505588][ T5838] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  436.565789][T10453] batman_adv: batadv0: Interface activated: batadv_slave_1
[  436.617593][T10453] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  436.643160][T10453] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  436.662185][T10453] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  436.663469][T10781] netlink: 'syz.5.1474': attribute type 1 has an invalid length.
[  436.680398][T10453] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  436.994967][T10781] veth5: entered promiscuous mode
[  437.011545][T10781] bond2: (slave veth5): Enslaving as a backup interface with a down link
[  437.221114][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  437.261341][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  437.408913][ T6161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  437.442100][ T6161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  437.804291][T10782] loop2: detected capacity change from 0 to 32768
[  437.850425][ T1222] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  437.896870][T10782] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  437.902000][T10788] loop0: detected capacity change from 0 to 32768
[  437.920907][T10782] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  437.964851][T10788] XFS (loop0): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  438.000581][ T1222] usb 2-1: Using ep0 maxpacket: 32
[  438.019672][T10782] XFS (loop2): Ending clean mount
[  438.023875][T10788] XFS (loop0): Ending clean mount
[  438.037065][ T1222] usb 2-1: config 0 has an invalid interface number: 100 but max is 0
[  438.069809][T10782] XFS (loop2): Quotacheck needed: Please wait.
[  438.090512][ T1222] usb 2-1: config 0 has no interface number 0
[  438.142101][ T1222] usb 2-1: New USB device found, idVendor=1b80, idProduct=e349, bcdDevice=df.52
[  438.144415][ T5951] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_cntbt block 0x10 
[  438.151889][ T1222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.171267][ T1222] usb 2-1: Product: syz
[  438.175456][ T1222] usb 2-1: Manufacturer: syz
[  438.180072][ T1222] usb 2-1: SerialNumber: syz
[  438.187821][ T1222] usb 2-1: config 0 descriptor??
[  438.207206][ T5951] XFS (loop2): Unmount and run xfs_repair
[  438.220675][ T5951] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  438.244530][ T5951] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  438.253344][ T1222] em28xx 2-1:0.100: New device syz syz @ 480 Mbps (1b80:e349, interface 100, class 100)
[  438.274736][ T5951] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  438.286068][ T5837] XFS (loop0): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  438.293925][ T1222] em28xx 2-1:0.100: Video interface 100 found: bulk
[  438.321982][ T5951] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  438.332507][ T5951] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  438.342464][ T5951] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  438.354479][ T5951] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  438.367062][ T5951] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  438.388902][ T5951] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  438.428580][ T5951] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x23f/0x4f0" at daddr 0x10 len 8 error 74
[  438.476127][T10782] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  438.513622][   T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.524527][ T1222] em28xx 2-1:0.100: unknown em28xx chip ID (0)
[  438.540605][T10782] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  438.568550][T10782] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair.
[  438.620488][ T1222] em28xx 2-1:0.100: reading from i2c device at 0xa0 failed (error=-5)
[  438.628738][ T1222] em28xx 2-1:0.100: board has no eeprom
[  438.790431][ T1222] em28xx 2-1:0.100: Identified as Magix USB Videowandler-2 (card=103)
[  438.798705][ T1222] em28xx 2-1:0.100: analog set to bulk mode.
[  438.831326][   T43] em28xx 2-1:0.100: Registering V4L2 extension
[  438.880807][ T1222] usb 2-1: USB disconnect, device number 7
[  438.888276][ T1222] em28xx 2-1:0.100: Disconnecting em28xx
[  438.922331][   T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.037646][   T43] em28xx 2-1:0.100: Config register raw data: 0xffffffed
[  439.062335][   T43] em28xx 2-1:0.100: AC97 chip type couldn't be determined
[  439.069597][   T43] em28xx 2-1:0.100: No AC97 audio processor
[  439.116459][   T43] usb 2-1: Decoder not found
[  439.132923][   T43] em28xx 2-1:0.100: failed to create media graph
[  439.139302][   T43] em28xx 2-1:0.100: V4L2 device video103 deregistered
[  439.171665][   T43] em28xx 2-1:0.100: Remote control support is not available for this card.
[  439.190271][ T1222] em28xx 2-1:0.100: Closing input extension
[  439.211295][ T1222] em28xx 2-1:0.100: Freeing device
[  439.220403][   T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.320276][   T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.332546][T10824] loop5: detected capacity change from 0 to 32768
[  439.405118][T10824] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  439.405169][T10824]   allowing incompatible features above 0.0: (unknown version)
[  439.405190][T10824]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  439.447271][   T59] bridge_slave_1: left allmulticast mode
[  439.462900][T10824] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  439.467283][   T59] bridge_slave_1: left promiscuous mode
[  439.481021][T10824] bcachefs (loop5): initializing new filesystem
[  439.487817][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[  439.489558][T10824] bcachefs (loop5): going read-write
[  439.510056][   T59] bridge_slave_0: left allmulticast mode
[  439.516121][   T59] bridge_slave_0: left promiscuous mode
[  439.522067][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[  439.564062][T10824] bcachefs (loop5): marking superblocks
[  439.606282][T10824] bcachefs (loop5): initializing freespace
[  439.643255][T10824] bcachefs (loop5): done initializing freespace
[  439.654315][T10824] bcachefs (loop5): reading snapshots table
[  439.660582][T10824] bcachefs (loop5): reading snapshots done
[  439.689196][T10824] bcachefs (loop5): done starting filesystem
[  439.717872][   T30] audit: type=1800 audit(1750046271.739:479): pid=10824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1485" name="file1" dev="loop5" ino=4098 res=0 errno=0
[  439.820008][ T5849] bcachefs (loop5): shutting down
[  439.827991][ T5849] bcachefs (loop5): going read-only
[  439.835594][ T5849] bcachefs (loop5): finished waiting for writes to stop
[  439.851011][ T5849] bcachefs (loop5): flushing journal and stopping allocators, journal seq 3
[  439.919870][ T5849] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 4
[  439.931149][ T5849] bcachefs (loop5): clean shutdown complete, journal seq 5
[  439.939421][ T5849] bcachefs (loop5): marking filesystem clean
[  439.974919][ T5849] bcachefs (loop5): shutdown complete
[  440.139458][T10844] loop0: detected capacity change from 0 to 1024
[  440.209548][T10844] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  440.463533][T10853] loop1: detected capacity change from 0 to 8
[  440.507260][T10853] SQUASHFS error: Unknown inode type 0 in squashfs_iget!
[  440.610256][ T5913] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  440.669422][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  440.680544][   T43] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  440.779795][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  440.797961][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  440.820035][ T5913] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  440.822784][   T59] bond0 (unregistering): Released all slaves
[  440.860355][ T5913] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  440.869465][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.894006][   T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  440.904149][   T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  440.907714][   T43] usb 4-1: unable to get BOS descriptor or descriptor too short
[  440.915029][   T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  440.927223][T10864] loop2: detected capacity change from 0 to 128
[  440.927711][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  440.939292][   T43] usb 4-1: not running at top speed; connect to a high speed hub
[  440.952123][   T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  440.971746][ T5913] usb 1-1: config 0 descriptor??
[  440.977582][T10844] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  440.995295][   T43] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 64
[  441.027571][T10862] lo speed is unknown, defaulting to 1000
[  441.049716][   T43] usb 4-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  441.121900][   T43] usb 4-1: config 1 interface 0 has no altsetting 0
[  441.153214][   T43] usb 4-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40
[  441.173884][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.195020][   T43] usb 4-1: Product: syz
[  441.199440][   T43] usb 4-1: Manufacturer: syz
[  441.213351][   T43] usb 4-1: SerialNumber: syz
[  441.263939][T10854] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  441.429340][ T5913] hid-thrustmaster 0003:044F:B65D.0003: item 0 1 0 8 parsing failed
[  441.443515][ T5913] hid-thrustmaster 0003:044F:B65D.0003: parse failed with error -22
[  441.453241][ T5913] hid-thrustmaster 0003:044F:B65D.0003: probe with driver hid-thrustmaster failed with error -22
[  441.509524][   T43] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input6
[  441.656917][ T5913] usb 1-1: USB disconnect, device number 5
[  441.742833][T10864] syz.2.1498: attempt to access beyond end of device
[  441.742833][T10864] loop2: rw=2049, sector=129, nr_sectors = 8 limit=128
[  441.776930][   T59] hsr_slave_0: left promiscuous mode
[  441.791870][   T59] hsr_slave_1: left promiscuous mode
[  441.798215][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  441.802737][T10864] syz.2.1498: attempt to access beyond end of device
[  441.802737][T10864] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128
[  441.811796][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[  441.829685][T10864] syz.2.1498: attempt to access beyond end of device
[  441.829685][T10864] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128
[  441.849639][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  441.857916][T10864] syz.2.1498: attempt to access beyond end of device
[  441.857916][T10864] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128
[  441.872943][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[  441.891064][T10864] syz.2.1498: attempt to access beyond end of device
[  441.891064][T10864] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128
[  441.907768][T10864] syz.2.1498: attempt to access beyond end of device
[  441.907768][T10864] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128
[  441.922188][    C1] bcm5974 4-1:1.0: trackpad urb failed: -1
[  441.922365][T10864] syz.2.1498: attempt to access beyond end of device
[  441.922365][T10864] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128
[  441.941992][T10864] syz.2.1498: attempt to access beyond end of device
[  441.941992][T10864] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128
[  441.959790][   T59] veth1_macvtap: left promiscuous mode
[  441.965627][   T59] veth0_macvtap: left promiscuous mode
[  441.974541][   T59] veth1_vlan: left promiscuous mode
[  441.979931][   T59] veth0_vlan: left promiscuous mode
[  441.986474][T10864] syz.2.1498: attempt to access beyond end of device
[  441.986474][T10864] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128
[  442.026523][T10864] syz.2.1498: attempt to access beyond end of device
[  442.026523][T10864] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128
[  442.114762][ T5184] bcm5974 4-1:1.0: could not read from device
[  442.115958][  T972] usb 4-1: USB disconnect, device number 5
[  442.203768][T10873] loop1: detected capacity change from 0 to 32768
[  442.262818][T10873] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  442.305760][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.452112][T10873] XFS (loop1): Ending clean mount
[  442.521925][ T5833] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  442.660965][  T972] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  442.830471][  T972] usb 3-1: Using ep0 maxpacket: 32
[  442.855856][  T972] usb 3-1: config 0 has an invalid interface number: 100 but max is 0
[  442.894113][  T972] usb 3-1: config 0 has no interface number 0
[  442.954123][  T972] usb 3-1: New USB device found, idVendor=1b80, idProduct=e349, bcdDevice=df.52
[  442.979732][  T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  443.013549][  T972] usb 3-1: Product: syz
[  443.017787][  T972] usb 3-1: Manufacturer: syz
[  443.034922][   T51] Bluetooth: hci4: command tx timeout
[  443.051889][  T972] usb 3-1: SerialNumber: syz
[  443.065240][  T972] usb 3-1: config 0 descriptor??
[  443.075051][  T972] em28xx 3-1:0.100: New device syz syz @ 480 Mbps (1b80:e349, interface 100, class 100)
[  443.085060][  T972] em28xx 3-1:0.100: Video interface 100 found: bulk
[  443.344364][  T972] em28xx 3-1:0.100: unknown em28xx chip ID (0)
[  443.644636][  T972] em28xx 3-1:0.100: reading from i2c device at 0xa0 failed (error=-5)
[  443.660278][  T972] em28xx 3-1:0.100: board has no eeprom
[  443.765686][T10905] siw: device registration error -23
[  444.670245][  T972] em28xx 3-1:0.100: Identified as Magix USB Videowandler-2 (card=103)
[  444.679655][  T972] em28xx 3-1:0.100: analog set to bulk mode.
[  444.685805][ T6215] em28xx 3-1:0.100: Registering V4L2 extension
[  444.703984][  T972] usb 3-1: USB disconnect, device number 12
[  444.880378][T10910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  444.909401][  T972] em28xx 3-1:0.100: Disconnecting em28xx
[  444.937597][ T6215] em28xx 3-1:0.100: Config register raw data: 0xffffffed
[  444.950216][ T6215] em28xx 3-1:0.100: AC97 chip type couldn't be determined
[  444.957370][ T6215] em28xx 3-1:0.100: No AC97 audio processor
[  444.965190][ T6215] usb 3-1: Decoder not found
[  444.969814][ T6215] em28xx 3-1:0.100: failed to create media graph
[  445.119527][   T51] Bluetooth: hci4: command tx timeout
[  445.125683][ T6215] em28xx 3-1:0.100: V4L2 device video103 deregistered
[  445.134513][ T6215] em28xx 3-1:0.100: Remote control support is not available for this card.
[  445.143256][  T972] em28xx 3-1:0.100: Closing input extension
[  445.153425][  T972] em28xx 3-1:0.100: Freeing device
[  445.252497][T10896] loop0: detected capacity change from 0 to 32768
[  445.279626][   T59] team0 (unregistering): Port device team_slave_1 removed
[  445.310029][T10896] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[  445.324563][T10896] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  445.359268][   T59] team0 (unregistering): Port device team_slave_0 removed
[  445.388105][T10896] XFS (loop0): Ending clean mount
[  445.401823][T10896] XFS (loop0): Quotacheck needed: Please wait.
[  445.421240][ T8695] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_cntbt block 0x10 
[  445.435127][ T8695] XFS (loop0): Unmount and run xfs_repair
[  445.450919][ T8695] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  445.458460][ T8695] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  445.481405][ T8695] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  445.497260][ T8695] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  445.523426][ T8695] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  445.532456][ T8695] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  445.552225][ T8695] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  445.568924][ T8695] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  445.578104][ T8695] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  445.596053][ T8695] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x23f/0x4f0" at daddr 0x10 len 8 error 74
[  445.623453][T10896] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  445.642452][T10896] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  445.656773][T10896] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair.
[  446.468297][T10932] loop0: detected capacity change from 0 to 512
[  446.479222][T10932] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  446.513340][T10932] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  446.533408][T10932] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  446.677199][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  447.197315][   T51] Bluetooth: hci4: command tx timeout
[  447.249861][T10862] chnl_net:caif_netlink_parms(): no params data found
[  447.786120][T10964] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  448.308162][T10965] loop5: detected capacity change from 0 to 40427
[  448.358462][T10965] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  448.366439][T10965] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  448.391560][T10965] F2FS-fs (loop5): invalid crc value
[  448.577035][T10862] bridge0: port 1(bridge_slave_0) entered blocking state
[  448.620871][T10862] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.664701][T10862] bridge_slave_0: entered allmulticast mode
[  448.702533][T10862] bridge_slave_0: entered promiscuous mode
[  448.738063][T10965] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  448.747292][T10965] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  448.800653][T10862] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.815292][T10862] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.822894][T10862] bridge_slave_1: entered allmulticast mode
[  448.842325][T10862] bridge_slave_1: entered promiscuous mode
[  449.143708][T10862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  449.195008][T10862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  449.280308][   T51] Bluetooth: hci4: command tx timeout
[  449.519078][T10987] siw: device registration error -23
[  449.644188][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  451.328498][T10996] loop0: detected capacity change from 0 to 512
[  451.335876][T10996] EXT4-fs: Ignoring removed mblk_io_submit option
[  451.404834][T10996] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  451.480577][T10996] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.1534: iget: bad extended attribute block 1
[  451.497632][T10996] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1534: couldn't read orphan inode 15 (err -117)
[  451.525270][T10996] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  451.635012][T10996] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  451.991329][T10862] team0: Port device team_slave_0 added
[  452.020058][T10996] lo speed is unknown, defaulting to 1000
[  452.065787][T10862] team0: Port device team_slave_1 added
[  452.334195][T10862] batman_adv: batadv0: Adding interface: batadv_slave_0
[  452.357796][T10862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  452.434904][T10862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  452.497647][T10862] batman_adv: batadv0: Adding interface: batadv_slave_1
[  452.527174][T10862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  452.610625][T10862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  452.755158][T11010] syz.3.1541 uses obsolete (PF_INET,SOCK_PACKET)
[  452.838756][T11017] loop5: detected capacity change from 0 to 512
[  452.890442][T11017] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  453.015743][T11013] loop1: detected capacity change from 0 to 32768
[  453.032329][T10862] hsr_slave_0: entered promiscuous mode
[  453.039153][T10862] hsr_slave_1: entered promiscuous mode
[  453.072693][T11013] workqueue: name exceeds WQ_NAME_LEN. Truncating to: gfs2-glock/#ãvúSÖñ^Ñ°Õ~oó»Á
[  453.089759][T11013] gfs2: fsid=#ãvúSÖñ^Ñ°Õ~oó»Á$®: Trying to join cluster "lock_nolock", "#ãvúSÖñ^Ñ°Õ~oó»Á$®"
[  453.100860][T11013] gfs2: fsid=#ãvúSÖñ^Ñ°Õ~oó»Á$®: Now mounting FS (format 1801)...
[  453.118102][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  453.145647][T11013] gfs2: fsid=#ãvúSÖñ^Ñ°Õ~oó»Á$®.s: journal 0 mapped with 5 extents in 0ms
[  453.155328][T11017] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  453.189040][T11017] ext4 filesystem being mounted at /294/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  453.219901][   T43] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  453.233699][T11013] gfs2: fsid=#ãvúSÖñ^Ñ°Õ~oó»Á$®.s: first mount done, others may mount
[  453.412485][   T43] usb 4-1: Using ep0 maxpacket: 32
[  453.428249][   T43] usb 4-1: config 0 has no interfaces?
[  453.459384][   T43] usb 4-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[  453.469473][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  453.477813][   T43] usb 4-1: Product: syz
[  453.482400][   T43] usb 4-1: Manufacturer: syz
[  453.487072][   T43] usb 4-1: SerialNumber: syz
[  453.512693][   T43] usb 4-1: config 0 descriptor??
[  453.519226][ T5849] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  453.742464][T11034] netlink: 203516 bytes leftover after parsing attributes in process `syz.5.1546'.
[  453.747696][   T43] usb 4-1: USB disconnect, device number 6
[  453.786135][T11034] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  457.380231][T11047] lo speed is unknown, defaulting to 1000
[  457.671334][T11055] loop5: detected capacity change from 0 to 2048
[  457.678758][T11055] ext4: Unknown parameter 'subj_type'
[  457.712460][T10862] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  457.766175][T10862] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  457.817680][T11059] loop0: detected capacity change from 0 to 128
[  457.846867][T10862] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  457.871901][T11059] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  457.900868][T10862] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  457.911630][T11059] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  457.960341][   T43] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  458.047057][ T5837] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  458.090999][   T43] usb 4-1: device descriptor read/64, error -71
[  458.175211][T11074] loop0: detected capacity change from 0 to 1024
[  458.210893][T10736] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  458.232090][T11074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  458.333858][T10862] 8021q: adding VLAN 0 to HW filter on device bond0
[  458.350303][   T43] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  458.382284][T10862] 8021q: adding VLAN 0 to HW filter on device team0
[  458.407580][T10736] usb 2-1: config 1 has an invalid descriptor of length 63, skipping remainder of the config
[  458.409061][ T8695] bridge0: port 1(bridge_slave_0) entered blocking state
[  458.420267][T10736] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  458.424971][ T8695] bridge0: port 1(bridge_slave_0) entered forwarding state
[  458.473587][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  458.491435][   T43] usb 4-1: device descriptor read/64, error -71
[  458.503015][T10736] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  458.525470][T10736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  458.540523][ T8695] bridge0: port 2(bridge_slave_1) entered blocking state
[  458.547682][ T8695] bridge0: port 2(bridge_slave_1) entered forwarding state
[  458.550266][T10736] usb 2-1: SerialNumber: syz
[  458.637762][   T43] usb usb4-port1: attempt power cycle
[  459.052799][T11082] loop5: detected capacity change from 0 to 32768
[  459.069199][T10736] usb 2-1: 0:2 : does not exist
[  459.128540][T11090] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.1563'.
[  459.185862][T11082] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  459.185916][T11082]   allowing incompatible features above 0.0: (unknown version)
[  459.185939][T11082]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  459.236161][T11082] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  459.244701][T11090] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  459.254331][T11082] bcachefs (loop5): initializing new filesystem
[  459.268993][T11082] bcachefs (loop5): going read-write
[  459.275302][   T43] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  459.326640][T10736] usb 2-1: USB disconnect, device number 8
[  459.346519][   T43] usb 4-1: device descriptor read/8, error -71
[  459.374953][T11082] bcachefs (loop5): marking superblocks
[  459.391888][T11082] bcachefs (loop5): initializing freespace
[  459.403620][T11082] bcachefs (loop5): done initializing freespace
[  459.412973][T11082] bcachefs (loop5): reading snapshots table
[  459.418947][T11082] bcachefs (loop5): reading snapshots done
[  459.463509][T11082] bcachefs (loop5): done starting filesystem
[  459.598898][ T5849] bcachefs (loop5): shutting down
[  459.610344][   T43] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  459.619416][T11107] loop2: detected capacity change from 0 to 4096
[  459.633424][ T5849] bcachefs (loop5): going read-only
[  459.638722][ T5849] bcachefs (loop5): finished waiting for writes to stop
[  459.667842][   T43] usb 4-1: device descriptor read/8, error -71
[  459.685553][ T5849] bcachefs (loop5): flushing journal and stopping allocators, journal seq 3
[  459.711263][T11107] NILFS (loop2): invalid segment: Checksum error in segment payload
[  459.730342][T11107] NILFS (loop2): trying rollback from an earlier position
[  459.807987][T10862] 8021q: adding VLAN 0 to HW filter on device batadv0
[  459.838785][ T5849] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3
[  459.867347][T11107] NILFS (loop2): recovery complete
[  459.869992][   T43] usb usb4-port1: unable to enumerate USB device
[  459.889260][T11112] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  459.900042][ T5849] bcachefs (loop5): clean shutdown complete, journal seq 4
[  459.933533][ T5849] bcachefs (loop5): marking filesystem clean
[  460.231265][ T5849] bcachefs (loop5): shutdown complete
[  460.298304][T11107] overlayfs: upper fs does not support tmpfile.
[  460.338341][T11107] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  460.369181][T11107] overlayfs: failed to set xattr on upper
[  460.412391][T11107] overlayfs: ...falling back to redirect_dir=nofollow.
[  460.963826][T11107] overlayfs: ...falling back to index=off.
[  460.982261][T11107] overlayfs: ...falling back to uuid=null.
[  461.851096][T11125] lo speed is unknown, defaulting to 1000
[  462.372077][T11129] loop1: detected capacity change from 0 to 1024
[  462.562666][T11132] loop2: detected capacity change from 0 to 1024
[  462.812323][T10862] veth0_vlan: entered promiscuous mode
[  462.837875][T10862] veth1_vlan: entered promiscuous mode
[  462.879153][ T5951] hfsplus: b-tree write err: -5, ino 3
[  462.946736][ T5951] hfsplus: b-tree write err: -5, ino 4
[  463.000487][  T972] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  463.046059][T10862] veth0_macvtap: entered promiscuous mode
[  463.079794][T10862] veth1_macvtap: entered promiscuous mode
[  463.128924][T11138] loop2: detected capacity change from 0 to 512
[  463.153712][T10862] batman_adv: batadv0: Interface activated: batadv_slave_0
[  463.192599][T10862] batman_adv: batadv0: Interface activated: batadv_slave_1
[  463.216524][T10862] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  463.240361][T10862] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  463.259621][T10862] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  463.280448][T10862] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  463.355111][T11136] loop1: detected capacity change from 0 to 32768
[  463.392127][T11138] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  463.431435][T11136] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  463.450303][  T972] usb 4-1: Using ep0 maxpacket: 16
[  463.461502][  T972] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  463.490846][  T972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  463.505338][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  463.515558][T11138] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  463.531609][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  463.539292][  T972] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  463.552012][T11136] XFS (loop1): Ending clean mount
[  463.555616][T11138] ext4 filesystem being mounted at /302/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  463.595259][T11136] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_cntbt block 0x10 
[  463.607464][T11136] XFS (loop1): Unmount and run xfs_repair
[  463.613280][T11136] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  463.620745][T11136] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  463.629620][T11136] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  463.638545][T11136] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  463.647466][T11136] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  463.656549][T11136] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  463.665513][T11136] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  463.674765][T11136] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  463.683697][T11136] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  463.692767][T11136] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x23f/0x4f0" at daddr 0x10 len 8 error 74
[  463.705841][T11136] XFS (loop1): page discard on page ffffea0001434b00, inode 0x1146, pos 4096.
[  463.716716][T11136] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_cntbt block 0x10 
[  463.728161][T11136] XFS (loop1): Unmount and run xfs_repair
[  463.733957][T11136] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  463.736942][ T5997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  463.741429][T11136] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  463.741480][T11136] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  463.741512][T11136] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  463.741544][T11136] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  463.741576][T11136] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  463.741608][T11136] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  463.741639][T11136] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  463.741670][T11136] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  463.741701][T11136] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x23f/0x4f0" at daddr 0x10 len 8 error 74
[  463.741973][T11136] XFS (loop1): page discard on page ffffea0001f8a800, inode 0x1146, pos 8192.
[  463.790275][ T5997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  463.800026][  T972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.859358][T11136] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_cntbt block 0x10 
[  463.870754][T11136] XFS (loop1): Unmount and run xfs_repair
[  463.876498][T11136] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  463.884276][T11136] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  463.893195][T11136] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  463.902245][T11136] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  463.912029][T11136] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  463.920944][T11136] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  463.929829][T11136] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  463.939884][T11136] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  463.949262][T11136] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  463.959657][T11136] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x23f/0x4f0" at daddr 0x10 len 8 error 74
[  463.971246][T11136] XFS (loop1): page discard on page ffffea00010edf00, inode 0x1146, pos 16384.
[  463.973084][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  463.980888][  T972] usb 4-1: Product: syz
[  463.980919][  T972] usb 4-1: Manufacturer: syz
[  463.980948][  T972] usb 4-1: SerialNumber: syz
[  463.984153][  T972] usb 4-1: config 0 descriptor??
[  464.009378][T11136] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_cntbt block 0x10 
[  464.020814][T11136] XFS (loop1): Unmount and run xfs_repair
[  464.026562][T11136] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  464.034551][T11136] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  464.043639][T11136] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  464.052609][T11136] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  464.061538][T11136] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  464.070813][T11136] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  464.079799][T11136] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  464.088922][T11136] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  464.098095][T11136] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  464.107079][T11136] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x23f/0x4f0" at daddr 0x10 len 8 error 74
[  464.118647][T11136] XFS (loop1): page discard on page ffffea000171d400, inode 0x1146, pos 32768.
[  464.134082][  T972] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  464.145974][  T972] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  464.154316][T11136] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_cntbt block 0x10 
[  464.165597][T11136] XFS (loop1): Unmount and run xfs_repair
[  464.171836][T11136] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  464.179290][T11136] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  464.188426][T11136] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  464.197361][T11136] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  464.206386][T11136] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  464.215421][T11136] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  464.224438][T11136] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  464.233911][T11136] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  464.243109][T11136] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  464.252761][T11136] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x23f/0x4f0" at daddr 0x10 len 8 error 74
[  464.265963][T11136] XFS (loop1): page discard on page ffffea0001434b40, inode 0x1146, pos 65536.
[  464.278012][    T9] loop1: writeback error on inode 4422, offset 0, sector 8776
[  464.290286][T11150] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_cntbt block 0x10 
[  464.315968][T11150] XFS (loop1): Unmount and run xfs_repair
[  464.363094][T11150] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  464.445672][T11150] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  464.484057][T11150] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  464.514421][T11150] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  464.543296][T11150] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  464.557853][T11150] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  464.570068][T11150] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  464.585884][T11150] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  464.595351][T11150] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  464.614955][T11150] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x23f/0x4f0" at daddr 0x10 len 8 error 74
[  464.637203][T11150] XFS (loop1): page discard on page ffffea0001434b00, inode 0x1146, pos 4096.
[  464.637591][T11155] loop7: detected capacity change from 0 to 16384
[  464.673551][   T43] loop1: writeback error on inode 4422, offset 0, sector 8776
[  464.689031][T11156] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 0
[  464.740288][  T972] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  464.760821][  T972] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  464.821400][ T5833] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  464.836634][ T5833] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair.
[  464.852767][T11155] loop7: detected capacity change from 16384 to 0
[  464.857869][    C1] I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0
[  464.964201][ T5951] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.354852][ T5951] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.381771][  T972] em28xx 4-1:0.0: Unknown AC97 audio processor detected!
[  465.409838][  T972] em28xx 4-1:0.0: couldn't setup AC97 register 2
[  465.613519][ T5951] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.798559][ T5951] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.050496][  T972] em28xx 4-1:0.0: couldn't setup AC97 register 6
[  466.071008][  T972] em28xx 4-1:0.0: couldn't setup AC97 register 54
[  466.083997][  T972] em28xx 4-1:0.0: couldn't setup AC97 register 56
[  466.150656][  T972] usb 4-1: USB disconnect, device number 11
[  466.304476][ T5951] bridge_slave_1: left allmulticast mode
[  466.320243][ T5951] bridge_slave_1: left promiscuous mode
[  466.330560][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state
[  466.422784][ T5951] bridge_slave_0: left allmulticast mode
[  466.428574][ T5951] bridge_slave_0: left promiscuous mode
[  466.434929][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state
[  467.194400][T11168] loop3: detected capacity change from 0 to 32768
[  467.562658][T11168] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  467.625671][   T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  468.210630][T11184] loop2: detected capacity change from 0 to 32768
[  468.233844][T11192] loop5: detected capacity change from 0 to 512
[  468.358200][T11192] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  468.413888][T11184] 
[  468.413888][T11184]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  468.413888][T11184] 
[  468.495648][T11192] EXT4-fs (loop5): orphan cleanup on readonly fs
[  468.510860][T11192] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.1586: bg 0: block 248: padding at end of block bitmap is not set
[  468.542778][T11192] Quota error (device loop5): write_blk: dquota write failed
[  468.550840][T11192] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  468.561114][T11192] EXT4-fs error (device loop5): ext4_acquire_dquot:6931: comm syz.5.1586: Failed to acquire dquot type 1
[  468.573753][ T5913] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  468.591142][T11192] EXT4-fs (loop5): 1 truncate cleaned up
[  468.601854][   T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  468.622457][   T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  468.637538][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  468.649860][   T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  468.776093][T11168] XFS (loop3): Ending clean mount
[  468.961285][T11168] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_cntbt block 0x10 
[  468.972816][T11168] XFS (loop3): Unmount and run xfs_repair
[  468.978634][T11168] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  468.986744][T11168] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  468.995762][T11168] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  469.004742][T11168] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  469.013885][T11168] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  469.022861][T11168] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  469.032304][T11168] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  469.041473][T11168] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  469.050419][T11168] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  469.059996][T11168] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x23f/0x4f0" at daddr 0x10 len 8 error 74
[  469.073443][T11168] XFS (loop3): page discard on page ffffea00014002c0, inode 0x1146, pos 4096.
[  469.090290][ T5913] usb 2-1: Using ep0 maxpacket: 8
[  469.111760][T11168] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_cntbt block 0x10 
[  469.123066][T11168] XFS (loop3): Unmount and run xfs_repair
[  469.128896][T11168] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  469.136464][T11168] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  469.145526][T11168] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  469.155175][T11168] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  469.164669][T11168] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  469.173671][T11168] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  469.182699][T11168] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  469.192058][T11168] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  469.201706][T11168] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  469.210815][T11168] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x23f/0x4f0" at daddr 0x10 len 8 error 74
[  469.224482][T11168] XFS (loop3): page discard on page ffffea00010b7200, inode 0x1146, pos 8192.
[  469.237144][T11168] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_cntbt block 0x10 
[  469.248376][T11168] XFS (loop3): Unmount and run xfs_repair
[  469.254281][T11168] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  469.262361][T11168] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  469.271960][T11168] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  469.280935][T11168] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  469.289899][T11168] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  469.298928][T11168] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  469.307961][T11168] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  469.316951][T11168] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  469.325894][T11168] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  469.334874][T11168] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x23f/0x4f0" at daddr 0x10 len 8 error 74
[  469.347636][T11168] XFS (loop3): page discard on page ffffea0001068c00, inode 0x1146, pos 16384.
[  469.362246][T11168] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_cntbt block 0x10 
[  469.373509][T11168] XFS (loop3): Unmount and run xfs_repair
[  469.379337][T11168] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  469.386915][T11168] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  469.395913][T11168] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  469.404906][T11168] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  469.413896][T11168] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  469.422871][T11168] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  469.432407][T11168] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  469.441620][T11168] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  469.450614][T11168] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  469.459599][T11168] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x23f/0x4f0" at daddr 0x10 len 8 error 74
[  469.472840][T11168] XFS (loop3): page discard on page ffffea000104ac00, inode 0x1146, pos 32768.
[  469.485243][T11168] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_cntbt block 0x10 
[  469.496402][T11168] XFS (loop3): Unmount and run xfs_repair
[  469.502186][T11168] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  469.509589][T11168] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  469.519875][T11168] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  469.529013][T11168] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  469.538035][T11168] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  469.547109][T11168] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  469.556103][T11168] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  469.565684][T11168] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  469.575022][T11168] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  469.584025][T11168] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x23f/0x4f0" at daddr 0x10 len 8 error 74
[  469.596539][T11168] XFS (loop3): page discard on page ffffea0001400280, inode 0x1146, pos 65536.
[  469.611124][ T1222] loop3: writeback error on inode 4422, offset 0, sector 8776
[  469.753419][ T5913] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  469.806027][T11192] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  470.056679][T11194] 
[  470.056679][T11194]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  470.056679][T11194] 
[  470.080216][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.088268][ T5913] usb 2-1: Product: syz
[  470.159401][ T5913] usb 2-1: Manufacturer: syz
[  470.165689][T11194] 
[  470.165689][T11194]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  470.165689][T11194] 
[  470.180252][ T5913] usb 2-1: SerialNumber: syz
[  470.228603][T11194] 
[  470.228603][T11194]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  470.228603][T11194] 
[  470.243659][ T5913] usb 2-1: config 0 descriptor??
[  470.291751][ T5838] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  470.306006][T11194] 
[  470.306006][T11194]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  470.306006][T11194] 
[  470.366146][ T5838] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair.
[  470.404451][T11194] 
[  470.404451][T11194]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  470.404451][T11194] 
[  470.503617][  T110] 
[  470.503617][  T110]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  470.503617][  T110] 
[  470.616086][ T5913] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71
[  470.681505][ T5913] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  470.726966][   T51] Bluetooth: hci4: command tx timeout
[  470.760844][ T5913] usb 2-1: USB disconnect, device number 9
[  470.771141][ T5849] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  471.101217][ T5951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  471.382967][ T5951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  471.388862][T11202] loop5: detected capacity change from 0 to 16
[  471.437145][ T5951] bond0 (unregistering): Released all slaves
[  471.443304][ T5913] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  471.537881][T11204] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1587'.
[  471.745117][ T5913] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  472.030298][ T5913] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  472.131904][ T5831] 
[  472.131904][ T5831]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  472.131904][ T5831] 
[  472.145034][ T5913] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  472.220907][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  472.240281][ T5831] 
[  472.240281][ T5831]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  472.240281][ T5831] 
[  472.259803][ T5913] usb 2-1: SerialNumber: syz
[  472.272436][T11188] lo speed is unknown, defaulting to 1000
[  472.443741][T11109] Set syz1 is full, maxelem 65536 reached
[  472.544394][ T5913] usb 2-1: 0:2 : does not exist
[  472.598716][ T5913] usb 2-1: USB disconnect, device number 10
[  472.716343][T11213] mmap: syz.0.1595 (11213): VmData 175878144 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data.
[  472.801334][ T5844] Bluetooth: hci4: command tx timeout
[  472.983845][T11211] loop3: detected capacity change from 0 to 32768
[  473.001414][    T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  473.029212][T11211] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  473.029263][T11211]   allowing incompatible features above 0.0: (unknown version)
[  473.029285][T11211]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  473.074210][T11211] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  473.082474][T11211] bcachefs (loop3): initializing new filesystem
[  473.097130][T11211] bcachefs (loop3): going read-write
[  473.475759][T11224] loop5: detected capacity change from 0 to 32768
[  473.507651][T11228] loop0: detected capacity change from 0 to 512
[  473.514995][T11228] EXT4-fs: Ignoring removed mblk_io_submit option
[  473.598952][T11228] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  473.734442][    T9] usb 3-1: config 160 has an invalid interface number: 200 but max is 0
[  473.857636][T11224] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  473.857690][T11224]   allowing incompatible features above 0.0: (unknown version)
[  473.857713][T11224]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  473.902346][T11224] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  473.911488][T11224] bcachefs (loop5): initializing new filesystem
[  473.926394][T11224] bcachefs (loop5): going read-write
[  473.969066][T11228] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.1597: iget: bad extended attribute block 1
[  473.990065][T11228] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1597: couldn't read orphan inode 15 (err -117)
[  474.026381][T11228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  474.080047][T11228] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  474.220628][    T9] usb 3-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config
[  474.238426][    T9] usb 3-1: config 160 has no interface number 0
[  474.250343][    T9] usb 3-1: config 160 interface 200 altsetting 30 endpoint 0x8 has an invalid bInterval 0, changing to 7
[  474.261917][    T9] usb 3-1: config 160 interface 200 has no altsetting 0
[  474.272442][    T9] usb 3-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[  474.307447][T11211] bcachefs (loop3): marking superblocks
[  474.323153][T11211] bcachefs (loop3): initializing freespace
[  474.335758][T11211] bcachefs (loop3): done initializing freespace
[  474.345872][T11211] bcachefs (loop3): reading snapshots table
[  474.351903][T11211] bcachefs (loop3): reading snapshots done
[  474.357942][T11228] lo speed is unknown, defaulting to 1000
[  474.434448][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  474.445099][T11211] bcachefs (loop3): done starting filesystem
[  474.480571][    T9] usb 3-1: Product: syz
[  474.484798][    T9] usb 3-1: Manufacturer: syz
[  474.489415][    T9] usb 3-1: SerialNumber: syz
[  474.566077][T11224] bcachefs (loop5): marking superblocks
[  474.584087][T11224] bcachefs (loop5): initializing freespace
[  474.593572][ T5838] bcachefs (loop3): shutting down
[  474.595342][T11224] bcachefs (loop5): done initializing freespace
[  474.598607][ T5838] bcachefs (loop3): going read-only
[  474.598648][ T5838] bcachefs (loop3): finished waiting for writes to stop
[  474.608641][T11224] bcachefs (loop5): reading snapshots table
[  474.623388][T11224] bcachefs (loop5): reading snapshots done
[  474.639835][ T5951] hsr_slave_0: left promiscuous mode
[  474.649671][ T5838] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3
[  474.677490][T11224] bcachefs (loop5): done starting filesystem
[  474.719120][ T5951] hsr_slave_1: left promiscuous mode
[  474.722777][ T5838] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 4
[  474.747708][ T5951] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  474.755823][ T5838] bcachefs (loop3): clean shutdown complete, journal seq 5
[  474.766131][    T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  474.773992][ T5838] bcachefs (loop3): marking filesystem clean
[  474.783712][ T5951] batman_adv: batadv0: Removing interface: batadv_slave_0
[  474.791192][    T9] usb 3-1: MIDIStreaming interface descriptor not found
[  474.808214][ T5951] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  474.827352][ T5951] batman_adv: batadv0: Removing interface: batadv_slave_1
[  474.827869][ T5849] bcachefs (loop5): shutting down
[  474.845135][ T5838] bcachefs (loop3): shutdown complete
[  474.857526][ T5849] bcachefs (loop5): going read-only
[  474.874109][ T5844] Bluetooth: hci4: command tx timeout
[  474.879677][ T5849] bcachefs (loop5): finished waiting for writes to stop
[  474.886418][    T9] usb 3-1: USB disconnect, device number 13
[  474.906868][ T5849] bcachefs (loop5): flushing journal and stopping allocators, journal seq 3
[  474.925974][ T5951] veth1_macvtap: left promiscuous mode
[  474.960729][   T43] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  474.971212][ T5951] veth0_macvtap: left promiscuous mode
[  474.984471][ T5951] veth1_vlan: left promiscuous mode
[  475.012634][ T5951] veth0_vlan: left promiscuous mode
[  475.037574][ T5849] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3
[  475.068157][ T5849] bcachefs (loop5): clean shutdown complete, journal seq 4
[  475.100587][ T5849] bcachefs (loop5): marking filesystem clean
[  475.169404][   T43] usb 2-1: config 0 has an invalid interface number: 98 but max is 0
[  475.186279][   T43] usb 2-1: config 0 has no interface number 0
[  475.202391][   T43] usb 2-1: config 0 interface 98 has no altsetting 0
[  475.211916][ T5849] bcachefs (loop5): shutdown complete
[  475.245172][   T43] usb 2-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24
[  475.274738][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  475.294938][   T43] usb 2-1: Product: syz
[  475.299142][   T43] usb 2-1: Manufacturer: syz
[  475.324658][   T43] usb 2-1: SerialNumber: syz
[  475.349350][   T43] usb 2-1: config 0 descriptor??
[  475.552487][T11255] loop2: detected capacity change from 0 to 1024
[  475.603035][   T43] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II
[  475.609326][T11255] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  475.665362][T11255] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.1602: missing EA_INODE flag
[  475.678201][T11255] EXT4-fs (loop2): Remounting filesystem read-only
[  475.771398][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  476.243139][   T43] usb 2-1: reset high-speed USB device number 11 using dummy_hcd
[  476.351570][ T5951] team0 (unregistering): Port device team_slave_1 removed
[  476.451368][ T5951] team0 (unregistering): Port device team_slave_0 removed
[  476.653535][   T43] usb 2-1: failed to restore interface 98 altsetting 4 (error=-71)
[  476.687905][   T43] usb 2-1: [ueagle-atm] pre-firmware device, uploading firmware
[  476.741444][   T43] usb 2-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw
[  476.759556][   T43] usb 2-1: USB disconnect, device number 11
[  476.983858][ T5839] Bluetooth: hci4: command tx timeout
[  477.590943][T10736] usb 2-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2
[  477.600037][T10736] usb 2-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw
[  477.621386][T10736] ------------[ cut here ]------------
[  477.627090][T10736] WARNING: CPU: 1 PID: 10736 at fs/kernfs/dir.c:537 kernfs_get.part.0+0x6e/0x80
[  477.636347][T10736] Modules linked in:
[  477.640511][T10736] CPU: 1 UID: 0 PID: 10736 Comm: kworker/1:0 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) 
[  477.652739][T10736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  477.663082][T10736] Workqueue: events request_firmware_work_func
[  477.669297][T10736] RIP: 0010:kernfs_get.part.0+0x6e/0x80
[  477.674925][T10736] Code: c8 a4 5b ff 85 ed 74 1c e8 7f a9 5b ff be 04 00 00 00 48 89 df e8 a2 93 c1 ff f0 ff 03 5b 5d e9 33 cf af fe e8 63 a9 5b ff 90 <0f> 0b 90 eb d9 48 89 df e8 85 8b c1 ff eb c0 0f 1f 00 90 90 90 90
[  477.694771][T10736] RSP: 0018:ffffc900031a77e0 EFLAGS: 00010293
[  477.700922][T10736] RAX: 0000000000000000 RBX: ffff88806bb380f0 RCX: ffffffff826071b8
[  477.708927][T10736] RDX: ffff888028213c00 RSI: ffffffff826071dd RDI: 0000000000000005
[  477.716963][T10736] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[  477.724994][T10736] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888056143038
[  477.733038][T10736] R13: ffffffff8c423ba0 R14: ffff888066ea1b40 R15: ffff88806bb380f0
[  477.741072][T10736] FS:  0000000000000000(0000) GS:ffff88812485a000(0000) knlGS:0000000000000000
[  477.750044][T10736] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  477.756868][T10736] CR2: 00007f17e93fb94c CR3: 0000000077f20000 CR4: 0000000000350ef0
[  477.764904][T10736] Call Trace:
[  477.768205][T10736]  <TASK>
[  477.771190][T10736]  kernfs_get+0x1f/0x30
[  477.775398][T10736]  internal_create_group+0x415/0xf30
[  477.780781][T10736]  ? __pfx_internal_create_group+0x10/0x10
[  477.786640][T10736]  ? __pfx_internal_create_group+0x10/0x10
[  477.792541][T10736]  ? srso_alias_return_thunk+0x5/0xfbef5
[  477.798219][T10736]  ? srso_alias_return_thunk+0x5/0xfbef5
[  477.803943][T10736]  ? __pfx_dev_add_physical_location+0x10/0x10
[  477.810211][T10736]  ? srso_alias_return_thunk+0x5/0xfbef5
[  477.815894][T10736]  ? bus_to_subsys+0x131/0x160
[  477.820750][T10736]  dpm_sysfs_add+0x80/0x280
[  477.825295][T10736]  device_add+0x9a6/0x1a70
[  477.829764][T10736]  ? __pfx_device_add+0x10/0x10
[  477.834682][T10736]  ? srso_alias_return_thunk+0x5/0xfbef5
[  477.840407][T10736]  ? __init_waitqueue_head+0xca/0x150
[  477.845823][T10736]  ? srso_alias_return_thunk+0x5/0xfbef5
[  477.851562][T10736]  firmware_fallback_sysfs+0x2ec/0xbe0
[  477.857176][T10736]  _request_firmware+0xfe9/0x1470
[  477.862307][T10736]  ? __pfx__request_firmware+0x10/0x10
[  477.867809][T10736]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  477.873706][T10736]  ? srso_alias_return_thunk+0x5/0xfbef5
[  477.879385][T10736]  ? debug_object_deactivate+0x1ec/0x3a0
[  477.885071][T10736]  ? finish_task_switch.isra.0+0x221/0xc10
[  477.890946][T10736]  request_firmware_work_func+0xea/0x250
[  477.896626][T10736]  ? __pfx_request_firmware_work_func+0x10/0x10
[  477.902930][T10736]  ? srso_alias_return_thunk+0x5/0xfbef5
[  477.908589][T10736]  ? rcu_is_watching+0x12/0xc0
[  477.913447][T10736]  process_one_work+0x9cf/0x1b70
[  477.918441][T10736]  ? __pfx_process_one_work+0x10/0x10
[  477.923849][T10736]  ? srso_alias_return_thunk+0x5/0xfbef5
[  477.929508][T10736]  ? srso_alias_return_thunk+0x5/0xfbef5
[  477.935193][T10736]  ? assign_work+0x1a0/0x250
[  477.939830][T10736]  worker_thread+0x6c8/0xf10
[  477.944469][T10736]  ? srso_alias_return_thunk+0x5/0xfbef5
[  477.950137][T10736]  ? srso_alias_return_thunk+0x5/0xfbef5
[  477.955858][T10736]  ? __kthread_parkme+0x19e/0x250
[  477.960936][T10736]  ? srso_alias_return_thunk+0x5/0xfbef5
[  477.966620][T10736]  ? __pfx_worker_thread+0x10/0x10
[  477.971790][T10736]  kthread+0x3c5/0x780
[  477.975898][T10736]  ? __pfx_kthread+0x10/0x10
[  477.980554][T10736]  ? srso_alias_return_thunk+0x5/0xfbef5
[  477.986219][T10736]  ? rcu_is_watching+0x12/0xc0
[  477.991050][T10736]  ? __pfx_kthread+0x10/0x10
[  477.995667][T10736]  ret_from_fork+0x5d7/0x6f0
[  478.000332][T10736]  ? __pfx_kthread+0x10/0x10
[  478.004948][T10736]  ret_from_fork_asm+0x1a/0x30
[  478.009749][T10736]  </TASK>
[  478.012813][T10736] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  478.020104][T10736] CPU: 1 UID: 0 PID: 10736 Comm: kworker/1:0 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) 
[  478.032270][T10736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  478.042341][T10736] Workqueue: events request_firmware_work_func
[  478.048540][T10736] Call Trace:
[  478.051824][T10736]  <TASK>
[  478.054771][T10736]  dump_stack_lvl+0x3d/0x1f0
[  478.059407][T10736]  panic+0x71c/0x800
[  478.063342][T10736]  ? __pfx_panic+0x10/0x10
[  478.067796][T10736]  ? show_trace_log_lvl+0x29b/0x3e0
[  478.073046][T10736]  ? check_panic_on_warn+0x1f/0xb0
[  478.078235][T10736]  ? kernfs_get.part.0+0x6e/0x80
[  478.083228][T10736]  check_panic_on_warn+0xab/0xb0
[  478.088219][T10736]  __warn+0xf6/0x3c0
[  478.092161][T10736]  ? kernfs_get.part.0+0x6e/0x80
[  478.097141][T10736]  report_bug+0x3c3/0x580
[  478.101531][T10736]  ? kernfs_get.part.0+0x6e/0x80
[  478.106571][T10736]  handle_bug+0x184/0x210
[  478.110958][T10736]  exc_invalid_op+0x17/0x50
[  478.115494][T10736]  asm_exc_invalid_op+0x1a/0x20
[  478.120370][T10736] RIP: 0010:kernfs_get.part.0+0x6e/0x80
[  478.125948][T10736] Code: c8 a4 5b ff 85 ed 74 1c e8 7f a9 5b ff be 04 00 00 00 48 89 df e8 a2 93 c1 ff f0 ff 03 5b 5d e9 33 cf af fe e8 63 a9 5b ff 90 <0f> 0b 90 eb d9 48 89 df e8 85 8b c1 ff eb c0 0f 1f 00 90 90 90 90
[  478.145596][T10736] RSP: 0018:ffffc900031a77e0 EFLAGS: 00010293
[  478.151698][T10736] RAX: 0000000000000000 RBX: ffff88806bb380f0 RCX: ffffffff826071b8
[  478.159689][T10736] RDX: ffff888028213c00 RSI: ffffffff826071dd RDI: 0000000000000005
[  478.167714][T10736] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[  478.175704][T10736] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888056143038
[  478.183697][T10736] R13: ffffffff8c423ba0 R14: ffff888066ea1b40 R15: ffff88806bb380f0
[  478.191703][T10736]  ? kernfs_get.part.0+0x48/0x80
[  478.196675][T10736]  ? kernfs_get.part.0+0x6d/0x80
[  478.201654][T10736]  kernfs_get+0x1f/0x30
[  478.205848][T10736]  internal_create_group+0x415/0xf30
[  478.211181][T10736]  ? __pfx_internal_create_group+0x10/0x10
[  478.217024][T10736]  ? __pfx_internal_create_group+0x10/0x10
[  478.222864][T10736]  ? srso_alias_return_thunk+0x5/0xfbef5
[  478.228526][T10736]  ? srso_alias_return_thunk+0x5/0xfbef5
[  478.234192][T10736]  ? __pfx_dev_add_physical_location+0x10/0x10
[  478.240392][T10736]  ? srso_alias_return_thunk+0x5/0xfbef5
[  478.246054][T10736]  ? bus_to_subsys+0x131/0x160
[  478.250854][T10736]  dpm_sysfs_add+0x80/0x280
[  478.255382][T10736]  device_add+0x9a6/0x1a70
[  478.259823][T10736]  ? __pfx_device_add+0x10/0x10
[  478.264698][T10736]  ? srso_alias_return_thunk+0x5/0xfbef5
[  478.270368][T10736]  ? __init_waitqueue_head+0xca/0x150
[  478.275774][T10736]  ? srso_alias_return_thunk+0x5/0xfbef5
[  478.281451][T10736]  firmware_fallback_sysfs+0x2ec/0xbe0
[  478.286964][T10736]  _request_firmware+0xfe9/0x1470
[  478.292043][T10736]  ? __pfx__request_firmware+0x10/0x10
[  478.297540][T10736]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  478.303391][T10736]  ? srso_alias_return_thunk+0x5/0xfbef5
[  478.309059][T10736]  ? debug_object_deactivate+0x1ec/0x3a0
[  478.314714][T10736]  ? finish_task_switch.isra.0+0x221/0xc10
[  478.320563][T10736]  request_firmware_work_func+0xea/0x250
[  478.326249][T10736]  ? __pfx_request_firmware_work_func+0x10/0x10
[  478.332538][T10736]  ? srso_alias_return_thunk+0x5/0xfbef5
[  478.338201][T10736]  ? rcu_is_watching+0x12/0xc0
[  478.343004][T10736]  process_one_work+0x9cf/0x1b70
[  478.347985][T10736]  ? __pfx_process_one_work+0x10/0x10
[  478.353382][T10736]  ? srso_alias_return_thunk+0x5/0xfbef5
[  478.359054][T10736]  ? srso_alias_return_thunk+0x5/0xfbef5
[  478.364717][T10736]  ? assign_work+0x1a0/0x250
[  478.369358][T10736]  worker_thread+0x6c8/0xf10
[  478.373983][T10736]  ? srso_alias_return_thunk+0x5/0xfbef5
[  478.379648][T10736]  ? srso_alias_return_thunk+0x5/0xfbef5
[  478.385309][T10736]  ? __kthread_parkme+0x19e/0x250
[  478.390368][T10736]  ? srso_alias_return_thunk+0x5/0xfbef5
[  478.396042][T10736]  ? __pfx_worker_thread+0x10/0x10
[  478.401181][T10736]  kthread+0x3c5/0x780
[  478.405272][T10736]  ? __pfx_kthread+0x10/0x10
[  478.409880][T10736]  ? srso_alias_return_thunk+0x5/0xfbef5
[  478.415619][T10736]  ? rcu_is_watching+0x12/0xc0
[  478.420416][T10736]  ? __pfx_kthread+0x10/0x10
[  478.425027][T10736]  ret_from_fork+0x5d7/0x6f0
[  478.429653][T10736]  ? __pfx_kthread+0x10/0x10
[  478.434263][T10736]  ret_from_fork_asm+0x1a/0x30
[  478.439072][T10736]  </TASK>
[  478.442323][T10736] Kernel Offset: disabled
[  478.446742][T10736] Rebooting in 86400 seconds..