last executing test programs:

4m15.293152208s ago: executing program 2 (id=647):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000440)={0x300, 0x1, &(0x7f0000000040)=[r1], &(0x7f0000000340)=[0x8], 0x0, 0x0, 0x0, 0xfffffffffffffffe})

4m14.856882998s ago: executing program 2 (id=652):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

4m14.153140603s ago: executing program 2 (id=661):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdfe81d00000008000300", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4814)

4m13.445157122s ago: executing program 2 (id=670):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x109}], {0x14}}, 0x3c}}, 0x0)

4m13.010905936s ago: executing program 2 (id=676):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x8, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0x5, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x7, 0x1, 0x407, 0x5, 0x3e, 0x8, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e2, 0x1, 0xf9, 0xe, 0x10, 0x6c7, 0x9, 0xfffffffc, 0x80000003, 0x203, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xa1, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ff, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x101, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x250, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x2, 0x5, 0x8, 0x401, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x6, 0x40, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x7, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0xfffffff9, 0xc8, 0x9, 0xfffff000, 0x7, 0x3, 0x7e, 0x100, 0x9602, 0x1, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x7, 0x8, 0x30b1d693, 0xa21, 0x1000f40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xffff, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x40fff]}, 0x45c)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0xffff0018)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

4m12.29322527s ago: executing program 2 (id=682):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r1, 0x4004550c, 0x0)

3m56.950651611s ago: executing program 32 (id=682):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r1, 0x4004550c, 0x0)

22.915639769s ago: executing program 5 (id=2547):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x80)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a6c000000160a3f360000000000000000020000000900010073797a30000000004000038008000240000000002c0003801400010076657468305f746f5f626f6e64000000140001007665746830000000000000000000000008000140000000000900020073797a300000000014000000110001"], 0x94}}, 0x8000)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000170afd02"], 0x20}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000)

22.329640008s ago: executing program 5 (id=2554):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c187, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}}, 0x24}}, 0x0)

22.00109444s ago: executing program 5 (id=2558):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@lazytime}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r0, 0x2007ffc)
sendfile(r0, r0, 0x0, 0x800000009)

20.553694164s ago: executing program 5 (id=2567):
syz_mount_image$jfs(&(0x7f0000006700), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000006740)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRESDEC], 0x5, 0x6235, &(0x7f00000004c0)="$eJzs3ctvHVcdB/DfffoRmkZdVCVCyG3Do5TmWUKgQJsFLNiwQN2iRKlbRaSAkoDSKiKuvGHBHwFCYokQS1b8AV2wZccfQKQECdRVpxr7HHs8vfZ16vrOtc/nIzkzv3tmfM/4e+c+MjP3BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQP/7RTy/0IuLab9INpyK+EIOIfsRSXa9ExNLKqbz8MCKei43meDYiRgsR9fob/zwd8WpEfHgy3RaxdnGf/fjhX//1p5+d+Mk//zI69/+/3R28ttty9+79/n9/f3CQLQYAAIDyVFVV9dLH/NPp832/604BADORX/+rJN+uVqvVarX6+NVN1WQPmkVErDXXqd8zOBwPAEfMWnzUdRfokPyLNoyIE113Aphrva47wKF49Pj+jV7Kt9d8PVjZbM/nguzIf623sV5ef9J0mvY5JrN6fK3HIJ7ZpT9LM+rDPMn599v5X9tsH6flDjv/Wdkt//HmpU/FyfkP2vm3HJ/8+xPzL1XOf/hE+Q/kDwAAAAAAcyz///+pjo//Lhx8U/Zlr+O/KzPqAwAAAAAAAAB83g46/t+W1vh/+TwA4/8BAABA9+rP6rU/nNy+bbfvYqtvf7MX8VRreaAsvXSxzHLXHQEAAAAAAAAAAACAkgwjlhsDnz+1vFxVVf3T1K6f1EHXP+pK334oWZdP8AAAsO3Dk61r+XsRixHxZvquv9Hy8nJVLS4tV8vV0kJ+PzteWKyWGp9r87S+bWG8jzfEw3FV/7LFxnpN0z4vT2tv/776vsbVYB8dm40OAweAiNh8NXrkFemYqaqno+t3ORwN9v/jx/7PfnT9OAUAAAAOX1VVVS8N83c6HfPvd90pAGAm8ut/+7iAWq1Wq9Xq41c3VZM9aBYRsdZcp37PYDh+ADhi1uKjrrtAh+RftGFEPNd1J4C51uu6AxyKR4/v3+ilfHvN14M0vns+F2RH/mu9jfXy+pOm07TPMZnV42s9BvHMLv15dkZ9mCc5/347/2ub7eO03GHnPyu75V9v56kO+tO1R4+vDutsB+38W45P/v2J+Zcq7//DJ8p/IH8AAAAAAJhj+f//T83V8d/xZ92cqfY6/ruyj/V9NwIAAAAAAAAA8+jR4/s38nWv+fj/lyYs5/rP4ynn35N/kXL+/Vb+X28tN2jMP7y6nf9/H9+/8ee7//linu43/4U800uPrF56RPTSPfWGaXqQrfu09dFgXN/TqNcfDNM5P9Xo7bgZt2I1zu9Ytp/+HtvtF3a01z0dbbRXg832izvah1vtef1LO9pH6Uynaim3n40b8cu4FW9ttNdtC1O2f3FKezWlPec/sP8XKec/bPzU+S+n9l5rWnv4Qf9T+31zOul+3rj55d+dP/zNmWo9Blvb1lRv3wsd9Gfjb3JiHL++s3r77L3rd+/evhBpsuPWi5Emn7Oc/yj9bD3/v7jZnp/3m/vrww/GT5z/vFiP4a75v9iYr7f3pRn3rQs5/3H6yfm/ldon7/9HOf/d9/+XO+gPAAAAAAAAAAAAAAAA7KWqqo1LRN+IiMvp+h/fcQ8AZciv/1WSb59VPZjx/anVR7zuzVl/Zlp/XM1Xf9Tqo1g3VZO93iwi4h/Nder3DL+d9MsAgHn2cUT8u+tO0Bn5Fyx/3189PdN1Z4CZuvPe+z+/fuvW6u07XfcEAAAAAAAAAPis8vifK43xn89UVfWgtdyO8V+vxspBx/8c5pmtAUZ3Gah68OTbtJf1/njQbww3/nzsNv73aGtur/G/h1PubzSlfTylfWFK++KU9okXejTk/J9vjHd+JiJOt4ZfP9Ljv1bbf8W9xn9tj3lfgpz/C43Hc53/11rLNfOv/njE8m9Yj/6O/M/dffdX5+689/4rN9+9/s7qO6u/uHThwvlLly9fuXLl3Ns3b62e3/y3wx4frpx/HvvaeaBlyfnnzOVflpz/V1It/7Lk/L+aavmXJeef3+/Jvyw5//zZR/5lyfm/lGr5lyXn/41Uy78sOf+XUy3/suT8v5lq+Zcl5/9KquVflpz/2VTLvyw5/3Op3mf+S4fdL2Yj55+PcNn/y5Lzz2c2yL8sOf+LqZZ/WXL+l1It/7Lk/F9NtfzLkvP/VqrlX5ac/+VUy78sOf9vp1r+Zcn5X0m1/MuS8/9OquVflpz/d1Mt/7Lk/F9LtfzLkvP/XqrlX5ac//dTLf+y5Px/kGr5lyXn/3qq5V+W7e//N2PmKM4sRcQcdOPYzXT9zAQAAAAAAAAAAAAAtM3idOKutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRX27jXGjrO8A/js1WuHJAZC6qSGbBwTQuJk13biC22KCdeGWwmEQi/YrndtFnzDa5dAI9koUCJhVFTRNnxoCwi1+VIRVXygFaB8QK0qVYL2A/2CqCqhKqoCCkhItIJsdWbe991zzp7L7vp4M2fm95Pix3vOzJl35rwzu886/zMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAs1tfP//pkSzLGv/lf2zNshc1/r55emv+2Gte6BECAAAAV+qX+Z/PXZ8eOLSKlZqW+edXfOdrS0tLS9n7xv5s4vNLS+mJ6Syb2JRl+XPRU//1/pHmZYLHsqmR0aavR/tsfqzP8+N9np/o8/xkn+c39Xl+qs/zKw7ACpuL38fkL7Yz/+vW4pBmN2QT+XM7O6z12Mim0dH4u5zcSL7O0sTxbCE7mc1nsy3LF8uO5Mt/49bGtt6SxW2NNm1re2OG/OTRY3EMI+EY72zZ1vJrRj96XTb90588euxvzj97U6fa9zC0vF4xzjt2NMb5yfBIMdaRbFM6JnGco03j3N7hPRlrGedIvl7j7+3jfG6V4xxbHuaGan/Pp7LR/O/fzY/TePOv9dJx2h4e+/ltWZZdWh52+zIrtpWNZltaHhldfn+mihnZeI3GVHpJNr6meXrrKuZpo87tbJ2n7edEfP9vDeuNdxlD89v0o09MNr3vv1hazzyNGnvd7Vxpn4ODPlfKMgfjvPhuvtOPd5yDO8P+P3p79znYce50mINpv5vm4I5+c3B0ciwfc3oTRvJ1lufg7pblx/ItjeT1mdt7z8GZ86fOzix+7ON3L5w6emL+xPzpvbt3z+7dt+/AgQMzxxdOzs8Wf67zaJfflmw0nQM7wrGL58Cr2pZtnqpLX5pccf1d73k41eM83Nq27KDPw/H2nRvZmBNy5Zwuzo33NA761OXRrMs5lr8/d175eZj2u+k8HG86Dzt+T+lwHo6v4jxsLHP2ztX9zDLe9F+nMXT/XnBlc3Br0xxs/3mkfQ4O+ueRsszBqTAvvn9n9+8F28N4H9+11p9HxlbMwbS74drTeCT9vD91IC+d5uXNjSeumcwuLM6fu+eRo+fPn9udhbIhXto0V9rn65amfcpWzNfRNc/XQwuvePzmDo9vDcdq6u7GH1Nd36vGMvfe0/u9yr+7dT6eLY/uyUIZsI0+np2+mzeO52SWfeHbn3jom49+4fVdj2ej3/zkzJX/LJ760qbr70SX62/s+58vtpde6rGxifHi/B1LR2ei5Xrc+laN59eukXzbz82s7no8Ef7b6OvxDT2ux9valh309Xiifefi9Xik3287rkz7+zkV5snJ2d7X48Yy2/asdU6O97we3xbqSDj+rw6dQuqLmuZOt3mbtjU+PhH2azxuoXWe7m1ZfiL0Zo1tPblnffP0jtuK1xpLe7dso+bpdNuyg56n6Xdf3ebpSL/fvq1P+/s5FebFDXt7z9PGMk/fe+XXzs3xr03Xzsl+c3BibLIx5ok0CfPrfba0Oc7Be7Jj2ZnsZDaXPzuZz6eRfFu77lvdHJwM/230tXJbjzl4R9uyg56D6ftYt7k3Mr5y5weg/f2cCvPiift6z8HGMm/YP9ifXe8Ij6Rlmn52bf/9Wrffed3cdpiu1lwZD+P89v7ev5ttLHPywFr7zN7H6a7wyDUdjlP7+dvtnJrLVnucRq74nGqM89kD3Y9TYzyNZT5/cJXz6VCWZRc/8kD++97w7yt/f+F7X2v5d5dO/6Zz8SMP/Pja4/+0lvEDMPyeL8qW4ntd079Mrebf/wEAAIChEPv+0VAT/T8AAABURuz74/8Vnuj/AQAAoDJi3z8ealKT/n/bG55deP5ilpL5S0F8Ph2GB4vlYsZ1Nnw9vbSs8fgDX5n/2T9eXN22R7Ms+8WDf9Rx+W0PxnEVpsM4n3pj6+MrfO3uVW37yMMX03ab8+tfDK8f92e106BTBHc2y7JvXP/ZfDvT77+c16cfPJLXhy49/lhjmecOFl/H9Z95abH8X4bw76HjR1vWfyYchx+GOvvWzscjrvfVy6/evv+9y9uL643suC7f7Sc+ULxuiMhuyh4rlo/Hudv4v/mZJ7/aWOGRV3Ye/8XRzuN/MrzuV0L935cXyze/B42v43qfCuOP24vr3fPlb3Uaf/bUp4vlz76pWO5IqHH7d4Svd77p2YXm4/XIyNGW/creXCwXtz/7vT/Jn4+vF1+/ffxThy+3HI/2+fH0vxevM9O2fHw8bif6h7btN16neX7G7T/5x0dajnO/7T/10DMvb7xu+/bvalvu7EfuzLe//Hqtn9j0V5/6bMftxfEc+ruzLftz6F3hPA7bf+IDYT6G5//vqeL12j9d4ci7Wq8/cfkvbr3Ysj/RW35abP+p157I66apzVuuedG11126pXHssuy7m4rX67X9+BkQzeP/0o3F8YjjiBn99u13E7d/7qO7Tp9ZvLAwl47qo9fnn53ztmI8cbzXh2tr+9eHz5z/4Py56dnp2Sybru5H6K3bl0P9cVEurXX9Ox8O7+fNf/GNLbf/22fi4//xnuLxy28tvm+9Kiz3ufD41vD+Xen2n7j1xvz8Hnm6+Lolxz4A23f+z4FVLRj2v/3ngjjfz77sg/lxaDyXf9+I5/UVjv8Hc8XrfD0c16Xwycw7blzeXvPy8bMRLr+7ON+v+PiFy1x8X/82vN9v/2Hx+nFccX9/EH6O+da21utdnB9fvzja/vr5p3hcCteT7FLxfFwqHu/Lz93YcXjxc0iySzflX/9pep2b1rSb3Sx+bHHm5MLpC4/MnJ9fPD+z+LGPHz515sLp84fzz/I8/KF+6y9fn7bk16e5+X33ZvnV6kxRrrIXevxnHz42t3/29rn540cvHD//8Nn5cyeOLS4em59bvP3o8ePzH+23/sLc/bv3HNy7f8+uEwtz9x84eHDvwV0Lp880hlEMqo99sx/edfrc4XyVxfvvPbj7vvvund116szc/P37Z2d3Xei3fv69aVdj7T/cdW7+5NHzC6fmdy0ufHz+/t0H9+3b0/fTAE+dPb44PXPuwumxbHH+3EyxL9Pn84cb3/v6rU81Lf5n8fNsu5Hig/iyd961L30+a8NXPtH1pYpF2j5A9NnwWTT/8uKzB1bzdez7J0JNatL/AwAAQB3Evn8y1ET/DwAAAJUR+/5NoSb6fwAAAKiM2PdPhZrUpP+vXP5/28VVbV/+v2P+P/uc/L/8fx3y/+/un/9vOPHXZ362Mfn/4noh/z8Yg8n/Pxi+kv+X/5f/l/+X/19z/n/mgvw/Sdny/7Hv35xltez/AQAAoA5i378l1ET/DwAAAJUR+/5rQk30/wAAAFAZse9/UahJTfp/+X/5/3Lk///72jh2+f/l9eT/C/L/8v9r4f7/vcn/9yH/P5PVK/9/aZDjl/+X/2elsuX/Y99/bahJTfp/AAAAqIPY918XaqL/BwAAgMqIff/1oSb6fwAAAKiM2PdvDTWpSf8v/y//X478/zL5/+X15P8L8v/y/2sh/9+b/H8f8v/u/y//L//PQJUt/x/7/heHmtSk/wcAAIA6iH3/S0JN9P8AAABQPuPrWy32/S8NNVnR/69zAwAAAMALLvb9N2RtQfCa/Pu//L/8v/y//L/8f+ftrz7/P5bJ/5eH/H9v8v99yP9XLf8/nsn/y//zgipb/j/v+7Op7GWhJjXp/wEAAKAOYt9/Y6iJ/h8AAAAqI/b9vxJqov8HAACAyoh9/7ZQk5r0//L/Vzv/v1n+X/5f/j/Oy8rm/93/v0yGJf8/2eVx+X/5f/n/4R3/kOT/X/NQl/Xl/7kaypb/j33/TaEmNen/AQAAoA5i339zqIn+HwAAACoj9v2/Gmqi/wcAAIDKiH3/9lCTmvT/8v/u/y//L/8v/995+/L/w2lY8v/dyP/L/8v/D+/4hyT/35X8P1dD2fL/se9/eahJTfp/AAAAqIPY978i1ET/DwAAAJUR+/5bQk30/wAAAFAZse+fDjWpSf8v/y//L/8v/y//33n78v/DSf6/N/n/PuT/5f/l/+X/Gaiy5f9j339rqElN+n8AAACog9j37wg10f8DAABAZcS+/7ZQE/0/AAAAVEbs+3eGmtSk/5f/r27+P85m+X/5f/l/+f86kf/vTf6/D/l/+X/5f/l/Bqps+f/Y978y1KQm/T8AAADUQez7bw810f8DAABAZcS+/1WhJvp/AAAAqIzY998RalKT/l/+v7r5/+G6//8taezy/8vryf8X5P/l/9eicvn/TP4/k/9P5P/LPX75f/l/Vipb/j/2/a8ONalJ/w8AAAB1EPv+O0NN9P8AAABQGbHvvyvURP8PAAAAlRH7/l2hJjXp/+X/5f/Lkf9fJv+/vN7Vz//fdF/z42XJ/7fHvuT/5f/XonL5f/f/z8n/F8qS/+/0c08m/y//L/9PB2XL/8e+/+5Qk5r0/wAAAFAHse+/J9RE/w8AAACVEfv+mVAT/T8AAABURuz7Z0NNKtf/T3d8VP5f/l/+v875/3Xc//+W5dd1//98NOPy/+Ui/9+b/H8f8v/u//+C5/8n5P+plLLl/2PfvzvUpHL9PwAAANRX7Pv3hJro/wEAAKAyYt+/N9RE/w8AAACVEfv+e0NNatL/y//L/8v/y/+X7f7/w5X/d///spH/723w+f+4i/L/8v/y/+7/L//PSmXL/8e+/75Qk5r0/wAAAFAHse/fF2qi/wcAAIDKiH3//lAT/T8AAABURuz7D4Sa1KT/l/+X/5f/l/+X/++8ffn/4ST/35v7//ch/y//L/8v/89AlS3/H/v+g6EmNen/AQAAoA5i3/+aUBP9PwAAAFRG7Pt/LdRE/w8AAACVEfv+Xw81qUn/L/8v/y//L/8v/995+/L/w0n+vzf5/z7k/+X/5f/l/xmosuX/Y99/f6hJTfp/AAAAqIPY9/9GqIn+HwAAACoj9v2vDTXR/wMAAEBlxL7/UKhJTfp/+X/5f/l/+X/5/87bX1f+fyLrSv5/Y8j/99ac/9/ca0H5f/l/+X/5f/l/BqBs+f/Y978u1KQm/T8AAADUQez7Hwg10f8DAABAZcS+//WhJvp/AAAAqIzY978h1KQm/b/8v/y//L/8v/x/5+27//9wkv/vzf3/+5D/l/+X/5f/Z6DKlv+Pff8bQ01q0v8DAABAHcS+/02hJvp/AAAAqIzY97851ET/DwAAAJUR+/63hJrUpP+X/5f/l/+X/5f/77x9+f/hJP/f25ry//HiKv8v/y//L/8v/89qTK18qGz5/9j3/2b7gGvS/wMAAEAdxL7/wVAT/T8AAABURuz73xpqov8HAACAyoh9/9tCTWrS/8v/D0n+f1z+P5P/l/9v2x/5f/n/TuT/exuy+///8rrwuPx/Qf6/3OMfrvz/0qb29eX/uRrKlv+Pff/bQ01q0v8DAABAHcS+/x2hJvp/AAAAqIzY978z1ET/DwAAAJUR+/7fCjWpSf8v/98Yx3J6ubT5f/f/l/+X/5f/l/9fFfn/3oYs/+/+/23k/8s9/uHK/68k/8/VULb8f+z73xVqUpP+HwAAAOog9v0PhZro/wEAAKAyYt//7lAT/T8AAABURuz73xNqUpP+X/5/SO7/L/8v/y//L/8v/78q8v+9yf93lu6ELv8v/y//L//PQJUt/x/7/odDTWrS/wMAAEAdxL7/vaEm+n8AAACojNj3/3aoif4fAAAAKiP2/e8LNalJ/y//Pyz5/2n5f/l/+f+2/ZH/l//vRP6/N/n/PuT/5f/XO/5N8v/y/3RStvx/7PvfH2pSk/4fAAAA6iD2/b8TaqL/BwAAgKFxTZ/nY9//u6Em+n8AAACojNj3/16oSU36f/n/Ycn/u/9/Jv8v/9+2P/L/8v+dbFz+P1555P/l/+X/o1rn/7vd///n4U2V/5f/r6my5f9j3//7oSY16f8BAACgDmLf/4FQE/0/AAAADIVO/092u9j3Hw410f8DAABAZcS+/0ioSU36f/l/+X/5/5Lm//98x79+/zvvOLJb/l/+X/5/TTb0/v+Nk3/d9//f3PFR+X/5f/n/4R2/+//L/7NS2fL/se8/GmpSk/4fAAAA6iD2/X8QaqL/BwAAgMqIff+xUBP9PwAAAFRG7PvnQk1q0v/L/8v/y/+XNP8/xPf/j8dD/r/VwPL/8aIr/9/Rhub/37ucE3f//7Xm/yc7Pir/L/8/zOOX/5f/Z6Wy5f9j3z8falKT/h8AAADqIPT9o8eLuvyE/h8AAAAqI/b9J0JN9P8AAABQGbHv/2CoSU36f/l/+X/5f/l/9//vvP3S5v/d/78n+f8VNjd/UZ78f2fy//L/wzx++X/5f1YqW/4/9v0LoSY16f8BAACgDmLf/6FQE/0/AAAAVEbs+z8caqL/BwAAgMqIff/JUOtG/v+FzP8vdcz/N89C+X/5f/l/+X/5/7WR/+9N/r8P+X/5f/l/+X8Gqmz5/9j3nwo18e//wP+zdx9PktfnHcdn8RKm+AN88AWf/SdwgJMP9tnlg11lH+wqlw9gG+NsA84R5xxwziiAhFBCOYESEspCOWehjFQ1KtjneWanp/fX07PdO7/+Pq/X5bFXXnWDtsAfse/6AgAAw8jdf0vcYv8DAADAMHL33xq32P8AAAAwjNz9PxW3NNn/+n/v/6/Z/99+7a70/zfp/y/1+fr/y+7/ny7T9P/zpP+fpv9fQf+v/9f/6//ZqLn1/7n7fzpuabL/AQAAoIPc/T8Tt9j/AAAAMIzc/bfFLfY/AAAADCN3/8/GLU32/0L/f26vZ/+fGa/+3/v/+n/9v/f/d9yV7f/veuqvfPp//b/+P+j/9f/6fxbNrf/P3X973NJk/wMAAEAHuft/Lm6x/wEAAGAYuft/Pm6x/wEAAGAYuft/IW5psv+9/+/9/0v0/z+w5f5/f0//r//X/9efVf3/5nj/f1qn/v+2x66/5YkHvuvBdT5/W/3/+cN/f/3/Fp3199f/6/85bm79f+7+X4xbmux/AAAA6CB3/y/FLfY/AAAADCN3/y/HLfY/AAAADCN3/6/ELU32v/5f/+/9f/2//n/55+v/d5P+f1qn/v80n+/9f/2//l//z2bNrf/P3f+rcUuT/Q8AAAAd5O7/tbjF/gcAAIBh5O6/I26x/wEAAGAYufvvjFua7H/9v/5f/6//1/8v/3z9/27S/0/T/6+g/9f/r/H9F/7T1f/r/1libv1/7v674pYm+x8AAAA6yN3/63GL/Q8AAADDyN3/G3GL/Q8AAADDyN3/m3FLk/2v/9f/6//1//r/5Z+v/99N+v9p+v8V9P+X289f3an/X6T/1/9z3Jr9/5MTf9neSP+fu/+34pYm+x8AAAA6yN3/23GL/Q8AAADDyN3/O3GL/Q8AAADDyN3/u3FLk/2v/9f/6//1//r/5Z+v/99N+v9pF/f/i2+XH7Ht/v/c+aU/rP/f+f6/1fv/i/T/+n+Om9v7/7n7fy9uabL/AQAAoIPc/b8ft9j/AAAAMIzc/X8Qt9j/AAAAMIzc/X8YtzTZ/9vs/xcb3kX6f/3/YT9/bX13/f/hz9ud/v+aIz/eof9/8KLvp/+fF/3/NO//r6D/1//r//X/bNTc+v/c/X8UtzTZ/wAAANBB7v674xb7HwAAAIaRu/+P4xb7HwAAAIaRu/9P4pYm+395/3/4r3v//2T0/0e/v/f/l//62FT/n/+O2+7/n7LD7//f7P3/nvT/0/T/K+j/9f9n2P8fHFzp/v/o39dX9P/7qz5f/88yG+r/DzbV/+fu/9O4pcn+BwAAgA5y9/9Z3GL/AwAAwDBy9/953GL/AwAAwDBy9/9F3NJk/2/z/f9V9P/6f/3/KO//HzWT/n+r7//vXfH+/7z+/4T0/9P0/yvo//X/3v/3/j8btaH+f29T/X/u/r+MW5rsfwAAAOggd/9fxS32PwAAAOyGi3/vwOJvKA25+/86brH/AQAAYBi5+/8mbmmy//X/+n/9v/5f/7/88+fV/3v//6T0/9P0/yvo/7fRz58frP+/51I/fw79/x36f2bmSP//0OGPn1X/n7v/b+OWJvsfAAAAOsjd/3dxi/0PAAAAw8jd//dxi/0PAAAAw8jd/w9xS5P9v/X+f//Sn63/1//r//X/+n/9/6bp/6e17P/X+U9hnP7/u9f4oy5n/X7+5Trr7z+H/t/7/8zNkf7/ImfV/+fu/8e4pcn+BwAAgA5y9/9T3GL/AwAAwDBy998Tt9j/AAAAMIzc/f8ctzTZ/97/1//r//X/+v/ln6//3036/2kt+/91jNP/n8pZ9/O7/v31//p/jptb/5+7/1/ilib7HwAAADrI3f+vcYv9DwAAAMPI3f9vcYv9DwAAAMPI3f/vcUuT/a//327/nz+u/9f/7+n/T9L/36z/v/B9n9T/n1rb/v/csr8THXeJ/v+Rn7jz+4/+SJ/+/+ifOP2//l//r/9no2bR/x8c/n+Xufv/I25psv8BAACgg9z9/xm32P8AAAAwjNz9/xW32P8AAAAwjNz9/x23NNn/+n/v/+v/9f8z6v+9/1/f95z+/5Ta9v8n5P3/FfT/+n/9v/6fjZpF/3/R/567/3/ilib7HwAAADrI3f+/cYv9DwAAAMPI3f9/cYv9DwAAAMPI3f//cUuT/a//X9n/X3WSPxb9/9Hvr/9f/utD/6//P3n/7/3/09L/T9P/r6D/1//r//X/bNTc+v/c/ffGLU32PwAAAHSQu/8ZcYv9DwAAAMPI3f/MuMX+BwAAgGHk7n9W3NJk/+v/vf+v/9f/6/+Xf77+fzfp/6e16f+/d+Lz75v4Asv6/4Nr9f/6f/2//p9Tmlv/n7v/2XFLk/0PAAAAHeTuvy9usf8BAABgGLn7749b7H8AAAAYRu7+58QtTfa//l//r//X/+v/l3++/n836f+nten/vf9/Kmfdz+/699f/6/85bm79f+7+58YtTfY/AAAAdJC7/4G4xf4HAACAYeTuf17cYv8DAADAMHL3Pxi3NNn/+n/9v/5f/6//X/75+v/dtL3+f0//r//fmf5/f60/6ENn3c9frhN+/5u29f31//p/jptb/5+7//lxS5P9DwAAAB3k7n9B3GL/AwAAwDBy978wbrH/AQAAYBi5+18UtzTZ//p//b/+X/+v/1/++fr/3eT9/2n6/xUG6f9Pq0n/v7Xvr//X/3Pc3Pr/3P0vjlua7H8AAADoIHf/Q3GL/Q8AAADDyN3/krjF/gcAAIBh5O5/adzSZP+v6P8P/4To/yfp/49+f/3/8l8f+n/9/0L/f92e/n/j9P/T9P8r6P/H7P+v2huo/9+/5M/X/zNHc+v/c/e/LG5psv8BAACgg9z9L49b7H8AAAAYRu7+V8Qt9j8AAAAMI3f/K+OWJvvf+//6f/2//l//v/zzvf+/m/T/0/T/K+j/x+z/vf+v/+fMzK3/z93/qrilyf4HAACADnL3vzpusf8BAABgR6z+bXe5+18Tt9j/AAAAMIzc/a+NW5rsf/2//l//r//X/y//fP3/btL/T9P/r6D/1//r//X/bNTc+v/c/a+LW5rsfwAAAOggd//DcYv9DwAAAMPI3f9I3GL/AwAAwDBy978+bmmy//X/+n/9/272/9fp//X/+v+l5tL/33jj9z2q/9f/6//1//p//X93W+v/4yes2//n7n9D3NJk/wMAAEAHufvfGLfY/wAAADCM3P1vilvsfwAAABhG7v43xy1N9v/x/v/qvQuF6gXL+v9o1PT/F9H/H/3++v/lvz68/6//1/9v31z6f+//n+77N+z/n/5Liv5/M876+6/V/99w/Oc/3f/v7+n/Gcrc3v/P3f9o3NJk/wMAAEAHufvfErfY/wAAADCM3P1vjVvsfwAAABhG7v7H4pYm+9/7//p//b/+X/+//PP1/7tJ/z9N/7+C9//1/97/v/XHvuOK9P8Hi3+/Z0xz6/9z978tbmmy/wEAAKCD3P1vj1uW7/9l/5gXAAAAmLnc/e+IW/zzfwAAABhG7v53xi1N9r/+X/8/1/5/f0//r/+/QP+v/1+H/n+a/n8F/f82+vlrNvLlTkD/7/1/5mdu/X/u/nfFLU32PwAAAHSQu//dcYv9DwAAAMPI3f+euMX+BwAAgGHk7n9v3NJk/+v/9f9z7f8vvP//I+v3/zcs9v8/qv9f+Hz9v/5/ZPr//Dv6cvr/FfT/3v/X/+v/2ai59f+5+x+PW5rsfwAAAOggd//74hb7HwAAAIaRu//9cYv9DwAAAMPI3f+BuKXJ/tf/9+r/z+3tWv/v/X/9v/5f/78e/f80/f8K+n/9v/5f/89Gza3/z93/wbilyf4HAACAXfWD3/OTj5/0/zZ3/4fiFvsfAAAAhpG7/8Nxi/0PAAAAw8jd/5G4pcn+1//36v937/1//b/+X/+v/1+P/n/aKfr/IwG7/l//P0X/r//X/7Nobv1/7v6Pxi0XDb/za/9RAgAAAHOSu/9jcUuTf/4PAAAAHeTu/3jccmz/H5zwd7UDAAAAc5O7/xNxS5N//q//n3n/v6f/1//r//X/+v916P+nXeb7/wfn9P/6/wn6f/2//p9Fc+v/c/d/Mm5psv8BAABgUEf+G4Xc/Z+KW+x/AAAAGEbu/k/HLfY/AAAADCN3/2filib7X/8/8/7/VO//79f/pP9v3v/ffd3Sz9f/6/9Hpv+fdpn9v/f/9f+T9P+r+/8fnnhYXP/PiObW/+fu/2zc0mT/AwAAQAe5+z8Xt9j/AAAAMIzc/Z+PW+x/AAAAGEbu/i/ELU32v/5/xP7f+//6/+nPH6f//87r73z4h378/nv1/xy6kv1//lrQ/+v/9f8X6P+9/6//Z9Hc+v/c/V+MW5rsfwAAAOggd/8TcYv9DwAAAMPI3f+luMX+BwAAgGHk7v9y3NJk/+v/9f/6/13s/7Mp7t7/e/9f/3+c9/+n6f9X0P/r//X/+n82am79f+7+r8QtTfY/AAAAdJC7/6txi/0PAAAAw8jd/7W4xf4HAACA3XF++l/O3f/1uKXJ/tf/6//1/3Pt/895/z/o//X/69D/T9P/r6D/1//r//X/bNTc+v/c/d+IW5rsfwAAAOggd/+TcYv9DwAAAMPI3f/NuMX+BwAAgGHk7v9W3NJk/+v/9f/6/7n2/1Pv/+v/9/T/+v9L0P9P0/+voP/X/+v/9f9s1Nz6/9z93w4AAP//hb1f0g==")
mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0)

18.54946003s ago: executing program 5 (id=2583):
syz_mount_image$bcachefs(&(0x7f0000000040), &(0x7f0000005c80)='./file0\x00', 0x490, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64, @ANYRESHEX], 0x9, 0x5a38, &(0x7f00000001c0)="$eJzs3X+QHFd9IPDXM7Pa0a5WWskmFjZerYWVOCaglX8VP1Jhk0uAsolLFCmCfAJ7ba0cgSSr9CO2hRPknM2hsqEgRSoxyR8OZbgDFMpVcMGKC8fGJ/nAoPKFc10Z18Gd4Q+uHJ9V2Na5KI692p1+szM909uzs7PS2v58StqefvP626+73/T0903vTgAAAOA14fid+05dfe4ffPcvJl/6+Hv+adftYbA8U16NFYbT6S1nqoWcTv2VtTPTbL/4jY995aejN/zed+4f+OLLx7ZdsP2Hv3/WDQ9+5Mqj9/ztIy8OfeNXzxTFjf3p4tn55LkkhOq3Tv7VJ449fs50WbJy+mfpUAirl4VHVieZEGO/CCFsm51vev7rL126fXp6+139TQutygTR31/bqmnHOXjq5jeFH/3ulju+v+5r/9B35NlDs1WSakN/CmHldY3L94UQlqf/p8XetjYunE43hxAGGpZ7a0G73thh+zfmzJ83/WNHX1iWzg8WxInPr8/MlzL1svNRX2Y6ULC+hcprR7f1iqzIzGdPRguV185YvjqdfjOdXjzP+OV0G8pJKCWhUm/+ziTU+0hoOG5JSGaOZbU+X6of25Buf2Y+ycyXMvPlvsx2zaw37WjlJGkuj/Uy5fF0XEnLL2g8V7fx/obHjfVeH8vSF+rL2TqZoIMtD+rbNSO26+QcbTkdSg3noHbl9QOfHozBtGwwWdOyzFQb8bljW+7eUN767ePDOe1I7k/S+ElX8Q9+b/WKD3/18IG1efGvK6XxS13F//FVJ56/5vAXPp8b/zMxfrmr+Jc8NPDcVY/euT53/5yM+6fSVfyJZx771Lqzrz+S2/57Y/xqV/HHj57oHzr10MO57R+L+2d5V/Gffse7fvLlJx94Njd+iPEHuoq/9eieT/ePnLooN/7Dcf8Mdtd/XjhyxVMjIz8bzYv/RIw/1FX8Lx265+33rbrrytzjuznun+Gu4r/3wgfvWHHqgfPzzp3Jvb165wR4bTorvcb6ZDrfbZ65UA35wt+MVmrXfCvS/0O9XFHm4nN6PSt7GR8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQgive9N/eff/+sDwc5V0vj998HSpNo3ly0JIlocQ9u2f2Lt/x+4bRz9y04G9uyd2jk7sH53cvX/vraOX/dbo3sk9OydunX527M2X1pZbE5LaNDm/Zd39U1NTpeHmsri+f3PhkR9teOv//tcQxl73g5FKbvs33rPrvrPb/MxIxqfeuevA1T+4/O/T7RpO2zXcpl1TU1NTIadd/+eDv7zvL0/+9KIQxn5trnY99vTv/HPalKGZnzMFYTyzRKk/1BrUnwy0bUe91Wl74v6qbN+xc3Js7v07vfzynO34tx979hfbb/nsL2v7t5q7HR3u3+XjUztLf73lvf/vr2+rFRS160wd96L9Hbcitq+cTqvp/l6ZbtfKnO2q5GzXnd9/+MlvnXv4xUNhrPLCutZ1F21XX9oB+pLXd7TeuIaBZHVTeTWtH494XG7j/l17Nu679eCbd+yauHHyxsndb9t02aYrxi6/4vKNM1u+scfbH9f/6x1u/+npT6v+9NA348/O+lNzu5bNe39Mt6t4fzS2KO/1N/D+T3zubfc8enWtoKifx9r180k6HZg+zptCQ39r3Vfttqvo+IQQRtvth+dfvDKc89933FF0Hmo8Mo0/M5LxqcfX//zv3/p3a3+7VnBazvONDaqd58N8z/P1Vs+2Z2Z/VdPjMbVE929/KKfbNdi2XZsef7Tv7uP/+mf19i1bFm6Z2L9/76bazxVpS1ck57VtV7Y0bte6mZ/lkO6WUO+mbfrrtL5Qa1/2/BmrZ/fqYPrcYLKm7XZlxeeObbl7Q3nrt4/n7enk/toal4eh2jR5Q07NnZkFy/UGt1v/Un39FfWPkXf/3Tc+8I1/vKylf1xS+1m0XUnOdn3tyS997ouf/ff/2LvtevfvnBj++f/4kw21giV/XinXGlJvddqepPG8ckkIRa+/daH9duS+/krtt6fo9Zddz2z99vFGM/ODodzV6/WShwaeu+rRO9fnvl5PzvV6bdzY25qWKxe8XpdK/8m+vpJKczsW7/XV1FGS8anvfPKsQ498fPO5tYKi98t67Xb9+tIO8o+c7frna54auWn03/233p03vvJbX7/2hxPjf14r6P64x7Z0dNzvHApzH/dqun+rOfu33uqYdzbu37fccNPObbXyov185q5/02lB/hNPJftuPfjRiZ07J/fu62y7On0/jevJ7uVu30/j2W1NwXaVWrZr8R50sr86fb3F9m/ren81v94GQ9LV+8LB761e8eGvHj4w3LJUuqLrSmn8Ulfxf3zVieevOfyFz+fG/0yMX+kq/sQzj31q3dnXH8mNf2+Sxq92FX/86In+oVMPPZwbfyy2f3lX8Z9+x7t+8uUnH3g2N36I8Qe72/8vHLniqZGRn+XGfyJJ1zN9jRTC11+6dHttPgl96esttqOvqV0hO59k5kuZ+XLjfCmOIqQrKCdJc3msl5Zf0NCWdv44pzxehVXX1qYvx/mQfTB3+VJTajj3tysvuk4FAHi1i5//x2vQ+Pn/ZHqhlD/SALMWmoetzYkb87DZ8Zzmz1jXpvHj8nEccOQtYWx6evto7UJ/vp8jxNdDdpwzrueiNzbHKBznnJpZf8s4Z9H4+/rMfGxXbby80pCHplrzmkroYPy9dT1zj79nNr/486zRT7Y0a7Rh3Cp7/PrSEbN29ztk2luZjpDXP7LjYvF+jpGVYfPM+jrsH+XMQEE8Dtn7aOJ6zs2cOLu9jyavfwy37oemdsX+EevN0T9mmlz8eWTr8Qtz7N/Z49c+Wvb4zeN4V6frL/bnsz0YN2x7Sjt944aL+3mYccmc+OkLbKmPG8byuB2VDscTP5BT3qvxxHi6iO06OUdbTgfjicCrVcz/43vEdP4/fQH+fzP1ivKU7FVjjJd7n1C5fXuK8o7W+/QGunof33p0z6f7R05dlHud83Cn9+ntaZobKLjvp2g/bsjMF+7HnAGaonwvu56i/Z69L2MwDHW137906J6337fqritz9/vm2htp8X7/XNPcUMF+fwXkC+3jyxfObL5Qfz0s7fsYisbPFiUfWdU03z4fSW98Wqx85I9yyuebjwy0PKhv14ylm4/MvpE25SN9p7ddAMArR8z/65+fpfn//4wXFul1RFHeenFmPsbLzVtzrk/y8tY/TKe3ZOoPpr9RMd/r5vde+OAdK049cH5u3nJvp3nof2yaGy7MQxeWN+fmEZt7c794bh5Rz7MWlifmtr+eJy4sT8/5mLYhT19YHp27f+p5dPM4wOdOzGYac8WP4wC58evjAD3Mc381W+n03a9fMF6XWVmc7XS87ozk0Subt3NRPtdLf312sfLo9+eUzzePHmx5UN+uGUs3j24ul0cDAK9WMf+Pl3Ez+X9/CI9m6i30c/bcvKBH1+3ZvwdSj//EouSVs/F79Plvcd632HnrYuf1iz0usdj3i04ucl682ONCwzN/wHOxxsnO2P2uSyUvTlcqLwYAYCmL+f/ydD5+/t+a/y8sP2nJ3/pql5Cz+UmX+Xk5hHCG8vPGevLznPi9zc+XtcRfKp9b58RfOuNfi3ufzGs+/4/z6eyU/B8AgCUo5v/x1x7j3//7z+l89u/W+xw9J748fUn83aVXfp7e43G2GL/xPgDjAKf3/vjls/WNAwAAcCb0zWRKrb9n/6F0mv09+7zfy78mp36nKunl8fX7905OXntgz7aJ/ZPX7r5p2+S+a2/eu2P//sndtXoLzRtz85Y0b+wLlXR/tK+XzdtWpX8PYVXO30PI1o9hz5t50Pr3ELKrXV7wdwRmj19n7c07fqU56rfrH3nHOy/+H+fUj+rH/4Y/qYbt+67dsXvH/h0TO3ccnGyuN521DszjezOT9P+8vi8186NFaf7f3xkPz8LaUWppR1+6P/K+nz3JtGN12pLVed9/kNPu7/7Xv/zTC6d++eUQxl5XfsOC9l8yPvWfPjj5h/uP/2DPdPtLc7a/XjNtV9H3lWbrx+2p7Lxp3/43bb/pwO7sN0p2J45nlOrzizSekb78yx2OT2zNKZ/v7++XWx4sTR2PTwAA0CR+/h+vZ+Pnh59NL6Bi+Wye/p6CPH1hnx/n5uljneXp2e8lK8rTs/Xj9naap1cXmKdn11+Up7er3y5Pz8u78+L/UU79+ep8PKeL+zxi+vnVwwdy+8l1nfWT7PcZFPWTbP359pOkqJ/0h3m1t6iftKvfrp/kHfe8+O/LqZ+nqD9U6v1hYffl5PaHz3TWH34zM1/UH7L159sfSgs8b2TXX9Qf2tVv1x/yjm9e/Ktz6nequX9Md4yZfjF57c037f1oQ73F/v6L0HpLRiftWza77OJ+/0e3Ot+/i3vf18LbH8L4TEle++PnAy2/ItaT+8oW3v6i/T+P+8pWhpb7ynLb/8TCRsI6b//ifr9LRl711uVP13ht2u2K7j8rGsfdklM+33HcZS0PlibjuHDmxPw/ftwT8/+70mmvPwZ65X9P2iv0e8xO2/33C7s/vug65jX3fp79yN37OQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCrQn9l7cz0+J37Tl197h989y8mX/r4e/5p1+2/8bGv/HT0ht/7zv0DX3z52LYLtv/w98+64cGPXHn0nr995MWhb/zqmcLAwzM/Kxens9UQkueSEKrfOvlXnzj2+DnTZUkIoZwMHwphdbLmkdVJJsLYL0II2+rtbH7y6y9dun16evtd/U3lqzJBstsVBsuxPY3tDOGWwi3iFaia9rODp25+U/jR72654/vrvvYPfUeePTRbJak29KcQVl7XuHxfCGF5+n9a7G1r48LpdHMIYaBhubcWtOuNHbZ/Y878eel0WTodLIgTn1+fmS9l6mXno77MdKBgfXHHHCqqlyOvHd3WK7IiM589GS1UXjtj+ep0+s10evE845fj/ySUklCpN39nMttHQsNxS0Iycyyr9flS/diGdPsz80lmvpSZL/dltmtmvWlHKydJc3mslymPp+NKWn5B47m6jffnlL8+nVbTF+rLcT5kH9QMtjyob9eM2K6Tc7Ql9R/aF1eKl+xAqeEc1K68fuDTgzGYlg0ma1qWmWojPndsy90bylu/fXw4px3J/UkaP+kq/sHvrV7x4a8ePrA2L/51pTR+qav4P77qxPPXHP7C53PjfybGL3cV/5KHBp676tE71+fun5Nx/1S6ij/xzGOfWnf29Udy239vjF/tKv740RP9Q6ceeji3/WNx/yzvKv7T73jXT7785APP5sYPMf5AV/G3Ht3z6f6RUxflxn847p/B7vrPC0eueGpk5GejefGfiPGHuor/pUP3vP2+VXddmXt8N8f9M9xV/Pde+OAdK049cH7euTO5t1fvnACvTWel11ifTOe7zTMXqiFf+JvRSu2ab0X6f6iXK8qYXs/KRYwPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCr07/cdtmHPvjO922pJCEkOXWm2ojPlZeNj492sd6JZx771Lqzrz/SWLa2izgAAABAsZiHl+ol1bA23JwsD+e1rR/HCM6Lc0lzeXYMIcbJjhF0G6fUJk6pizjlHrWn0qM4fT2Ks6xHcfp7FKdaEKcaOouzfI44leke0GF7BuZsT+dxBnsUZ0WP4gxlQnQbZ2WP2rOqR3GGQ/OLvtt+uHrO9nQeZ02P4pzVozhn9yjO63oU59d6FOecHsXJjinPtx8OpTXPzYsz86BcGKeSlOtPtBtPPyddz/kLXM9gwXqGit6PO1zP8g7X88bMcqV5rqfa4Xp+fYHrSTpcz28ucD2lgvXEfntLtn1xPXGuw/5/a4/iHOxRnI/1KM5tPYrzZz2K8+c9ivPxBcYB6FTM/2fzveHQX/ntMJCecbKjADHfXTfzs/X9Lu+EFOO9IVO+rCheNlHPxFs33/ZlBxAy8dZnyvua4lVq+cjc8aqN8TZknpxre98x3r5tjfEuzpT3zxGvaQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DT4l9su+9AH3/m+LSEJ0//ammojPldeNj4+2sV6j225e0N567ePN5b1V7oIBAAAABSKeXhfvaQa+iubQn+yrKleNR0HqKbz5eHadGRl2Dw9TUZLM/MDyeo5l6uky23cv2vPxn23Hnzzjl0TN07eOLn7bZsu23TF2OVXXL5x+46dk2O1nyH0F8QLIcwMP+y79eBHJ3bunNy7r1aYbf/adLk4xJCky428JYxNT29P27+mYH2llvUt3oPiowcAAAAAAAAAAAAAAAAAAAAAAAAAAPx/du0uRK6zfAD4e2ZmZ6bb5t/5069paLZDmpaoVZO4lVRL94BgofkgS0Fmq2sJJsHipgltUmId24BtTVCElkCI5MJILLYWb2xri/SLQKRGA24M0hbNhV4orVbSkgtJGdnZOfO1M53tUPPl73dxzpnnfd73Oe9ZWHjODAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcGZNV0Yny2PjE8NRCFGPnGoXyVg6G8elAep+5YWtP8iNnFraGstlBlgIAAAA6Cvpw4cakXzIZdIhHa6ufVocWgZCs+8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+90xXRifLY+MTF0chRD1yql0kY+lsHJcGqHvi3ac/+/rIyN9aY8UB1gEAAAD6S/rwVCOSD8VwXRiKrp7p/BvR5N3Awo75s3lNyTqL5pnX+e6gV95188y7YZ55H+uTt7Z+3hEAAADg/Jf0/5lGpBBymQVz+uGk/+/X1yd513bkpevnUmvSB8rOJwkAAACYh6T/zzUixZDLFBv9+nz7/cUdecn8ft/bJ/Ov7zG/3/f5a+pn39MDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPljujI6WR4bn0hHIUQ9cqpdJGPpbByXBqi74qXhf6w69Mji1lguM8BCAAAAQF9JH95svfMhlxkOQ+HiWt8/ctv+Z770zHOjIYTZNj+bDTvWb9t274qZY1iR5C0/cmjo+4ff/vacvOWzx7O2QQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CMzXRmdLI+NT1wUhRD1yKl2kYyls3FcGqDum5//4l+ePP78W62x4gDrAAAAAP0lfXiz98+HYsiGbLiy9qm115+R6pjf650BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcOG475sPfGP91NTGe12cnYtqOoRz4DZcuGi/ONv/mQAAgI/atSEK1Q/pqnVn+64BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBzwXRldLI8Nj6Rj0KIeuRUu0jG0tk4Ln3Imi/mQ4hfOJpbcOqlV1rjxYF2AAAAAPST9OHN3j8fimEoDIUrap+6vROo9f+FM3iTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDllujI6WR4bn1gQhRD1yKl2kYyls3FcGqDuEzv3fe7gpd+7vTWWy9TXXDDAggAAAEBPSR+ebUTyIZf5eMiFa+qfp9onROn6uft7gea8rW3Thuc9r9I2Lz3vebs6dpap72Z2Xj5ZrzB7bswrNeel6vNKLfOKoVG+1JhXe1h72qot6HOfc588AAAAnDlJ/59rRAohl8m19P8/bcsv6HMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB6mK6OT5bHxiSgKIeqRU+0iGUtn47g0QN0Hfvv/l3z1Z7u3t8aKA6wDAAAA9Jf04c3ePx+KYVH4v7Co1veHQnt+kvfP8umDj//rr0tDWHblsZFM57I/Si5+/eatL3ceQki1Z6dCuLReL+pR7ze/f/z+JdXTT4aw7Ir0NXPqhQ+u175kXH22vHHNtsPHtvZ5OAAAAHCBSPr/oUakEHKZe3r2/0nn3af/b6g14Jfev/OXl9eP9Y68Y0aqUK+X6lHvC0ue/vP1K//+9kz/P7feJxtXn963+eDlbQVnIx2iuDq2efvaYzcdSCW7nq2f7qifPJcvf+utf2/a8djp2fr5kK/HF3bcymy1uceO8iGuTqX2Tqx+f2+lvX4udN//I7975fiLC3e/N1P/3WuHG/VvCN3qz+4807N+uCiuDt/x6J6b9x1a214/hFDqVv+d924PV/3x7oc79z/csXDrk289dj6AuHpk8ckDK/cXb2mvH3XUT57/z48/secnj333uaR+8luRpdfNt36qo/5ruy7b+epD6xa210/12P/Ld74+sqX0nT907n9D26qZnncxd/9P3fiLu95YHz/YOQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBhma6MTpbHxidSUQhRj5xqF8lYOhvHpQHqnlh19J07d//4h62x4gDrAAAAAP0lfXiz98+HYsiGbBiu9f3Pljeu2Xb42NZQmB2N6ufM1Jb7tn1i05bt92w4S3cOAAAAzNeJVVGt/880IoWQyywJQ/X+f2zz9rXHbjqQSvr/1Mw5av5UIMl7bddlO199aN3CxnuCEGo/C8hvuntq42eaebfderRw8k9fv75r3opm3pHFJw+s3F+8JckLrXnLQ+P9xFM3pu56Y338YOP+WvM+9bUtUxva73P4jkf33Lzv0NpU8h6jfh6ur5vkTaX2Tqx+f28lVQi5mfF0Pa+27rL/yp8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM5705XRyfLY+ERIhxD1yKm2qgeSsXQ2jksD1F295FcPX3Lq+UWtsVxmgIUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+A87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2K+f0DiqOA7g7+0mZptN2qQVjIppWhWlHloURPSioiKtSMFTpUi1tQdREESUejCVVixV8SJYvRRRQY1SULCxWFolFf8VLx5UUKgehFIMaELxoLK7bzab6Y7bbqqgfj6wvLw3M9/5zby3sxkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf5W+npF6e2TnQ7O3X3Dzp0/cO/P4re8/sP2yx974cWzzjZ/s63/15NSWFVu/uWnZ5gP3rZ3c89LhXwff/f1Yx+BHG82q1K2EEE/EECofTD//5NRn59XGYgihHIfGQxiOSw8Px1zCmt9CCFuadc7f+M7MVVtr7fbdffPGl+RC8tcVquWsnoah+fXy31JJ62zb7CNXhO9u2LDji+Vvv9U7cXx8bpdY26ec1lMIize1Ht8bQliUPjXZahvJDk7t+hBCf8tx13So6+LTrH91Qf/C1J6T2mqHnGz7yly/lNsv38/05tr+DudbqKI6ut2vk4FcP/8wWqhmnavbjw+n9r3UrjrD/HL2iaEUQ0+z/Pvj3BoJLfMWQ6zPZaXZLzXnNqTrz/Vjrl/K9cu9ueuqnzcttHKM88ez/XLj2eO4J42vaH1Wt3FHwfj5qa2kL+rJrB/yfzRUT/mjeV11WV3Tf1HLP6HU8gxqN96c+DQZ1TRWjUtPOeaPNrJtUxuevrS88cMjQwV1xH0x5ceu8rd9Pjxw15u7Hh4pyt9USvmlrvK/X3f05zt3vfxiYf5zWX65q/wrD/afWPfRzpWF92d67glyOvkx9bNtdx/7+Jnl594z0W6u65l7s/tf6ar+6yeP9g3OHjxUWP+a7P4s6ir/2+tu+eH1r/YfL8wPWX5/V/kbJx98tm909vLC/EONr0K1vkK7WD+/TFz99ejoT2NF+V9m93+wTX7smP/a+J5rX1mye23h+lyf3Z+hlL/ojOq/7ZIDOwZm919ULsrfe7Z+OQH+n5al/7GeSv3C98zs52Gm1PY9c6Fa3hdeGOtp/AINpM/g2TxRTu08i//GfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4E924IAEAAAAQND/1+0IFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4KAAD///7eJCk=")
mkdir(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x24)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000180)=""/82, 0x52)

17.382002613s ago: executing program 5 (id=2587):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
eventfd(0xfffffff9)
r0 = syz_open_procfs(0x0, &(0x7f0000000440)='fdinfo/4\x00')
read$FUSE(r0, &(0x7f0000006140)={0x2020}, 0x2020)

16.64822352s ago: executing program 33 (id=2587):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
eventfd(0xfffffff9)
r0 = syz_open_procfs(0x0, &(0x7f0000000440)='fdinfo/4\x00')
read$FUSE(r0, &(0x7f0000006140)={0x2020}, 0x2020)

7.058388351s ago: executing program 6 (id=2663):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x2}, 0x8)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x0, 0x9}, 0x8)

6.787633766s ago: executing program 6 (id=2666):
r0 = socket(0x1, 0x2, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0xc0, &(0x7f0000000180)=0xff, 0x0, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20)

6.509802615s ago: executing program 6 (id=2669):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
nanosleep(&(0x7f0000000540), &(0x7f0000000580))

6.085751026s ago: executing program 6 (id=2673):
socket$kcm(0x2, 0xa, 0x2)
socket$kcm(0x2, 0xa, 0x2)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1, 0x36, 0x0)

5.468370253s ago: executing program 6 (id=2679):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0xffffffff)

4.743642357s ago: executing program 4 (id=2687):
r0 = epoll_create1(0x0)
r1 = signalfd(0xffffffffffffffff, &(0x7f0000000180), 0x8)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
signalfd(r1, &(0x7f0000000040), 0x8)

4.384671s ago: executing program 4 (id=2692):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x8202, 0x0)
mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8000000000000000)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2)

4.322054123s ago: executing program 1 (id=2693):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x7)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0x6}]})
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x0, 0x0})

4.107288081s ago: executing program 4 (id=2695):
syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="66696c655f756d61736b3d30303030303030303030303030303030303030303030342c747970653d7763e6ef2c756d61736b3d30303030303030303030303030303030303030303030342c6469725f756d61736b3d30303030303030303030303030303030303030303030352c696f636861727365743d69736f383835392d382c004b35b28f8cad0b105adbf86df7514b180ea1cef9ef09ba2a82127ea3050d7fd500ad048b959efdb75029d8f93d07be1c27524bb0fe77621219a4745cac5531636761ca83f2412d1f607e9002fb41024932205e2176fc5b326c9542"], 0x1, 0x304, &(0x7f0000000280)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
lseek(r0, 0x1, 0x0)
getdents(r0, 0x0, 0x58)

3.829255454s ago: executing program 1 (id=2697):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10)
r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f00000001c0), 0x100, 0x0)
read$FUSE(r1, &(0x7f0000003d40)={0x2020}, 0x2020)

3.828821827s ago: executing program 4 (id=2698):
syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x21445a, &(0x7f00000001c0)=ANY=[], 0x1, 0x1c4, &(0x7f00000003c0)="$eJzs209u00AUx/Gf4xAn5V+hwAIhtRISsGrTAJXY0aOE1lQoBiRg04pF6QU4A+diwwHIArFBXTBo/CcFuzahYI9Rvp+F7fq9Gb+RNfU4UQRgYT3Wmjx56tg/bvWX3694Fdnd5goDUDuT7r+bOX30pHlzAbSc/y3Zr7kuBEDDptsa2Of/5y9vd+T3ZuuC7Gi6LR1m8U5QWD9M30k3u1L81uD1k85+Xl98kO5m7b2lfPOv9szSLH4+F+7F/d+7nV3/gi7qki5rWVd0VSvp9Xdn7W/86fKnOCAAABaAp/XfxUsSzsXbgZ4+i8Kh/GLCkwdxlo1vlvbfi+Ojyri/Wl5fELdf33kZ7VYNA8ApOmee/wnfzr+jYUVG9fwH4M7r/YPJOIrCVy046P9ajwmk05IlfTKr0l9eNGjDkP/fg0D5M93JODLpBypz9WPvdyE0KG11pP1jY0wuZDupf8jH5t92eJg/Y1fTzu/pwcQ/KcP1fyYAddt4cyf9JuD5eC/cC1+MhsNHWw/vb26NNuI3+2TrukwANTh5+ruuBAAAAAAAAAAAAAAAnNU1XXddAgAAAICGNPG7ItdjBACgdX4EAAD//5qhEmQ=")
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x1208000, 0x0, 0x4, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c})

3.771157966s ago: executing program 3 (id=2699):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./mnt\x00', 0x840, &(0x7f0000000080), 0x1, 0x241, &(0x7f0000000540)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000040), 0xfea0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x100)

3.549098668s ago: executing program 1 (id=2702):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
memfd_secret(0x0)

2.975599676s ago: executing program 4 (id=2705):
syz_mount_image$bfs(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="004a5ee0571b8b8ed0f6a48d325fba60ad6f06000000000000007c070002000000000021b507dcf20b43396d320c73fa0435a17ef90d9e367a72143ad49101519c27821d8fb92ae6ac27790cf4b0e5ba4f28f0717d21815a8c028cd891adb9ed510bc262d300000000000046d3817e28effc50f2bcd60c4d947d5e38e19ad1850bfeef8025459fcbf2f16438c2624c0c3a1323988be1f74e65c5098522bae8e8ba957ad8774e4e665c9a4ad49144e3f9ebfe06eff9b8edc7440e932e133e228e344bd22a3ac2e2d3a9f006a3aef51a7aec57bbf2c360e284b902ade529a9140c889a18f357d7a424f96ca02d9b917784e84246cfcd5ff450a276bd4c8b77aae199342dc8ade5b0d1f9f54dd440ae3736fb92ba0e088ab18dd6a79e96e5cf2f97f41a90c175ee9590a2033a6a1a64c3"], 0x1, 0x9e, &(0x7f00000006c0)="$eJzszr2JAkEABeB3Gxx7yTZwwXVwNWgRVmBoaKQI2pCtWIKpkYGpyYjsCrKggYE/8H0wDG8eA29zXP+mScoyKaWs0ipn09l88p3b7nV8hqq76yR/TZv3w2SQ5Kvrt4fF+HJ630f1CzYDAACPqfLfz1cPu5/nLwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4L6cAAAD//6LYGgE=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0xffffffff)

2.661324936s ago: executing program 1 (id=2706):
r0 = fsopen(&(0x7f0000000000)='nfsd\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

2.52001187s ago: executing program 3 (id=2708):
r0 = socket$inet(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x580, @empty}, 0x10)
syz_emit_ethernet(0x32, &(0x7f00000001c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0)

2.285021114s ago: executing program 1 (id=2709):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzJ6vZpMl2P9ImafoxSQQXLcumT9X6ENeqjabNh7bVVFlnN9vN6uzMujujBYPUIIiCoARBxQ+qQulLLYiBvtQiFPxAWoVSUbS+iBSq4INBG+jKzNybnXtntneyk7S0/f2gnb3n3nPumf3vPXfOPZNCrHZqYaW4sFIsVYrV2ftXbil+rlquL86FwqvktT4/vbkSOcn+tXPkfR/4yD23hPCHY1/70Orq6mpoGA5dHWj7+fy/T8+2vyYKmTqNdru31vLH+iMv/fwtr3REnhMhhB0d/WrYFEL42C9C2BxCGInLRuPXLSGEbSGEKITw6G/+9ePBfrrQ5uy9Lzx37MzhfWemHn/smQvzR9c9MArhu+XdN88vvrh/023Pv+MynR4AAF7RB48fufvo5IHwZBSGzg10fl7fGb8mn4/vfNun7np4YG3/Kr3Z9CqGCgAAABlr8//h6OUu63XJylqyJPjEAyfufipa229i+/p26K4jt79/8kC8/ht17L81Lvrnezc111Cz677Z9d+RTP3u679r53n4q8/+svLWjfc/6V9y3uEQFSZS24XCxEQIx6Za27uirYVydaX2zvur9crJjZ/3jSKdf3b1fm1Bv9f8RzPV89b/d3/i8z/bMtDPOxgL2b/axnax80+ZLtL5rz+W/+RLUU/5j2Xq5eV/x9Pbz/9qcz/vIHtGLkU6/9aFuK/9gGJrAGjk/82B/Px3ZNrPy//7U+cePbGB7/80xpnhqNHXwdQI8HJcvs5XmMhI598KIjV0xr/I9a7//2XyvybTfl7+d1b/8bu/9XH/X2/8H5/qp803j3T+rSCKqSPWrv+RQv71f22m/bz8f3vqz89+sq97dWf+jf6Pu//3JJ1/fCNOD57N32Sv4//OTPt5+e8au++hhQ30+8Nb4n4ORWGs7Vun5xq3sKG19ermlKaxe2kDJ3kTSOff+q2lLp2h1kvz+h/OH/93ZdrPy/+hPV9/z+m+vv/bffyfNP73JJ3/lmbZpeT/Uib/3Zn28/L/4em//+W+yzz+N7YPyr8n6fy3duxfe/5T6Gn+d12mft7zn32jTz3y1z7m/0n/kvMmz3+S5xDjUev5D92l879q3eN6vf/vydTLu/6/9Z/nn97fz/gfDXoC0Id0/ttahV0mgL3mf32m/bz8v3DPlz/+pw3M/5qf+AaT/Nvm/5tb5UeN/z1J57+9VZj6x1APNv/fvP9Hnbn/N5P/DZn28/K/cGhi4CuX+f7f6P94l0fZdErnP7TucY38f9/D/f/GTL28/L+496cv3tzX5/8QJs31Nyyd/9XrHte8/gfz878pUy8v/+9849dPPNhH/9/eR12y+bfu9anLKf5s3uv8v5hpPy//H42fP7v/Csz/bnX/70k6/9aq+aXkn53/7820n5f/9478YHngCjz/uUP+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzIavw6HqDCR2i4UJiZCGIu3d4Wt0Uzp5PRMuTr7mZUQdsTlxTAazZerM6Xy9EKlenJuulQuV2dDuCbevyMMRivlam16sbR07cW2tkSn5krLtZm5Ui2EsDMuvz5sT9qaWagtlpaaxyZ1ropKn61Xa6WJ+srccth9sXxbUj6/XK0vXXexrasL1eWlU6XK9MmF5XdPTk5Ohj0X+zwSzT1Qm6vUWr1t7W3USeoOR21vprn7hrbzfbpaX66Uys3yG9vqlKuzpXJbnZvazldbrldmS7W56XJ1Pjlfsa1u23tr7t4b7xsPI6n3l9TNOhi/3n7o+EePHz7Qsb8YpfOu1BfnJrd3/5sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I3rydve9e0QwkBrqxBCOJj8EMX/pZy994Xnjp05vO/M1OOPPXNh/mi3YwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYuZ+XKro4DsBnxve+FkgpbYRcBoaI6E7Cgn4RSeU1smWb1kGtEjIoCgwjWhYEQVC7qCBoFVT+BVELl62qTS1aGERQMTqTlzvCDS90zHkeGM4Mc++ZLwzcO3M+hwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+nN2x2JW1l3ZtXtq6+0PozM/9H0IYTZb3P+/tCD0hhK9fZk6HVdpCT1P/bybnxstXTX7v7R9/eH00WXv9xXeL63aHJB1qON6ZpOnQ0Nr736juDD6bHkxCSGMXQhQLY0/O1EIIHbELIYqfH+cvZr/v/8UuhCj6P9ztyu5/LXYhRLF196e+Wv6MR/Wcr18YbPzvb/UI3sYjOuvQ25NX3qVuauW9zN//k3zzPlgNsyeOvH8euwiimZ2bOhq7BgAA4O861yL/D1uW9+9fTkJPdzn3/9aU//c29b96/r/i3vYbYzNthRDbSmOT2fHwvnb63PhODVy9/bpmvKeq5P/VJv+vNvl/tcn/q03+X23yfzKv5P+V9PjmnsUXsYsgGvk/AABUz6HjE1P14ZHs5X/Tj85yXt+Xt/U8T39wa3rgUcO4kfzw33b42MSBg8Mj+X0vDwiurP+QLp39ns/3aG4Lk03zLlqt/9D7dGH+Wmf5E/U/nL9R1Fdc1/oPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAvdueehkEwCsPod1sRtdGqaMLCT4IPNDAiACnMaEAHEwZgIAQUMJBzlnuTZ3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5/tXeV18f2mM9Foj0lR22bV/jqfZz9y3w/I+e9y4FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZ24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//8Oayzs=")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x4, 0x2, 0xffff, 0x3, 0x1, 0x6, 0x0, 0x36a, 0x1020003f})
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
rmdir(&(0x7f0000000040)='./control\x00')

1.986354448s ago: executing program 4 (id=2710):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file1\x00', 0x84, &(0x7f0000000000)=ANY=[], 0xf9, 0x606c, &(0x7f00000084c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0x0)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0)

1.907906099s ago: executing program 6 (id=2711):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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")
openat(0xffffffffffffff9c, 0x0, 0x121500, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000200)={0x5, 0x10000002000003, 0x3})

1.858140686s ago: executing program 0 (id=2712):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x4, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0)

1.717582571s ago: executing program 3 (id=2713):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="140000"], 0x18}, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4)
recvfrom(r1, 0x0, 0x0, 0x2000, 0x0, 0x0)

1.70207395s ago: executing program 0 (id=2714):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000001540)='./bus\x00', 0x8000, &(0x7f0000000400)=ANY=[], 0x1, 0x1502, &(0x7f0000003fc0)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
getdents(r0, &(0x7f0000000140)=""/187, 0xbb)

1.463506069s ago: executing program 0 (id=2715):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x4, 0x0, 0x0)

1.36169221s ago: executing program 3 (id=2716):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0)
io_setup(0x5, &(0x7f0000000540)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
io_submit(r0, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r1, 0x0}])

1.040128202s ago: executing program 3 (id=2717):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
unshare(0x6020480)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)

779.387555ms ago: executing program 3 (id=2718):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"])

457.734428ms ago: executing program 0 (id=2719):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

339.890014ms ago: executing program 0 (id=2720):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000100)={[{@quota}, {@bsdgroups}, {@nobh}, {@nodelalloc}, {@abort}]}, 0x4, 0x756, &(0x7f00000002c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4")
chdir(&(0x7f0000000240)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000240)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

265.338369ms ago: executing program 1 (id=2721):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040)={0x0, 0xb}, 0x2)

0s ago: executing program 0 (id=2722):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x1000200, 0x0, 0x6, 0xf9ff, 0xff, "42e23ae179d88f00000000000000000400", 0x4, 0x9})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x4)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x3)

kernel console output (not intermixed with test programs):

ializing freespace
[  371.362527][T15085] bcachefs (loop1): reading snapshots table
[  371.368649][T15085] bcachefs (loop1): reading snapshots done
[  371.411083][T15085] bcachefs (loop1): done starting filesystem
[  371.433096][T15007] BTRFS info (device loop5): rebuilding free space tree
[  371.463420][T15127] loop4: detected capacity change from 0 to 4096
[  371.472302][T15127] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  371.504457][T15085] bcachefs (loop1): going read-only
[  371.509702][T15085] bcachefs (loop1): finished waiting for writes to stop
[  371.516901][   T13] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[  371.543287][ T5832] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  371.556787][T15085] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[  371.695389][ T5831] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  371.707174][T15085] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 6
[  371.771606][T15085] bcachefs (loop1): clean shutdown complete, journal seq 7
[  371.780081][T15085] bcachefs (loop1): marking filesystem clean
[  371.888618][ T6447] bcachefs (loop1): shutting down
[  372.128957][T15157] loop0: detected capacity change from 0 to 16
[  372.133542][T15157] erofs (device loop0): mounted with root inode @ nid 36.
[  372.141483][T15157] overlayfs: failed to get redirect (-117)
[  372.173532][ T6447] bcachefs (loop1): shutdown complete
[  372.762241][T15178] loop3: detected capacity change from 0 to 16
[  372.831171][T15178] erofs (device loop3): mounted with root inode @ nid 36.
[  372.839872][T15179] bond0: entered promiscuous mode
[  372.845839][T15179] bond_slave_0: entered promiscuous mode
[  372.872807][T15179] bond_slave_1: entered promiscuous mode
[  372.884065][T15179] batadv0: entered promiscuous mode
[  372.891360][T15178] overlayfs: failed to get redirect (-117)
[  372.916015][T15179] 8021q: adding VLAN 0 to HW filter on device hsr1
[  373.317511][T15174] loop5: detected capacity change from 0 to 32768
[  373.330857][T15174] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2131 (15174)
[  373.357173][T15174] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  373.377216][T15174] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm
[  373.388777][T15174] BTRFS info (device loop5): using free-space-tree
[  373.559944][T15179] bond0: left promiscuous mode
[  373.569707][T15179] bond_slave_0: left promiscuous mode
[  373.575433][T15179] bond_slave_1: left promiscuous mode
[  373.595041][T15179] batadv0: left promiscuous mode
[  373.612825][T15174] BTRFS info (device loop5): rebuilding free space tree
[  373.989149][ T5831] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  374.014510][T15214] bridge0: port 2(bridge_slave_1) entered disabled state
[  374.106307][ T5959] kernel write not supported for file /amidi2 (pid: 5959 comm: kworker/1:5)
[  374.210619][T15214] bridge_slave_1 (unregistering): left allmulticast mode
[  374.235644][T15214] bridge_slave_1 (unregistering): left promiscuous mode
[  374.261126][T15214] bridge0: port 2(bridge_slave_1) entered disabled state
[  374.709662][T15217] loop6: detected capacity change from 0 to 32768
[  374.760073][T15217] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2144 (15217)
[  374.791560][T15217] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  374.801871][T15217] BTRFS info (device loop6): using sha256 (sha256-x86_64) checksum algorithm
[  374.811047][T15217] BTRFS info (device loop6): using free-space-tree
[  374.848533][T15217] BTRFS info (device loop6): rebuilding free space tree
[  374.960478][  T984] BTRFS info (device loop6): qgroup scan completed (inconsistency flag cleared)
[  375.222014][T15255] tracefs: Invalid gid '00000000000037777777777'
[  375.276911][ T8997] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  375.732461][T15262] loop5: detected capacity change from 0 to 4096
[  375.788253][T15262] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  375.953098][T15275] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2
[  376.006484][   T13] Bluetooth: hci5: Frame reassembly failed (-84)
[  376.244776][T15271] loop0: detected capacity change from 0 to 32768
[  376.259456][T15271] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2158 (15271)
[  376.289700][T15271] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  376.303925][T15271] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm
[  376.316118][T15271] BTRFS info (device loop0): using free-space-tree
[  376.632214][T15288] loop6: detected capacity change from 0 to 32768
[  376.669744][T15271] BTRFS info (device loop0): rebuilding free space tree
[  376.735254][T15288] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  376.735307][T15288]   allowing incompatible features above 0.0: (unknown version)
[  376.735330][T15288]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  376.761580][T15318] bridge0: port 2(bridge_slave_1) entered disabled state
[  376.767602][T15288] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0
[  376.797980][T15288] bcachefs (loop6): initializing new filesystem
[  376.812666][T15288] bcachefs (loop6): going read-write
[  376.861224][T15288] bcachefs (loop6): marking superblocks
[  376.877182][T15288] bcachefs (loop6): initializing freespace
[  376.888320][T15288] bcachefs (loop6): done initializing freespace
[  376.899481][T15288] bcachefs (loop6): reading snapshots table
[  376.905501][T15288] bcachefs (loop6): reading snapshots done
[  376.952258][ T5832] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  376.972026][T15288] bcachefs (loop6): done starting filesystem
[  376.982233][T15318] bridge_slave_1 (unregistering): left allmulticast mode
[  376.990189][   T24] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  376.999212][T15318] bridge_slave_1 (unregistering): left promiscuous mode
[  377.007253][T15318] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.116775][T15288] bcachefs (loop6): going read-only
[  377.124970][T15288] bcachefs (loop6): finished waiting for writes to stop
[  377.140560][T15288] bcachefs (loop6): flushing journal and stopping allocators, journal seq 3
[  377.153830][   T24] usb 6-1: Using ep0 maxpacket: 16
[  377.183228][   T24] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  377.225105][   T24] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  377.235101][   T24] usb 6-1: Product: syz
[  377.239293][   T24] usb 6-1: Manufacturer: syz
[  377.262399][T15288] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 6
[  377.275010][T15288] bcachefs (loop6): clean shutdown complete, journal seq 7
[  377.283155][T15288] bcachefs (loop6): marking filesystem clean
[  377.343989][   T24] usb 6-1: SerialNumber: syz
[  377.364760][   T24] usb 6-1: config 0 descriptor??
[  377.430703][ T8997] bcachefs (loop6): shutting down
[  377.560255][ T8997] bcachefs (loop6): shutdown complete
[  377.644688][   T24] usb 6-1: USB disconnect, device number 23
[  377.752194][T15354] loop1: detected capacity change from 0 to 8192
[  377.762846][T15354] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  378.013911][ T5841] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  378.390781][T15381] loop3: detected capacity change from 0 to 512
[  378.546364][T15381] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  378.621386][T15374] loop0: detected capacity change from 0 to 32768
[  378.668591][T15374] JBD2: Ignoring recovery information on journal
[  378.721122][T15381] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #16: comm syz.3.2173: invalid indirect mapped block 83886080 (level 1)
[  378.772445][T15374] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  378.793903][T15381] EXT4-fs (loop3): Remounting filesystem read-only
[  378.800999][T15381] EXT4-fs (loop3): 1 orphan inode deleted
[  378.814403][T15381] EXT4-fs (loop3): 1 truncate cleaned up
[  378.822032][T15381] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  378.876749][T15381] EXT4-fs (loop3): shut down requested (2)
[  378.941158][ T5832] ocfs2: Unmounting device (7,0) on (node local)
[  379.093438][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  379.681680][T15414] loop0: detected capacity change from 0 to 32768
[  379.727776][T15426] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.759819][T15426] bridge_slave_1 (unregistering): left allmulticast mode
[  379.767921][T15426] bridge_slave_1 (unregistering): left promiscuous mode
[  379.775927][T15426] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.789477][T15414] XFS (loop0): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  379.882768][T15435] loop3: detected capacity change from 0 to 1024
[  380.006633][T15414] XFS (loop0): Ending clean mount
[  380.015293][T15435] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  380.084824][T15414] XFS (loop0): Metadata CRC error detected at xfs_inobt_read_verify+0x26/0xe0, xfs_finobt block 0x20 
[  380.096750][T15414] XFS (loop0): Unmount and run xfs_repair
[  380.102508][T15414] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  380.114650][T15414] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[  380.123622][T15414] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40  ....... .......@
[  380.175406][T15414] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a  ...B..N....xv...
[  380.190658][T15414] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37  .......F......@7
[  380.204647][T15414] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  380.213598][T15414] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00  ................
[  380.222684][T15414] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  380.234801][T15414] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  380.247223][T15414] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x23f/0x4f0" at daddr 0x20 len 8 error 74
[  380.266812][T15414] XFS (loop0): Failed to initialize disk quotas, err -117.
[  380.295432][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  380.364392][ T5832] XFS (loop0): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  380.373710][ T5832] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair.
[  380.374324][ T5961] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  380.613818][ T5961] usb 6-1: Using ep0 maxpacket: 8
[  380.647903][ T5961] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  380.667836][ T5961] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  380.688004][ T5961] usb 6-1: config 0 interface 0 has no altsetting 0
[  380.738935][ T5961] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  380.755935][ T5961] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  380.779692][ T5961] usb 6-1: config 0 descriptor??
[  380.816352][T15420] loop4: detected capacity change from 0 to 32768
[  380.828516][T15420] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2180 (15420)
[  380.848686][T15420] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  380.859673][T15420] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm
[  380.868553][T15420] BTRFS info (device loop4): using free-space-tree
[  380.910835][T15420] BTRFS info (device loop4): rebuilding free space tree
[  381.102860][ T5830] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  381.211621][ T5961] steelseries 0003:1038:1410.001A: unknown main item tag 0x0
[  381.234109][ T5961] steelseries 0003:1038:1410.001A: unknown main item tag 0x0
[  381.264853][ T5961] steelseries 0003:1038:1410.001A: not enough fields in HID_OUTPUT_REPORT 0
[  381.416058][ T5961] usb 6-1: USB disconnect, device number 24
[  381.417869][T15492] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  381.900589][   T30] audit: type=1326 audit(1751464098.127:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15514 comm="syz.0.2196" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f93b4f8e929 code=0x0
[  382.044687][T15517] sp0: Synchronizing with TNC
[  382.244825][ T5836] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  382.416706][ T5836] usb 7-1: Using ep0 maxpacket: 16
[  382.435117][ T5836] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  382.463963][ T5836] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  382.484690][ T5836] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  382.503612][ T5836] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  382.514603][ T5836] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  382.530376][ T5836] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  382.539952][ T5836] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  382.571952][ T5836] usb 7-1: Manufacturer: syz
[  382.590405][ T5836] usb 7-1: config 0 descriptor??
[  383.003943][ T5836] rc_core: IR keymap rc-hauppauge not found
[  383.012204][ T5836] Registered IR keymap rc-empty
[  383.028705][ T5836] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  383.071573][ T5836] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  383.096275][ T5836] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  383.128491][ T5836] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input38
[  383.160637][ T5836] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  383.183977][ T5836] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  383.204789][ T5836] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  383.234727][ T5836] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  383.284001][ T5836] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  383.324739][ T5836] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  383.362737][ T5836] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  383.417245][ T5836] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  383.466538][ T5836] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  383.513869][ T5836] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  383.556387][ T5836] mceusb 7-1:0.0: Registered  with mce emulator interface version 1
[  383.580139][ T5836] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  383.590941][T15547] loop1: detected capacity change from 0 to 32768
[  383.602619][ T5836] usb 7-1: USB disconnect, device number 11
[  383.646734][T15547] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  383.748360][T15547] XFS (loop1): Ending clean mount
[  383.772539][T15547] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0x26/0xe0, xfs_finobt block 0x20 
[  383.793690][T15547] XFS (loop1): Unmount and run xfs_repair
[  383.799594][T15547] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  383.812549][T15547] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[  383.825902][T15547] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40  ....... .......@
[  383.835321][T15547] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a  ...B..N....xv...
[  383.844376][T15547] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37  .......F......@7
[  383.853325][T15547] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  383.868412][T15547] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00  ................
[  383.877469][T15547] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  383.892844][T15547] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  383.903338][T15547] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x23f/0x4f0" at daddr 0x20 len 8 error 74
[  383.920784][T15547] XFS (loop1): Failed to initialize disk quotas, err -117.
[  383.990464][T15563] loop3: detected capacity change from 0 to 32768
[  384.051726][T15563] 
[  384.051726][T15563]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  384.051726][T15563] 
[  384.074324][ T6447] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  384.093936][T15563] 
[  384.093936][T15563]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  384.093936][T15563] 
[  384.105790][ T6447] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair.
[  384.134642][T15563] 
[  384.134642][T15563]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  384.134642][T15563] 
[  384.180366][T15563] 
[  384.180366][T15563]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  384.180366][T15563] 
[  384.211168][T15595] loop4: detected capacity change from 0 to 512
[  384.282137][T15563] JFS: metapage_get_blocks failed
[  384.355943][T15563] 
[  384.355943][T15563]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  384.355943][T15563] 
[  384.393279][T15595] EXT4-fs error (device loop4): ext4_iget_extra_inode:5034: inode #15: comm syz.4.2206: corrupted in-inode xattr: invalid ea_ino
[  384.415001][T15563] 
[  384.415001][T15563]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  384.415001][T15563] 
[  384.494696][T15563] 
[  384.494696][T15563]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  384.494696][T15563] 
[  384.533476][T15595] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2206: couldn't read orphan inode 15 (err -117)
[  384.571389][T15596] ERROR: (device loop3): diWrite: ixpxd invalid
[  384.571389][T15596] 
[  384.594643][T15563] 
[  384.594643][T15563]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  384.594643][T15563] 
[  384.672844][T15595] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  384.683537][T15563] 
[  384.683537][T15563]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  384.683537][T15563] 
[  384.728599][T15596] ERROR: (device loop3): txAbort: 
[  384.728599][T15596] 
[  384.776351][T15596] 
[  384.776351][T15596]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  384.776351][T15596] 
[  384.855812][T15563] 
[  384.855812][T15563]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  384.855812][T15563] 
[  384.904240][T15596] ERROR: (device loop3): diFree: invalid inoext
[  384.904240][T15596] 
[  384.979626][T15563] 
[  384.979626][T15563]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  384.979626][T15563] 
[  384.979884][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  385.024001][T15563] 
[  385.024001][T15563]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  385.024001][T15563] 
[  385.160000][T15563] 
[  385.160000][T15563]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  385.160000][T15563] 
[  385.261696][T15612] loop6: detected capacity change from 0 to 4096
[  385.302806][T15563] 
[  385.302806][T15563]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  385.302806][T15563] 
[  385.494770][T15614] loop0: detected capacity change from 0 to 32768
[  385.572914][T15614] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  385.582932][  T984] ERROR: (device loop3): diWrite: ixpxd invalid
[  385.582932][  T984] 
[  385.612074][  T984] ERROR: (device loop3): txAbort: 
[  385.612074][  T984] 
[  385.650917][T15614] XFS (loop0): Ending clean mount
[  385.661682][T15614] XFS (loop0): Quotacheck needed: Please wait.
[  385.668063][  T984] jfs_write_inode: jfs_commit_inode failed!
[  385.676705][ T5828] 
[  385.676705][ T5828]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  385.676705][ T5828] 
[  385.753551][ T5828] 
[  385.753551][ T5828]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  385.753551][ T5828] 
[  385.808362][T15614] XFS (loop0): Quotacheck: Done.
[  385.956176][ T5832] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  386.522012][T15659] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  386.730544][T15623] loop1: detected capacity change from 0 to 32768
[  386.784859][T15623] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2204 (15623)
[  386.813406][T15623] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  386.866891][T15623] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm
[  386.900619][T15623] BTRFS info (device loop1): using free-space-tree
[  387.094110][T15623] BTRFS info (device loop1): rebuilding free space tree
[  387.147281][T15646] loop5: detected capacity change from 0 to 32768
[  387.204936][T15646] XFS (loop5): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  387.269179][T15646] XFS (loop5): Ending clean mount
[  387.279895][T15646] XFS (loop5): Metadata CRC error detected at xfs_inobt_read_verify+0x26/0xe0, xfs_finobt block 0x20 
[  387.301878][T15646] XFS (loop5): Unmount and run xfs_repair
[  387.310244][T15646] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  387.341227][T15646] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[  387.379901][T15646] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40  ....... .......@
[  387.394290][T15646] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a  ...B..N....xv...
[  387.429786][T15646] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37  .......F......@7
[  387.499804][T15646] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  387.525681][ T6447] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  387.553957][T15646] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00  ................
[  387.609563][T15646] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  387.684444][T15646] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  387.693404][T15646] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x23f/0x4f0" at daddr 0x20 len 8 error 74
[  387.764851][T15646] XFS (loop5): Failed to initialize disk quotas, err -117.
[  387.947553][ T5959] hid-generic 0005:16C0:05DF.001B: item fetching failed at offset 0/1
[  388.017488][ T5959] hid-generic 0005:16C0:05DF.001B: probe with driver hid-generic failed with error -22
[  388.180110][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  388.189867][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  388.207279][ T5831] XFS (loop5): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  388.255843][T15723] gretap0: entered promiscuous mode
[  388.258465][ T5831] XFS (loop5): Uncorrected metadata errors detected; please run xfs_repair.
[  388.261186][T15723] vlan2: entered promiscuous mode
[  388.510204][T15705] loop6: detected capacity change from 0 to 32768
[  388.555236][T15705] 
[  388.555236][T15705]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  388.555236][T15705] 
[  388.656288][T15705] 
[  388.656288][T15705]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  388.656288][T15705] 
[  388.705185][T15705] JFS: metapage_get_blocks failed
[  388.722136][T15738] ERROR: (device loop6): diWrite: ixpxd invalid
[  388.722136][T15738] 
[  388.734910][T15705] 
[  388.734910][T15705]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  388.734910][T15705] 
[  388.770290][T15738] ERROR: (device loop6): txAbort: 
[  388.770290][T15738] 
[  388.813067][T15705] 
[  388.813067][T15705]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  388.813067][T15705] 
[  388.829211][T15738] ERROR: (device loop6): diFree: invalid inoext
[  388.829211][T15738] 
[  388.862522][T15705] 
[  388.862522][T15705]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  388.862522][T15705] 
[  388.908428][T15705] 
[  388.908428][T15705]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  388.908428][T15705] 
[  388.955517][T15705] 
[  388.955517][T15705]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  388.955517][T15705] 
[  389.014346][T15705] 
[  389.014346][T15705]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  389.014346][T15705] 
[  389.145265][T15705] 
[  389.145265][T15705]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  389.145265][T15705] 
[  389.218489][  T109] 
[  389.218489][  T109]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  389.218489][  T109] 
[  389.291838][T15705] 
[  389.291838][T15705]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  389.291838][T15705] 
[  389.346523][T15705] 
[  389.346523][T15705]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  389.346523][T15705] 
[  389.384730][T15705] 
[  389.384730][T15705]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  389.384730][T15705] 
[  389.397326][T15705] 
[  389.397326][T15705]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  389.397326][T15705] 
[  389.443274][T15705] 
[  389.443274][T15705]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  389.443274][T15705] 
[  389.839055][   T36] ERROR: (device loop6): diWrite: ixpxd invalid
[  389.839055][   T36] 
[  389.852299][   T36] ERROR: (device loop6): txAbort: 
[  389.852299][   T36] 
[  389.871801][   T36] jfs_write_inode: jfs_commit_inode failed!
[  389.905049][ T8997] 
[  389.905049][ T8997]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  389.905049][ T8997] 
[  389.935784][ T8997] 
[  389.935784][ T8997]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  389.935784][ T8997] 
[  389.955667][T15733] loop4: detected capacity change from 0 to 40427
[  389.967753][T15733] F2FS-fs (loop4): invalid crc value
[  390.231537][T15733] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  390.467582][ T5830] syz-executor: attempt to access beyond end of device
[  390.467582][ T5830] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  390.497163][ T5830] CPU: 1 UID: 0 PID: 5830 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) 
[  390.497216][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  390.497241][ T5830] Call Trace:
[  390.497253][ T5830]  <TASK>
[  390.497268][ T5830]  dump_stack_lvl+0x16c/0x1f0
[  390.497334][ T5830]  f2fs_handle_critical_error+0x621/0x9f0
[  390.497384][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  390.497430][ T5830]  ? f2fs_build_fault_attr+0x53/0x1f0
[  390.497481][ T5830]  f2fs_write_end_io+0x785/0xc20
[  390.497536][ T5830]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  390.497593][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  390.497651][ T5830]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  390.497700][ T5830]  bio_endio+0x70d/0x850
[  390.497769][ T5830]  submit_bio_noacct+0x56d/0x1eb0
[  390.497831][ T5830]  __submit_merged_bio+0x33c/0x770
[  390.497890][ T5830]  __submit_merged_write_cond+0x319/0x3f0
[  390.497956][ T5830]  f2fs_write_cache_pages+0x2067/0x2570
[  390.498048][ T5830]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  390.498111][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  390.498160][ T5830]  ? exit_to_user_mode_loop+0xeb/0x110
[  390.498210][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  390.498255][ T5830]  ? __lock_acquire+0xb8a/0x1c90
[  390.498344][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  390.498466][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  390.498511][ T5830]  ? _raw_spin_unlock+0x28/0x50
[  390.498561][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  390.498626][ T5830]  ? free_unref_folios+0x1195/0x1800
[  390.498674][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  390.498730][ T5830]  f2fs_write_data_pages+0x4ad/0xd90
[  390.498800][ T5830]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  390.498855][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  390.498916][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  390.498968][ T5830]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  390.499031][ T5830]  do_writepages+0x27a/0x600
[  390.499106][ T5830]  ? __pfx_do_writepages+0x10/0x10
[  390.499164][ T5830]  ? do_raw_spin_unlock+0x172/0x230
[  390.499206][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  390.499252][ T5830]  ? _raw_spin_unlock+0x28/0x50
[  390.499310][ T5830]  filemap_fdatawrite_wbc+0x104/0x160
[  390.499378][ T5830]  __filemap_fdatawrite_range+0xb2/0xf0
[  390.499426][ T5830]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[  390.499540][ T5830]  ? find_held_lock+0x2b/0x80
[  390.499589][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  390.499637][ T5830]  ? do_raw_spin_unlock+0x172/0x230
[  390.499679][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  390.499734][ T5830]  f2fs_sync_dirty_inodes+0x2a9/0x990
[  390.499820][ T5830]  block_operations+0x2a3/0xfd0
[  390.499885][ T5830]  ? __pfx___schedule+0x10/0x10
[  390.499944][ T5830]  ? __pfx_block_operations+0x10/0x10
[  390.500069][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  390.500119][ T5830]  ? down_write+0x14d/0x200
[  390.500157][ T5830]  ? __pfx_down_write+0x10/0x10
[  390.500198][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  390.500244][ T5830]  ? rcu_is_watching+0x12/0xc0
[  390.500298][ T5830]  f2fs_write_checkpoint+0x2b8/0x4c60
[  390.500368][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  390.500414][ T5830]  ? kfree+0x2b4/0x4d0
[  390.500471][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  390.500522][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  390.500568][ T5830]  ? rcu_is_watching+0x12/0xc0
[  390.500614][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  390.500659][ T5830]  ? kthread_stop+0x273/0x650
[  390.500727][ T5830]  kill_f2fs_super+0x3c2/0x470
[  390.500791][ T5830]  ? __pfx_kill_f2fs_super+0x10/0x10
[  390.500851][ T5830]  ? lockdep_hardirqs_on+0x7c/0x110
[  390.500935][ T5830]  deactivate_locked_super+0xc1/0x1a0
[  390.500978][ T5830]  deactivate_super+0xde/0x100
[  390.501020][ T5830]  cleanup_mnt+0x225/0x450
[  390.501067][ T5830]  task_work_run+0x150/0x240
[  390.501115][ T5830]  ? __pfx_task_work_run+0x10/0x10
[  390.501152][ T5830]  ? srso_alias_return_thunk+0x5/0xfbef5
[  390.501203][ T5830]  ? __pfx___x64_sys_umount+0x10/0x10
[  390.501264][ T5830]  exit_to_user_mode_loop+0xeb/0x110
[  390.501310][ T5830]  do_syscall_64+0x3f6/0x4c0
[  390.501378][ T5830]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  390.501417][ T5830] RIP: 0033:0x7f346358fc57
[  390.501448][ T5830] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  390.501487][ T5830] RSP: 002b:00007ffdf0185a58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  390.501523][ T5830] RAX: 0000000000000000 RBX: 00007f3463610925 RCX: 00007f346358fc57
[  390.501549][ T5830] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf0185b10
[  390.501573][ T5830] RBP: 00007ffdf0185b10 R08: 0000000000000000 R09: 0000000000000000
[  390.501598][ T5830] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdf0186ba0
[  390.501624][ T5830] R13: 00007f3463610925 R14: 000000000005f4bc R15: 00007ffdf0186be0
[  390.501680][ T5830]  </TASK>
[  390.501694][ T5830] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  390.942757][    C1] vkms_vblank_simulate: vblank timer overrun
[  391.328018][T15797] loop0: detected capacity change from 0 to 512
[  391.337300][T15797] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  391.374043][T15797] EXT4-fs (loop0): 1 truncate cleaned up
[  391.383501][T15797] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  391.415885][T15802] loop6: detected capacity change from 0 to 16
[  391.464150][T15797] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  391.504123][T15802] erofs (device loop6): mounted with root inode @ nid 36.
[  391.537055][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  391.790425][T15812] loop0: detected capacity change from 0 to 128
[  391.891602][T15817] loop3: detected capacity change from 0 to 1024
[  391.951958][T15817] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  391.996991][T15827] netpci0: tun_chr_ioctl cmd 1074025672
[  392.002607][T15827] netpci0: ignored: set checksum disabled
[  392.075007][T15817] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  392.149861][T15836] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2259'.
[  392.177592][T15817] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.2270: missing EA_INODE flag
[  392.220419][T15817] EXT4-fs (loop3): Remounting filesystem read-only
[  392.290111][T15784] loop1: detected capacity change from 0 to 32768
[  392.341483][T15784] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2274 (15784)
[  392.403567][T15784] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  392.435439][T15784] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  392.455098][T15784] BTRFS info (device loop1): disk space caching is enabled
[  392.472855][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  392.507723][T15784] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  392.677235][T15784] BTRFS info (device loop1): rebuilding free space tree
[  392.764265][T15784] BTRFS info (device loop1): disabling free space tree
[  392.792822][T15784] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  392.845660][T15784] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  393.077579][T15881] smc: net device bond0 applied user defined pnetid SYZ2
[  393.103526][   T30] audit: type=1326 audit(1751464109.327:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.4.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346358e929 code=0x7ffc0000
[  393.113872][T15881] smc: net device bond0 erased user defined pnetid SYZ2
[  393.151630][   T30] audit: type=1326 audit(1751464109.327:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.4.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346358e929 code=0x7ffc0000
[  393.184812][T15784] BTRFS info (device loop1): balance: start -d -m
[  393.191395][T15784] BTRFS info (device loop1): balance: paused
[  393.218300][   T30] audit: type=1326 audit(1751464109.417:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.4.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f346358e929 code=0x7ffc0000
[  393.251848][   T30] audit: type=1326 audit(1751464109.427:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.4.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346358e929 code=0x7ffc0000
[  393.330702][   T30] audit: type=1326 audit(1751464109.427:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.4.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346358e929 code=0x7ffc0000
[  393.381744][ T6447] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  393.432412][   T30] audit: type=1326 audit(1751464109.437:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.4.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f346358e929 code=0x7ffc0000
[  393.530049][   T30] audit: type=1326 audit(1751464109.437:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.4.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346358e929 code=0x7ffc0000
[  393.575231][   T30] audit: type=1326 audit(1751464109.437:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.4.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f346358e929 code=0x7ffc0000
[  393.597613][    C1] vkms_vblank_simulate: vblank timer overrun
[  393.623542][   T30] audit: type=1326 audit(1751464109.437:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.4.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346358e929 code=0x7ffc0000
[  393.645995][    C1] vkms_vblank_simulate: vblank timer overrun
[  393.795043][ T5928] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[  394.004751][ T5928] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  394.041730][ T5928] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  394.103853][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.122155][ T5928] usb 5-1: Product: syz
[  394.130947][ T5928] usb 5-1: Manufacturer: syz
[  394.143872][ T5928] usb 5-1: SerialNumber: syz
[  394.243295][T15917] loop5: detected capacity change from 0 to 128
[  394.271057][   T30] audit: type=1326 audit(1751464110.497:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15915 comm="syz.3.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e858e929 code=0x7ffc0000
[  394.293466][    C1] vkms_vblank_simulate: vblank timer overrun
[  394.332101][T15922] loop1: detected capacity change from 0 to 128
[  394.402880][T15922] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  394.441422][T15917] syz.5.2300: attempt to access beyond end of device
[  394.441422][T15917] loop5: rw=2049, sector=129, nr_sectors = 8 limit=128
[  394.464876][T15917] syz.5.2300: attempt to access beyond end of device
[  394.464876][T15917] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128
[  394.488391][T15922] ext4 filesystem being mounted at /295/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  394.608090][ T6447] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  394.987336][ T5928] cdc_ncm 5-1:1.0: SET_CRC_MODE failed
[  395.017968][T15948] loop6: detected capacity change from 0 to 164
[  395.025354][ T5928] cdc_ncm 5-1:1.0: bind() failure
[  395.046549][ T5928] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  395.053394][ T5928] cdc_ncm 5-1:1.1: bind() failure
[  395.063005][T15948] rock: directory entry would overflow storage
[  395.076653][T15948] rock: sig=0x66, size=4, remaining=3
[  395.089629][ T5928] usb 5-1: USB disconnect, device number 20
[  395.154607][T15948] rock: directory entry would overflow storage
[  395.161022][T15946] loop5: detected capacity change from 0 to 4096
[  395.193883][T15948] rock: sig=0x66, size=4, remaining=3
[  395.326740][T15963] wireguard0: entered promiscuous mode
[  395.333233][T15946] ntfs3(loop5): ino=1a, mi_enum_attr
[  395.352343][T15946] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  395.363639][T15963] wireguard0: entered allmulticast mode
[  395.686388][T15966] loop0: detected capacity change from 0 to 32768
[  396.114685][ T5959] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  396.303887][ T5959] usb 5-1: Using ep0 maxpacket: 8
[  396.315086][ T5959] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  396.325310][ T5959] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  396.379475][ T5959] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  396.393794][ T5959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  396.639333][T15975] loop6: detected capacity change from 0 to 32768
[  396.667855][ T5959] usb 5-1: USB disconnect, device number 21
[  396.710900][T15975] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2315 (15975)
[  396.832481][T15975] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  396.873925][T15975] BTRFS info (device loop6): using sha256 (sha256-x86_64) checksum algorithm
[  396.894467][T15975] BTRFS info (device loop6): using free-space-tree
[  397.035046][T15975] BTRFS info (device loop6): rebuilding free space tree
[  397.183276][T16000] loop3: detected capacity change from 0 to 32768
[  397.242468][T16000] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2318 (16000)
[  397.283472][T15975] BTRFS info (device loop6): setting incompat feature flag for SIMPLE_QUOTA (0x10000)
[  397.302549][T16000] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  397.335626][T16000] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm
[  397.393628][T16000] BTRFS info (device loop3): using free-space-tree
[  397.534732][T16054] loop0: detected capacity change from 0 to 512
[  397.595413][T16054] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  397.612999][T15995] loop5: detected capacity change from 0 to 40427
[  397.619586][T16054] ext4 filesystem being mounted at /559/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  397.639923][T16054] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.2332: corrupted inode contents
[  397.643660][T15995] F2FS-fs (loop5): build fault injection rate: 690
[  397.665163][T16054] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.2332: mark_inode_dirty error
[  397.680304][T16000] BTRFS info (device loop3): rebuilding free space tree
[  397.683657][T16054] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.2332: corrupted inode contents
[  397.706703][T16054] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.2332: mark_inode_dirty error
[  397.774015][T15995] F2FS-fs (loop5): heap/no_heap options were deprecated
[  397.797482][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  397.836781][T15995] F2FS-fs (loop5): invalid crc value
[  397.843257][ T8997] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  397.928710][T16075] loop4: detected capacity change from 0 to 512
[  397.970185][T16075] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  398.112417][T16075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  398.220397][T16075] ext4 filesystem being mounted at /367/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  398.302441][T15995] F2FS-fs (loop5): Start checkpoint disabled!
[  398.378159][T15995] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  398.403251][T16075] EXT4-fs warning (device loop4): __ext4_unlink:3273: inode #16: comm syz.4.2336: Deleting file 'file3' with no links
[  398.422871][ T5828] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  398.441448][T16088] loop6: detected capacity change from 0 to 512
[  398.450259][T16088] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  398.562270][T16088] EXT4-fs (loop6): 1 truncate cleaned up
[  398.619817][T16088] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  398.667091][T15995] F2FS-fs (loop5): Skipping Checkpoint. Checkpoints currently disabled.
[  398.774395][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  398.794761][T16099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2352'.
[  398.851444][   T13] kworker/u8:1: attempt to access beyond end of device
[  398.851444][   T13] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  398.853240][ T8997] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  398.873247][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) 
[  398.873307][   T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  398.873333][   T13] Workqueue: writeback wb_workfn (flush-7:5)
[  398.873402][   T13] Call Trace:
[  398.873415][   T13]  <TASK>
[  398.873430][   T13]  dump_stack_lvl+0x16c/0x1f0
[  398.873492][   T13]  f2fs_handle_critical_error+0x621/0x9f0
[  398.873540][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  398.873585][   T13]  ? f2fs_build_fault_attr+0x53/0x1f0
[  398.873635][   T13]  f2fs_write_end_io+0x785/0xc20
[  398.873689][   T13]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  398.873748][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  398.873805][   T13]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  398.873853][   T13]  bio_endio+0x70d/0x850
[  398.873920][   T13]  submit_bio_noacct+0x56d/0x1eb0
[  398.873981][   T13]  __submit_merged_bio+0x33c/0x770
[  398.874038][   T13]  __submit_merged_write_cond+0x319/0x3f0
[  398.874111][   T13]  f2fs_write_cache_pages+0x2067/0x2570
[  398.874201][   T13]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  398.874263][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  398.874309][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  398.874353][   T13]  ? find_held_lock+0x2b/0x80
[  398.874401][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  398.874452][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  398.874495][   T13]  ? do_raw_spin_unlock+0x172/0x230
[  398.874555][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  398.874599][   T13]  ? f2fs_available_free_memory+0x279/0xa30
[  398.874743][   T13]  ? __lock_acquire+0xb8a/0x1c90
[  398.874807][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  398.874861][   T13]  f2fs_write_data_pages+0x4ad/0xd90
[  398.874927][   T13]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  398.874999][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  398.875043][   T13]  ? __lock_acquire+0xb8a/0x1c90
[  398.875107][   T13]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  398.875167][   T13]  do_writepages+0x27a/0x600
[  398.875234][   T13]  ? __pfx_do_writepages+0x10/0x10
[  398.875289][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  398.875333][   T13]  ? reacquire_held_locks+0xcd/0x1f0
[  398.875391][   T13]  ? writeback_sb_inodes+0x3a4/0xf90
[  398.875457][   T13]  __writeback_single_inode+0x160/0xfb0
[  398.875522][   T13]  ? __pfx___writeback_single_inode+0x10/0x10
[  398.875579][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  398.875623][   T13]  ? do_raw_spin_unlock+0x172/0x230
[  398.875664][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  398.875717][   T13]  writeback_sb_inodes+0x601/0xf90
[  398.875803][   T13]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  398.875859][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  398.875903][   T13]  ? find_held_lock+0x2b/0x80
[  398.876023][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  398.876067][   T13]  ? rcu_is_watching+0x12/0xc0
[  398.876116][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  398.876160][   T13]  ? queue_io+0x3f6/0x520
[  398.876219][   T13]  wb_writeback+0x419/0xb70
[  398.876291][   T13]  ? __pfx_wb_writeback+0x10/0x10
[  398.876345][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  398.876405][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  398.876450][   T13]  ? mark_held_locks+0x49/0x80
[  398.876516][   T13]  wb_workfn+0x14d/0xbe0
[  398.876581][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  398.876626][   T13]  ? try_to_wake_up+0x157/0x1680
[  398.876671][   T13]  ? __pfx_wb_workfn+0x10/0x10
[  398.876737][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  398.876787][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  398.876838][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  398.876882][   T13]  ? rcu_is_watching+0x12/0xc0
[  398.876936][   T13]  process_one_work+0x9cf/0x1b70
[  398.876993][   T13]  ? __pfx_wb_workfn+0x10/0x10
[  398.877054][   T13]  ? __pfx_process_one_work+0x10/0x10
[  398.877098][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  398.877156][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  398.877201][   T13]  ? assign_work+0x1a0/0x250
[  398.877267][   T13]  worker_thread+0x6c8/0xf10
[  398.877332][   T13]  ? __pfx_worker_thread+0x10/0x10
[  398.877372][   T13]  kthread+0x3c5/0x780
[  398.877407][   T13]  ? __pfx_kthread+0x10/0x10
[  398.877445][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  398.877489][   T13]  ? rcu_is_watching+0x12/0xc0
[  398.877535][   T13]  ? __pfx_kthread+0x10/0x10
[  398.877572][   T13]  ret_from_fork+0x5d7/0x6f0
[  398.877625][   T13]  ? __pfx_kthread+0x10/0x10
[  398.877660][   T13]  ret_from_fork_asm+0x1a/0x30
[  398.877728][   T13]  </TASK>
[  398.914137][   T13] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  398.992320][T16101] team0: Device gtp0 is of different type
[  399.186347][T16055] loop1: detected capacity change from 0 to 32768
[  399.369042][T16055] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2329 (16055)
[  399.407667][T16055] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  399.469973][T16055] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm
[  399.513184][T16055] BTRFS info (device loop1): using free-space-tree
[  399.824027][ T5959] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  400.037110][ T5959] usb 7-1: Using ep0 maxpacket: 16
[  400.046859][T16165] loop4: detected capacity change from 0 to 1024
[  400.079191][ T5959] usb 7-1: config 0 has no interfaces?
[  400.107712][T16165] EXT4-fs (loop4): Test dummy encryption mode enabled
[  400.132939][ T5959] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  400.177492][ T5959] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  400.187471][T16157] loop0: detected capacity change from 0 to 32768
[  400.214288][ T5959] usb 7-1: Product: syz
[  400.218512][ T5959] usb 7-1: Manufacturer: syz
[  400.228298][ T5959] usb 7-1: SerialNumber: syz
[  400.238982][T16165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  400.255675][ T5959] usb 7-1: config 0 descriptor??
[  400.374314][T16157] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_delay=2013266920,journal_reclaim_delay=10,nojournal_transaction_names
[  400.374369][T16157]   allowing incompatible features above 0.0: (unknown version)
[  400.374392][T16157]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  400.374425][T16157]   with devices loop0
[  400.387988][ T6447] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  400.399208][T16157] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[  400.447656][T16157] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing new filesystem
[  400.467166][T16157] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-write
[  400.543003][T16157] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking superblocks
[  400.562858][T16157] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing freespace
[  400.571454][ T5959] usb 7-1: USB disconnect, device number 12
[  400.582813][T16157] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done initializing freespace
[  400.595031][T16157] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots table
[  400.603717][T16157] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots done
[  400.661329][T16157] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done starting filesystem
[  400.663638][T16187] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2341'.
[  400.721266][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  400.874828][ T5832] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutting down
[  400.913801][ T5832] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-only
[  400.921816][ T5832] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): finished waiting for writes to stop
[  400.949764][ T5832] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators, journal seq 3
[  401.152241][ T5832] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators complete, journal seq 3
[  401.184396][ T5832] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): clean shutdown complete, journal seq 4
[  401.197615][ T5832] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking filesystem clean
[  401.382870][ T5832] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete
[  402.006072][T16223] loop5: detected capacity change from 0 to 1024
[  402.037744][T16223] EXT4-fs: Ignoring removed orlov option
[  402.048352][T16223] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  402.132460][T16223] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  402.280954][ T5831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  403.123806][ T5959] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  403.354035][ T5959] usb 6-1: Using ep0 maxpacket: 16
[  403.363950][ T5959] usb 6-1: config 0 has no interfaces?
[  403.372503][ T5959] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  403.402320][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.430785][ T5959] usb 6-1: Product: syz
[  403.440903][ T5959] usb 6-1: Manufacturer: syz
[  403.502416][ T5959] usb 6-1: SerialNumber: syz
[  403.556856][ T5959] usb 6-1: config 0 descriptor??
[  404.014565][ T5836] usb 6-1: USB disconnect, device number 25
[  404.183541][T16244] loop6: detected capacity change from 0 to 32768
[  404.220969][T16237] loop1: detected capacity change from 0 to 32768
[  404.237250][T16244] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2357 (16244)
[  404.243123][T16237] 
[  404.243123][T16237]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  404.243123][T16237] 
[  404.322333][T16244] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  404.338054][T16243] loop3: detected capacity change from 0 to 40427
[  404.348040][T16237] 
[  404.348040][T16237]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  404.348040][T16237] 
[  404.353903][T16244] BTRFS info (device loop6): using sha256 (sha256-x86_64) checksum algorithm
[  404.382302][T16243] F2FS-fs (loop3): invalid crc value
[  404.390090][T16237] 
[  404.390090][T16237]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  404.390090][T16237] 
[  404.394647][T16244] BTRFS info (device loop6): using free-space-tree
[  404.422699][T16237] 
[  404.422699][T16237]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  404.422699][T16237] 
[  404.462460][T16237] JFS: metapage_get_blocks failed
[  404.471891][T16237] 
[  404.471891][T16237]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  404.471891][T16237] 
[  404.571335][T16237] 
[  404.571335][T16237]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  404.571335][T16237] 
[  404.593516][T16237] 
[  404.593516][T16237]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  404.593516][T16237] 
[  404.636076][T16237] 
[  404.636076][T16237]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  404.636076][T16237] 
[  404.703935][T16237] 
[  404.703935][T16237]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  404.703935][T16237] 
[  404.765450][  T109] 
[  404.765450][  T109]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  404.765450][  T109] 
[  404.789845][T16237] 
[  404.789845][T16237]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  404.789845][T16237] 
[  404.836203][T16293] ERROR: (device loop1): diWrite: ixpxd invalid
[  404.836203][T16293] 
[  404.855423][T16244] BTRFS info (device loop6): rebuilding free space tree
[  404.888726][T16293] ERROR: (device loop1): txAbort: 
[  404.888726][T16293] 
[  404.900783][T16237] 
[  404.900783][T16237]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  404.900783][T16237] 
[  404.923651][T16243] F2FS-fs (loop3): Start checkpoint disabled!
[  404.940172][T16293] ERROR: (device loop1): diFree: invalid inoext
[  404.940172][T16293] 
[  404.984068][T16243] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  404.990099][T16237] 
[  404.990099][T16237]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  404.990099][T16237] 
[  405.042093][T16315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2366'.
[  405.063848][T16237] 
[  405.063848][T16237]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  405.063848][T16237] 
[  405.087550][T16243] F2FS-fs (loop3): Stopped filesystem due to reason: 0
[  405.095611][T16237] 
[  405.095611][T16237]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  405.095611][T16237] 
[  405.106744][T16237] 
[  405.106744][T16237]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  405.106744][T16237] 
[  405.118230][T16237] 
[  405.118230][T16237]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  405.118230][T16237] 
[  405.129041][T16237] 
[  405.129041][T16237]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  405.129041][T16237] 
[  405.152071][  T110] 
[  405.152071][  T110]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  405.152071][  T110] 
[  405.168941][T16237] 
[  405.168941][T16237]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  405.168941][T16237] 
[  405.180371][T16237] 
[  405.180371][T16237]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  405.180371][T16237] 
[  405.242945][T16237] 
[  405.242945][T16237]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  405.242945][T16237] 
[  405.285677][T16237] 
[  405.285677][T16237]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  405.285677][T16237] 
[  405.364909][T16237] 
[  405.364909][T16237]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  405.364909][T16237] 
[  405.514293][ T8997] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  405.528498][T16324] loop0: detected capacity change from 0 to 2048
[  405.537197][T16324] EXT4-fs: Ignoring removed nobh option
[  405.561210][   T59] ERROR: (device loop1): diWrite: ixpxd invalid
[  405.561210][   T59] 
[  405.611200][   T59] ERROR: (device loop1): txAbort: 
[  405.611200][   T59] 
[  405.618080][T16324] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  405.624164][   T59] jfs_write_inode: jfs_commit_inode failed!
[  405.636939][ T6447] 
[  405.636939][ T6447]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  405.636939][ T6447] 
[  405.648784][ T6447] 
[  405.648784][ T6447]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  405.648784][ T6447] 
[  405.719308][T16324] EXT4-fs error (device loop0): ext4_validate_block_bitmap:440: comm syz.0.2375: bg 0: block 234: padding at end of block bitmap is not set
[  405.746955][T16324] EXT4-fs (loop0): Remounting filesystem read-only
[  405.763172][T16330] macsec1: entered allmulticast mode
[  405.772232][T16330] vlan0: entered allmulticast mode
[  405.788059][T16330] veth0_vlan: entered allmulticast mode
[  405.835170][T16330] vlan0: left allmulticast mode
[  405.842848][T16330] veth0_vlan: left allmulticast mode
[  405.862917][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  405.964942][ T5961] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  406.153818][ T5961] usb 5-1: Using ep0 maxpacket: 8
[  406.166359][ T5961] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  406.184038][ T5961] usb 5-1: config 179 has no interface number 0
[  406.223987][ T5961] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  406.263971][ T5961] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  406.293917][ T5961] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  406.327806][ T5961] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  406.370726][ T5961] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  406.423859][ T5961] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  406.432979][ T5961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  406.506625][T16334] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  406.814149][ T5838] Bluetooth: hci0: command 0x0401 tx timeout
[  407.023059][ T5962] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input39
[  407.354128][ T5959] usb 5-1: USB disconnect, device number 22
[  407.354204][    C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  407.368646][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  407.379537][ T5959] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  407.528927][T16372] loop0: detected capacity change from 0 to 40427
[  407.542423][T16372] F2FS-fs (loop0): build fault injection rate: 690
[  407.550069][T16372] F2FS-fs (loop0): Image doesn't support compression
[  407.557137][T16372] F2FS-fs (loop0): Image doesn't support compression
[  407.595242][T16372] F2FS-fs (loop0): invalid crc value
[  407.713218][T16372] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  407.908063][ T5832] syz-executor: attempt to access beyond end of device
[  407.908063][ T5832] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  407.922323][ T5832] CPU: 0 UID: 0 PID: 5832 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) 
[  407.922377][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  407.922402][ T5832] Call Trace:
[  407.922416][ T5832]  <TASK>
[  407.922432][ T5832]  dump_stack_lvl+0x16c/0x1f0
[  407.922505][ T5832]  f2fs_handle_critical_error+0x621/0x9f0
[  407.922559][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  407.922609][ T5832]  ? f2fs_build_fault_attr+0x53/0x1f0
[  407.922665][ T5832]  f2fs_write_end_io+0x785/0xc20
[  407.922724][ T5832]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  407.922787][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  407.922849][ T5832]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  407.922912][ T5832]  bio_endio+0x70d/0x850
[  407.922986][ T5832]  submit_bio_noacct+0x56d/0x1eb0
[  407.923052][ T5832]  __submit_merged_bio+0x33c/0x770
[  407.923115][ T5832]  __submit_merged_write_cond+0x319/0x3f0
[  407.923185][ T5832]  f2fs_write_cache_pages+0x2067/0x2570
[  407.923285][ T5832]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  407.923357][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  407.923403][ T5832]  ? __lock_acquire+0x622/0x1c90
[  407.923477][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  407.923545][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  407.923591][ T5832]  ? __lock_acquire+0x622/0x1c90
[  407.923673][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  407.923718][ T5832]  ? lock_acquire+0x179/0x350
[  407.923822][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  407.923876][ T5832]  ? mod_memcg_lruvec_state+0x394/0x610
[  407.923946][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  407.924000][ T5832]  f2fs_write_data_pages+0x4ad/0xd90
[  407.924069][ T5832]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  407.924122][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  407.924181][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  407.924232][ T5832]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  407.924293][ T5832]  do_writepages+0x27a/0x600
[  407.924361][ T5832]  ? __pfx_do_writepages+0x10/0x10
[  407.924417][ T5832]  ? do_raw_spin_unlock+0x172/0x230
[  407.924458][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  407.924501][ T5832]  ? _raw_spin_unlock+0x28/0x50
[  407.924560][ T5832]  filemap_fdatawrite_wbc+0x104/0x160
[  407.924627][ T5832]  __filemap_fdatawrite_range+0xb2/0xf0
[  407.924674][ T5832]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[  407.924789][ T5832]  ? find_held_lock+0x2b/0x80
[  407.924838][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  407.924893][ T5832]  ? do_raw_spin_unlock+0x172/0x230
[  407.924935][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  407.924993][ T5832]  f2fs_sync_dirty_inodes+0x2a9/0x990
[  407.925076][ T5832]  block_operations+0x2a3/0xfd0
[  407.925141][ T5832]  ? __pfx___schedule+0x10/0x10
[  407.925201][ T5832]  ? __pfx_block_operations+0x10/0x10
[  407.925324][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  407.925369][ T5832]  ? down_write+0x14d/0x200
[  407.925406][ T5832]  ? __pfx_down_write+0x10/0x10
[  407.925447][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  407.925491][ T5832]  ? rcu_is_watching+0x12/0xc0
[  407.925547][ T5832]  f2fs_write_checkpoint+0x2b8/0x4c60
[  407.925626][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  407.925672][ T5832]  ? rcu_is_watching+0x12/0xc0
[  407.925717][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  407.925763][ T5832]  ? kthread_stop+0x273/0x650
[  407.925828][ T5832]  kill_f2fs_super+0x3c2/0x470
[  407.925894][ T5832]  ? __pfx_kill_f2fs_super+0x10/0x10
[  407.925953][ T5832]  ? lockdep_hardirqs_on+0x7c/0x110
[  407.926034][ T5832]  deactivate_locked_super+0xc1/0x1a0
[  407.926076][ T5832]  deactivate_super+0xde/0x100
[  407.926116][ T5832]  cleanup_mnt+0x225/0x450
[  407.926163][ T5832]  task_work_run+0x150/0x240
[  407.926204][ T5832]  ? __pfx_task_work_run+0x10/0x10
[  407.926239][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  407.926288][ T5832]  ? __pfx___x64_sys_umount+0x10/0x10
[  407.926347][ T5832]  exit_to_user_mode_loop+0xeb/0x110
[  407.926392][ T5832]  do_syscall_64+0x3f6/0x4c0
[  407.926458][ T5832]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.926497][ T5832] RIP: 0033:0x7f93b4f8fc57
[  407.926527][ T5832] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  407.926565][ T5832] RSP: 002b:00007ffd39ffccd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  407.926601][ T5832] RAX: 0000000000000000 RBX: 00007f93b5010925 RCX: 00007f93b4f8fc57
[  407.926626][ T5832] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd39ffcd90
[  407.926651][ T5832] RBP: 00007ffd39ffcd90 R08: 0000000000000000 R09: 0000000000000000
[  407.926675][ T5832] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd39ffde20
[  407.926699][ T5832] R13: 00007f93b5010925 R14: 00000000000638ea R15: 00007ffd39ffde60
[  407.926754][ T5832]  </TASK>
[  408.396103][T16355] loop5: detected capacity change from 0 to 32768
[  408.454070][ T5832] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  408.617220][T16355] JBD2: Ignoring recovery information on journal
[  408.750293][T16355] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  409.343547][ T5831] ocfs2: Unmounting device (7,5) on (node local)
[  409.421154][T16407] loop4: detected capacity change from 0 to 40427
[  409.468548][T16416] loop0: detected capacity change from 0 to 1024
[  409.482801][T16416] EXT4-fs (loop0): VFS: Can't find ext4 filesystem
[  409.527477][T16407] F2FS-fs (loop4): invalid crc value
[  409.685340][T16407] F2FS-fs (loop4): Start checkpoint disabled!
[  409.713888][T16407] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  409.784018][T16400] loop3: detected capacity change from 0 to 32768
[  409.830832][T16407] F2FS-fs (loop4): Stopped filesystem due to reason: 0
[  409.844104][T16400] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  409.887817][T16400] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  410.179351][T16403] loop1: detected capacity change from 0 to 32768
[  410.240180][T16403] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2388 (16403)
[  410.321361][T16403] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  410.369708][ T5828] ocfs2: Unmounting device (7,3) on (node local)
[  410.414279][T16403] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm
[  410.423167][T16403] BTRFS info (device loop1): using free-space-tree
[  410.667349][T16437] loop0: detected capacity change from 0 to 32768
[  410.742964][T16437] 
[  410.742964][T16437]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  410.742964][T16437] 
[  410.758861][T16454] wireguard0: entered promiscuous mode
[  410.799774][T16437] 
[  410.799774][T16437]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  410.799774][T16437] 
[  410.813956][T16454] wireguard0: entered allmulticast mode
[  410.825291][T16437] 
[  410.825291][T16437]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  410.825291][T16437] 
[  410.839875][T16437] 
[  410.839875][T16437]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  410.839875][T16437] 
[  410.851020][T16437] 
[  410.851020][T16437]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  410.851020][T16437] 
[  410.872738][T16437] JFS: metapage_get_blocks failed
[  410.882458][T16437] 
[  410.882458][T16437]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  410.882458][T16437] 
[  410.914511][T16437] 
[  410.914511][T16437]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  410.914511][T16437] 
[  410.915117][T16467] ERROR: (device loop0): diWrite: ixpxd invalid
[  410.915117][T16467] 
[  410.933907][T16437] 
[  410.933907][T16437]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  410.933907][T16437] 
[  410.945273][T16437] 
[  410.945273][T16437]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  410.945273][T16437] 
[  410.953616][T16467] ERROR: (device loop0): txAbort: 
[  410.953616][T16467] 
[  410.958334][T16403] BTRFS info (device loop1): rebuilding free space tree
[  410.965605][T16467] ERROR: (device loop0): diFree: invalid inoext
[  410.965605][T16467] 
[  410.985104][  T109] 
[  410.985104][  T109]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  410.985104][  T109] 
[  411.019341][T16437] 
[  411.019341][T16437]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  411.019341][T16437] 
[  411.037501][T16437] 
[  411.037501][T16437]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  411.037501][T16437] 
[  411.058490][T16437] 
[  411.058490][T16437]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  411.058490][T16437] 
[  411.074872][T16437] 
[  411.074872][T16437]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  411.074872][T16437] 
[  411.104686][T16437] 
[  411.104686][T16437]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  411.104686][T16437] 
[  411.136941][T16437] 
[  411.136941][T16437]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  411.136941][T16437] 
[  411.147827][T16437] 
[  411.147827][T16437]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  411.147827][T16437] 
[  411.163893][T16437] 
[  411.163893][T16437]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  411.163893][T16437] 
[  411.214823][  T109] 
[  411.214823][  T109]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  411.214823][  T109] 
[  411.311086][   T13] ERROR: (device loop0): diWrite: ixpxd invalid
[  411.311086][   T13] 
[  411.375887][   T13] ERROR: (device loop0): txAbort: 
[  411.375887][   T13] 
[  411.383320][   T13] jfs_write_inode: jfs_commit_inode failed!
[  411.424997][ T5832] 
[  411.424997][ T5832]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  411.424997][ T5832] 
[  411.437912][ T5832] 
[  411.437912][ T5832]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  411.437912][ T5832] 
[  411.606650][ T6447] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  412.097384][T16484] loop4: detected capacity change from 0 to 32768
[  412.352059][T16484] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_delay=2013266920,journal_reclaim_delay=10,nojournal_transaction_names
[  412.352114][T16484]   allowing incompatible features above 0.0: (unknown version)
[  412.352135][T16484]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  412.352168][T16484]   with devices loop4
[  412.403141][T16484] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[  412.414882][T16484] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing new filesystem
[  412.436035][T16484] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-write
[  412.534826][T16484] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking superblocks
[  412.553432][T16484] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing freespace
[  412.567566][T16484] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done initializing freespace
[  412.580172][T16484] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots table
[  412.588915][T16484] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots done
[  412.704617][T16484] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done starting filesystem
[  413.201672][ T5830] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutting down
[  413.217899][ T5830] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-only
[  413.227804][ T5830] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): finished waiting for writes to stop
[  413.292324][ T5830] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators, journal seq 3
[  413.440247][ T5830] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators complete, journal seq 3
[  413.489176][T16500] loop3: detected capacity change from 0 to 32768
[  413.498362][ T5830] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): clean shutdown complete, journal seq 4
[  413.535908][T16500] JBD2: Ignoring recovery information on journal
[  413.536003][ T5830] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking filesystem clean
[  413.731469][ T5830] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete
[  413.793839][T16500] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  414.032062][T16542] loop0: detected capacity change from 0 to 4096
[  414.128375][ T5828] ocfs2: Unmounting device (7,3) on (node local)
[  414.404565][T16552] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  414.425179][T16552] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  414.437922][T16552] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:12)
[  414.463925][T16552] bridge_slave_0: default FDB implementation only supports local addresses
[  415.407790][T16535] loop6: detected capacity change from 0 to 32768
[  415.531247][T16535] ocfs2: Slot 0 on device (7,6) was already allocated to this node!
[  415.587428][T16535] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  415.815548][T16568] loop0: detected capacity change from 0 to 32768
[  415.891545][T16568] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  416.007921][T16568] XFS (loop0): Ending clean mount
[  416.027464][T16568] XFS (loop0): Quotacheck needed: Please wait.
[  416.085284][ T8997] ocfs2: Unmounting device (7,6) on (node local)
[  416.217558][T16568] XFS (loop0): Quotacheck: Done.
[  416.398279][ T5832] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  416.856978][T16612] loop3: detected capacity change from 0 to 512
[  416.930383][T16612] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  417.062996][T16612] EXT4-fs (loop3): 1 truncate cleaned up
[  417.101502][T16612] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  417.119542][T16621] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  417.165438][   T30] kauditd_printk_skb: 10 callbacks suppressed
[  417.165466][   T30] audit: type=1800 audit(1751464133.397:225): pid=16612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2436" name="file1" dev="loop3" ino=15 res=0 errno=0
[  417.559308][T16627] loop4: detected capacity change from 0 to 512
[  417.615343][T16627] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13
[  417.639524][T16627] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #13: comm syz.4.2414: iget: bad i_size value: 12154757448730
[  417.673884][T16627] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2414: couldn't read orphan inode 13 (err -117)
[  417.720326][T16627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  417.878876][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  417.916461][T16599] loop5: detected capacity change from 0 to 40427
[  417.961571][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  418.007044][T16599] F2FS-fs (loop5): invalid crc value
[  418.383580][T16599] F2FS-fs (loop5): Start checkpoint disabled!
[  418.467735][T16599] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  418.900166][T16599] F2FS-fs (loop5): Stopped filesystem due to reason: 0
[  418.998457][T16623] loop6: detected capacity change from 0 to 32768
[  419.246305][T16623] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  419.452344][T16647] loop0: detected capacity change from 0 to 32768
[  419.473233][T16647] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2445 (16647)
[  419.487615][T16642] loop3: detected capacity change from 0 to 131072
[  419.519426][T16647] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  419.535756][T16642] F2FS-fs (loop3): Test dummy encryption mode enabled
[  419.540241][T16647] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm
[  419.553866][T16642] F2FS-fs (loop3): invalid crc value
[  419.565690][T16647] BTRFS info (device loop0): using free-space-tree
[  419.599739][T16623] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  419.666943][T16623] XFS (loop6): Starting recovery (logdev: internal)
[  419.676910][T16642] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  419.716379][T16647] BTRFS info (device loop0): rebuilding free space tree
[  419.716435][T16623] XFS (loop6): Ending recovery (logdev: internal)
[  419.929324][ T5832] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  420.293151][T16695] input: syz0 as /devices/virtual/input/input40
[  420.557929][ T8997] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  421.217342][T16717] loop4: detected capacity change from 0 to 4096
[  421.258424][T16721] Failed to get privilege flags for destination (handle=0x2:0xd)
[  421.631969][T16719] loop0: detected capacity change from 0 to 32768
[  421.726433][T16719] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  421.759156][   T30] audit: type=1800 audit(1751464137.987:226): pid=16719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2461" name="file1" dev="loop0" ino=17058 res=0 errno=0
[  421.792276][T16719] (syz.0.2461,16719,1):ocfs2_dio_end_io:2397 ERROR: Direct IO failed, bytes = -14
[  421.875040][   T30] audit: type=1800 audit(1751464138.017:227): pid=16719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2461" name="file1" dev="loop0" ino=17058 res=0 errno=0
[  421.996239][ T5832] ocfs2: Unmounting device (7,0) on (node local)
[  422.699958][T16750] loop0: detected capacity change from 0 to 32768
[  422.709721][T16750] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2466 (16750)
[  422.748327][T16750] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  422.759640][T16750] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm
[  422.768543][T16750] BTRFS info (device loop0): using free-space-tree
[  422.945191][T16750] BTRFS info (device loop0): rebuilding free space tree
[  423.192652][ T5832] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  423.630735][T16789] loop5: detected capacity change from 0 to 512
[  423.658139][T16789] EXT4-fs: Ignoring removed nobh option
[  423.728376][T16789] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.2476: iget: bad i_size value: 38620345925642
[  423.758004][T16790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  423.758337][T16789] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2476: couldn't read orphan inode 15 (err -117)
[  423.791955][T16789] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  423.901578][T16756] loop1: detected capacity change from 0 to 32768
[  423.936752][T16756] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2471 (16756)
[  423.970559][T16756] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  423.996859][T16796] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  424.021606][T16756] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm
[  424.058848][T16756] BTRFS info (device loop1): using free-space-tree
[  424.075614][   T59] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 40 with error 28
[  424.150518][   T59] EXT4-fs (loop5): This should not happen!! Data will be lost
[  424.150518][   T59] 
[  424.194715][   T59] EXT4-fs (loop5): Total free blocks count 0
[  424.206790][   T59] EXT4-fs (loop5): Free/Dirty block details
[  424.249676][   T59] EXT4-fs (loop5): free_blocks=0
[  424.269391][   T59] EXT4-fs (loop5): dirty_blocks=44
[  424.280327][   T59] EXT4-fs (loop5): Block reservation details
[  424.345606][T16756] BTRFS info (device loop1): rebuilding free space tree
[  424.473868][ T5836] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  424.507290][   T59] EXT4-fs (loop5): i_reserved_data_blocks=44
[  424.575958][T16806] loop0: detected capacity change from 0 to 32768
[  424.590550][T16806] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2479 (16806)
[  424.622621][T16806] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  424.622715][T16806] BTRFS info (device loop0): using crc32c (crc32c-x86_64) checksum algorithm
[  424.622758][T16806] BTRFS info (device loop0): using free-space-tree
[  424.654188][ T5836] usb 4-1: Using ep0 maxpacket: 16
[  424.666724][ T5836] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  424.666789][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  424.666835][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  424.666871][ T5836] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  424.666908][ T5836] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  424.668271][ T5836] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  424.668318][ T5836] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  424.668357][ T5836] usb 4-1: Manufacturer: syz
[  424.675691][ T5836] usb 4-1: config 0 descriptor??
[  424.683619][ T5831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  424.866308][T16756] BTRFS error (device loop1): target device  is invalid!
[  424.920685][   T30] audit: type=1800 audit(1751464141.137:228): pid=16806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2479" name="file1" dev="loop0" ino=260 res=0 errno=0
[  425.002974][ T5836] rc_core: IR keymap rc-hauppauge not found
[  425.003003][ T5836] Registered IR keymap rc-empty
[  425.003166][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  425.018388][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  425.044185][ T5836] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  425.046427][ T5836] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input41
[  425.049791][ T6447] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  425.069354][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  425.089887][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  425.106065][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  425.126643][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  425.149401][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  425.164655][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  425.206626][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  425.224012][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  425.277611][ T5832] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  425.303685][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  425.307394][T16867] loop5: detected capacity change from 0 to 128
[  425.324003][ T5836] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  425.336503][T16867] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  425.346557][ T5836] mceusb 4-1:0.0: Registered  with mce emulator interface version 1
[  425.448094][ T5836] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  425.473832][ T5836] usb 4-1: USB disconnect, device number 17
[  425.635264][T16867] FAT-fs (loop5): FAT read failed (blocknr 128)
[  425.963042][T16892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2503'.
[  426.930593][T16926] kernel read not supported for file /eth0 (pid: 16926 comm: syz.5.2499)
[  426.992015][   T30] audit: type=1800 audit(1751464143.217:229): pid=16926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2499" name="eth0" dev="mqueue" ino=28943 res=0 errno=0
[  427.077024][T16920] loop0: detected capacity change from 0 to 32768
[  427.165747][T16920] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[  427.184097][T16920] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  427.309649][T16920] XFS (loop0): Ending clean mount
[  427.322776][T16920] XFS (loop0): Quotacheck needed: Please wait.
[  427.393649][T16920] XFS (loop0): Quotacheck: Done.
[  427.498812][ T5832] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  427.733106][T16947] loop4: detected capacity change from 0 to 128
[  427.777676][T16951] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2504'.
[  427.805762][T16947] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  428.088392][T16947] FAT-fs (loop4): FAT read failed (blocknr 128)
[  428.212953][T16954] loop0: detected capacity change from 0 to 32768
[  428.273606][T16954] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  428.369819][T16954] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  428.533187][T16963] loop3: detected capacity change from 0 to 512
[  428.545869][T16967] loop6: detected capacity change from 0 to 128
[  428.561940][T16967] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  428.562663][T16963] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  428.585978][T16967] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  428.590964][ T5832] ocfs2: Unmounting device (7,0) on (node local)
[  428.700280][T16963] EXT4-fs error (device loop3): ext4_validate_block_bitmap:431: comm syz.3.2509: bg 0: block 104: invalid block bitmap
[  428.737514][T16963] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  428.793861][T16963] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #11: comm syz.3.2509: invalid indirect mapped block 1 (level 1)
[  428.828239][T16963] EXT4-fs (loop3): 1 truncate cleaned up
[  428.858049][T16963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  428.994559][ T5836] usb 6-1: new full-speed USB device number 26 using dummy_hcd
[  429.182580][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  429.202430][ T5836] usb 6-1: unable to get BOS descriptor or descriptor too short
[  429.213385][ T5836] usb 6-1: no configurations
[  429.218996][ T5836] usb 6-1: can't read configurations, error -22
[  429.407902][ T5928] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  429.430724][T16975] loop4: detected capacity change from 0 to 32768
[  429.458959][T16975] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  429.536456][T16975] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  429.579308][ T5928] usb 1-1: Using ep0 maxpacket: 8
[  429.590464][ T5928] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  429.599974][ T5928] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  429.602122][T16975] XFS (loop4): Starting recovery (logdev: internal)
[  429.608807][ T5928] usb 1-1: Product: syz
[  429.622059][ T5928] usb 1-1: Manufacturer: syz
[  429.627010][ T5928] usb 1-1: SerialNumber: syz
[  429.640869][T17017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2518'.
[  429.652026][ T5928] usb 1-1: config 0 descriptor??
[  429.665724][ T5928] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  429.691372][T16975] XFS (loop4): Ending recovery (logdev: internal)
[  429.713922][T17021] loop3: detected capacity change from 0 to 16
[  429.735549][T17021] erofs (device loop3): mounted with root inode @ nid 36.
[  429.947765][T17023] erofs (device loop3): invalid de[0].nameoff 0 @ nid 36
[  429.972846][T17021] erofs (device loop3): corrupted dir block 72 @ nid 36
[  430.236500][ T5830] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  430.283318][ T5928] input: gspca_zc3xx as /devices/platform/dummy_hcd.0/usb1/1-1/input/input42
[  430.449917][T17036] loop1: detected capacity change from 0 to 4096
[  430.516957][ T5928] usb 1-1: USB disconnect, device number 28
[  430.893041][T17068] loop6: detected capacity change from 0 to 256
[  430.908327][T17068] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  430.921910][T17068] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  430.948931][T17068] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  431.012079][   T30] audit: type=1800 audit(1751464147.227:230): pid=17068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2530" name="file1" dev="loop6" ino=1048673 res=0 errno=0
[  431.646599][T17075] loop0: detected capacity change from 0 to 40427
[  431.674269][T17075] F2FS-fs (loop0): build fault injection rate: 690
[  431.698058][T17075] F2FS-fs (loop0): invalid crc value
[  431.861102][T17075] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  431.939642][T17075] syz.0.2533: attempt to access beyond end of device
[  431.939642][T17075] loop0: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[  432.036780][ T5832] syz-executor: attempt to access beyond end of device
[  432.036780][ T5832] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  432.057191][ T5832] CPU: 1 UID: 0 PID: 5832 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) 
[  432.057244][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  432.057267][ T5832] Call Trace:
[  432.057280][ T5832]  <TASK>
[  432.057294][ T5832]  dump_stack_lvl+0x16c/0x1f0
[  432.057360][ T5832]  f2fs_handle_critical_error+0x621/0x9f0
[  432.057409][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  432.057455][ T5832]  ? f2fs_build_fault_attr+0x53/0x1f0
[  432.057506][ T5832]  f2fs_write_end_io+0x785/0xc20
[  432.057560][ T5832]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  432.057616][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  432.057674][ T5832]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  432.057722][ T5832]  bio_endio+0x70d/0x850
[  432.057790][ T5832]  submit_bio_noacct+0x56d/0x1eb0
[  432.057856][ T5832]  __submit_merged_bio+0x33c/0x770
[  432.057913][ T5832]  __submit_merged_write_cond+0x319/0x3f0
[  432.057977][ T5832]  f2fs_write_cache_pages+0x2067/0x2570
[  432.058067][ T5832]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  432.058134][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  432.058182][ T5832]  ? __lock_acquire+0x622/0x1c90
[  432.058253][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  432.058399][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  432.058445][ T5832]  ? bpf_ksym_find+0x124/0x1c0
[  432.058499][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  432.058553][ T5832]  f2fs_write_data_pages+0x4ad/0xd90
[  432.058622][ T5832]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  432.058720][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  432.058766][ T5832]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  432.058828][ T5832]  do_writepages+0x27a/0x600
[  432.058900][ T5832]  ? __pfx_do_writepages+0x10/0x10
[  432.058957][ T5832]  ? do_raw_spin_unlock+0x172/0x230
[  432.058999][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  432.059044][ T5832]  ? _raw_spin_unlock+0x28/0x50
[  432.059102][ T5832]  filemap_fdatawrite_wbc+0x104/0x160
[  432.059168][ T5832]  __filemap_fdatawrite_range+0xb2/0xf0
[  432.059216][ T5832]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[  432.059329][ T5832]  ? find_held_lock+0x2b/0x80
[  432.059376][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  432.059423][ T5832]  ? do_raw_spin_unlock+0x172/0x230
[  432.059465][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  432.059517][ T5832]  f2fs_sync_dirty_inodes+0x2a9/0x990
[  432.059601][ T5832]  block_operations+0x2a3/0xfd0
[  432.059658][ T5832]  ? __pfx_stack_trace_save+0x10/0x10
[  432.059715][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  432.059767][ T5832]  ? __pfx_block_operations+0x10/0x10
[  432.059896][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  432.059941][ T5832]  ? down_write+0x14d/0x200
[  432.059978][ T5832]  ? __pfx_down_write+0x10/0x10
[  432.060018][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  432.060063][ T5832]  ? rcu_is_watching+0x12/0xc0
[  432.060117][ T5832]  f2fs_write_checkpoint+0x2b8/0x4c60
[  432.060186][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  432.060230][ T5832]  ? kfree+0x2b4/0x4d0
[  432.060286][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  432.060331][ T5832]  ? lockdep_hardirqs_on+0x7c/0x110
[  432.060385][ T5832]  ? f2fs_stop_gc_thread+0x79/0xd0
[  432.060425][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  432.060486][ T5832]  kill_f2fs_super+0x3c2/0x470
[  432.060549][ T5832]  ? __pfx_kill_f2fs_super+0x10/0x10
[  432.060607][ T5832]  ? lockdep_hardirqs_on+0x7c/0x110
[  432.060686][ T5832]  deactivate_locked_super+0xc1/0x1a0
[  432.060728][ T5832]  deactivate_super+0xde/0x100
[  432.060769][ T5832]  cleanup_mnt+0x225/0x450
[  432.060816][ T5832]  task_work_run+0x150/0x240
[  432.060877][ T5832]  ? __pfx_task_work_run+0x10/0x10
[  432.060912][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  432.060962][ T5832]  ? __pfx___x64_sys_umount+0x10/0x10
[  432.061021][ T5832]  exit_to_user_mode_loop+0xeb/0x110
[  432.061065][ T5832]  do_syscall_64+0x3f6/0x4c0
[  432.061131][ T5832]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.061169][ T5832] RIP: 0033:0x7f93b4f8fc57
[  432.061199][ T5832] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  432.061236][ T5832] RSP: 002b:00007ffd39ffccd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  432.061272][ T5832] RAX: 0000000000000000 RBX: 00007f93b5010925 RCX: 00007f93b4f8fc57
[  432.061297][ T5832] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd39ffcd90
[  432.061321][ T5832] RBP: 00007ffd39ffcd90 R08: 0000000000000000 R09: 0000000000000000
[  432.061345][ T5832] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd39ffde20
[  432.061370][ T5832] R13: 00007f93b5010925 R14: 000000000006976c R15: 00007ffd39ffde60
[  432.061424][ T5832]  </TASK>
[  432.564563][ T5832] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  432.582112][T17098] loop4: detected capacity change from 0 to 256
[  432.795889][T17090] loop1: detected capacity change from 0 to 32768
[  432.923433][T17090] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  433.246884][T17090] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  433.314545][T17090] XFS (loop1): Starting recovery (logdev: internal)
[  433.430184][T17090] XFS (loop1): Ending recovery (logdev: internal)
[  433.731345][T17130] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2547'.
[  434.053270][T17095] loop6: detected capacity change from 0 to 32768
[  434.080827][T17095] XFS: noikeep mount option is deprecated.
[  434.201906][T17095] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  434.359736][ T6447] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  434.381005][T17174] loop3: detected capacity change from 0 to 128
[  434.400384][T17174] EXT4-fs: Ignoring removed oldalloc option
[  434.441473][T17095] XFS (loop6): Ending clean mount
[  434.459887][T17095] XFS (loop6): Quotacheck needed: Please wait.
[  434.479759][T17174] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  434.622619][T17174] ext4 filesystem being mounted at /384/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  434.662927][T17186] loop5: detected capacity change from 0 to 512
[  434.721335][T17095] XFS (loop6): Quotacheck: Done.
[  434.762965][   T30] audit: type=1800 audit(1751464150.987:231): pid=17174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2557" name="file1" dev="loop3" ino=12 res=0 errno=0
[  434.785361][T17186] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  434.873050][T17122] loop4: detected capacity change from 0 to 40427
[  434.928533][T17186] EXT4-fs (loop5): 1 truncate cleaned up
[  434.945630][T17122] F2FS-fs (loop4): invalid crc value
[  434.962448][T17186] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  435.104134][   T30] audit: type=1800 audit(1751464151.327:232): pid=17186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2558" name="file1" dev="loop5" ino=15 res=0 errno=0
[  435.124686][    C0] vkms_vblank_simulate: vblank timer overrun
[  435.233561][T17199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  435.278076][ T8997] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  435.322689][T17122] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  435.548043][ T5828] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  435.878262][ T5831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  436.208059][T17225] loop0: detected capacity change from 0 to 1024
[  436.298367][ T1156] hfsplus: b-tree write err: -5, ino 4
[  436.656773][T17237] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2574'.
[  436.955147][T17236] loop0: detected capacity change from 0 to 32768
[  437.097002][T17206] loop1: detected capacity change from 0 to 32768
[  437.145694][T17206] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  437.220174][T17236] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[  437.220214][T17236]   allowing incompatible features above 0.0: (unknown version)
[  437.220239][T17236]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  437.286482][T17236] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  437.286739][T17206] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  437.304196][T17236] bcachefs (loop0): initializing new filesystem
[  437.313132][T17236] bcachefs (loop0): going read-write
[  437.389373][T17236] bcachefs (loop0): marking superblocks
[  437.404145][ T5959] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  437.407569][T17236] bcachefs (loop0): initializing freespace
[  437.445039][T17236] bcachefs (loop0): done initializing freespace
[  437.455992][T17236] bcachefs (loop0): reading snapshots table
[  437.463963][T17236] bcachefs (loop0): reading snapshots done
[  437.476978][T17267] loop6: detected capacity change from 0 to 512
[  437.488399][T17220] loop5: detected capacity change from 0 to 32768
[  437.519822][T17267] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  437.581487][T17236] bcachefs (loop0):  loop0: Superblock write was silently dropped! (seq 0 expected 42)
[  437.585860][ T5959] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  437.608737][T17236] bcachefs (loop0): done starting filesystem
[  437.615646][ T5959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  437.655469][T17267] EXT4-fs (loop6): 1 truncate cleaned up
[  437.663458][T17267] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  437.714126][ T5959] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  437.727168][ T5959] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  437.750304][   T30] audit: type=1800 audit(1751464153.977:233): pid=17267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2581" name="file1" dev="loop6" ino=15 res=0 errno=0
[  437.756791][ T5959] usb 4-1: Manufacturer: syz
[  437.799307][ T5831] non-latin1 character 0x3ff found in JFS file name
[  437.816281][ T5832] bcachefs (loop0): shutting down
[  437.821360][ T5832] bcachefs (loop0): going read-only
[  437.824242][ T5831] mount with iocharset=utf8 to access
[  437.844663][ T6447] ocfs2: Unmounting device (7,1) on (node local)
[  437.845712][ T5832] bcachefs (loop0): finished waiting for writes to stop
[  437.862491][ T5832] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3
[  437.907256][ T5959] usb 4-1: config 0 descriptor??
[  437.966696][ T5831] read_mapping_page failed!
[  437.971269][ T5831] ERROR: (device loop5): txAbort: 
[  437.971269][ T5831] 
[  438.017412][ T5832] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3
[  438.033590][ T5832] bcachefs (loop0): clean shutdown complete, journal seq 4
[  438.035482][ T5831] ERROR: (device loop5): remounting filesystem as read-only
[  438.042314][ T5832] bcachefs (loop0): marking filesystem clean
[  438.069226][ T5959] rc_core: IR keymap rc-hauppauge not found
[  438.140625][ T5959] Registered IR keymap rc-empty
[  438.154191][ T5832] bcachefs (loop0): shutdown complete
[  438.186222][ T5959] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  438.246544][ T5959] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input43
[  438.263000][    C1] igorplugusb 4-1:0.0: Error: urb status = -32
[  438.405736][ T5928] usb 4-1: USB disconnect, device number 18
[  438.512826][ T8997] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  438.572217][T17254] loop4: detected capacity change from 0 to 32768
[  438.613440][T17254] (syz.4.2579,17254,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  438.694164][T17254] (syz.4.2579,17254,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  438.719023][T17303] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  438.826230][T17254] JBD2: Ignoring recovery information on journal
[  438.922949][T17254] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  439.366436][  T984] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  439.406595][  T984] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.470324][ T5830] ocfs2: Unmounting device (7,4) on (node local)
[  439.811129][  T984] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  439.844209][  T984] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.326087][  T984] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  440.353796][  T984] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.619907][T17315] loop6: detected capacity change from 0 to 32768
[  440.633674][T17340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2596'.
[  440.661943][T17340] netlink: 'syz.0.2596': attribute type 3 has an invalid length.
[  440.686892][T17315] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2586 (17315)
[  440.753595][T17315] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  440.779425][  T984] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  440.807071][T17315] BTRFS info (device loop6): using sha256 (sha256-x86_64) checksum algorithm
[  440.808114][  T984] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.842869][T17315] BTRFS info (device loop6): using free-space-tree
[  440.972502][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  440.985422][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  440.994760][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  441.007284][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  441.027399][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  441.294001][T17315] BTRFS info (device loop6): rebuilding free space tree
[  441.338727][T17383] loop1: detected capacity change from 0 to 512
[  441.366164][T17383] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  441.416215][T17383] EXT4-fs (loop1): 1 truncate cleaned up
[  441.447153][T17383] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  441.504126][ T5836] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  441.508211][T17403] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2604'.
[  441.558583][   T30] audit: type=1800 audit(1751464157.787:234): pid=17383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2598" name="file1" dev="loop1" ino=15 res=0 errno=0
[  441.595228][T17315] BTRFS error (device loop6): target device  is invalid!
[  441.684179][ T5836] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  441.710826][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  441.756457][ T8997] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  441.767363][ T5836] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  441.767412][ T5836] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  441.767451][ T5836] usb 1-1: Manufacturer: syz
[  441.786762][ T5836] usb 1-1: config 0 descriptor??
[  441.842156][  T984] bridge_slave_0: left allmulticast mode
[  441.856413][  T984] bridge_slave_0: left promiscuous mode
[  441.880623][  T984] bridge0: port 1(bridge_slave_0) entered disabled state
[  441.973983][ T5836] rc_core: IR keymap rc-hauppauge not found
[  441.981940][ T5836] Registered IR keymap rc-empty
[  441.995976][ T5836] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  442.018211][ T5836] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input44
[  442.046248][    C0] igorplugusb 1-1:0.0: Error: urb status = -32
[  442.136373][ T5836] usb 1-1: USB disconnect, device number 29
[  442.496447][ T6447] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.860035][T17471] loop6: detected capacity change from 0 to 128
[  442.927383][T17471] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  443.077159][T17471] ext4 filesystem being mounted at /279/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  443.126565][T17481] loop0: detected capacity change from 0 to 128
[  443.134722][ T5838] Bluetooth: hci3: command tx timeout
[  443.141431][T17481] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  443.159170][T17481] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  443.773131][ T8997] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  444.085032][T17477] loop1: detected capacity change from 0 to 32768
[  444.131604][  T984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  444.147893][T17477] 
[  444.147893][T17477]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  444.147893][T17477] 
[  444.168473][  T984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  444.213194][T17477] 
[  444.213194][T17477]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  444.213194][T17477] 
[  444.216935][  T984] bond0 (unregistering): Released all slaves
[  444.254981][T17477] 
[  444.254981][T17477]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  444.254981][T17477] 
[  444.298202][T17477] 
[  444.298202][T17477]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  444.298202][T17477] 
[  444.345271][T17477] 
[  444.345271][T17477]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  444.345271][T17477] 
[  444.370028][T17477] 
[  444.370028][T17477]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  444.370028][T17477] 
[  444.450276][T17477] 
[  444.450276][T17477]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  444.450276][T17477] 
[  444.462155][  T109] 
[  444.462155][  T109]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  444.462155][  T109] 
[  444.492695][T17477] non-latin1 character 0x3ff found in JFS file name
[  444.514277][T17558] netlink: 'syz.6.2627': attribute type 1 has an invalid length.
[  444.522307][T17558] netlink: 'syz.6.2627': attribute type 4 has an invalid length.
[  444.545877][T17477] mount with iocharset=utf8 to access
[  444.570955][T17558] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2627'.
[  444.601328][T17485] loop4: detected capacity change from 0 to 32768
[  444.615075][T17558] NCSI netlink: No device for ifindex 0
[  444.647912][T17485] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2618 (17485)
[  444.682949][T17485] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  444.717810][ T1156] 
[  444.717810][ T1156]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  444.717810][ T1156] 
[  444.718798][T17485] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm
[  444.738575][T17485] BTRFS info (device loop4): using free-space-tree
[  444.753553][T17492] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.802812][ T1156] 
[  444.802812][ T1156]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  444.802812][ T1156] 
[  444.822178][  T110] 
[  444.822178][  T110]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  444.822178][  T110] 
[  444.874556][ T6447] 
[  444.874556][ T6447]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  444.874556][ T6447] 
[  444.923381][ T6447] 
[  444.923381][ T6447]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  444.923381][ T6447] 
[  445.021303][T17492] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.115511][T17349] chnl_net:caif_netlink_parms(): no params data found
[  445.149857][T17485] BTRFS info (device loop4): rebuilding free space tree
[  445.201295][T17492] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.214186][ T5838] Bluetooth: hci3: command tx timeout
[  445.300949][T17631] loop3: detected capacity change from 0 to 4096
[  445.427767][T17485] BTRFS error (device loop4): target device  is invalid!
[  445.437928][T17631] ntfs3(loop3): ino=1a, mi_enum_attr
[  445.442057][T17642] loop6: detected capacity change from 0 to 128
[  445.450563][T17631] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  445.528228][T17642] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  445.571958][   T30] audit: type=1800 audit(1751464161.797:235): pid=17631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2631" name="file1" dev="loop3" ino=30 res=0 errno=0
[  445.604388][T17642] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  445.611404][T17492] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.694934][ T5830] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  445.931298][  T984] hsr_slave_0: left promiscuous mode
[  446.001170][  T984] hsr_slave_1: left promiscuous mode
[  446.031949][  T984] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  446.052197][  T984] batman_adv: batadv0: Removing interface: batadv_slave_0
[  446.095258][  T984] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  446.137538][  T984] batman_adv: batadv0: Removing interface: batadv_slave_1
[  446.185187][T17681] loop4: detected capacity change from 0 to 256
[  446.193133][  T984] batman_adv: batadv0: Interface deactivated: ipvlan2
[  446.210339][  T984] batman_adv: batadv0: Removing interface: ipvlan2
[  446.275321][T17681] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d)
[  446.327874][  T984] veth1_macvtap: left promiscuous mode
[  446.371025][  T984] veth0_macvtap: left promiscuous mode
[  446.381268][  T984] veth1_vlan: left promiscuous mode
[  446.399898][  T984] veth0_vlan: left promiscuous mode
[  447.131730][T17713] loop3: detected capacity change from 0 to 1024
[  447.142626][T17713] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  447.200719][T17713] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.2643: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  447.227595][T17713] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2643: couldn't read orphan inode 11 (err -117)
[  447.269113][T17713] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  447.294171][ T5838] Bluetooth: hci3: command tx timeout
[  447.437841][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  447.574693][T17726] loop6: detected capacity change from 0 to 256
[  447.659047][T17731] loop3: detected capacity change from 0 to 128
[  447.702385][T17731] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  447.739674][T17726] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d)
[  447.761911][T17731] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  448.105335][  T984] team0 (unregistering): Port device team_slave_1 removed
[  448.206245][  T984] team0 (unregistering): Port device team_slave_0 removed
[  448.258441][T17741] loop6: detected capacity change from 0 to 1024
[  448.675620][T17760] loop1: detected capacity change from 0 to 128
[  448.692892][T17760] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  448.768888][T17760] FAT-fs (loop1): FAT read failed (blocknr 128)
[  449.355897][T17349] bridge0: port 1(bridge_slave_0) entered blocking state
[  449.377381][ T5838] Bluetooth: hci3: command tx timeout
[  449.384471][T17349] bridge0: port 1(bridge_slave_0) entered disabled state
[  449.415656][T17349] bridge_slave_0: entered allmulticast mode
[  449.467313][T17349] bridge_slave_0: entered promiscuous mode
[  449.506589][T17349] bridge0: port 2(bridge_slave_1) entered blocking state
[  449.532808][T17349] bridge0: port 2(bridge_slave_1) entered disabled state
[  449.544981][T17349] bridge_slave_1: entered allmulticast mode
[  449.576521][T17349] bridge_slave_1: entered promiscuous mode
[  449.607524][T17492] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  449.628788][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  449.644148][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  449.840067][T17842] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  449.876642][T17492] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  449.909595][T17826] sp0: Synchronizing with TNC
[  449.913085][T17349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  449.951131][T17492] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  449.987588][T17492] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  450.001673][T17349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  450.251180][T17869] loop0: detected capacity change from 0 to 256
[  450.427751][T17869] FAT-fs (loop0): Directory bread(block 64) failed
[  450.436617][T17869] FAT-fs (loop0): Directory bread(block 65) failed
[  450.443668][T17869] FAT-fs (loop0): Directory bread(block 66) failed
[  450.453908][T17869] FAT-fs (loop0): Directory bread(block 67) failed
[  450.460584][T17869] FAT-fs (loop0): Directory bread(block 68) failed
[  450.475360][T17884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2670'.
[  450.493188][T17869] FAT-fs (loop0): Directory bread(block 69) failed
[  450.500528][T17869] FAT-fs (loop0): Directory bread(block 70) failed
[  450.507869][T17869] FAT-fs (loop0): Directory bread(block 71) failed
[  450.516490][T17869] FAT-fs (loop0): Directory bread(block 72) failed
[  450.523054][T17869] FAT-fs (loop0): Directory bread(block 73) failed
[  450.578228][T17899] syz.6.2673 uses obsolete (PF_INET,SOCK_PACKET)
[  450.749833][T17349] team0: Port device team_slave_0 added
[  450.789551][T17349] team0: Port device team_slave_1 added
[  451.135734][T17349] batman_adv: batadv0: Adding interface: batadv_slave_0
[  451.142760][T17349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  451.190288][T17940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2680'.
[  451.303912][T17349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  451.376806][T17948] loop0: detected capacity change from 0 to 128
[  451.423846][T17948] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  451.473487][T17349] batman_adv: batadv0: Adding interface: batadv_slave_1
[  451.513135][T17948] FAT-fs (loop0): FAT read failed (blocknr 128)
[  451.522066][T17349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  451.548046][    C1] vkms_vblank_simulate: vblank timer overrun
[  451.596315][T17349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  451.900388][T17349] hsr_slave_0: entered promiscuous mode
[  451.915685][T17349] hsr_slave_1: entered promiscuous mode
[  451.934117][T17349] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  451.951684][T17349] Cannot create hsr debugfs directory
[  452.362522][T18042] loop4: detected capacity change from 0 to 64
[  452.651477][T18074] loop4: detected capacity change from 0 to 47
[  452.786429][T18079] loop3: detected capacity change from 0 to 128
[  452.850744][T17942] loop6: detected capacity change from 0 to 40427
[  452.872867][T17942] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  452.881110][T17942] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  452.903433][T17942] F2FS-fs (loop6): invalid crc value
[  452.928544][T18079] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  452.981590][T17349] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  452.994641][T17349] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  453.015959][T18087] overlayfs: upper fs needs to support d_type.
[  453.039034][T18079] ext4 filesystem being mounted at /416/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  453.039856][T17349] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  453.081996][T18087] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  453.100079][T18087] overlayfs: failed to set xattr on upper
[  453.107998][T18087] overlayfs: ...falling back to redirect_dir=nofollow.
[  453.154583][T18087] overlayfs: ...falling back to metacopy=off.
[  453.169313][T17349] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  453.194152][T18087] overlayfs: ...falling back to index=off.
[  453.200631][T18087] overlayfs: ...falling back to uuid=null.
[  453.281473][T17942] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  453.325913][T17942] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  453.415282][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  453.683279][T17349] 8021q: adding VLAN 0 to HW filter on device bond0
[  453.834775][T17942] syz.6.2679: attempt to access beyond end of device
[  453.834775][T17942] loop6: rw=2049, sector=45096, nr_sectors = 88 limit=40427
[  453.940243][ T5828] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  453.958673][T18121] syz.6.2679: attempt to access beyond end of device
[  453.958673][T18121] loop6: rw=2049, sector=45184, nr_sectors = 40 limit=40427
[  454.008061][T18123] loop4: detected capacity change from 0 to 64
[  454.124530][T18121] syz.6.2679: attempt to access beyond end of device
[  454.124530][T18121] loop6: rw=2049, sector=45096, nr_sectors = 88 limit=40427
[  454.139697][T18123] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  454.177976][T17349] 8021q: adding VLAN 0 to HW filter on device team0
[  454.276209][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  454.283834][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  454.402383][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  454.409737][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  454.747315][T18139] loop0: detected capacity change from 0 to 256
[  454.763549][T18139] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d)
[  455.379338][T18129] loop1: detected capacity change from 0 to 32768
[  455.413186][T18129] (syz.1.2709,18129,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  455.454251][T18129] (syz.1.2709,18129,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  455.509840][T17349] 8021q: adding VLAN 0 to HW filter on device batadv0
[  455.533052][T18129] JBD2: Ignoring recovery information on journal
[  455.723330][T18129] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  456.054017][    T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  456.081772][T18137] loop4: detected capacity change from 0 to 32768
[  456.121520][T18178] loop0: detected capacity change from 0 to 2048
[  456.134681][T18178] EXT4-fs: Ignoring removed nobh option
[  456.161354][T18178] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  456.167307][ T6447] ocfs2: Unmounting device (7,1) on (node local)
[  456.191381][T18178] ext4 filesystem being mounted at /661/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  456.228928][T18137] syz.4.2710: attempt to access beyond end of device
[  456.228928][T18137] loop4: rw=1, sector=4701696, nr_sectors = 8 limit=32768
[  456.267539][T18178] fs-verity: sha512 using implementation "sha512-avx2"
[  456.282594][    T9] usb 4-1: Using ep0 maxpacket: 32
[  456.294017][T18137] metapage_write_end_io: I/O error
[  456.299542][T18137] ERROR: (device loop4): release_metapage: metapage_write_one() failed
[  456.299542][T18137] 
[  456.305924][    T9] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  456.345441][T18137] ERROR: (device loop4): remounting filesystem as read-only
[  456.355075][    T9] usb 4-1: config 0 has no interface number 0
[  456.382229][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  456.384432][T18137] ERROR: (device loop4): diWrite: ixpxd invalid
[  456.384432][T18137] 
[  456.396549][    T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  456.413893][T18137] ERROR: (device loop4): txAbort: 
[  456.413893][T18137] 
[  456.425354][T17349] veth0_vlan: entered promiscuous mode
[  456.437604][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  456.456598][    T9] usb 4-1: Product: syz
[  456.460935][    T9] usb 4-1: Manufacturer: syz
[  456.470082][T17349] veth1_vlan: entered promiscuous mode
[  456.489217][T18137] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI
[  456.501321][T18137] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  456.509844][T18137] CPU: 1 UID: 0 PID: 18137 Comm: syz.4.2710 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) 
[  456.516494][    T9] usb 4-1: SerialNumber: syz
[  456.521922][T18137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  456.521948][T18137] RIP: 0010:metapage_write_folio+0xa1/0xca0
[  456.542484][T18137] Code: 7c 24 18 48 89 f8 48 c1 e8 03 80 3c 18 00 0f 85 b7 0b 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 5c 24 18 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 ba 0b 00 00 48 8b 03 48 89 04 24 48 83 c0 28 48
[  456.562131][T18137] RSP: 0018:ffffc9000ac9f408 EFLAGS: 00010256
[  456.568321][T18137] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000cbac000
[  456.576319][T18137] RDX: 0000000000000000 RSI: ffffffff83482c35 RDI: ffffea0000b793d8
[  456.584318][T18137] RBP: 1ffff92001593ea0 R08: 0000000000000001 R09: fffff9400016f27e
[  456.592317][T18137] R10: ffffea0000b793f7 R11: 0000000000000001 R12: ffffea0000b793c0
[  456.600313][T18137] R13: ffffc9000ac9f520 R14: 1ffff92001593e8d R15: ffffea0000b793f4
[  456.608469][T18137] FS:  00007f34643216c0(0000) GS:ffff888124859000(0000) knlGS:0000000000000000
[  456.617472][T18137] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  456.624095][T18137] CR2: 00007fec0709a000 CR3: 0000000077d7b000 CR4: 0000000000350ef0
[  456.632137][T18137] Call Trace:
[  456.635439][T18137]  <TASK>
[  456.638399][T18137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  456.644258][T18137]  ? __pfx_metapage_write_folio+0x10/0x10
[  456.644604][    T9] usb 4-1: config 0 descriptor??
[  456.650031][T18137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  456.660642][T18137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  456.666317][T18137]  ? folio_clear_dirty_for_io+0x112/0x810
[  456.671913][T17349] veth0_macvtap: entered promiscuous mode
[  456.672075][T18137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  456.683436][T18137]  metapage_write_one+0x229/0x3f0
[  456.688503][T18137]  ? __pfx_metapage_write_one+0x10/0x10
[  456.692547][    T9] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  456.694088][T18137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  456.694144][T18137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  456.694193][T18137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  456.694242][T18137]  ? noop_dirty_folio+0x96/0xb0
[  456.694298][T18137]  force_metapage+0x187/0x330
[  456.694340][T18137]  txCommit+0x2c23/0x4d40
[  456.694400][T18137]  ? __pfx_txCommit+0x10/0x10
[  456.694448][T18137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  456.694503][T18137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  456.694557][T18137]  diAllocAG+0x111c/0x2340
[  456.694613][T18137]  ? __pfx_diAllocAG+0x10/0x10
[  456.694669][T18137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  456.694718][T18137]  ? rcu_is_watching+0x12/0xc0
[  456.694767][T18137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  456.694820][T18137]  diAlloc+0x859/0x1a80
[  456.694865][T18137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  456.727945][T17349] veth1_macvtap: entered promiscuous mode
[  456.730088][T18137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  456.790083][T17349] batman_adv: batadv0: Interface activated: batadv_slave_0
[  456.791006][T18137]  ? find_held_lock+0x2b/0x80
[  456.808588][T18137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  456.814274][T18137]  ? __pfx_diAlloc+0x10/0x10
[  456.818907][T18137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  456.824602][T18137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  456.830283][T18137]  ? _raw_spin_unlock+0x28/0x50
[  456.835184][T18137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  456.840113][T17349] batman_adv: batadv0: Interface activated: batadv_slave_1
[  456.840840][T18137]  ? new_inode+0x15f/0x1c0
[  456.852484][T18137]  ialloc+0x84/0x9e0
[  456.856616][T18137]  jfs_mkdir+0x24b/0xba0
[  456.860904][T18137]  ? __pfx_jfs_mkdir+0x10/0x10
[  456.865738][T18137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  456.871419][T18137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  456.877189][T18137]  ? security_inode_permission+0xbf/0x260
[  456.882964][T18137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  456.888645][T18137]  ? inode_permission+0x156/0x630
[  456.893729][T18137]  vfs_mkdir+0x593/0x8c0
[  456.898017][T18137]  do_mkdirat+0x304/0x3e0
[  456.900013][T17349] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  456.902372][T18137]  ? __pfx_do_mkdirat+0x10/0x10
[  456.915939][T18137]  ? getname_flags.part.0+0x1c5/0x550
[  456.921397][T18137]  __x64_sys_mkdirat+0x83/0xb0
[  456.926207][T18137]  do_syscall_64+0xcd/0x4c0
[  456.930784][T18137]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.936719][T18137] RIP: 0033:0x7f346358e929
[  456.941158][T18137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  456.960811][T18137] RSP: 002b:00007f3464321038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  456.969349][T18137] RAX: ffffffffffffffda RBX: 00007f34637b5fa0 RCX: 00007f346358e929
[  456.977349][T18137] RDX: 0000000000000000 RSI: 0000200000000840 RDI: ffffffffffffff9c
[  456.985342][T18137] RBP: 00007f3463610b39 R08: 0000000000000000 R09: 0000000000000000
[  456.993338][T18137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  457.001333][T18137] R13: 0000000000000000 R14: 00007f34637b5fa0 R15: 00007ffdf01867c8
[  457.009360][T18137]  </TASK>
[  457.012389][T18137] Modules linked in:
[  457.016325][    C1] vkms_vblank_simulate: vblank timer overrun
[  457.024532][T18137] ---[ end trace 0000000000000000 ]---
[  457.033886][T17349] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  457.038807][T18193] misc userio: Begin command sent, but we're already running
[  457.042646][T17349] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  457.069222][    T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  457.085020][T17349] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  457.097169][T18137] RIP: 0010:metapage_write_folio+0xa1/0xca0
[  457.112544][T18137] Code: 7c 24 18 48 89 f8 48 c1 e8 03 80 3c 18 00 0f 85 b7 0b 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 5c 24 18 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 ba 0b 00 00 48 8b 03 48 89 04 24 48 83 c0 28 48
[  457.151443][T18176] loop6: detected capacity change from 0 to 40427
[  457.170439][T18176] F2FS-fs (loop6): build fault injection rate: 771
[  457.180877][T18176] F2FS-fs (loop6): invalid crc value
[  457.202529][    T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  457.204770][T18137] RSP: 0018:ffffc9000ac9f408 EFLAGS: 00010256
[  457.229178][T17349] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht'
[  457.232955][T18137] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000cbac000
[  457.261544][T17349] ieee80211 phy23: Selected rate control algorithm 'minstrel_ht'
[  457.268295][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  457.284536][T18137] RDX: 0000000000000000 RSI: ffffffff83482c35 RDI: ffffea0000b793d8
[  457.286001][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  457.302718][T18137] RBP: 1ffff92001593ea0 R08: 0000000000000001 R09: fffff9400016f27e
[  457.316818][T18137] R10: ffffea0000b793f7 R11: 0000000000000001 R12: ffffea0000b793c0
[  457.348033][ T3803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  457.351168][T18137] R13: ffffc9000ac9f520 R14: 1ffff92001593e8d R15: ffffea0000b793f4
[  457.358660][ T3803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  457.368291][T18137] FS:  00007f34643216c0(0000) GS:ffff888124759000(0000) knlGS:0000000000000000
[  457.383024][T18137] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  457.383041][T18176] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  457.449847][T18137] CR2: 00007f5883181178 CR3: 0000000077d7b000 CR4: 0000000000350ef0
[  457.460308][T18137] Kernel panic - not syncing: Fatal exception
[  457.466642][T18137] Kernel Offset: disabled
[  457.470993][T18137] Rebooting in 86400 seconds..