last executing test programs: 3m19.696633094s ago: executing program 3 (id=105): writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000205f14120200000000000109022400010000600009040180020300000009210604000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 3m18.342809213s ago: executing program 0 (id=106): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7ffc, 0x8, '9P2000.L'}, 0x41) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f0000001080)={[{@uni_xlateno}, {@shortname_lower}, {@shortname_winnt}, {@shortname_winnt}, {@fat=@sys_immutable}, {@uni_xlateno}, {@rodir}, {@uni_xlateno}, {@fat=@tz_utc}, {@fat=@codepage={'codepage', 0x3d, '863'}}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@utf8no}, {@shortname_winnt}, {@shortname_lower}, {@numtail}, {@rodir}]}, 0x1, 0x295, &(0x7f0000000d00)="$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") r1 = open(0x0, 0x0, 0x112) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) socket$nl_route(0x10, 0x3, 0x0) unlink(&(0x7f0000000240)='./file0/file0\x00') 3m18.321040373s ago: executing program 4 (id=107): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0040d07, &(0x7f0000000040)=0x121) write$binfmt_script(r0, &(0x7f0000000500)={'#! ', './file0/file2', [{0x20, '(\\!\xe4\\.'}], 0xa, "4ff112da3606965c4e52c4f58fd267c64d2901f1b98233c0518013014881f6407a825a21f96ec6fa3d7fa150957b6e6889c99da48e46fc341cdccdbb815745aa801f6a438bd88094d5a71950650dfceb7b84ae9b1d00f2ac181bc07d18637addc73e8b10127de9e342e489ab55125498ff905d96cd60bafcd57dff520054ddb933aa699e5ff1fd3acfee51946a9fe9c76dc23538e78f5041abd996a0f8ff4e938f48eb2705d15e209b74ca50f7bab58c24"}, 0xc9) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x800) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000040)=@generic={0x1, 0x4, 0x5}) socket$nl_sock_diag(0x10, 0x3, 0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}, {@verity_on}]}) ioctl$DVB_DVR_DMX_EXPBUF(r5, 0xc00c6f3e, &(0x7f0000000140)={0x4, 0x80000, r3}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', r6, 0x0, 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x103841, 0x186) 3m17.097900384s ago: executing program 0 (id=108): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x200841a, &(0x7f00000002c0)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0193acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417bb7f527c0bfebec112d57fc69fabb9b31ef97b2147930ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c8426803000000005c000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a3332978da70e9050417087c5ae034a735e8b448dd97014043159cbaacebfc912cf05f608e6214c04099fa311b747c37af702d134fb8eec487cfaea91150d1980464ff31cf86e3f3b950b204f6f67810c0826e4e5467c1588de9816bc627fb4662ac5fc8e38f19ec065550e5f9b16f72a91144a2e52ba9f2c6a7e2afbabc533ac731bb7ec51b8c585c2749469da331006ca4d49e136189d21ae50455834b2e75efd81c9d6352e5a814cf002f294475dab27a10d87516e405eff30", @ANYRESDEC=0x0], 0x1, 0x5547, &(0x7f0000007a00)="$eJzs3E1vG1UXAOA7TtO+/XwjxIJdR6qQEqm26rSpYBegFR8iVcTHghU4tmO5tT1R7DghKyRYIhb8EwQSK5b8Bhas2SEWIHZIIM8dU0IptLITJ+3zSOMzc2d85tyRlejMWA7AU2sh/fXnJFwKZ0MIcyGEC0nI15Niya3G8FwI4XIIofSXJSnG/xw4HUI4F0K4NEoecybFrs+vDq+s/PTGL998d+bU+S++/n52swZm7fkQQncrru92Y8xaMd4txmvDdh67N4ZFjDu694rtLMbd5kaeYbc2Pq6Wx+uteHy2tdMfxc1OrT6KrfZmPr7ViyfsD1vjPPkb7ta28+1GcyOP7X6Wx9Z+rGtvP/5t2+8PYp5Gke/DPH0YDMYxjjf3mnE+W/fyWO8NivGYN2s090ZxWMTidKGedRp5HRuTXOnj7c12b2cvHTa3++2sl65Uqi9UqjfL1e2s0Rw0b5Rr3cbNG+liqzM6rDxo1rqrrSxrdZqVetZdShdb9Xq5Wk0XbzU32rVeWq1WrleulVeWirWr6at33k07jXRxFF9u93ZOtzv9dDPbTuM7ltLlyvUXl9Ir1fTttfV0/a3bt9fW33n/1nt3Xlp7/ZXioAfKSheXry0vl6vXysvVpWMw/9H/3Uec/2CS+X9SFP0Y808muzzw73zAAB7bA/1/0P8Dh++k9/9hmv3/qKXS//93/1uavP+fqP89rv3/CZ4/TET/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw1Pph/svX8pWFuH2+GL9YDD1TbCchhFII4fd/MBdOH8g5V+SZf8jx83+r4dsk5BlG5zhTLOdCCKvF8tv/D/sqAAAAwJPrq48ufxa79fiyMOuCOErxpk3pwgdTypeEEOYXfpxSttLo5dkpJcs/36fC3pSy5Tew/jelZPGW26lpZXskc+Pw8cX7g/mEkhhKR1oOAABwJOYOhId0IZtHVw8AAACH5dNZF8BsJGH8KHP8LDj/5v39R5tnD+wDAAAATqBk1gUAAAAAhy7v//3+HwAAADzZ4u//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH+wcz+3iQNRHICfDQb2nxat9r6t7A3KSAk55hgoIE1QAmkhDVADuaWECCLsEZIjkCIxjhX0fZLHGTv6zQxweWPJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQpedqPX+8//dwac5uf5k8qwEAAABO2Vbref3HtOn/SNd/pUt/Ur+IiDIiTtXugxi1Mgcppzrz/9W7OTxF1AmHMcbp+B4R/9Px+rvrTwEAAACu12a5mjXVetNM+54Qn6nZtCl/3mTKKyKimr5kSisPzd9MYfXvexh3mdLqDaxJprBmy214+t4o1yBtg9YprWSyqL/Euld2My4AANCndiVwpgoBAADgCtz2PQH6URyb43PGcXNKDwS/tXoAAADAF1T0PQEAAACgc3X97/1/AAAAcN2a9/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQpW21nm+Wq9m5+4sP5uz2l8m3IgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4Y3/eUSAEwiAM9q7vTOb+h5UGDY1NqkD4+BuDAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICL/XlJgRAIgiiYM/530vc/rCToGUSIgIZHFbVoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICLnfvnjaOIAgD+bu/28gcQxiAXBhQkCmiIfQkJKaEAWRR8BCTLOQfDhUDigkQWyA1UyHUaBCVCSCDT5TukjqU0oUvhwkjUoN3bvawTg0+RvXuJfz9pbt6uRztv9k6Wn2dtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABK2+/FK0kRt7OXqWFcnruzs7aU9VsP9ZlbG3dns5bFrf0m+u7dg09+sr1aPTg1Uzn4pv5kAAAAOBraZX0frbiXbi5kUTKV1/9pOSar+X98LopRQw/X/Vs7a8eLL82W9f8fv99/aTTR1HCe7KLLK4P+/KOpdA5tkRPu+X1HdPI7n//upZ2/IcmH6y9up/n9bH1/+/b73Tw8Vke2AMDjOF32RVD+PJT1vSYTA+DI6FQK77L+b081mxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAHbbX45kybkXEbOdBnNnaWVvaq7+1cXe2bOdv3tyoXjO7RBoRyyuDflrjWibdtes3PlscDPpXR0F2m3efOaTgVEQc8hT7Bx+PMSbi/8cUH89obhX/HbQmI41Gg6R4fyYln4MMys/ewV+5oW9IAAA8tdKiZXX9vXRzITvXmo7456fd9f8blTjGrP/vf3L+TnWuav3fq22Fk29u9fIXc9eu33hr5fLipf6l/udvn+m90zt74dy5C3PZvZqfW46kP990mgAAADzBukWr1v/J9KP7/ycrcYxZ/3/5Q+/r6lxt9f+eHmz6NZ0JAADAUdQdRS+89vdfrT1GtLrd+GpxdfVqb/g6Oj4zfK013cd0rGjV+r893XRWAAAAQB2211u79v8vVuIYc///2Z9f/rV6zXZEnIi4EhH900tXBhfrW85Eq+MPlfOJuk2vFAAAgKacKFp1/z/Nn/9PRo88JBHx5uvDuPxfV+PU/+0Pvv2lOlf1+f+z9S1xIiUzw/uR9zMRnZmmMwIAAOBpdrxoWbH/Z7q58OlvJz/qev4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoG7/BgAA//+grDSa") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x88, 0x0, 0x1, 0x0, &(0x7f0000000000)) syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000300)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 3m17.083109827s ago: executing program 1 (id=109): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000088, &(0x7f0000000280)={[{@stripe}, {@jqfmt_vfsv1}, {@debug}, {@debug}, {@nobh}, {@nodioread_nolock}]}, 0xf9, 0x5a4, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x8541, 0x1a9) fallocate(r0, 0x10, 0x3fff, 0x8000) 3m16.862260358s ago: executing program 3 (id=110): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000180)='A') preadv(r1, &(0x7f00000033c0)=[{&(0x7f00000001c0)=""/141, 0x8d}], 0x1, 0x9, 0x0) 3m16.382033617s ago: executing program 1 (id=111): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/344], 0x6, 0x550f, &(0x7f00000089c0)="$eJzs3EtvG9UXAPA7SdP3v/8IsWDXkSqkBNVWnEcFuwCteIhUUYEFK3DsieXW9kSx44SsWLBELPgmCCRWLPkMLFizQyxA7JBAnjuGhocEihOT5veTxmfu9fWZc62q0pmJHIBzaz796Yck3AhXQgizIYTrIRTnSXkU1mN4pjxmHjuScu63iYshhKshhBuj5DFnUr71ye3hrbXvX//xy68vXbj26RffTG/XwLQ9G0Lo7sTz/W6MeSvGh+V8fdguYnd1WMb4RvdROc5j3M+2igz79fG6ehFXWnF9vrPXH8XtTr0xiq32djG/04sX7A9b4zzFBx7Wd4txM9sqYrufF7F1GOs6OIz/tx32BzFPs8z3fpE+DAbjGOezgyzuZ+dRERu9QTkf8+bN7GAUh2UsLxcaeadZ1LF1nG/6v+2Ndm/vIB1mu/123kvXqrXnq7U7ldpu3swG2Wql3m3eWU0XWp3Rssogq3fXW3ne6mTVRt5dTBdajUalVksX7mZb7XovrdWqK9WlytpieXY7feX+22mnmS6M4kvt3t6g3emn2/luGj+xmC5XV15YTG/V0jc3NtPNB/fubWy+9e7dd+6/uPHay+WiP5X1XFheWl6u1JYqy7XFc7T/D8ui04WJ7R+OJZl2AQBnz7/t/2/q/4EJOLn+f/dBCCff/wf9/0Scqf53XNYE+9/zvn84Fv0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC59e3cZ68WJ/NxfK2c/1859VQ5TkIIMyGEX/7CbLh4JOdsmWfub9bP/aGGr5JQZBhd41J5XA0hrJfHz/8/6W8BAAAAnlyff3Dz49itx5f5aRfEaYo3bWauvzehfEkIYW7+uwllmxm9PD2hZMW/7wvhYELZihtYlyeULN5yuzCpbP/I7JFw+bGQxDBzquUAAACn4mgncLpdCAAAAKfpo2kXwHQkYfwoc/wsuPjL+98fCF45MgIAAADOoGTaBQAAAAAnruj//f4fAAAAPNni7/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv7JzP7eJA1EcgJ8NXth/WrTa+7ayNyhjS9jjHiMKSBMUkANpIQ1QA7mlhAgiPA6BiEMkj20l+j7JmYxlfrxBcJgZaQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEv31Xpxe/X7um3Obt9OntEAAAAAl2yr9aL+Z5b6X5v735tbP5t+ERFlRFyau4/i01nmqMmpXp6/OX2+elXDXUSdcHiPSXN9iYg/zfX4o+tPAQAAAD6uzXI1T7P19Gc2dEH0KS3alN/+ZsorIqKaPWRKKw95vzKF1d/vcfzPlFYvYE0zhaUlt3GutDepf+7HVbvpSVOkprz4smOR2cYOAAD0aHTW9DsLAQAAoE//hi6AYRTxvJV53AqcpKbZ3vt81gMAAADeoWLoAgAAAIDO1fP/ns7/2zv/DwAAAIaRzv8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS9tqvdgsV/O2Obt9O3lGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyxP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDmd3/5PzE1ziRzr42l55Fk7dTYOjX2zo2jP4yvXwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfNHvfvk/MTXOJHOnjaXjkWTtqrF11dh70Dh6MN7+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAH+zs7OxVXGNsoeIKHjQi91ua2tv4kEJHvwThJBua+zWH20OthQxF2+Scy+iRxFBibf+Dz0nkEu85bCHCJ4jMzuzO/kBrj86s0k+H3jzvjsM875vFkK+814CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQGL47ieP00B7Fjfzc5t6D5bTfOtSnHq1vL6QtjaMqkz4ZXi5/iDrjcK+OZAAAADgb4qK+DyHsJBuLad9oZ/V/UlyT1vzfPzuKi3r+cN1f9EXtn7bfft19cTxQezROetMbK4P+xaOpNJ/cLGfbc397RTN78tm7lzj7QhofrL0wTLLnGX37+PF7rSycqyJbAODfuFD0eVD8PpT2vToTA+DMaJYK76L+j9v15gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQheFaeLqIoxDCQnMSp7b2Hiwf1z9a314o2tWHD9fD15N7prdIQgg3Vgb9i5XOZrbdvXf/1tJg0L9TffBKCKGu0d/Jp3/roykuDqGW5yP4f4L9ufzLnpF8TkhQ4w8lAABOpSRvaV2/k2wspuei+RD2fzhY/79eisOU9f/ux1c3y2OV6/9eZTOcfd3V25937967/+bK7aWb/Zv9T9+61Hu7d/nalSvXutm7kq43JgAAAPw3rbyV6//G/NH1//OlOExZ/3/xXe+r8lix+v9Yk0W/ujMBAAA4255/9c8/omPOR61W+HJpdfVOb3Qcf740OtaQ6j82l7dy/R/P150VAAAAUIXhWnRg/f96KQ5Trv8/8+NLP5fvGYcQzuXr/xeWPxtcr246M62KPyeue44AAADU61zeyuv/Sbb/vzHe8tAIIbzx2ijO/w3gVPV//P43P5XHKu//v1zdFGdSozN6HlnfCaHZqTsjAAAATrOn8pYW+78nG4uf/HL+w5b9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABV+ysAAP//+Cw/6Q==") symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) ftruncate(r1, 0xc17a) ftruncate(r1, 0x84) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xf, 0x0, &(0x7f0000000300)) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x2b}, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x2, 0x800, 0x4e22, 0x4, 0xa}, {0x10000000002, 0x0, 0x8, 0x1fffffffffffc, 0x4, 0x401, 0x0, 0x3}, {0xffffffffffffffff, 0x0, 0x0, 0x4001}, 0xfffffffe, 0x201, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010100, 0x4d6, 0x32}, 0xa, @in=@broadcast, 0x3502, 0x4, 0x2, 0xf7, 0x11, 0x20000, 0x1}}, 0xe8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x18, 0x30, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfe, {}, [{0x4}]}, 0x18}}, 0x0) memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8008000) io_submit(r0, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, &(0x7f0000000100)="07ffe86155", 0x5, 0x8000}]) 3m14.225368792s ago: executing program 0 (id=114): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0x200000d4) 3m14.177704994s ago: executing program 4 (id=115): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) open(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x22040, 0x0) link(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0\x00') 3m13.593161052s ago: executing program 1 (id=116): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x4, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x3c}}, 0x1c, 0x0}}], 0x1, 0xc040) write(0xffffffffffffffff, 0x0, 0x5) 3m13.478194619s ago: executing program 3 (id=117): ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3m12.018374405s ago: executing program 3 (id=118): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7ffc, 0x8, '9P2000.L'}, 0x41) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f0000001080)={[{@uni_xlateno}, {@shortname_lower}, {@shortname_winnt}, {@shortname_winnt}, {@fat=@sys_immutable}, {@uni_xlateno}, {@rodir}, {@uni_xlateno}, {@fat=@tz_utc}, {@fat=@codepage={'codepage', 0x3d, '863'}}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@utf8no}, {@shortname_winnt}, {@shortname_lower}, {@numtail}, {@rodir}]}, 0x1, 0x295, &(0x7f0000000d00)="$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") r1 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) unlink(&(0x7f0000000240)='./file0/file0\x00') 3m11.821728372s ago: executing program 4 (id=119): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000340)="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", 0x12d}], 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r3) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r4, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) close(r0) syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x4010, &(0x7f0000000300), 0x1, 0x9768, &(0x7f0000012f40)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fstat(r5, 0x0) 3m11.434166776s ago: executing program 0 (id=120): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x0, 0x8, 0xa5b4}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 3m11.207166385s ago: executing program 3 (id=121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0xac}, 0x1, 0x0, 0x0, 0x20044841}, 0x802) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0) listen(r1, 0x0) socket(0x28, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, '\x00', "352bfc0f38345beb42380beb8a9b6220f956db553fc75817f69b4e4047aaa9e1", '\x00', '\x00\x00\x00@\x00'}, 0x38) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) 3m10.667735587s ago: executing program 2 (id=123): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000009540)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000000c0)="a51e", 0x2}], 0x1}}], 0x1, 0x8890) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) 3m10.528561554s ago: executing program 0 (id=124): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a2701020301090223000100"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000680)={0x0, 0x11, 0x6, "7192fc3ba7ca"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m10.322203329s ago: executing program 2 (id=125): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = gettid() clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000140)={0x77359400}, 0x0) rt_sigqueueinfo(r3, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 3m10.235666726s ago: executing program 1 (id=126): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) 3m9.666109123s ago: executing program 1 (id=127): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="6e6f646973636172642c6e6f636865636b706f696e745f6d657267652c6661756c745f747970653d30303030303030303030303030303033323736372c6d656d6f72793d6c6f772c666c7573685f6d657267652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030313236322c61636c2c6e6f61636c2c636f6d70726573735f63616368652c646973636172642c6e6f657874656e745f63616368652c6e6f71756f74612c636865636b706f696e743d64697361626c652c00363101be2f2414c1ff59cf0ff87782bcde43f7989389b5df0c89a39b9879753e01c3936df8f39b60655e3609ad58e855a62cde73be8487d7f660b8da7993b53c4bea49f4e3f2d6b81984f7eeaafb913ce47a483219b0f7b60a2b1f30eb272e8137a471ec62a32d98bb77dfeb8bb0c56400"/344], 0x6, 0x550f, &(0x7f00000089c0)="$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") symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) ftruncate(r1, 0xc17a) ftruncate(r1, 0x84) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xf, 0x0, &(0x7f0000000300)) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x2b}, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x2, 0x800, 0x4e22, 0x4, 0xa}, {0x10000000002, 0x0, 0x8, 0x1fffffffffffc, 0x4, 0x401, 0x0, 0x3}, {0xffffffffffffffff, 0x0, 0x0, 0x4001}, 0xfffffffe, 0x201, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010100, 0x4d6, 0x32}, 0xa, @in=@broadcast, 0x3502, 0x4, 0x2, 0xf7, 0x11, 0x20000, 0x1}}, 0xe8) memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}) ptrace(0x10, r1) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x4, 0x2, 0x8d, 0x4, 0x3, 0x6, 0x4004, 0x1c7, 0x38, 0x25e, 0x408, 0x4, 0x20, 0x1, 0x5, 0x3ff, 0x200}, [{0x6474e551, 0x400, 0xb0, 0x7f, 0x1, 0x6, 0x3, 0x7ff}]}, 0x58) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x70bd25, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x3}, @in=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x80, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1d}, {0x0, 0xfffffffffffffffa, 0x0, 0xc722}, 0x0, 0x6e6bc0}, [@tmpl={0x104, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x21}, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x2}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3, 0x0, 0x7ff}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in=@loopback, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}]}, 0x1bc}}, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) 3m7.344701194s ago: executing program 1 (id=131): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7ffc, 0x8, '9P2000.L'}, 0x41) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f0000001080)={[{@uni_xlateno}, {@shortname_lower}, {@shortname_winnt}, {@shortname_winnt}, {@fat=@sys_immutable}, {@uni_xlateno}, {@rodir}, {@uni_xlateno}, {@fat=@tz_utc}, {@fat=@codepage={'codepage', 0x3d, '863'}}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@utf8no}, {@shortname_winnt}, {@shortname_lower}, {@numtail}, {@rodir}]}, 0x1, 0x295, &(0x7f0000000d00)="$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") r1 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) unlink(&(0x7f0000000240)='./file0/file0\x00') 3m6.554787913s ago: executing program 0 (id=132): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) unshare(0x20480) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x802) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100000020008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x22) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000080)={0x4, 0x6, 0x1, {0x6, @sliced={0x7072, [0x0, 0x2, 0x5, 0xe93, 0xa5ee, 0x0, 0x6, 0x7, 0x7, 0x3, 0xc, 0x47, 0x42d1, 0x6, 0x5, 0x104, 0x829, 0xfffd, 0x5, 0x1, 0x7, 0xffff, 0x6, 0x0, 0x1, 0x5, 0x7, 0x2, 0x32, 0xffff, 0x9c, 0xff, 0x3, 0xff5a, 0x9, 0x9, 0x4, 0x6, 0x5, 0x5, 0xf, 0x8, 0xfa3e, 0xebf4, 0x207, 0x0, 0xce, 0xfff], 0xa}}, 0x40004}) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="01002bbd7000fedbdf253000000008000300", @ANYRES32=r6, @ANYBLOB="0600360012000000060036"], 0x2c}, 0x1, 0x0, 0x0, 0x40154}, 0x1010) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r7, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000000)={0x28, r8, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x20040040) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) close(r3) 3m6.508638817s ago: executing program 2 (id=133): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0b0000000000000054001a8018000a8014000700fe8000000000000000000000000000aa300002802c000180080000000000000008000000000000000800000000000000080000000000000008000000000000000800028004"], 0x74}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r1, @ANYBLOB="003000000000000014001a80100004800c0009"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 3m4.615721394s ago: executing program 2 (id=134): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x0, 0x8, 0xa5b4}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 3m4.394789542s ago: executing program 4 (id=135): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000088, &(0x7f0000000280)={[{@stripe}, {@jqfmt_vfsv1}, {@debug}, {@debug}, {@nobh}, {@nodioread_nolock}]}, 0xf9, 0x5a4, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x8541, 0x1a9) fallocate(r0, 0x10, 0x3fff, 0x8000) 3m4.188137875s ago: executing program 3 (id=136): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x81, @private1, 0x608}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}], 0x1, 0x200040c0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009540)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000000c0)="a51e", 0x2}], 0x1}}], 0x1, 0x8890) shutdown(0xffffffffffffffff, 0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) 2m26.203794918s ago: executing program 32 (id=131): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7ffc, 0x8, '9P2000.L'}, 0x41) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f0000001080)={[{@uni_xlateno}, {@shortname_lower}, {@shortname_winnt}, {@shortname_winnt}, {@fat=@sys_immutable}, {@uni_xlateno}, {@rodir}, {@uni_xlateno}, {@fat=@tz_utc}, {@fat=@codepage={'codepage', 0x3d, '863'}}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@utf8no}, {@shortname_winnt}, {@shortname_lower}, {@numtail}, {@rodir}]}, 0x1, 0x295, &(0x7f0000000d00)="$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") r1 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) unlink(&(0x7f0000000240)='./file0/file0\x00') 1m51.148808196s ago: executing program 33 (id=132): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) unshare(0x20480) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x802) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100000020008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x22) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000080)={0x4, 0x6, 0x1, {0x6, @sliced={0x7072, [0x0, 0x2, 0x5, 0xe93, 0xa5ee, 0x0, 0x6, 0x7, 0x7, 0x3, 0xc, 0x47, 0x42d1, 0x6, 0x5, 0x104, 0x829, 0xfffd, 0x5, 0x1, 0x7, 0xffff, 0x6, 0x0, 0x1, 0x5, 0x7, 0x2, 0x32, 0xffff, 0x9c, 0xff, 0x3, 0xff5a, 0x9, 0x9, 0x4, 0x6, 0x5, 0x5, 0xf, 0x8, 0xfa3e, 0xebf4, 0x207, 0x0, 0xce, 0xfff], 0xa}}, 0x40004}) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="01002bbd7000fedbdf253000000008000300", @ANYRES32=r6, @ANYBLOB="0600360012000000060036"], 0x2c}, 0x1, 0x0, 0x0, 0x40154}, 0x1010) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r7, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000000)={0x28, r8, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x20040040) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) close(r3) 1m18.608335294s ago: executing program 34 (id=134): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x0, 0x8, 0xa5b4}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 47.173903968s ago: executing program 35 (id=136): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x81, @private1, 0x608}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}], 0x1, 0x200040c0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009540)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000000c0)="a51e", 0x2}], 0x1}}], 0x1, 0x8890) shutdown(0xffffffffffffffff, 0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) 0s ago: executing program 36 (id=135): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000088, &(0x7f0000000280)={[{@stripe}, {@jqfmt_vfsv1}, {@debug}, {@debug}, {@nobh}, {@nodioread_nolock}]}, 0xf9, 0x5a4, &(0x7f0000000c40)="$eJzs3U9oHFUYAPBvZrNN/0RTQUGlh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYgFRaUH600PHhUPHsSLR69eFM9CsUGh6UFXNjubpummbtpstmZ/P5jsezOz+703M9/LzjDDBtCzDtb/pBHPRMTZJGJwzbK+yBYebKy3vLRQvL20UEyiVjv3RxJJRNxaWig210+y130RsRgRT0fED/mIw+nqR+5qFqpz8xOj5XJpOqsPzUxeHKrOzR+5MDk6XhovTR17+ZUTJ4+fGDk6sra5t2tra/nN9fXKr1ffv/LTa9evfvnVgcXiR6NJnIqBbNnafmylxjbJx6l18493IlgXfbZcq3W7DWxeLsvzeio9FYORy7K+ldrawaF/W5oHdFCtP6K2ak0R6AGJpIce1fweUD//bU7b+f3jxunGCUg97vLSQvG9aMbva1ybiN0r5yZ7/0zuOjOpn1fv386GsiMtXo6I4b6+e4//JDv+NmP3XbXhrWokHfP96caOunf/p6vjT7QYfwaa104fUnP8W87Gv+UW8XMbjH9n24zx95u/fbph/Mv98WzL+Mlq/KRF/DQi3m4z/rU3vj250bLa5xGHonX8puT+14eHzl8ol4Ybf1vG+O7QgVc37n/E3g3iN67Z7l5pyNr+78ralLbZ/29+/Pq5xfvEf/H5++//Vtt/T0R80Gb8J2598fpGy25cTm7WvwVsdv8nkY/rbcZ/6dTBX7Kiq4YAAAAAAAAAALCF0pV72ZK0sFpO00Kh8Qzvk7E3LVeqM4fPV2anxhr3vO2PfNq802qwUU/q9ZHsftxm/ei6+rFcFjC3Z6VeKFbKY13uOwAAAAAAAAAAAAAAAAAAADwq9q17/v+v3Mrz/+t/rhrYqTb+yW9gp5P/0Lvuzv+ka+0Atp///9CzavIfepf8hx71ofyHXib/oXfJf+hd8h96l/wHAAAAAAAAAAAAAAAAAAAAAAAAAICOOHvmTH2q3V5aKNbrY31zsxOVd46MlaoThcnZYqFYmb5YGK9UxsulQrEy+V+fl1QqF4djavbS0EypOjNUnZt/a7IyO9X8TdFSvuM9AgAAAAAAAAAAAAAAAAAAgP+fgZUpSQsR+UY9TQuFiMciYn8SyfkL5dJwRDweET/n8v31+ki3Gw0AAAAAAAAAAAAAAAAAAAA7THVufmK0XC5Nd67Ql4XqYIj2C32bWTkiFre2GfVP3PS78tkG7PKm2xmF3MMdh+mjcRhvQ6GLgxIAAAAAAAAAAAAAAAAAAPSoOw/9tvuOfzrbIAAAAAAAAAAAAAAAAAAAAOhJ6e9JRNSnQ4MvDKxfuitZzq28RsS71859fGl0ZmZ6pD7/5ur8mU+y+Ue70X6gXc08TSOinscAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAHdW5+YnRcrk0/YCF/jbW6XYfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB7EvwEAAP//eF/Rsg==") r0 = openat(0xffffffffffffff9c, 0x0, 0x8541, 0x1a9) fallocate(r0, 0x10, 0x3fff, 0x8000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.249' (ED25519) to the list of known hosts. [ 57.903214][ T5594] cgroup: Unknown subsys name 'net' [ 58.144226][ T5594] cgroup: Unknown subsys name 'cpuset' [ 58.202413][ T5594] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.415750][ T5594] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.312124][ T4925] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.312249][ T4925] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.314201][ T4925] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.314471][ T4925] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.314933][ T4925] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.315359][ T4925] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.315613][ T4925] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.316277][ T4925] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.317063][ T4925] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.317770][ T5609] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.371153][ T5611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.384912][ T5611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.387593][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.389295][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.389778][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.390186][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.390460][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.391297][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.391489][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.392961][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.451710][ T5611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.453682][ T5611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.453920][ T5611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.455964][ T5611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.456478][ T5611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.507578][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.507877][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.508090][ T5607] bridge_slave_0: entered allmulticast mode [ 62.510113][ T5607] bridge_slave_0: entered promiscuous mode [ 62.551222][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.551383][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.551495][ T5607] bridge_slave_1: entered allmulticast mode [ 62.553390][ T5607] bridge_slave_1: entered promiscuous mode [ 62.650370][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.677189][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.716241][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.716415][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.716613][ T5616] bridge_slave_0: entered allmulticast mode [ 62.717651][ T5616] bridge_slave_0: entered promiscuous mode [ 62.753476][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.753717][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.753905][ T5616] bridge_slave_1: entered allmulticast mode [ 62.755080][ T5616] bridge_slave_1: entered promiscuous mode [ 62.773896][ T5607] team0: Port device team_slave_0 added [ 62.774174][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.775050][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.775405][ T5608] bridge_slave_0: entered allmulticast mode [ 62.777296][ T5608] bridge_slave_0: entered promiscuous mode [ 62.822945][ T5607] team0: Port device team_slave_1 added [ 62.823252][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.823387][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.823512][ T5608] bridge_slave_1: entered allmulticast mode [ 62.824571][ T5608] bridge_slave_1: entered promiscuous mode [ 62.832841][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.833105][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.833309][ T5615] bridge_slave_0: entered allmulticast mode [ 62.835111][ T5615] bridge_slave_0: entered promiscuous mode [ 62.879901][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.880864][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.881102][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.881459][ T5615] bridge_slave_1: entered allmulticast mode [ 62.884001][ T5615] bridge_slave_1: entered promiscuous mode [ 62.927136][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.935483][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.948944][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.949097][ T5621] bridge_slave_0: entered allmulticast mode [ 62.950098][ T5621] bridge_slave_0: entered promiscuous mode [ 62.952998][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.953011][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.953034][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.958873][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.986785][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.987009][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.987203][ T5621] bridge_slave_1: entered allmulticast mode [ 62.989046][ T5621] bridge_slave_1: entered promiscuous mode [ 62.991912][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.991925][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.991949][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.997072][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.014840][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.051905][ T5616] team0: Port device team_slave_0 added [ 63.057204][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.088782][ T5616] team0: Port device team_slave_1 added [ 63.106582][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.111464][ T5608] team0: Port device team_slave_0 added [ 63.151045][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.153699][ T5608] team0: Port device team_slave_1 added [ 63.168667][ T5615] team0: Port device team_slave_0 added [ 63.197012][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.197022][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.197036][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.199188][ T5615] team0: Port device team_slave_1 added [ 63.204429][ T5607] hsr_slave_0: entered promiscuous mode [ 63.222759][ T5607] hsr_slave_1: entered promiscuous mode [ 63.252630][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.252645][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.252667][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.271479][ T5621] team0: Port device team_slave_0 added [ 63.332245][ T5611] Bluetooth: hci0: command tx timeout [ 63.412185][ T5611] Bluetooth: hci2: command tx timeout [ 63.412213][ T5611] Bluetooth: hci3: command tx timeout [ 63.412229][ T5611] Bluetooth: hci1: command tx timeout [ 63.492229][ T5609] Bluetooth: hci4: command tx timeout [ 64.013567][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.013577][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.013591][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.031223][ T5621] team0: Port device team_slave_1 added [ 64.093398][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.093408][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.093422][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.102771][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.102786][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.102810][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.135787][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.135802][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.135825][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.185466][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.185482][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.185506][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.214274][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.214290][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.214314][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.220583][ T5616] hsr_slave_0: entered promiscuous mode [ 64.222277][ T5616] hsr_slave_1: entered promiscuous mode [ 64.223903][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 64.223938][ T5616] Cannot create hsr debugfs directory [ 64.300666][ T5608] hsr_slave_0: entered promiscuous mode [ 64.302778][ T5608] hsr_slave_1: entered promiscuous mode [ 64.304073][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 64.304090][ T5608] Cannot create hsr debugfs directory [ 64.391834][ T5615] hsr_slave_0: entered promiscuous mode [ 64.398498][ T5615] hsr_slave_1: entered promiscuous mode [ 64.399174][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 64.399191][ T5615] Cannot create hsr debugfs directory [ 64.469858][ T5621] hsr_slave_0: entered promiscuous mode [ 64.470733][ T5621] hsr_slave_1: entered promiscuous mode [ 64.471443][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 64.471459][ T5621] Cannot create hsr debugfs directory [ 64.770046][ T5607] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.794565][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.800083][ T5607] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.834388][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.839544][ T5607] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.855989][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.861048][ T5607] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.894450][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.930762][ T5616] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.954734][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.956871][ T5616] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.994698][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.997715][ T5616] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.034416][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.039586][ T5616] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.074387][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.120836][ T5608] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.154315][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.160451][ T5608] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.194212][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.197089][ T5608] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.234969][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.241337][ T5608] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.274876][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.324342][ T5615] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.354893][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.412176][ T5609] Bluetooth: hci0: command tx timeout [ 65.433241][ T5615] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.474331][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.483190][ T5615] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.492134][ T5609] Bluetooth: hci3: command tx timeout [ 65.502267][ T5609] Bluetooth: hci1: command tx timeout [ 65.502292][ T5609] Bluetooth: hci2: command tx timeout [ 65.514930][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.520990][ T5615] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.535910][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.572098][ T5611] Bluetooth: hci4: command tx timeout [ 65.598145][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.600328][ T5621] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.634476][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.640699][ T5621] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.674727][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.680572][ T5621] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.714530][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.718524][ T5621] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.754312][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.792595][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.824573][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.824711][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.843889][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.866493][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.866564][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.918092][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.949120][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.951927][ T1023] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.967030][ T1023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.988873][ T1023] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.988952][ T1023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.037717][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.044666][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.066657][ T1023] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.066735][ T1023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.106179][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.106315][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.154914][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.191873][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.192286][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.199286][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.225912][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.226677][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.296191][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.296268][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.324770][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.367421][ T1023] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.369013][ T1023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.425735][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.425826][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.843598][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.971813][ T5607] veth0_vlan: entered promiscuous mode [ 66.995110][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.011021][ T5607] veth1_vlan: entered promiscuous mode [ 67.110564][ T5607] veth0_macvtap: entered promiscuous mode [ 67.144423][ T5607] veth1_macvtap: entered promiscuous mode [ 67.209188][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.221730][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.231204][ T68] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.231351][ T68] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.231381][ T68] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.231410][ T68] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.361667][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.448132][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.478272][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.478295][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.492342][ T5611] Bluetooth: hci0: command tx timeout [ 67.506212][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.550161][ T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.550179][ T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.572267][ T5611] Bluetooth: hci2: command tx timeout [ 67.572291][ T5611] Bluetooth: hci1: command tx timeout [ 67.572306][ T5611] Bluetooth: hci3: command tx timeout [ 67.642398][ T5616] veth0_vlan: entered promiscuous mode [ 67.652402][ T5609] Bluetooth: hci4: command tx timeout [ 67.661362][ T5608] veth0_vlan: entered promiscuous mode [ 67.685822][ T5616] veth1_vlan: entered promiscuous mode [ 67.707324][ T5621] veth0_vlan: entered promiscuous mode [ 67.719035][ T5608] veth1_vlan: entered promiscuous mode [ 67.747946][ T5795] loop2: detected capacity change from 0 to 64 [ 67.778573][ T5615] veth0_vlan: entered promiscuous mode [ 67.794642][ T5621] veth1_vlan: entered promiscuous mode [ 67.818421][ T5615] veth1_vlan: entered promiscuous mode [ 67.884252][ T5616] veth0_macvtap: entered promiscuous mode [ 67.912512][ T5608] veth0_macvtap: entered promiscuous mode [ 67.922229][ T5616] veth1_macvtap: entered promiscuous mode [ 67.950443][ T5608] veth1_macvtap: entered promiscuous mode [ 67.989422][ T5621] veth0_macvtap: entered promiscuous mode [ 68.006653][ T5621] veth1_macvtap: entered promiscuous mode [ 68.017048][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.037715][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.038479][ T5615] veth0_macvtap: entered promiscuous mode [ 68.066823][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.084039][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.084938][ T5615] veth1_macvtap: entered promiscuous mode [ 68.099748][ T1023] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.101345][ T1023] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.106614][ T1023] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.115738][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.120885][ T1023] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.135620][ T1023] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.192127][ T1023] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.250513][ T5804] loop2: detected capacity change from 0 to 32768 [ 68.251230][ T5804] btrfs: Deprecated parameter 'usebackuproot' [ 68.251264][ T5804] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 68.252340][ T5804] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.9 (5804) [ 68.261564][ T5804] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 68.261615][ T5804] BTRFS info (device loop2): using crc32c checksum algorithm [ 68.313212][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.313281][ T1023] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.349345][ T1023] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.374636][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.386912][ T68] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 68.387037][ T5804] BTRFS error (device loop2): failed to load root extent [ 68.387082][ T5804] BTRFS warning (device loop2): try to load backup roots slot 1 [ 68.394149][ T4370] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 68.394245][ T5804] BTRFS warning (device loop2): couldn't read tree root [ 68.394266][ T5804] BTRFS warning (device loop2): try to load backup roots slot 2 [ 68.402099][ T4370] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 68.402171][ T5804] BTRFS warning (device loop2): couldn't read tree root [ 68.402190][ T5804] BTRFS warning (device loop2): try to load backup roots slot 3 [ 68.467606][ T5804] BTRFS info (device loop2): rebuilding free space tree [ 68.476580][ T5804] BTRFS info (device loop2): checking UUID tree [ 68.492396][ T5804] BTRFS info (device loop2): setting nodatasum [ 68.492424][ T5804] BTRFS info (device loop2): setting nodatacow [ 68.492438][ T5804] BTRFS info (device loop2): enabling ssd optimizations [ 68.492457][ T5804] BTRFS info (device loop2): turning on async discard [ 68.492470][ T5804] BTRFS info (device loop2): enabling free space tree [ 68.492484][ T5804] BTRFS info (device loop2): force clearing of disk cache [ 68.492499][ T5804] BTRFS info (device loop2): enabling auto defrag [ 68.492517][ T5804] BTRFS info (device loop2): trying to use backup root at mount time [ 68.492787][ T1023] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.570229][ T1023] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.581594][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.637984][ T1023] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.681941][ T1023] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.774519][ T1023] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.781600][ T1023] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.793663][ T1023] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.799395][ T1023] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.817853][ T1059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.817872][ T1059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.986485][ T4227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.986504][ T4227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.989546][ T5607] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 69.031780][ T4227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.031798][ T4227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.078766][ T1059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.078783][ T1059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.152336][ T5823] loop2: detected capacity change from 0 to 256 [ 69.154958][ T5823] exfat: Deprecated parameter 'utf8' [ 69.155056][ T5823] exfat: Deprecated parameter 'namecase' [ 69.155081][ T5823] exfat: Deprecated parameter 'namecase' [ 69.169864][ T5823] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d) [ 69.198155][ T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.198173][ T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.251946][ T1059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.252080][ T1059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.326553][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.326571][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.406467][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.406487][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.582359][ T5609] Bluetooth: hci0: command tx timeout [ 69.662276][ T5611] Bluetooth: hci1: command tx timeout [ 69.662388][ T5611] Bluetooth: hci2: command tx timeout [ 69.662540][ T5609] Bluetooth: hci3: command tx timeout [ 69.733531][ T60] Bluetooth: hci4: command tx timeout [ 70.124166][ T5825] loop4: detected capacity change from 0 to 32768 [ 70.143502][ T5825] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5 (5825) [ 70.167028][ T5825] BTRFS info (device loop4 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 70.167061][ T5825] BTRFS info (device loop4 state S): using crc32c checksum algorithm [ 70.246058][ T68] BTRFS warning (device loop4 state ES): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0, ignored [ 70.246953][ T1059] BTRFS warning (device loop4 state ES): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x13388982 level 0, ignored [ 70.249928][ T68] BTRFS warning (device loop4 state ES): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x28b693f7 level 0, ignored [ 70.250371][ T5825] BTRFS error (device loop4 state ES): failed to load root free space [ 70.324773][ T44] BTRFS warning (device loop4 state ES): checksum verify failed on logical 5267456 mirror 1 wanted 0x22fa3277 found 0x0d9b21b0 level 0, ignored [ 70.324941][ T5825] BTRFS info (device loop4 state ES): enabling ssd optimizations [ 70.324962][ T5825] BTRFS info (device loop4 state ES): enabling free space tree [ 70.324979][ T5825] BTRFS info (device loop4 state ES): ignoring bad roots [ 70.324994][ T5825] BTRFS info (device loop4 state ES): ignoring meta csums [ 70.325027][ T5825] BTRFS info (device loop4 state ES): force zlib compression, level 3 [ 70.376285][ T5859] Bluetooth: MGMT ver 1.23 [ 70.376324][ T5859] Bluetooth: hci0: invalid len left 7, exp >= 13 [ 70.582657][ T5616] BTRFS info (device loop4 state ES): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 70.952263][ T5735] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 71.069832][ T5861] loop1: detected capacity change from 0 to 40427 [ 71.090058][ T5861] F2FS-fs (loop1): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 71.090079][ T5861] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 71.091794][ T5861] F2FS-fs (loop1): Image doesn't support compression [ 71.091816][ T5861] F2FS-fs (loop1): build fault injection rate: 690 [ 71.091824][ T5861] F2FS-fs (loop1): build fault injection type: 0x35f7 [ 71.132953][ T5735] usb 3-1: config 3 has an invalid interface number: 3 but max is 1 [ 71.132979][ T5735] usb 3-1: config 3 has an invalid interface number: 50 but max is 1 [ 71.132999][ T5735] usb 3-1: config 3 has no interface number 0 [ 71.133012][ T5735] usb 3-1: config 3 has no interface number 1 [ 71.133108][ T5735] usb 3-1: config 3 interface 3 has no altsetting 0 [ 71.133135][ T5735] usb 3-1: config 3 interface 50 has no altsetting 0 [ 71.134672][ T5861] F2FS-fs (loop1): invalid crc value [ 71.137639][ T5735] usb 3-1: New USB device found, idVendor=04da, idProduct=250d, bcdDevice=1d.43 [ 71.137667][ T5735] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.137686][ T5735] usb 3-1: Product: syz [ 71.137700][ T5735] usb 3-1: Manufacturer: syz [ 71.137713][ T5735] usb 3-1: SerialNumber: syz [ 71.260289][ T5865] loop0: detected capacity change from 0 to 40427 [ 71.276293][ T5865] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 71.276381][ T5865] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 71.934592][ T5735] usb 3-1: unknown number of interfaces: 2 [ 71.959936][ T5735] usb 3-1: USB disconnect, device number 2 [ 72.019802][ T5861] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 72.036692][ T5861] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0 [ 72.036714][ T5861] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 72.036730][ T5861] F2FS-fs (loop1): Start checkpoint disabled! [ 72.050594][ T5861] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0 [ 72.068421][ T5861] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 72.068447][ T5861] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 72.510933][ T5865] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 72.535333][ T5865] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 72.535350][ T5865] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 72.630465][ T5891] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 72.843980][ T5898] loop4: detected capacity change from 0 to 64 [ 73.421090][ T5898] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 73.615069][ T5616] syz-executor: attempt to access beyond end of device [ 73.615069][ T5616] loop4: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 73.615123][ T5616] Buffer I/O error on dev loop4, logical block 134217734, async page read [ 73.615819][ T5616] syz-executor: attempt to access beyond end of device [ 73.615819][ T5616] loop4: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 73.615875][ T5616] Buffer I/O error on dev loop4, logical block 134217734, async page read [ 73.629567][ T5616] Trying to free block not in datazone [ 74.163810][ T5904] loop2: detected capacity change from 0 to 40427 [ 74.177711][ T5904] F2FS-fs (loop2): build fault injection rate: 14 [ 74.177726][ T5904] F2FS-fs (loop2): build fault injection type: 0x0 [ 74.179384][ T5904] F2FS-fs (loop2): invalid crc value [ 74.383036][ T5904] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 74.384557][ T5904] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 74.533018][ T5921] netlink: 24 bytes leftover after parsing attributes in process `syz.0.30'. [ 74.861985][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 75.201763][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.37'. [ 75.207721][ T5923] netlink: 20 bytes leftover after parsing attributes in process `syz.4.37'. [ 75.223191][ T38] audit: type=1800 audit(1781560407.607:2): pid=5904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.33" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 75.675401][ T5607] syz-executor: attempt to access beyond end of device [ 75.675401][ T5607] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 75.676207][ T5607] CPU: 1 UID: 0 PID: 5607 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 75.676231][ T5607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 75.676250][ T5607] Call Trace: [ 75.676260][ T5607] [ 75.676268][ T5607] dump_stack_lvl+0xe8/0x150 [ 75.676296][ T5607] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 75.676327][ T5607] f2fs_write_end_io+0x124b/0x1710 [ 75.676359][ T5607] __submit_merged_bio+0x258/0x6a0 [ 75.676377][ T5607] ? rcu_is_watching+0x15/0xb0 [ 75.676398][ T5607] __submit_merged_write_cond+0x3c9/0x4e0 [ 75.676432][ T5607] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 75.676465][ T5607] ? folio_clear_dirty_for_io+0x1bf/0x810 [ 75.676499][ T5607] f2fs_write_data_pages+0x2a27/0x36f0 [ 75.676536][ T5607] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 75.676578][ T5607] ? do_raw_spin_lock+0x12b/0x2f0 [ 75.676605][ T5607] ? trace_irq_enable+0x3b/0x140 [ 75.676630][ T5607] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 75.676656][ T5607] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 75.676676][ T5607] ? preempt_count_add+0x91/0x190 [ 75.676697][ T5607] ? trace_irq_enable+0x3b/0x140 [ 75.676722][ T5607] ? rt_spin_unlock+0x160/0x200 [ 75.676741][ T5607] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 75.676763][ T5607] do_writepages+0x338/0x560 [ 75.676789][ T5607] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 75.676808][ T5607] ? lock_release+0x4b/0x3c0 [ 75.676832][ T5607] ? filemap_get_folios_tag+0x639/0x720 [ 75.676858][ T5607] filemap_fdatawrite+0x1ec/0x2f0 [ 75.676886][ T5607] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 75.676929][ T5607] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 75.676953][ T5607] ? rt_spin_unlock+0x160/0x200 [ 75.676974][ T5607] f2fs_sync_dirty_inodes+0x30e/0x830 [ 75.677003][ T5607] f2fs_write_checkpoint+0xa3d/0x2710 [ 75.677039][ T5607] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 75.677084][ T5607] kill_f2fs_super+0x2f6/0x700 [ 75.677109][ T5607] ? __pfx_kill_f2fs_super+0x10/0x10 [ 75.677135][ T5607] ? trace_irq_enable+0x3b/0x140 [ 75.677165][ T5607] deactivate_locked_super+0xbc/0x130 [ 75.677195][ T5607] cleanup_mnt+0x3d3/0x460 [ 75.677221][ T5607] task_work_run+0x1d9/0x270 [ 75.677246][ T5607] ? __pfx_task_work_run+0x10/0x10 [ 75.677270][ T5607] ? rcu_is_watching+0x15/0xb0 [ 75.677289][ T5607] exit_to_user_mode_loop+0x1fa/0x730 [ 75.677314][ T5607] ? rcu_is_watching+0x15/0xb0 [ 75.677331][ T5607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.677351][ T5607] do_syscall_64+0x353/0x580 [ 75.677376][ T5607] ? trace_irq_disable+0x3b/0x140 [ 75.677399][ T5607] ? clear_bhb_loop+0x40/0x90 [ 75.677419][ T5607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.677437][ T5607] RIP: 0033:0x7f276a62e097 [ 75.677461][ T5607] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 75.677476][ T5607] RSP: 002b:00007ffe48b23098 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 75.677496][ T5607] RAX: 0000000000000000 RBX: 00007f276a6c21ca RCX: 00007f276a62e097 [ 75.677509][ T5607] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe48b23150 [ 75.677520][ T5607] RBP: 00007ffe48b23150 R08: 00007ffe48b24150 R09: 00000000ffffffff [ 75.677533][ T5607] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe48b241e0 [ 75.677545][ T5607] R13: 00007f276a6c21ca R14: 000000000001250a R15: 00007ffe48b24220 [ 75.677565][ T5607] [ 75.702897][ T5607] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 75.940895][ T5937] loop4: detected capacity change from 0 to 1024 [ 75.943116][ T5937] EXT4-fs: Ignoring removed nobh option [ 75.993327][ T5739] loop2: lost filesystem error report for type 5 error -108 [ 76.196449][ T5937] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002] [ 76.196596][ T5937] System zones: 0-1, 3-8 [ 76.218910][ T5937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 76.224821][ T5937] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.507859][ T92] kworker/u8:5: attempt to access beyond end of device [ 76.507859][ T92] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 76.507908][ T92] CPU: 1 UID: 0 PID: 92 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 76.507929][ T92] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 76.507939][ T92] Workqueue: writeback wb_workfn (flush-7:1) [ 76.507974][ T92] Call Trace: [ 76.507981][ T92] [ 76.507987][ T92] dump_stack_lvl+0xe8/0x150 [ 76.508011][ T92] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 76.508041][ T92] f2fs_write_end_io+0x124b/0x1710 [ 76.508074][ T92] __submit_merged_bio+0x258/0x6a0 [ 76.508084][ T92] ? rcu_is_watching+0x15/0xb0 [ 76.508095][ T92] __submit_merged_write_cond+0x3c9/0x4e0 [ 76.508116][ T92] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 76.508146][ T92] ? folio_clear_dirty_for_io+0x1bf/0x810 [ 76.508177][ T92] f2fs_write_data_pages+0x2a27/0x36f0 [ 76.508203][ T92] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 76.508220][ T92] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 76.508240][ T92] ? rtlock_slowlock_locked+0xfb/0x3c20 [ 76.508257][ T92] ? do_raw_spin_lock+0x12b/0x2f0 [ 76.508272][ T92] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 76.508296][ T92] ? rcu_is_watching+0x15/0xb0 [ 76.508313][ T92] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 76.508330][ T92] do_writepages+0x338/0x560 [ 76.508353][ T92] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 76.508375][ T92] ? rcu_is_watching+0x15/0xb0 [ 76.508394][ T92] __writeback_single_inode+0x12e/0xf90 [ 76.508418][ T92] writeback_sb_inodes+0x9db/0x1ab0 [ 76.508429][ T92] ? rcu_is_watching+0x15/0xb0 [ 76.508440][ T92] ? trace_irq_enable+0x3b/0x140 [ 76.508454][ T92] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 76.508474][ T92] ? rcu_is_watching+0x15/0xb0 [ 76.508482][ T92] ? queue_io+0x2c2/0x450 [ 76.508493][ T92] wb_writeback+0x41c/0xad0 [ 76.508503][ T92] ? queue_io+0x2c1/0x450 [ 76.508513][ T92] ? __pfx_wb_writeback+0x10/0x10 [ 76.508523][ T92] ? rcu_is_watching+0x15/0xb0 [ 76.508535][ T92] wb_workfn+0x437/0x10f0 [ 76.508552][ T92] ? __pfx_wb_workfn+0x10/0x10 [ 76.508568][ T92] ? hrtimer_start_range_ns_common+0x818/0xb90 [ 76.508579][ T92] ? rcu_is_watching+0x15/0xb0 [ 76.508589][ T92] ? do_raw_spin_lock+0x12b/0x2f0 [ 76.508601][ T92] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 76.508612][ T92] ? rcu_is_watching+0x15/0xb0 [ 76.508621][ T92] ? process_one_work+0x8cd/0x12b0 [ 76.508635][ T92] ? rcu_is_watching+0x15/0xb0 [ 76.508644][ T92] ? lock_acquire+0x5f/0x350 [ 76.508657][ T92] ? process_one_work+0x8cd/0x12b0 [ 76.508671][ T92] ? rcu_is_watching+0x15/0xb0 [ 76.508680][ T92] ? process_one_work+0x8cd/0x12b0 [ 76.508694][ T92] ? process_one_work+0x8cd/0x12b0 [ 76.508708][ T92] process_one_work+0x93a/0x12b0 [ 76.508726][ T92] ? __pfx_process_one_work+0x10/0x10 [ 76.508739][ T92] ? do_raw_spin_lock+0x12b/0x2f0 [ 76.508752][ T92] ? assign_work+0x3cf/0x5d0 [ 76.508767][ T92] worker_thread+0xb05/0x10d0 [ 76.508781][ T92] kthread+0x388/0x470 [ 76.508793][ T92] ? __pfx_worker_thread+0x10/0x10 [ 76.508801][ T92] ? __pfx_kthread+0x10/0x10 [ 76.508812][ T92] ret_from_fork+0x514/0xb70 [ 76.508825][ T92] ? __pfx_ret_from_fork+0x10/0x10 [ 76.508837][ T92] ? __switch_to+0xc89/0x1420 [ 76.508848][ T92] ? __pfx_kthread+0x10/0x10 [ 76.508859][ T92] ret_from_fork_asm+0x1a/0x30 [ 76.508876][ T92] [ 76.509070][ T92] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 76.511559][ T5739] loop1: lost filesystem error report for type 5 error -108 [ 76.531729][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 76.633711][ T1218] cfg80211: failed to load regulatory.db [ 77.062101][ T5739] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 77.319073][ T5739] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 77.319132][ T5739] usb 4-1: config 0 has no interface number 0 [ 77.319287][ T5739] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 77.319330][ T5739] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.319381][ T5739] usb 4-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.319437][ T5739] usb 4-1: config 0 interface 1 has no altsetting 0 [ 77.319552][ T5739] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 77.319612][ T5739] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.614311][ T5739] usb 4-1: config 0 descriptor?? [ 77.669701][ T5955] loop2: detected capacity change from 0 to 2048 [ 77.698845][ T5955] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.698930][ T5955] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.840012][ T5607] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.942250][ T32] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.033515][ T5958] loop1: detected capacity change from 0 to 32768 [ 78.084304][ T5958] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 78.097594][ T32] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 78.097623][ T32] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 78.101052][ T32] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 78.101082][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.101101][ T32] usb 1-1: Product: syz [ 78.101115][ T32] usb 1-1: Manufacturer: syz [ 78.101164][ T32] usb 1-1: SerialNumber: syz [ 78.128115][ T5958] XFS (loop1): Ending clean mount [ 78.305040][ T32] usb 1-1: config 0 descriptor?? [ 78.314846][ T5739] input: HID 145f:0212 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:145F:0212.0001/input/input5 [ 78.335526][ T32] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 78.374562][ T5608] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 78.393075][ T5739] input: HID 145f:0212 Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:145F:0212.0001/input/input6 [ 78.449045][ T5739] uclogic 0003:145F:0212.0001: input,hidraw0: USB HID v4.06 Keypad [HID 145f:0212] on usb-dummy_hcd.3-1/input1 [ 78.493241][ T5739] usb 4-1: USB disconnect, device number 2 [ 78.616675][ T5963] loop4: detected capacity change from 0 to 40427 [ 78.617872][ T5963] F2FS-fs: heap/no_heap options were deprecated [ 78.620862][ T5963] F2FS-fs (loop4): build fault injection rate: 19 [ 78.620882][ T5963] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 78.621905][ T5963] F2FS-fs (loop4): invalid crc value [ 78.654490][ T5963] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa00/0x18c0 [ 78.716239][ T5980] fido_id[5980]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 78.899647][ T5963] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0 [ 78.909325][ T5963] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 78.914632][ T5963] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 78.927723][ T5963] syz.4.48: attempt to access beyond end of device [ 78.927723][ T5963] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 78.929027][ T5963] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3a1/0xdc0 [ 78.935852][ T5963] F2FS-fs (loop4): inject slab alloc in f2fs_alloc_inode of alloc_inode+0x6a/0x1b0 [ 78.938508][ T5963] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3a1/0xdc0 [ 78.941147][ T5963] F2FS-fs (loop4): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8c1/0xdf0 [ 78.941198][ T5963] F2FS-fs (loop4): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0] [ 78.941308][ T5963] CPU: 0 UID: 0 PID: 5963 Comm: syz.4.48 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 78.941342][ T5963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 78.941355][ T5963] Call Trace: [ 78.941362][ T5963] [ 78.941369][ T5963] dump_stack_lvl+0xe8/0x150 [ 78.941396][ T5963] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 78.941430][ T5963] f2fs_unlink+0x4a6/0xb00 [ 78.941450][ T5963] ? __pfx_f2fs_unlink+0x10/0x10 [ 78.941467][ T5963] ? __pfx_f2fs_empty_dir+0x10/0x10 [ 78.941493][ T5963] vfs_rmdir+0x3e9/0x6b0 [ 78.941520][ T5963] ? bpf_lsm_path_rmdir+0x9/0x20 [ 78.941541][ T5963] filename_rmdir+0x292/0x520 [ 78.941567][ T5963] ? __might_fault+0xcb/0x130 [ 78.941590][ T5963] ? __pfx_filename_rmdir+0x10/0x10 [ 78.941621][ T5963] ? do_getname+0x151/0x250 [ 78.941640][ T5963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.941661][ T5963] __se_sys_rmdir+0x2e/0x140 [ 78.941688][ T5963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.941707][ T5963] do_syscall_64+0x174/0x580 [ 78.941734][ T5963] ? trace_irq_disable+0x3b/0x140 [ 78.941760][ T5963] ? clear_bhb_loop+0x40/0x90 [ 78.941783][ T5963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.941802][ T5963] RIP: 0033:0x7f7a15c5ce59 [ 78.941818][ T5963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.941833][ T5963] RSP: 002b:00007f7a13eb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 78.941855][ T5963] RAX: ffffffffffffffda RBX: 00007f7a15ed5fa0 RCX: 00007f7a15c5ce59 [ 78.941870][ T5963] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400 [ 78.941882][ T5963] RBP: 00007f7a15cf2d6f R08: 0000000000000000 R09: 0000000000000000 [ 78.941894][ T5963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.941905][ T5963] R13: 00007f7a15ed6038 R14: 00007f7a15ed5fa0 R15: 00007ffda7fb5ed8 [ 78.941928][ T5963] [ 78.949155][ T5963] F2FS-fs (loop4): Stopped filesystem due to reason: 5 [ 78.949285][ T5963] F2FS-fs (loop4): f2fs_evict_inode: inode is dirty, ino:10 [ 78.968078][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.50'. [ 78.970717][ T5988] netlink: 20 bytes leftover after parsing attributes in process `syz.2.50'. [ 79.335208][ T5997] loop2: detected capacity change from 0 to 16 [ 79.351863][ T5997] erofs (device loop2): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 79.352104][ T5997] erofs (device loop2): mounted with root inode @ nid 36. [ 80.289335][ T6009] loop2: detected capacity change from 0 to 1024 [ 80.468316][ T32] gspca_sunplus: reg_r err -71 [ 80.468564][ T32] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 80.477783][ T32] usb 1-1: USB disconnect, device number 2 [ 80.915820][ T6013] tmpfs: Bad value for 'mpol' [ 80.917127][ T6013] Zero length message leads to an empty skb [ 82.475800][ T60] Bluetooth: hci0: unexpected event 0x03 length: 12 > 11 [ 83.365302][ T6034] loop0: detected capacity change from 0 to 16 [ 83.387113][ T6034] erofs (device loop0): mounted with root inode @ nid 36. [ 83.590784][ T6032] loop3: detected capacity change from 0 to 256 [ 85.264712][ T32] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 85.264958][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 85.516873][ T6056] tmpfs: Bad value for 'mpol' [ 85.622062][ T32] usb 4-1: device descriptor read/64, error -32 [ 86.016968][ T32] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 86.100735][ T60] Bluetooth: hci1: unexpected event 0x03 length: 12 > 11 [ 86.101375][ T5739] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 86.234400][ T32] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 86.234458][ T32] usb 4-1: config 0 has no interface number 0 [ 86.234669][ T32] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 86.234724][ T32] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.234794][ T32] usb 4-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.234870][ T32] usb 4-1: config 0 interface 1 has no altsetting 0 [ 86.234997][ T32] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 86.235051][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.332374][ T5739] usb 5-1: Using ep0 maxpacket: 16 [ 86.373351][ T5739] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.373589][ T5739] usb 5-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 86.373655][ T5739] usb 5-1: config 0 interface 0 has no altsetting 0 [ 86.373773][ T5739] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 86.373826][ T5739] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.486927][ T32] usb 4-1: config 0 descriptor?? [ 86.496893][ T5739] usb 5-1: config 0 descriptor?? [ 86.516939][ T5739] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 86.860912][ T6069] loop2: detected capacity change from 0 to 16 [ 87.077239][ T6069] erofs (device loop2): mounted with root inode @ nid 36. [ 87.729334][ T6075] loop2: detected capacity change from 0 to 40427 [ 87.744268][ T6075] F2FS-fs (loop2): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 87.744297][ T6075] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 87.749141][ T6075] F2FS-fs (loop2): Image doesn't support compression [ 87.749164][ T6075] F2FS-fs (loop2): build fault injection rate: 690 [ 87.749178][ T6075] F2FS-fs (loop2): build fault injection type: 0x35f7 [ 87.762248][ T32] uclogic 0003:145F:0212.0002: failed retrieving string descriptor #100: -71 [ 87.762294][ T32] uclogic 0003:145F:0212.0002: failed retrieving pen parameters: -71 [ 87.762309][ T32] uclogic 0003:145F:0212.0002: pen probing failed: -71 [ 87.762325][ T32] uclogic 0003:145F:0212.0002: failed probing parameters: -71 [ 87.762392][ T32] uclogic 0003:145F:0212.0002: probe with driver uclogic failed with error -71 [ 87.771208][ T6075] F2FS-fs (loop2): invalid crc value [ 87.853403][ T6075] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 87.859987][ T6075] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0 [ 87.860014][ T6075] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 87.860040][ T6075] F2FS-fs (loop2): Start checkpoint disabled! [ 87.914812][ T6075] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0 [ 87.922932][ T6075] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 87.922958][ T6075] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 87.944959][ T32] usb 4-1: USB disconnect, device number 4 [ 89.358840][ T5739] usb 5-1: USB disconnect, device number 2 [ 89.435802][ T4370] kworker/u8:16: attempt to access beyond end of device [ 89.435802][ T4370] loop2: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 89.435855][ T4370] CPU: 1 UID: 0 PID: 4370 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 89.435878][ T4370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 89.435888][ T4370] Workqueue: writeback wb_workfn (flush-7:2) [ 89.435924][ T4370] Call Trace: [ 89.435931][ T4370] [ 89.435939][ T4370] dump_stack_lvl+0xe8/0x150 [ 89.435966][ T4370] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 89.435998][ T4370] f2fs_write_end_io+0x124b/0x1710 [ 89.436030][ T4370] __submit_merged_bio+0x258/0x6a0 [ 89.436060][ T4370] ? rcu_is_watching+0x15/0xb0 [ 89.436081][ T4370] __submit_merged_write_cond+0x3c9/0x4e0 [ 89.436116][ T4370] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 89.436151][ T4370] ? folio_clear_dirty_for_io+0x1bf/0x810 [ 89.436183][ T4370] f2fs_write_data_pages+0x2a27/0x36f0 [ 89.436222][ T4370] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 89.436251][ T4370] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 89.436292][ T4370] ? rtlock_slowlock_locked+0xfb/0x3c20 [ 89.436323][ T4370] ? rcu_is_watching+0x15/0xb0 [ 89.436342][ T4370] ? rcu_is_watching+0x15/0xb0 [ 89.436365][ T4370] ? rcu_is_watching+0x15/0xb0 [ 89.436384][ T4370] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 89.436407][ T4370] do_writepages+0x338/0x560 [ 89.436434][ T4370] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 89.436456][ T4370] ? rcu_is_watching+0x15/0xb0 [ 89.436476][ T4370] __writeback_single_inode+0x12e/0xf90 [ 89.436501][ T4370] writeback_sb_inodes+0x9db/0x1ab0 [ 89.436525][ T4370] ? rcu_is_watching+0x15/0xb0 [ 89.436544][ T4370] ? trace_irq_enable+0x3b/0x140 [ 89.436571][ T4370] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 89.436611][ T4370] ? rcu_is_watching+0x15/0xb0 [ 89.436629][ T4370] ? queue_io+0x2c2/0x450 [ 89.436649][ T4370] wb_writeback+0x41c/0xad0 [ 89.436669][ T4370] ? queue_io+0x2c1/0x450 [ 89.436690][ T4370] ? __pfx_wb_writeback+0x10/0x10 [ 89.436708][ T4370] ? rcu_is_watching+0x15/0xb0 [ 89.436732][ T4370] wb_workfn+0x437/0x10f0 [ 89.436766][ T4370] ? __pfx_wb_workfn+0x10/0x10 [ 89.436790][ T4370] ? hrtimer_start_range_ns_common+0x841/0xb90 [ 89.436812][ T4370] ? rcu_is_watching+0x15/0xb0 [ 89.436833][ T4370] ? do_raw_spin_lock+0x12b/0x2f0 [ 89.436856][ T4370] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 89.436878][ T4370] ? rcu_is_watching+0x15/0xb0 [ 89.436895][ T4370] ? process_one_work+0x8cd/0x12b0 [ 89.436922][ T4370] ? rcu_is_watching+0x15/0xb0 [ 89.436939][ T4370] ? lock_acquire+0x5f/0x350 [ 89.436965][ T4370] ? process_one_work+0x8cd/0x12b0 [ 89.436991][ T4370] ? rcu_is_watching+0x15/0xb0 [ 89.437008][ T4370] ? process_one_work+0x8cd/0x12b0 [ 89.437041][ T4370] ? process_one_work+0x8cd/0x12b0 [ 89.437067][ T4370] process_one_work+0x93a/0x12b0 [ 89.437102][ T4370] ? __pfx_process_one_work+0x10/0x10 [ 89.437127][ T4370] ? do_raw_spin_lock+0x12b/0x2f0 [ 89.437152][ T4370] ? assign_work+0x3cf/0x5d0 [ 89.437182][ T4370] worker_thread+0xb05/0x10d0 [ 89.437200][ T4370] ? rcu_is_watching+0x15/0xb0 [ 89.437221][ T4370] ? __kthread_parkme+0x71/0x1f0 [ 89.437246][ T4370] kthread+0x388/0x470 [ 89.437267][ T4370] ? __pfx_worker_thread+0x10/0x10 [ 89.437284][ T4370] ? __pfx_kthread+0x10/0x10 [ 89.437306][ T4370] ret_from_fork+0x514/0xb70 [ 89.437330][ T4370] ? __pfx_ret_from_fork+0x10/0x10 [ 89.437352][ T4370] ? __switch_to+0xc89/0x1420 [ 89.437373][ T4370] ? __pfx_kthread+0x10/0x10 [ 89.437395][ T4370] ret_from_fork_asm+0x1a/0x30 [ 89.437429][ T4370] [ 89.438363][ T4370] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 89.439173][ T4370] CPU: 1 UID: 0 PID: 4370 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 89.439197][ T4370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 89.439208][ T4370] Workqueue: writeback wb_workfn (flush-7:2) [ 89.439242][ T4370] Call Trace: [ 89.439248][ T4370] [ 89.439255][ T4370] dump_stack_lvl+0xe8/0x150 [ 89.439280][ T4370] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 89.439310][ T4370] f2fs_write_end_io+0x124b/0x1710 [ 89.439341][ T4370] __submit_merged_bio+0x258/0x6a0 [ 89.439359][ T4370] ? rcu_is_watching+0x15/0xb0 [ 89.439378][ T4370] __submit_merged_write_cond+0x3c9/0x4e0 [ 89.439410][ T4370] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 89.439443][ T4370] ? folio_clear_dirty_for_io+0x1bf/0x810 [ 89.439474][ T4370] f2fs_write_data_pages+0x2a27/0x36f0 [ 89.439510][ T4370] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 89.439536][ T4370] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 89.439575][ T4370] ? rtlock_slowlock_locked+0xfb/0x3c20 [ 89.439603][ T4370] ? rcu_is_watching+0x15/0xb0 [ 89.439622][ T4370] ? rcu_is_watching+0x15/0xb0 [ 89.439644][ T4370] ? rcu_is_watching+0x15/0xb0 [ 89.439662][ T4370] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 89.439684][ T4370] do_writepages+0x338/0x560 [ 89.439710][ T4370] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 89.439732][ T4370] ? rcu_is_watching+0x15/0xb0 [ 89.439752][ T4370] __writeback_single_inode+0x12e/0xf90 [ 89.439776][ T4370] writeback_sb_inodes+0x9db/0x1ab0 [ 89.439799][ T4370] ? rcu_is_watching+0x15/0xb0 [ 89.439818][ T4370] ? trace_irq_enable+0x3b/0x140 [ 89.439845][ T4370] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 89.439882][ T4370] ? rcu_is_watching+0x15/0xb0 [ 89.439899][ T4370] ? queue_io+0x2c2/0x450 [ 89.439919][ T4370] wb_writeback+0x41c/0xad0 [ 89.439939][ T4370] ? queue_io+0x2c1/0x450 [ 89.439959][ T4370] ? __pfx_wb_writeback+0x10/0x10 [ 89.439976][ T4370] ? rcu_is_watching+0x15/0xb0 [ 89.440000][ T4370] wb_workfn+0x437/0x10f0 [ 89.440039][ T4370] ? __pfx_wb_workfn+0x10/0x10 [ 89.440064][ T4370] ? hrtimer_start_range_ns_common+0x841/0xb90 [ 89.440085][ T4370] ? rcu_is_watching+0x15/0xb0 [ 89.440105][ T4370] ? do_raw_spin_lock+0x12b/0x2f0 [ 89.440128][ T4370] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 89.440149][ T4370] ? rcu_is_watching+0x15/0xb0 [ 89.440166][ T4370] ? process_one_work+0x8cd/0x12b0 [ 89.440191][ T4370] ? rcu_is_watching+0x15/0xb0 [ 89.440208][ T4370] ? lock_acquire+0x5f/0x350 [ 89.440233][ T4370] ? process_one_work+0x8cd/0x12b0 [ 89.440258][ T4370] ? rcu_is_watching+0x15/0xb0 [ 89.440275][ T4370] ? process_one_work+0x8cd/0x12b0 [ 89.440304][ T4370] ? process_one_work+0x8cd/0x12b0 [ 89.440330][ T4370] process_one_work+0x93a/0x12b0 [ 89.440364][ T4370] ? __pfx_process_one_work+0x10/0x10 [ 89.440389][ T4370] ? do_raw_spin_lock+0x12b/0x2f0 [ 89.440413][ T4370] ? assign_work+0x3cf/0x5d0 [ 89.440441][ T4370] worker_thread+0xb05/0x10d0 [ 89.440459][ T4370] ? rcu_is_watching+0x15/0xb0 [ 89.440480][ T4370] ? __kthread_parkme+0x71/0x1f0 [ 89.440502][ T4370] kthread+0x388/0x470 [ 89.440523][ T4370] ? __pfx_worker_thread+0x10/0x10 [ 89.440540][ T4370] ? __pfx_kthread+0x10/0x10 [ 89.440561][ T4370] ret_from_fork+0x514/0xb70 [ 89.440584][ T4370] ? __pfx_ret_from_fork+0x10/0x10 [ 89.440607][ T4370] ? __switch_to+0xc89/0x1420 [ 89.440627][ T4370] ? __pfx_kthread+0x10/0x10 [ 89.440647][ T4370] ret_from_fork_asm+0x1a/0x30 [ 89.440678][ T4370] [ 89.440763][ T4370] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 89.440829][ T4370] CPU: 1 UID: 0 PID: 4370 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 89.440851][ T4370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 89.440861][ T4370] Workqueue: writeback wb_workfn (flush-7:2) [ 89.440891][ T4370] Call Trace: [ 89.440897][ T4370] [ 89.440904][ T4370] dump_stack_lvl+0xe8/0x150 [ 89.440928][ T4370] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 89.440958][ T4370] f2fs_write_end_io+0x124b/0x1710 [ 89.440990][ T4370] __submit_merged_bio+0x258/0x6a0 [ 89.441009][ T4370] ? rcu_is_watching+0x15/0xb0 [ 89.441029][ T4370] __submit_merged_write_cond+0x3c9/0x4e0 [ 89.441069][ T4370] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 89.441103][ T4370] ? folio_clear_dirty_for_io+0x1bf/0x810 [ 89.441134][ T4370] f2fs_write_data_pages+0x2a27/0x36f0 [ 89.441173][ T4370] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 89.441202][ T4370] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 89.441243][ T4370] ? rtlock_slowlock_locked+0xfb/0x3c20 [ 89.441272][ T4370] ? rcu_is_watching+0x15/0xb0 [ 89.441291][ T4370] ? rcu_is_watching+0x15/0xb0 [ 89.441314][ T4370] ? rcu_is_watching+0x15/0xb0 [ 89.441333][ T4370] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 89.441354][ T4370] do_writepages+0x338/0x560 [ 89.441381][ T4370] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 89.441404][ T4370] ? rcu_is_watching+0x15/0xb0 [ 89.441425][ T4370] __writeback_single_inode+0x12e/0xf90 [ 89.441450][ T4370] writeback_sb_inodes+0x9db/0x1ab0 [ 89.441473][ T4370] ? rcu_is_watching+0x15/0xb0 [ 89.441493][ T4370] ? trace_irq_enable+0x3b/0x140 [ 89.441520][ T4370] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 89.441560][ T4370] ? rcu_is_watching+0x15/0xb0 [ 89.441578][ T4370] ? queue_io+0x2c2/0x450 [ 89.441598][ T4370] wb_writeback+0x41c/0xad0 [ 89.441617][ T4370] ? queue_io+0x2c1/0x450 [ 89.441638][ T4370] ? __pfx_wb_writeback+0x10/0x10 [ 89.441656][ T4370] ? rcu_is_watching+0x15/0xb0 [ 89.441681][ T4370] wb_workfn+0x437/0x10f0 [ 89.441715][ T4370] ? __pfx_wb_workfn+0x10/0x10 [ 89.441739][ T4370] ? hrtimer_start_range_ns_common+0x841/0xb90 [ 89.441761][ T4370] ? rcu_is_watching+0x15/0xb0 [ 89.441781][ T4370] ? do_raw_spin_lock+0x12b/0x2f0 [ 89.441804][ T4370] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 89.441826][ T4370] ? rcu_is_watching+0x15/0xb0 [ 89.441843][ T4370] ? process_one_work+0x8cd/0x12b0 [ 89.441869][ T4370] ? rcu_is_watching+0x15/0xb0 [ 89.441887][ T4370] ? lock_acquire+0x5f/0x350 [ 89.441912][ T4370] ? process_one_work+0x8cd/0x12b0 [ 89.441938][ T4370] ? rcu_is_watching+0x15/0xb0 [ 89.441958][ T4370] ? process_one_work+0x8cd/0x12b0 [ 89.441981][ T4370] ? process_one_work+0x8cd/0x12b0 [ 89.442006][ T4370] process_one_work+0x93a/0x12b0 [ 89.442046][ T4370] ? __pfx_process_one_work+0x10/0x10 [ 89.442072][ T4370] ? do_raw_spin_lock+0x12b/0x2f0 [ 89.442097][ T4370] ? assign_work+0x3cf/0x5d0 [ 89.442125][ T4370] worker_thread+0xb05/0x10d0 [ 89.442143][ T4370] ? rcu_is_watching+0x15/0xb0 [ 89.442164][ T4370] ? __kthread_parkme+0x71/0x1f0 [ 89.442188][ T4370] kthread+0x388/0x470 [ 89.442210][ T4370] ? __pfx_worker_thread+0x10/0x10 [ 89.442227][ T4370] ? __pfx_kthread+0x10/0x10 [ 89.442249][ T4370] ret_from_fork+0x514/0xb70 [ 89.442273][ T4370] ? __pfx_ret_from_fork+0x10/0x10 [ 89.442295][ T4370] ? __switch_to+0xc89/0x1420 [ 89.442316][ T4370] ? __pfx_kthread+0x10/0x10 [ 89.442338][ T4370] ret_from_fork_asm+0x1a/0x30 [ 89.442370][ T4370] [ 89.572353][ T4370] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 93.525309][ T6109] loop0: detected capacity change from 0 to 16 [ 93.561274][ T6109] erofs (device loop0): mounted with root inode @ nid 36. [ 94.462871][ T5739] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 94.522182][ T6107] loop1: detected capacity change from 0 to 32768 [ 94.562766][ T6107] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 94.603526][ T6107] XFS (loop1): Ending clean mount [ 94.620403][ T5739] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 94.620430][ T5739] usb 5-1: config 0 has no interface number 0 [ 94.620463][ T5739] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 94.620498][ T5739] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.620521][ T5739] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.620547][ T5739] usb 5-1: config 0 interface 1 has no altsetting 0 [ 94.620575][ T5739] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 94.620597][ T5739] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.709616][ T5739] usb 5-1: config 0 descriptor?? [ 94.872753][ T5608] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 95.337647][ T5739] uclogic 0003:145F:0212.0003: failed retrieving string descriptor #100: -71 [ 95.337693][ T5739] uclogic 0003:145F:0212.0003: failed retrieving pen parameters: -71 [ 95.337956][ T5739] uclogic 0003:145F:0212.0003: pen probing failed: -71 [ 95.337975][ T5739] uclogic 0003:145F:0212.0003: failed probing parameters: -71 [ 95.338647][ T5739] uclogic 0003:145F:0212.0003: probe with driver uclogic failed with error -71 [ 95.408870][ T5739] usb 5-1: USB disconnect, device number 3 [ 95.582024][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.602024][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.612030][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.622025][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.632026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.636192][ T6128] loop0: detected capacity change from 0 to 40427 [ 95.638311][ T6128] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 95.638334][ T6128] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 95.640761][ T6128] F2FS-fs (loop0): Image doesn't support compression [ 95.640782][ T6128] F2FS-fs (loop0): build fault injection rate: 690 [ 95.640791][ T6128] F2FS-fs (loop0): build fault injection type: 0x35f7 [ 95.693211][ T6128] F2FS-fs (loop0): invalid crc value [ 95.763351][ T6128] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 95.772913][ T6128] F2FS-fs (loop0): f2fs_disable_checkpoint starts, unusable: 0 [ 95.772930][ T6128] F2FS-fs (loop0): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 95.772944][ T6128] F2FS-fs (loop0): Start checkpoint disabled! [ 95.799430][ T6128] F2FS-fs (loop0): f2fs_disable_checkpoint finishes, err:0 [ 95.808727][ T6128] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 95.808754][ T6128] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 95.965404][ T6129] block device autoloading is deprecated and will be removed. [ 96.542099][ T5739] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.703329][ T5739] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 96.703357][ T5739] usb 3-1: config 1 has no interface number 0 [ 96.703391][ T5739] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 96.703417][ T5739] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1024 [ 96.703440][ T5739] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 96.703466][ T5739] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x5 has invalid maxpacket 1056, setting to 1024 [ 96.710397][ T5739] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 96.710429][ T5739] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.710449][ T5739] usb 3-1: Product: syz [ 96.710463][ T5739] usb 3-1: Manufacturer: syz [ 96.710478][ T5739] usb 3-1: SerialNumber: syz [ 96.807725][ T6135] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 96.807873][ T6135] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 96.808206][ T6135] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 96.836905][ T5739] usb 3-1: Error in usbnet_get_endpoints (-22) [ 96.932875][ T5707] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.082384][ T5707] usb 2-1: Using ep0 maxpacket: 16 [ 97.088565][ T5707] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.088607][ T5707] usb 2-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 97.088634][ T5707] usb 2-1: config 0 interface 0 has no altsetting 0 [ 97.088664][ T5707] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 97.088687][ T5707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.154470][ T5707] usb 2-1: config 0 descriptor?? [ 97.183495][ T5707] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 99.652578][ T5739] usb 2-1: USB disconnect, device number 2 [ 99.931471][ T4215] kworker/u8:13: attempt to access beyond end of device [ 99.931471][ T4215] loop0: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 99.934263][ T4215] CPU: 1 UID: 0 PID: 4215 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 99.934288][ T4215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 99.934298][ T4215] Workqueue: writeback wb_workfn (flush-7:0) [ 99.934332][ T4215] Call Trace: [ 99.934339][ T4215] [ 99.934346][ T4215] dump_stack_lvl+0xe8/0x150 [ 99.934374][ T4215] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 99.934405][ T4215] f2fs_write_end_io+0x124b/0x1710 [ 99.934436][ T4215] __submit_merged_bio+0x258/0x6a0 [ 99.934453][ T4215] ? rcu_is_watching+0x15/0xb0 [ 99.934472][ T4215] __submit_merged_write_cond+0x3c9/0x4e0 [ 99.934510][ T4215] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 99.934544][ T4215] ? folio_clear_dirty_for_io+0x1bf/0x810 [ 99.934574][ T4215] f2fs_write_data_pages+0x2a27/0x36f0 [ 99.934610][ T4215] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 99.934630][ T4215] ? rcu_is_watching+0x15/0xb0 [ 99.934651][ T4215] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 99.934686][ T4215] ? rcu_is_watching+0x15/0xb0 [ 99.934703][ T4215] ? trace_irq_enable+0x3b/0x140 [ 99.934728][ T4215] ? rcu_is_watching+0x15/0xb0 [ 99.934757][ T4215] ? rcu_is_watching+0x15/0xb0 [ 99.934775][ T4215] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 99.934796][ T4215] do_writepages+0x338/0x560 [ 99.934821][ T4215] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 99.934840][ T4215] ? rcu_preempt_deferred_qs_irqrestore+0x81f/0xc10 [ 99.934865][ T4215] __writeback_single_inode+0x12e/0xf90 [ 99.934889][ T4215] writeback_sb_inodes+0x9db/0x1ab0 [ 99.934912][ T4215] ? rcu_is_watching+0x15/0xb0 [ 99.934931][ T4215] ? trace_irq_enable+0x3b/0x140 [ 99.934957][ T4215] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 99.934991][ T4215] ? rcu_is_watching+0x15/0xb0 [ 99.935007][ T4215] ? queue_io+0x2c2/0x450 [ 99.935026][ T4215] wb_writeback+0x41c/0xad0 [ 99.935046][ T4215] ? queue_io+0x2c1/0x450 [ 99.935067][ T4215] ? __pfx_wb_writeback+0x10/0x10 [ 99.935084][ T4215] ? rcu_is_watching+0x15/0xb0 [ 99.935108][ T4215] wb_workfn+0x437/0x10f0 [ 99.935134][ T4215] ? __schedule+0x171f/0x5530 [ 99.935163][ T4215] ? __pfx_wb_workfn+0x10/0x10 [ 99.935192][ T4215] ? rcu_is_watching+0x15/0xb0 [ 99.935208][ T4215] ? __pfx___schedule+0x10/0x10 [ 99.935229][ T4215] ? trace_irq_enable+0x3b/0x140 [ 99.935253][ T4215] ? irqentry_exit+0x218/0x8f0 [ 99.935279][ T4215] ? process_one_work+0x8cd/0x12b0 [ 99.935305][ T4215] ? rcu_is_watching+0x15/0xb0 [ 99.935322][ T4215] ? lock_acquire+0x5f/0x350 [ 99.935346][ T4215] ? preempt_schedule_common+0x82/0xd0 [ 99.935370][ T4215] ? process_one_work+0x8cd/0x12b0 [ 99.935395][ T4215] ? rcu_is_watching+0x15/0xb0 [ 99.935412][ T4215] ? process_one_work+0x8cd/0x12b0 [ 99.935439][ T4215] ? process_one_work+0x8cd/0x12b0 [ 99.935464][ T4215] process_one_work+0x93a/0x12b0 [ 99.935504][ T4215] ? __pfx_process_one_work+0x10/0x10 [ 99.935530][ T4215] ? do_raw_spin_lock+0x12b/0x2f0 [ 99.935553][ T4215] ? assign_work+0x3cf/0x5d0 [ 99.935582][ T4215] worker_thread+0xb3c/0x10d0 [ 99.935610][ T4215] kthread+0x388/0x470 [ 99.935631][ T4215] ? __pfx_worker_thread+0x10/0x10 [ 99.935648][ T4215] ? __pfx_kthread+0x10/0x10 [ 99.935670][ T4215] ret_from_fork+0x514/0xb70 [ 99.935694][ T4215] ? __pfx_ret_from_fork+0x10/0x10 [ 99.935716][ T4215] ? __switch_to+0xc89/0x1420 [ 99.935736][ T4215] ? __pfx_kthread+0x10/0x10 [ 99.935758][ T4215] ret_from_fork_asm+0x1a/0x30 [ 99.935790][ T4215] [ 100.287163][ T4215] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 100.287224][ T4215] CPU: 1 UID: 0 PID: 4215 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 100.287247][ T4215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 100.287258][ T4215] Workqueue: writeback wb_workfn (flush-7:0) [ 100.287294][ T4215] Call Trace: [ 100.287301][ T4215] [ 100.287309][ T4215] dump_stack_lvl+0xe8/0x150 [ 100.287335][ T4215] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 100.287367][ T4215] f2fs_write_end_io+0x124b/0x1710 [ 100.287400][ T4215] __submit_merged_bio+0x258/0x6a0 [ 100.287419][ T4215] ? rcu_is_watching+0x15/0xb0 [ 100.287440][ T4215] __submit_merged_write_cond+0x3c9/0x4e0 [ 100.287481][ T4215] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 100.287516][ T4215] ? folio_clear_dirty_for_io+0x1bf/0x810 [ 100.287549][ T4215] f2fs_write_data_pages+0x2a27/0x36f0 [ 100.287588][ T4215] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 100.287609][ T4215] ? rcu_is_watching+0x15/0xb0 [ 100.287636][ T4215] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 100.287675][ T4215] ? rcu_is_watching+0x15/0xb0 [ 100.287693][ T4215] ? trace_irq_enable+0x3b/0x140 [ 100.287720][ T4215] ? rcu_is_watching+0x15/0xb0 [ 100.287754][ T4215] ? rcu_is_watching+0x15/0xb0 [ 100.287773][ T4215] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 100.287795][ T4215] do_writepages+0x338/0x560 [ 100.287822][ T4215] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 100.287843][ T4215] ? rcu_preempt_deferred_qs_irqrestore+0x81f/0xc10 [ 100.287889][ T4215] __writeback_single_inode+0x12e/0xf90 [ 100.287915][ T4215] writeback_sb_inodes+0x9db/0x1ab0 [ 100.287938][ T4215] ? rcu_is_watching+0x15/0xb0 [ 100.287958][ T4215] ? trace_irq_enable+0x3b/0x140 [ 100.287985][ T4215] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 100.288024][ T4215] ? rcu_is_watching+0x15/0xb0 [ 100.288042][ T4215] ? queue_io+0x2c2/0x450 [ 100.288062][ T4215] wb_writeback+0x41c/0xad0 [ 100.288082][ T4215] ? queue_io+0x2c1/0x450 [ 100.288102][ T4215] ? __pfx_wb_writeback+0x10/0x10 [ 100.288119][ T4215] ? rcu_is_watching+0x15/0xb0 [ 100.288144][ T4215] wb_workfn+0x437/0x10f0 [ 100.288171][ T4215] ? __schedule+0x171f/0x5530 [ 100.288201][ T4215] ? __pfx_wb_workfn+0x10/0x10 [ 100.288230][ T4215] ? rcu_is_watching+0x15/0xb0 [ 100.288248][ T4215] ? __pfx___schedule+0x10/0x10 [ 100.288269][ T4215] ? trace_irq_enable+0x3b/0x140 [ 100.288293][ T4215] ? irqentry_exit+0x218/0x8f0 [ 100.288320][ T4215] ? process_one_work+0x8cd/0x12b0 [ 100.288347][ T4215] ? rcu_is_watching+0x15/0xb0 [ 100.288364][ T4215] ? lock_acquire+0x5f/0x350 [ 100.288388][ T4215] ? preempt_schedule_common+0x82/0xd0 [ 100.288412][ T4215] ? process_one_work+0x8cd/0x12b0 [ 100.288438][ T4215] ? rcu_is_watching+0x15/0xb0 [ 100.288455][ T4215] ? process_one_work+0x8cd/0x12b0 [ 100.288489][ T4215] ? process_one_work+0x8cd/0x12b0 [ 100.288515][ T4215] process_one_work+0x93a/0x12b0 [ 100.288551][ T4215] ? __pfx_process_one_work+0x10/0x10 [ 100.288576][ T4215] ? do_raw_spin_lock+0x12b/0x2f0 [ 100.288601][ T4215] ? assign_work+0x3cf/0x5d0 [ 100.288630][ T4215] worker_thread+0xb3c/0x10d0 [ 100.288659][ T4215] kthread+0x388/0x470 [ 100.288682][ T4215] ? __pfx_worker_thread+0x10/0x10 [ 100.288699][ T4215] ? __pfx_kthread+0x10/0x10 [ 100.288721][ T4215] ret_from_fork+0x514/0xb70 [ 100.288746][ T4215] ? __pfx_ret_from_fork+0x10/0x10 [ 100.288769][ T4215] ? __switch_to+0xc89/0x1420 [ 100.288789][ T4215] ? __pfx_kthread+0x10/0x10 [ 100.288812][ T4215] ret_from_fork_asm+0x1a/0x30 [ 100.288845][ T4215] [ 100.546777][ T4215] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 100.546826][ T4215] CPU: 1 UID: 0 PID: 4215 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 100.546855][ T4215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 100.546866][ T4215] Workqueue: writeback wb_workfn (flush-7:0) [ 100.546902][ T4215] Call Trace: [ 100.546909][ T4215] [ 100.546916][ T4215] dump_stack_lvl+0xe8/0x150 [ 100.546942][ T4215] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 100.546974][ T4215] f2fs_write_end_io+0x124b/0x1710 [ 100.547005][ T4215] __submit_merged_bio+0x258/0x6a0 [ 100.547023][ T4215] ? rcu_is_watching+0x15/0xb0 [ 100.547044][ T4215] __submit_merged_write_cond+0x3c9/0x4e0 [ 100.547076][ T4215] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 100.547110][ T4215] ? folio_clear_dirty_for_io+0x1bf/0x810 [ 100.547141][ T4215] f2fs_write_data_pages+0x2a27/0x36f0 [ 100.547178][ T4215] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 100.547198][ T4215] ? rcu_is_watching+0x15/0xb0 [ 100.547220][ T4215] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 100.547256][ T4215] ? rcu_is_watching+0x15/0xb0 [ 100.547274][ T4215] ? trace_irq_enable+0x3b/0x140 [ 100.547298][ T4215] ? rcu_is_watching+0x15/0xb0 [ 100.547329][ T4215] ? rcu_is_watching+0x15/0xb0 [ 100.547347][ T4215] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 100.547369][ T4215] do_writepages+0x338/0x560 [ 100.547394][ T4215] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 100.547414][ T4215] ? rcu_preempt_deferred_qs_irqrestore+0x81f/0xc10 [ 100.547443][ T4215] __writeback_single_inode+0x12e/0xf90 [ 100.547468][ T4215] writeback_sb_inodes+0x9db/0x1ab0 [ 100.547491][ T4215] ? rcu_is_watching+0x15/0xb0 [ 100.547511][ T4215] ? trace_irq_enable+0x3b/0x140 [ 100.547537][ T4215] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 100.547574][ T4215] ? rcu_is_watching+0x15/0xb0 [ 100.547592][ T4215] ? queue_io+0x2c2/0x450 [ 100.547612][ T4215] wb_writeback+0x41c/0xad0 [ 100.547632][ T4215] ? queue_io+0x2c1/0x450 [ 100.547658][ T4215] ? __pfx_wb_writeback+0x10/0x10 [ 100.547675][ T4215] ? rcu_is_watching+0x15/0xb0 [ 100.547698][ T4215] wb_workfn+0x437/0x10f0 [ 100.547724][ T4215] ? __schedule+0x171f/0x5530 [ 100.547752][ T4215] ? __pfx_wb_workfn+0x10/0x10 [ 100.547781][ T4215] ? rcu_is_watching+0x15/0xb0 [ 100.547798][ T4215] ? __pfx___schedule+0x10/0x10 [ 100.547819][ T4215] ? trace_irq_enable+0x3b/0x140 [ 100.547867][ T4215] ? irqentry_exit+0x218/0x8f0 [ 100.547891][ T4215] ? process_one_work+0x8cd/0x12b0 [ 100.547917][ T4215] ? rcu_is_watching+0x15/0xb0 [ 100.547934][ T4215] ? lock_acquire+0x5f/0x350 [ 100.547958][ T4215] ? preempt_schedule_common+0x82/0xd0 [ 100.547982][ T4215] ? process_one_work+0x8cd/0x12b0 [ 100.548008][ T4215] ? rcu_is_watching+0x15/0xb0 [ 100.548025][ T4215] ? process_one_work+0x8cd/0x12b0 [ 100.548052][ T4215] ? process_one_work+0x8cd/0x12b0 [ 100.548077][ T4215] process_one_work+0x93a/0x12b0 [ 100.548111][ T4215] ? __pfx_process_one_work+0x10/0x10 [ 100.548137][ T4215] ? do_raw_spin_lock+0x12b/0x2f0 [ 100.548161][ T4215] ? assign_work+0x3cf/0x5d0 [ 100.548194][ T4215] worker_thread+0xb3c/0x10d0 [ 100.548221][ T4215] kthread+0x388/0x470 [ 100.548243][ T4215] ? __pfx_worker_thread+0x10/0x10 [ 100.548260][ T4215] ? __pfx_kthread+0x10/0x10 [ 100.548282][ T4215] ret_from_fork+0x514/0xb70 [ 100.548306][ T4215] ? __pfx_ret_from_fork+0x10/0x10 [ 100.548328][ T4215] ? __switch_to+0xc89/0x1420 [ 100.548348][ T4215] ? __pfx_kthread+0x10/0x10 [ 100.548369][ T4215] ret_from_fork_asm+0x1a/0x30 [ 100.548401][ T4215] [ 100.619188][ T5714] usb 3-1: USB disconnect, device number 3 [ 100.651662][ T4215] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.328343][ T6169] netlink: 'syz.2.102': attribute type 10 has an invalid length. [ 101.328365][ T6169] netlink: 40 bytes leftover after parsing attributes in process `syz.2.102'. [ 101.337293][ T6169] team0: Port device geneve1 added [ 102.245696][ T6167] loop1: detected capacity change from 0 to 1024 [ 102.275123][ T6167] hfsplus: extend alloc file! (16384,256,150995124) [ 102.275152][ T6167] hfsplus: failed to extend attributes file [ 102.934975][ T6182] loop0: detected capacity change from 0 to 128 [ 103.282757][ T32] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 103.732810][ T32] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 103.732839][ T32] usb 4-1: config 0 has no interface number 0 [ 103.732879][ T32] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 103.732906][ T32] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.732928][ T32] usb 4-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.732955][ T32] usb 4-1: config 0 interface 1 has no altsetting 0 [ 103.732984][ T32] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 103.733006][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.736403][ T32] usb 4-1: config 0 descriptor?? [ 104.418820][ T32] uclogic 0003:145F:0212.0004: failed retrieving string descriptor #100: -71 [ 104.418869][ T32] uclogic 0003:145F:0212.0004: failed retrieving pen parameters: -71 [ 104.418886][ T32] uclogic 0003:145F:0212.0004: pen probing failed: -71 [ 104.418904][ T32] uclogic 0003:145F:0212.0004: failed probing parameters: -71 [ 104.418980][ T32] uclogic 0003:145F:0212.0004: probe with driver uclogic failed with error -71 [ 104.488219][ T32] usb 4-1: USB disconnect, device number 5 [ 104.570785][ T6189] loop0: detected capacity change from 0 to 256 [ 104.923764][ T6184] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 104.923989][ T6184] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 105.158535][ T6193] loop1: detected capacity change from 0 to 1024 [ 105.176270][ T6193] EXT4-fs: Ignoring removed nobh option [ 105.208435][ T6193] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002] [ 105.208520][ T6193] System zones: 0-1, 3-8 [ 105.227068][ T6193] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 105.233431][ T6193] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.565052][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 105.654343][ T5707] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 105.812578][ T5707] usb 4-1: Using ep0 maxpacket: 16 [ 105.814108][ T5707] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.814147][ T5707] usb 4-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 105.814174][ T5707] usb 4-1: config 0 interface 0 has no altsetting 0 [ 105.814202][ T5707] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 105.814225][ T5707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.849448][ T5707] usb 4-1: config 0 descriptor?? [ 105.894687][ T5707] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 106.525577][ T6200] loop4: detected capacity change from 0 to 32768 [ 106.529563][ T6200] ======================================================= [ 106.529563][ T6200] WARNING: The mand mount option has been deprecated and [ 106.529563][ T6200] and is ignored by this kernel. Remove the mand [ 106.529563][ T6200] option from the mount to silence this warning. [ 106.529563][ T6200] ======================================================= [ 106.616984][ T6191] loop0: detected capacity change from 0 to 40427 [ 106.634218][ T6191] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 106.634246][ T6191] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 106.732024][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.752018][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.762011][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.772011][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.797163][ T6207] loop1: detected capacity change from 0 to 40427 [ 106.822005][ T6207] F2FS-fs (loop1): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 106.822034][ T6207] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 106.826294][ T6207] F2FS-fs (loop1): Image doesn't support compression [ 106.826315][ T6207] F2FS-fs (loop1): build fault injection rate: 690 [ 106.826329][ T6207] F2FS-fs (loop1): build fault injection type: 0x35f7 [ 106.833888][ T6207] F2FS-fs (loop1): invalid crc value [ 106.922063][ T6207] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 106.929455][ T6207] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0 [ 106.929473][ T6207] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 106.929487][ T6207] F2FS-fs (loop1): Start checkpoint disabled! [ 106.965261][ T6207] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0 [ 106.975043][ T6207] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 106.975072][ T6207] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 106.991529][ T6200] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 107.202435][ T6200] XFS (loop4): Ending clean mount [ 107.591748][ T6191] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 107.666774][ T6191] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 107.666810][ T6191] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 107.824688][ T5616] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 108.420206][ T5739] usb 4-1: USB disconnect, device number 6 [ 108.610752][ T1023] kworker/u8:6: attempt to access beyond end of device [ 108.610752][ T1023] loop1: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 108.630290][ T1023] CPU: 1 UID: 0 PID: 1023 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 108.630318][ T1023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 108.630329][ T1023] Workqueue: writeback wb_workfn (flush-7:1) [ 108.630365][ T1023] Call Trace: [ 108.630372][ T1023] [ 108.630380][ T1023] dump_stack_lvl+0xe8/0x150 [ 108.630410][ T1023] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 108.630443][ T1023] f2fs_write_end_io+0x124b/0x1710 [ 108.630475][ T1023] __submit_merged_bio+0x258/0x6a0 [ 108.630494][ T1023] ? rcu_is_watching+0x15/0xb0 [ 108.630515][ T1023] __submit_merged_write_cond+0x3c9/0x4e0 [ 108.630548][ T1023] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 108.630575][ T1023] ? irqentry_exit+0x218/0x8f0 [ 108.630612][ T1023] f2fs_write_data_pages+0x2a27/0x36f0 [ 108.630651][ T1023] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 108.630679][ T1023] ? rcu_is_watching+0x15/0xb0 [ 108.630709][ T1023] ? rcu_is_watching+0x15/0xb0 [ 108.630726][ T1023] ? trace_irq_enable+0x3b/0x140 [ 108.630752][ T1023] ? rcu_is_watching+0x15/0xb0 [ 108.630779][ T1023] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 108.630806][ T1023] ? rcu_is_watching+0x15/0xb0 [ 108.630825][ T1023] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 108.630847][ T1023] do_writepages+0x338/0x560 [ 108.630874][ T1023] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 108.630895][ T1023] ? rcu_preempt_deferred_qs_irqrestore+0x81f/0xc10 [ 108.630925][ T1023] __writeback_single_inode+0x12e/0xf90 [ 108.630950][ T1023] writeback_sb_inodes+0x9db/0x1ab0 [ 108.630973][ T1023] ? rcu_is_watching+0x15/0xb0 [ 108.630994][ T1023] ? trace_irq_enable+0x3b/0x140 [ 108.631020][ T1023] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 108.631061][ T1023] ? rcu_is_watching+0x15/0xb0 [ 108.631079][ T1023] ? queue_io+0x2c2/0x450 [ 108.631098][ T1023] wb_writeback+0x41c/0xad0 [ 108.631118][ T1023] ? queue_io+0x2c1/0x450 [ 108.631139][ T1023] ? __pfx_wb_writeback+0x10/0x10 [ 108.631156][ T1023] ? rcu_is_watching+0x15/0xb0 [ 108.631182][ T1023] wb_workfn+0x437/0x10f0 [ 108.631223][ T1023] ? __pfx_wb_workfn+0x10/0x10 [ 108.631247][ T1023] ? hrtimer_start_range_ns_common+0x818/0xb90 [ 108.631270][ T1023] ? rcu_is_watching+0x15/0xb0 [ 108.631290][ T1023] ? do_raw_spin_lock+0x12b/0x2f0 [ 108.631313][ T1023] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 108.631334][ T1023] ? rcu_is_watching+0x15/0xb0 [ 108.631352][ T1023] ? process_one_work+0x8cd/0x12b0 [ 108.631378][ T1023] ? rcu_is_watching+0x15/0xb0 [ 108.631400][ T1023] ? lock_acquire+0x5f/0x350 [ 108.631427][ T1023] ? process_one_work+0x8cd/0x12b0 [ 108.631452][ T1023] ? rcu_is_watching+0x15/0xb0 [ 108.631469][ T1023] ? process_one_work+0x8cd/0x12b0 [ 108.631495][ T1023] ? process_one_work+0x8cd/0x12b0 [ 108.631521][ T1023] process_one_work+0x93a/0x12b0 [ 108.631557][ T1023] ? __pfx_process_one_work+0x10/0x10 [ 108.631582][ T1023] ? do_raw_spin_lock+0x12b/0x2f0 [ 108.631607][ T1023] ? assign_work+0x3cf/0x5d0 [ 108.631635][ T1023] worker_thread+0xb05/0x10d0 [ 108.631653][ T1023] ? rcu_is_watching+0x15/0xb0 [ 108.631674][ T1023] ? __kthread_parkme+0x71/0x1f0 [ 108.631699][ T1023] kthread+0x388/0x470 [ 108.631719][ T1023] ? __pfx_worker_thread+0x10/0x10 [ 108.631736][ T1023] ? __pfx_kthread+0x10/0x10 [ 108.631758][ T1023] ret_from_fork+0x514/0xb70 [ 108.631782][ T1023] ? __pfx_ret_from_fork+0x10/0x10 [ 108.631805][ T1023] ? __switch_to+0xc89/0x1420 [ 108.631825][ T1023] ? __pfx_kthread+0x10/0x10 [ 108.631847][ T1023] ret_from_fork_asm+0x1a/0x30 [ 108.631880][ T1023] [ 108.771643][ T1023] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 108.771711][ T1023] CPU: 1 UID: 0 PID: 1023 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 108.771733][ T1023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 108.771745][ T1023] Workqueue: writeback wb_workfn (flush-7:1) [ 108.771780][ T1023] Call Trace: [ 108.771787][ T1023] [ 108.771795][ T1023] dump_stack_lvl+0xe8/0x150 [ 108.771821][ T1023] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 108.771854][ T1023] f2fs_write_end_io+0x124b/0x1710 [ 108.771887][ T1023] __submit_merged_bio+0x258/0x6a0 [ 108.771906][ T1023] ? rcu_is_watching+0x15/0xb0 [ 108.771927][ T1023] __submit_merged_write_cond+0x3c9/0x4e0 [ 108.771963][ T1023] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 108.771988][ T1023] ? irqentry_exit+0x218/0x8f0 [ 108.772022][ T1023] f2fs_write_data_pages+0x2a27/0x36f0 [ 108.772057][ T1023] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 108.772085][ T1023] ? rcu_is_watching+0x15/0xb0 [ 108.772113][ T1023] ? rcu_is_watching+0x15/0xb0 [ 108.772131][ T1023] ? trace_irq_enable+0x3b/0x140 [ 108.772156][ T1023] ? rcu_is_watching+0x15/0xb0 [ 108.772183][ T1023] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 108.772219][ T1023] ? rcu_is_watching+0x15/0xb0 [ 108.772238][ T1023] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 108.772260][ T1023] do_writepages+0x338/0x560 [ 108.772288][ T1023] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 108.772309][ T1023] ? rcu_preempt_deferred_qs_irqrestore+0x81f/0xc10 [ 108.772339][ T1023] __writeback_single_inode+0x12e/0xf90 [ 108.772364][ T1023] writeback_sb_inodes+0x9db/0x1ab0 [ 108.772388][ T1023] ? rcu_is_watching+0x15/0xb0 [ 108.772409][ T1023] ? trace_irq_enable+0x3b/0x140 [ 108.772435][ T1023] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 108.772476][ T1023] ? rcu_is_watching+0x15/0xb0 [ 108.772493][ T1023] ? queue_io+0x2c2/0x450 [ 108.772514][ T1023] wb_writeback+0x41c/0xad0 [ 108.772533][ T1023] ? queue_io+0x2c1/0x450 [ 108.772554][ T1023] ? __pfx_wb_writeback+0x10/0x10 [ 108.772572][ T1023] ? rcu_is_watching+0x15/0xb0 [ 108.772597][ T1023] wb_workfn+0x437/0x10f0 [ 108.772631][ T1023] ? __pfx_wb_workfn+0x10/0x10 [ 108.772655][ T1023] ? hrtimer_start_range_ns_common+0x818/0xb90 [ 108.772678][ T1023] ? rcu_is_watching+0x15/0xb0 [ 108.772697][ T1023] ? do_raw_spin_lock+0x12b/0x2f0 [ 108.772720][ T1023] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 108.772741][ T1023] ? rcu_is_watching+0x15/0xb0 [ 108.772758][ T1023] ? process_one_work+0x8cd/0x12b0 [ 108.772784][ T1023] ? rcu_is_watching+0x15/0xb0 [ 108.772801][ T1023] ? lock_acquire+0x5f/0x350 [ 108.772827][ T1023] ? process_one_work+0x8cd/0x12b0 [ 108.772853][ T1023] ? rcu_is_watching+0x15/0xb0 [ 108.772870][ T1023] ? process_one_work+0x8cd/0x12b0 [ 108.772897][ T1023] ? process_one_work+0x8cd/0x12b0 [ 108.772922][ T1023] process_one_work+0x93a/0x12b0 [ 108.772958][ T1023] ? __pfx_process_one_work+0x10/0x10 [ 108.772983][ T1023] ? do_raw_spin_lock+0x12b/0x2f0 [ 108.773008][ T1023] ? assign_work+0x3cf/0x5d0 [ 108.773037][ T1023] worker_thread+0xb05/0x10d0 [ 108.773054][ T1023] ? rcu_is_watching+0x15/0xb0 [ 108.773076][ T1023] ? __kthread_parkme+0x71/0x1f0 [ 108.773100][ T1023] kthread+0x388/0x470 [ 108.773122][ T1023] ? __pfx_worker_thread+0x10/0x10 [ 108.773139][ T1023] ? __pfx_kthread+0x10/0x10 [ 108.773161][ T1023] ret_from_fork+0x514/0xb70 [ 108.773185][ T1023] ? __pfx_ret_from_fork+0x10/0x10 [ 108.773213][ T1023] ? __switch_to+0xc89/0x1420 [ 108.773234][ T1023] ? __pfx_kthread+0x10/0x10 [ 108.773256][ T1023] ret_from_fork_asm+0x1a/0x30 [ 108.773289][ T1023] [ 108.924172][ T1023] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 108.924238][ T1023] CPU: 1 UID: 0 PID: 1023 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 108.924261][ T1023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 108.924272][ T1023] Workqueue: writeback wb_workfn (flush-7:1) [ 108.924307][ T1023] Call Trace: [ 108.924314][ T1023] [ 108.924322][ T1023] dump_stack_lvl+0xe8/0x150 [ 108.924349][ T1023] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 108.924381][ T1023] f2fs_write_end_io+0x124b/0x1710 [ 108.924414][ T1023] __submit_merged_bio+0x258/0x6a0 [ 108.924433][ T1023] ? rcu_is_watching+0x15/0xb0 [ 108.924454][ T1023] __submit_merged_write_cond+0x3c9/0x4e0 [ 108.924487][ T1023] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 108.924513][ T1023] ? irqentry_exit+0x218/0x8f0 [ 108.924550][ T1023] f2fs_write_data_pages+0x2a27/0x36f0 [ 108.924590][ T1023] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 108.924619][ T1023] ? rcu_is_watching+0x15/0xb0 [ 108.924649][ T1023] ? rcu_is_watching+0x15/0xb0 [ 108.924666][ T1023] ? trace_irq_enable+0x3b/0x140 [ 108.924692][ T1023] ? rcu_is_watching+0x15/0xb0 [ 108.924718][ T1023] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 108.924746][ T1023] ? rcu_is_watching+0x15/0xb0 [ 108.924764][ T1023] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 108.924786][ T1023] do_writepages+0x338/0x560 [ 108.924814][ T1023] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 108.924833][ T1023] ? rcu_preempt_deferred_qs_irqrestore+0x81f/0xc10 [ 108.924864][ T1023] __writeback_single_inode+0x12e/0xf90 [ 108.924889][ T1023] writeback_sb_inodes+0x9db/0x1ab0 [ 108.924913][ T1023] ? rcu_is_watching+0x15/0xb0 [ 108.924934][ T1023] ? trace_irq_enable+0x3b/0x140 [ 108.924959][ T1023] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 108.924999][ T1023] ? rcu_is_watching+0x15/0xb0 [ 108.925021][ T1023] ? queue_io+0x2c2/0x450 [ 108.925041][ T1023] wb_writeback+0x41c/0xad0 [ 108.925061][ T1023] ? queue_io+0x2c1/0x450 [ 108.925082][ T1023] ? __pfx_wb_writeback+0x10/0x10 [ 108.925099][ T1023] ? rcu_is_watching+0x15/0xb0 [ 108.925124][ T1023] wb_workfn+0x437/0x10f0 [ 108.925158][ T1023] ? __pfx_wb_workfn+0x10/0x10 [ 108.925182][ T1023] ? hrtimer_start_range_ns_common+0x818/0xb90 [ 108.925211][ T1023] ? rcu_is_watching+0x15/0xb0 [ 108.925230][ T1023] ? do_raw_spin_lock+0x12b/0x2f0 [ 108.925252][ T1023] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 108.925274][ T1023] ? rcu_is_watching+0x15/0xb0 [ 108.925291][ T1023] ? process_one_work+0x8cd/0x12b0 [ 108.925317][ T1023] ? rcu_is_watching+0x15/0xb0 [ 108.925333][ T1023] ? lock_acquire+0x5f/0x350 [ 108.925359][ T1023] ? process_one_work+0x8cd/0x12b0 [ 108.925385][ T1023] ? rcu_is_watching+0x15/0xb0 [ 108.925401][ T1023] ? process_one_work+0x8cd/0x12b0 [ 108.925428][ T1023] ? process_one_work+0x8cd/0x12b0 [ 108.925453][ T1023] process_one_work+0x93a/0x12b0 [ 108.925488][ T1023] ? __pfx_process_one_work+0x10/0x10 [ 108.925514][ T1023] ? do_raw_spin_lock+0x12b/0x2f0 [ 108.925538][ T1023] ? assign_work+0x3cf/0x5d0 [ 108.925567][ T1023] worker_thread+0xb05/0x10d0 [ 108.925584][ T1023] ? rcu_is_watching+0x15/0xb0 [ 108.925606][ T1023] ? __kthread_parkme+0x71/0x1f0 [ 108.925630][ T1023] kthread+0x388/0x470 [ 108.925652][ T1023] ? __pfx_worker_thread+0x10/0x10 [ 108.925668][ T1023] ? __pfx_kthread+0x10/0x10 [ 108.925690][ T1023] ret_from_fork+0x514/0xb70 [ 108.925715][ T1023] ? __pfx_ret_from_fork+0x10/0x10 [ 108.925737][ T1023] ? __switch_to+0xc89/0x1420 [ 108.925757][ T1023] ? __pfx_kthread+0x10/0x10 [ 108.925779][ T1023] ret_from_fork_asm+0x1a/0x30 [ 108.925812][ T1023] [ 109.079001][ T1023] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 110.335983][ T6231] loop3: detected capacity change from 0 to 256 [ 111.890598][ T5739] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 112.352136][ T5739] usb 1-1: Using ep0 maxpacket: 32 [ 112.361442][ T5739] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.361468][ T5739] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 112.386004][ T5739] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 112.386035][ T5739] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.386055][ T5739] usb 1-1: Product: syz [ 112.386068][ T5739] usb 1-1: Manufacturer: syz [ 112.386081][ T5739] usb 1-1: SerialNumber: syz [ 112.422687][ T5739] usb 1-1: config 0 descriptor?? [ 112.772352][ T6260] loop1: detected capacity change from 0 to 40427 [ 112.795715][ T6260] F2FS-fs (loop1): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 112.795744][ T6260] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 112.822009][ T6260] F2FS-fs (loop1): Image doesn't support compression [ 112.822032][ T6260] F2FS-fs (loop1): build fault injection rate: 690 [ 112.822045][ T6260] F2FS-fs (loop1): build fault injection type: 0x35f7 [ 112.850602][ T6260] F2FS-fs (loop1): invalid crc value [ 112.892529][ T6260] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 112.894404][ T6260] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0 [ 112.894419][ T6260] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 112.894432][ T6260] F2FS-fs (loop1): Start checkpoint disabled! [ 112.901144][ T6260] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0 [ 112.964868][ T6260] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 112.964895][ T6260] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 112.995012][ T5714] usb 1-1: USB disconnect, device number 3 [ 113.491105][ T6267] loop2: detected capacity change from 0 to 256 [ 114.313254][ T5714] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 114.524973][ T5714] usb 1-1: Using ep0 maxpacket: 32 [ 114.526403][ T6270] overlayfs: failed to resolve './file1': -2 [ 115.390011][ T6272] loop4: detected capacity change from 0 to 131072 [ 115.431246][ T6272] F2FS-fs (loop4): invalid crc value [ 115.538223][ T5714] usb 1-1: device descriptor read/all, error -71 [ 115.632199][ T6272] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 115.658284][ T68] kworker/u8:4: attempt to access beyond end of device [ 115.658284][ T68] loop1: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 115.658797][ T68] CPU: 0 UID: 0 PID: 68 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 115.658812][ T68] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 115.658819][ T68] Workqueue: writeback wb_workfn (flush-7:1) [ 115.658848][ T68] Call Trace: [ 115.658852][ T68] [ 115.658857][ T68] dump_stack_lvl+0xe8/0x150 [ 115.658872][ T68] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 115.658891][ T68] f2fs_write_end_io+0x124b/0x1710 [ 115.658908][ T68] __submit_merged_bio+0x258/0x6a0 [ 115.658917][ T68] ? rcu_is_watching+0x15/0xb0 [ 115.658928][ T68] f2fs_submit_merged_write+0x27d/0x380 [ 115.658946][ T68] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 115.658962][ T68] ? folio_clear_dirty_for_io+0x1bf/0x810 [ 115.658979][ T68] f2fs_sync_node_pages+0x1055/0x1210 [ 115.658993][ T68] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 115.659008][ T68] ? __percpu_counter_sum+0x1c6/0x1f0 [ 115.659025][ T68] ? __pfx___set_cpus_allowed_ptr_locked+0x10/0x10 [ 115.659039][ T68] ? blk_start_plug+0x51/0x1b0 [ 115.659050][ T68] f2fs_write_node_pages+0x311/0x700 [ 115.659060][ T68] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 115.659073][ T68] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 115.659084][ T68] ? rcu_is_watching+0x15/0xb0 [ 115.659093][ T68] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 115.659103][ T68] do_writepages+0x338/0x560 [ 115.659117][ T68] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 115.659128][ T68] ? rcu_preempt_deferred_qs_irqrestore+0x81f/0xc10 [ 115.659144][ T68] __writeback_single_inode+0x12e/0xf90 [ 115.659158][ T68] writeback_sb_inodes+0x9db/0x1ab0 [ 115.659169][ T68] ? rcu_is_watching+0x15/0xb0 [ 115.659179][ T68] ? trace_irq_enable+0x3b/0x140 [ 115.659195][ T68] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 115.659214][ T68] ? rcu_is_watching+0x15/0xb0 [ 115.659222][ T68] ? queue_io+0x2c2/0x450 [ 115.659233][ T68] wb_writeback+0x41c/0xad0 [ 115.659243][ T68] ? queue_io+0x2c1/0x450 [ 115.659253][ T68] ? __pfx_wb_writeback+0x10/0x10 [ 115.659262][ T68] ? rcu_is_watching+0x15/0xb0 [ 115.659274][ T68] wb_workfn+0x437/0x10f0 [ 115.659292][ T68] ? __pfx_wb_workfn+0x10/0x10 [ 115.659304][ T68] ? hrtimer_start_range_ns_common+0x818/0xb90 [ 115.659316][ T68] ? rcu_is_watching+0x15/0xb0 [ 115.659327][ T68] ? do_raw_spin_lock+0x12b/0x2f0 [ 115.659338][ T68] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 115.659350][ T68] ? rcu_is_watching+0x15/0xb0 [ 115.659359][ T68] ? process_one_work+0x8cd/0x12b0 [ 115.659373][ T68] ? rcu_is_watching+0x15/0xb0 [ 115.659382][ T68] ? lock_acquire+0x5f/0x350 [ 115.659396][ T68] ? process_one_work+0x8cd/0x12b0 [ 115.659411][ T68] ? rcu_is_watching+0x15/0xb0 [ 115.659419][ T68] ? process_one_work+0x8cd/0x12b0 [ 115.659434][ T68] ? process_one_work+0x8cd/0x12b0 [ 115.659448][ T68] process_one_work+0x93a/0x12b0 [ 115.659466][ T68] ? __pfx_process_one_work+0x10/0x10 [ 115.659480][ T68] ? do_raw_spin_lock+0x12b/0x2f0 [ 115.659493][ T68] ? assign_work+0x3cf/0x5d0 [ 115.659511][ T68] worker_thread+0xb05/0x10d0 [ 115.659520][ T68] ? rcu_is_watching+0x15/0xb0 [ 115.659531][ T68] ? __kthread_parkme+0x71/0x1f0 [ 115.659543][ T68] kthread+0x388/0x470 [ 115.659554][ T68] ? __pfx_worker_thread+0x10/0x10 [ 115.659563][ T68] ? __pfx_kthread+0x10/0x10 [ 115.659575][ T68] ret_from_fork+0x514/0xb70 [ 115.659587][ T68] ? __pfx_ret_from_fork+0x10/0x10 [ 115.659599][ T68] ? __switch_to+0xc89/0x1420 [ 115.659610][ T68] ? __pfx_kthread+0x10/0x10 [ 115.659621][ T68] ret_from_fork_asm+0x1a/0x30 [ 115.659638][ T68] [ 115.671999][ T6272] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 116.033950][ T68] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 116.041436][ T68] CPU: 0 UID: 0 PID: 68 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 116.041462][ T68] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 116.041473][ T68] Workqueue: writeback wb_workfn (flush-7:1) [ 116.041508][ T68] Call Trace: [ 116.041514][ T68] [ 116.041523][ T68] dump_stack_lvl+0xe8/0x150 [ 116.041549][ T68] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 116.041580][ T68] f2fs_write_end_io+0x124b/0x1710 [ 116.041612][ T68] __submit_merged_bio+0x258/0x6a0 [ 116.041629][ T68] ? rcu_is_watching+0x15/0xb0 [ 116.041649][ T68] f2fs_submit_merged_write+0x27d/0x380 [ 116.041680][ T68] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 116.041710][ T68] ? folio_clear_dirty_for_io+0x1bf/0x810 [ 116.041741][ T68] f2fs_sync_node_pages+0x1055/0x1210 [ 116.041767][ T68] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 116.041785][ T68] ? __percpu_counter_sum+0x1c6/0x1f0 [ 116.041815][ T68] ? __pfx___set_cpus_allowed_ptr_locked+0x10/0x10 [ 116.041839][ T68] ? blk_start_plug+0x51/0x1b0 [ 116.041859][ T68] f2fs_write_node_pages+0x311/0x700 [ 116.041874][ T68] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 116.041888][ T68] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 116.041899][ T68] ? rcu_is_watching+0x15/0xb0 [ 116.041909][ T68] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 116.041919][ T68] do_writepages+0x338/0x560 [ 116.041933][ T68] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 116.041944][ T68] ? rcu_preempt_deferred_qs_irqrestore+0x81f/0xc10 [ 116.041963][ T68] __writeback_single_inode+0x12e/0xf90 [ 116.041984][ T68] writeback_sb_inodes+0x9db/0x1ab0 [ 116.042011][ T68] ? rcu_is_watching+0x15/0xb0 [ 116.042030][ T68] ? trace_irq_enable+0x3b/0x140 [ 116.042055][ T68] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 116.042074][ T68] ? rcu_is_watching+0x15/0xb0 [ 116.042083][ T68] ? queue_io+0x2c2/0x450 [ 116.042093][ T68] wb_writeback+0x41c/0xad0 [ 116.042104][ T68] ? queue_io+0x2c1/0x450 [ 116.042114][ T68] ? __pfx_wb_writeback+0x10/0x10 [ 116.042123][ T68] ? rcu_is_watching+0x15/0xb0 [ 116.042135][ T68] wb_workfn+0x437/0x10f0 [ 116.042153][ T68] ? __pfx_wb_workfn+0x10/0x10 [ 116.042166][ T68] ? hrtimer_start_range_ns_common+0x818/0xb90 [ 116.042178][ T68] ? rcu_is_watching+0x15/0xb0 [ 116.042188][ T68] ? do_raw_spin_lock+0x12b/0x2f0 [ 116.042199][ T68] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 116.042211][ T68] ? rcu_is_watching+0x15/0xb0 [ 116.042219][ T68] ? process_one_work+0x8cd/0x12b0 [ 116.042234][ T68] ? rcu_is_watching+0x15/0xb0 [ 116.042243][ T68] ? lock_acquire+0x5f/0x350 [ 116.042257][ T68] ? process_one_work+0x8cd/0x12b0 [ 116.042271][ T68] ? rcu_is_watching+0x15/0xb0 [ 116.042280][ T68] ? process_one_work+0x8cd/0x12b0 [ 116.042294][ T68] ? process_one_work+0x8cd/0x12b0 [ 116.042308][ T68] process_one_work+0x93a/0x12b0 [ 116.042326][ T68] ? __pfx_process_one_work+0x10/0x10 [ 116.042340][ T68] ? do_raw_spin_lock+0x12b/0x2f0 [ 116.042353][ T68] ? assign_work+0x3cf/0x5d0 [ 116.042368][ T68] worker_thread+0xb05/0x10d0 [ 116.042377][ T68] ? rcu_is_watching+0x15/0xb0 [ 116.042388][ T68] ? __kthread_parkme+0x71/0x1f0 [ 116.042400][ T68] kthread+0x388/0x470 [ 116.042411][ T68] ? __pfx_worker_thread+0x10/0x10 [ 116.042420][ T68] ? __pfx_kthread+0x10/0x10 [ 116.042431][ T68] ret_from_fork+0x514/0xb70 [ 116.042444][ T68] ? __pfx_ret_from_fork+0x10/0x10 [ 116.042456][ T68] ? __switch_to+0xc89/0x1420 [ 116.042466][ T68] ? __pfx_kthread+0x10/0x10 [ 116.042478][ T68] ret_from_fork_asm+0x1a/0x30 [ 116.042495][ T68] [ 116.502242][ T68] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 116.517725][ T68] CPU: 1 UID: 0 PID: 68 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 116.517753][ T68] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 116.517765][ T68] Workqueue: writeback wb_workfn (flush-7:1) [ 116.517801][ T68] Call Trace: [ 116.517808][ T68] [ 116.517816][ T68] dump_stack_lvl+0xe8/0x150 [ 116.517842][ T68] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 116.517874][ T68] f2fs_write_end_io+0x124b/0x1710 [ 116.517905][ T68] __submit_merged_bio+0x258/0x6a0 [ 116.517923][ T68] ? rcu_is_watching+0x15/0xb0 [ 116.517943][ T68] f2fs_submit_merged_write+0x27d/0x380 [ 116.517982][ T68] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 116.518013][ T68] ? folio_clear_dirty_for_io+0x1bf/0x810 [ 116.518044][ T68] f2fs_sync_node_pages+0x1055/0x1210 [ 116.518070][ T68] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 116.518088][ T68] ? __percpu_counter_sum+0x1c6/0x1f0 [ 116.518120][ T68] ? __pfx___set_cpus_allowed_ptr_locked+0x10/0x10 [ 116.518145][ T68] ? blk_start_plug+0x51/0x1b0 [ 116.518165][ T68] f2fs_write_node_pages+0x311/0x700 [ 116.518184][ T68] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 116.518206][ T68] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 116.518228][ T68] ? rcu_is_watching+0x15/0xb0 [ 116.518247][ T68] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 116.518265][ T68] do_writepages+0x338/0x560 [ 116.518291][ T68] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 116.518312][ T68] ? rcu_preempt_deferred_qs_irqrestore+0x81f/0xc10 [ 116.518342][ T68] __writeback_single_inode+0x12e/0xf90 [ 116.518366][ T68] writeback_sb_inodes+0x9db/0x1ab0 [ 116.518389][ T68] ? rcu_is_watching+0x15/0xb0 [ 116.518409][ T68] ? trace_irq_enable+0x3b/0x140 [ 116.518435][ T68] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 116.518472][ T68] ? rcu_is_watching+0x15/0xb0 [ 116.518489][ T68] ? queue_io+0x2c2/0x450 [ 116.518509][ T68] wb_writeback+0x41c/0xad0 [ 116.518528][ T68] ? queue_io+0x2c1/0x450 [ 116.518549][ T68] ? __pfx_wb_writeback+0x10/0x10 [ 116.518566][ T68] ? rcu_is_watching+0x15/0xb0 [ 116.518591][ T68] wb_workfn+0x437/0x10f0 [ 116.518624][ T68] ? __pfx_wb_workfn+0x10/0x10 [ 116.518647][ T68] ? hrtimer_start_range_ns_common+0x818/0xb90 [ 116.518669][ T68] ? rcu_is_watching+0x15/0xb0 [ 116.518689][ T68] ? do_raw_spin_lock+0x12b/0x2f0 [ 116.518711][ T68] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 116.518732][ T68] ? rcu_is_watching+0x15/0xb0 [ 116.518749][ T68] ? process_one_work+0x8cd/0x12b0 [ 116.518776][ T68] ? rcu_is_watching+0x15/0xb0 [ 116.518793][ T68] ? lock_acquire+0x5f/0x350 [ 116.518819][ T68] ? process_one_work+0x8cd/0x12b0 [ 116.518844][ T68] ? rcu_is_watching+0x15/0xb0 [ 116.518861][ T68] ? process_one_work+0x8cd/0x12b0 [ 116.518888][ T68] ? process_one_work+0x8cd/0x12b0 [ 116.518913][ T68] process_one_work+0x93a/0x12b0 [ 116.518948][ T68] ? __pfx_process_one_work+0x10/0x10 [ 116.518980][ T68] ? do_raw_spin_lock+0x12b/0x2f0 [ 116.519004][ T68] ? assign_work+0x3cf/0x5d0 [ 116.519032][ T68] worker_thread+0xb05/0x10d0 [ 116.519049][ T68] ? rcu_is_watching+0x15/0xb0 [ 116.519070][ T68] ? __kthread_parkme+0x71/0x1f0 [ 116.519097][ T68] kthread+0x388/0x470 [ 116.519118][ T68] ? __pfx_worker_thread+0x10/0x10 [ 116.519135][ T68] ? __pfx_kthread+0x10/0x10 [ 116.519157][ T68] ret_from_fork+0x514/0xb70 [ 116.519181][ T68] ? __pfx_ret_from_fork+0x10/0x10 [ 116.519203][ T68] ? __switch_to+0xc89/0x1420 [ 116.519224][ T68] ? __pfx_kthread+0x10/0x10 [ 116.519245][ T68] ret_from_fork_asm+0x1a/0x30 [ 116.519277][ T68] [ 116.866056][ T68] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 116.866418][ T68] CPU: 0 UID: 0 PID: 68 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 116.866443][ T68] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 116.866454][ T68] Workqueue: writeback wb_workfn (flush-7:1) [ 116.866488][ T68] Call Trace: [ 116.866495][ T68] [ 116.866504][ T68] dump_stack_lvl+0xe8/0x150 [ 116.866528][ T68] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 116.866559][ T68] f2fs_write_end_io+0x124b/0x1710 [ 116.866589][ T68] __submit_merged_bio+0x258/0x6a0 [ 116.866606][ T68] ? rcu_is_watching+0x15/0xb0 [ 116.866627][ T68] f2fs_submit_merged_write+0x27d/0x380 [ 116.866655][ T68] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 116.866684][ T68] ? folio_clear_dirty_for_io+0x1bf/0x810 [ 116.866713][ T68] f2fs_sync_node_pages+0x1055/0x1210 [ 116.866738][ T68] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 116.866755][ T68] ? __percpu_counter_sum+0x1c6/0x1f0 [ 116.866785][ T68] ? __pfx___set_cpus_allowed_ptr_locked+0x10/0x10 [ 116.866808][ T68] ? blk_start_plug+0x51/0x1b0 [ 116.866827][ T68] f2fs_write_node_pages+0x311/0x700 [ 116.866846][ T68] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 116.866867][ T68] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 116.866887][ T68] ? rcu_is_watching+0x15/0xb0 [ 116.866904][ T68] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 116.866921][ T68] do_writepages+0x338/0x560 [ 116.866946][ T68] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 116.866966][ T68] ? rcu_preempt_deferred_qs_irqrestore+0x81f/0xc10 [ 116.866994][ T68] __writeback_single_inode+0x12e/0xf90 [ 116.867024][ T68] writeback_sb_inodes+0x9db/0x1ab0 [ 116.867046][ T68] ? rcu_is_watching+0x15/0xb0 [ 116.867065][ T68] ? trace_irq_enable+0x3b/0x140 [ 116.867090][ T68] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 116.867125][ T68] ? rcu_is_watching+0x15/0xb0 [ 116.867142][ T68] ? queue_io+0x2c2/0x450 [ 116.867161][ T68] wb_writeback+0x41c/0xad0 [ 116.867179][ T68] ? queue_io+0x2c1/0x450 [ 116.867199][ T68] ? __pfx_wb_writeback+0x10/0x10 [ 116.867215][ T68] ? rcu_is_watching+0x15/0xb0 [ 116.867238][ T68] wb_workfn+0x437/0x10f0 [ 116.867269][ T68] ? __pfx_wb_workfn+0x10/0x10 [ 116.867292][ T68] ? hrtimer_start_range_ns_common+0x818/0xb90 [ 116.867312][ T68] ? rcu_is_watching+0x15/0xb0 [ 116.867330][ T68] ? do_raw_spin_lock+0x12b/0x2f0 [ 116.867351][ T68] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 116.867372][ T68] ? rcu_is_watching+0x15/0xb0 [ 116.867388][ T68] ? process_one_work+0x8cd/0x12b0 [ 116.867413][ T68] ? rcu_is_watching+0x15/0xb0 [ 116.867428][ T68] ? lock_acquire+0x5f/0x350 [ 116.867452][ T68] ? process_one_work+0x8cd/0x12b0 [ 116.867477][ T68] ? rcu_is_watching+0x15/0xb0 [ 116.867493][ T68] ? process_one_work+0x8cd/0x12b0 [ 116.867518][ T68] ? process_one_work+0x8cd/0x12b0 [ 116.867541][ T68] process_one_work+0x93a/0x12b0 [ 116.867574][ T68] ? __pfx_process_one_work+0x10/0x10 [ 116.867599][ T68] ? do_raw_spin_lock+0x12b/0x2f0 [ 116.867621][ T68] ? assign_work+0x3cf/0x5d0 [ 116.867648][ T68] worker_thread+0xb05/0x10d0 [ 116.867664][ T68] ? rcu_is_watching+0x15/0xb0 [ 116.867684][ T68] ? __kthread_parkme+0x71/0x1f0 [ 116.867707][ T68] kthread+0x388/0x470 [ 116.867727][ T68] ? __pfx_worker_thread+0x10/0x10 [ 116.867742][ T68] ? __pfx_kthread+0x10/0x10 [ 116.867762][ T68] ret_from_fork+0x514/0xb70 [ 116.867786][ T68] ? __pfx_ret_from_fork+0x10/0x10 [ 116.867807][ T68] ? __switch_to+0xc89/0x1420 [ 116.867826][ T68] ? __pfx_kthread+0x10/0x10 [ 116.867846][ T68] ret_from_fork_asm+0x1a/0x30 [ 116.867877][ T68] [ 117.035342][ T68] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 117.289425][ T5596] loop1: lost filesystem error report for type 5 error -108 [ 117.511636][ T6272] F2FS-fs (loop4): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 127.872313][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.899482][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 186.135135][ T6297] Bluetooth: hci0: command 0x0406 tx timeout [ 186.135366][ T6297] Bluetooth: hci1: command 0x0406 tx timeout [ 186.135725][ T6297] Bluetooth: hci3: command 0x0406 tx timeout [ 187.572149][ T5613] Bluetooth: hci2: command 0x0406 tx timeout [ 189.308945][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 189.330735][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 232.222504][ T5609] Bluetooth: hci4: command 0x0406 tx timeout [ 250.724899][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.755640][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.209080][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 312.237260][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.864400][ T39] INFO: task kworker/0:1:10 blocked for more than 143 seconds. [ 324.873602][ T39] Not tainted syzkaller #0 [ 324.888261][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 324.922013][ T39] task:kworker/0:1 state:D stack:22568 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 324.987515][ T39] Workqueue: events_power_efficient reg_check_chans_work [ 325.000557][ T39] Call Trace: [ 325.026870][ T39] [ 325.044368][ T39] __schedule+0x1709/0x5530 [ 325.103258][ T39] ? irqentry_exit+0x218/0x8f0 [ 325.124816][ T39] ? trace_irq_disable+0x3b/0x140 [ 325.159425][ T39] ? __pfx___schedule+0x10/0x10 [ 325.186098][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 325.213488][ T39] rt_mutex_schedule+0x76/0xf0 [ 325.225683][ T39] rt_mutex_slowlock_block+0x55c/0x680 [ 325.255625][ T39] ? rt_mutex_slowlock_block+0x33a/0x680 [ 325.265888][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 325.307635][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 325.310814][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 325.371470][ T39] ? lock_acquire+0x5f/0x350 [ 325.393555][ T39] ? reg_check_chans_work+0x1a1/0x1110 [ 325.404566][ T39] mutex_lock_nested+0x168/0x1d0 [ 325.441397][ T39] ? process_one_work+0x8cd/0x12b0 [ 325.465086][ T39] reg_check_chans_work+0x1a1/0x1110 [ 325.502145][ T39] ? __pfx_reg_check_chans_work+0x10/0x10 [ 325.527808][ T39] ? process_one_work+0x8cd/0x12b0 [ 325.555402][ T39] ? rcu_is_watching+0x15/0xb0 [ 325.567622][ T39] ? lock_acquire+0x5f/0x350 [ 325.589448][ T39] ? preempt_schedule_common+0x82/0xd0 [ 325.624056][ T39] ? process_one_work+0x8cd/0x12b0 [ 325.638927][ T39] ? rcu_is_watching+0x15/0xb0 [ 325.683627][ T39] ? process_one_work+0x8cd/0x12b0 [ 325.703223][ T39] ? process_one_work+0x8cd/0x12b0 [ 325.732582][ T39] process_one_work+0x93a/0x12b0 [ 325.732633][ T39] ? __pfx_process_one_work+0x10/0x10 [ 325.732659][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 325.732693][ T39] ? assign_work+0x3cf/0x5d0 [ 325.732722][ T39] worker_thread+0xb05/0x10d0 [ 325.732750][ T39] kthread+0x388/0x470 [ 325.732772][ T39] ? __pfx_worker_thread+0x10/0x10 [ 325.732789][ T39] ? __pfx_kthread+0x10/0x10 [ 325.732812][ T39] ret_from_fork+0x514/0xb70 [ 325.732837][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 325.732860][ T39] ? __switch_to+0xc89/0x1420 [ 325.732881][ T39] ? __pfx_kthread+0x10/0x10 [ 325.732903][ T39] ret_from_fork_asm+0x1a/0x30 [ 325.732935][ T39] [ 325.898354][ T39] INFO: lockdep is turned off. [ 325.908689][ T39] NMI backtrace for cpu 1 [ 325.908712][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 325.908734][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 325.908744][ T39] Call Trace: [ 325.908750][ T39] [ 325.908758][ T39] dump_stack_lvl+0xe8/0x150 [ 325.908788][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 325.908811][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 325.908836][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 325.908859][ T39] sys_info+0x135/0x170 [ 325.908877][ T39] watchdog+0xfd7/0x1030 [ 325.908903][ T39] ? watchdog+0x1c7/0x1030 [ 325.908928][ T39] kthread+0x388/0x470 [ 325.908950][ T39] ? __pfx_watchdog+0x10/0x10 [ 325.908971][ T39] ? __pfx_kthread+0x10/0x10 [ 325.908992][ T39] ret_from_fork+0x514/0xb70 [ 325.909017][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 325.909039][ T39] ? __switch_to+0xc89/0x1420 [ 325.909059][ T39] ? __pfx_kthread+0x10/0x10 [ 325.909080][ T39] ret_from_fork_asm+0x1a/0x30 [ 325.909112][ T39] [ 325.909145][ T39] Sending NMI from CPU 1 to CPUs 0: [ 325.909171][ C0] NMI backtrace for cpu 0 [ 325.909190][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 325.909207][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 325.909216][ C0] RIP: 0010:rcu_is_watching+0x8/0xb0 [ 325.909234][ C0] Code: 7a 43 03 eb cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 <53> 65 ff 05 d0 77 cb 10 e8 bb 99 86 09 89 c3 83 f8 08 73 65 49 bf [ 325.909247][ C0] RSP: 0018:ffffc90000007e50 EFLAGS: 00000057 [ 325.909262][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff8187ba6c [ 325.909272][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8f8ce3f0 [ 325.909282][ C0] RBP: dffffc0000000000 R08: ffffffff8f8ce3f7 R09: 1ffffffff1f19c7e [ 325.909294][ C0] R10: dffffc0000000000 R11: fffffbfff1f19c7f R12: 0000004bd510fd64 [ 325.909305][ C0] R13: 0000000000000002 R14: ffff8880b86286e8 R15: 0000004bd510fd64 [ 325.909316][ C0] FS: 0000000000000000(0000) GS:ffff888125ecb000(0000) knlGS:0000000000000000 [ 325.909328][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 325.909339][ C0] CR2: 00007fa349ad97a0 CR3: 0000000056802000 CR4: 00000000003526f0 [ 325.909353][ C0] Call Trace: [ 325.909358][ C0] [ 325.909365][ C0] trace_softirq_raise+0x3b/0x130 [ 325.909382][ C0] raise_ktimers_thread+0xc/0x80 [ 325.909398][ C0] hrtimer_interrupt+0x432/0x900 [ 325.909426][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 325.909449][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 325.909469][ C0] [ 325.909474][ C0] [ 325.909479][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 325.909496][ C0] RIP: 0010:rcu_is_watching+0x70/0xb0 [ 325.909511][ C0] Code: c3 58 8d 76 92 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d 79 77 cb 10 74 11 83 e0 04 c1 e8 02 5b <41> 5e 41 5f e9 17 46 8a 09 cc e8 71 46 89 ff eb e8 48 c7 c7 c0 15 [ 325.909523][ C0] RSP: 0018:ffffc90000157cd8 EFLAGS: 00000202 [ 325.909535][ C0] RAX: 0000000000000001 RBX: ffffffff8dc0a190 RCX: 0000000080000001 [ 325.909545][ C0] RDX: 0000000000000000 RSI: ffffffff8baa3d60 RDI: ffffffff8baa3d20 [ 325.909556][ C0] RBP: 0000000000000003 R08: ffffffff8f8ce3f7 R09: 1ffffffff1f19c7e [ 325.909566][ C0] R10: dffffc0000000000 R11: fffffbfff1f19c7f R12: 0000000080000000 [ 325.909577][ C0] R13: 0000000000000002 R14: ffffffff8d9027d0 R15: dffffc0000000000 [ 325.909595][ C0] handle_softirqs+0x211/0x6c0 [ 325.909614][ C0] run_ktimerd+0x69/0x100 [ 325.909630][ C0] smpboot_thread_fn+0x57c/0xa80 [ 325.909647][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 325.909666][ C0] kthread+0x388/0x470 [ 325.909684][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 325.909699][ C0] ? __pfx_kthread+0x10/0x10 [ 325.909717][ C0] ret_from_fork+0x514/0xb70 [ 325.909736][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 325.909754][ C0] ? __switch_to+0xc89/0x1420 [ 325.909770][ C0] ? __pfx_kthread+0x10/0x10 [ 325.909788][ C0] ret_from_fork_asm+0x1a/0x30 [ 325.909814][ C0] [ 326.050253][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 326.050289][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 326.050311][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 326.050321][ T39] Call Trace: [ 326.050328][ T39] [ 326.050337][ T39] vpanic+0x56c/0xa60 [ 326.050366][ T39] ? __pfx_vpanic+0x10/0x10 [ 326.050390][ T39] ? irqentry_exit+0x218/0x8f0 [ 326.050414][ T39] ? trace_irq_disable+0x3b/0x140 [ 326.050441][ T39] panic+0xc5/0xd0 [ 326.050462][ T39] ? __pfx_panic+0x10/0x10 [ 326.050490][ T39] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 326.050514][ T39] watchdog+0x1030/0x1030 [ 326.050542][ T39] ? watchdog+0x1c7/0x1030 [ 326.050567][ T39] kthread+0x388/0x470 [ 326.050589][ T39] ? __pfx_watchdog+0x10/0x10 [ 326.050610][ T39] ? __pfx_kthread+0x10/0x10 [ 326.050630][ T39] ret_from_fork+0x514/0xb70 [ 326.050656][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 326.050677][ T39] ? __switch_to+0xc89/0x1420 [ 326.050696][ T39] ? __pfx_kthread+0x10/0x10 [ 326.050716][ T39] ret_from_fork_asm+0x1a/0x30 [ 326.050746][ T39] [ 326.051107][ T39] Kernel Offset: disabled