last executing test programs: 58.350901632s ago: executing program 2 (id=58): creat(&(0x7f00000001c0)='./file0\x00', 0x8) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000002180)="$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") 57.579146594s ago: executing program 2 (id=65): socket$kcm(0x2, 0x200000000000001, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) close(0x3) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000002100000000000000000095"], &(0x7f0000002100)='syzkaller\x00', 0x3}, 0x94) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 57.015333094s ago: executing program 2 (id=69): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="c014ef4404236f9d646fae87879085133ad8975219d7c5b0e17dd86d11bede6adfc32eed7f19fa34880cce7ec7990f63e5d7996e33044ee8a4b2e6b43a7c6d25d508062bd3333b86453bc2f02b2617adecd3d5a0ea7561f9f63dea03c7f7d0fdec633a94741d77d3104ba57f74dce4b01be342dcc7b2df0a450ac40e4fbe4bebd4f60df318fb469f802375dc7a08f4649f9ed5b384d30b0fd964d74d91db023b617888d7b56cb0", @ANYRESOCT], 0x1, 0x570, &(0x7f0000001080)="$eJzs3VFv01YbwPHHpYWSV0Lo5RVCVYFDeScVqQQnhaCIK885SQ84dmQ7qL1CFU1RRQoTZdLam40btknbh+B2H2KfYN9jV2jfYJ1sJ22zNg3QNkHl/6vgOPaxz3OcyI9OGx8LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQy63YdsESz/jNRdWfWwmD+u7Lzt77VsitnuKQdkWs5J9MTsqVbNWV/4mMdTZfTv6bkens1bRMJsWkbP3n8sUHl8bHuvsfEvBQbGxuPV9ut1uvRh3ICbp6rv+2mvZNFJi6U9PKRIEql0r2nYVqpKrG09FSFOu6ckPtxEGoZt1bqlAuzyudXwqafq3ieLq78v7tom2X1MN8QzthFPh3HuYjd8F4nvFraZ1kc1LnfvJBfGRiFWunrtTqWrs1P6gDSaXCh1QqDqpUtIvFQqFYLJTule/dt+3xfSvsf5F9Nbof2j/+3N4e1B5Oo+O9gANHMNbJ/+KJEV+asijqwB9XKhJKIPU+2zu6+f+rO/rQdvfm/26Wv7K7eUrS/H8te3WtX/7vE8vwfjZkU7bkuSxLW9rSklcjj2i4PzXR4ouRSAIxUhcnXaM6a5SUpSQlseWJLEhVIlFSFSOeaIlkSSKJRaefKFdC0eJILIGEomRWXLklSgpSlrLMixIteVmSQJriS00q4qRHWZW19LzPi7L6xbhTqdC3G7nu564lxUN6e5z5H1+qY71+A0ex3c3/AAAAAADg1LLS374n4/8JuZouVY2n7VGHBQAAAAAAjlH6l//ppJhIlq6KxfgfAAAAAIDTxkrvsbNEJCfXs6VVsdLbpfglAAAAAAAAp0T69/9rSZHOgXJdrJ3pUhj/AwAAAABwSvw0cI79qHHO+v0vCcMJ601j8f/WupPUc9bPZPtlxZvdI8bVKetC5yBpUcqK8XFXT1uTWaWdSTDfd4rVQXFYBwXww04AMjiAS+Pyi9zI6txYycqV7paslVzVeDrvBt6DgjjOhbFYL8bfvlj7TtLu/+zXL1iyutZu5Z++bK+ksaQdf7PemUBx3zyKh8TyOp1vIb3noqfH3t/Z6on0RoxOu7msXXtv/zvPShj7iDbfykxWZ6Yz422ut/+TSZuFfE/vk207UUzKWrtVOGLP38rNrM7N2ZtZcUAUxXy/96BzLop7o/ikc7E/CqsnivMiMiiK+X5RWB8WBQCMymqfLLSb//fl3U+41n5adpePzO5vZTarMzuVXljHpw7IK/agK7p9xOz2275nIPXLsUm7v+60m2XVd8kO7/q2G3lFKzmFZ16vfyOXNza3bq+tLz9rPWu9KBbnS/Zd275XlIm0G51iT6Tb58g9AIDM4GfsDKxh3c1G1RdFDh5V/3fnKwV5eSovpS0rMpfebZB+4+DAo+b2fA1hbsCoNZemyewJL3OHjC3Ppnc5dI9bPLRubwzzw3grAAAYmpkBefhD8v/cgHF3by7vHR2flX51C0M/FwAAfCl0+N7KxT9aYWgaTwrlcsGJF7QKA/eRCk2lppXxYx26C45f06oRBnHgBl6y8NhUdKSiZqMRhLGqBqFqBJFZTJ/8rjqPfo903fFj40YNTzuRVm7gx44bq4qJzqtG82vPRAs6THeOGto1VeM6sQl8FQXN0NV5pSKt91Q0Fe3HpmqSRV81QlN3wiX1OPCada0ssSQ0jTjIDthty/jVIKynh82P+mQDAPCZ2Njcer7cbrdeneDCqPsIAAB6kaUBAAAAAAAAAAAAAAAAAAAAAPj8DeP+PxZGsXC28w4Poa3uVNCj7vIJL1hD7eC4iIyyywMvHd+f6IUJwIn7JwAA//8YSUto") openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000700), 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x100) 56.503028849s ago: executing program 2 (id=71): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000006, &(0x7f0000000000)={[{@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@umask={'umask', 0x3d, 0x20009}}, {@anchor={'anchor', 0x3d, 0xffff}}, {@gid_forget}, {@volume={'volume', 0x3d, 0x3ff}}, {}, {}, {@lastblock}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}]}, 0x1, 0xc32, &(0x7f0000000e00)="$eJzs3U1sXNd9N+D/uRyKI/l9KyZ2FCeNi0lbpLJiufqKqViFO6pptgFkWQjF7AJwJI7UgSmSIKlGNtKC6aaLLgIURRdZEWiNAikaGE0RdMm0LpBsvCiy6opoYSMoumCLAFkFLO6dM9KQIm1GFCVKeh6b+s3ce86dc+4Z3ysLOvcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDxe6+dP3EyPexWAAAP0sXxr5445f4PAE+Uy/7/HwAAAAAAAAAAAAAA9rsURTwdKeYurqXJ6n1X/UJn8OatidGxrasdTFXNgap8+VM/eer0mS+9NHK2lxc6Mx9R/377bLwxfvl849XZG3Pz7YWF9lRjYqZzdXaqveMj7Lb+ZseqE9C48ebNqWvXFhqnXjy9Yfet4Q+HnjoyfG7k+ePP9cpOjI6Njd8pUu8vX7vnhnRtN8PjQBRxPFK88L2fplZEFLH7c1F/sGO/2cGqE8eqTkyMjlUdme60ZhbLnZd6J6KIaPRVavbO0dZjEbXBB9qH7TUjlsrmlw0+VnZvfK4137oy3W5cas0vdhY7szOXUre1ZX8aUcTZFLEcEatDdx9uMIqoRYrvHF5LVyJioHcevlhNDN6+HcUe9nEHynY2BiOWi0dgzPaxoSji9Ujxs/eOxtV8namuNV+IeL3MH0S8U+YrEan8YpyJ+GCL7xGPploU8efl+J9bS1PV9aB3XbnwtcZXZq7N9pXtXVd+yfvDXVeKh3R/OLgpH4x9fm2qRxGt6oq/lu79NzsAAAAAAAAAAAAAAAAA3G8Ho4jPRIrX/u2PqnnFUc1LP3xu5PeH/3//nPFnP+Y4ZdkXI2Kp2Nmc3AN5YuCldCmlhzyX+ElWjyL+OM//+9bDbgwAAAAAAAAAAAAAAAAAAMATrYifRIqX3z+alqN/TfHOzPXG5daV6e6qsL21f3trpq+vr683UjebOSdzLuVczrmSczVnFLl+zmbOyZxLOZdzruRczRkDuX7OZs7JnEs5l3Ou5FzNGbVcP2cz52TOpZzLOVdyruaMfbJ2LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaEZPRzZWhh906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0lIr4fqRo/EHz9rZaRKTq366j5S9nonmgzE9Gc6TMV6J5PmerylrzWw+h/ezOYCrix5FiqP7u7QHP4z/YfXf7axDvfPPOu8/WujnQ2zn84dBTRw6fGxn7tWe3e522asCxC52Zm7caE6NjY+N9m2v50z/Zt204f25xf7pORCy89fabrenp9vy9vyi/Aruo/gi9SLUnpadeVC+iti+a8XD6zhOgvP9/ECl++/1/793wu/f/evy/7rvbd/j4+Z/cuf+/vPlAO7z/1zbXy/f/8p6+1f3/6b5tL+ffjQzWIuqLN+YGj0TUF956+3jnRut6+3p75syJE18eGfny6RODByLq1zrT7b5X9+V0AQAAAAAAAAAAAAAAADw4qYjfjRStH6+lRkTcquZrDZ8bef74cwMxUM232jBv+43xy+cbr87emJtvLyy0pxoTM52rs1PtnX5cvZruNTE6tied+VgH97j9B+uvzs69Nd+5/oeLW+4/VD9/ZWFxvnV1691xMIqIZv+WY1WDJ0bHqkZPd1ozVdVLW06m/+UNpiL+I1JcPdNIn8/b8vz/zTP8N8z/X9p8oD2a//+Jvm3lZ6ZUxM8jxW/9xbPx+aqdh+Kuc5bL/U2kOHb2c7lcHCjL9drQfa5Ad2ZgWfZ/IsU//GJj2d58yKfvlD254xP7iCjH/3Ck+P6ffTd+PW/b+PyHrcf/0OYD7dH4P9O37dCG5xXsuuvk8T8eKV55+t34jbzto57/0Xv2xtFc+PbzOfZo/D/Vt204f+5v3p+uAwAAAAAAAAAAPNIGUxF/Gyl+OFZLL+VtO/n7f1ObD7RHf//r033bpu7PekUf+2LXJxUAAAAA9onBVMRPIsX1xXdvz6HeOP+7b/7n79yZ/zmaNu2t/pzvV6rnBtzPP//rN5w/d3L33QYAAAAAAAAAAAAAAAAAAIB9JaUiXsrrqU9W8/mntl1PfSVSvPZfL+Ry6UhZrrcO/HD1a/3i7Mzx89PTs1dbi60r0+3G+Fzrarus+0ykWPvrz+W6RbW+em+9+e4a73fWYp+PFGN/1yvbXYu9tzb5M72yS+2TZdlPRIr//PuNZXvrWH/qznFPlWX/KlJ8/Z+2LnvkTtnTZdnvRooffb3RK3uoLNt7Puqn75R98epssQejAgAAAAAAAAAAAAAAAAAAwJNmMBXxp5Hiv28s357Ln9f/H+x7W3nnm33r/W9yq1rnf7ha/3+71/ey/n/1XIGl7T4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTymKeDtSzF1cSytD5fuu+oXOzM1bE6NjW1c7mKqaA1X58qd+8tTpM196aeRsLz+6/v32mXhj/PL5xquzN+bm2wsL7anGxEzn6uxUe8dH2G39zY5VJ6Bx482bU9euLTROvXh6w+5bwx8OPXVk+NzI88ef65WdGB0bG+8rUxu850+/S9pm+4Eo4i8jxQvf+2n64VBEEbs/Fx/z3dlrB6tOHKs6MTE6VnVkutOaWSx3XuqdiCKi0Vep2TtHD2AsdqUZsVQ2v2zwsbJ743Ot+daV6XbjUmt+sbPYmZ25lLqtLfvTiCLOpojliFgduvtwg1HEm5HiO4fX0j8PRQz0zsMXL45/9cSp7dtR7GEfd6BsZ2MwYrn4qDHbosNsMBRF/GOk+Nl7R+NfhiJq0f2JL0S8XuYPIt6J7nin8otxJuIDp/WxUYsi/rcc/3Nr6b2h8nrQu65c+FrjKzPXZvvK9q4rj/z94UHa5/eTehTxo+qKv5b+1X/XAAAAAAAAAAAAAAAAAPtIEb8aKV5+/2iq5gffnlPcmbneuNy6Mt2d1teb+9ebM72+vr7eSN1s5pzMuZRzOedKztWcUeT6OZtl1tfXJ/P7pZzLOVdyruaMgVw/ZzPnZM6lnMs5V3Ku5oxarp+zmXMy51LO5ZwrOVdzxj6ZuwcAAAAAAAAAAAAAAAAAADxeiuqfFN/+xlpaH6rWlx7o7VuxHuhj7/8CAAD//0pa+Ck=") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000d40), 0x10000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) removexattr(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)=@known='system.posix_acl_default\x00') 55.207885837s ago: executing program 2 (id=77): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d507df08c410448200dc01020301090212007000000000090400000003"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 54.273933219s ago: executing program 2 (id=82): syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES32=r2], 0x44}}, 0x2000800) 53.598258216s ago: executing program 32 (id=82): syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES32=r2], 0x44}}, 0x2000800) 13.522557455s ago: executing program 1 (id=222): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x8202, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)) 12.990873051s ago: executing program 1 (id=227): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) set_mempolicy(0x1, 0x0, 0x3ff) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 12.066947808s ago: executing program 0 (id=230): setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0xa, 0x3, 0x3a) landlock_create_ruleset(0x0, 0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x3ff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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") open(&(0x7f00000000c0)='./bus\x00', 0x68042, 0x62) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r0, 0x2007ffb) read$FUSE(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) 10.045269236s ago: executing program 0 (id=236): r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x141042, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40809440, 0x0) 9.678354989s ago: executing program 0 (id=237): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x22b, &(0x7f0000000080)={0x0, 0x5321, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000), &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_uring_register$IORING_UNREGISTER_NAPI(r0, 0x1c, &(0x7f0000000100), 0x1) 9.263858188s ago: executing program 0 (id=240): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@nomblk_io_submit}]}, 0x1, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) 8.727071199s ago: executing program 1 (id=243): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r2, &(0x7f0000000240)=""/4096, 0x1000) 8.365378034s ago: executing program 0 (id=246): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000280)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.059131864s ago: executing program 3 (id=249): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)={0x28, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0xfffffffe}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x20004014) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) fcntl$setstatus(r3, 0x4, 0x2400) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0xf0b, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfffe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x6, 0x6, 0xd5}}}}]}, 0x44}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x2000c800) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 8.058967026s ago: executing program 1 (id=250): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b80)={0x34, &(0x7f00000009c0)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 7.572174946s ago: executing program 0 (id=252): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000b80), 0x204008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = open(&(0x7f0000000280)='./cgroup\x00', 0x147842, 0x89) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7) 7.512723575s ago: executing program 5 (id=253): lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000500)=ANY=[], 0xfe37, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0xfe, 0x0) 6.928736602s ago: executing program 33 (id=252): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000b80), 0x204008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = open(&(0x7f0000000280)='./cgroup\x00', 0x147842, 0x89) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7) 6.908408532s ago: executing program 3 (id=256): unshare(0x24040400) r0 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r0, 0x0, 0x0) 6.907438434s ago: executing program 5 (id=258): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$inet_udplite(0x2, 0x2, 0x88) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x8001}) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r0, r0}, &(0x7f0000001cc0)=""/194, 0xc2, &(0x7f00000000c0)={&(0x7f0000000000)={'xxhash64-generic\x00'}}) 6.587058711s ago: executing program 3 (id=259): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000000c0)={0x8, 0x2, 'client0\x00', 0x7, "a72e4d63bc515a59", "7f42e1e396067740e0182ac6b9dcfe2f1897f395d794ee4ceb8d7d066a182639", 0x427, 0x80}) tkill(r0, 0x7) 6.571184574s ago: executing program 4 (id=260): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x2) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) 6.252776648s ago: executing program 3 (id=261): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}, 0x0, 0x0, 0x0}, &(0x7f0000000980)={0x44, &(0x7f0000000280)={0x40, 0xe, 0x2c, "872c51aeb0d83b5364b9b41af1fb7597dc126ccb63c3cc85cee6da8c5692bedf28890038ac8d79cc3280ff18"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 6.13493663s ago: executing program 4 (id=262): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") 5.805971715s ago: executing program 6 (id=263): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000300000000000000403fd03f180100002020782500000000002020207b1af8ff000000006d0afeff000000000701b092f8ffffffb702000008000000b70300000f200000a500feff0600030095"], &(0x7f0000000080)='GPL\x00', 0xb, 0x101a, &(0x7f0000000840)=""/4122, 0x41100, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 5.439095675s ago: executing program 6 (id=264): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000900000"], &(0x7f0000000100)='GPL\x00'}, 0x94) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="140100002e00010000000000fcdbdf250401f2800c00180008ac0f000000000014000100000000000000008b000000000000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b94"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000000040450c0b760000000000010902240001000000000904000001030000000921fcff0001220700090581030000fe0000639fa1"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="000048ff00"/14, 0x0, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x1e) 4.486892299s ago: executing program 4 (id=265): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 4.331566003s ago: executing program 5 (id=266): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='scalable', 0x8) sendmmsg$inet(r0, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000a80)="93bffce623851797a8dc7901f0048678cd35ef837c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e364c8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6000000000000000000000000000000000000000000e072049ea280ade357f667efa3f2602752f463d7687717beb1a2de8b084f9afabef15b0597996ced9da8afad5169efd16cdaaa362605c9904de56388bc3a", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)='%', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000500)="ce", 0x1}], 0x1}}], 0x3, 0xc0) 4.197491887s ago: executing program 1 (id=267): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000240)={[{@nodiscard}, {@nocheckpoint_merge}, {@alloc_mode_def}, {@six_active_logs}, {@user_xattr}, {@fault_injection={'fault_injection', 0x3d, 0x10}}, {@discard}, {@noacl}, {@fsync_mode_posix}, {@alloc_mode_def}, {@noextent_cache}, {@two_active_logs}, {@fault_type={'fault_type', 0x3d, 0xfffffe}}]}, 0x1, 0x5505, &(0x7f0000000340)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x4a142, 0x40) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) 4.093606027s ago: executing program 4 (id=268): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getpid() syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="6e6f71756f74612c6e6f696e746567726974792c6e6f646973636172642c67727071756f74612c696f636861727365743d63703933322c6e6f646973636172642c71756f74612c6e6f71756f74612c6e6f696e746567726974792c004d5afe2de1b3a136431fa8ea7b501ecb08f40540fff494c16f9b0781a740588d55fa"], 0x1, 0x614f, &(0x7f000000ccc0)="$eJzs3c1vHGcdB/Df7JtfSlOrh6pECLlteCmleS0hUKDpAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFEiCMn/oAeuHLjDyBSAgL11EFjP48znq69dt3dWXs+H8mZ+e0z430m35198czsEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/PAHP75QRMT1X6UbViI+F/2IXsRSVa9GxNLqSl5+EBHPx1ZzPBcRw4WIav2tf56JeC0iPjwV8ejx/bXq5osH7Mf3//yPP/zkqR/9/U/Dc//7y93+63std+/eb//71wdH22YAAADomrIsyyJ9zD+dPt/32u4UADAT+fW/TPLt6rmrN+asP2q1Wq0+hnVdOd6DehERG/V1qvcMDscDwDGzER+13QVaJP9OG0TEU213AphrRdsdYCoePb6/VqR8i/rrwep2ez4XZFf+G8XO9R17TSdpnmMyq8fXZvTj2T36szSjPsyTnH+vmf/17fZRWm7a+c/KXvmPti996pycf7+Zf8PJyb83Nv+uyvkPDpV/X/4AAAAAADDH8t//V1o+/rtw9E05kP2O/67OqA8AAAAAAAAA8Fk76vh/O4z/BwAAAHOr+qxe+d2pJ7ft9V1s1e3XioinG8sDHZMullluux8AAAAAAAAAAAAA0CWD7XN4rxURw4h4enm5LMvqp65ZH9ZR1z/uur790GVtP8kDAMC2D081ruUvIhYj4lr6rr/h8vJyWS4uLZfL5dJCfj87Wlgsl2qfa/O0um1hdIA3xINRWf2yxdp6dZM+L09qb/6+6r5GZf8AHZuNFgMHgIjYfjV65BXphCnLZ6LtdzkcD/b/k8f+z0G0/TgFAAAApq8sy7JIX+d9Oh3z77XdKQBgJvLrf/O4gFqtVqvV6pNX15XjPagXEbFRX6d6z2A4fgA4Zjbio7a7QIvk32mDiHi+7U4Ac61ouwNMxaPH99eKlG9Rfz1I47vnc0F25b9RbK2X1x83naR5jsmsHl+b0Y9n9+jPczPqwzzJ+fea+V/fbh+l5aad/6zslX+1nSst9KdtOf9+M/+Gk5N/b2z+XZXzHxwq/778AQAAAABgjuW//6/M1fHf0afdnIn2O/67OrV7BQAAAAAAAIDpevT4/lq+7jUf///CmOVc/3ky5fwL+XdSzr/XyP+rjeX6tfmHbz7J/9+P76/98e6/Pp+nB81/Ic8U6ZFVpEdEke6pGKTpUbbukzaH/VF1T8Oi1x+kc37K4dtxM27FepzftWwv/X88ab+wq73q6XCrvexvt1/c1T7Yac/rX9rVPkxnOpVLuf1srMXP41a8tdVetS1M2P7FCe3lhPacfz/+s9Nn+3935PwHtZ8q/+XUXjSmlYcf9D6x39en4+7n6s0v/ub89Ddnos3o72xbXbV9L7bQn63/k6dG8cs767fP3rtx9+7tC5Emu269GGnyGcv5D9PPzvP/S9vt+Xm/vr8+/GB06PznxWYM9sz/pdp8tb0vz7hvbcj5j9JPzv+t1D5+/z+W+VcP7333/1dm3ycAAAAAAAAAAAAAAADYV1mWW5eIXo2Iy+n6n7auzQQAZutq+sqNMsm3z6ruz/j+1OpjXhdz1p+Z1h+X89Uftfo41nXleG/Ui4j4W32dyxHx63G/DACYZx9HxD/b7gStkX+H5e/7q6Zn2u4MMFN33nv/pzdu3Vq/faftngAAAAAAAAAAn1Ye/3O1Nv73mbIsHzSW2zX+65uxetTxPwd5ZmeA0T0Gqu4ffpv2s9kb9Xu14cZfiL3G/x7uzO03/vdgwv0NJ7SPJrQvTGhfnNA+9kKPmpz/C7Xxzs9ExOnG8OsnYPzXLfuN/9oc874Lcv4v1h7PVf5faSxXz7/8/XHOv7cr/3N33/3FuTvvvf/qzXdvvLP+zvrPLl24cP7S5ctXrlw59/bNW+vnt/9tscfTlfPPY187D7Rbcv45c/l3S87/S6mWf7fk/L+cavl3S84/v9+Tf7fk/PNnH/l3S87/5VTLv1ty/l9Ltfy7Jef/Sqrl3y05/6+nWv7dkvN/NdXy75ac/9lUy79bcv7nUn3A/Jem3S9mI+efj3DZ/7sl55/PbJB/t+T8L6Za/t2S87+Uavl3S87/tVTLv1ty/t9Itfy7Jed/OdXy75ac/zdTLf9uyflfSbX8uyXn/61Uy79bcv7fTvWh8l+ZXr+YjZz/66m2/3dLzv87qZZ/t+T8v5tq+XdLzv97qZZ/t+T830i1/Lvlyff/mzFjxkyeafuZCQAAAAAAAAAAAABomsXpxG1vIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPB/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFvXuLkeuu7wB+9uq1czMQUic1sHaMMc4mu77EF1oXE64NtxIIhZZiu961WfANr11CGsmOAiUSRo0q2oaHtoCiNi8VVpUHWgWUB9SqUiXSPtAXRIXKQ1QFFJAqtVXIVnPm///vzOzZmV3v2J455/OR4p935sycM2fOnN3vOt8ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAabXr7zJcGsiyr/Zf/sT7Lbqz9fe34+vyyt1zvLQQAAABW65f5ny/dki44uIwbNSzzT6///jPz8/Pz2ceG/nTkq/Pz6YrxLBtZk2X5ddHlH398oHGZ4LFsbGCw4evBDqsf6nD9cIfrRzpcP9rh+jUdrh/rcP2iHbDI2vrvY/I725L/dX19l2a3ZiP5dVsKbvXYwJrBwfi7nNxAfpv5kWPZbHYim8mmmpavLzuQL//sptq63pPFdQ02rGtj7Qj5+SNH4zYMhH28pWldC/cZ/fRt2fgvfv7I0b8+9+LtRbPjbmi6v/p2bttc284vhEvq2zqQrUn7JG7nYMN2bix4ToaatnMgv13t763b+dIyt3NoYTOvqdbnfCwbzP/+fL6fhht/rZf208Zw2f/cmWXZxYXNbl1m0bqywWxd0yWDC8/PWP2IrN1H7VB6dTa8ouN00zKO09qc3tJ8nLa+JuLzvyncbniJbWh8mn766GjD8/7y/JUcp1HtUS/1Wmk9Brv9WumVYzAeF8/nD/rxwmNwS3j8j2xd+hgsPHYKjsH0uBuOwc2djsHB0aF8m9OTMJDfZuEY3NG0/FC+poF8vrC1/TE4ee7kmcm5zz989+zJI8dnjs+c2rVjx9SuPXv27ds3eWz2xMxU/c8r3Nu9b102mF4Dm8O+i6+BN7Us23iozn9jdNH590pfh2NtXofrW5bt9utwuPXBDVybF+TiY7r+2vhIbaePXRrMlniN5c/P9tW/DtPjbngdDje8Dgu/pxS8DoeX8TqsLXNm+/J+Zhlu+K9oG5b+XrC6Y3B9wzHY+vNI6zHY7Z9HeuUYHAvHxQ+3L/29YGPY3scnVvrzyNCiYzA93HDuqV2Sft4f25ePouPyjtoVN4xm5+dmzt7z0JFz587uyMK4Jl7TcKy0Hq/rGh5Ttuh4HVzx8Xpw9vWP31Fw+fqwr8burv0xtuRzVVtm9z3tn6v8u1vx/my6dGcWRpdd6/1Z9N28tj9Hs+xr33v0ge888rW3L7k/a3nzC5Or/1k85dKG8+/IEuffmPtfqa8v3dVjQyPD9dfvUNo7I03n4+anajg/dw3k635pcnnn45Hw37U+H9/a5ny8oWXZbp+PR1ofXDwfD3T6bcfqtD6fY+E4OTHV/nxcW2bDzpUek8Ntz8d3hjkQ9v+bQ1JIuajh2FnquE3rGh4eCY9rOK6h+Tjd1bT8SMhmtXU9vfPKjtNtd9bvayg9ugXX6jgdb1m228dp+t3XUsfpQKffvl2Z1udzLBwXt+5qf5zWlnlu9+rPnWvjXxvOnaOdjsGRodHaNo+kgzA/32fza+MxeE92NDudncim82tH8+NpIF/XxL3LOwZHw3/X+ly5oc0xuK1l2W4fg+n72FLH3sDw4gffBa3P51g4Lp68t/0xWFvmHXu7+7PrtnBJWqbhZ9fW368t9TuvO1p209U6VobDdn5vb/vfzdaWObFvpTmz/X66K1xyQ8F+an39LvWams6uzX7aELbzxX1L76fa9tSW+er+ZR5PB7Msu/DZ+/Lf94Z/X/m78z94punfXYr+TefCZ+/72U3H/nEl2w9A/3ulPtbVv9c1/MvUcv79HwAAAOgLMfcPhpnI/wAAAFAaMffH/ys8kf8BAACgNGLuHw4zqUj+3/COF2dfuZClZv58EK9Pu+H++nKx4zoVvh6fX1C7/L6nZv77Hy4sb92DWZa9fP8fFi6/4f64XXXjYTsvv7P58kWeuXtZ6z784IW03sb++tfD/cfHs9zDoKiCO5Vl2bO3fCVfz/jHL+XzufsP5/OBi48/Vlvmpf31r+PtX3hNffm/COXfg8eONN3+hbAffhLm1HuL90e83bcuvXnj3o8urC/ebmDzzfnDfvKT9fuN75PzxGP15eN+Xmr7v/Plp79VW/6hNxZv/4XB4u1/OtzvU2H+7+vqyzc+B7Wv4+2+GLY/ri/e7p5vfrdw+y9/qb78mXfVlzscZlz/tvD1lne9ONu4vx4aONL0uLJ315eL65/6wR/n18f7i/ffuv1jhy417Y/W4+O5f6vfz2TL8vHyuJ7o71vWX7ufxuMzrv/pPzrctJ87rf/yAy+8rna/reu/q2W5M5/dnq9/4f6a37HpL7/4lcL1xe05+Ldnmh7PwQ+F13FY/5OfDMdjuP7/Ltfvr/XdFQ5/qPn8E5f/+voLTY8nes8v6uu//Nbj+VwztnbdDTfedPPFN9T2XZY9v6Z+f53Wf/yvTjdt/zduq++PeH3s6Leufylx/Wc/N3Hq9Nz52em0Vx+5JX/vnPfVtydu7y3h3Nr69aHT5z41c3Z8anwqy8bL+xZ6V+ybYf6sPi62X3p+0Rl0+4Ph+bzjz59dt/Vfvxwv//eP1C+/9N769603heWeCJevD8/fyta/2JObbstf3wPPhS2cX/x+wauxcct/7VvWguHxt/5cEI/3M6/9VL4fatfl3zfi63qV2/+j6fr9fDvs1/nwzsybb1tYX+Py8b0RLn24/npf9f4Lp7n4vP5NeL7f/5P6/cftio/3R+HnmO9uaD7fxePj2xcGW+8/fxePi+F8kl2sXx+Xivv70ku3FW5efB+S7OLt+dd/ku7n9hU9zKXMfX5u8sTsqfMPTZ6bmTs3Off5hw+dPH3+1LlD+Xt5Hvp0p9svnJ/W5een6Zk9u7P8bHW6Pq6y6739Zx48Or13auv0zLEj54+de/DMzNnjR+fmjs5Mz209cuzYzOc63X52+sCOnft37d05cXx2+sC+/ft37Z+YPXW6thn1jepgz9RnJk6dPZTfZO7A7v077r1399TEydPTMwf2Tk1NnO90+/x700Tt1n8wcXbmxJFzsydnJuZmH545sGP/nj07O74b4Mkzx+bGJ8+ePzV5fm7m7GT9sYyfyy+ufe/rdHvKae4/6j/PthqovxFf9sG79qT3Z6156tEl76q+SMsbiL4Y3ovmn191Zt9yvo65fyTMpCL5HwAAAKog5v7RMBP5HwAAAEoj5v41YSbyPwAAAJRGzP1jYSYVyf+l6/9vuLCs9ev/6/837i/9/4r1/z/ca/3/+vlC/787Vtu/1/8P9P/1//X/9f/1/+mCXuv/x9y/Nssqmf8BAACgCmLuXxdmIv8DAABAacTcf0OYifwPAAAApRFz/41hJhXJ//r/+v/6//r/+v/F69f/70/6/+3p/3eg/z+ZVav/f7Gb26//r//PYr3W/4+5/6Ywk4rkfwAAAKiCmPtvDjOR/wEAAKA0Yu6/JcxE/gcAAID+tHbxRTH3rw8zqUj+1//X/9f/1//X/y9ev/5/f9L/b0//vwP9f5//r/+v/09X9Vr/P+b+V4WZVCT/AwAAQBXE3P/qMBP5HwAAAHrP8JXdLOb+14SZLMr/V7gCAAAA4LqLuf/WrKUIXpF//9f/1//X/9f/1/8vXv/y+/9Dmf5/79D/b0//vwP9f/1//X/9f7qq1/r/ee7PxrLXhplUJP8DAABAFcTcf1uYifwPAAAAvW1s+YvG3P8rrTeU/wEAAKA0Yu7fEGZSkfyv/6//r/+v/6//X7x+n//fn/T/29P/76DX+v8tR5D+f29vv/6//j+L9Vr/P+b+28NMKpL/AQAAoApi7r8jzET+BwAAgNKIuf9Xw0zkfwAAACiNmPs3hplUJP/r//d4/z/2/vT/9f/1//X/9f+XRf+/Pf3/Dnqt/99C/7+3t1//X/+fxXqt/x9z/+vCTCqS/wEAAKAKYu5/fZiJ/A8AAAClEXP/G8JM5H8AAAAojZj7x8NMKpL/9f97vP/v8//1//X/9f/1/1dE/789/f8O9P/1//X/9f/pql7r/8fcvynMpCL5HwAAAKog5v7NYSbyPwAAAJRGzP13hpnI/wAAAFAaMfdvCTOpSP7X/9f/1//X/9f/L16//n9/0v9vbzn9//ycpv+v/6//r/+v/08X9Fr/P+b+N4aZVCT/AwAAQBXE3L81zET+BwAAgNKIuf9NYSbyPwAAAJRGzP3bwkwqkv/1//X/9f/1//X/i9ev/9+f9P/b8/n/Hej/6//r/+v/01W91v+Puf/NYSYVyf8AAABQBTH3bw8zkf8BAACgNGLuvyvMRP4HAACA0oi5fyLMpCL5X/9f/1//X/9f/794/fr//akK/f9PrPROG+j/d6D/r/+v/6//T1f1Wv8/5v67w0wqkv8BAACgCmLuvyfMRP4HAACA0oi5fzLMRP4HAACA0oi5fyrMpCL5X/9f/1//X/9/Rf3/Nyzcr/5/nf5/b6lC/3819P870P/X/7/u/f8R/X9Kpdf6/zH37wgzqUj+BwAAgCqIuX9nmIn8DwAAAKURc/+uMBP5HwAAAEoj5v7dYSYVyf/6//r/+v/6/z7/v3j9+v/9Sf+/ve73/+ND1P/X/9f/9/n/+v8s1mv9/5j77w0zqUj+BwAAgCqIuX9PmIn8DwAAAKURc//eMBP5HwAAAEoj5v59YSYVyf/6//r/+v/6//r/xevX/+9P+v/t+fz/DvT/9f/1//X/6ape6//H3L8/zKQi+R8AAACqIOb+t4SZyP8AAABQGjH3/1qYifwPAAAApRFz/6+HmVQk/+v/6//r/+v/6/8Xr1//vz/p/7en/9+B/r/+v/6//j9d1Wv9/5j7D4SZVCT/AwAAQBXE3P8bYSbyPwAAAJRGzP1vDTOR/wEAAKA0Yu4/GGZSkfyv/6//r/+v/6//X7x+/f/+pP/fnv5/B/r/+v/6//r/dFWv9f9j7n9bmElF8j8AAABUQcz994WZyP8AAABQGjH3vz3MRP4HAACA0oi5/x1hJhXJ//r/+v/6//r/+v/F69f/70/6/+3p/3eg/6//r/+v/09X9Vr/P+b+d4aZVCT/AwAAQBXE3P+uMBP5HwAAAEoj5v53h5nI/wAAAFAaMfe/J8ykIvlf/1//X/9f/1//v3j9+v/9Sf+/Pf3/DvT/S9b/H79J/1//n6ulKAEtdmX9/xtfXnKFq+z/x9z/m2EmFcn/AAAAUAUx998fZiL/AwAAQGnE3P/eMBP5HwAAAEoj5v73hZlUJP/r/+v/6//r/+v/F69f/78/6f+312f9/1/eHC7X/6/T/+/t7e/J/v+Pl+r/z69pvb3+P1fDlfX/C3Wl/x9z//vDTCqS/wEAAKAKYu7/QJiJ/A8AAAClEXP/B8NM5H8AAAAojZj7fyvMpCL5X/+/th0L7WX9f/3//AL9f/1//f++pf/fXp/1/33+fwv9/97e/p7s//v8f66zXuv/x9z/oTCTiuR/AAAAqIKY+x8IM5H/AQAAoDRi7v9wmIn8DwAAAKURc/9Hwkwqkv/1/33+v/6//r/+f/H69f/7k/5/e/r/Hej/6//3Wv//P/X/6W+91v+Puf/BMJOK5H8AAACogpj7PxpmIv8DAABAacTc/9thJvI/AAAAlEbM/R8LM6lI/tf/75f+/7j+v/6//n/L49H/1/8vov/fnv5/B/r/+v+91v/3+f/0uV7r/8fc//Ewk+Xn/7FlLwkAAABcFzH3/06YSUX+/R8AAACqIOb+3w0zkf8BAACgNGLu/0SYSUXyv/5/v/T/ff5/pv+v/9/yePT/9f+LXLv+fzzz6P/r/+v/R/r/+v/6/7Tqtf5/zP2/F2ZSkfwPAAAAVRBz/yfDTOR/AAAA6AtF/092q5j7D4WZyP8AAABQGjH3Hw4zqUj+1//X/9f/79H+/59t/pcffv8Dh3fo/+v/6/+vyFXt/8eTTfz8/9qL3+f/6//r/yf6//r/+v+06rX+f8z9R8JMKpL/AQAAoApi7v/9MBP5HwAAAEoj5v6jYSbyPwAAAJRGzP3TYSYVyf/6//r/+v892v/v48//j/tD/79Z1/r/8aSr/1/o2n3+f/3rJ/T/r7D/P1p4qf6//n8/b7/+v/4/i12V/v/8mnThSvv/MffPhJlUJP8DAABAFYTcP3isPheukP8BAACgNGLuPx5mIv8DAABAacTc/6kwk4rkf/1//X/9f/1/n/9fvP6e7f/7/P+29P/b653+fzH9f/3/ft5+/X/9fxbrtc//j7l/NsykIvkfAAAAqiDm/k+Hmcj/AAAAUBox938mzET+BwAAgNKIuf9EmElF8r/+v/6//r/+v/5/8fr1//uT/n97+v8d6P/r/+v/6//TVb3W/4+5/2SYSUXyPwAAAFRBzP2nwkzkfwAAAPh/9u6j2dK62uP4bmzK7uIFOHBClUNfAgMd6wtw4MSBVlkORMWcaMwRcw6YMwZQxISKYgATilnMWTFgRq22tNdafU6ffZ59ut3nnGf/1+czWfe2t937KgX86P7Wfxi5+y+OW+x/AAAAGEbu/ofELU32v/5f/z9s/38P/f9un6//1/+PTP8/7XD7/92jzqT/1/9v8vfX/+v/2Wlu/X/u/ofGLU32PwAAAHSQu/9hcYv9DwAAAMPI3X9J3GL/AwAAwDBy9z88bmmy/8/o/48sevb/mfHq//ez/z/P+//6f/2//n//HWz/f9l//8yn//f+v/4/6P/1//p/zjS3/j93/yPilib7HwAAADrI3f/IuMX+BwAAgGHk7n9U3GL/AwAAwDBy9z86bmmy/73/7/3/Yd//1//v+vn6f/3/yLz/P61T/3/JLRc8+PZr7nrt2Xy+/r9D/3/Dvn1//b/+n53m1v/n7n9M3NJk/wMAAEAHufsfG7fY/wAAADCM3P2Pi1vsfwAAABhG7v7Hxy1N9r/+X/+v/9f/6/+Xf77+fzPp/6d16v/P5fP1/x36//37/vp//T87za3/z93/hLilyf4HAACADnL3PzFusf8BAABgGLn7L41b7H8AAAAYRu7+E3FLk/2v/9///v/f+n/9f1z9v/5f/7//9P/T9P8r6P/1//p//T9rNbf+P3f/ZXFLk/0PAAAAHeTuf1LcYv8DAADAMHL3Pzlusf8BAABgGLn7nxK3NNn/+n/v/+v/9f/6/+Wfr//fTPr/aQff/y/7K+Tu9P8b3/+fr//X/+v/2eos+/87Jv60vZb+P3f/U+OWJvsfAAAAOsjd/7S4xf4HAACAYeTuf3rcYv8DAADAMHL3PyNuabL/9f/6/z31//Hf8aX6f/3/Fvr/U/T/86L/nzab9/+PHF36w/r/je//vf+v/9f/s83c3v/P3f/MuKXJ/gcAAIAOcvc/K26x/wEAAGAYufufHbfY/wAAADCM3P3PiVua7H/9v/7f+//6f/3/8s+f6v+v3fL99P/zov+fNpv+fxf6f/3/Jn9//b/+n53m1v/n7n9u3NJk/wMAAEAHufsvj1vsfwAAABhG7v7nxS32PwAAAAwjd//z45Ym+395/3/6X9f/743+f/v31/8v/+NjXf1//jvq/yf7/3t6/78n/f80/f8K+n/9v/5/t/7/+Kqfr/9nmbn1/7n7XxC3NNn/AAAA0EHu/hfGLfY/AAAADCN3/4viFvsfAAAAhpG7/8VxS5P97/1//b/+f/P6f+//n3KY7/8vDrz/P6r/3yP9/zT9/wr6f/2//t/7/6zV3Pr/3P0viVua7H8AAADoIHf/S+MW+x8AAAA2w9bfO3DmbygNuftfFrfY/wAAADCM3P0vj1ua7H/9v/5f/6//793/H9uQ/t/7/3ul/5+m/1/hcPv/I4P2/0cH6/+v2O3nz6H/v1T/z8xs6/+vO/3jh9X/5+5/RdzSZP8DAABAB7n7Xxm32P8AAAAwjNz9r4pb7H8AAAAYRu7+V8ctTfb/vvf/x3f/bP2//l//r/8//P5/U97/1//vlf5/mv5/Be//e//f+//6f9ZqW/+/xWH1/7n7XxO3/hFAk/0PAAAAHeTuf23cYv8DAADAMHL3XxG32P8AAAAwjNz9r4tbmux/7//r//X/+n/9//LP1/9vJv3/NP3/Cvp//b/+X//PWs2t/8/d//q4pcn+BwAAgA5y978hbrH/AQAAYBi5+98Yt9j/AAAAMIzc/W+KW5rsf/3//vb/+eP6f/3/Qv+v/9f/H4i2/f+RZX8l2mmX/v+mB5649/Yf0f/r//X/+n/9P2swi/7/5Om/u8zd/+a4pcn+BwAAgA5y978lbrH/AQAAYBi5+98at9j/AAAAMIzc/W+LW/63/8+sUDfPsRX/uv7f+//6f/2//n/55+v/N1Pb/n+PvP+/gv5f/6//1/+zVrPo/7f877n73x63+PV/AAAAGEbu/nfELfY/AAAADCN3/zvjFvsfAAAAhpG7/11xS5P9r//X/+v/9f/6/+Wfr//fTPr/afr/FfT/+n/9v/6ftZpb/5+7/8q4pcn+BwAAgA5y9787brH/AQAAYBi5+98Tt9j/AAAAMIzc/e+NW5rsf/2//l//r//X/y//fP3/ZtL/T9P/LxaLqya+wLL+/+Sd9f/6f/2//p9zNLf+P3f/++KWJvsfAAAAOsjdf1XcYv8DAADAMHL3Xx232P8AAAAwjNz9749bmux//b/+X/+v/2/U/x/R/49P/z9N/7+C9//1//p//T9rNbf+P3f/B+KWJvsfAAAAOsjdf03cYv8DAADAMHL3fzBusf8BAABgGLn7r41bdt3/5x3Atzo4+n/9v/5f/9+o/x/w/f9jqz+4mf3r/xf6f/2//n8F/b/+X//PmebW/+fu/1Dc4tf/AQAAYBi5+z8ct9j/AAAAMIzc/R+JW+x/AAAAGEbu/o/GLU32v/5f/6//1//r/5d//mb0/6s/txvv/0/T/6+g/9f/6//1/6zV3Pr/3P0fi1ua7H8AAADoIHf/dXGL/Q8AAADDyN3/8bjF/gcAAIBh5O7/RNzSZP/r//X/2/v/xUL/r//X/59yAP3/sYX+f+30/9P0/yvo/8fs/89bDNT/H9/15+v/maO59f+5+z8ZtzTZ/wAAANBB7v7r4xb7HwAAAIaRu/9TcYv9DwAAAMPI3f/puKXJ/tf/6/839v3/8+Mn6P/1/5vb/9d/qvr/9dH/T9P/r6D/H7P/9/6//p9DM7f+P3f/DXFLk/0PAAAAHeTu/0zcYv8DAADAMHL3fzZusf8BAABgGLn7Pxe3NNn/+n/9/8b2/97/1//r//X/S+j/p+n/V9D/6//1//p/1mpu/X/u/s/HLU32PwAAAHSQu//GuMX+BwAAgGHk7r8pbrH/AQAAYBi5+78QtzTZ//p//b/+fzP7/2P6f/2//n+pufT/F110r5v1//p//b/+X/+v/+9ubv1/7v4vxi1N9j8AAAB0kLv/S3GL/Q8AAADDyN3/5bjF/gcAAIBh5O7/StzSZP/v7P/PX5wqVE9Z1v9Ho6b/30L/v/376/+X//Hh/X/9v/5//82l//f+/7l9f/2//n+Tv/9Z9f8X7vz5+n9GNLf+P3f/zXFLk/0PAAAAHeTu/2rcYv8DAADAMHL3fy1usf8BAABgGLn7b4lbmux/7//r//X/+n/9//LP1/9vJv3/NP3/Cvp//b/3/y++/530/6zP3Pr/3P1fj1ua7H8AAADoIHf/N+IW+x8AAACGkbv/m3GL/Q8AAADDyN3/rbilyf7X/+v/9f/6f/3/8s/X/28m/f80/f8KM+3/8+9Q9f/z/v7D9P/e/2eN5tb/5+7/dtzSZP8DAABAB7n7vxO32P8AAAAwjNz9341b7H8AAAAYRu7+78UtTfb/+vv/C/X/Qf8/l/7/fvr/Mz5f/6//H5n+P/+Kvpz+f4WZ9v9J/z/v76//1/+z09z6/9z9t8YtTfY/AAAAdJC7//txi/0PAAAAw8jd/4O4xf4HAACAYeTu/2Hc0mT/e/+/V/9/ZNGx//f+v/5f/9+J/n+a/n8F/b/+X/+v/2et5tb/5+7/UdzSZP8DAADAprrP3R90617/b3P3/zhusf8BAABgGLn7fxK32P8AAAAwjNz9P41bmux//X+v/r/n+//6f/2//r8T/f80/f8K+n/9v/5f/89aza3/z93/s7hly/A7etb/XwIAAABzkrv/53FLk1//BwAAgA5y9/8ibtmx/0/u8Xe1AwAAAHOTu/+Xccsefv3/bvv2rQ6O/n/m/f9i/P7/toX+X/9/iv5f/78O+v9p/2f/f/KI/l//P0H/r//X/3OmufX/uft/Fbf4/f8AAACwybb9E4Xc/b+OW+x/AAAAGEbu/t/ELfY/AAAADCN3/2/jlib7X/8/8/7/nN7/P17/0yb0/97/38f+//JjSz9f/6//H5n+f5r3/1fQ/+v/9f/6f9Zqbv1/7v7b4pYm+x8AAAA6yN3/u7jF/gcAAIBh5O7/fdxi/wMAAMAwcvf/IW5psv/1/yP2/5v1/r/+3/v/597/3+WCEzfe9wFXX6n/57SD7P/zjwX9/4H0/9cv+/fT/+v/5/T99f/6f3aaW/+fu/+PcUuT/Q8AAAAd5O6/PW6x/wEAAGAYufv/FLfY/wAAADCM3P1/jlua7H/9v/5/Lv1//md9CP3/ic3r/7Mp7t7/e/9f/7+T9/+nbXD/7/1//f/sv7/+X//PTnPr/3P3/yVuabL/AQAAoIPc/X+NW+x/AAAAGEbu/r/FLfY/AAAADCN3/9/jlib7X/+v/59L/5+8/3/653n//xT9v/7/bOj/p+n/V9D/6//1//p/1mpu/X/u/n/ELU32PwAAAHSQu/+OuMX+BwAAgGHk7v9n3GL/AwAAwDBy9/8rbmmy//X/+n/9v/5f/7/88/X/m0n/P03/v4L+X/+v/9f/s1Zz6/9z9/8nAAD//1XOc+E=") accept(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x10010) sched_setscheduler(0x0, 0x2, 0x0) 3.835112453s ago: executing program 5 (id=269): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x22, 0x100000}) 3.214887617s ago: executing program 1 (id=270): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a7594000000010902120001000000000904"], 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESHEX], 0xfe37, 0x0) 3.199888518s ago: executing program 4 (id=271): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f00888e1327c9167c643c4a1b78", 0x22, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.127311311s ago: executing program 5 (id=272): setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0xa, 0x3, 0x3a) landlock_create_ruleset(0x0, 0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x3ff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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") r0 = open(&(0x7f00000000c0)='./bus\x00', 0x68042, 0x62) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, r1, 0x0, 0x1000000201005) 2.088979253s ago: executing program 3 (id=273): ioctl$SNDCTL_TMR_SELECT(0xffffffffffffffff, 0x40045408) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000000)) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000440)='./file3\x00', 0x0, &(0x7f0000000480)=ANY=[], 0x1, 0x62b7, &(0x7f0000014500)="$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") truncate(&(0x7f00000000c0)='./file3\x00', 0x2) 1.879553103s ago: executing program 6 (id=274): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x81, 0x0) fanotify_mark(r4, 0x105, 0x40001032, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) read$FUSE(r4, &(0x7f00000057c0)={0x2020}, 0x2020) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) close_range(r6, r7, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0xa, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r9}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 1.607071642s ago: executing program 4 (id=275): syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x4000000, &(0x7f0000000180), 0xff, 0x98cc, &(0x7f00000001c0)="$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") r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0xf0}}, 0x0) 1.38435811s ago: executing program 5 (id=276): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_vlan\x00', 0x0}) r3 = gettid() r4 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_TXQLEN={0x8, 0xd, 0xa909}, @IFLA_MAP={0x24, 0xe, {0xfffffffffffffffd, 0x200, 0x2, 0x1, 0xf3, 0x6}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x720c1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 1.305341083s ago: executing program 6 (id=277): socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1, 0x0, 0x6}, 0x18) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x90) getdents64(r2, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffa003e45c, 0x700000001000000) 782.893556ms ago: executing program 6 (id=278): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x1}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file1\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) 335.107564ms ago: executing program 6 (id=279): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=280): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000000)=[{&(0x7f00000000c0)="140000002a000b0521b94d326792527204f8ab94", 0x14}], 0x1}, 0x0) unshare(0x66000080) syz_usb_connect(0x0, 0x24, 0x0, 0x0) unshare(0x800) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') close(r1) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000080)={'pcl812\x00', [0x3c4, 0x10, 0x3, 0xa, 0x14000000, 0xfffffffd, 0x6, 0x2, 0x2de0, 0x7ffe, 0x3, 0x723, 0x400, 0x3, 0x13, 0x100, 0xffffffa7, 0x401, 0x34d, 0x1, 0x49, 0x9, 0x1ff, 0x10001, 0xaa14, 0x1, 0x3, 0x7ffffffd, 0x7, 0xf58, 0x6]}) r3 = openat(0xffffffffffffff9c, 0x0, 0xd40, 0xd2) close(r3) inotify_init1(0x0) socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, 0x0) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xa, 0x0, 0x0, 0x80000000}) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000057e89720f20c5062ae10010203010902120001000000000904"], 0x0) close(r1) socket$isdn(0x22, 0x3, 0x4) kernel console output (not intermixed with test programs): econds, CP frequency < 30 seconds [ 118.592208][ T6042] XFS (loop2): Ending clean mount [ 118.603477][ T6042] XFS (loop2): Quotacheck needed: Please wait. [ 118.653561][ T5848] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input7 [ 118.684101][ T6042] XFS (loop2): Quotacheck: Done. [ 118.724223][ T5848] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 118.761668][ T5983] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.791571][ T5848] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 118.812686][ T5845] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 118.820622][ T5848] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 118.833629][ T5983] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 118.870529][ T5848] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 118.881398][ T5983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.913067][ T5848] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 118.949409][ T5848] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 118.990716][ T5848] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 119.006525][ T5983] usb 1-1: config 0 descriptor?? [ 119.015993][ T5848] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 119.067878][ T5983] pwc: Askey VC010 type 2 USB webcam detected. [ 119.098039][ T5848] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 119.139297][ T5848] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 119.221804][ T5848] mceusb 6-1:0.0: Registered Ы with mce emulator interface version 1 [ 119.250709][ T5848] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 119.303072][ T6058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'. [ 119.327600][ T5848] usb 6-1: USB disconnect, device number 2 [ 119.489040][ T5983] pwc: recv_control_msg error -32 req 02 val 2b00 [ 119.527212][ T5983] pwc: recv_control_msg error -32 req 02 val 2700 [ 119.558117][ T5983] pwc: recv_control_msg error -32 req 02 val 2c00 [ 119.590344][ T5983] pwc: recv_control_msg error -32 req 04 val 1000 [ 119.639632][ T5983] pwc: recv_control_msg error -32 req 04 val 1300 [ 119.667634][ T5983] pwc: recv_control_msg error -32 req 04 val 1400 [ 119.705780][ T5983] pwc: recv_control_msg error -32 req 02 val 2000 [ 119.729282][ T5983] pwc: recv_control_msg error -32 req 02 val 2100 [ 119.736014][ T5931] IPVS: starting estimator thread 0... [ 119.750708][ T5983] pwc: recv_control_msg error -32 req 04 val 1500 [ 119.762967][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22'. [ 119.870863][ T6064] IPVS: using max 21 ests per chain, 50400 per kthread [ 119.985976][ T5983] pwc: recv_control_msg error -71 req 02 val 2400 [ 119.998308][ T5983] pwc: recv_control_msg error -71 req 02 val 2600 [ 120.012683][ T5983] pwc: recv_control_msg error -71 req 02 val 2900 [ 120.081537][ T5983] pwc: recv_control_msg error -71 req 02 val 2800 [ 120.105326][ T6071] loop1: detected capacity change from 0 to 256 [ 120.177082][ T6071] ======================================================= [ 120.177082][ T6071] WARNING: The mand mount option has been deprecated and [ 120.177082][ T6071] and is ignored by this kernel. Remove the mand [ 120.177082][ T6071] option from the mount to silence this warning. [ 120.177082][ T6071] ======================================================= [ 120.422858][ T6070] loop5: detected capacity change from 0 to 32768 [ 120.433314][ T6070] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.24 (6070) [ 120.446421][ T5983] pwc: recv_control_msg error -71 req 04 val 1100 [ 120.459620][ T6070] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 120.473213][ T6070] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 120.485745][ T5983] pwc: recv_control_msg error -71 req 04 val 1200 [ 120.496751][ T5983] pwc: Registered as video103. [ 120.537384][ T5841] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 120.621310][ T6070] BTRFS info (device loop5): enabling ssd optimizations [ 120.628301][ T6070] BTRFS info (device loop5): enabling free space tree [ 120.642438][ T5983] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 120.779471][ T5983] usb 1-1: USB disconnect, device number 2 [ 121.261166][ T6093] loop3: detected capacity change from 0 to 32768 [ 121.316600][ T5851] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 121.376889][ T6093] [ 121.376889][ T6093] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 121.376889][ T6093] [ 121.412080][ T6093] [ 121.412080][ T6093] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 121.412080][ T6093] [ 121.422687][ T6093] [ 121.422687][ T6093] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 121.422687][ T6093] [ 121.431208][ T6100] tipc: Started in network mode [ 121.433147][ T6093] [ 121.433147][ T6093] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 121.433147][ T6093] [ 121.438284][ T6100] tipc: Node identity ca6e769a82a1, cluster identity 4711 [ 121.448408][ T6093] [ 121.448408][ T6093] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 121.448408][ T6093] [ 121.483172][ T6093] [ 121.483172][ T6093] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 121.483172][ T6093] [ 121.496576][ T6100] tipc: Enabled bearer , priority 0 [ 121.537817][ T6102] [ 121.537817][ T6102] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 121.537817][ T6102] [ 121.615640][ T6099] tipc: Resetting bearer [ 121.632272][ T6102] [ 121.632272][ T6102] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 121.632272][ T6102] [ 121.719532][ T6102] [ 121.719532][ T6102] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 121.719532][ T6102] [ 121.837800][ T6102] [ 121.837800][ T6102] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 121.837800][ T6102] [ 121.882959][ T6098] tipc: Disabling bearer [ 121.947532][ T111] [ 121.947532][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 121.947532][ T111] [ 121.958811][ T51] Bluetooth: hci5: command 0x0405 tx timeout [ 122.131164][ T5931] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 122.177262][ T12] [ 122.177262][ T12] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 122.177262][ T12] [ 122.252017][ T12] [ 122.252017][ T12] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 122.252017][ T12] [ 122.291227][ T112] [ 122.291227][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 122.291227][ T112] [ 122.291801][ T6118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.37'. [ 122.310763][ T6118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.37'. [ 122.328943][ T5931] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 122.373899][ T5842] [ 122.373899][ T5842] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 122.373899][ T5842] [ 122.378890][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.435281][ T5842] [ 122.435281][ T5842] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 122.435281][ T5842] [ 122.456033][ T5931] usb 6-1: Product: syz [ 122.468012][ T5931] usb 6-1: Manufacturer: syz [ 122.482640][ T5931] usb 6-1: SerialNumber: syz [ 122.507151][ T5931] usb 6-1: config 0 descriptor?? [ 122.794832][ T6124] netlink: 28 bytes leftover after parsing attributes in process `syz.4.41'. [ 122.869292][ T6124] netlink: 24 bytes leftover after parsing attributes in process `syz.4.41'. [ 122.885309][ T6120] loop2: detected capacity change from 0 to 32768 [ 122.892893][ T6120] btrfs: Deprecated parameter 'usebackuproot' [ 122.899115][ T6120] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 122.911352][ T6120] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.40 (6120) [ 122.929665][ T5931] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 122.965507][ T6120] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 122.975727][ T6120] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 123.133553][ T3493] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x32f839c6 level 0 [ 123.183007][ T6141] loop0: detected capacity change from 0 to 256 [ 123.191732][ T6120] BTRFS warning (device loop2): couldn't read tree root [ 123.198682][ T6120] BTRFS warning (device loop2): try to load backup roots slot 1 [ 123.207929][ T59] BTRFS warning (device loop2): checksum verify failed on logical 5316608 mirror 1 wanted 0x5387c9d6 found 0xc5289bf1 level 0 [ 123.221250][ T6120] BTRFS error (device loop2): failed to load root extent [ 123.228305][ T6120] BTRFS warning (device loop2): try to load backup roots slot 2 [ 123.238044][ T3493] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 123.249946][ T6120] BTRFS warning (device loop2): couldn't read tree root [ 123.256896][ T6120] BTRFS warning (device loop2): try to load backup roots slot 3 [ 123.370457][ T6120] BTRFS info (device loop2): rebuilding free space tree [ 123.410449][ T6120] BTRFS info (device loop2): checking UUID tree [ 123.417396][ T6120] BTRFS info (device loop2): allowing degraded mounts [ 123.424268][ T6120] BTRFS info (device loop2): enabling ssd optimizations [ 123.431241][ T6120] BTRFS info (device loop2): enabling free space tree [ 123.438016][ T6120] BTRFS info (device loop2): force clearing of disk cache [ 123.445240][ T6120] BTRFS info (device loop2): trying to use backup root at mount time [ 123.455051][ T6120] BTRFS info (device loop2): use zlib compression, level 3 [ 123.832980][ T6151] netlink: 180 bytes leftover after parsing attributes in process `syz.3.46'. [ 123.931193][ T5845] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 124.042942][ T6114] loop1: detected capacity change from 0 to 32768 [ 124.089650][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 124.124091][ T6114] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 124.249675][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 124.282614][ T6156] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 124.289206][ T6156] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 124.300230][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 124.311310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 124.349597][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 124.385341][ T6114] XFS (loop1): Ending clean mount [ 124.393268][ T5931] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 124.415610][ T6156] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 124.424923][ T6156] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 124.468609][ T5931] usb 6-1: USB disconnect, device number 3 [ 124.568461][ T6156] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 124.580299][ T6156] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 124.669120][ T6156] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 124.679742][ T6156] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 124.700897][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 124.716742][ T5850] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 124.780160][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 124.881990][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 124.890577][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 124.991252][ T6177] loop2: detected capacity change from 0 to 32768 [ 125.008176][ T6177] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.53 (6177) [ 125.065976][ T6177] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 125.078100][ T6177] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 125.169843][ T6156] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 125.205549][ T6156] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 125.311697][ T6177] BTRFS info (device loop2): enabling ssd optimizations [ 125.318720][ T6177] BTRFS info (device loop2): enabling free space tree [ 125.325599][ T6177] BTRFS info (device loop2): use zstd compression, level 3 [ 125.377972][ T6156] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 125.422744][ T6156] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 125.644648][ T5983] kernel write not supported for file 25/net/vlan/vlan1 (pid: 5983 comm: kworker/0:7) [ 125.766525][ T5845] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 125.980679][ T6211] overlayfs: missing 'lowerdir' [ 126.148553][ T6216] netlink: 180 bytes leftover after parsing attributes in process `syz.3.61'. [ 126.319254][ T5943] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 126.692909][ T6222] Bluetooth: MGMT ver 1.23 [ 126.695395][ T6219] loop1: detected capacity change from 0 to 32768 [ 126.711236][ T6222] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 126.743377][ T6219] [ 126.743377][ T6219] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 126.743377][ T6219] [ 126.767695][ T6219] [ 126.767695][ T6219] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 126.767695][ T6219] [ 126.779499][ T6219] [ 126.779499][ T6219] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 126.779499][ T6219] [ 126.789990][ T6219] [ 126.789990][ T6219] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 126.789990][ T6219] [ 126.800447][ T6219] [ 126.800447][ T6219] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 126.800447][ T6219] [ 126.818075][ T6219] [ 126.818075][ T6219] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 126.818075][ T6219] [ 126.889227][ T5943] usb 5-1: Using ep0 maxpacket: 16 [ 126.891170][ T3457] [ 126.891170][ T3457] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 126.891170][ T3457] [ 126.904827][ T5943] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.904889][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 126.904937][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 126.904976][ T5943] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 126.905018][ T5943] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.910157][ T5943] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 126.995857][ T5931] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 127.063682][ T5943] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 127.065749][ T3457] [ 127.065749][ T3457] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 127.065749][ T3457] [ 127.082274][ T5943] usb 5-1: Manufacturer: syz [ 127.091031][ T5943] usb 5-1: config 0 descriptor?? [ 127.130100][ T5850] [ 127.130100][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 127.130100][ T5850] [ 127.131368][ T112] [ 127.131368][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 127.131368][ T112] [ 127.131885][ T5850] [ 127.131885][ T5850] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 127.131885][ T5850] [ 127.188269][ T5931] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.188363][ T5931] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 127.188405][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.192380][ T5931] usb 1-1: config 0 descriptor?? [ 127.198835][ T5931] pwc: Askey VC010 type 2 USB webcam detected. [ 127.215238][ T6232] loop2: detected capacity change from 0 to 164 [ 127.503446][ T6235] Zero length message leads to an empty skb [ 127.547457][ T5943] rc_core: IR keymap rc-hauppauge not found [ 127.547480][ T5943] Registered IR keymap rc-empty [ 127.547631][ T5943] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 127.565861][ T5943] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 127.572118][ T6239] loop1: detected capacity change from 0 to 22 [ 127.601920][ T5943] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 127.679937][ T6239] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 127.689401][ T5931] pwc: recv_control_msg error -32 req 02 val 2b00 [ 127.715507][ T6239] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 127.718485][ T5931] pwc: recv_control_msg error -32 req 02 val 2700 [ 127.777191][ T5931] pwc: recv_control_msg error -32 req 02 val 2c00 [ 127.797518][ T5931] pwc: recv_control_msg error -32 req 04 val 1000 [ 127.817829][ T5931] pwc: recv_control_msg error -32 req 04 val 1300 [ 127.827914][ T5931] pwc: recv_control_msg error -32 req 04 val 1400 [ 127.842549][ T5931] pwc: recv_control_msg error -32 req 02 val 2000 [ 127.869894][ T5931] pwc: recv_control_msg error -32 req 02 val 2100 [ 127.881337][ T5931] pwc: recv_control_msg error -32 req 04 val 1500 [ 127.898461][ T5931] pwc: recv_control_msg error -71 req 02 val 2500 [ 127.905265][ T5943] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input9 [ 127.942910][ T5931] pwc: recv_control_msg error -71 req 02 val 2400 [ 127.947351][ T6241] loop2: detected capacity change from 0 to 2048 [ 127.961605][ T5931] pwc: recv_control_msg error -71 req 02 val 2600 [ 127.971668][ T5943] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 127.993993][ T5931] pwc: recv_control_msg error -71 req 02 val 2900 [ 128.003204][ T6241] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=27485, location=27485 [ 128.011257][ T5931] pwc: recv_control_msg error -71 req 02 val 2800 [ 128.031451][ T5943] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 128.045292][ T5931] pwc: recv_control_msg error -71 req 04 val 1100 [ 128.057174][ T5943] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 128.079074][ T5931] pwc: recv_control_msg error -71 req 04 val 1200 [ 128.084259][ T6241] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.100239][ T5931] pwc: Registered as video103. [ 128.110513][ T5943] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 128.133767][ T5931] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 128.169300][ T5943] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 128.172871][ T6241] overlayfs: upper fs needs to support d_type. [ 128.227167][ T5943] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 128.229041][ T6241] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 128.237454][ T5931] usb 1-1: USB disconnect, device number 3 [ 128.251589][ T6241] overlayfs: failed to set xattr on upper [ 128.278531][ T6241] overlayfs: ...falling back to redirect_dir=nofollow. [ 128.309733][ T1063] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 128.317375][ T5943] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 128.349428][ T6241] overlayfs: ...falling back to index=off. [ 128.359281][ T5943] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 128.449365][ T5943] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 128.455743][ T6241] overlayfs: ...falling back to uuid=null. [ 128.514293][ T5943] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 128.564059][ T5943] mceusb 5-1:0.0: Registered Ы with mce emulator interface version 1 [ 128.576940][ T1063] usb 4-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 128.606376][ T1063] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.624931][ T5943] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 128.655775][ T1063] usb 4-1: Product: syz [ 128.678501][ T1063] usb 4-1: Manufacturer: syz [ 128.695791][ T5943] usb 5-1: USB disconnect, device number 3 [ 128.708741][ T1063] usb 4-1: SerialNumber: syz [ 128.755168][ T1063] usb 4-1: config 0 descriptor?? [ 128.893453][ T5845] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh [ 128.920188][ T5845] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh [ 128.997875][ T1063] peak_usb 4-1:0.0: PEAK-System PCAN-USB FD v0 fw v0.0.0 (1 channels) [ 129.213304][ T1063] peak_usb 4-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 129.225836][ T6259] loop5: detected capacity change from 0 to 1024 [ 129.241196][ T1063] peak_usb 4-1:0.0: unable to tell PCAN-USB FD driver is loaded (err -71) [ 129.650117][ T5943] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 129.677663][ T6262] loop1: detected capacity change from 0 to 32768 [ 129.679500][ T6260] loop0: detected capacity change from 0 to 32768 [ 129.705671][ T6260] [ 129.705671][ T6260] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.705671][ T6260] [ 129.783273][ T6260] [ 129.783273][ T6260] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.783273][ T6260] [ 129.845272][ T5943] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.849765][ T6260] [ 129.849765][ T6260] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.849765][ T6260] [ 129.870391][ T5943] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 129.890922][ T1063] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 129.915263][ T6260] [ 129.915263][ T6260] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.915263][ T6260] [ 129.931175][ T3480] hfsplus: b-tree write err: -5, ino 3 [ 129.951689][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.969665][ T6260] [ 129.969665][ T6260] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.969665][ T6260] [ 129.989132][ T1063] usb 4-1: USB disconnect, device number 3 [ 130.006175][ T5943] usb 5-1: config 0 descriptor?? [ 130.032637][ T5943] pwc: Askey VC010 type 2 USB webcam detected. [ 130.055798][ T6260] [ 130.055798][ T6260] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 130.055798][ T6260] [ 130.197503][ T3457] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.322012][ T3480] [ 130.322012][ T3480] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 130.322012][ T3480] [ 130.370045][ T3480] [ 130.370045][ T3480] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 130.370045][ T3480] [ 130.405675][ T3457] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.439747][ T5840] [ 130.439747][ T5840] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 130.439747][ T5840] [ 130.451948][ T5943] pwc: recv_control_msg error -32 req 02 val 2b00 [ 130.480285][ T5943] pwc: recv_control_msg error -32 req 02 val 2700 [ 130.490140][ T111] [ 130.490140][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 130.490140][ T111] [ 130.511978][ T5943] pwc: recv_control_msg error -32 req 02 val 2c00 [ 130.529957][ T5840] [ 130.529957][ T5840] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 130.529957][ T5840] [ 130.530357][ T5983] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 130.541223][ T5943] pwc: recv_control_msg error -32 req 04 val 1000 [ 130.590117][ T5943] pwc: recv_control_msg error -32 req 04 val 1300 [ 130.608139][ T5943] pwc: recv_control_msg error -32 req 04 val 1400 [ 130.637703][ T5943] pwc: recv_control_msg error -32 req 02 val 2000 [ 130.650207][ T5943] pwc: recv_control_msg error -32 req 02 val 2100 [ 130.653819][ T6271] netlink: 28 bytes leftover after parsing attributes in process `syz.5.87'. [ 130.668696][ T3457] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.690590][ T5943] pwc: recv_control_msg error -32 req 04 val 1500 [ 130.697863][ T5943] pwc: recv_control_msg error -32 req 02 val 2500 [ 130.710064][ T5943] pwc: recv_control_msg error -32 req 02 val 2400 [ 130.721733][ T6271] netlink: 24 bytes leftover after parsing attributes in process `syz.5.87'. [ 130.730758][ T5983] usb 2-1: Using ep0 maxpacket: 32 [ 130.749759][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 130.768315][ T5983] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 130.789795][ T5983] usb 2-1: config 0 has no interface number 0 [ 130.800915][ T5983] usb 2-1: config 0 interface 12 has no altsetting 0 [ 130.825933][ T5983] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 130.855481][ T5983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.876291][ T5983] usb 2-1: Product: syz [ 130.883422][ T5983] usb 2-1: Manufacturer: syz [ 130.886508][ T3457] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.890838][ T5983] usb 2-1: SerialNumber: syz [ 130.917575][ T5983] usb 2-1: config 0 descriptor?? [ 130.926485][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 130.934435][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.937008][ T5943] pwc: recv_control_msg error -71 req 02 val 2900 [ 130.954121][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 130.973248][ T5943] pwc: recv_control_msg error -71 req 02 val 2800 [ 130.980342][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 131.001736][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 131.014013][ T5943] pwc: recv_control_msg error -71 req 04 val 1100 [ 131.038536][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.048596][ T5943] pwc: recv_control_msg error -71 req 04 val 1200 [ 131.066530][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 131.082549][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 131.091473][ T9] usb 4-1: Manufacturer: syz [ 131.096481][ T5943] pwc: Registered as video103. [ 131.113126][ T9] usb 4-1: config 0 descriptor?? [ 131.147270][ T5943] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 131.218023][ T5943] usb 5-1: USB disconnect, device number 4 [ 131.421310][ T3457] bridge_slave_1: left allmulticast mode [ 131.473426][ T3457] bridge_slave_1: left promiscuous mode [ 131.499657][ T3457] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.622119][ T6276] loop0: detected capacity change from 0 to 32768 [ 131.630624][ T930] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 131.633848][ T3457] bridge_slave_0: left allmulticast mode [ 131.638218][ T6276] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.85 (6276) [ 131.679680][ T6276] BTRFS info (device loop0): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 131.689901][ T6276] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 131.701297][ T3457] bridge_slave_0: left promiscuous mode [ 131.707213][ T3457] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.849091][ T930] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.903812][ T6276] BTRFS info (device loop0): enabling ssd optimizations [ 131.910873][ T6276] BTRFS info (device loop0): enabling free space tree [ 131.917676][ T6276] BTRFS info (device loop0): use lzo compression, level 1 [ 131.925253][ T930] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 131.936455][ T930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.979616][ T930] usb 6-1: config 0 descriptor?? [ 131.986375][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 131.996363][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 132.044575][ T9] rc_core: IR keymap rc-hauppauge not found [ 132.046052][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 132.056160][ T930] pwc: Askey VC010 type 2 USB webcam detected. [ 132.064973][ T9] Registered IR keymap rc-empty [ 132.070485][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 132.081268][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 132.089303][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 132.098763][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 132.129634][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 132.147876][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 132.163239][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input12 [ 132.180226][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 132.201182][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 132.212332][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 132.226644][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 132.236407][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 132.238035][ T5840] BTRFS info (device loop0): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 132.255192][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 132.279844][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 132.300149][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 132.343194][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 132.379326][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 132.398796][ T930] pwc: recv_control_msg error -32 req 02 val 2b00 [ 132.409992][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 132.439569][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 132.465860][ T930] pwc: recv_control_msg error -32 req 02 val 2700 [ 132.472533][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 132.493886][ T930] pwc: recv_control_msg error -32 req 02 val 2c00 [ 132.528431][ T930] pwc: recv_control_msg error -32 req 04 val 1000 [ 132.535170][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 132.580218][ T930] pwc: recv_control_msg error -32 req 04 val 1300 [ 132.600328][ T930] pwc: recv_control_msg error -32 req 04 val 1400 [ 132.615738][ T9] mceusb 4-1:0.0: Registered Ы with mce emulator interface version 1 [ 132.647653][ T930] pwc: recv_control_msg error -32 req 02 val 2000 [ 132.684648][ T9] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 132.694756][ T930] pwc: recv_control_msg error -32 req 02 val 2100 [ 132.721479][ T930] pwc: recv_control_msg error -32 req 04 val 1500 [ 132.776914][ T9] usb 4-1: USB disconnect, device number 4 [ 132.783445][ T930] pwc: recv_control_msg error -71 req 02 val 2500 [ 132.803766][ T930] pwc: recv_control_msg error -71 req 02 val 2400 [ 132.820149][ T6310] loop3: detected capacity change from 0 to 40427 [ 132.824407][ T930] pwc: recv_control_msg error -71 req 02 val 2600 [ 132.836765][ T6310] F2FS-fs (loop3): build fault injection rate: 14 [ 132.843783][ T6310] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 132.865276][ T6310] F2FS-fs (loop3): invalid crc value [ 132.902101][ C0] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of bio_endio+0x713/0x860 [ 132.923472][ C0] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of bio_endio+0x713/0x860 [ 132.953252][ T930] pwc: recv_control_msg error -71 req 02 val 2900 [ 132.998503][ T6310] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 133.004411][ T930] pwc: recv_control_msg error -71 req 02 val 2800 [ 133.007601][ T6310] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_recover_fsync_data+0x49d/0x98b0 [ 133.036072][ T6310] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 133.107023][ T930] pwc: recv_control_msg error -71 req 04 val 1100 [ 133.115776][ T5983] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 133.121964][ T6310] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_get_node_info+0xd42/0x11e0 [ 133.140901][ T6310] F2FS-fs (loop3): inject dquot initialize in f2fs_dquot_initialize of f2fs_mkdir+0x12b/0x640 [ 133.141209][ T5983] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 133.162575][ T6310] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_get_node_info+0xd42/0x11e0 [ 133.173228][ T930] pwc: recv_control_msg error -71 req 04 val 1200 [ 133.177815][ T6310] F2FS-fs (loop3): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x236/0x1090 [ 133.219901][ T5983] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 133.269040][ T5983] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 133.309837][ T930] pwc: Registered as video103. [ 133.316949][ T930] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input13 [ 133.402778][ T5842] syz-executor: attempt to access beyond end of device [ 133.402778][ T5842] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 133.444269][ T5983] usb 2-1: USB disconnect, device number 3 [ 133.485977][ T5842] CPU: 0 UID: 0 PID: 5842 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 133.486024][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 133.486045][ T5842] Call Trace: [ 133.486057][ T5842] [ 133.486070][ T5842] dump_stack_lvl+0x16c/0x1f0 [ 133.486115][ T5842] f2fs_handle_critical_error+0x624/0x9f0 [ 133.486172][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.486215][ T5842] ? f2fs_build_fault_attr+0x53/0x1f0 [ 133.486272][ T5842] f2fs_write_end_io+0x958/0xcf0 [ 133.486335][ T5842] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 133.486398][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.486453][ T5842] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 133.486508][ T5842] bio_endio+0x713/0x860 [ 133.486550][ T5842] submit_bio_noacct+0x306/0x1f60 [ 133.486615][ T5842] __submit_merged_bio+0x33c/0x770 [ 133.486683][ T5842] __submit_merged_write_cond+0x319/0x3f0 [ 133.486753][ T5842] f2fs_write_cache_pages+0x2067/0x2570 [ 133.486824][ T5842] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 133.486870][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.486912][ T5842] ? __kasan_check_byte+0x13/0x50 [ 133.486951][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.486996][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.487039][ T5842] ? rcu_is_watching+0x12/0xc0 [ 133.487092][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.487137][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.487180][ T5842] ? __kasan_check_byte+0x13/0x50 [ 133.487235][ T5842] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 133.487296][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.487409][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.487451][ T5842] ? add_lock_to_list+0x9d/0x130 [ 133.487517][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.487569][ T5842] f2fs_write_data_pages+0x4ad/0xd90 [ 133.487617][ T5842] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 133.487655][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.487710][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.487760][ T5842] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 133.487802][ T5842] do_writepages+0x27a/0x600 [ 133.487850][ T5842] ? __pfx_do_writepages+0x10/0x10 [ 133.487888][ T5842] ? do_raw_spin_unlock+0x172/0x230 [ 133.487936][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.487978][ T5842] ? _raw_spin_unlock+0x28/0x50 [ 133.488040][ T5842] filemap_fdatawrite_wbc+0x104/0x160 [ 133.488082][ T5842] ? stack_trace_save+0x8e/0xc0 [ 133.488141][ T5842] __filemap_fdatawrite_range+0xb9/0x100 [ 133.488195][ T5842] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 133.488248][ T5842] ? check_path.constprop.0+0x24/0x50 [ 133.488369][ T5842] ? find_held_lock+0x2b/0x80 [ 133.488423][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.488466][ T5842] ? do_raw_spin_unlock+0x172/0x230 [ 133.488514][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.488564][ T5842] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 133.488632][ T5842] block_operations+0x2b0/0xfe0 [ 133.488685][ T5842] ? __pfx_block_operations+0x10/0x10 [ 133.488722][ T5842] ? add_lock_to_list+0x9d/0x130 [ 133.488841][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.488883][ T5842] ? down_write+0x14d/0x200 [ 133.488925][ T5842] ? __pfx_down_write+0x10/0x10 [ 133.488971][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.489013][ T5842] ? rcu_is_watching+0x12/0xc0 [ 133.489073][ T5842] f2fs_write_checkpoint+0x2b8/0x4c60 [ 133.489123][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.489167][ T5842] ? kfree+0x2b8/0x6d0 [ 133.489212][ T5842] ? f2fs_stop_gc_thread+0x79/0xd0 [ 133.489261][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.489304][ T5842] ? rcu_is_watching+0x12/0xc0 [ 133.489356][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.489398][ T5842] ? kthread_stop+0x272/0x630 [ 133.489445][ T5842] kill_f2fs_super+0x3c2/0x470 [ 133.489486][ T5842] ? __pfx_kill_f2fs_super+0x10/0x10 [ 133.489525][ T5842] ? lockdep_hardirqs_on+0x7c/0x110 [ 133.489584][ T5842] deactivate_locked_super+0xc1/0x1a0 [ 133.489647][ T5842] deactivate_super+0xde/0x100 [ 133.489704][ T5842] cleanup_mnt+0x225/0x450 [ 133.489766][ T5842] task_work_run+0x150/0x240 [ 133.489814][ T5842] ? __pfx_task_work_run+0x10/0x10 [ 133.489858][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.489904][ T5842] ? __pfx___x64_sys_umount+0x10/0x10 [ 133.489951][ T5842] exit_to_user_mode_loop+0xec/0x130 [ 133.489999][ T5842] do_syscall_64+0x419/0x4e0 [ 133.490044][ T5842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.490079][ T5842] RIP: 0033:0x7f3cff3901f7 [ 133.490106][ T5842] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 133.490140][ T5842] RSP: 002b:00007ffe84688f18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 133.490173][ T5842] RAX: 0000000000000000 RBX: 00007f3cff411d7d RCX: 00007f3cff3901f7 [ 133.490196][ T5842] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe84688fd0 [ 133.490217][ T5842] RBP: 00007ffe84688fd0 R08: 0000000000000000 R09: 0000000000000000 [ 133.490239][ T5842] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe8468a060 [ 133.490261][ T5842] R13: 00007f3cff411d7d R14: 000000000002084a R15: 00007ffe8468a0a0 [ 133.490314][ T5842] [ 134.027198][ T5842] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 134.037636][ T6320] loop4: detected capacity change from 0 to 40427 [ 134.044093][ T930] usb 6-1: USB disconnect, device number 4 [ 134.072277][ T5842] CPU: 0 UID: 0 PID: 5842 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 134.072321][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 134.072341][ T5842] Call Trace: [ 134.072352][ T5842] [ 134.072365][ T5842] dump_stack_lvl+0x16c/0x1f0 [ 134.072409][ T5842] f2fs_handle_critical_error+0x624/0x9f0 [ 134.072465][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.072510][ T5842] ? f2fs_build_fault_attr+0x53/0x1f0 [ 134.072565][ T5842] f2fs_write_end_io+0x958/0xcf0 [ 134.072631][ T5842] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 134.072693][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.072746][ T5842] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 134.072802][ T5842] bio_endio+0x713/0x860 [ 134.072842][ T5842] submit_bio_noacct+0x306/0x1f60 [ 134.072905][ T5842] __submit_merged_bio+0x33c/0x770 [ 134.072967][ T5842] __submit_merged_write_cond+0x319/0x3f0 [ 134.073036][ T5842] f2fs_write_cache_pages+0x2067/0x2570 [ 134.073102][ T5842] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 134.073146][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.073190][ T5842] ? __kasan_check_byte+0x13/0x50 [ 134.073229][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.073274][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.073317][ T5842] ? rcu_is_watching+0x12/0xc0 [ 134.073371][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.073416][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.073458][ T5842] ? __kasan_check_byte+0x13/0x50 [ 134.073511][ T5842] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 134.073573][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.073679][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.073722][ T5842] ? add_lock_to_list+0x9d/0x130 [ 134.073786][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.073837][ T5842] f2fs_write_data_pages+0x4ad/0xd90 [ 134.073883][ T5842] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 134.073919][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.073973][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.074022][ T5842] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 134.074063][ T5842] do_writepages+0x27a/0x600 [ 134.074110][ T5842] ? __pfx_do_writepages+0x10/0x10 [ 134.074149][ T5842] ? do_raw_spin_unlock+0x172/0x230 [ 134.074197][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.074239][ T5842] ? _raw_spin_unlock+0x28/0x50 [ 134.074301][ T5842] filemap_fdatawrite_wbc+0x104/0x160 [ 134.074343][ T5842] ? stack_trace_save+0x8e/0xc0 [ 134.074402][ T5842] __filemap_fdatawrite_range+0xb9/0x100 [ 134.074457][ T5842] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 134.074510][ T5842] ? check_path.constprop.0+0x24/0x50 [ 134.074626][ T5842] ? find_held_lock+0x2b/0x80 [ 134.074681][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.074725][ T5842] ? do_raw_spin_unlock+0x172/0x230 [ 134.074773][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.074823][ T5842] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 134.074884][ T5842] block_operations+0x2b0/0xfe0 [ 134.074936][ T5842] ? __pfx_block_operations+0x10/0x10 [ 134.074973][ T5842] ? add_lock_to_list+0x9d/0x130 [ 134.075082][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.075125][ T5842] ? down_write+0x14d/0x200 [ 134.075168][ T5842] ? __pfx_down_write+0x10/0x10 [ 134.075213][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.075257][ T5842] ? rcu_is_watching+0x12/0xc0 [ 134.075316][ T5842] f2fs_write_checkpoint+0x2b8/0x4c60 [ 134.075364][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.075406][ T5842] ? kfree+0x2b8/0x6d0 [ 134.075450][ T5842] ? f2fs_stop_gc_thread+0x79/0xd0 [ 134.075498][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.075541][ T5842] ? rcu_is_watching+0x12/0xc0 [ 134.075592][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.075641][ T5842] ? kthread_stop+0x272/0x630 [ 134.075686][ T5842] kill_f2fs_super+0x3c2/0x470 [ 134.075727][ T5842] ? __pfx_kill_f2fs_super+0x10/0x10 [ 134.075767][ T5842] ? lockdep_hardirqs_on+0x7c/0x110 [ 134.075822][ T5842] deactivate_locked_super+0xc1/0x1a0 [ 134.075880][ T5842] deactivate_super+0xde/0x100 [ 134.075936][ T5842] cleanup_mnt+0x225/0x450 [ 134.075996][ T5842] task_work_run+0x150/0x240 [ 134.076045][ T5842] ? __pfx_task_work_run+0x10/0x10 [ 134.076089][ T5842] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.076135][ T5842] ? __pfx___x64_sys_umount+0x10/0x10 [ 134.076181][ T5842] exit_to_user_mode_loop+0xec/0x130 [ 134.076229][ T5842] do_syscall_64+0x419/0x4e0 [ 134.076274][ T5842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.076310][ T5842] RIP: 0033:0x7f3cff3901f7 [ 134.076337][ T5842] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 134.076371][ T5842] RSP: 002b:00007ffe84688f18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 134.076404][ T5842] RAX: 0000000000000000 RBX: 00007f3cff411d7d RCX: 00007f3cff3901f7 [ 134.076427][ T5842] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe84688fd0 [ 134.076449][ T5842] RBP: 00007ffe84688fd0 R08: 0000000000000000 R09: 0000000000000000 [ 134.076470][ T5842] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe8468a060 [ 134.076493][ T5842] R13: 00007f3cff411d7d R14: 000000000002084a R15: 00007ffe8468a0a0 [ 134.076540][ T5842] [ 134.076552][ T5842] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 134.323672][ T6320] F2FS-fs (loop4): invalid crc value [ 134.359335][ T5853] Bluetooth: hci3: command tx timeout [ 134.481672][ T6320] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 134.666582][ T6320] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 134.759281][ T930] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 134.908647][ T5841] syz-executor: attempt to access beyond end of device [ 134.908647][ T5841] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 134.949291][ T5841] CPU: 0 UID: 0 PID: 5841 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 134.949329][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 134.949348][ T5841] Call Trace: [ 134.949358][ T5841] [ 134.949369][ T5841] dump_stack_lvl+0x16c/0x1f0 [ 134.949416][ T5841] f2fs_handle_critical_error+0x624/0x9f0 [ 134.949469][ T5841] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.949508][ T5841] ? f2fs_build_fault_attr+0x53/0x1f0 [ 134.949559][ T5841] f2fs_write_end_io+0x958/0xcf0 [ 134.949611][ T5841] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 134.949668][ T5841] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.949717][ T5841] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 134.949767][ T5841] bio_endio+0x713/0x860 [ 134.949804][ T5841] submit_bio_noacct+0x306/0x1f60 [ 134.949866][ T5841] __submit_merged_bio+0x33c/0x770 [ 134.949928][ T5841] __submit_merged_write_cond+0x319/0x3f0 [ 134.949996][ T5841] f2fs_write_cache_pages+0x2067/0x2570 [ 134.950060][ T5841] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 134.950104][ T5841] ? __lock_acquire+0x62e/0x1ce0 [ 134.950153][ T5841] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.950196][ T5841] ? __lock_acquire+0x62e/0x1ce0 [ 134.950273][ T5841] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 134.950378][ T5841] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.950430][ T5841] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.950480][ T5841] f2fs_write_data_pages+0x4ad/0xd90 [ 134.950526][ T5841] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 134.950561][ T5841] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.950615][ T5841] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.950662][ T5841] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 134.950703][ T5841] do_writepages+0x27a/0x600 [ 134.950750][ T5841] ? __pfx_do_writepages+0x10/0x10 [ 134.950787][ T5841] ? do_raw_spin_unlock+0x172/0x230 [ 134.950835][ T5841] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.950877][ T5841] ? _raw_spin_unlock+0x28/0x50 [ 134.950937][ T5841] filemap_fdatawrite_wbc+0x104/0x160 [ 134.950983][ T5841] __filemap_fdatawrite_range+0xb9/0x100 [ 134.951038][ T5841] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 134.951146][ T5841] ? find_held_lock+0x2b/0x80 [ 134.951200][ T5841] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.951244][ T5841] ? do_raw_spin_unlock+0x172/0x230 [ 134.951297][ T5841] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.951346][ T5841] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 134.951412][ T5841] block_operations+0x2b0/0xfe0 [ 134.951456][ T5841] ? __pfx___schedule+0x10/0x10 [ 134.951518][ T5841] ? __pfx_block_operations+0x10/0x10 [ 134.951610][ T5841] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.951653][ T5841] ? down_write+0x14d/0x200 [ 134.951694][ T5841] ? __pfx_down_write+0x10/0x10 [ 134.951739][ T5841] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.951781][ T5841] ? rcu_is_watching+0x12/0xc0 [ 134.951840][ T5841] f2fs_write_checkpoint+0x2b8/0x4c60 [ 134.951888][ T5841] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.951930][ T5841] ? kfree+0x2b8/0x6d0 [ 134.951973][ T5841] ? f2fs_stop_gc_thread+0x79/0xd0 [ 134.952020][ T5841] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.952062][ T5841] ? rcu_is_watching+0x12/0xc0 [ 134.952114][ T5841] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.952156][ T5841] ? kthread_stop+0x272/0x630 [ 134.952201][ T5841] kill_f2fs_super+0x3c2/0x470 [ 134.952242][ T5841] ? __pfx_kill_f2fs_super+0x10/0x10 [ 134.952281][ T5841] ? lockdep_hardirqs_on+0x7c/0x110 [ 134.952334][ T5841] deactivate_locked_super+0xc1/0x1a0 [ 134.952397][ T5841] deactivate_super+0xde/0x100 [ 134.952452][ T5841] cleanup_mnt+0x225/0x450 [ 134.952513][ T5841] task_work_run+0x150/0x240 [ 134.952560][ T5841] ? __pfx_task_work_run+0x10/0x10 [ 134.952603][ T5841] ? srso_alias_return_thunk+0x5/0xfbef5 [ 134.952650][ T5841] ? __pfx___x64_sys_umount+0x10/0x10 [ 134.952693][ T5841] exit_to_user_mode_loop+0xec/0x130 [ 134.952742][ T5841] do_syscall_64+0x419/0x4e0 [ 134.952785][ T5841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.952820][ T5841] RIP: 0033:0x7fa52cb901f7 [ 134.952847][ T5841] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 134.952881][ T5841] RSP: 002b:00007ffc4c2e8f48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 134.952913][ T5841] RAX: 0000000000000000 RBX: 00007fa52cc11d7d RCX: 00007fa52cb901f7 [ 134.952936][ T5841] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4c2e9000 [ 134.952957][ T5841] RBP: 00007ffc4c2e9000 R08: 0000000000000000 R09: 0000000000000000 [ 134.952979][ T5841] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4c2ea090 [ 134.953002][ T5841] R13: 00007fa52cc11d7d R14: 0000000000020e16 R15: 00007ffc4c2ea0d0 [ 134.953049][ T5841] [ 134.966921][ T6336] binder: 6335:6336 ioctl 4018620d 0 returned -22 [ 134.968860][ T5841] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 135.054511][ T6336] binder: 6335:6336 ioctl c0306201 0 returned -14 [ 135.054753][ T6336] binder: 6335:6336 ioctl c0306201 0 returned -14 [ 135.356787][ T930] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 135.482034][ T930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.490274][ T930] usb 6-1: Product: syz [ 135.494501][ T930] usb 6-1: Manufacturer: syz [ 135.523638][ T930] usb 6-1: SerialNumber: syz [ 135.543632][ T930] usb 6-1: config 0 descriptor?? [ 135.817775][ T930] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 136.366280][ T6334] loop0: detected capacity change from 0 to 32768 [ 136.405912][ T930] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 136.431193][ T3457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.455714][ T6334] [ 136.455714][ T6334] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 136.455714][ T6334] [ 136.480304][ T3457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.509403][ T5853] Bluetooth: hci3: command tx timeout [ 136.522224][ T3457] bond0 (unregistering): Released all slaves [ 136.531415][ T6334] [ 136.531415][ T6334] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 136.531415][ T6334] [ 136.600151][ T6334] [ 136.600151][ T6334] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 136.600151][ T6334] [ 136.628581][ T6334] [ 136.628581][ T6334] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 136.628581][ T6334] [ 136.682521][ T6334] [ 136.682521][ T6334] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 136.682521][ T6334] [ 136.748593][ T6334] [ 136.748593][ T6334] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 136.748593][ T6334] [ 136.835330][ T3457] tipc: Left network mode [ 136.889447][ T930] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 136.898710][ T13] [ 136.898710][ T13] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 136.898710][ T13] [ 136.918316][ T13] [ 136.918316][ T13] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 136.918316][ T13] [ 136.940978][ T112] [ 136.940978][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 136.940978][ T112] [ 136.968248][ T5840] [ 136.968248][ T5840] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 136.968248][ T5840] [ 137.011987][ T5840] [ 137.011987][ T5840] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 137.011987][ T5840] [ 137.043694][ T930] usb 2-1: Using ep0 maxpacket: 16 [ 137.074386][ T930] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.109386][ T930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 137.202952][ T930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 137.298286][ T930] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 137.320767][ T6365] loop4: detected capacity change from 0 to 32768 [ 137.378368][ T930] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.401232][ T6365] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 137.492229][ T930] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 137.518703][ T6365] XFS (loop4): Ending clean mount [ 137.527929][ T930] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 137.528765][ T6365] XFS (loop4): Quotacheck needed: Please wait. [ 137.599286][ T930] usb 2-1: Manufacturer: syz [ 137.601554][ T6365] XFS (loop4): Quotacheck: Done. [ 137.654391][ T930] usb 2-1: config 0 descriptor?? [ 137.693206][ T5848] usb 6-1: USB disconnect, device number 5 [ 137.873815][ T6350] loop3: detected capacity change from 0 to 32768 [ 137.993678][ T5841] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 138.300353][ T6382] loop5: detected capacity change from 0 to 40427 [ 138.308836][ T6382] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 138.316660][ T6382] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 138.359569][ T6382] F2FS-fs (loop5): invalid crc value [ 138.368466][ T6350] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 138.510826][ T6382] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 138.537162][ T6382] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 138.544468][ T6382] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 138.606479][ T5853] Bluetooth: hci3: command tx timeout [ 138.735905][ T6350] XFS (loop3): Ending clean mount [ 138.815328][ T6350] XFS (loop3): Quotacheck needed: Please wait. [ 138.890571][ T3457] hsr_slave_0: left promiscuous mode [ 138.942528][ T3457] hsr_slave_1: left promiscuous mode [ 138.994042][ T3457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.014407][ T6350] XFS (loop3): Quotacheck: Done. [ 139.025836][ T3457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.068100][ T3457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.086428][ T3457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.247659][ T3457] veth1_macvtap: left promiscuous mode [ 139.264554][ T3493] kworker/u8:9: attempt to access beyond end of device [ 139.264554][ T3493] loop5: rw=1, sector=77824, nr_sectors = 4096 limit=40427 [ 139.299042][ T3457] veth0_macvtap: left promiscuous mode [ 139.305884][ T3457] veth1_vlan: left promiscuous mode [ 139.326034][ T3457] veth0_vlan: left promiscuous mode [ 139.340784][ T5842] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 139.433134][ T3493] kworker/u8:9: attempt to access beyond end of device [ 139.433134][ T3493] loop5: rw=1, sector=49152, nr_sectors = 2600 limit=40427 [ 139.842181][ T6387] loop0: detected capacity change from 0 to 32768 [ 139.929282][ T5983] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 139.963514][ T6387] ea_get: invalid extended attribute [ 139.968934][ T6387] ffff888054294348: 03 00 00 ... [ 139.993110][ T930] rc_core: IR keymap rc-hauppauge not found [ 139.999021][ T930] Registered IR keymap rc-empty [ 140.040331][ T930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 140.090273][ T930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 140.097710][ T6414] netlink: 28 bytes leftover after parsing attributes in process `syz.3.108'. [ 140.118342][ T6414] netlink: 28 bytes leftover after parsing attributes in process `syz.3.108'. [ 140.137784][ T930] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 140.187780][ T5983] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.208729][ T930] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input14 [ 140.223208][ T5983] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 140.239323][ T5983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.254206][ T930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 140.282813][ T5983] usb 5-1: config 0 descriptor?? [ 140.299894][ T930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 140.315726][ T5983] pwc: Askey VC010 type 2 USB webcam detected. [ 140.340212][ T930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 140.392609][ T930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 140.442780][ T930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 140.483823][ T930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 140.531573][ T930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 140.561571][ T930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 140.591975][ T930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 140.619509][ T930] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 140.673022][ T930] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 140.681121][ T5853] Bluetooth: hci3: command tx timeout [ 140.699507][ T930] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 140.710922][ T5983] pwc: recv_control_msg error -32 req 02 val 2b00 [ 140.729310][ T5983] pwc: recv_control_msg error -32 req 02 val 2700 [ 140.739682][ T930] usb 2-1: USB disconnect, device number 4 [ 140.751171][ T5983] pwc: recv_control_msg error -32 req 02 val 2c00 [ 140.765573][ T5983] pwc: recv_control_msg error -32 req 04 val 1000 [ 140.784951][ T5983] pwc: recv_control_msg error -32 req 04 val 1300 [ 140.796128][ T5983] pwc: recv_control_msg error -32 req 04 val 1400 [ 140.813590][ T5983] pwc: recv_control_msg error -32 req 02 val 2000 [ 140.884269][ T5983] pwc: recv_control_msg error -32 req 02 val 2100 [ 140.985229][ T3457] team0 (unregistering): Port device team_slave_1 removed [ 141.028917][ T3457] team0 (unregistering): Port device team_slave_0 removed [ 141.130307][ T6419] loop5: detected capacity change from 0 to 32768 [ 141.138453][ T6419] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.107 (6419) [ 141.155459][ T6419] BTRFS info (device loop5): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 141.167474][ T6419] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 141.188690][ T5983] pwc: recv_control_msg error -71 req 02 val 2500 [ 141.211807][ T5983] pwc: recv_control_msg error -71 req 02 val 2400 [ 141.240997][ T5983] pwc: recv_control_msg error -71 req 02 val 2600 [ 141.252621][ T5983] pwc: recv_control_msg error -71 req 02 val 2900 [ 141.279287][ T5983] pwc: recv_control_msg error -71 req 02 val 2800 [ 141.297466][ T5983] pwc: recv_control_msg error -71 req 04 val 1100 [ 141.308817][ T5983] pwc: recv_control_msg error -71 req 04 val 1200 [ 141.338787][ T5983] pwc: Registered as video103. [ 141.358879][ T5983] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input15 [ 141.373782][ T6419] BTRFS info (device loop5): enabling ssd optimizations [ 141.382944][ T6419] BTRFS info (device loop5): enabling free space tree [ 141.389848][ T6419] BTRFS info (device loop5): use lzo compression, level 1 [ 141.415741][ T5983] usb 5-1: USB disconnect, device number 5 [ 141.499802][ T30] audit: type=1804 audit(1759493821.965:2): pid=6419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.107" name="/newroot/12/file0/file1" dev="loop5" ino=260 res=1 errno=0 [ 141.693291][ T5851] BTRFS info (device loop5): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 142.371645][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.386504][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.430138][ T6298] chnl_net:caif_netlink_parms(): no params data found [ 142.521978][ T6446] loop1: detected capacity change from 0 to 128 [ 142.598748][ T6446] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.604924][ T6452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.113'. [ 142.644997][ T6446] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 143.007238][ T6446] fscrypt: Adiantum using implementation "adiantum(xchacha12-lib,aes-aesni,nhpoly1305-avx2)" [ 143.049859][ T6446] fscrypt: loop1: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 143.154894][ T6467] process 'syz.5.119' launched '/dev/fd/3' with NULL argv: empty string added [ 143.179239][ T930] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 143.339473][ T6467] loop5: detected capacity change from 0 to 4096 [ 143.352900][ T5850] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.382758][ T930] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 143.397852][ T930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.432266][ T6298] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.442172][ T930] usb 4-1: Product: syz [ 143.446358][ T930] usb 4-1: Manufacturer: syz [ 143.456397][ T6298] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.487682][ T930] usb 4-1: SerialNumber: syz [ 143.506310][ T6298] bridge_slave_0: entered allmulticast mode [ 143.536729][ T930] usb 4-1: config 0 descriptor?? [ 143.567290][ T6298] bridge_slave_0: entered promiscuous mode [ 143.684329][ T6298] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.729318][ T6298] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.756937][ T6298] bridge_slave_1: entered allmulticast mode [ 143.794961][ T6298] bridge_slave_1: entered promiscuous mode [ 143.805878][ T930] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 144.093698][ T6298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.136880][ T6298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.291572][ T48] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 144.317327][ T6298] team0: Port device team_slave_0 added [ 144.344201][ T6298] team0: Port device team_slave_1 added [ 144.409016][ T930] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 144.471764][ T48] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.492819][ T48] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 144.517791][ T6298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.520748][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.544491][ T6298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.551085][ T48] usb 2-1: config 0 descriptor?? [ 144.590142][ T6459] loop0: detected capacity change from 0 to 40427 [ 144.620114][ T48] pwc: Askey VC010 type 2 USB webcam detected. [ 144.642721][ T6459] F2FS-fs (loop0): invalid crc value [ 144.645098][ T6298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.701580][ T6298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.708523][ T6298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.789184][ T6298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.994881][ T6459] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 145.039344][ T48] pwc: recv_control_msg error -32 req 02 val 2b00 [ 145.062489][ T6459] F2FS-fs (loop0): Start checkpoint disabled! [ 145.074941][ T48] pwc: recv_control_msg error -32 req 02 val 2700 [ 145.095614][ T48] pwc: recv_control_msg error -32 req 02 val 2c00 [ 145.106177][ T6298] hsr_slave_0: entered promiscuous mode [ 145.115358][ T48] pwc: recv_control_msg error -32 req 04 val 1000 [ 145.122642][ T6459] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 145.130058][ T48] pwc: recv_control_msg error -32 req 04 val 1300 [ 145.134861][ T6298] hsr_slave_1: entered promiscuous mode [ 145.137546][ T48] pwc: recv_control_msg error -32 req 04 val 1400 [ 145.159979][ T6482] loop4: detected capacity change from 0 to 32768 [ 145.177458][ T48] pwc: recv_control_msg error -32 req 02 val 2000 [ 145.188974][ T6482] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.124 (6482) [ 145.211383][ T48] pwc: recv_control_msg error -32 req 02 val 2100 [ 145.249524][ T6482] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 145.280009][ T6482] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 145.304593][ T3457] kworker/u8:7: attempt to access beyond end of device [ 145.304593][ T3457] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 145.371820][ T3457] CPU: 0 UID: 0 PID: 3457 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 145.371863][ T3457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 145.371886][ T3457] Workqueue: writeback wb_workfn (flush-7:0) [ 145.371948][ T3457] Call Trace: [ 145.371960][ T3457] [ 145.371973][ T3457] dump_stack_lvl+0x16c/0x1f0 [ 145.372015][ T3457] f2fs_handle_critical_error+0x624/0x9f0 [ 145.372072][ T3457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.372116][ T3457] ? f2fs_build_fault_attr+0x53/0x1f0 [ 145.372173][ T3457] f2fs_write_end_io+0x958/0xcf0 [ 145.372236][ T3457] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 145.372301][ T3457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.372357][ T3457] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 145.372417][ T3457] bio_endio+0x713/0x860 [ 145.372459][ T3457] submit_bio_noacct+0x306/0x1f60 [ 145.372525][ T3457] __submit_merged_bio+0x33c/0x770 [ 145.372590][ T3457] __submit_merged_write_cond+0x319/0x3f0 [ 145.372667][ T3457] f2fs_write_cache_pages+0x2067/0x2570 [ 145.372739][ T3457] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 145.372783][ T3457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.372828][ T3457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.372871][ T3457] ? find_held_lock+0x2b/0x80 [ 145.372928][ T3457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.372978][ T3457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.373020][ T3457] ? __lock_acquire+0xb97/0x1ce0 [ 145.373104][ T3457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.373146][ T3457] ? do_raw_spin_unlock+0x172/0x230 [ 145.373251][ T3457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.373304][ T3457] f2fs_write_data_pages+0x4ad/0xd90 [ 145.373352][ T3457] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 145.373404][ T3457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.373446][ T3457] ? __lock_acquire+0xb97/0x1ce0 [ 145.373487][ T3457] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 145.373529][ T3457] do_writepages+0x27a/0x600 [ 145.373580][ T3457] ? __pfx_do_writepages+0x10/0x10 [ 145.373618][ T3457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.373665][ T3457] ? reacquire_held_locks+0xcd/0x1f0 [ 145.373704][ T3457] ? writeback_sb_inodes+0x3b0/0xfa0 [ 145.373761][ T3457] __writeback_single_inode+0x160/0xfb0 [ 145.373817][ T3457] ? __pfx___writeback_single_inode+0x10/0x10 [ 145.373866][ T3457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.373908][ T3457] ? do_raw_spin_unlock+0x172/0x230 [ 145.373956][ T3457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.374006][ T3457] writeback_sb_inodes+0x60d/0xfa0 [ 145.374083][ T3457] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 145.374131][ T3457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.374173][ T3457] ? find_held_lock+0x2b/0x80 [ 145.374298][ T3457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.374340][ T3457] ? rcu_is_watching+0x12/0xc0 [ 145.374394][ T3457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.374436][ T3457] ? queue_io+0x3f6/0x520 [ 145.374485][ T3457] wb_writeback+0x419/0xb70 [ 145.374548][ T3457] ? __pfx_wb_writeback+0x10/0x10 [ 145.374594][ T3457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.374655][ T3457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.374698][ T3457] ? mark_held_locks+0x49/0x80 [ 145.374744][ T3457] wb_workfn+0x14d/0xbe0 [ 145.374802][ T3457] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 145.374867][ T3457] ? __pfx_wb_workfn+0x10/0x10 [ 145.374924][ T3457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.374971][ T3457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.375020][ T3457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.375062][ T3457] ? rcu_is_watching+0x12/0xc0 [ 145.375124][ T3457] process_one_work+0x9cf/0x1b70 [ 145.375193][ T3457] ? __pfx_process_one_work+0x10/0x10 [ 145.375241][ T3457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.375296][ T3457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.375339][ T3457] ? assign_work+0x1a0/0x250 [ 145.375388][ T3457] worker_thread+0x6c8/0xf10 [ 145.375459][ T3457] ? __pfx_worker_thread+0x10/0x10 [ 145.375506][ T3457] kthread+0x3c5/0x780 [ 145.375550][ T3457] ? __pfx_kthread+0x10/0x10 [ 145.375594][ T3457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.375640][ T3457] ? rcu_is_watching+0x12/0xc0 [ 145.375694][ T3457] ? __pfx_kthread+0x10/0x10 [ 145.375738][ T3457] ret_from_fork+0x56d/0x730 [ 145.375776][ T3457] ? __pfx_kthread+0x10/0x10 [ 145.375820][ T3457] ret_from_fork_asm+0x1a/0x30 [ 145.375895][ T3457] [ 145.740126][ T6506] loop5: detected capacity change from 0 to 32768 [ 145.752874][ T3457] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 145.814568][ T48] pwc: recv_control_msg error -71 req 02 val 2500 [ 145.821164][ T6506] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.126 (6506) [ 145.839626][ T48] pwc: recv_control_msg error -71 req 02 val 2400 [ 145.846463][ T48] pwc: recv_control_msg error -71 req 02 val 2600 [ 145.859583][ T48] pwc: recv_control_msg error -71 req 02 val 2900 [ 145.879260][ T48] pwc: recv_control_msg error -71 req 02 val 2800 [ 145.889248][ T48] pwc: recv_control_msg error -71 req 04 val 1100 [ 145.899602][ T48] pwc: recv_control_msg error -71 req 04 val 1200 [ 145.925186][ T6506] BTRFS info (device loop5): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 145.935392][ T6506] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 145.978421][ T48] pwc: Registered as video103. [ 146.014091][ T48] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16 [ 146.098828][ T6482] BTRFS info (device loop4): enabling ssd optimizations [ 146.134109][ T5848] usb 4-1: USB disconnect, device number 5 [ 146.149404][ T6482] BTRFS info (device loop4): enabling free space tree [ 146.161105][ T48] usb 2-1: USB disconnect, device number 5 [ 146.404373][ T6506] BTRFS info (device loop5): enabling ssd optimizations [ 146.411538][ T6506] BTRFS info (device loop5): enabling free space tree [ 146.418324][ T6506] BTRFS info (device loop5): use lzo compression, level 1 [ 146.519398][ T5841] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 146.564823][ T6298] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 146.722252][ T6298] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 146.726509][ T5851] BTRFS info (device loop5): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 147.082491][ T6541] loop3: detected capacity change from 0 to 32768 [ 147.184013][ T6541] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 147.202312][ T6298] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 147.252470][ T6541] (syz.3.130,6541,1):ocfs2_clear_journal_error:1146 ERROR: File system error 9 recorded in journal 0. [ 147.263612][ T6541] (syz.3.130,6541,1):ocfs2_clear_journal_error:1148 ERROR: File system on device loop3 needs checking. [ 147.283309][ T6541] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 147.486601][ T5842] ocfs2: Unmounting device (7,3) on (node local) [ 147.591122][ T6298] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 147.616738][ T6561] netlink: 28 bytes leftover after parsing attributes in process `syz.4.129'. [ 147.631117][ T6557] loop5: detected capacity change from 0 to 1024 [ 147.688070][ T6561] netlink: 28 bytes leftover after parsing attributes in process `syz.4.129'. [ 147.691546][ T6557] EXT4-fs: Ignoring removed nobh option [ 147.777849][ T6557] EXT4-fs: Ignoring removed bh option [ 147.813756][ T6557] EXT4-fs (loop5): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 147.916308][ T6557] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.147693][ T30] audit: type=1326 audit(1759493828.595:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.1.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ee38eec9 code=0x7ffc0000 [ 148.379291][ T30] audit: type=1326 audit(1759493828.655:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.1.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ee38eec9 code=0x7ffc0000 [ 148.498493][ T30] audit: type=1326 audit(1759493828.675:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.1.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f45ee38eec9 code=0x7ffc0000 [ 148.587093][ T6298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.679226][ T30] audit: type=1326 audit(1759493828.675:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.1.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ee38eec9 code=0x7ffc0000 [ 148.747559][ T6298] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.828665][ T30] audit: type=1326 audit(1759493828.675:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.1.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ee38eec9 code=0x7ffc0000 [ 148.850961][ T3493] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.851094][ T3493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.853494][ T3493] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.872911][ T3493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.265775][ T6603] loop1: detected capacity change from 0 to 1024 [ 149.605948][ T5851] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.849292][ T48] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 150.089256][ T48] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.123063][ T48] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 150.169375][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.194399][ T6298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.215217][ T48] usb 4-1: config 0 descriptor?? [ 150.253314][ T48] pwc: Askey VC010 type 2 USB webcam detected. [ 150.653161][ T48] pwc: recv_control_msg error -32 req 02 val 2b00 [ 150.681650][ T48] pwc: recv_control_msg error -32 req 02 val 2700 [ 150.696327][ T48] pwc: recv_control_msg error -32 req 02 val 2c00 [ 150.713894][ T48] pwc: recv_control_msg error -32 req 04 val 1000 [ 150.729378][ T6597] loop4: detected capacity change from 0 to 32768 [ 150.740140][ T48] pwc: recv_control_msg error -32 req 04 val 1300 [ 150.757627][ T48] pwc: recv_control_msg error -32 req 04 val 1400 [ 150.771466][ T6597] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.140 (6597) [ 150.792559][ T48] pwc: recv_control_msg error -32 req 02 val 2000 [ 150.808317][ T48] pwc: recv_control_msg error -32 req 02 val 2100 [ 150.856204][ T6597] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 150.892819][ T6597] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 151.026469][ T48] pwc: recv_control_msg error -71 req 02 val 2500 [ 151.038925][ T48] pwc: recv_control_msg error -71 req 02 val 2400 [ 151.078232][ T48] pwc: recv_control_msg error -71 req 02 val 2600 [ 151.089282][ T48] pwc: recv_control_msg error -71 req 02 val 2900 [ 151.093678][ T6597] BTRFS info (device loop4): enabling ssd optimizations [ 151.120154][ T48] pwc: recv_control_msg error -71 req 02 val 2800 [ 151.153331][ T48] pwc: recv_control_msg error -71 req 04 val 1100 [ 151.160080][ T6597] BTRFS info (device loop4): enabling free space tree [ 151.178399][ T48] pwc: recv_control_msg error -71 req 04 val 1200 [ 151.239529][ T48] pwc: Registered as video103. [ 151.277099][ T48] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input17 [ 151.349298][ T48] usb 4-1: USB disconnect, device number 6 [ 151.519548][ T5841] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 151.592768][ T6298] veth0_vlan: entered promiscuous mode [ 151.624833][ T6298] veth1_vlan: entered promiscuous mode [ 151.668223][ T6667] loop0: detected capacity change from 0 to 4096 [ 151.724084][ T6667] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 151.757722][ T6298] veth0_macvtap: entered promiscuous mode [ 151.854537][ T6298] veth1_macvtap: entered promiscuous mode [ 151.941172][ T6667] ntfs3(loop0): ino=19, mi_enum_attr [ 151.969561][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 151.987680][ T6667] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 152.000689][ T6298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.027882][ T5848] IPVS: starting estimator thread 0... [ 152.085559][ T6298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.129278][ T6676] IPVS: using max 21 ests per chain, 50400 per kthread [ 152.148262][ T3480] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.188699][ T3480] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.238331][ T3480] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.293859][ T3480] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.575289][ T3480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.603191][ T3480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.718009][ T6684] IPVS: persistence engine module ip_vs_pe_ not found [ 153.105533][ T6664] loop1: detected capacity change from 0 to 32768 [ 153.175563][ T6664] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 153.231169][ T6689] loop3: detected capacity change from 0 to 32768 [ 153.242583][ T6689] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.164 (6689) [ 153.261711][ T6689] BTRFS info (device loop3): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 153.271880][ T6689] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 153.288081][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.326177][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.353147][ T6664] XFS (loop1): Ending clean mount [ 153.363881][ T6664] XFS (loop1): Quotacheck needed: Please wait. [ 153.499694][ T6689] BTRFS info (device loop3): enabling ssd optimizations [ 153.507063][ T6689] BTRFS info (device loop3): enabling free space tree [ 153.515821][ T6689] BTRFS info (device loop3): use lzo compression, level 1 [ 153.516670][ T6664] XFS (loop1): Quotacheck: Done. [ 153.625026][ T6678] loop5: detected capacity change from 0 to 32768 [ 153.735987][ T6678] [ 153.735987][ T6678] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 153.735987][ T6678] [ 153.818220][ T6678] [ 153.818220][ T6678] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 153.818220][ T6678] [ 153.940697][ T6678] [ 153.940697][ T6678] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 153.940697][ T6678] [ 153.966909][ T5842] BTRFS info (device loop3): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 154.014368][ T6678] [ 154.014368][ T6678] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 154.014368][ T6678] [ 154.043477][ T6717] loop6: detected capacity change from 0 to 32768 [ 154.046789][ T5850] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 154.051203][ T6717] btrfs: Deprecated parameter 'usebackuproot' [ 154.066596][ T6717] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 154.084451][ T6717] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.84 (6717) [ 154.123960][ T6678] [ 154.123960][ T6678] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 154.123960][ T6678] [ 154.143055][ T6717] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 154.153774][ T6717] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm [ 154.175009][ T6678] [ 154.175009][ T6678] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 154.175009][ T6678] [ 154.351933][ T49] BTRFS warning (device loop6): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x32f839c6 level 0 [ 154.399615][ T6717] BTRFS warning (device loop6): couldn't read tree root [ 154.406594][ T6717] BTRFS warning (device loop6): try to load backup roots slot 1 [ 154.430236][ T3480] BTRFS warning (device loop6): checksum verify failed on logical 5316608 mirror 1 wanted 0x5387c9d6 found 0xc5289bf1 level 0 [ 154.470964][ T6717] BTRFS error (device loop6): failed to load root extent [ 154.479427][ T6717] BTRFS warning (device loop6): try to load backup roots slot 2 [ 154.487359][ T3493] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 154.539440][ T6717] BTRFS warning (device loop6): couldn't read tree root [ 154.546408][ T6717] BTRFS warning (device loop6): try to load backup roots slot 3 [ 154.566673][ T36] [ 154.566673][ T36] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 154.566673][ T36] [ 154.620369][ T36] [ 154.620369][ T36] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 154.620369][ T36] [ 154.636562][ T6717] BTRFS info (device loop6): rebuilding free space tree [ 154.666179][ T6717] BTRFS info (device loop6): checking UUID tree [ 154.673419][ T6717] BTRFS info (device loop6): allowing degraded mounts [ 154.674243][ T5851] [ 154.674243][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 154.674243][ T5851] [ 154.681941][ T6717] BTRFS info (device loop6): enabling ssd optimizations [ 154.698594][ T6717] BTRFS info (device loop6): enabling free space tree [ 154.705424][ T6717] BTRFS info (device loop6): force clearing of disk cache [ 154.712635][ T6717] BTRFS info (device loop6): trying to use backup root at mount time [ 154.720779][ T6717] BTRFS info (device loop6): use zlib compression, level 3 [ 154.740688][ T111] [ 154.740688][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 154.740688][ T111] [ 154.793683][ T5851] [ 154.793683][ T5851] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 154.793683][ T5851] [ 154.815312][ T6740] loop0: detected capacity change from 0 to 512 [ 154.965022][ T6687] loop4: detected capacity change from 0 to 32768 [ 154.967965][ T6298] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 155.092174][ T6687] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 155.122255][ T6740] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.189477][ T6740] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.301225][ T30] audit: type=1800 audit(1759493835.775:8): pid=6740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.170" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 155.351488][ T6687] XFS (loop4): Ending clean mount [ 155.400497][ T6687] XFS (loop4): Quotacheck needed: Please wait. [ 155.573139][ T6687] XFS (loop4): Quotacheck: Done. [ 155.720961][ T6760] netlink: 'syz.6.171': attribute type 1 has an invalid length. [ 155.728740][ T6760] netlink: 224 bytes leftover after parsing attributes in process `syz.6.171'. [ 156.129366][ T5848] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 156.530956][ T6767] loop5: detected capacity change from 0 to 16 [ 156.601999][ T6767] erofs (device loop5): mounted with root inode @ nid 36. [ 156.622638][ T5841] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 156.627983][ T5848] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.699050][ T5848] usb 7-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 156.739284][ T5848] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.753157][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.782068][ T5848] usb 7-1: config 0 descriptor?? [ 157.425402][ T6773] loop3: detected capacity change from 0 to 32768 [ 157.476401][ T6773] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 157.514302][ T6773] XFS (loop3): Ending clean mount [ 157.526013][ T6773] XFS (loop3): Quotacheck needed: Please wait. [ 157.565535][ T6750] loop1: detected capacity change from 0 to 32768 [ 157.590608][ T6784] loop0: detected capacity change from 0 to 512 [ 157.609478][ T6773] XFS (loop3): Quotacheck: Done. [ 157.623484][ T6784] EXT4-fs (loop0): unsupported inode size: 8192 [ 157.638464][ T6750] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.168 (6750) [ 157.675751][ T6784] EXT4-fs (loop0): blocksize: 1024 [ 157.736923][ T6750] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 157.859377][ T6750] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 157.904314][ T5842] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 158.168703][ T6750] BTRFS error (device loop1): open_ctree failed: -4 [ 158.653164][ T6806] loop0: detected capacity change from 0 to 4096 [ 158.696210][ T5848] usbhid 7-1:0.0: can't add hid device: -71 [ 158.725807][ T5848] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 158.842846][ T6806] ntfs3(loop0): ino=18, mi_enum_attr [ 158.848191][ T6806] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 158.876398][ T5848] usb 7-1: USB disconnect, device number 2 [ 158.955434][ T6806] ntfs3(loop0): ino=1a, mi_enum_attr [ 159.412741][ T6821] loop6: detected capacity change from 0 to 1024 [ 159.439366][ T5989] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 159.462122][ T6821] EXT4-fs: inline encryption not supported [ 159.545486][ T6821] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.662053][ T5989] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.676720][ T5977] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 159.687076][ T6821] overlayfs: upper fs does not support file handles, falling back to index=off. [ 159.722742][ T6779] loop4: detected capacity change from 0 to 40427 [ 159.748177][ T5989] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 159.788645][ T5989] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.847068][ T6779] F2FS-fs (loop4): invalid crc value [ 159.865293][ T5989] usb 4-1: config 0 descriptor?? [ 159.886099][ T5989] pwc: Askey VC010 type 2 USB webcam detected. [ 159.911752][ T5977] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 159.927081][ T5977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.966895][ T5977] usb 2-1: Product: syz [ 159.977010][ T5977] usb 2-1: Manufacturer: syz [ 159.987110][ T5977] usb 2-1: SerialNumber: syz [ 160.008945][ T6298] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.028056][ T5977] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 160.079952][ T5983] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 160.245187][ T6779] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 160.281788][ T6779] F2FS-fs (loop4): Start checkpoint disabled! [ 160.305601][ T5989] pwc: recv_control_msg error -32 req 02 val 2b00 [ 160.321844][ T6779] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 160.354219][ T5989] pwc: recv_control_msg error -32 req 02 val 2700 [ 160.360385][ T30] audit: type=1800 audit(1759493840.825:9): pid=6834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.189" name="cgroup" dev="overlay" ino=47 res=0 errno=0 [ 160.378332][ T5989] pwc: recv_control_msg error -32 req 02 val 2c00 [ 160.400984][ T5989] pwc: recv_control_msg error -32 req 04 val 1000 [ 160.417251][ T6823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.426493][ T5989] pwc: recv_control_msg error -32 req 04 val 1300 [ 160.435830][ T5989] pwc: recv_control_msg error -32 req 04 val 1400 [ 160.447101][ T5989] pwc: recv_control_msg error -32 req 02 val 2000 [ 160.457283][ T5989] pwc: recv_control_msg error -32 req 02 val 2100 [ 160.458956][ T6811] loop5: detected capacity change from 0 to 40427 [ 160.466665][ T6823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.480125][ T5989] pwc: recv_control_msg error -32 req 04 val 1500 [ 160.488236][ T5989] pwc: recv_control_msg error -32 req 02 val 2500 [ 160.497140][ T5989] pwc: recv_control_msg error -32 req 02 val 2400 [ 160.523253][ T6811] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 160.573554][ T6811] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 160.648872][ T6811] F2FS-fs (loop5): invalid crc value [ 160.710515][ T5989] pwc: recv_control_msg error -71 req 02 val 2900 [ 160.717722][ T5989] pwc: recv_control_msg error -71 req 02 val 2800 [ 160.731676][ T5989] pwc: recv_control_msg error -71 req 04 val 1100 [ 160.768848][ T5943] usb 2-1: USB disconnect, device number 6 [ 160.776976][ T5989] pwc: recv_control_msg error -71 req 04 val 1200 [ 160.787470][ T6842] netlink: 156 bytes leftover after parsing attributes in process `syz.6.190'. [ 160.812910][ T5989] pwc: Registered as video103. [ 160.838974][ T6842] fuse: Bad value for 'fd' [ 160.849433][ T5989] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input18 [ 160.928002][ T5989] usb 4-1: USB disconnect, device number 7 [ 161.086105][ T6811] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 161.118543][ T6811] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 161.169519][ T6811] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 161.639409][ T5983] usb 2-1: Service connection timeout for: 256 [ 161.657905][ T5983] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 161.674193][ T6856] netlink: 28 bytes leftover after parsing attributes in process `syz.1.194'. [ 161.723507][ T5983] ath9k_htc: Failed to initialize the device [ 161.764556][ T6856] netlink: 28 bytes leftover after parsing attributes in process `syz.1.194'. [ 161.786355][ T5943] usb 2-1: ath9k_htc: USB layer deinitialized [ 163.132572][ T6874] loop0: detected capacity change from 0 to 40427 [ 163.172694][ T6874] F2FS-fs (loop0): build fault injection rate: 0 [ 163.234532][ T6874] F2FS-fs (loop0): invalid crc value [ 163.336140][ T6874] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 163.349624][ T6874] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 163.530835][ T6876] loop1: detected capacity change from 0 to 32768 [ 163.539359][ T6876] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.200 (6876) [ 163.557268][ T6876] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 163.567587][ T6876] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 163.667057][ T6854] loop3: detected capacity change from 0 to 32768 [ 163.733641][ T6854] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.193 (6854) [ 163.814519][ T6854] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 163.863806][ T6876] BTRFS info (device loop1): enabling ssd optimizations [ 163.870997][ T6876] BTRFS info (device loop1): enabling free space tree [ 163.937430][ T6854] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 164.064895][ T30] audit: type=1800 audit(1759493844.535:10): pid=6876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.200" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 164.543112][ T6854] BTRFS error (device loop3): open_ctree failed: -4 [ 164.906229][ T5850] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 165.089445][ T6867] loop4: detected capacity change from 0 to 32768 [ 165.268830][ T6867] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop4": -EINTR [ 165.560599][ T6937] netlink: 12 bytes leftover after parsing attributes in process `syz.5.207'. [ 165.752149][ T6945] netlink: 28 bytes leftover after parsing attributes in process `syz.5.207'. [ 165.929201][ T5983] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 166.091708][ T5983] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.132169][ T5983] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 166.142172][ T6943] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.173805][ T5983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.186981][ T6943] bond1: (slave bond2): Enslaving as an active interface with an up link [ 166.216807][ T6945] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.218394][ T5983] usb 1-1: config 0 descriptor?? [ 166.277490][ T5983] pwc: Askey VC010 type 2 USB webcam detected. [ 166.679573][ T5983] pwc: recv_control_msg error -32 req 02 val 2b00 [ 166.687836][ T5983] pwc: recv_control_msg error -32 req 02 val 2700 [ 166.700601][ T5983] pwc: recv_control_msg error -32 req 02 val 2c00 [ 166.708090][ T5983] pwc: recv_control_msg error -32 req 04 val 1000 [ 166.716529][ T5983] pwc: recv_control_msg error -32 req 04 val 1300 [ 166.734001][ T5983] pwc: recv_control_msg error -32 req 04 val 1400 [ 166.748354][ T6924] loop6: detected capacity change from 0 to 40427 [ 166.760456][ T5983] pwc: recv_control_msg error -32 req 02 val 2000 [ 166.772719][ T5983] pwc: recv_control_msg error -32 req 02 val 2100 [ 166.788494][ T5983] pwc: recv_control_msg error -32 req 04 val 1500 [ 166.820400][ T5983] pwc: recv_control_msg error -32 req 02 val 2500 [ 166.838168][ T5983] pwc: recv_control_msg error -32 req 02 val 2400 [ 166.858344][ T6924] F2FS-fs (loop6): invalid crc value [ 167.079062][ T5983] pwc: recv_control_msg error -71 req 02 val 2900 [ 167.129285][ T5983] pwc: recv_control_msg error -71 req 02 val 2800 [ 167.166724][ T5983] pwc: recv_control_msg error -71 req 04 val 1100 [ 167.193588][ T6924] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 167.220340][ T5983] pwc: recv_control_msg error -71 req 04 val 1200 [ 167.300005][ T6924] F2FS-fs (loop6): Start checkpoint disabled! [ 167.317502][ T5983] pwc: Registered as video103. [ 167.365054][ T5983] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input19 [ 167.400627][ T6963] ptrace attach of ""[6967] was attempted by "./syz-executor exec"[6963] [ 167.462577][ T6970] loop3: detected capacity change from 0 to 32768 [ 167.476211][ T6924] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 167.554643][ T6980] netlink: 'syz.1.214': attribute type 1 has an invalid length. [ 167.562446][ T6980] netlink: 224 bytes leftover after parsing attributes in process `syz.1.214'. [ 167.647530][ T5983] usb 1-1: USB disconnect, device number 4 [ 167.759402][ T6970] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 168.319074][ T6970] XFS (loop3): Ending clean mount [ 168.342909][ T9] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 168.366281][ T6970] XFS (loop3): Quotacheck needed: Please wait. [ 168.456708][ T6970] XFS (loop3): Quotacheck: Done. [ 168.577594][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.689952][ T6989] loop5: detected capacity change from 0 to 32768 [ 168.728338][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 168.839021][ T6989] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 168.847793][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.860143][ T9] usb 2-1: config 0 descriptor?? [ 168.926162][ T6989] XFS (loop5): Ending clean mount [ 169.178003][ T5842] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 169.455078][ T5851] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 169.672506][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.220'. [ 170.214712][ T7015] loop5: detected capacity change from 0 to 32768 [ 170.222697][ T7015] btrfs: Deprecated parameter 'usebackuproot' [ 170.228820][ T7015] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 170.238831][ T7015] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.221 (7015) [ 170.272279][ T7015] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 170.283315][ T7015] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 170.349675][ T12] BTRFS warning (device loop5): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x32f839c6 level 0 [ 170.410080][ T7015] BTRFS warning (device loop5): couldn't read tree root [ 170.417052][ T7015] BTRFS warning (device loop5): try to load backup roots slot 1 [ 170.429475][ T49] BTRFS warning (device loop5): checksum verify failed on logical 5316608 mirror 1 wanted 0x5387c9d6 found 0xc5289bf1 level 0 [ 170.459308][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 170.489378][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 170.504676][ T7015] BTRFS error (device loop5): failed to load root extent [ 170.522917][ T7015] BTRFS warning (device loop5): try to load backup roots slot 2 [ 170.540395][ T59] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 170.552804][ T9] usb 2-1: USB disconnect, device number 7 [ 170.640343][ T7015] BTRFS warning (device loop5): couldn't read tree root [ 170.647346][ T7015] BTRFS warning (device loop5): try to load backup roots slot 3 [ 170.703254][ T7015] BTRFS info (device loop5): rebuilding free space tree [ 170.727806][ T7015] BTRFS info (device loop5): checking UUID tree [ 170.737502][ T7015] BTRFS info (device loop5): allowing degraded mounts [ 170.745360][ T7015] BTRFS info (device loop5): enabling ssd optimizations [ 170.752392][ T7015] BTRFS info (device loop5): enabling free space tree [ 170.760915][ T7015] BTRFS info (device loop5): force clearing of disk cache [ 170.768040][ T7015] BTRFS info (device loop5): trying to use backup root at mount time [ 170.776183][ T7015] BTRFS info (device loop5): use zlib compression, level 3 [ 170.928948][ T5851] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 171.094014][ T7003] loop0: detected capacity change from 0 to 32768 [ 171.152263][ T7003] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.217 (7003) [ 171.199841][ T7003] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 171.262786][ T7003] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 171.441574][ T7003] BTRFS info (device loop0): enabling ssd optimizations [ 171.518565][ T7003] BTRFS info (device loop0): enabling free space tree [ 171.891272][ T7083] netlink: 120 bytes leftover after parsing attributes in process `syz.3.228'. [ 171.914701][ T5840] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 171.962209][ T7086] loop5: detected capacity change from 0 to 1024 [ 172.275454][ T7088] syz.6.231 uses obsolete (PF_INET,SOCK_PACKET) [ 172.310083][ T12] hfsplus: b-tree write err: -5, ino 3 [ 172.973405][ T7100] loop3: detected capacity change from 0 to 32768 [ 173.016631][ T7100] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.234 (7100) [ 173.037084][ T7100] BTRFS info (device loop3): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 173.047420][ T7100] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 173.217866][ T7120] netlink: 'syz.4.235': attribute type 1 has an invalid length. [ 173.225740][ T7120] netlink: 224 bytes leftover after parsing attributes in process `syz.4.235'. [ 173.308364][ T7100] BTRFS info (device loop3): enabling ssd optimizations [ 173.315737][ T7100] BTRFS info (device loop3): enabling free space tree [ 173.323556][ T7100] BTRFS info (device loop3): use lzo compression, level 1 [ 173.499504][ T5983] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 173.850381][ T5983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.932977][ T5983] usb 5-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 173.978120][ T5983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.022205][ T5983] usb 5-1: config 0 descriptor?? [ 174.454999][ T5842] BTRFS info (device loop3): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 174.923006][ T7132] loop0: detected capacity change from 0 to 512 [ 174.958391][ T7136] netlink: 4 bytes leftover after parsing attributes in process `syz.5.239'. [ 174.995128][ T7132] EXT4-fs: Ignoring removed nomblk_io_submit option [ 175.052661][ T7132] EXT4-fs error (device loop0): ext4_iget_extra_inode:5103: inode #15: comm syz.0.240: corrupted in-inode xattr: invalid ea_ino [ 175.107022][ T7132] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.240: couldn't read orphan inode 15 (err -117) [ 175.154121][ T7132] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.406209][ C1] I/O error, dev loop0, sector 10 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 175.407793][ T7132] loop0: detected capacity change from 512 to 0 [ 175.415997][ C1] I/O error, dev loop0, sector 16 op 0x0:(READ) flags 0x80700 phys_seg 6 prio class 2 [ 175.432010][ C1] I/O error, dev loop0, sector 14 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 175.448956][ T7144] EXT4-fs error (device loop0): ext4_get_inode_loc:4998: inode #12: block 7: comm syz.0.240: unable to read itable block [ 175.459010][ T7145] loop1: detected capacity change from 0 to 512 [ 175.487232][ T7144] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 175.497530][ T7144] EXT4-fs (loop0): I/O error while writing superblock [ 175.593927][ T7145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.634958][ T5840] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 175.649569][ T7145] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 175.860469][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.906207][ T5840] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 175.948695][ T5840] EXT4-fs (loop0): I/O error while writing superblock [ 175.992326][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.152385][ T5983] usbhid 5-1:0.0: can't add hid device: -71 [ 176.192397][ T5983] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 176.277635][ T5983] usb 5-1: USB disconnect, device number 6 [ 176.422509][ T7159] loop6: detected capacity change from 0 to 40427 [ 176.434003][ T7159] F2FS-fs (loop6): Image doesn't support compression [ 176.440778][ T7159] F2FS-fs (loop6): build fault injection type: 0x4 [ 176.460841][ T7159] F2FS-fs (loop6): invalid crc value [ 176.466178][ T7159] F2FS-fs (loop6): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 176.486904][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.590476][ T7159] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 176.605612][ T7159] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 176.810470][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.969254][ T48] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 176.969468][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.066572][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.130404][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 177.137609][ T48] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 177.164687][ T7175] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 177.176485][ T48] usb 2-1: config 0 has no interface number 0 [ 177.183060][ T48] usb 2-1: config 0 interface 12 has no altsetting 0 [ 177.198651][ T48] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 177.229963][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.249559][ T48] usb 2-1: Product: syz [ 177.253733][ T48] usb 2-1: Manufacturer: syz [ 177.258333][ T48] usb 2-1: SerialNumber: syz [ 177.311855][ T48] usb 2-1: config 0 descriptor?? [ 177.615963][ T59] bridge_slave_1: left allmulticast mode [ 177.632576][ T59] bridge_slave_1: left promiscuous mode [ 177.660707][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.712025][ T59] bridge_slave_0: left allmulticast mode [ 177.717697][ T59] bridge_slave_0: left promiscuous mode [ 177.749696][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.078999][ T7192] loop4: detected capacity change from 0 to 512 [ 178.149370][ T5943] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 178.180561][ T7192] EXT4-fs (loop4): orphan cleanup on readonly fs [ 178.279631][ T7192] EXT4-fs warning (device loop4): ext4_xattr_inode_get:555: inode #11: comm syz.4.262: EA inode hash validation failed [ 178.306895][ T5943] usb 4-1: device descriptor read/64, error -71 [ 178.308527][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 178.322313][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 178.330650][ T7192] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2847: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 178.347348][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 178.354891][ T7192] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.262: corrupted inode contents [ 178.370924][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 178.378980][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 178.439426][ T7192] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #15: comm syz.4.262: mark_inode_dirty error [ 178.469717][ T7192] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.262: corrupted inode contents [ 178.520822][ T7192] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #15: comm syz.4.262: mark_inode_dirty error [ 178.570707][ T7192] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2993: inode #15: comm syz.4.262: mark inode dirty (error -117) [ 178.613361][ T7192] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 178.619285][ T5943] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 178.644502][ T7192] EXT4-fs (loop4): 1 orphan inode deleted [ 178.683886][ T7192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 178.771670][ T5943] usb 4-1: device descriptor read/64, error -71 [ 178.800223][ T7206] netlink: 'syz.6.264': attribute type 1 has an invalid length. [ 178.807990][ T7206] netlink: 224 bytes leftover after parsing attributes in process `syz.6.264'. [ 179.080202][ T48] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 179.094277][ T1063] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 179.187475][ T5943] usb usb4-port1: attempt power cycle [ 179.282815][ T48] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 179.477099][ T48] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 179.491661][ T1063] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.509858][ T48] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 179.520598][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.530780][ T1063] usb 7-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 179.552612][ T48] usb 2-1: USB disconnect, device number 8 [ 179.558619][ T1063] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.622074][ T1063] usb 7-1: config 0 descriptor?? [ 179.779834][ T5943] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 179.821973][ T5943] usb 4-1: device descriptor read/8, error -71 [ 179.918656][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.090388][ T5943] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 180.160349][ T5943] usb 4-1: device descriptor read/8, error -71 [ 180.326676][ T7217] loop1: detected capacity change from 0 to 40427 [ 180.358816][ T7217] F2FS-fs (loop1): build fault injection rate: 14 [ 180.365367][ T7217] F2FS-fs (loop1): build fault injection type: 0x3bfe8c [ 180.375142][ T7217] F2FS-fs (loop1): invalid crc value [ 180.386994][ C0] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of bio_endio+0x713/0x860 [ 180.406382][ C0] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of bio_endio+0x713/0x860 [ 180.478566][ T5853] Bluetooth: hci0: command tx timeout [ 180.498188][ T7217] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 180.507246][ T7217] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_recover_fsync_data+0x49d/0x98b0 [ 180.527722][ T7217] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 180.566667][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.567365][ T7220] loop4: detected capacity change from 0 to 32768 [ 180.601754][ T7217] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_get_node_info+0xd42/0x11e0 [ 180.637167][ T59] bond0 (unregistering): Released all slaves [ 180.710564][ T5943] usb usb4-port1: unable to enumerate USB device [ 180.801032][ T5850] F2FS-fs (loop1): inject inconsistent footer in sanity_check_node_footer of __get_node_folio+0x12d/0x1b0 [ 180.840658][ T5850] F2FS-fs (loop1): inconsistent node block, node_type:0, nid:13, node_footer[nid:13,ino:3,ofs:191623,cpver:0,blkaddr:0] [ 180.948564][ C0] F2FS-fs (loop1): inject write IO error in f2fs_write_end_io of bio_endio+0x713/0x860 [ 180.958406][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 180.958452][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 180.958475][ C0] Call Trace: [ 180.958487][ C0] [ 180.958501][ C0] dump_stack_lvl+0x16c/0x1f0 [ 180.958547][ C0] f2fs_handle_critical_error+0x624/0x9f0 [ 180.958609][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.958656][ C0] ? f2fs_build_fault_attr+0x53/0x1f0 [ 180.958721][ C0] f2fs_write_end_io+0x958/0xcf0 [ 180.958785][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 180.958850][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.958906][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 180.958965][ C0] bio_endio+0x713/0x860 [ 180.959006][ C0] blk_update_request+0x93e/0x15f0 [ 180.959072][ C0] blk_mq_end_request+0x4f/0x90 [ 180.959119][ C0] lo_complete_rq+0x1d4/0x290 [ 180.959165][ C0] blk_complete_reqs+0xb1/0xf0 [ 180.959206][ C0] handle_softirqs+0x219/0x8e0 [ 180.959273][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 180.959331][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.959382][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 180.959437][ C0] ? smpboot_thread_fn+0x326/0xae0 [ 180.959471][ C0] run_ksoftirqd+0x3a/0x60 [ 180.959531][ C0] smpboot_thread_fn+0x3f7/0xae0 [ 180.959565][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.959617][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 180.959654][ C0] kthread+0x3c5/0x780 [ 180.959704][ C0] ? __pfx_kthread+0x10/0x10 [ 180.959751][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.959798][ C0] ? rcu_is_watching+0x12/0xc0 [ 180.959856][ C0] ? __pfx_kthread+0x10/0x10 [ 180.959904][ C0] ret_from_fork+0x56d/0x730 [ 180.959944][ C0] ? __pfx_kthread+0x10/0x10 [ 180.959990][ C0] ret_from_fork_asm+0x1a/0x30 [ 180.960064][ C0] [ 181.137992][ C0] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 181.144893][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 181.144940][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 181.144964][ C0] Call Trace: [ 181.144976][ C0] [ 181.144989][ C0] dump_stack_lvl+0x16c/0x1f0 [ 181.145033][ C0] f2fs_handle_critical_error+0x624/0x9f0 [ 181.145091][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.145138][ C0] ? f2fs_build_fault_attr+0x53/0x1f0 [ 181.145197][ C0] f2fs_write_end_io+0x958/0xcf0 [ 181.145259][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 181.145325][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.145380][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 181.145443][ C0] bio_endio+0x713/0x860 [ 181.145482][ C0] blk_update_request+0x93e/0x15f0 [ 181.145546][ C0] blk_mq_end_request+0x4f/0x90 [ 181.145594][ C0] lo_complete_rq+0x1d4/0x290 [ 181.145633][ C0] blk_complete_reqs+0xb1/0xf0 [ 181.145672][ C0] handle_softirqs+0x219/0x8e0 [ 181.145736][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 181.145794][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.145844][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 181.145899][ C0] ? smpboot_thread_fn+0x326/0xae0 [ 181.145933][ C0] run_ksoftirqd+0x3a/0x60 [ 181.145985][ C0] smpboot_thread_fn+0x3f7/0xae0 [ 181.146020][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.146072][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 181.146109][ C0] kthread+0x3c5/0x780 [ 181.146154][ C0] ? __pfx_kthread+0x10/0x10 [ 181.146200][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.146246][ C0] ? rcu_is_watching+0x12/0xc0 [ 181.146303][ C0] ? __pfx_kthread+0x10/0x10 [ 181.146350][ C0] ret_from_fork+0x56d/0x730 [ 181.146389][ C0] ? __pfx_kthread+0x10/0x10 [ 181.146441][ C0] ret_from_fork_asm+0x1a/0x30 [ 181.146515][ C0] [ 181.146527][ C0] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 181.331934][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 181.331980][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 181.332002][ C0] Call Trace: [ 181.332013][ C0] [ 181.332028][ C0] dump_stack_lvl+0x16c/0x1f0 [ 181.332071][ C0] f2fs_handle_critical_error+0x624/0x9f0 [ 181.332129][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.332175][ C0] ? f2fs_build_fault_attr+0x53/0x1f0 [ 181.332232][ C0] f2fs_write_end_io+0x958/0xcf0 [ 181.332295][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 181.332360][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.332415][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 181.332477][ C0] bio_endio+0x713/0x860 [ 181.332518][ C0] blk_update_request+0x93e/0x15f0 [ 181.332582][ C0] blk_mq_end_request+0x4f/0x90 [ 181.332630][ C0] lo_complete_rq+0x1d4/0x290 [ 181.332670][ C0] blk_complete_reqs+0xb1/0xf0 [ 181.332708][ C0] handle_softirqs+0x219/0x8e0 [ 181.332772][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 181.332829][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.332879][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 181.332933][ C0] ? smpboot_thread_fn+0x326/0xae0 [ 181.332965][ C0] run_ksoftirqd+0x3a/0x60 [ 181.333017][ C0] smpboot_thread_fn+0x3f7/0xae0 [ 181.333052][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.333103][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 181.333139][ C0] kthread+0x3c5/0x780 [ 181.333185][ C0] ? __pfx_kthread+0x10/0x10 [ 181.333230][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.333274][ C0] ? rcu_is_watching+0x12/0xc0 [ 181.333332][ C0] ? __pfx_kthread+0x10/0x10 [ 181.333378][ C0] ret_from_fork+0x56d/0x730 [ 181.333417][ C0] ? __pfx_kthread+0x10/0x10 [ 181.333467][ C0] ret_from_fork_asm+0x1a/0x30 [ 181.333540][ C0] [ 181.333554][ C0] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 181.518898][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 181.518947][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 181.518970][ C0] Call Trace: [ 181.518982][ C0] [ 181.518995][ C0] dump_stack_lvl+0x16c/0x1f0 [ 181.519041][ C0] f2fs_handle_critical_error+0x624/0x9f0 [ 181.519101][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.519154][ C0] ? f2fs_build_fault_attr+0x53/0x1f0 [ 181.519211][ C0] f2fs_write_end_io+0x958/0xcf0 [ 181.519276][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 181.519342][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.519398][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 181.519462][ C0] bio_endio+0x713/0x860 [ 181.519505][ C0] blk_update_request+0x93e/0x15f0 [ 181.519570][ C0] blk_mq_end_request+0x4f/0x90 [ 181.519618][ C0] lo_complete_rq+0x1d4/0x290 [ 181.519658][ C0] blk_complete_reqs+0xb1/0xf0 [ 181.519697][ C0] handle_softirqs+0x219/0x8e0 [ 181.519763][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 181.519822][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.519872][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 181.519927][ C0] ? smpboot_thread_fn+0x326/0xae0 [ 181.519961][ C0] run_ksoftirqd+0x3a/0x60 [ 181.520015][ C0] smpboot_thread_fn+0x3f7/0xae0 [ 181.520048][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.520101][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 181.520138][ C0] kthread+0x3c5/0x780 [ 181.520184][ C0] ? __pfx_kthread+0x10/0x10 [ 181.520231][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.520278][ C0] ? rcu_is_watching+0x12/0xc0 [ 181.520336][ C0] ? __pfx_kthread+0x10/0x10 [ 181.520384][ C0] ret_from_fork+0x56d/0x730 [ 181.520424][ C0] ? __pfx_kthread+0x10/0x10 [ 181.520475][ C0] ret_from_fork_asm+0x1a/0x30 [ 181.520549][ C0] [ 181.698620][ C0] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 181.705517][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 181.705563][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 181.705586][ C0] Call Trace: [ 181.705598][ C0] [ 181.705611][ C0] dump_stack_lvl+0x16c/0x1f0 [ 181.705655][ C0] f2fs_handle_critical_error+0x624/0x9f0 [ 181.705714][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.705760][ C0] ? f2fs_build_fault_attr+0x53/0x1f0 [ 181.705818][ C0] f2fs_write_end_io+0x958/0xcf0 [ 181.705881][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 181.705946][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.706002][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 181.706060][ C0] bio_endio+0x713/0x860 [ 181.706101][ C0] blk_update_request+0x93e/0x15f0 [ 181.706167][ C0] blk_mq_end_request+0x4f/0x90 [ 181.706215][ C0] lo_complete_rq+0x1d4/0x290 [ 181.706255][ C0] blk_complete_reqs+0xb1/0xf0 [ 181.706294][ C0] handle_softirqs+0x219/0x8e0 [ 181.706359][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 181.706417][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.706470][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 181.706524][ C0] ? smpboot_thread_fn+0x326/0xae0 [ 181.706558][ C0] run_ksoftirqd+0x3a/0x60 [ 181.706611][ C0] smpboot_thread_fn+0x3f7/0xae0 [ 181.706645][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.706697][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 181.706733][ C0] kthread+0x3c5/0x780 [ 181.706779][ C0] ? __pfx_kthread+0x10/0x10 [ 181.706826][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.706872][ C0] ? rcu_is_watching+0x12/0xc0 [ 181.706929][ C0] ? __pfx_kthread+0x10/0x10 [ 181.706975][ C0] ret_from_fork+0x56d/0x730 [ 181.707015][ C0] ? __pfx_kthread+0x10/0x10 [ 181.707061][ C0] ret_from_fork_asm+0x1a/0x30 [ 181.707134][ C0] [ 181.707147][ C0] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 181.709488][ T7228] loop5: detected capacity change from 0 to 40427 [ 182.041042][ T7228] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 182.048805][ T7228] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 182.081077][ T5850] F2FS-fs (loop1): do_checkpoint failed err:-5, stop checkpoint [ 182.097347][ T7228] F2FS-fs (loop5): invalid crc value [ 182.114116][ T1063] usbhid 7-1:0.0: can't add hid device: -71 [ 182.130552][ T1063] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 182.326278][ T7228] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 182.349880][ T1063] usb 7-1: USB disconnect, device number 3 [ 182.359774][ T7228] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 182.366816][ T7228] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 182.531306][ T5853] Bluetooth: hci0: command tx timeout [ 182.704490][ T12] kworker/u8:0: attempt to access beyond end of device [ 182.704490][ T12] loop5: rw=1, sector=77824, nr_sectors = 2408 limit=40427 [ 182.814668][ T12] kworker/u8:0: attempt to access beyond end of device [ 182.814668][ T12] loop5: rw=1, sector=80232, nr_sectors = 1688 limit=40427 [ 182.903135][ T12] kworker/u8:0: attempt to access beyond end of device [ 182.903135][ T12] loop5: rw=1, sector=49152, nr_sectors = 1808 limit=40427 [ 182.931783][ T7245] mmap: syz.6.277 (7245) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 183.115531][ T7197] chnl_net:caif_netlink_parms(): no params data found [ 183.330724][ T7248] loop6: detected capacity change from 0 to 1024 [ 183.372757][ T7248] EXT4-fs: Ignoring removed bh option [ 183.474742][ T7234] loop3: detected capacity change from 0 to 32768 [ 183.483470][ T7248] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.641633][ T7234] [ 183.641633][ T7234] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.641633][ T7234] [ 183.684058][ T7234] [ 183.684058][ T7234] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.684058][ T7234] [ 183.737080][ T7234] [ 183.737080][ T7234] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.737080][ T7234] [ 183.750060][ T7234] [ 183.750060][ T7234] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.750060][ T7234] [ 183.771740][ T6298] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.789241][ T59] hsr_slave_0: left promiscuous mode [ 183.795623][ T7261] loop1: detected capacity change from 0 to 1024 [ 183.802119][ T7234] [ 183.802119][ T7234] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.802119][ T7234] [ 183.821516][ T59] hsr_slave_1: left promiscuous mode [ 183.830230][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.837616][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.890273][ T7261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.914229][ T7234] [ 183.914229][ T7234] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.914229][ T7234] [ 183.979789][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.987187][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.007739][ T3493] [ 184.007739][ T3493] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.007739][ T3493] [ 184.028710][ T3493] [ 184.028710][ T3493] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.028710][ T3493] [ 184.057711][ T5842] [ 184.057711][ T5842] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.057711][ T5842] [ 184.096529][ T5842] [ 184.096529][ T5842] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.096529][ T5842] [ 184.119388][ T7242] loop4: detected capacity change from 0 to 32768 [ 184.165772][ T59] veth1_macvtap: left promiscuous mode [ 184.182555][ T112] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN NOPTI [ 184.194632][ T112] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 184.203051][ T112] CPU: 0 UID: 0 PID: 112 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) [ 184.212174][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 184.222230][ T112] RIP: 0010:write_special_inodes+0x71/0x170 [ 184.228162][ T112] Code: df e8 b3 f8 6e fe 48 8d 7b 10 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 c0 00 00 00 4c 8b 6b 10 49 8d 7d 30 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 da 00 00 00 49 8b 7d 30 2e e8 db b7 00 08 48 8d [ 184.247782][ T112] RSP: 0018:ffffc90002dd7bd8 EFLAGS: 00010216 [ 184.253849][ T112] RAX: 0000000000000006 RBX: ffff888025d8b600 RCX: ffffffff834cd326 [ 184.261816][ T112] RDX: ffff88801eb78000 RSI: ffffffff834c3cad RDI: 0000000000000030 [ 184.269788][ T112] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 184.277754][ T112] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff81f2c170 [ 184.285720][ T112] R13: 0000000000000000 R14: ffff888032c99000 R15: ffffc90002709442 [ 184.293691][ T112] FS: 0000000000000000(0000) GS:ffff888124e88000(0000) knlGS:0000000000000000 [ 184.302620][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.309199][ T112] CR2: 00007fbd3af71000 CR3: 0000000069f9f000 CR4: 0000000000350ef0 [ 184.317166][ T112] Call Trace: [ 184.320429][ T112] [ 184.323357][ T112] lmLogSync+0xd2/0x820 [ 184.327529][ T112] ? __pfx_lmLogSync+0x10/0x10 [ 184.332310][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.337951][ T112] ? find_held_lock+0x2b/0x80 [ 184.342647][ T112] jfs_syncpt+0x89/0xa0 [ 184.346818][ T112] txEnd+0x30a/0x5a0 [ 184.350729][ T112] jfs_lazycommit+0x783/0xb30 [ 184.355429][ T112] ? __pfx_jfs_lazycommit+0x10/0x10 [ 184.360649][ T112] ? __pfx_default_wake_function+0x10/0x10 [ 184.366470][ T112] ? lockdep_hardirqs_on+0x7c/0x110 [ 184.371668][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.377311][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.382951][ T112] ? __kthread_parkme+0x19e/0x250 [ 184.388003][ T112] ? __pfx_jfs_lazycommit+0x10/0x10 [ 184.393221][ T112] kthread+0x3c5/0x780 [ 184.397293][ T112] ? __pfx_kthread+0x10/0x10 [ 184.401887][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.407527][ T112] ? rcu_is_watching+0x12/0xc0 [ 184.412305][ T112] ? __pfx_kthread+0x10/0x10 [ 184.416900][ T112] ret_from_fork+0x56d/0x730 [ 184.421490][ T112] ? __pfx_kthread+0x10/0x10 [ 184.426085][ T112] ret_from_fork_asm+0x1a/0x30 [ 184.430868][ T112] [ 184.433874][ T112] Modules linked in: [ 184.438289][ T1063] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 184.438657][ T112] ---[ end trace 0000000000000000 ]--- [ 184.509212][ T59] veth0_macvtap: left promiscuous mode [ 184.514799][ T59] veth1_vlan: left promiscuous mode [ 184.538284][ T59] veth0_vlan: left promiscuous mode [ 184.581900][ T7242] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 184.613855][ T5853] Bluetooth: hci0: command tx timeout [ 184.677796][ T7242] XFS (loop4): Ending clean mount [ 184.706180][ T1063] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 184.715367][ T1063] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.727815][ T112] RIP: 0010:write_special_inodes+0x71/0x170 [ 184.739372][ T1063] usb 2-1: config 0 descriptor?? [ 184.755391][ T112] Code: df e8 b3 f8 6e fe 48 8d 7b 10 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 c0 00 00 00 4c 8b 6b 10 49 8d 7d 30 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 da 00 00 00 49 8b 7d 30 2e e8 db b7 00 08 48 8d [ 184.791499][ T5841] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 184.803503][ T112] RSP: 0018:ffffc90002dd7bd8 EFLAGS: 00010216 [ 184.817557][ T112] RAX: 0000000000000006 RBX: ffff888025d8b600 RCX: ffffffff834cd326 [ 184.835836][ T112] RDX: ffff88801eb78000 RSI: ffffffff834c3cad RDI: 0000000000000030 [ 184.863858][ T112] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 184.879236][ T112] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff81f2c170 [ 184.908393][ T112] R13: 0000000000000000 R14: ffff888032c99000 R15: ffffc90002709442 [ 184.925783][ T112] FS: 0000000000000000(0000) GS:ffff888124f88000(0000) knlGS:0000000000000000 [ 184.948640][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.970992][ T7261] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.270: inode #4: comm syz.1.270: iget: illegal inode # [ 184.983917][ T112] CR2: 00007fbfdcc69440 CR3: 000000005d80b000 CR4: 0000000000350ef0 [ 184.994560][ T7261] EXT4-fs error (device loop1): ext4_xattr_inode_iget:440: comm syz.1.270: error while reading EA inode 4 err=-117 [ 185.004665][ T112] Kernel panic - not syncing: Fatal exception [ 185.007377][ T112] Kernel Offset: disabled