last executing test programs:

7m40.224566108s ago: executing program 32 (id=585):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000001c0)={{@my=0x0}, 0x1})
r1 = syz_io_uring_setup(0x23d, &(0x7f00000000c0)={0x0, 0xffffffff, 0x10100}, &(0x7f0000000300)=<r2=>0x0, &(0x7f0000000640)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0)

6m42.867239017s ago: executing program 33 (id=1100):
prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4)

5m48.354095735s ago: executing program 4 (id=1599):
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)='|', 0x1}], 0x1)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0)
write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98)
splice(r0, 0x0, r4, 0x0, 0xc, 0x2)
write(r2, 0x0, 0x0)

5m47.354825219s ago: executing program 4 (id=1604):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r0, 0x40204706, &(0x7f0000000040)={0x9, 0x0, 0x20, 0x3, 0xe, "3eccd8fd0000000000000010000000040100"})

5m46.936297129s ago: executing program 4 (id=1607):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000340)=@newtaction={0x48, 0x31, 0x53b, 0x70bd2c, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x48}}, 0x4)

5m46.697423544s ago: executing program 4 (id=1609):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[], 0x1, 0x6276, &(0x7f0000003680)="$eJzs3c1vHGcdB/Df7JtfStOoh6pECLlteCmleS0hUKDtAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFBQogjJ/6AHrhy4w8gUoIE6qmD1n4eZzxde+2k3ln7+XwkZ+Y3z4z3mXx3vLueGT8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMQPf/Dj81VEXP1VWnAy4nPRj+hFLI3rlYhYWjmZ1x9ExPOx2RzPRcRwIaLKjc9EvBYRH52IePDw7up40YV99uP7f/nnH37y1I/+8efh2f/99Xb/9d3Wu3Pnt//9273H318AAAAoUV3XdZU+5p9Kn+97XXcKAJiJ/PpfJ3m5eu7q9Tnrj1qtVquPYN1UT3avWUTEenOb8XsGp+MB4IhZj4+77gIdkn/RBhHxVNedAOZa1XUHOBQPHt5drVK+VfP1YGWrPV8LsiP/9Wr7/o7dptO0rzGZ1fNrI/rx7C79WZpRH+ZJzr/Xzv/qVvsorXfY+c/KbvmPtm59Kk7Ov9/Ov+X45N+bmH+pcv6DA+Xflz8AAAAAAMyx/Pv/kx2f/1148l3Zl73O/67MqA8AAAAAAAAA8Fl70vH/tlXG/wMAAIB5Nf6sPva7E4+WNa/1H8XO5VeqiKdb6wOFSTfLLHfdDwAAAAAAAAAAAAAoyWDrGt4rVcQwIp5eXq7revzV1K4P6km3P+pK338oWdc/5AEAYMtHJ1r38lcRixFxJf2tv+Hy8nJdLy4t18v10kJ+PztaWKyXGp9r83S8bGG0jzfEg1E9/maLje2apn1entbe/n7jxxrV/X10bDY6DBwAImLr1eiBV6Rjpq6fia7f5XA0OP6PH8c/+9H18xQAAAA4fHVd11X6c96n0jn/XtedAgBmIr/+t88LqNVqtVqtPn51Uz3ZvWYREevNbcbvGQzHDwBHzHp83HUX6JD8izaIiOe77gQw16quO8ChePDw7mqV8q2arwdpfPd8LciO/Nerze3y9pOm07SvMZnV82sj+vHsLv15bkZ9mCc5/147/6tb7aO03mHnPyu75T/ez5Md9KdrOf9+O/+W45N/b2L+pcr5Dw6Uf1/+AAAAAAAwx/Lv/0/O1fnf0ePuzlR7nf9dObRHBQAAAAAAAIDD9eDh3dV832s+//+FCeu5//N4yvlX8i9Szr/Xyv+rrfX6jfn7bz3K/z8P767+8fa/P5+n+81/Ic9U6ZlVpWdElR6pGqTpk+zdp20M+6PxIw2rXn+Qrvmph+/E9bgRa3Fux7q99P/xqP38jvZxT4eb7XV/q/3CjvbBdnve/uKO9mG60qleyu1nYjV+Hjfi7c32cdvClP1fnNJeT2nP+fcd/0XK+Q8aX+P8l1N71ZqO3f+w96njvjmd9DhvXv/ib84d/u5MtRH97X1rGu/fix30Z/P/5KlR/PLW2s0zd67dvn3zfKTJjqUXIk0+Yzn/Yfra/vn/0lZ7/rnfPF7vfzg6cP7zYiMGu+b/UmN+vL8vz7hvXcj5j9JXzv/t1D75+D9A/r0/zWxf9mOv4/+VDvoDAAAAAAAAAAAAAAAAe6nrevMW0Tcj4lK6/6erezMBgNnKr/91kpfPqu7P+PHU6iNeV3PWn5nWn9Tz1R+1+ijWTfVkbzSLiPh7c5vxe4ZfT/pmAMA8+yQi/tV1J+iM/AuW/97feHq6684AM3Xr/Q9+eu3GjbWbt7ruCQAAAAAAAADwuPL4nyuN8Z9P13V9r7XejvFf34qVJx3/dZBntgcY3WWg6v7B92kvG71Rv9cYbvyF2G387+H23F7jfw+mPN5wSvtoSvvClPbFKe0Tb/RoyPm/0Bjv/HREnGoNv/7Y47/Omb3Gf22PeV+CnP+LjefzOP+vtNZr5l///ijn39uR/9nb7/3i7K33P3j1+nvX3l17d+1nF8+fP3fx0qXLly+ffef6jbVzW/922OPDlfPPY1+7DrQsOf+cufzLkvP/UqrlX5ac/5dTLf+y5Pzz+z35lyXnnz/7yL8sOf+XUy3/suT8v5Zq+Zcl5/9KquVflpz/11Mt/7Lk/F9NtfzLkvM/k2r5lyXnfzbV+8x/6bD7xWzk/PMZLsd/WXL++coG+Zcl538h1fIvS87/YqrlX5ac/2upln9Zcv7fSLX8y5Lzv5Rq+Zcl5//NVMu/LDn/y6mWf1ly/t9KtfzLkvP/dqrlX5ac/+upln9Zcv7fSbX8y5Lz/26q5V+WnP/3Ui3/suT830i1/Mvy6O//mzFjxkye6fonEwAAAAAAAAAAAADQNovLibveRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCnt3FyPXWd4B/Mx+eeNAYiCkTmrCxjHGOJvs+iP+oHUx4bPhqySEQj+wXe/aLPgLr10CjWpHgRIJo6KKtuGiLSDU5qbCqrigFaBcoFaVKkF7QW8QFSoXURVQQKrUVsBWM+d9352ZnZ3Z9Y7XZ875/ST78c6cmfedM++c2WfX/zkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANLv7DbOfqmVZVqvV8gs2ZdmL6vWmiU2NS157Y+cHAAAArN3PG3+/cGu64PAKbtS0zT/d9e2vLiwsLGTvG/7T0c8tLKQrJrJsdEOWNa6Lrv7g/bXmbYIns/HaUNPXQz2GH+5x/UiP60d7XD/W4/oNPa4f73H9kh2wxE1ZLd3ZtsY/N+W7NLstG21ct63DrZ6sbRiq77t026zWuM3C6IlsLjuVzWbTLdvn29Ya23/97vpYb83iWENNY22pr5CfPH48zqEW9vG2lrEW7zP60euziZ/+5PHjf33h+Ts61Z67oeX+8nnu2Fqf5yfCJflca9mGtE/iPIea5rmlw3My3DLPWuN29X+3z/OFFc5zeHGa66r9OR/Phhr//k5jP43Usg77aUu47H/uybLs8uK027dZMlY2lG1suWRo8fkZz1dk/T7qS+ml2Uj3dbpQa1mnd69gndbrzLbWddr+mojP/93hdiPLzKH5afrRE2NNz/vPFq5lnUb1R73ca6V9Dfb7tVKUNRjXxXcaD/qpjmtwW3j8j29ffg12XDsd1mB63E1rcGuvNTg0NtyYc3oSao3bLK7BXS3bDzdGqjXqc9u7r8GpC6fPTc1/7OP3zZ0+dnL25OyZPbt2Te/Zt+/AgQNTJ+ZOzU7nf1/j3i6+jdlQeg1sDfsuvgZe3bZt81Jd+OLYkuPvtb4Ox7u8Dje1bdvv1+FI+4Orrc8Lcumazl8b76nv9PErQ9kyr7HG87Nz7a/D9LibXocjTa/Dju8pHV6HIyt4Hda3ObdzZd+zjDT96TSH5d8L1rYGNzWtwfbvR9rXYL+/HynKGhwP6+J7O5d/L9gS5vvU5Gq/HxlesgbTww3Hnvol6fv98QON0mld3lm/4uax7OL87Pn7Hzt24cL5XVko6+JlTWulfb1ubHpM2ZL1OrTq9Xp47q6n7uxw+aawr8bvq/81vuxzVd9m7/3dn6vGu1vn/dly6e4slD4L+3Nhwzrtz07v5vX9OZZln//WEw9/4/HPv2HZ/VnvNz8xtfbvxVNf2nT8HV3m+Bv7/l/k46W7enJ4dCR//Q6nvTPacjxufapGGseuWmPsF6ZWdjweDX/W+3h8W5fj8ea2bft9PB5tf3DxeFzr9dOOtWl/PsfDOjk13f14XN9m8+7VrsmRrsfje0Kthf3/mtAppL6oae0st27TWCMjo+FxjcQRWtfpnpbtR0NvVh/rmd3Xtk533JPf13B6dIvWa51OtG3b73Wafva13Dqt9frp27Vpfz7Hw7q4bU/3dVrf5tm9az923hT/2XTsHOu1BkeHx+pzHk2LsHG8zxZuimvw/ux4djY7lc00rh1rrKdaY6zJB1a2BsfCn/U+Vm7usgZ3tG3b7zWY3seWW3u1kaUPvg/an8/xsC6efqD7Gqxv88b9/f3edUe4JG3T9L1r+8/XlvuZ151tu+l6rZWRMM9v7e/+s9n6NqcOrLbP7L6f7g2X3NxhP7W/fpd7Tc1k67OfNod5Pn9g+f1Un099m88dXOF6Opxl2aWPPNj4eW/4/crfXfzuV1t+79LpdzqXPvLgj1984h9XM38ABt8v8rIxf69r+s3USn7/DwAAAAyE2PcPhZro/wEAAKA0Yt8f/1d4ov8HAACA0oh9/0ioSUX6/81vfH7uF5eylMxfCOL1aTc8lG8XM67T4euJhUX1yx/88ux//8OllY09lGXZzx76g47bb34ozis3EeZ59U2tly/x1ftWNPbRRy+lcZvz618I9x8fz0qXQacI7nSWZV+/9TONcSbef6VRn33oaKM+fPmpJ+vbvHAw/zre/rmX5dv/RQj/Hj5xrOX2z4X98MNQp9/WeX/E233lymu27H/v4njxdrWttzQe9tMfyO83fk7OZ5/Mt4/7ebn5f+PTz3ylvv1jr+o8/0tDnef/TLjfL4f6v6/It29+Dupfx9t9Msw/jhdvd/+Xvtlx/lc/lW9/7s35dkdDjePvCF9ve/Pzc83767HasZbHlb0l3y6OP/3dP25cH+8v3n/7/MePXGnZH+3r49l/y+9nqm37eHkcJ/r7tvHr99O8PuP4z/zR0Zb93Gv8qw8/94r6/baPf2/bduc+srMx/uL9tX5i019+8jMdx4vzOfy351oez+F3h9dxGP/pD4T1GK7/v6v5/bV/usLRd7cef+L2X9h0qeXxRG/9aT7+1dedbNQN4zdtvPlFL77l8ivr+y7LvrMhv79e45/8q7Mt8//i7fn+iNfHjH77+MuJ45//6OSZs/MX52bSXn381sZn57w9n0+c763h2Nr+9ZGzFz44e35iemI6yybK+xF61+xLof44L5e7b72w5Ai689HwfN7551/fuP1fPx0v//f35JdfeVv+vvXqsN1nw+WbwvO3uvGXevru2xuv79qzYYYLSz8veC22bPuvAyvaMDz+9u8L4no/9/IPNvZD/brG+0Z8Xa9x/t+fye/na2G/LoRPZt56++J4zdvHz0a48kj+el/z/guHufi8/k14vt/xw/z+47zi4/1++D7mm5tbj3dxfXzt0lD7/Tc+xeNyOJ5kl/Pr41Zxf1954faO04ufQ5JdvqPx9Z+k+7ljVQ9zOfMfm586NXfm4mNTF2bnL0zNf+zjR06fvXjmwpHGZ3ke+VCv2y8enzY2jk8zs/v2Zo2j1dm8XGc3ev7nHj0+s396+8zsiWMXT1x49Nzs+ZPH5+ePz87Mbz924sTsR3vdfm7m0K7dB/fs3z15cm7m0IGDB/ccnJw7c7Y+jXxSPeyb/vDkmfNHGjeZP7T34K4HHtg7PXn67Mzsof3T05MXe92+8d40Wb/170+enz117MLc6dnJ+bmPzx7adXDfvt09Pw3w9LkT8xNT5y+embo4P3t+Kn8sExcaF9ff+3rdnnKa/4/8+9l2tfyD+LJ33bsvfT5r3ZefWPau8k3aPkD0+fBZNP/8knMHVvJ17PtHQ00q0v8DAABAFcS+fyzURP8PAAAApRH7/g2hJvp/AAAAKI3Y94+HmlSk/y9d/n/zpRWNL/8v/9+8v+T/K5b/f6Ro+f/8eCH/3x9rzd/L/wfy//L/8v8Dk/9fCG9I8v8UUdHy/7HvvynLKtn/AwAAQBXEvn9jqIn+HwAAAEoj9v03h5ro/wEAAKA0Yt//olCTivT/8v/y//L/8v/y/53Hl/8fTPL/3cn/9yD/P5VVK/9/uZ/zd/5/+X+WKlr+P/b9Lw41qUj/DwAAAFUQ+/5bQk30/wAAAFAase+/NdRE/w8AAAClEfv+TaEmFen/5f/l/+X/5f/l/zuPL/8/mOT/u5P/70H+3/n/5f/l/+mrouX/Y9//klCTivT/AAAAUAWx739pqIn+HwAAAIpn5NpuFvv+l4WaLOn/r3EAAAAA4IaLff9tWVsQvCK//5f/l/8vfv5/Q7pO/l/+Pytk/n84k/8vDvn/7uT/e5D/l/+X/5f/p6+Klv9v9P3ZePbyUJOK9P8AAABQBbHvvz3URP8PAAAApRH7/l8KNdH/AwAAQGnEvn9zqElF+n/5f/n/G53/H22bu/P/L95O/j9X/Py/8/8Xifx/d/L/Pcj/y//L/8v/01dFy//Hvv+OUJOK9P8AAABQBbHvvzPURP8PAAAApRH7/l8ONdH/AwAAQGnEvn9LqElF+n/5/4Ln/2NytMT5/97n/5f/l/+X/5f/Xzn5/+7k/3uQ/5f/l/+X/6evipb/j33/K0JNKtL/AwAAQBXEvv+uUBP9PwAAAJRG7PtfGWqi/wcAAIDSiH3/RKhJRfp/+f+C5//zHPxYmc//L/8v/y//L//fT/L/3cn/9xAOcz/Kskz+X/5f/l/+n7UrWv4/9v13h5pUpP8HAACAKoh9/9ZQE/0/AAAAlEbs++8JNdH/AwAAQGnEvn9bqElF+n/5/4HI/2fy//L/8v/y//L/KyP/3538fw/O/y//L/8v/09fFS3/H/v+V4WaVKT/BwAAgCqIff/2UBP9PwAAAJRG7PtfHWqi/wcAAIDSiH3/jlCTivT/8v/y//L/8v/y/53Hl/8fTPL/3cn/9yD/L/8v/y//T18VLf8f+/7XhJpUpP8HAACAKoh9/85QE/0/AAAAlEbs++8NNdH/AwAAQGnEvn8y1KQi/b/8v/y//L/8v/x/5/Hl/weT/H938v89yP/L/8v/y//TV0XL/8e+/75Qk4r0/wAAAFAFse+/P9RE/w8AAAClEfv+qVAT/T8AAACURuz7p0NNKtL/y//L/8v/y/+vKv//ysX7lf/Pyf8Xi/x/d/L/Pcj/y//f8Pz/qPw/pVK0/H/s+3eFmqTGb+waHiUAAABQJLHv3x1qUpHf/wMAAEAVxL5/T6iJ/h8AAABKI/b9e0NNKtL/y//L/8v/y/87/3/n8eX/B5P8f3f9z//Hhyj/L/8v/+/8//L/LFW0/H/s+x8INalI/w8AAABVEPv+faEm+n8AAAAojdj37w810f8DAABAacS+/0CoSUX6f/l/+X/5f/l/+f/O48v/Dyb5/+6c/7+H4uX/X9d88/XM/9fHkv+X/5f/Z/Ue+cPmr4qW/499/8FQk4r0/wAAAFAFse9/baiJ/h8AAABKI/b9vxJq0r3/33B9ZwUAAAD0U+z7fzXUpCK//5f/l/+X/5f/l//vPL78/2CS/+9O/r+H4uX/Wzj/f7HnL/8v/89SRcv/x77/UKhJRfp/AAAAqILY9/9aqIn+HwAAAEoj9v2vCzXR/wMAAEBpxL7/cKhBpzh3Kcn/y/8PZv5/XP5f/r90+f+xeL/y/2si/9+d/H8P8v/y//L/8v/0VdHy/7Hvf32oid//AwAAQGnEvv/BUBP9PwAAAJRG7PvfEGqi/wcAAIDSiH3/G0NNKtL/y//L/w9m/t/5/zP5/9Ll/53/vz/k/7uT/+9B/l/+X/5f/p++Klr+P/b9bwo1qUj/DwAAAFUQ+/43h5ro/wEAAKA0Yt//llAT/T8AAACURuz73xpqUpH+X/5f/v9G5v9zl+X/5f8b5P/l//tB/r87+f8e5P/l/+X/5f/pq6Ll/2Pf/+uhJhXp/wEAAKAKYt//UKiJ/h8AAABKI/b9bws10f8DAABAacS+/+2hJhXp/+X/5f+d/1/+X/6/8/jy/4NJ/r+7Acv///yWcLn8f07+v9jzX23+f6Tt6+uS///Bcvn/hQ3tt5f/53ooWv4/9v3vCDWpSP8PAAAAVRD7/neGmuj/AQAAoDRi3/+uUJOm/r+v//EOAAAAWHex7/+NUJOK/P5f/r8+j8X0svy//H/jAvl/+X/5/4El/9/dgOX/nf+/jfx/sefv/P/y/yxVtPx/7PvfHWpSkf4fAAAAqiD2/Q+Hmuj/AQAAoDRi3/9IqIn+HwAAAEoj9v3vCTWpSP8v/+/8//L/8v/y/53Hl/8fTPL/3cn/9yD/L/9ftPz/f8r/M9iKlv+Pff+joSYV6f8BAACgCmLf/95QE/0/AAAAlEbs+38z1ET/DwAAAKUR+/73hZpUpP+X/x+U/P/EgOb/n5D/v475/7tuybeT/5f/Z5H8f3fy/z3I/8v/Fy3/7/z/DLii5f9j3//+UJOV9//jK94SAAAAuI5Glr0m9v2/FWpSkd//AwAAQBXEvv+3Q030/wAAAFAase//nVCTivT/8v+Dkv93/v9M/t/5/9sej/y//H8n65f/j0ce+X/5/2Ll/zet6gG3utH5+bW60fOvbv4/f2eU/6eTouX/Y9//u6EmFen/AQAAoApi3/+BUBP9PwAAAAyETv8nu13s+4+Emuj/AQAAoDRi33801KQi/b/8v/y//H9B8/9/tvVfvvftdx7dJf8v/y//vyrrev7/+ovf+f/l/wuW/1+LG52fX6/515Y5NZj8v/P/039Fy//Hvv9YqElF+n8AAACogtj3/16oif4fAAAASiP2/cdDTfT/AAAAUBqx758JNalI/y//L/8v/1/Q/P8An/8/7g/5/1Z9y//Hg678f0frmv9/72JOXP5/tfn/sY6Xyv/L/w/y/OX/5f9Zqmj5/9j3z4aaVKT/BwAAgCoIff/QibwuXqH/BwAAgNKIff/JUBP9PwAAAJRG7Ps/GGpSkf5f/l/+X/5f/t/5/zuP3y3/Xxtx/v+ikv/vrjj5/87k/+X/B3n+8v/y/yxVtPx/7PvnQk0q0v8DAABAFcS+/0OhJvp/AAAAKI3Y93841ET/DwAAAKUR+/5ToSYV6f/l/+X/5f/l/+X/O49f2PP/y/93Jf/fnfx/D/L/8v/y//L//8/enXxZWtd3HL8FDV19yCK7LLLJOVnmT2AR1sk+WWSTRXJOTs4JRFFxpnEeUVScFcVZwQEEERXnCZxQnEFFxXnECVFPe6j6fr9dw1P3VlXf6vs8v9/rteCbrlB9r31a6E9Xv31YqrH1/7n7/y9u6WT/AwAAQA9y918ct9j/AAAA0Izc/ZfELfY/AAAANCN3///HLZ3sf/2//r/Z/v+f9f97vb7+X//fMv3/fPr/BfT/+n/9v/6fpRpb/5+7/2FxSyf7HwAAAHqQu//hcYv9DwAAAM3I3X9p3GL/AwAAQDNy9z8ibulk/+/o/9dmffb/mfHq/1vq/z3/f8/X1/+fQf9/rv5/7M5u/3/FQ//k0//r//X/Qf+/r/7/+F6fr/+nRWPr/3P3PzJu6WT/AwAAQA9y9z8qbrH/AQAAoBm5+y+LW+x/AAAAaEbu/kfHLZ3s/+U9///Exscn2v8X/b/+f+MD+n/9/179/7HT39b/j5Pn/8/XU/9/6V0XXHz/zX9/y0FeX/+v//f8f/0/yzW2/j93/2Pilk72PwAAAPQgd/9j4xb7HwAAAJqRu/9xcYv9DwAAAM3I3f/4uKWT/b+8/n/Sz/8v+n/9/8YH9P/6/736/3/z/P+x0//P11P/f5jX1//r//X/+n+Wa9X9f37H+e3c/U+IWzrZ/wAAANCD3P1PjFvsfwAAAGhG7v7L4xb7HwAAAJqRu/9k3NLJ/tf/H33//xf9v/4/rv5f/6//P3r6//n0/wvo//X/+n/9P0u16v5/57dz918Rt3Sy/wEAAKAHufufFLfY/wAAANCM3P1PjlvsfwAAAGhG7v6nxC2d7H/9v+f/6//1//r/4dfX/0+T/n8+/f8C+v8z7efP0/9PsP+PX0jp/zkKB+z/H5zzj+2l9P+5+58at3Sy/wEAAKAHufufFrfY/wAAANCM3P1Pj1vsfwAAAGhG7v5nxC2d7H/9v/5f/6//P3T/v/un3gb9/zD9/9mh/59vNP3/2rHBD+v/J9//e/7/FPv/oP/nKIzt+f+5+58Zt3Sy/wEAAKAHufufFbfM2f8H/s18AAAAYKVy9z87bvH1fwAAAJi8rM5y9z8nbulk/+v/9f/6f/2/5/8Pv/68/v+WLe9P/z8u+v/5RtP/70H/r/+f8vvX/+v/2W1s/X/u/ufGLZ3sfwAAAOhB7v4r4xb7HwAAAJqRu/95cYv9DwAAAM3I3f/8uKWT/T/c/5/+/+v/90f/v/396/+Hf34sq//P71H/P7f/v8jz//uk/5/v7Pf/x/X/279//f8RWvX7b7z/P7Ho8/X/DBlb/5+7/6q4pZP9DwAAAD3I3f+CuMX+BwAAgGbk7n9h3GL/AwAAQDNy978obulk/6/4+f9XnL/X+9L/b9D/6/89/3+cz/+fnfX+/5j+f5/0//N5/v8C+n/9v/7f8/9ZqrH1/7n7r45bOtn/AAAA0IOrH5ht7P4Xz2b2PwAAAEzR1j87sPMPlIbc/S+JW+x/AAAAaEbu/pfGLZ3s/xX3/0f1/P/zFr22/l//v/XHS/+v/x96/XH1/57/v1/6//n0/wvo/4+inz/WWP9/zV6fP4b+/3L9PyOzrf+/7fTHV9X/5+5/WdzSyf4HAACAHuTuf3ncYv8DAABAM3L3vyJusf8BAACgGbn7Xxm3dLL/j7z/P7H3ax9h/7+Q/l//v/XHS/+v/x96ff3/NOn/59P/L6D/9/x/z//X/7NU2/r/LVbV/+fuf1Xc0sn+BwAAgB7k7n913GL/AwAAQDNy918Tt9j/AAAA0Izc/a+JWzrZ/40+/38h/b/+f+uPl/5f/z/0+vr/adL/z6f/X0D/r//X/y/u/3f+izro/xkytv4/d/9r45ZO9j8AAAD0IHf/tXGL/Q8AAADNyN3/urjF/gcAAIBm5O5/fdzSyf7X/x9t/58f1//r/2cH6f/jE/T/m/T/+v+DmFr/v/O/P4fu19eG/k202x79/x3/c/Jft39E/6//1//r/z3/nyUYRf9/6vSvLnP3vyFu6WT/AwAAQA9y978xbrH/AQAAoBm5+98Ut9j/AAAA0Izc/W+OWw64//92qe/q7NH/e/6//n+E/X/Q/2/S/+v/D2Jq/f9Onv+v/9f/T/f96//1/+w2iv5/y7dz978lbvH1fwAAAGhG7v63xi32PwAAADQjd//b4hb7HwAAAJqRu/+6uKWT/a//1//r//X/+v/h1z9s/78+G6b/Pzv0//Pp/xfQ/+v/9f/6f5ZqbP1/7v7r45ZO9j8AAAD0IHf/2+MW+x8AAACakbv/HXGL/Q8AAABTkunYoNz974xbOtn/+n/9v/5f/6//H359z/+fpon2//WPwan2/+dOqf+/Yc4bGOr/Tx3X/+v/9f/6fw5pbP1/7v53xS2d7H8AAADoQe7+G+IW+x8AAACakbv/xrjF/gcAAIBm5O5/d9zSyf7X/+v/9f/6f/3/8Ovr/6dpov1/mWr/7/n/+v+Z/l//r/9nwNj6/9z9N8Utnex/AAAA6EHu/pvjFvsfAAAAmpG7/z1xi/0PAAAAzcjdf0vc0sn+1//r//X/+n/9//Dr6/+n6ej6/9nq+v/7zjnod7Mn/f8C+n/9v/5f/89Sja3/z93/3rilk/0PAAAAPcjdf2vcYv8DAABAM3L3vy9usf8BAACgGbn73x+3dLL/9f/6/2n2/1etD71//b/+f6b/757n/8+n/19A/6//1//r/1mqsfX/ufs/ELd0sv8BAACgB7n7b4tb7H8AAABoRu7+D8Yt9j8AAAA0I3f/h+KWTva//l//v73/n82m0f97/v9M/99C/78+0/8vnf5/vv31/xfp//X/bfX/58wa6v9P7Pn5+n/GaGz9f+7+D8ctnex/AAAA6EHu/o/ELfY/AAAANGDzz87k7v9o3GL/AwAAwJgdO8jfnLv/Y3FLJ/t/+v3/8R2fqP+fzWZ3X9b88//1/zP9fwv9f/2o6v+XR/8/n+f/L6D/b7P/9/x//T8rM7b+P3f/x+OWTvY/AAAA9CB3/yfiFvsfAAAAmpG7/5Nxi/0PAAAAzcjd/6m4pZP9P/3+f+cn6v9nZ/T8f/3/xgf0//p//f9k6f/n0/8voP9f2M+v7fHrnpn+X/+v/2fA2Pr/3P2fjls62f8AAADQg9z9t8ct9j8AAAA0I3f/HXGL/Q8AAADNyN3/mbilk/2v/9f/6/+n2f+v6//1//r/QWPp/y+88F/u1P/r/1vs/+fR/+v/9f/sNLb+P3f/Z+OWTvY/AAAA9CB3/+fiFvsfAAAAmpG7//Nxi/0PAAAAzcjd/4W4pZP9v7v/P2+2WahuGur/o1HT/2+h/9/+/vX/wz8/PP9f/6//P3pj6f89//9w71//r/+f8vs/UP//D7s/X/9Pi8bW/+fuvzNu6WT/AwAAQA9y938xbrH/AQAAoBm5+78Ut9j/AAAA0Izc/XfFLZ3sf8//1//r//X/+v/h19f/T5P+fz79/wL6f/2/5/9f8l/n6v9ZnrH1/7n7vxy3bAy/f/ybQ/7HBAAAAEYkd/9X4pZOvv4PAAAAPcjd/9W4xf4HAACAZuTu/1rc0sn+1//r//X/+n/9//Dr6/+nSf8/n/5/gX76//WhD666nz9Tq37/zfT/nv/PEo2t/8/d//W4pZP9DwAAAD3I3f+NuMX+BwAAgGbk7v9m3GL/AwAAQDNy998dt3Sy//X/+v/2+///1P/veH39v/6/Zfr//Df6MP3/Av30/4NW3c9P/f3r//X/7Da2/j93/z1xSyf7HwAAAHqQu/9bcYv9DwAAAM3I3f/tuMX+BwAAgGbk7v9O3NLJ/tf/99X/r8167P89/1//r//vyXT6/2uPDX3U8//1//r/6b5//b/+n93G1v/n7r937ViX+x8AAACm6t//6X/v2e/fe+/GX9dn341b7H8AAABoRu7+78Ut9j8AAAA0I3f/9+OWTva//r+v/r/P5//r//X/+v+eTKf/H6b/1//r/6f7/vX/+n92G1v/n7v/vrhly/Ab/B/oAQAAACYjd/8P4pZOvv4PAAAAPcjd/8O4Zdf+P7XPP9UOAAAAjE3u/h/FLZ18/V//P/L+f3ZE/X/8ffr/Tfp//f/Q6+v/p6m1/v/4bFT9/6k1/b/+fw79v/5f/89OY+v/c/ffetOsy/0PAAAAjdr2Owo/3vjr+uwncYv9DwAAAM3I3f/TuMX+BwAAgGbk7v9Z3NLJ/tf/j7z/P9Tz/0/U/+X5/533/1euD76+/l//37LW+n/P/9/8uP5/k/5/3O9f/6//Z7cD9P8bg/So+//c/T+PWzrZ/wAAANCD3P2/iFvsfwAAAGhG7v5fxi32PwAAADQjd/+v4pZO9r/+fwX9/1XHZ7Mj7f/38fx//X8f/f8er99O//93F5y8/T/++8br9f+cdjb7//y5oP/X/6+g/78ufv7p/0f0/vX/+n92G9vz/3P3/zpu6WT/AwAAQA9y998ft9j/AAAA0Izc/b+JW+x/AAAAaEbu/t/GLZ3sf/1/i8//n2b/nz/WK+j/T06v/8+muPf+3/P/9f+7ef7/fPr/BabT/2982/P/x/X+9f/6f3YbW/+fu/93cUsn+x8AAAB6kLv/93FL7v+1A//WPQAAADAyufv/ELf4+j8AAAA0I3f/A3FLJ/tf/6//H0v/nzz///Tnef7/Jv2//v8g9P/z6f8X0P/r//X/+n+Wamz9f+7+P8Ytnex/AAAA6EHu/gfjFvsfAAAAmpG7/09xi/0PAAAAzcjd/+e4pZP9r//X/+v/9f/6/+HX1/9Pk/5/Pv3/Q87f+w3o//X/+n/9P0s1tv4/d/9fAwAA//+9M2Fu")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000200)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)

5m46.057098143s ago: executing program 4 (id=1619):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x400}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012009703000000000000000007", @ANYRESDEC], 0x2c}, 0x1, 0x0, 0x0, 0x40018}, 0x880)

5m45.688241406s ago: executing program 4 (id=1624):
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000b40)={0x3, @pix_mp={0x0, 0x0, 0x32314752, 0x0, 0x0, [{0x0, 0x10000}, {0xfffffffd}, {0x9}, {0xfffffffd}, {}, {}, {}, {0x0, 0xfffffffd}], 0x0, 0x0, 0x0, 0x0, 0x45d9700b8b2b9d4f}})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00')
pread64(r1, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a)
ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000080)={0x28, 0x1, 0x0, 0x0, <r2=>0x0, 0x0, 0xdead, 0x4})
ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x3, r2, 0x0, 0x3, 0x26, &(0x7f00000000c0)="b5108a7b338b36194ea03979e3b860bbca1fdb53fbdfd54cc0a6b5aa0525525f2a58dea2aad7"})
eventfd2(0x8, 0x1)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, 0x0, 0x0)
socket(0x2b, 0x1, 0x1)
r5 = dup(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0/file0/file0\x00', 0x144)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={<r7=>0x0, 0x0, &(0x7f0000000240)}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000380)={r7, @in6={{0xa, 0x4e22, 0x0, @loopback, 0x5}}}, &(0x7f00000000c0)=0x84)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="38000000031401002abd7000fcdbdf250900020073797a300000000008004100736977001400330077673100000000000000000000000000f817ae3c697eb8633fc41b54a0f3f6eaf8ee33590c53c8044ed4a4d13c0b937991e3912dc25aeedab09233c9e1c742a3c639834f34c3b7293b06677b65c7fb41cce1bc165a958dcfc0f8cf4602e48e9033b7011c4721191a7957686da01169f5dd47f16a1eb22a8a66b2b70e9766f09ccdb7575053b49c6b39d1eebc90a49149435f4b3f07f7363ef3d15c601234b5fafa311aaa9b6ba75ce3fa1e0cb9a9d40529a33357ad2864b33a95881770dd9b3d3ad294a595914cc6"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
r9 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x114, 0x14, 0x601, 0x3, 0x0, {0x2b, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x100, 0x1, "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"}]}, 0x114}, 0x1, 0x0, 0x0, 0x4050}, 0x4040)
read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206010800000000000000000100000a12000300686173683a6e65742c706f7274000000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d308000640000000009afe76671d1451a710813ac9d642f4efd99ff4503ab3feec1f148ea57e2d66ebfd2aaf48ab26af7bf85643649837f919b9934527460cf395b097c7539816a68b0f2d7233df200fa005c588353665d50dfbad"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)

5m45.377899126s ago: executing program 34 (id=1624):
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000b40)={0x3, @pix_mp={0x0, 0x0, 0x32314752, 0x0, 0x0, [{0x0, 0x10000}, {0xfffffffd}, {0x9}, {0xfffffffd}, {}, {}, {}, {0x0, 0xfffffffd}], 0x0, 0x0, 0x0, 0x0, 0x45d9700b8b2b9d4f}})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00')
pread64(r1, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a)
ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000080)={0x28, 0x1, 0x0, 0x0, <r2=>0x0, 0x0, 0xdead, 0x4})
ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x3, r2, 0x0, 0x3, 0x26, &(0x7f00000000c0)="b5108a7b338b36194ea03979e3b860bbca1fdb53fbdfd54cc0a6b5aa0525525f2a58dea2aad7"})
eventfd2(0x8, 0x1)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, 0x0, 0x0)
socket(0x2b, 0x1, 0x1)
r5 = dup(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0/file0/file0\x00', 0x144)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={<r7=>0x0, 0x0, &(0x7f0000000240)}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000380)={r7, @in6={{0xa, 0x4e22, 0x0, @loopback, 0x5}}}, &(0x7f00000000c0)=0x84)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="38000000031401002abd7000fcdbdf250900020073797a300000000008004100736977001400330077673100000000000000000000000000f817ae3c697eb8633fc41b54a0f3f6eaf8ee33590c53c8044ed4a4d13c0b937991e3912dc25aeedab09233c9e1c742a3c639834f34c3b7293b06677b65c7fb41cce1bc165a958dcfc0f8cf4602e48e9033b7011c4721191a7957686da01169f5dd47f16a1eb22a8a66b2b70e9766f09ccdb7575053b49c6b39d1eebc90a49149435f4b3f07f7363ef3d15c601234b5fafa311aaa9b6ba75ce3fa1e0cb9a9d40529a33357ad2864b33a95881770dd9b3d3ad294a595914cc6"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
r9 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x114, 0x14, 0x601, 0x3, 0x0, {0x2b, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x100, 0x1, "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"}]}, 0x114}, 0x1, 0x0, 0x0, 0x4050}, 0x4040)
read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206010800000000000000000100000a12000300686173683a6e65742c706f7274000000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d308000640000000009afe76671d1451a710813ac9d642f4efd99ff4503ab3feec1f148ea57e2d66ebfd2aaf48ab26af7bf85643649837f919b9934527460cf395b097c7539816a68b0f2d7233df200fa005c588353665d50dfbad"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)

5m19.315663802s ago: executing program 5 (id=1870):
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
unshare(0x28000600)
rt_sigqueueinfo(0x0, 0xb, 0x0)
flock(r1, 0xc)

5m19.218279569s ago: executing program 5 (id=1872):
r0 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='name', &(0x7f00000000c0)='ccnA\xf6gro_p\x00', 0x0)

5m19.217996762s ago: executing program 5 (id=1874):
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x3200014, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRESOCT], 0x1, 0x60b, &(0x7f0000002080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r0, 0x3, 0x1)
getdents64(r0, 0x0, 0x31)

5m19.106386462s ago: executing program 5 (id=1877):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000020c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000280)='binfmt_misc\x00', 0x800, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00')

5m18.217534334s ago: executing program 5 (id=1890):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c)
recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
bind$tipc(r0, 0x0, 0x0)

5m17.919608758s ago: executing program 5 (id=1891):
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0), 0x2002, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0xd, 0xffffffffffffffff, {0xf}}, './file0\x00'})

5m17.843100661s ago: executing program 35 (id=1891):
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0), 0x2002, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0xd, 0xffffffffffffffff, {0xf}}, './file0\x00'})

4m42.426373017s ago: executing program 3 (id=2222):
r0 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0})
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0})
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0))

4m42.367192376s ago: executing program 3 (id=2223):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0}, 0x38)

4m42.216384732s ago: executing program 3 (id=2224):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x160)
getdents64(r0, &(0x7f0000000040)=""/43, 0x2b)
getdents64(r0, 0xfffffffffffffffe, 0x29)

4m42.216110115s ago: executing program 3 (id=2225):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x48c5, &(0x7f0000000b80)={[{@uni_xlateno}, {@shortname_winnt}, {@rodir}, {@fat=@gid}, {@fat=@nfs_nostale_ro}, {@uni_xlateno}, {@shortname_mixed}, {@uni_xlateno}, {@fat=@sys_immutable}, {@uni_xlate}, {@utf8no}, {@shortname_winnt}]}, 0x0, 0x274, &(0x7f0000000780)="$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")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100)

4m42.10530761s ago: executing program 3 (id=2226):
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000480)={0x0, 0x669f, 0x8, 0x0, 0xfffffffc}, &(0x7f0000000380)=<r1=>0x0, &(0x7f0000000340)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = socket$packet(0x11, 0x2, 0x300)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x0, 0x6040, 0x1, {0x1}})
io_uring_enter(r0, 0x47f9, 0x3f, 0x0, 0x0, 0x0)

4m41.845690363s ago: executing program 3 (id=2228):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x8980}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2, 0x0, 0x700}}], 0x2, 0x0)
sendmsg$sock(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="1d4953", 0x3}], 0x1}, 0x4)

4m41.671286788s ago: executing program 36 (id=2228):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x8980}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2, 0x0, 0x700}}], 0x2, 0x0)
sendmsg$sock(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="1d4953", 0x3}], 0x1}, 0x4)

4m6.50359481s ago: executing program 6 (id=2631):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r1, 0x200, 0x70bd2b, 0x0, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x2}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x5e}]}, 0x24}}, 0x80)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0)

4m6.443682301s ago: executing program 6 (id=2633):
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x14c0e, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0xfd, 0x6b1, &(0x7f0000001f80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0)

4m6.373762653s ago: executing program 6 (id=2635):
syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200029010203010902120001000080000904"], 0x0)

4m5.20544283s ago: executing program 6 (id=2639):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x120584c, 0x0)

4m5.15388573s ago: executing program 6 (id=2641):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=@setlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}, @IFLA_MASTER={0x8, 0x3a}]}, 0x38}}, 0x0)

4m5.063481765s ago: executing program 6 (id=2643):
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x195011, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
umount2(&(0x7f0000000040)='./file0/file0\x00', 0x8)

4m4.873104768s ago: executing program 37 (id=2643):
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x195011, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
umount2(&(0x7f0000000040)='./file0/file0\x00', 0x8)

3m25.271103049s ago: executing program 8 (id=3144):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4})
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$binfmt_misc(r1, 0x0, 0x0)

3m25.183686953s ago: executing program 8 (id=3145):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum={0x5000000}]}, {0x0, [0x0, 0x30, 0x5f, 0x5f, 0x2e, 0x61, 0x0, 0x60]}}, &(0x7f0000000f40)=""/4089, 0x3a, 0xff9, 0x8}, 0x28)

3m25.1834536s ago: executing program 8 (id=3146):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032})
io_setup(0x2, &(0x7f0000000680)=<r1=>0x0)
io_submit(r1, 0x39, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x7, 0x1, 0x0, r0, &(0x7f0000000180), 0xa}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)="577c0db4302ad396a90a571acd8b176eef818983c7229dc07388819ec1d5580a061b62634a3afa04121ae69813bef26f33de5e85d8f773dd28356452d86a592d0e21af8bc62c55e427fc9b4bc101aafb154d2373555ef156d4d049", 0xfffffffffffffdde, 0xa, 0x0, 0x1}])

3m25.003157505s ago: executing program 8 (id=3147):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000400)={[{@force}, {@nodecompose}, {@nobarrier}, {@nls={'nls', 0x3d, 'koi8-u'}}, {@part={'part', 0x3d, 0xff}}, {}, {@nobarrier}, {@nobarrier}]}, 0x3, 0x6b3, &(0x7f0000000780)="$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")
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f00000000c0)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]})

3m24.894770615s ago: executing program 8 (id=3149):
r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f00000000c0)=0x32)

3m24.474932214s ago: executing program 8 (id=3154):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
mount_setattr(r0, 0x0, 0x9800, &(0x7f0000000040)={0x100002, 0xf4, 0x0, {r0}}, 0x20)

3m23.997490639s ago: executing program 38 (id=3154):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
mount_setattr(r0, 0x0, 0x9800, &(0x7f0000000040)={0x100002, 0xf4, 0x0, {r0}}, 0x20)

1m40.343540264s ago: executing program 7 (id=4341):
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000002980)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r1 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x13dd, 0xc01)
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

1m39.483200718s ago: executing program 7 (id=4354):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
listen(r0, 0x0)
listen(r1, 0x4)

1m39.482891728s ago: executing program 7 (id=4355):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001880)=""/4104, 0x1008}], 0x1}, 0x400005}], 0x1, 0x40000062, 0x0)

1m39.419759714s ago: executing program 7 (id=4356):
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00')
r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x4)

1m39.416107722s ago: executing program 7 (id=4357):
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000640)='./file0\x00', 0x2200c12, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@overriderock}, {@map_normal}, {}, {@map_normal}, {@unhide}, {@gid}, {@session={'session', 0x3d, 0x1e}}, {@check_relaxed}, {@check_strict}]}, 0x5, 0xa29, &(0x7f0000001800)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)

1m39.263731317s ago: executing program 7 (id=4358):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x1, 0x70bd25, 0x27dfdbfa, {0x0, 0x0, 0x0, r2, 0x38013, 0x1922b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0x6}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)

1m39.140715366s ago: executing program 39 (id=4358):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x1, 0x70bd25, 0x27dfdbfa, {0x0, 0x0, 0x0, r2, 0x38013, 0x1922b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0x6}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)

1m12.51237097s ago: executing program 1 (id=4722):
r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x89d9, 0x10da40)
ioctl$LOOP_SET_CAPACITY(r0, 0x301)

1m12.462123063s ago: executing program 1 (id=4723):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000007118be000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m12.461735544s ago: executing program 1 (id=4724):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000340)="0a000300010000", 0x7)
setsockopt$sock_int(r0, 0x1, 0x1d, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10040, 0x0)
syz_usb_connect(0x0, 0x5b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001a75ed2099042e159ab4010203010902240001000010000904ff0002ffc3100009050602"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x93}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

1m11.143646346s ago: executing program 1 (id=4733):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180004ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

1m10.979500683s ago: executing program 1 (id=4738):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5f55, &(0x7f000000efc0)="$eJzs3cuOHFcZB/CvL9NzCXGsCEXGYuE4EBJCfLch3OKwYAFIICGvsTWZRAYHkG0QiSw8kReIBZdHgE02LPIi4RUQD4AlD6tIEArVzDl2TU2Pexx7urrn/H7SuOrr0zV9yv+pqe6pywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIL733R+f7kXE5V+nBw5HfCYGEf2I5bo+FvXMxfz8YUQcic3meC4iBosR9fKb/zwTcS4iPjoUcW/j1mr98Jk99uP8qZvXP/n+d/7xuz/dOfLTN3/yQbv9R589++Hvb0cc/uFrH35y+8msOwAAAJSiqqqqlz7mH02f7/tddwoAmIq8/6+S/LharVarn2j9x/5s9UddaN1UjXe7WUTEenOZ+j2Dw/EAMGfW4+Ouu0CH5F+0YUQ81XUngJnW67oD7It7G7dWeynfXnN/cGyrPf+dclv+673713fsNp2kfY7JtH6+7sQgnt2lP8tT6sMsyfn32/lf3mofpeftd/7Tslv+o61Ln4qT8x+082/Zlv+fI2Ju8++Pzb9UOf/ho+S/Ppjj7V/+AAAAAAAcfPnv/4c7Pv67+PirsicPO/57bEp9AAAAAAAAAIAn7XHH/7vP+H8AAAAws+rP6rW/HHrw2G73Yqsfv9SLeLr1fKAw6WKZla77AQAAAAAAAAAAAAAlGW6dw3upF7EQEU+vrFRVVX81tetH9bjLz7vS1x9K1vUveQAA2PLRoda1/L2IpYi4lO71t7CyslJVS8sr1Uq1vJjfz44Wl6rlxufaPK0fWxzt4Q3xcFTV32ypsVzTpM/Lk9rb369+rVE12EPHpqPDwAEgIrb2RvfskQ6Yqnomun6Xw3yw/R88tn/2ouufUwAAAGD/VVVV9dLtvI+mY/79rjsFAEzDUt7/t48LqNVqtVqtPnh1UzXe7WYREevNZer3DIbjB4A5sx4fd90FOiT/og0j4kjXnQBmWq/rDrAv7m3cWu2lfHvN/UEa3z2fC7It//Xe5nJ5+XHTSdrnmEzr5+tODOLZXfrz3JT6MEty/v12/pe32kfpefud/7Tsln+9noc76E/Xcv6Ddv4tByf//tj8S5XzHz5S/gP5AwAAAADADMt//z9c/PFfdz0AAAAAAAAAYH7d27i1mq97zcf/Pz/meb3mnOs/D4ycf2/P+bv+9yDJ+ffb+bdOyBk05u++8SD/f2/cWv3g5r8+l6czn//CYFS/9kKvPxim05yqhbfialyLtTi14/nDbe2nd7QvbGs/M6H97I72Ud2+nNtPxGr8Iq7Fm/fbFyecGLU0ob2a0J7zH9j+i5TzHza+6vxXUnuvNa3dfb+/Y7tvTse9zsW//ffFnVvX9N2Jwf11a6rX73gH/dn8P3lqFL+6sXb9xG+u3Lx5/XSkybZHz0SaPGE5/4X0lfN/6YWt9vx7v7m93n1/9Mj5z4o7Mdw1/xca8/X6vjzlvnUh5z9KXzn/vAcav/3Pc/67b/+vdNAfAAAAAAAAAAAAAAAAeJiqqjYvEb0YERfS9T/uhA8ARfjDD9JMlYRarVar1eoDWzdV473eLGJp+zIXIuK3474ZADDL/hcR/+y6E3RG/gXL9/urp1/oujPAVN14972fXbl2be36ja57AgAAAAAAAAB8Wnn8z2ON8Z83zwNqjRu9bfzXN+LY3I7/2R8NNsc6Tyv0fDx8/O/j8fDxv4cTXm9hQvtoQvvihPalCe1jL/RoyPk/nzLO+R9NK1bS+K8vddCfruX8j6exnnP+X2o9r5l/9dd5zr+/Lf+TN9/55ckb77736tV3rry99vbaz0+funDu7PlzZ8+fP/nW1Wtrp7b+7bDH+yvnn8e+dh5oWXL+OXP5lyXn/8VUy78sOf8XUy3/suT88/s9+Zcl558/+8i/LDn/l1Mt/7Lk/L+cavmXJef/SqrlX5ac/1dSLf+y5PxfTbX8y5LzP5Fq+Zcl538y1fIvS84/H+GSf1ly/vnMBvmXJed/JtXyL0vO/2yq5V+WnP+5VMu/LDn/86mWf1ly/hdSLf+y5Py/mmr5lyXn/7VUy78sOf/XUi3/suT8v55q+Zcl5/+NVMu/LDn/b6Za/mXJ+X8r1fIvS87/26mWf1ly/q+nWv5leXD/fzNTnvnP3yNmoBtmzIyb6fo3EwAAAAAAAAAAAADQNo3TibteRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7PDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1Eaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwd3cxcpX3GcDPftlrQ4IbCCHECWtjiAOLd9df4BCDSUJKSZtSEtKmJTWOvTZO/FXvOgGEylJoSxSkIrUX9KJpEqVRpLYCRZGaSjRCaqT2rlwl4iZqJS4sFSoHJZVSBbY6M+/77szs7Mz6Y+3z8fsh/PfOnJl558yZ2X3WemYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBWGz42/ecDWZbl/zf+WJdll+d/X5Ptyb+c23mpVwgAAACcr7caf/7DFemEPcu4UMs2//aB//j+/Pz8fPaFN0+//Zfz8+mMsSwbWp1ljfOif//lL+ZbtwmeykYHBlu+Huxz80N9zh/uc/5In/NX9Tl/dZ/zR/ucv2gHLLKm+fuYxpVtavx1XXOXZldlI43zNnW51FMDqwcH4+9yGgYal5kfOZgdzo5k09nkossMNP7Lspc25Ld1TxZva7DlttZnWXbmZ4/vj2sYCPt4U9Z2Yw2tj90bd2Vjb/7s8f3fmX39vd1m392waKVZtnljvs6ns2zh11XZQLY67ZO4zsGWda7vss6htnUONC6X/71znWeWuc54v0fDOl/psc714bRHrs+ybC5bcptOT2WD2dqOW037e7R5ROTXkT+U78qGz+o42bCM4yS/zGvXtx8nncdk3P8bwj4ZXmINrQ/HG0+uWrTfz/U4ye91EY7V/Lrvy290dLT1V6ttx2q+zeM3LH0MdH3suhwD6VhuOQY29jsGBlcNNY6BwYU1b2w7BqYWXWYwG2jc1ukbeh8DE7NHT0zMPPrYLYeP7js0fWj62NTkzu3bdmzftmPHxMHDR6Ynm3+e3S4tkbXZYDoGN4bXmngMfrBj29ZDcv6bF+55MFqQ50F+3z9zY76gywezJY7xfJunN5//8yB93295Hgy3PA+6vqZ2eR4ML+N5kG9zZvPyvmcOt/zfbQ0r9Vq4ruUYuJTfD/PbfPBDS78Wrg/reuams/1+OLToGIh3ayA89/JT0s97o7eF/bL4uLg2P+OyVdmpmemTWx7ZNzt7cioL46K4suWx6jxe1rbcp2zR8TJ41sfLnr//1Y3Xdjl9XdhXozf3fqzybbaP936sGq/u7ftzVdbcn22nbs3CuMAu9v7s9t0s358pS/TYn/k2T99y/j8LplzS8vo30u/1b2hkuPn6N5T2xkjb69/ih2aosbIsO3PL8l7/RsL/F/v176qCvP7l++rBLb2PgXybZybO9hgY7vn6d32YA2E9HwqJYbQl97/dOH+ueZi2PJZ9j5vh4ZFw3AzHW2w/brYtukx+bfltb548t+Nm8/Xtj1Xbzy0VPG7yffVXk72Pm3ybl6fO/7VjTfxry2vHqn7HwMjQqny9I+kgaL7eza+Jx8CWbH92PDuSHUiXyR/l/LbGty7vGFgV/r/Yrx3XFOQYyPfV81t7HwP5Nj/admF/dtocTknbtPzs1Pn7haUy/7XDC9fXudsudObP1/nxH38qndYtQ+TbvL79bHNG7/10czjlsi77qfP5s9QxfSC7OPvpmrDOIzt6/24q3+aqncs8nvZkWfbq1KuN33eF3+9+79SPv9/2e99uv1N+derVeyfu/8nZrB8AgHP3duPPuVXNnzVb/sV6Of/+DwAAAJRCzP2DYSbyPwAAAFRGzP1DYSbyPwAAAFRGzP3DYSY1yf8P37brhbeeyNK7Ac4H8fy4G+67o7ld7HjPha/H5hfkp3/02yMvfPWJ5d32YJZlv7r3fV23f/iOuK6mE3GdH24/fZFrrlvW7T/0wMJ2re+fcGZX8/rj/VnuYRC7yi9NbG1c79ijU4358r1ZY94/98xTzetvfh23P72tuf3fhDct2XNwoO3ym8N6NoU5Ft5T5r49C/shn/FyL6z/wL9e+dmF24uXG9j4zsbdfP6Pm9cb3yPquSub28f7vdT6/+Vr330h3/6RG7qv/4nB7us/Ha73tTB/ubu5fes+/2rL+v80rD/eXrzclm/9sOv6X3xPc/sXw3HxjTA713/XX7z/rW6PV7ydPbc3Lxdvf/J/tzcuF68vXn/n+kefmGrbH53X//KbzevZ/eWfD7VuH0+PtxM9dHv78T0QHt+2HnmWZd/9s6xtP2cfaV7unzvWH6/vxO3d139zxzpPDFzXuPzC/VnXdr++/ndbu97fuJ49/7iu7f48d3fYf29O/Ci/3tP3h+MxnP9/rzSvr/O9TF+8u/31Jm7/jXXN5228vomO9T/Xsf656/J913/997zZXP+Ld65uW/+eT4Tj6Z7m7Lf+Q397Rdvlv/md5uNx8ivjx47PnDp8oGWvtj6PV4+uWXvZ5e945xXhtbTz673HZx+ePjk2OTaZZWMlfMvAlV7/t8L8n+aYu/C30PSTnzePu2c/2fy+9cFfNL9+Lpz+UHg84/fHr//1SNvx2vm4z93ZnOe7/pvCOpbrPV/7r+uWteHpz7906p/+5PXOnwvi/Tnx7tHG/Xt+w9WN8wZebp7f+XrVz3++u/15/dPhycb8Qdiv8+GdmTde3by9zuuP703y7Kebz9/4k1y8fNbxfiLrhtrvx/mu/6fh55gfXtP++hePjx880fFuzuuygXwJc+H1IZtrnh+3ivv72TNXd729+D482dx7z2aZS5p5dGbiyOFjpx6ZmJ2emZ2YefSxvUePnzo2u7fx3qV7v9jv8gvP77WN5/eB6Z3bs8az/XhzrLBLvf4TD+w/cOvkjQemD+47dXD2gRPTJw/tn5nZP31g5sZ9Bw9Of6Xf5Q8f2D21dde2W7eOHzp8YPdtu3Zt2zV++NjxfBnNRfWxc/JL48dO7m1cZGb39l1TO3Zsnxw/evzA9O5bJyfHT/W7fON703h+6S+Pn5w+sm/28NHp8ZnDj03vntq1c+fWvu/+ePTEwZmxiZOnjk2cGp4+OdG8L2OzjZPz7339Lk89zBwPr3cdBsJP55+7eWd6f9zct59c8qqam7T/eJq9Ed4LKn5/6/d1zP0jYSY1yf8AAABQBzH3hzf+XzhD/gcAAIDKiLl/dZiJ/A8AAACVEXN/M/mPpo9/r0v+v1D9/yf1/xv0//X/M/3/RP9f/z/T/9f/70P/X/+/zOvX/0/9/xn9f5ZStP5/yP3Zmizz7/8AAABQUTH3rw0zkf8BAACgMmLuvyzMRP4HAACAyoi5//Iwk5rkf5//r/+v/9+r/x+31f/P9P+L0P/f9N/6/4vo/+v/Z/r/5+xS9+fLvv4C9v/X6P9TNEXr/8fc/44wk5rkfwAAAKiDmPvfGWYi/wMAAEBlxNx/RZiJ/A8AAACVEXP/ujCTmuR//X/9f/1/n/+v/1+a/r/P/+9C/1//P9P/P2eXuj9f9vUXsP/v8/8pnKL1/2Pu/7Uwk5rkfwAAAKiDmPvfFWYi/wMAAEBlxNx/ZZiJ/A8AAACVEXP/VWEmNcn/9ez/v5Zlmf5/pv+v/9+xTv1//f+VoP+v/9+L/r/+f5nXr/+v/09/Rev/x9z/7jCTmuR/AAAAqIOY+68OM5H/AQAAoDJi7n9PmIn8DwAAAJURc/81YSY1yf/17P/7/H/9/yb9//Z16v/r/68E/X/9/170/5fR/x9e+Kv+f7HWr/+v/09/Rev/x9z/3jCTmuR/AAAAqIOY+68NM5H/AQAAoDJi7n9fmIn8DwAAAJURc//6MJOa5H/9f/1//X/9f/1//f+VVK7+/+CS5+j/N+n/t7tw/f+5hQX4/P/SrF//X/+f/orW/4+5//1hJjXJ/wAAAFAHMfd/IMxE/gcAAIDKiLn/ujAT+R8AAAAqI+b+sTCTmuR//X/9f/1//X/9f/3/lVSu/v/S9P+b9P/bXZTP/2+h/1+s9ev/6//TX9H6/zH3bwgzqUn+BwAAgDqIuX9jmIn8DwAAAJURc//1YSbyPwAAAFRGzP2bwkxqkv/1//X/9f/1//X/9f9Xkv6//n8v+v/6/2Vev/6//j/9Fa3/H3P/DWEmNcn/AAAAUAcx998YZiL/AwAAQGXE3P/BMBP5HwAAACoj5v7NYSY1yf/6//r/+v8l7v8P6f9n+v+Fp/+v/9+L/r/+f5nXr/+v/09/Rev/x9z/oTCTmuR/AAAAqIOY+28KM5H/AQAAoDJi7r85zET+BwAAgMqIuX88zKQm+V//X/9f/7/E/X+f/9+2fv3/YtL/1//vRf9f/7/M69f/1/+nv6L1/2PuvyXMpCb5HwAAAOog5v4tYSbyPwAAAFRGzP0TYSbyPwAAAFRGzP2TYSY1yf/6//r/+v/6//r/+v8rSf9f/78X/X/9/zKvX/9f/5/+itb/j7l/KsykJvkfAAAA6iDm/q1hJvI/AAAAVEbM/dvCTOR/AAAAqIyY+7eHmdQk/5ek/78lFaD0//X/9f/1//X/S0X/X/+/F/1//f8yr1//X/+fdoNdTita/z/m/h1hJjXJ/wAAAFAHMffvDDOR/wEAAKAyYu6/NcxE/gcAAIDKiLn/tjCTmuT/kvT/ff6//r/+fwv9f/3/MtH/1//vRf9f/7/M69f/1/+nv6L1/2Pu3xVmUpP8DwAAAHUQc/+Hw0zkfwAAAKiMmPtvDzOR/wEAAKBUun0OYRRz/0fCTGqS//X/q97/n1+t/6//r//fe/36/ytL/1//vxf9f/3/Mq9f/1//n/6K1v+PuX93mElN8j8AAADUQcz9d4SZyP8AAABQGTH33xlmIv8DAABAZcTcvyfMpCb5X/+/6v1/n/+v/6//32/9+v8rS/9f/78X/f9y9v/Djy36/wXq/+fHkP4/RVS0/n/M/XeFmdQk/wMAAEAdxNz/0TAT+R8AAAAqI+b+j4WZyP8AAABQGTH3fzzMpCb5X/9f/1//X/9f/1//fyXp/69Y/7/xUljk/v+aZdyM/n85+/+R/n9x+v8+/5+iKlr/P+b+u8NMapL/AQAAoA5i7v9EmIn8DwAAAJURc/+vh5nI/wAAAFAZMfffE2ZSk/yv/6//r/+v/6//r/+/kvT/ff5/L/r/+v9lXr/+v/4//RWt/x9z/2+EmdQk/wMAAEAdxNx/b5iJ/A8AAACVEXP/J8NM5H8AAAAomVVLnhNz/2+GmdQk/5ev/z9Wyv7/YLp+/X/9f/1//X/9/wtJ/1//P9P/P2eXuj9f9vXr/+v/01/R+v8x9/9WmElN8j8AAADUQcz9nwozkf8BAACgMmLu/+0wE/kfAAAAKiPm/vvCTGqS/y90/7/z8r34/H/9/0z/X/9f/1///zzp/+v/Z/r/5+xS9+fLvn79f/1/+ita/z/m/t8JM6lJ/gcAAIA6iLn//jAT+R8AAAAK6uGzvkTM/Z8OM5H/AQAAoDJi7v9MmElN8n/5Pv9f/1//X/9f/1//v0z0//X/e9H/1/8v8/r1//X/6a9o/f+Y+x8IM6lJ/gcAAIA6iLn/s2Em8j8AAABURsz9vxtmIv8DAABAZcTc/3thJj3y/9KVhPLR/9f/1//X/9f/1/9fSfr/i/v/+WuY/n+T/r/+f5nXr/+v/09/Rev/x9z/uTAT//4PAAAAlRFz/++Hmcj/AAAAUBkx9/9BmIn8DwAAAJURc/+DYSY1yf/6//r/+v/6//r/+v8rSf/f5//3ov+v/1/m9ev/6//TX9H6/zH3fz7MpCb5HwAAAOog5v4/DDOR/wEAAKAyYu7fG2Yi/wMAAEBlxNz/UJhJTfK//r/+v/6//r/+v/7/StL/1//vRf9f/7/M69f/1/+nv6L1/2Pu3xdmsqf9ZgAAAIDyirn/C2EmNfn3fwAAAKiDmPv3h5nI/wAAAFAZMfcfCDOpSf7X/9f/1//X/9f/1/9fSfr/+v+96P/r/5d5/fr/+v/0V7T+f8z902EmNcn/AAAAUAcx9x8MM5H/AQAAoDJi7j8UZiL/AwAAQGXE3P9wmElN8r/+v/6//n9t+/+vfK9jnfr/+v8rQf9f/78X/X/9/zKvX/9f/5/+itb/j7n/cJhJTfI/AAAA1EHM/V8MM5H/AQAAoDJi7v9SmIn8DwAAAJURc/+RMJOa5H/9f/1//f/a9v+X9/n/axZuV/9f//9c6P/r//ei/6//X+b16//r/9Nf0fr/MfcfDTOpSf4HAACAOoi5/1iYifwPAAAAlRFz//EwE/kfAAAAKiPm/hNhJjXJ//r/Z9X/XzWwRDdQ/7/7+vX/K9D/b6H/r/9/LvT/9f970f/X/y/z+vX/9f/pr2j9/5j7/yjMpCb5HwAAAOog5v6TYSbyPwAAAFRGzP0zYSbyPwAAAFRGzP2zYSY1yf/6/z7/X/9f/1//X/9/Jen/6//3ov+v/1/m9ev/6//TX9H6/zH3nwozqUn+B4D/Z+8+c/U6qz4OP6/zOiRCwBTCEGACDIExIDEGeknooUPovYXeQofQe++99x4IvUpB8VlrhWPsvW2f8/jc+17X9SELTpB8RzEf/kp+2gAAHeTuv1/cYv8DAADANHL33z9usf8BAABgGrn7HxC3NNn/+n/9v/5f/6//1//vk/5f/79E/6//3/L79f/6f9aN1v/n7n9g3NJk/wMAAEAHufsfFLfY/wAAADCN3P0PjlvsfwAAAJhG7v6HxC1N9r/+X/+v/9f/6//1//uk/9f/L9H/6/+3/H79v/6fdaP1/7n7Hxq3NNn/AAAA0EHu/ofFLfY/AAAATCN3/8PjFvsfAAAAppG7/9q4pcn+1//r//X/G+z//1//r//fDv2//n+J/l//v+X36//1/6wbrf/P3X9d3NJk/wMAAEAHufsfEbfY/wAAADCN3P2PjFvsfwAAAJhG7v5HxS1N9r/+X/+v/99g/+/7//r/DdH/6/+X6P/1/1t+v/5f/8+60fr/3P2Pjlua7H8AAADoIHf/Y+IW+x8AAACmkbv/sXGL/Q8AAADTyN3/uLilyf7X/+v/9f/6f/2//n+f9P/6/yX6f/3/lt+v/9f/s27v/f+9rz9zL7T/z91/fdzSZP8DAABAB7n7Hx+32P8AAAAwjdz9T4hb7H8AAACYRu7+J8YtTfa//l//f0f/f9v/6f/1//r/O36u/z8e+n/9/xL9v/5/y+/X/+v/Wbf3/n+l9z/7v+fuf1Lc0mT/AwAAQAe5+58ct9j/AAAAMI3c/U+JW+x/AAAAmEbu/qfGLU32v/5f/+/7//p//b/+f5/0/8P2/2f/X+8w/f8F0f/r/8/X/9/rAt6v/6eD0fr/3P1Pi1ua7H8AAADoIHf/0+MW+x8AAACmkbv/hrjF/gcAAIBp5O5/RtzSZP/r//X/+n/9/+H+/1TL/v/2n+n/90P/P2z/v0z/f0H0//p/3//X/7NstP4/d/8z45Ym+x8AAAA6yN3/rLjF/gcAAIBp5O5/dtxi/wMAAMA0cvc/J25psv/1//p//b/+/0jf/79ijv7f9//3R/+v/1+i/9f/b/n9+n/9P+tG6/9z9z83bmmy/wEAAGB6p3a1+58Xt9j/AAAAMI3c/c+PW+x/AAAAmEbu/hfELU32v/5f/6//1/8fqf+f5Pv/+v/90f/r/5dcaP+/0//XX4v+f5z36//1/6wbrf/P3f/CuKXJ/gcAAIAOcve/KG6x/wEAAGAauftfHLfY/wAAADCN3P0viVua7H/9v/5f/6//1//r//dJ/6//X+L7//r/Lb9f/6//Z91o/X/u/pfGLU32PwAAAHSQu/9lcYv9DwAAANPI3f/yuMX+BwAAgGnk7n9F3HL2/j91OV91+ej/9f/6f/2//l//v0/6f/3/Ev3/ufv/q87z6+n/x3q//l//z7rR+v/c/TfGLf75PwAAAEwjd/8r4xb7HwAAAKaRu/9VcYv9DwAAANPI3f/quKXJ/j9f/3/rnQ/+vP7/wuj/z/1+/b/+X/+v/9f/6/+X6P99/3/L79f/6/9ZN1r/n7v/NXFLk/0PAAAAHeTuf23cYv8DAADANHL3vy5usf8BAABgGrn7Xx+3NNn/x//9/2v0//p//X9c/b/+X/+v/9f/L9P/6/+3/H79v/6fdaP1/7n73xC3NNn/AAAA0EHu/jfGLfY/AAAATCN3/5viFvsfAAAAppG7/81xS5P9f/z9v+//6/8vsv8/pf9P+v/4+6r/1/9fBP2//n+n/79kJ93Pb/39+n/9P+tG6/9z9990Zur12/8AAADQwU1n/njV7i1xi/0PAAAA08jd/9a4xf4HAACAaeTuf1vc0mT/6//1/yfe//v+f9H/x99X/b/+/yLo//X/O/3/JTvpfn7r79f/6/9ZN1r/n7v/7XFLk/0PAAAAHeTuf0fcYv8DAADANGL3H/zL7/Y/AAAATOmdZ/541e5dcUuT/d+4/7/mqP3/1f/1n/X/536//v9Y+v+bzv69p//X/2+J/l//v0T/r//f8vvH6f/jB9fq/xnPaP1/7v53xy1N9j8AAAB0kLv/PXGL/Q8AAADTyN1/c9xi/wMAAMA0cve/N25psv8b9/+TfP//PrfEC/T/8/b/vv8fV/+v/z8X/b/+f6f/v2Qn3c9v/f3j9P++/8+4Ruv/c/e/L25psv8BAACgg9z9749b7H8AAACYRu7+D8Qt9j8AAABMI3f/B+OWJvtf/7/1/t/3//X/+n/9/9j0//r/Jfp//f+W36//1/+zbrT+P3f/h+KWJvsfAAAAOsjd/+G4xf4HAACAaeTu/0jcYv8DAADANHL3fzRuabL/9f/6/331/7f/Ivr/Jv3/dfr/nf7/vPT/+v8l+n/9/5bfr//X/7NutP4/d//H4pYm+x8AAAA6yN3/8bjF/gcAAIBp5O7/RNxi/wMAAMA0cvd/Mm64x11O7knH6/R5fh69uf5f/+/7//p/3//X/++T/l//v0T/r//f8vv1//p/1o3W/+fu/1Tc4p//AwAAwDRy9386brH/AQAAYBq5+z8Tt9j/AAAAMI3c/Z+NW5rsf/2//l//v9n+/2r9/+H36//HpP/X/y/R/+v/t/x+/b/+n3Wj9f+5+z8XtzTZ/wAAANBB7v7Pxy32PwAAAEwjd/8X4hb7HwAAAKaRu/+LcUuT/a//1//r/zfb//v+/1nv1/+PSf+v/1+i/9f/b/n9+n/9P+tG6/9z938pbmmy/wEAAKCD3P1fjlvsfwAAAJhG7v6vxC32PwAAAEwjd/9X45Ym+1//r//X/+v/9f/6/33S/+v/l+j/9f9bfr/+X//PutH6/9z9X4tbmux/AAAA6CB3/9fjFvsfAAAAppG7/xtxi/0PAAAA08jd/824pcn+n7n/X/qf6f8P6P/1/zv9v/5/z/T/+v8l+n/9/5bfr//X/7NutP4/d/+34pYm+x8AAAA6yN3/7bjF/gcAAIBp5O7/Ttxi/wMAAMA0cvd/N25psv9n7v+X6P8P6P/1/zv9v/5/z/T/+v8l+n/9/5bfr//X/7PuhPr/07vz9P+5+78XtzTZ/wAAANBB7v7vxy32PwAAAEwjd/8P4hb7HwAAAKaRu/+Hccs8+/++Ny/8Sf3/sff/Z34T6f/1/7sh+//Th96p/z+g/98v/b/+f4n+X/+/5ffr//X/rBvt+/+5+38Ut8yz/wEAAKC93P0/jlvsfwAAAJhG7v6fxC32PwAAAEwjd/9P45Ym+1//7/v/+v9O/f89r9j5/r/+/zLT/+v/l+j/9f9bfr/+X//PutH6/9z9P4tbmux/AAAA6CB3/8/jFvsfAAAAppG7/xdxi/0PAAAA08jd/8u4pcn+1//r//X/rfr/Q+/X/x/Q/++X/l//v0T/r//f8vuz/8/fd/p//T//a7T+P3f/r+KWJvsfAAAAOsjd/+u4xf4HAACAaeTu/03cYv8DAADANHL3/zZuabL/9f/6f/1/m/7/trvtdvp//f9lN1D/f+VRfh39/wH9/2H6f/2/7//r/1k2Wv+fu/+WuKXJ/gcAAIAOcvf/Lm6x/wEAAGAauft/H7fY/wAAADCN3P23xi1N9r/+X/8/Zf9/J/2/7//r/0cxUP9/JPr/A/r/w/T/+n/9v/6fZaP1/7n7/xC3NNn/AAAA0EHu/j/GLfY/AAAATCN3/5/iFvsfAAAAppG7/89xS5P9r//X/198/3+6/rqH7f99/1//r/8fxrz9/5X6f/3/kfv/G248+LH+f5vv1//r/1k3Wv+fu/8vcUuT/Q8AAAAd5O7/a9xi/wMAAMA0cvf/LW6x/wEAAGAaufv/Hrc02f/T9P93v+vB1f/7/r/+X/8fP9f/j2He/t/3//X/vv+v/9f/6/9ZM1r/n7v/H3FLk/0PAAAAHeTu/2fcYv8DAADANHL3/ytusf8BAABgGrn7/x23NNn/0/T/Sf+v/9f/6//j5/r/Mej/9f9L9P/6/y2/X/+v/2fdaP1/7v7/BAAA//9RaTCH")
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20000, 0x0, 0x0, 0x0, &(0x7f0000000100))
mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0)
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

1m10.328750179s ago: executing program 1 (id=4743):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x1, 0x21b, &(0x7f0000000300)="$eJzs2j+LHGUcB/DfnJHEC5dd8R8JiA9aqM2Q3doihyQgLiiaFaIgmXizuuy4e+wsBytirtLWl2AtlnaCpLS5xldgYXfNlSnEkWRjcnesxSHein4+zXzhmS88D8/w8BSz/9rXn44GdT4oZrGWZbF2JXbjbhbtWIs/7carL9/46fl3b7z/5mavd/WdlK5tXu90U0oXXvjxg8+/e/HO7Px731/44WzstT/cP+j+uvfs3sX9369/MqzTsE7jySwV6dZkMituVWXaGtajPKW3q7KoyzQc1+X0yPigmmxvz1Mx3tpY356WdZ2K8TyNynmaTdJsOk/Fx8VwnPI8Txvrwd/R//Zu08RB8/jNaJrmiW/i/J3Y+CVakT2ZsqeuZM/czJ7bzS4eNE1r1VPlH2H//98OHernIqqvdvo7/cVzMb45iGFUUcblaMVvce8zeWCRr73Ru3o53deOL6vbD/q3d/qPHe13ohXt5f3Oop+O9s/G+uF+N1rx9PJ+d2n/XLzy0qF+Hq34+aOYRBVbca/7qP9FJ6XX3+od61+6/x4AwH9Nnh5aen/L878aX/RPcD88dr86E5fOrHbtRNTzz0ZFVZVTQRCEh2HVJxOn4dGmr3omAAAAAAAAAAAAnMRp/E646jUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/bn8EAAD//xrx1cI=")
syz_emit_ethernet(0x1e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180)

54.078836537s ago: executing program 40 (id=4743):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="757466383d312c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f72746e616d653d77696e39352c000f3556feecb6412e00c80bdee16891f8bf67c9f201996782a86d4bab33b4f23383380e4ccafc9da9def41b05c1dfb2cfa24e43aedf5536d3bce06ddda97c586bc37fab5366b1ab6fee95cc224e56e681e82dd4dbbde3785fdd0fc4e7df753a0e2658aa5e88e1d38366c7908a7b2b678ee4b4bfc7aafa2101c157745926241af5ac30189eced78c1611b972d03bfef046f4adcada230ef0ac02ede79fb7d92a8354670c01cb80361c1fde2cef3204a182323c318e10ef11cb24c435d589b17a396377800f"], 0x1, 0x21b, &(0x7f0000000300)="$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")
syz_emit_ethernet(0x1e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180)

4.740197728s ago: executing program 2 (id=5491):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x34}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x36, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}, @local}, {{0xc00, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"4adcda08f6e83e2aa00e133f88a8"}}}}, 0x44)

4.550863605s ago: executing program 2 (id=5492):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvlan1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)

4.548648073s ago: executing program 2 (id=5493):
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03)
ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000140)={0x0, 0x800, 0x1, '\x00', &(0x7f0000000000)=0xff})

4.473909668s ago: executing program 2 (id=5494):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x2000, 0x20)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0)
chdir(&(0x7f0000000300)='./file0\x00')
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

4.471880209s ago: executing program 2 (id=5495):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x818, &(0x7f00000002c0)={[{@nossd_spread}, {@subvolid={'subvolid', 0x3d, 0x1}}, {@fatal_errors_bug}, {@notreelog}, {@noflushoncommit}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x25, 0x35, 0x38, 0x39, 0x33, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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")

4.29741408s ago: executing program 2 (id=5497):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb0100180000000000000002"], 0x0, 0x1a, 0x0, 0x6, 0x5}, 0x28)

4.108514863s ago: executing program 41 (id=5497):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb0100180000000000000002"], 0x0, 0x1a, 0x0, 0x6, 0x5}, 0x28)

621.474709ms ago: executing program 9 (id=5526):
r0 = socket(0x2, 0x80805, 0x0)
close(0x3)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000008c0)=@sack_info={r5, 0x47, 0x6}, 0xc)

621.058526ms ago: executing program 0 (id=5527):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x58, r1, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

616.759929ms ago: executing program 9 (id=5528):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000004c0)={0x2, @pix={0x3f3, 0x76, 0x37303250, 0x0, 0x6, 0x6, 0x7, 0x3, 0x1, 0x4}})

535.23628ms ago: executing program 9 (id=5529):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0xc, 0x0, 0x0)

467.113424ms ago: executing program 0 (id=5530):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8932, &(0x7f0000000000)={'veth1_macvtap\x00'})

371.732633ms ago: executing program 9 (id=5531):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x2c, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30, 0x1, {0x0, 0x81000000}}]]}, {0x10}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0)

321.386302ms ago: executing program 0 (id=5532):
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8000, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}]}})

245.854141ms ago: executing program 0 (id=5533):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

103.144124ms ago: executing program 9 (id=5534):
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x0, 0x9}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}})

54.37788ms ago: executing program 0 (id=5535):
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000001d0000220c000600010000000100000018002f7d08000100000000000c0002"], 0x38}}, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

249.225µs ago: executing program 9 (id=5536):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000000)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@bsdgroups}, {@usrjquota, 0x22}, {@nojournal_checksum}, {@errors_remount}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$eJzs3DtvHEUcAPD/rh+JSYxNeOYBMQSExcOOnWdBAwIpDRIIhEJpbCcKcRIUGymJLGwQCiXKJwBKJD4BFTQIqEC0IFqEFCE3CRRo0d7tOWff+fyIz0dyv5909uzu7M7Mzoy9M6O9ANrWQP4jidgZEb9GRF95c2mEgfKvmwuz438vzI4nkWVv/JWU4t1YmB2vRK2ct6PYGEwj0o+T2Fsn3enLV86OTU1NXiy2h2fOvTc8ffnK82fOjZ2ePD15fvT48cOHeo4dHT2yKeXszfO654ML+3afePvaq+Mnr73zw1d5frPi+PaaM/rXmUJHzZ6BGFh6L6s8tc6r/9/1VoWTzhZmhHXJW21eXV2l/t8XHXGr8vrilY9amjmgqbIsy7bV7F38XzafVUuS8gnAXSLRpaFNVf7R31jIR6qz49Xj+XZw/cUojYDyct8sPuUjnZHmY/j+8tioWR6IiJPz/3yWf2LZfAoAQDN8kz//PFd+7qh8ykfSeKgq3r3F2lB/RNwXEbsi4v7i+eXBiFLchyPikSVXn1s1/YFl27XPPz/3bLhwa5A//71QrG0tff5LK1H6O4qt3lL5u5JTZ6YmDxb3ZDC6tuXbI7WXXpxW+/blXz5dKf2Bque//JOnX3kWLPLxZ+eyCbqJsZmx2y13xfUPS1N6c7XlTxZXAvKRwe6I2LOB6+f37MwzX+6re7ByixuWv4FNWGfKvoh4ulz/87Gs/LnuIlR/fXLk2NHRI8PbY2ry4HClVdT68aerrxXBmqHE6vXfXHn937PY/su/y0cWVy77k+r12un1p3H1t09WHNNstP13J2+Wwt3FvktjMzMXRyK6k/na/aO3zr001rMkfl7+wQP1+/+uiH8/L87bGxF5I340Ih6LiP1F3h+PiCci4kCD8n//0pPv1qv7tZW/ufLyT9T9+7dS/a8/0HH2u69XSn9t9X+4FBos9kyMzdQu1y+z1gzezr0DAACAO8X+iNgZSTpUTMftjDQdGorYsTiDMj3z7KkL75+fKL8j0B9daWWmq69qPnSkmBvOt/OzRqu28+OHSvPGWZZlPaXtofELU72tLTq0vR0r9P/cH7WvtAB3m3Wto630RhtwR9r4Onq2qfkAtp73taF96f/Qvtbc/5v5JhzQEvX6/1zEzRZkBdhi9fr/Wy3IB7D1jP+hfen/0L5q+3/aknwAW+p23utvFNh1okGcpLM5ia4cSKPxtwD0R6zvgr+nEZuTw45NLWnPGup0e2xGWpGuGqezwRcxvF57w/PoW9Qk0q1tfo0D2yJilda72NjmKoErzc5Yq/8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbI7/AgAA//+7BdPO")

0s ago: executing program 0 (id=5537):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file5\x00', 0x1000, 0x400720)
r0 = landlock_create_ruleset(&(0x7f0000000080)={0x4a20, 0x3, 0x2}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2)

kernel console output (not intermixed with test programs):

59166][T20820] bcachefs (loop9): finished waiting for writes to stop
[  435.165330][T20820] bcachefs (loop9): flushing journal and stopping allocators, journal seq 3
[  435.474039][T20820] bcachefs (loop9): flushing journal and stopping allocators complete, journal seq 3
[  435.551140][T20820] bcachefs (loop9): clean shutdown complete, journal seq 4
[  435.562098][T23944] netlink: 188 bytes leftover after parsing attributes in process `syz.7.3860'.
[  435.595910][T20820] bcachefs (loop9): marking filesystem clean
[  435.717950][T20820] bcachefs (loop9): shutdown complete
[  436.011880][ T5237] Bluetooth: hci1: unexpected event for opcode 0x7696
[  436.074378][T23977] netlink: 596 bytes leftover after parsing attributes in process `syz.7.3871'.
[  436.080417][T23977] program syz.7.3871 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  436.346879][T23995] loop7: detected capacity change from 0 to 4096
[  436.350409][T23995] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  436.387031][T23995] ntfs3(loop7): ino=1a, mi_enum_attr
[  436.388923][T23995] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  436.391537][T23995] ntfs3(loop7): ino=1a, mi_enum_attr
[  436.394209][T23995] ntfs3(loop7): Failed to initialize $Extend/$Reparse.
[  437.244562][T24037] MPI: mpi too large (107144 bits)
[  437.984858][T24058] loop9: detected capacity change from 0 to 256
[  438.010559][T24058] FAT-fs (loop9): error, fat_free: invalid cluster chain (i_pos 198)
[  438.013451][T24058] FAT-fs (loop9): Filesystem has been set read-only
[  438.016438][T24058] FAT-fs (loop9): error, fat_free: invalid cluster chain (i_pos 198)
[  438.020987][T24058] FAT-fs (loop9): error, fat_free: invalid cluster chain (i_pos 198)
[  438.026685][T24058] FAT-fs (loop9): error, fat_free: invalid cluster chain (i_pos 198)
[  438.030402][T24058] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 198)
[  438.039395][T24058] FAT-fs (loop9): error, fat_free: invalid cluster chain (i_pos 198)
[  438.177607][T24070] loop9: detected capacity change from 0 to 8
[  438.217278][T24075] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  438.252438][T24070] SQUASHFS error: zlib decompression failed, data probably corrupt
[  438.267142][T24070] SQUASHFS error: Failed to read block 0x9b: -5
[  438.269707][T24070] SQUASHFS error: Unable to read metadata cache entry [99]
[  438.272866][T24070] SQUASHFS error: Unable to read inode 0x127
[  438.336373][T24084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3902'.
[  439.684180][T24121] netlink: 'syz.0.3915': attribute type 8 has an invalid length.
[  439.709600][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  439.941433][T24135] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3921'.
[  440.160460][T24151] netlink: 'syz.0.3927': attribute type 1 has an invalid length.
[  440.164954][T24151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3927'.
[  440.373089][T24175] virtiofs: Unknown parameter 'always'
[  440.460162][T24182] loop7: detected capacity change from 0 to 1024
[  440.472559][T24184] netlink: 'syz.0.3937': attribute type 74 has an invalid length.
[  440.500944][T24182] hfsplus: bad catalog entry type
[  440.552587][T22232] hfsplus: b-tree write err: -5, ino 4
[  440.759651][T24210] loop7: detected capacity change from 0 to 256
[  440.775545][T24210] exfat: Deprecated parameter 'namecase'
[  440.778149][T24210] exfat: Deprecated parameter 'utf8'
[  440.803793][T24210] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d)
[  441.293221][ T6022] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  441.366405][T24251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3956'.
[  441.447223][ T6022] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  441.451528][ T6022] usb 10-1: config 0 has no interfaces?
[  441.456299][ T6022] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  441.460287][ T6022] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  441.470048][ T6022] usb 10-1: config 0 descriptor??
[  441.684413][T24227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  441.689024][T24227] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  441.694228][ T5237] Bluetooth: hci2: adv larger than maximum supported
[  441.694247][ T5237] Bluetooth: hci2: Malformed LE Event: 0x0d
[  441.695199][ T6022] usb 10-1: USB disconnect, device number 9
[  443.725293][T24318] loop9: detected capacity change from 0 to 256
[  443.739246][T24318] exFAT-fs (loop9): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d)
[  443.744521][T24318] exFAT-fs (loop9): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  443.837025][T24332] syz_tun: entered allmulticast mode
[  443.846675][T24332] dvmrp8: entered allmulticast mode
[  443.870287][T24331] syz_tun: left allmulticast mode
[  443.872267][T24331] dvmrp8: left allmulticast mode
[  444.117738][T24357] loop9: detected capacity change from 0 to 512
[  444.121317][T24357] EXT4-fs: Ignoring removed i_version option
[  444.124107][T24357] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  444.140367][T24357] EXT4-fs (loop9): 1 truncate cleaned up
[  444.143900][T24357] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  444.178755][T20820] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.280255][T24370] loop9: detected capacity change from 0 to 128
[  444.285950][T24370] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[  444.296271][T24370] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  445.495359][T24404] loop9: detected capacity change from 0 to 256
[  445.501750][T24404] exfat: Deprecated parameter 'namecase'
[  445.507189][T24404] exfat: Deprecated parameter 'utf8'
[  445.512390][T24404] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d)
[  446.012295][    T9] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  446.169214][    T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  446.174328][    T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  446.178699][    T9] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  446.183636][    T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.189840][    T9] usb 10-1: config 0 descriptor??
[  446.603755][    T9] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0
[  446.606951][    T9] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0
[  446.623463][    T9] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0D8C:0022.000B/input/input23
[  446.699201][    T9] cm6533_jd 0003:0D8C:0022.000B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.9-1/input0
[  446.773398][T24487] loop7: detected capacity change from 0 to 1024
[  446.783620][T24487] EXT4-fs: Ignoring removed oldalloc option
[  446.792468][T24487] EXT4-fs: Ignoring removed bh option
[  446.809623][T24487] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  446.819719][    T9] usb 10-1: USB disconnect, device number 10
[  447.680973][T16697] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  447.927622][T24526] loop7: detected capacity change from 0 to 32768
[  447.941615][T24526] read_mapping_page failed!
[  449.384596][T24576] loop9: detected capacity change from 0 to 32768
[  449.390609][T24576] (syz.9.4044,24576,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  449.398309][T24576] (syz.9.4044,24576,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  449.419481][T24576] (syz.9.4044,24576,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  449.427207][T24576] JBD2: Ignoring recovery information on journal
[  449.476120][T24576] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  449.516823][T24576] (syz.9.4044,24576,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC.
[  449.523979][T24576] (syz.9.4044,24576,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae
[  449.529305][T24576] (syz.9.4044,24576,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  449.534548][T24576] (syz.9.4044,24576,0):ocfs2_quota_read:201 ERROR: status = -5
[  449.537805][T24576] Quota error (device loop9): find_tree_dqentry: Can't read quota tree block 5
[  449.543729][T24576] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0
[  449.547730][T24576] (syz.9.4044,24576,0):ocfs2_acquire_dquot:890 ERROR: status = -5
[  449.553080][T24576] (syz.9.4044,24576,0):ocfs2_mknod:317 ERROR: status = -5
[  449.556150][T24576] (syz.9.4044,24576,0):ocfs2_mknod:505 ERROR: status = -5
[  449.559100][T24576] (syz.9.4044,24576,0):ocfs2_mkdir:661 ERROR: status = -5
[  449.650324][T20820] ocfs2: Unmounting device (7,9) on (node local)
[  449.899294][T24594] loop9: detected capacity change from 0 to 32768
[  449.904509][T24594] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.4049 (24594)
[  449.915662][T24594] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  449.919214][T24594] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm
[  449.924278][T24594] BTRFS info (device loop9): disk space caching is enabled
[  449.926743][T24594] BTRFS warning (device loop9): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  450.024861][T24594] BTRFS info (device loop9): rebuilding free space tree
[  450.046089][T24594] BTRFS info (device loop9): disabling free space tree
[  450.049117][T24594] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  450.054909][T24594] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  450.081282][   T33] audit: type=1800 audit(1755053681.250:243): pid=24594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4049" name="bus" dev="loop9" ino=263 res=0 errno=0
[  450.189583][T20820] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  450.720913][T24623] loop9: detected capacity change from 0 to 32768
[  450.725049][T24623] bcachefs (/dev/loop9): error validating superblock: Invalid superblock section members_v2: device 0: bucket size 0 smaller than block size 8
[  450.725049][T24623] members_v2 (size 152):
[  450.725049][T24623] Device:                        0
[  450.725049][T24623]   Label:                       (none)
[  450.725049][T24623]   UUID:                        7af6772b-00de-4159-84cd-1faead05aceb
[  450.725049][T24623]   Size:                        0
[  450.725049][T24623]   read errors:                 0
[  450.725049][T24623]   write errors:                0
[  450.725049][T24623]   checksum errors:             0
[  450.725049][T24623]   seqread iops:                0
[  450.725049][T24623]   seqwrite iops:               0
[  450.725049][T24623]   randread iops:               0
[  450.725049][T24623]   randwrite iops:              0
[  450.725049][T24623]   Bucket size:                 0
[  450.725049][T24623]   First bucket:                0
[  450.725049][T24623]   Buckets:                     128
[  450.725049][T24623]   Last mount:                  1714681267
[  450.725049][T24623]   Last superblock write:       42
[  450.725049][T24623]   State:                       rw
[  450.725049][T24623]   Data allowed:                journal,btree,user
[  450.725049][T24623]   Has data:                    btree
[  450.725049][T24623]   Btree allocated bitmap blocksize:128
[  450.725049][T24623]   Btree allocated bitmap:      0000000000000000000001000010000010011000000000000000000000000000
[  450.725049][T24623]   Durability:        
[  450.725134][T24623] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  450.939812][T24641] loop9: detected capacity change from 0 to 4096
[  452.094069][T24676] loop7: detected capacity change from 0 to 32768
[  452.119640][T24676] JBD2: Ignoring recovery information on journal
[  452.137275][T24687] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4070'.
[  452.141105][T24687] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4070'.
[  452.146641][T24687] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4070'.
[  452.181642][T24676] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode.
[  452.247003][T16697] ocfs2: Unmounting device (7,7) on (node local)
[  452.393475][T24705] loop7: detected capacity change from 0 to 4096
[  452.397433][T24705] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512).
[  452.408998][T24705] ntfs3(loop7): ino=19, mi_enum_attr
[  452.411177][T24705] ntfs3(loop7): ino=19, mi_enum_attr
[  452.413776][T24705] ntfs3(loop7): Failed to initialize $Extend/$ObjId.
[  452.524285][T24720] loop7: detected capacity change from 0 to 164
[  452.534973][T24720] Unable to read rock-ridge attributes
[  452.541071][T24720] ISOFS: unable to read i-node block
[  452.928283][T24746] loop7: detected capacity change from 0 to 32768
[  452.943069][T24746] xfs: Unknown parameter 'smackfstransmute'
[  453.146958][T24774] wireguard0: entered promiscuous mode
[  453.154160][T24774] wireguard0: entered allmulticast mode
[  453.270316][ T6023] IPVS: starting estimator thread 0...
[  453.322911][T24785] loop9: detected capacity change from 0 to 40427
[  453.325674][T24785] F2FS-fs: heap/no_heap options were deprecated
[  453.328268][T24785] F2FS-fs (loop9): Mismatch start address, segment0(0) cp_blkaddr(512)
[  453.331006][T24785] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  453.335084][T24785] F2FS-fs (loop9): invalid crc value
[  453.372030][T24787] IPVS: using max 46 ests per chain, 110400 per kthread
[  453.378343][T24785] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  453.382989][T24785] F2FS-fs (loop9): checkpoint=disable on readonly fs
[  453.926224][T24821] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4103'.
[  453.930940][T24821] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  454.676720][T24835] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4110'.
[  454.681597][T24835] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4110'.
[  454.798726][T24844] loop9: detected capacity change from 0 to 512
[  454.829247][T24844] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  454.835867][T24844] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  454.850041][   T33] audit: type=1800 audit(1755053686.021:244): pid=24844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4113" name="file1" dev="loop9" ino=15 res=0 errno=0
[  454.858581][   T33] audit: type=1800 audit(1755053686.031:245): pid=24844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4113" name="file2" dev="loop9" ino=16 res=0 errno=0
[  454.866694][   T33] audit: type=1800 audit(1755053686.041:246): pid=24844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4113" name="file1" dev="loop9" ino=15 res=0 errno=0
[  455.013497][T20820] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  455.577232][T24871] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4121'.
[  455.580444][T24871] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4121'.
[  456.508524][T24914] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  457.016402][T24958] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4152'.
[  458.240430][T25024] netlink: 'syz.9.4175': attribute type 21 has an invalid length.
[  458.252441][T25024] netlink: 164 bytes leftover after parsing attributes in process `syz.9.4175'.
[  458.608036][T25035] loop9: detected capacity change from 0 to 64
[  458.657087][T25035] syz.9.4178: attempt to access beyond end of device
[  458.657087][T25035] loop9: rw=2049, sector=268435468, nr_sectors = 2 limit=64
[  460.107179][T25069] loop9: detected capacity change from 0 to 4096
[  460.121595][T25069] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512).
[  460.139021][T25069] ntfs3(loop9): ino=19, mi_enum_attr
[  460.141300][T25069] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[  460.156440][T25069] ntfs3(loop9): failed to convert "c46c" to cp855
[  460.162401][T25069] ntfs3(loop9): ino=20, mi_enum_attr
[  460.239689][T25079] loop9: detected capacity change from 0 to 8
[  460.257235][T25079] SQUASHFS error: xz decompression failed, data probably corrupt
[  460.260037][T25079] SQUASHFS error: Failed to read block 0x108: -5
[  460.263601][T25079] SQUASHFS error: Unable to read metadata cache entry [106]
[  460.266536][T25079] SQUASHFS error: Unable to read inode 0x11f
[  461.412994][T25116] loop9: detected capacity change from 0 to 1024
[  461.459376][T25116] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  461.467386][T25116] ext4 filesystem being mounted at /281/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  461.501440][T20820] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  463.204557][T25146] loop7: detected capacity change from 0 to 32768
[  463.224142][T25146] XFS: attr2 mount option is deprecated.
[  463.270648][T25146] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  463.314152][T25146] XFS (loop7): Ending clean mount
[  463.343779][T25146] XFS (loop7): Quotacheck needed: Please wait.
[  463.428657][T25146] XFS (loop7): Quotacheck: Done.
[  463.530991][T16697] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  463.755004][T25179] trusted_key: encrypted_key: insufficient parameters specified
[  464.314498][T25191] loop9: detected capacity change from 0 to 32768
[  464.339778][T25191] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.4220 (25191)
[  464.351126][T25191] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  464.354908][T25191] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm
[  464.358336][T25191] BTRFS info (device loop9): using free-space-tree
[  464.398647][T20820] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  465.030992][T25225] loop7: detected capacity change from 0 to 32768
[  465.155770][T25236] loop9: detected capacity change from 0 to 1024
[  465.174032][T25236] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  465.221615][T20820] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  465.694572][ T6023] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  465.871984][ T6023] usb 10-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[  465.882114][ T6023] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  465.885153][ T6023] usb 10-1: Product: syz
[  465.887032][ T6023] usb 10-1: Manufacturer: syz
[  465.888880][ T6023] usb 10-1: SerialNumber: syz
[  465.903771][ T6023] usb 10-1: config 0 descriptor??
[  466.799167][ T6023] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  466.812085][ T6023] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9
[  466.816730][ T6023] asix 10-1:0.0: probe with driver asix failed with error -71
[  466.822085][ T6023] usb 10-1: USB disconnect, device number 11
[  466.827963][T25286] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  467.140753][ T5237] Bluetooth: hci2: command 0x0406 tx timeout
[  467.660613][T25348] bridge0: entered allmulticast mode
[  467.879843][T25362] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4267'.
[  468.571440][T25353] orangefs_mount: mount request failed with -4
[  468.795779][T25412] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4275'.
[  468.798890][T25412] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4275'.
[  468.807138][T25412] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4275'.
[  468.812310][T25412] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4275'.
[  469.394296][T25424] netlink: 'syz.9.4280': attribute type 1 has an invalid length.
[  469.396909][T25424] netlink: 'syz.9.4280': attribute type 3 has an invalid length.
[  469.404801][T25424] netlink: 224 bytes leftover after parsing attributes in process `syz.9.4280'.
[  469.431015][T25426] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  471.358173][T25466] loop9: detected capacity change from 0 to 1024
[  471.416591][ T4497] hfsplus: b-tree write err: -5, ino 3
[  471.764520][T25494] loop7: detected capacity change from 0 to 128
[  471.788901][T25494] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  471.796540][T25494] ext4 filesystem being mounted at /479/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  471.804900][T25494] EXT4-fs warning (device loop7): verify_group_input:137: Cannot add at group 3 (only 1 groups)
[  471.830867][T16697] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  473.993652][   T33] audit: type=1326 audit(1755053705.163:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25576 comm="syz.0.4327" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e758ebe9 code=0x7ffc0000
[  474.029730][   T33] audit: type=1326 audit(1755053705.163:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25576 comm="syz.0.4327" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e758ebe9 code=0x7ffc0000
[  474.041115][   T33] audit: type=1326 audit(1755053705.173:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25576 comm="syz.0.4327" exe="/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fb7e758ebe9 code=0x7ffc0000
[  474.050690][   T33] audit: type=1326 audit(1755053705.173:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25576 comm="syz.0.4327" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e758ebe9 code=0x7ffc0000
[  474.060094][   T33] audit: type=1326 audit(1755053705.173:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25576 comm="syz.0.4327" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e758ebe9 code=0x7ffc0000
[  474.113278][   T33] audit: type=1326 audit(1755053705.283:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25569 comm="syz.7.4324" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68cb8ebe9 code=0x7fc00000
[  474.371213][T25597] random: crng reseeded on system resumption
[  475.707142][T25611] loop9: detected capacity change from 0 to 32768
[  475.720627][T25611] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.4339 (25611)
[  475.736335][T25611] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  475.741047][T25611] BTRFS info (device loop9): using crc32c (crc32c-lib) checksum algorithm
[  475.744771][T25611] BTRFS info (device loop9): using free-space-tree
[  475.866572][T20820] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  476.206767][T25660] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4348'.
[  476.632737][ T6022] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  476.798921][ T6022] usb 10-1: Using ep0 maxpacket: 16
[  476.809439][ T6022] usb 10-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  476.813974][ T6022] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  476.824515][ T6022] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  476.828247][ T6022] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  476.832273][ T6022] usb 10-1: Product: syz
[  476.834081][ T6022] usb 10-1: Manufacturer: syz
[  476.836162][ T6022] usb 10-1: SerialNumber: syz
[  477.097465][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  477.107686][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  477.116099][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  477.120899][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  477.124070][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  477.126400][T25699] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  477.130925][T25699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4361'.
[  477.254847][ T6022] usb 10-1: 0:2 : does not exist
[  477.464102][T25692] chnl_net:caif_netlink_parms(): no params data found
[  477.673678][ T6022] usb 10-1: 5:0: failed to get current value for ch 0 (-22)
[  477.712990][ T6022] usb 10-1: USB disconnect, device number 12
[  477.785775][ T5959] udevd[5959]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  477.823957][T25692] bridge0: port 1(bridge_slave_0) entered blocking state
[  477.827532][T25692] bridge0: port 1(bridge_slave_0) entered disabled state
[  477.836201][T25692] bridge_slave_0: entered allmulticast mode
[  477.871914][T25692] bridge_slave_0: entered promiscuous mode
[  477.987018][T25692] bridge0: port 2(bridge_slave_1) entered blocking state
[  478.007225][T25692] bridge0: port 2(bridge_slave_1) entered disabled state
[  478.048942][T25692] bridge_slave_1: entered allmulticast mode
[  478.121516][T25692] bridge_slave_1: entered promiscuous mode
[  478.198015][T25692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  478.203721][T25692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  478.232074][T25692] team0: Port device team_slave_0 added
[  478.235784][T25692] team0: Port device team_slave_1 added
[  478.264269][T25692] batman_adv: batadv0: Adding interface: batadv_slave_0
[  478.266701][T25692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  478.275452][T25692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  478.280318][T25692] batman_adv: batadv0: Adding interface: batadv_slave_1
[  478.282667][T25692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  478.292574][T25692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  478.343330][T25692] hsr_slave_0: entered promiscuous mode
[  478.345805][T25692] hsr_slave_1: entered promiscuous mode
[  478.348072][T25692] debugfs: 'hsr0' already exists in 'hsr'
[  478.358522][T25692] Cannot create hsr debugfs directory
[  479.175857][T26097] netlink: 'syz.0.4374': attribute type 14 has an invalid length.
[  479.229068][ T5237] Bluetooth: hci1: command tx timeout
[  479.333985][T26120] netlink: 'syz.0.4377': attribute type 83 has an invalid length.
[  479.504345][T25692] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  479.509949][T25692] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  479.514796][T25692] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  479.522536][T25692] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  479.615337][T25692] 8021q: adding VLAN 0 to HW filter on device bond0
[  479.644014][T25692] 8021q: adding VLAN 0 to HW filter on device team0
[  479.656050][   T77] bridge0: port 1(bridge_slave_0) entered blocking state
[  479.658943][   T77] bridge0: port 1(bridge_slave_0) entered forwarding state
[  479.671238][   T77] bridge0: port 2(bridge_slave_1) entered blocking state
[  479.674085][   T77] bridge0: port 2(bridge_slave_1) entered forwarding state
[  479.867494][T25692] 8021q: adding VLAN 0 to HW filter on device batadv0
[  479.964150][T25692] veth0_vlan: entered promiscuous mode
[  479.979321][T25692] veth1_vlan: entered promiscuous mode
[  479.994585][T25692] veth0_macvtap: entered promiscuous mode
[  480.001338][T25692] veth1_macvtap: entered promiscuous mode
[  480.015755][T25692] batman_adv: batadv0: Interface activated: batadv_slave_0
[  480.043419][T25692] batman_adv: batadv0: Interface activated: batadv_slave_1
[  480.064530][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  480.068819][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  480.072392][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  480.096196][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  480.152676][T22225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  480.155448][T22225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  480.178590][   T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  480.181807][   T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  480.560012][T26202] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4386'.
[  480.657221][T26206] loop1: detected capacity change from 0 to 1764
[  480.717788][T26206] iso9660: Corrupted directory entry in block 2 of inode 1920
[  480.747018][T26213] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  481.124058][T26239] loop1: detected capacity change from 0 to 512
[  481.152892][T26239] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  481.299087][ T5237] Bluetooth: hci1: command tx timeout
[  481.471988][T26266] netlink: 964 bytes leftover after parsing attributes in process `syz.0.4401'.
[  481.530898][T26272] syzkaller1: entered promiscuous mode
[  481.533176][T26272] syzkaller1: entered allmulticast mode
[  481.725009][T26301] loop9: detected capacity change from 0 to 512
[  481.760369][T26301] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  481.772119][T26301] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[  481.775121][T26301] System zones: 0-2, 18-18, 34-34
[  481.779887][T26301] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  481.784965][T26301] ext4 filesystem being mounted at /340/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  481.820984][T20820] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  482.298390][    T9] usb 10-1: new full-speed USB device number 13 using dummy_hcd
[  482.413721][T26344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4412'.
[  482.417300][T26344] netlink: 'syz.0.4412': attribute type 1 has an invalid length.
[  482.423889][T26344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4412'.
[  482.481759][    T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  482.485663][    T9] usb 10-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[  482.497491][    T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  482.506665][    T9] usb 10-1: config 0 descriptor??
[  482.946088][    T9] kye 0003:0458:5013.000C: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  482.991389][    T9] kye 0003:0458:5013.000C: hidraw0: USB HID va9.2b Device [HID 0458:5013] on usb-dummy_hcd.9-1/input0
[  482.996043][    T9] kye 0003:0458:5013.000C: tablet-enabling feature report not found
[  483.006325][    T9] kye 0003:0458:5013.000C: tablet enabling failed
[  483.020846][T26383] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  483.154418][ T6023] usb 10-1: USB disconnect, device number 13
[  483.378014][ T5966] Bluetooth: hci1: command tx timeout
[  483.393656][T26418] loop1: detected capacity change from 0 to 128
[  483.410837][T26418] syz.1.4426: attempt to access beyond end of device
[  483.410837][T26418] loop1: rw=2049, sector=145, nr_sectors = 3 limit=128
[  483.646796][   T33] audit: type=1326 audit(1755053714.814:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26431 comm="syz.1.4428" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30658ebe9 code=0x7fc00000
[  483.846287][T26463] loop9: detected capacity change from 0 to 512
[  483.864533][T26463] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  483.877348][T26463] ext4 filesystem being mounted at /347/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  483.906166][T20820] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  484.009481][T26484] loop9: detected capacity change from 0 to 1024
[  484.203863][T26507] 9pnet_fd: Insufficient options for proto=fd
[  484.362945][   T33] audit: type=1326 audit(1755053715.524:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26431 comm="syz.1.4428" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd306585ba7 code=0x7fc00000
[  484.420096][T26531] netlink: 'syz.9.4454': attribute type 1 has an invalid length.
[  484.466448][T26531] 8021q: adding VLAN 0 to HW filter on device bond1
[  484.542231][T26572] futex_wake_op: syz.0.4457 tries to shift op by 36; fix this program
[  484.550129][T26531] bond1: (slave veth0_to_bond): making interface the new active one
[  484.554533][T26531] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  484.560211][T26570] loop1: detected capacity change from 0 to 1764
[  484.848850][T26594] loop1: detected capacity change from 0 to 2048
[  484.873350][T26597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4464'.
[  484.899404][T26597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4464'.
[  485.035484][T26623] IPv6: sit2: Disabled Multicast RS
[  485.458155][ T5966] Bluetooth: hci1: command tx timeout
[  485.611262][T26672] netlink: 56 bytes leftover after parsing attributes in process `syz.9.4488'.
[  485.678362][T26675] loop9: detected capacity change from 0 to 2048
[  485.682394][T26675] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=3932051, location=3932051
[  485.691310][T26675] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  485.750062][T26681] loop9: detected capacity change from 0 to 512
[  485.753592][T26681] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  485.763116][T26681] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  485.769290][T26681] ext4 filesystem being mounted at /360/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  485.793504][T20820] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  486.404163][T26694] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4493'.
[  486.817723][   T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  486.980728][   T10] usb 2-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7
[  486.983880][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  486.990347][   T10] usb 2-1: config 0 descriptor??
[  486.996219][   T10] gspca_main: mars-2.14.0 probing 093a:050f
[  487.031666][T26753] loop9: detected capacity change from 0 to 32768
[  487.042201][T26753] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.4500 (26753)
[  487.055509][T26753] BTRFS info (device loop9): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  487.061413][T26753] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm
[  487.064544][T26753] BTRFS info (device loop9): using free-space-tree
[  487.209897][   T47] usb 2-1: USB disconnect, device number 8
[  487.246444][T20820] BTRFS info (device loop9): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  487.473741][T26795] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0
[  487.553118][T26798] loop9: detected capacity change from 0 to 4096
[  487.558303][T26798] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512).
[  488.505501][T26851] vivid-003: disconnect
[  488.523675][T26848] vivid-003: reconnect
[  488.551300][ T6022] IPVS: starting estimator thread 0...
[  488.669405][T26857] IPVS: using max 47 ests per chain, 112800 per kthread
[  489.709648][T26894] loop1: detected capacity change from 0 to 128
[  489.791703][T26894] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  489.847530][T26894] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  489.910291][T25692] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  490.278952][T26906] netlink: 'syz.9.4533': attribute type 3 has an invalid length.
[  490.282773][T26906] netlink: 'syz.9.4533': attribute type 1 has an invalid length.
[  490.285635][T26906] netlink: 216 bytes leftover after parsing attributes in process `syz.9.4533'.
[  490.291810][T26906] NCSI netlink: No device for ifindex 33022
[  492.383701][T26965] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4550'.
[  492.395536][T26967] loop9: detected capacity change from 0 to 1024
[  492.416460][T26967] EXT4-fs: Ignoring removed orlov option
[  492.440043][T26967] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  492.460620][T20820] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  492.698442][T26992] loop1: detected capacity change from 0 to 4096
[  492.826212][T27009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4562'.
[  492.881494][T27011] pim6reg1: entered allmulticast mode
[  492.986734][   T98] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  493.406790][   T98] usb 10-1: Using ep0 maxpacket: 8
[  493.420271][   T98] usb 10-1: unable to get BOS descriptor or descriptor too short
[  493.429483][   T98] usb 10-1: config 5 has an invalid interface number: 215 but max is 0
[  493.433779][   T98] usb 10-1: config 5 has no interface number 0
[  493.436034][   T98] usb 10-1: config 5 interface 215 has no altsetting 0
[  493.444214][   T98] usb 10-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba
[  493.450058][   T98] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  493.453098][   T98] usb 10-1: Product: syz
[  493.454493][   T98] usb 10-1: Manufacturer: syz
[  493.456033][   T98] usb 10-1: SerialNumber: syz
[  493.620727][T27040] loop9: detected capacity change from 0 to 8
[  493.624281][ T5968]  loop9: [CUMANA/ADFS] p1 [ADFS] p1
[  493.626193][ T5968] loop9: partition table partially beyond EOD, truncated
[  493.632091][ T5968] loop9: p1 size 81768186 extends beyond EOD, truncated
[  493.676030][   T98] cypress_m8 10-1:5.215: DeLorme Earthmate USB converter detected
[  493.691494][   T98] usb 10-1: DeLorme Earthmate USB converter now attached to ttyUSB0
[  493.700401][   T98] usb 10-1: USB disconnect, device number 14
[  493.711868][   T98] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0
[  493.724539][T27040]  loop9: [CUMANA/ADFS] p1 [ADFS] p1
[  493.736996][   T98] cypress_m8 10-1:5.215: device disconnected
[  493.740089][T27040] loop9: partition table partially beyond EOD, truncated
[  493.754272][T27040] loop9: p1 size 81768186 extends beyond EOD, truncated
[  493.793879][ T5959] udevd[5959]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[  493.842032][ T5959] udevd[5959]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[  494.035744][T27079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4574'.
[  494.510294][T27085] loop9: detected capacity change from 0 to 2048
[  494.565998][T27085] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  494.817818][T27103] loop9: detected capacity change from 0 to 1024
[  494.823815][T27103] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  494.965270][T27113] syz.0.4586 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  495.156191][T27129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4592'.
[  496.005369][T27149] overlayfs: failed to resolve './file0': -2
[  496.481123][T27162] netlink: 165 bytes leftover after parsing attributes in process `syz.1.4605'.
[  496.513792][T27164] netlink: 'syz.1.4606': attribute type 1 has an invalid length.
[  496.518250][T27164] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4606'.
[  496.934910][T27191] loop9: detected capacity change from 0 to 8192
[  496.952890][T27191] syz.9.4615: attempt to access beyond end of device
[  496.952890][T27191] loop9: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  496.958160][T27191] buffer_io_error: 23 callbacks suppressed
[  496.958168][T27191] Buffer I/O error on dev loop9, logical block 57847, async page read
[  496.963238][T27191] syz.9.4615: attempt to access beyond end of device
[  496.963238][T27191] loop9: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  496.970164][T27191] Buffer I/O error on dev loop9, logical block 57847, async page read
[  496.973474][   T33] audit: type=1800 audit(2000000000.640:255): pid=27191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4615" name="file2" dev="loop9" ino=1048713 res=0 errno=0
[  497.018408][T27198] loop9: detected capacity change from 0 to 128
[  497.027610][   T33] audit: type=1800 audit(2000000000.700:256): pid=27198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4616" name="file1" dev="loop9" ino=1048714 res=0 errno=0
[  497.061492][   T33] audit: type=1804 audit(2000000000.720:257): pid=27198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.4616" name="/newroot/400/file0/file1" dev="loop9" ino=1048714 res=1 errno=0
[  497.073275][T27198] syz.9.4616: attempt to access beyond end of device
[  497.073275][T27198] loop9: rw=2049, sector=145, nr_sectors = 896 limit=128
[  497.077943][   T33] audit: type=1800 audit(2000000000.740:258): pid=27198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4616" name="file1" dev="loop9" ino=1048714 res=0 errno=0
[  497.481645][T27218] loop1: detected capacity change from 0 to 2048
[  497.497436][T27220] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  497.515026][   T33] audit: type=1800 audit(2000000001.180:259): pid=27218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4622" name="file1" dev="loop1" ino=15 res=0 errno=0
[  497.703673][T27227] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  497.770711][T27232] netlink: 424 bytes leftover after parsing attributes in process `syz.0.4626'.
[  497.774717][T27232] netlink: 'syz.0.4626': attribute type 1 has an invalid length.
[  498.823165][ T5237] Bluetooth: hci1: command 0x0405 tx timeout
[  499.084583][T27242] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  499.323401][   T33] audit: type=1326 audit(2000000002.990:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27274 comm="syz.1.4640" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30658ebe9 code=0x7ffc0000
[  499.331257][   T33] audit: type=1326 audit(2000000002.990:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27274 comm="syz.1.4640" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30658ebe9 code=0x7ffc0000
[  499.343310][   T33] audit: type=1326 audit(2000000002.990:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27274 comm="syz.1.4640" exe="/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fd30658ebe9 code=0x7ffc0000
[  499.362433][   T33] audit: type=1326 audit(2000000002.990:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27274 comm="syz.1.4640" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30658ebe9 code=0x7ffc0000
[  499.375353][   T33] audit: type=1326 audit(2000000002.990:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27274 comm="syz.1.4640" exe="/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fd30658ebe9 code=0x7ffc0000
[  499.460782][T27284] mkiss: ax0: crc mode is auto.
[  499.704286][T27314] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4651'.
[  499.787824][T27306] loop1: detected capacity change from 0 to 32768
[  499.811398][T27326] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4654'.
[  500.680755][T27373] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4671'.
[  500.845522][T27389] overlayfs: failed to clone upperpath
[  501.262323][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  501.518925][T27395] loop1: detected capacity change from 0 to 40427
[  501.535215][T27395] F2FS-fs: heap/no_heap options were deprecated
[  501.538438][T27395] F2FS-fs (loop1): Image doesn't support compression
[  501.570960][T27395] F2FS-fs (loop1): invalid crc value
[  501.722521][T27395] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  501.730736][T27395] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  501.788861][T25692] syz-executor: attempt to access beyond end of device
[  501.788861][T25692] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  501.797895][T25692] CPU: 0 UID: 0 PID: 25692 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  501.797916][T25692] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  501.797924][T25692] Call Trace:
[  501.797948][T25692]  <TASK>
[  501.797955][T25692]  dump_stack_lvl+0x189/0x250
[  501.797978][T25692]  ? __pfx_dump_stack_lvl+0x10/0x10
[  501.797993][T25692]  ? __pfx_queue_work_on+0x10/0x10
[  501.798005][T25692]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  501.798021][T25692]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  501.798043][T25692]  f2fs_handle_critical_error+0x37c/0x540
[  501.798067][T25692]  f2fs_write_end_io+0x886/0xb60
[  501.798097][T25692]  __submit_merged_bio+0x27a/0x6a0
[  501.798118][T25692]  __submit_merged_write_cond+0x255/0x530
[  501.798139][T25692]  f2fs_write_data_pages+0x261d/0x3000
[  501.798181][T25692]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  501.798206][T25692]  ? arch_stack_walk+0xfc/0x150
[  501.798239][T25692]  ? __mod_zone_page_state+0xd7/0x140
[  501.798264][T25692]  ? folios_put_refs+0x560/0x640
[  501.798288][T25692]  ? __lock_acquire+0xab9/0xd20
[  501.798313][T25692]  ? do_raw_spin_lock+0x121/0x290
[  501.798334][T25692]  ? do_raw_spin_unlock+0x4d/0x240
[  501.798347][T25692]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  501.798368][T25692]  do_writepages+0x32e/0x550
[  501.798391][T25692]  ? do_raw_spin_unlock+0x4d/0x240
[  501.798408][T25692]  filemap_fdatawrite+0x199/0x240
[  501.798424][T25692]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  501.798470][T25692]  ? do_raw_spin_unlock+0x4d/0x240
[  501.798495][T25692]  f2fs_sync_dirty_inodes+0x31f/0x830
[  501.798524][T25692]  f2fs_write_checkpoint+0x95a/0x1df0
[  501.798578][T25692]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  501.798622][T25692]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  501.798639][T25692]  ? kfree+0x18e/0x440
[  501.798657][T25692]  ? kill_f2fs_super+0x298/0x6c0
[  501.798679][T25692]  kill_f2fs_super+0x2c3/0x6c0
[  501.798699][T25692]  ? __pfx_kill_f2fs_super+0x10/0x10
[  501.798712][T25692]  ? radix_tree_delete_item+0x2b6/0x400
[  501.798729][T25692]  ? shrinker_free+0x2ce/0x3e0
[  501.798742][T25692]  deactivate_locked_super+0xbc/0x130
[  501.798757][T25692]  cleanup_mnt+0x425/0x4c0
[  501.798770][T25692]  ? lockdep_hardirqs_on+0x9c/0x150
[  501.798784][T25692]  task_work_run+0x1d4/0x260
[  501.798801][T25692]  ? __pfx_task_work_run+0x10/0x10
[  501.798816][T25692]  ? __x64_sys_umount+0x122/0x160
[  501.798836][T25692]  ? exit_to_user_mode_loop+0x40/0x110
[  501.798857][T25692]  exit_to_user_mode_loop+0xec/0x110
[  501.798873][T25692]  do_syscall_64+0x2bd/0x3b0
[  501.798885][T25692]  ? lockdep_hardirqs_on+0x9c/0x150
[  501.798897][T25692]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  501.798908][T25692]  ? exc_page_fault+0x9f/0xf0
[  501.798922][T25692]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  501.798932][T25692] RIP: 0033:0x7fd30658ff17
[  501.798943][T25692] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  501.798953][T25692] RSP: 002b:00007ffc20461308 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  501.798965][T25692] RAX: 0000000000000000 RBX: 00007fd306611c05 RCX: 00007fd30658ff17
[  501.798972][T25692] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc204613c0
[  501.798981][T25692] RBP: 00007ffc204613c0 R08: 0000000000000000 R09: 0000000000000000
[  501.798988][T25692] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc20462450
[  501.798995][T25692] R13: 00007fd306611c05 R14: 000000000007a75c R15: 00007ffc20462490
[  501.799016][T25692]  </TASK>
[  501.992601][T27447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4690'.
[  502.087095][T25692] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  502.632566][T27467] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4697'.
[  502.689431][T27473] loop1: detected capacity change from 0 to 512
[  502.706749][T27473] EXT4-fs warning (device loop1): ext4_multi_mount_protect:292: Invalid MMP block in superblock
[  503.519560][   T98] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  503.690508][   T98] usb 10-1: Using ep0 maxpacket: 8
[  503.697409][   T98] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[  503.700971][   T98] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  503.705107][   T98] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  503.709250][   T98] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  503.716078][   T98] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  503.721610][   T98] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  503.725689][   T98] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  503.787013][ T6022] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  503.938971][T27555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4726'.
[  503.959294][ T6022] usb 2-1: Using ep0 maxpacket: 32
[  503.963322][ T6022] usb 2-1: config 0 has an invalid interface number: 255 but max is 0
[  503.967366][ T6022] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  503.979464][ T6022] usb 2-1: config 0 has no interface number 0
[  503.982139][ T6022] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  503.986435][ T6022] usb 2-1: config 0 interface 255 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0
[  503.997265][ T6022] usb 2-1: config 0 interface 255 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  504.009525][ T6022] usb 2-1: New USB device found, idVendor=0499, idProduct=152e, bcdDevice=b4.9a
[  504.018858][ T6022] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  504.029650][ T6022] usb 2-1: Product: syz
[  504.031404][ T6022] usb 2-1: Manufacturer: syz
[  504.033479][ T6022] usb 2-1: SerialNumber: syz
[  504.038294][ T6022] usb 2-1: config 0 descriptor??
[  504.173315][   T98] usb 10-1: USB disconnect, device number 15
[  504.294278][ T6022] usb 2-1: USB disconnect, device number 9
[  504.305713][ T5959] udevd[5959]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.255/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  504.793702][T27592] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4731'.
[  504.819781][T27594] 9pnet: p9_errstr2errno: server reported unknown error 
[  504.864133][T27596] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4733'.
[  505.418765][T27615] loop1: detected capacity change from 0 to 32768
[  505.497265][T27615] ERROR: (device loop1): duplicateIXtree: 
[  505.497265][T27615] 
[  505.516422][T27615] ERROR: (device loop1): remounting filesystem as read-only
[  505.537671][T27615] ERROR: (device loop1): dtReadFirst: btstack overrun
[  505.537671][T27615] 
[  505.572223][T27615] ERROR: (device loop1): remounting filesystem as read-only
[  505.581256][T27615] btstack dump:
[  505.584380][T27615] bn = 0, index = 0
[  505.593341][T27615] bn = 2d, index = 0
[  505.594747][T27615] bn = 0, index = 0
[  505.598764][T27615] bn = 2d, index = 0
[  505.600339][T27615] bn = 0, index = 0
[  505.601965][T27615] bn = 2d, index = 0
[  505.602886][T27653] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  505.603362][T27615] bn = 0, index = 0
[  505.616189][T27615] bn = 0, index = 0
[  505.617858][T27615] jfs_readdir: unexpected rc = -5 from dtReadNext
[  507.103680][T27680] loop9: detected capacity change from 0 to 47
[  507.179450][T27686] loop9: detected capacity change from 0 to 256
[  507.231331][T27686] FAT-fs (loop9): Directory bread(block 64) failed
[  507.234027][T27686] FAT-fs (loop9): Directory bread(block 65) failed
[  507.236449][T27686] FAT-fs (loop9): Directory bread(block 66) failed
[  507.239407][T27686] FAT-fs (loop9): Directory bread(block 67) failed
[  507.255087][T27686] FAT-fs (loop9): Directory bread(block 68) failed
[  507.257847][T27686] FAT-fs (loop9): Directory bread(block 69) failed
[  507.260685][T27686] FAT-fs (loop9): Directory bread(block 70) failed
[  507.264643][T27686] FAT-fs (loop9): Directory bread(block 71) failed
[  507.267450][T27686] FAT-fs (loop9): Directory bread(block 72) failed
[  507.270113][T27686] FAT-fs (loop9): Directory bread(block 73) failed
[  508.321826][T27711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4759'.
[  508.429209][T27716] loop9: detected capacity change from 0 to 256
[  508.445494][T27716] FAT-fs (loop9): Directory bread(block 64) failed
[  508.452080][T27716] FAT-fs (loop9): Directory bread(block 65) failed
[  508.454344][T27716] FAT-fs (loop9): Directory bread(block 66) failed
[  508.456635][T27716] FAT-fs (loop9): Directory bread(block 67) failed
[  508.459304][T27716] FAT-fs (loop9): Directory bread(block 68) failed
[  508.461668][T27716] FAT-fs (loop9): Directory bread(block 69) failed
[  508.463912][T27716] FAT-fs (loop9): Directory bread(block 70) failed
[  508.466112][T27716] FAT-fs (loop9): Directory bread(block 71) failed
[  508.468877][T27716] FAT-fs (loop9): Directory bread(block 72) failed
[  508.471780][T27716] FAT-fs (loop9): Directory bread(block 73) failed
[  509.537976][T27733] netlink: 176 bytes leftover after parsing attributes in process `syz.9.4765'.
[  509.745476][T27747] netlink: 'syz.9.4770': attribute type 2 has an invalid length.
[  509.750215][T27747] netlink: 'syz.9.4770': attribute type 2 has an invalid length.
[  511.916459][T27753] Set syz1 is full, maxelem 65536 reached
[  511.950997][T27797] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4792'.
[  511.955321][T27797] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4792'.
[  511.963447][T27797] ip6gretap0: entered promiscuous mode
[  511.966969][T27797] syz_tun: entered promiscuous mode
[  512.013312][T27801] loop9: detected capacity change from 0 to 1024
[  512.019614][T27801] EXT4-fs: Ignoring removed i_version option
[  512.022254][T27801] EXT4-fs: Ignoring removed nobh option
[  512.036658][T27801] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  512.130164][T20820] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  512.532219][    T9] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  512.697158][    T9] usb 10-1: unable to get BOS descriptor or descriptor too short
[  512.701801][    T9] usb 10-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  512.706079][    T9] usb 10-1: config 1 has an invalid descriptor of length 5, skipping remainder of the config
[  512.710308][    T9] usb 10-1: config 1 interface 1 has no altsetting 0
[  512.734992][    T9] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  512.738863][    T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  512.742262][    T9] usb 10-1: Product: syz
[  512.743989][    T9] usb 10-1: Manufacturer: syz
[  512.750295][    T9] usb 10-1: SerialNumber: syz
[  513.001456][    T9] usb 10-1: 2:1 : no or invalid class specific endpoint descriptor
[  513.005261][    T9] usb 10-1: found format II with max.bitrate = 2418, frame size=7
[  513.008075][    T9] usb 10-1: 2:1: All rates were zero
[  513.024983][    T9] usb 10-1: USB disconnect, device number 16
[  513.123467][T27886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4817'.
[  513.343035][T27896] overlayfs: failed to clone upperpath
[  514.134967][T27932] loop9: detected capacity change from 0 to 40427
[  514.141653][T27932] F2FS-fs (loop9): Insane cp_payload (553648128 >= 504)
[  514.144661][T27932] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  514.149073][T27932] F2FS-fs (loop9): build fault injection rate: 17008
[  514.151962][T27932] F2FS-fs (loop9): build fault injection type: 0x1f8
[  514.157184][T27932] F2FS-fs (loop9): invalid crc value
[  514.239069][T27932] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  514.249549][T27932] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  514.253101][T27932] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  514.277282][T27944] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  514.470764][T27932] syz.9.4835: attempt to access beyond end of device
[  514.470764][T27932] loop9: rw=2049, sector=45096, nr_sectors = 24 limit=40427
[  514.485293][T27932] CPU: 0 UID: 0 PID: 27932 Comm: syz.9.4835 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  514.485316][T27932] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  514.485324][T27932] Call Trace:
[  514.485329][T27932]  <TASK>
[  514.485335][T27932]  dump_stack_lvl+0x189/0x250
[  514.485360][T27932]  ? __pfx_dump_stack_lvl+0x10/0x10
[  514.485377][T27932]  ? __pfx_queue_work_on+0x10/0x10
[  514.485412][T27932]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  514.485428][T27932]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  514.485450][T27932]  f2fs_handle_critical_error+0x37c/0x540
[  514.485473][T27932]  f2fs_write_end_io+0x886/0xb60
[  514.485533][T27932]  __submit_merged_bio+0x27a/0x6a0
[  514.485556][T27932]  __submit_merged_write_cond+0x255/0x530
[  514.485577][T27932]  f2fs_write_data_pages+0x261d/0x3000
[  514.485620][T27932]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  514.485669][T27932]  ? check_path+0x21/0x40
[  514.485690][T27932]  ? check_noncircular+0xe0/0x160
[  514.485737][T27932]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  514.485757][T27932]  do_writepages+0x32e/0x550
[  514.485784][T27932]  ? do_raw_spin_unlock+0x4d/0x240
[  514.485803][T27932]  filemap_fdatawrite+0x199/0x240
[  514.485821][T27932]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  514.485870][T27932]  ? do_raw_spin_unlock+0x4d/0x240
[  514.485889][T27932]  f2fs_sync_dirty_inodes+0x31f/0x830
[  514.485917][T27932]  f2fs_write_checkpoint+0x95a/0x1df0
[  514.485951][T27932]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  514.485996][T27932]  ? down_write+0x162/0x1f0
[  514.486012][T27932]  ? __pfx_down_write+0x10/0x10
[  514.486036][T27932]  f2fs_issue_checkpoint+0x3ac/0x570
[  514.486057][T27932]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  514.486080][T27932]  ? do_raw_spin_lock+0x121/0x290
[  514.486102][T27932]  ? __up_read+0x280/0x680
[  514.486122][T27932]  ? f2fs_sync_fs+0x200/0x3d0
[  514.486140][T27932]  f2fs_do_sync_file+0x869/0x1860
[  514.486163][T27932]  ? __pfx_f2fs_do_sync_file+0x10/0x10
[  514.486208][T27932]  ? __pfx_down_write+0x10/0x10
[  514.486226][T27932]  ? sb_start_write+0x114/0x1c0
[  514.486240][T27932]  ? mnt_want_write_file+0x164/0x200
[  514.486256][T27932]  __f2fs_ioctl+0x485a/0xb610
[  514.486287][T27932]  ? file_ioctl+0x22d/0x780
[  514.486304][T27932]  ? __pfx_file_ioctl+0x10/0x10
[  514.486328][T27932]  ? kasan_quarantine_put+0xdd/0x220
[  514.486346][T27932]  ? __pfx___f2fs_ioctl+0x10/0x10
[  514.486366][T27932]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  514.486383][T27932]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  514.486399][T27932]  ? do_vfs_ioctl+0xb33/0x1430
[  514.486417][T27932]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  514.486433][T27932]  ? do_mprotect_pkey+0xb00/0xce0
[  514.486451][T27932]  ? __lock_acquire+0xab9/0xd20
[  514.486483][T27932]  ? __fget_files+0x2a/0x420
[  514.486532][T27932]  ? __fget_files+0x2a/0x420
[  514.486550][T27932]  ? __fget_files+0x3a0/0x420
[  514.486567][T27932]  ? __fget_files+0x2a/0x420
[  514.486587][T27932]  ? f2fs_ioctl+0x135/0x250
[  514.486605][T27932]  ? __pfx_f2fs_ioctl+0x10/0x10
[  514.486624][T27932]  __se_sys_ioctl+0xfc/0x170
[  514.486641][T27932]  do_syscall_64+0xfa/0x3b0
[  514.486655][T27932]  ? lockdep_hardirqs_on+0x9c/0x150
[  514.486671][T27932]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.486691][T27932]  ? exc_page_fault+0x9f/0xf0
[  514.486710][T27932]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.486722][T27932] RIP: 0033:0x7f9a6d78ebe9
[  514.486735][T27932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  514.486748][T27932] RSP: 002b:00007f9a6e60a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  514.486763][T27932] RAX: ffffffffffffffda RBX: 00007f9a6d9b5fa0 RCX: 00007f9a6d78ebe9
[  514.486772][T27932] RDX: 0000000000000000 RSI: 000000000000f502 RDI: 0000000000000006
[  514.486780][T27932] RBP: 00007f9a6d811e19 R08: 0000000000000000 R09: 0000000000000000
[  514.486788][T27932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  514.486797][T27932] R13: 00007f9a6d9b6038 R14: 00007f9a6d9b5fa0 R15: 00007ffea1998a78
[  514.486819][T27932]  </TASK>
[  514.653535][T27932] F2FS-fs (loop9): Stopped filesystem due to reason: 3
[  514.656840][T27932] CPU: 0 UID: 0 PID: 27932 Comm: syz.9.4835 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  514.656862][T27932] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  514.656870][T27932] Call Trace:
[  514.656876][T27932]  <TASK>
[  514.656882][T27932]  dump_stack_lvl+0x189/0x250
[  514.656905][T27932]  ? __pfx_dump_stack_lvl+0x10/0x10
[  514.656923][T27932]  ? __pfx_queue_work_on+0x10/0x10
[  514.656937][T27932]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  514.656954][T27932]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  514.656976][T27932]  f2fs_handle_critical_error+0x37c/0x540
[  514.656998][T27932]  f2fs_write_end_io+0x886/0xb60
[  514.657030][T27932]  __submit_merged_bio+0x27a/0x6a0
[  514.657051][T27932]  __submit_merged_write_cond+0x255/0x530
[  514.657072][T27932]  f2fs_write_data_pages+0x261d/0x3000
[  514.657115][T27932]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  514.657165][T27932]  ? check_path+0x21/0x40
[  514.657180][T27932]  ? check_noncircular+0xe0/0x160
[  514.657227][T27932]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  514.657246][T27932]  do_writepages+0x32e/0x550
[  514.657272][T27932]  ? do_raw_spin_unlock+0x4d/0x240
[  514.657291][T27932]  filemap_fdatawrite+0x199/0x240
[  514.657311][T27932]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  514.657360][T27932]  ? do_raw_spin_unlock+0x4d/0x240
[  514.657379][T27932]  f2fs_sync_dirty_inodes+0x31f/0x830
[  514.657406][T27932]  f2fs_write_checkpoint+0x95a/0x1df0
[  514.657440][T27932]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  514.657516][T27932]  ? down_write+0x162/0x1f0
[  514.657535][T27932]  ? __pfx_down_write+0x10/0x10
[  514.657560][T27932]  f2fs_issue_checkpoint+0x3ac/0x570
[  514.657581][T27932]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  514.657605][T27932]  ? do_raw_spin_lock+0x121/0x290
[  514.657627][T27932]  ? __up_read+0x280/0x680
[  514.657649][T27932]  ? f2fs_sync_fs+0x200/0x3d0
[  514.657666][T27932]  f2fs_do_sync_file+0x869/0x1860
[  514.657699][T27932]  ? __pfx_f2fs_do_sync_file+0x10/0x10
[  514.657750][T27932]  ? __pfx_down_write+0x10/0x10
[  514.657770][T27932]  ? sb_start_write+0x114/0x1c0
[  514.657785][T27932]  ? mnt_want_write_file+0x164/0x200
[  514.657803][T27932]  __f2fs_ioctl+0x485a/0xb610
[  514.657836][T27932]  ? file_ioctl+0x22d/0x780
[  514.657854][T27932]  ? __pfx_file_ioctl+0x10/0x10
[  514.657880][T27932]  ? kasan_quarantine_put+0xdd/0x220
[  514.657900][T27932]  ? __pfx___f2fs_ioctl+0x10/0x10
[  514.657920][T27932]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  514.657938][T27932]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  514.657955][T27932]  ? do_vfs_ioctl+0xb33/0x1430
[  514.657972][T27932]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  514.657991][T27932]  ? do_mprotect_pkey+0xb00/0xce0
[  514.658010][T27932]  ? __lock_acquire+0xab9/0xd20
[  514.658043][T27932]  ? __fget_files+0x2a/0x420
[  514.658063][T27932]  ? __fget_files+0x2a/0x420
[  514.658081][T27932]  ? __fget_files+0x3a0/0x420
[  514.658099][T27932]  ? __fget_files+0x2a/0x420
[  514.658119][T27932]  ? f2fs_ioctl+0x135/0x250
[  514.658136][T27932]  ? __pfx_f2fs_ioctl+0x10/0x10
[  514.658156][T27932]  __se_sys_ioctl+0xfc/0x170
[  514.658173][T27932]  do_syscall_64+0xfa/0x3b0
[  514.658188][T27932]  ? lockdep_hardirqs_on+0x9c/0x150
[  514.658203][T27932]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.658216][T27932]  ? exc_page_fault+0x9f/0xf0
[  514.658233][T27932]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.658245][T27932] RIP: 0033:0x7f9a6d78ebe9
[  514.658258][T27932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  514.658270][T27932] RSP: 002b:00007f9a6e60a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  514.658285][T27932] RAX: ffffffffffffffda RBX: 00007f9a6d9b5fa0 RCX: 00007f9a6d78ebe9
[  514.658295][T27932] RDX: 0000000000000000 RSI: 000000000000f502 RDI: 0000000000000006
[  514.658304][T27932] RBP: 00007f9a6d811e19 R08: 0000000000000000 R09: 0000000000000000
[  514.658312][T27932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  514.658320][T27932] R13: 00007f9a6d9b6038 R14: 00007f9a6d9b5fa0 R15: 00007ffea1998a78
[  514.658342][T27932]  </TASK>
[  514.658349][T27932] F2FS-fs (loop9): Stopped filesystem due to reason: 3
[  514.831906][T27932] CPU: 0 UID: 0 PID: 27932 Comm: syz.9.4835 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  514.831927][T27932] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  514.831936][T27932] Call Trace:
[  514.831943][T27932]  <TASK>
[  514.831951][T27932]  dump_stack_lvl+0x189/0x250
[  514.831976][T27932]  ? __pfx_dump_stack_lvl+0x10/0x10
[  514.831992][T27932]  ? __pfx_queue_work_on+0x10/0x10
[  514.832007][T27932]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  514.832023][T27932]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  514.832047][T27932]  f2fs_handle_critical_error+0x37c/0x540
[  514.832070][T27932]  f2fs_write_end_io+0x886/0xb60
[  514.832103][T27932]  __submit_merged_bio+0x27a/0x6a0
[  514.832126][T27932]  __submit_merged_write_cond+0x255/0x530
[  514.832150][T27932]  f2fs_write_data_pages+0x261d/0x3000
[  514.832193][T27932]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  514.832246][T27932]  ? check_path+0x21/0x40
[  514.832259][T27932]  ? check_noncircular+0xe0/0x160
[  514.832311][T27932]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  514.832329][T27932]  do_writepages+0x32e/0x550
[  514.832357][T27932]  ? do_raw_spin_unlock+0x4d/0x240
[  514.832376][T27932]  filemap_fdatawrite+0x199/0x240
[  514.832394][T27932]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  514.832456][T27932]  ? do_raw_spin_unlock+0x4d/0x240
[  514.832477][T27932]  f2fs_sync_dirty_inodes+0x31f/0x830
[  514.832542][T27932]  f2fs_write_checkpoint+0x95a/0x1df0
[  514.832581][T27932]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  514.832631][T27932]  ? down_write+0x162/0x1f0
[  514.832650][T27932]  ? __pfx_down_write+0x10/0x10
[  514.832676][T27932]  f2fs_issue_checkpoint+0x3ac/0x570
[  514.832698][T27932]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  514.832724][T27932]  ? do_raw_spin_lock+0x121/0x290
[  514.832747][T27932]  ? __up_read+0x280/0x680
[  514.832769][T27932]  ? f2fs_sync_fs+0x200/0x3d0
[  514.832788][T27932]  f2fs_do_sync_file+0x869/0x1860
[  514.832815][T27932]  ? __pfx_f2fs_do_sync_file+0x10/0x10
[  514.832865][T27932]  ? __pfx_down_write+0x10/0x10
[  514.832883][T27932]  ? sb_start_write+0x114/0x1c0
[  514.832920][T27932]  ? mnt_want_write_file+0x164/0x200
[  514.832937][T27932]  __f2fs_ioctl+0x485a/0xb610
[  514.832971][T27932]  ? file_ioctl+0x22d/0x780
[  514.832991][T27932]  ? __pfx_file_ioctl+0x10/0x10
[  514.833018][T27932]  ? kasan_quarantine_put+0xdd/0x220
[  514.833038][T27932]  ? __pfx___f2fs_ioctl+0x10/0x10
[  514.833060][T27932]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  514.833077][T27932]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  514.833096][T27932]  ? do_vfs_ioctl+0xb33/0x1430
[  514.833114][T27932]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  514.833133][T27932]  ? do_mprotect_pkey+0xb00/0xce0
[  514.833153][T27932]  ? __lock_acquire+0xab9/0xd20
[  514.833188][T27932]  ? __fget_files+0x2a/0x420
[  514.833210][T27932]  ? __fget_files+0x2a/0x420
[  514.833228][T27932]  ? __fget_files+0x3a0/0x420
[  514.833246][T27932]  ? __fget_files+0x2a/0x420
[  514.833267][T27932]  ? f2fs_ioctl+0x135/0x250
[  514.833286][T27932]  ? __pfx_f2fs_ioctl+0x10/0x10
[  514.833305][T27932]  __se_sys_ioctl+0xfc/0x170
[  514.833324][T27932]  do_syscall_64+0xfa/0x3b0
[  514.833340][T27932]  ? lockdep_hardirqs_on+0x9c/0x150
[  514.833355][T27932]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.833368][T27932]  ? exc_page_fault+0x9f/0xf0
[  514.833386][T27932]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.833399][T27932] RIP: 0033:0x7f9a6d78ebe9
[  514.833413][T27932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  514.833431][T27932] RSP: 002b:00007f9a6e60a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  514.833447][T27932] RAX: ffffffffffffffda RBX: 00007f9a6d9b5fa0 RCX: 00007f9a6d78ebe9
[  514.833457][T27932] RDX: 0000000000000000 RSI: 000000000000f502 RDI: 0000000000000006
[  514.833466][T27932] RBP: 00007f9a6d811e19 R08: 0000000000000000 R09: 0000000000000000
[  514.833474][T27932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  514.833481][T27932] R13: 00007f9a6d9b6038 R14: 00007f9a6d9b5fa0 R15: 00007ffea1998a78
[  514.833533][T27932]  </TASK>
[  514.833562][T27932] F2FS-fs (loop9): Stopped filesystem due to reason: 3
[  515.266579][T27972] veth3: entered allmulticast mode
[  515.465765][T27999] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  515.705193][T28020] netlink: 10 bytes leftover after parsing attributes in process `syz.9.4865'.
[  515.773736][T28022] can0: slcan on ttyS3.
[  515.836816][T28021] can0 (unregistered): slcan off ttyS3.
[  515.933457][T28034] loop9: detected capacity change from 0 to 256
[  515.937958][T28034] exfat: Deprecated parameter 'utf8'
[  515.945909][T28034] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d)
[  516.089402][T28045] wg1: entered promiscuous mode
[  516.097385][T28045] wg1: entered allmulticast mode
[  516.283731][T28041] loop9: detected capacity change from 0 to 40427
[  516.332917][T28041] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[  516.336257][T28041] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  516.343362][T28041] F2FS-fs (loop9): invalid crc value
[  516.390627][T28041] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  516.397170][T28041] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  516.400185][T28041] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  516.416751][   T33] kauditd_printk_skb: 5 callbacks suppressed
[  516.416764][   T33] audit: type=1800 audit(2000000018.994:270): pid=28041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4869" name="bus" dev="loop9" ino=10 res=0 errno=0
[  518.276749][T28118] loop9: detected capacity change from 0 to 2048
[  518.282756][T28118] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  519.184193][T28133] loop9: detected capacity change from 0 to 131072
[  519.191424][T28133] F2FS-fs (loop9): Wrong CP boundary, start(512) end(1536) blocks(0)
[  519.194929][T28133] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  519.200813][T28133] F2FS-fs (loop9): invalid crc value
[  519.245360][T28133] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  519.250199][T28133] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  519.252896][T28133] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[  521.957834][T28182] loop9: detected capacity change from 0 to 1024
[  521.991020][T28182] EXT4-fs (loop9): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  522.053861][T28182] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  522.099340][T28182] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000.
[  522.104606][T28182] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: inode #11: comm syz.9.4910: missing EA_INODE flag
[  522.112567][T28182] EXT4-fs (loop9): Remounting filesystem read-only
[  522.129917][ T5237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  522.136171][ T5237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  522.139733][ T5237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  522.143319][ T5237] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  522.146168][ T5237] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  522.155666][T20820] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  522.359803][T28191] chnl_net:caif_netlink_parms(): no params data found
[  522.442700][T28191] bridge0: port 1(bridge_slave_0) entered blocking state
[  522.445685][T28191] bridge0: port 1(bridge_slave_0) entered disabled state
[  522.448716][T28191] bridge_slave_0: entered allmulticast mode
[  522.453400][T28191] bridge_slave_0: entered promiscuous mode
[  522.456922][T28191] bridge0: port 2(bridge_slave_1) entered blocking state
[  522.459266][T28191] bridge0: port 2(bridge_slave_1) entered disabled state
[  522.461581][T28191] bridge_slave_1: entered allmulticast mode
[  522.467213][T28191] bridge_slave_1: entered promiscuous mode
[  522.497309][T28191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  522.503698][T28191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  522.538422][    T9] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[  522.547730][T28191] team0: Port device team_slave_0 added
[  522.555076][T28191] team0: Port device team_slave_1 added
[  522.595146][T28191] batman_adv: batadv0: Adding interface: batadv_slave_0
[  522.598089][T28191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  522.609090][T28191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  522.618955][T28191] batman_adv: batadv0: Adding interface: batadv_slave_1
[  522.621984][T28191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  522.632943][T28191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  522.703706][    T9] usb 10-1: Using ep0 maxpacket: 8
[  522.707943][    T9] usb 10-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  522.711633][T28191] hsr_slave_0: entered promiscuous mode
[  522.715541][T28191] hsr_slave_1: entered promiscuous mode
[  522.718580][T28191] debugfs: 'hsr0' already exists in 'hsr'
[  522.721710][T28191] Cannot create hsr debugfs directory
[  522.726369][    T9] usb 10-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  522.738349][    T9] usb 10-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  522.746225][    T9] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  522.752487][    T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.755937][    T9] usb 10-1: Product: syz
[  522.758235][    T9] usb 10-1: Manufacturer: syz
[  522.760368][    T9] usb 10-1: SerialNumber: syz
[  523.005365][    T9] adutux 10-1:168.0: interrupt endpoints not found
[  523.015119][    T9] usb 10-1: USB disconnect, device number 17
[  523.311155][T28569] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4927'.
[  523.909544][T28191] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  523.925257][T28191] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  523.940867][T28191] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  523.948100][T28191] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  524.135183][T28191] 8021q: adding VLAN 0 to HW filter on device bond0
[  524.151418][T28191] 8021q: adding VLAN 0 to HW filter on device team0
[  524.159251][  T190] bridge0: port 1(bridge_slave_0) entered blocking state
[  524.162366][  T190] bridge0: port 1(bridge_slave_0) entered forwarding state
[  524.176569][  T190] bridge0: port 2(bridge_slave_1) entered blocking state
[  524.179622][  T190] bridge0: port 2(bridge_slave_1) entered forwarding state
[  524.252991][T28191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  524.347840][ T5966] Bluetooth: hci3: command tx timeout
[  524.488666][T28191] 8021q: adding VLAN 0 to HW filter on device batadv0
[  524.546195][T28191] veth0_vlan: entered promiscuous mode
[  524.555126][T28191] veth1_vlan: entered promiscuous mode
[  524.579693][T28191] veth0_macvtap: entered promiscuous mode
[  524.604229][T28191] veth1_macvtap: entered promiscuous mode
[  524.637987][T28191] batman_adv: batadv0: Interface activated: batadv_slave_0
[  524.651795][T28191] batman_adv: batadv0: Interface activated: batadv_slave_1
[  524.692607][T15358] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  524.709961][T15358] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  524.713700][T15358] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  524.744985][T15358] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  524.866540][ T4497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  524.869672][ T4497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  524.899094][T28617] loop9: detected capacity change from 0 to 32768
[  524.922759][ T4497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  524.926104][ T4497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  525.021040][T28617] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.4933 (28617)
[  525.133238][T28617] BTRFS info (device loop9): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  525.249792][T28617] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm
[  525.269614][T28617] BTRFS info (device loop9): using free-space-tree
[  525.715786][   T33] audit: type=1800 audit(2000000027.684:271): pid=28617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4933" name="file1" dev="loop9" ino=260 res=0 errno=0
[  525.862320][T20820] BTRFS info (device loop9): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  526.211054][T28750] overlayfs: conflicting options: nfs_export=on,index=off
[  526.242251][T28752] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4944'.
[  526.330768][T28764] netlink: 'syz.9.4948': attribute type 1 has an invalid length.
[  526.568948][ T5966] Bluetooth: hci3: command tx timeout
[  526.842950][T28808] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4958'.
[  527.036708][T28825] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  527.039848][T28825] IPv6: NLM_F_CREATE should be set when creating new route
[  527.048601][T28825] lo: entered allmulticast mode
[  527.054899][T28825] tunl0: entered allmulticast mode
[  527.057873][T28825] gre0: entered allmulticast mode
[  527.068019][T28825] gretap0: entered allmulticast mode
[  527.076782][T28825] erspan0: entered allmulticast mode
[  527.082224][T28825] ip_vti0: entered allmulticast mode
[  527.086302][T28825] ip6_vti0: entered allmulticast mode
[  527.089887][T28825] sit0: entered allmulticast mode
[  527.098660][T28825] ip6tnl0: entered allmulticast mode
[  527.103873][T28825] ip6gre0: entered allmulticast mode
[  527.107415][T28825] syz_tun: entered allmulticast mode
[  527.112161][T28825] ip6gretap0: entered allmulticast mode
[  527.119308][T28825] bridge0: port 2(bridge_slave_1) entered disabled state
[  527.122705][T28825] bridge0: port 1(bridge_slave_0) entered disabled state
[  527.127220][T28825] bridge0: entered allmulticast mode
[  527.132687][T28825] vcan0: entered allmulticast mode
[  527.138736][T28825] bond0: entered allmulticast mode
[  527.140989][T28825] bond_slave_0: entered allmulticast mode
[  527.143471][T28825] bond_slave_1: entered allmulticast mode
[  527.152566][T28825] team0: entered allmulticast mode
[  527.154780][T28825] team_slave_0: entered allmulticast mode
[  527.158387][T28825] team_slave_1: entered allmulticast mode
[  527.164542][T28825] dummy0: entered allmulticast mode
[  527.172152][T28825] nlmon0: entered allmulticast mode
[  527.176013][T28825] caif0: entered allmulticast mode
[  527.179479][T28825] batadv0: entered allmulticast mode
[  527.183902][T28825] vxcan0: entered allmulticast mode
[  527.186952][T28825] vxcan1: entered allmulticast mode
[  527.190709][T28825] veth0: entered allmulticast mode
[  527.195218][T28825] veth1: entered allmulticast mode
[  527.204659][T28825] wg0: entered allmulticast mode
[  527.213367][T28825] wg1: entered allmulticast mode
[  527.218462][T28825] wg2: entered allmulticast mode
[  527.229815][T28825] veth0_to_bridge: entered allmulticast mode
[  527.238317][T28825] veth1_to_bridge: entered allmulticast mode
[  527.255507][T28825] veth0_to_bond: entered allmulticast mode
[  527.265957][T28825] veth1_to_bond: entered allmulticast mode
[  527.276299][T28825] veth0_to_team: entered allmulticast mode
[  527.297037][T28825] veth1_to_team: entered allmulticast mode
[  527.307532][T28825] veth0_to_batadv: entered allmulticast mode
[  527.312731][T28825] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  527.316375][T28825] batadv_slave_0: entered allmulticast mode
[  527.322489][T28825] veth1_to_batadv: entered allmulticast mode
[  527.328493][T28825] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  527.332104][T28825] batadv_slave_1: entered allmulticast mode
[  527.337730][T28825] xfrm0: entered allmulticast mode
[  527.343198][T28825] veth0_to_hsr: entered allmulticast mode
[  527.348273][T28825] hsr_slave_0: entered allmulticast mode
[  527.359736][T28825] veth1_to_hsr: entered allmulticast mode
[  527.366050][T28825] hsr_slave_1: entered allmulticast mode
[  527.374989][T28825] hsr0: entered allmulticast mode
[  527.380409][T28825] veth1_virt_wifi: entered allmulticast mode
[  527.387665][T28825] veth0_virt_wifi: entered allmulticast mode
[  527.394169][T28833] could not allocate digest TFM handle sm3
[  527.403095][T28825] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  527.407004][T28825] veth1_vlan: entered allmulticast mode
[  527.427065][T28825] veth0_vlan: entered allmulticast mode
[  527.459101][T28825] vlan0: entered allmulticast mode
[  527.461519][T28825] vlan1: entered allmulticast mode
[  527.469253][T28825] macvlan0: entered allmulticast mode
[  527.478716][T28825] macvlan1: entered allmulticast mode
[  527.493028][T28825] ipvlan0: entered allmulticast mode
[  527.495520][T28825] ipvlan1: entered allmulticast mode
[  527.508022][T28825] veth1_macvtap: entered allmulticast mode
[  527.516795][T28825] veth0_macvtap: entered allmulticast mode
[  527.523794][T28825] macvtap0: entered allmulticast mode
[  527.540667][T28825] macsec0: entered allmulticast mode
[  527.556736][T28825] geneve0: entered allmulticast mode
[  527.568374][T28825] geneve1: entered allmulticast mode
[  527.584930][T28825] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  527.591309][T28825] netdevsim netdevsim2 netdevsim1: entered allmulticast mode
[  527.602921][T28825] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[  527.617942][T28825] netdevsim netdevsim2 netdevsim3: entered allmulticast mode
[  527.651402][T28825] mac80211_hwsim hwsim29 wlan0: entered allmulticast mode
[  527.674289][T28825] mac80211_hwsim hwsim30 wlan1: entered allmulticast mode
[  527.681601][ T5987] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  527.688678][ T5987] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  527.701956][ T5723] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  527.705509][ T5987] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  528.117243][T28890] misc userio: The device must be registered before sending interrupts
[  528.751848][T28902] loop9: detected capacity change from 0 to 32768
[  528.782699][T28902] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  528.792242][ T5966] Bluetooth: hci3: command tx timeout
[  528.880248][T28946] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4993'.
[  528.947124][T28902] XFS (loop9): Ending clean mount
[  529.010953][T28953] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4996'.
[  529.078655][T28958] overlayfs: failed to clone upperpath
[  529.389459][T28983] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5001'.
[  529.430174][T20820] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  529.596309][T28998] loop2: detected capacity change from 0 to 256
[  529.634798][T28998] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  529.648916][T28998] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  529.662369][T28998] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  530.799118][T29034] loop9: detected capacity change from 0 to 32768
[  530.824488][T29048] loop2: detected capacity change from 0 to 2048
[  530.832140][T29048] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  530.842369][T29034] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  530.897274][T29034] XFS (loop9): Ending clean mount
[  530.947722][T20820] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  531.016947][ T5966] Bluetooth: hci3: command tx timeout
[  532.960313][   T33] audit: type=1800 audit(2000000034.465:272): pid=29119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5037" name="/" dev="9p" ino=2 res=0 errno=0
[  532.985089][T29121] netlink: 'syz.9.5038': attribute type 21 has an invalid length.
[  532.989129][T29121] netlink: 132 bytes leftover after parsing attributes in process `syz.9.5038'.
[  533.304257][T29145] loop9: detected capacity change from 0 to 512
[  533.312341][T29145] EXT4-fs: Ignoring removed nomblk_io_submit option
[  533.316119][T29145] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  533.345188][T29145] EXT4-fs (loop9): 1 truncate cleaned up
[  533.354573][T29145] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  533.381478][   T33] audit: type=1800 audit(2000000034.858:273): pid=29145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.5047" name="file1" dev="loop9" ino=15 res=0 errno=0
[  533.410025][T20820] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  533.438119][T29157] openvswitch: netlink: Tunnel attr 5 has unexpected len 4 expected 0
[  533.692809][T29182] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993
[  533.776810][T29195] overlayfs: failed to clone upperpath
[  534.020090][ T6022] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[  534.037851][T29208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5066'.
[  534.046691][T29208] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5066'.
[  534.129586][T29210] loop2: detected capacity change from 0 to 4096
[  534.152895][T29210] EXT4-fs (loop2): Test dummy encryption mode enabled
[  534.157604][T29210] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  534.164487][T29210] System zones: 0-5
[  534.168598][T29210] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  534.181656][ T6022] usb 10-1: Using ep0 maxpacket: 16
[  534.208980][ T6022] usb 10-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  534.218567][ T6022] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  534.227574][ T6022] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  534.250930][ T6022] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023
[  534.265340][ T6022] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  534.287523][ T6022] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  534.292123][ T6022] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  534.299045][T28191] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  534.305580][ T6022] usb 10-1: SerialNumber: syz
[  534.318581][T29190] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  534.484544][T29222] loop2: detected capacity change from 0 to 256
[  534.599394][ T6022] cdc_acm 10-1:1.0: Control and data interfaces are not separated!
[  534.604453][ T6022] cdc_acm 10-1:1.0: probe with driver cdc_acm failed with error -12
[  534.642994][ T6022] usb 10-1: USB disconnect, device number 18
[  534.723597][T29244] loop2: detected capacity change from 0 to 512
[  534.727478][T29244] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  534.740342][T29244] EXT4-fs (loop2): orphan cleanup on readonly fs
[  534.748703][T29244] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.5073: Block bitmap for bg 0 marked uninitialized
[  534.771088][T29244] EXT4-fs (loop2): Remounting filesystem read-only
[  534.777941][T29244] EXT4-fs (loop2): 1 orphan inode deleted
[  534.783974][T29244] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  534.833781][T28191] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  534.915701][T29259] Bluetooth: hci0: invalid length 0, exp 2 for type 22
[  534.970762][T29263] loop2: detected capacity change from 0 to 4096
[  534.987546][T29263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  535.611653][T29287] loop9: detected capacity change from 0 to 256
[  535.625908][T29287] FAT-fs (loop9): Directory bread(block 64) failed
[  535.628287][T29287] FAT-fs (loop9): Directory bread(block 65) failed
[  535.630872][T29287] FAT-fs (loop9): Directory bread(block 66) failed
[  535.633219][T29287] FAT-fs (loop9): Directory bread(block 67) failed
[  535.637158][T29287] FAT-fs (loop9): Directory bread(block 68) failed
[  535.640417][T29287] FAT-fs (loop9): Directory bread(block 69) failed
[  535.642756][T29287] FAT-fs (loop9): Directory bread(block 70) failed
[  535.646598][T29287] FAT-fs (loop9): Directory bread(block 71) failed
[  535.649175][T29287] FAT-fs (loop9): Directory bread(block 72) failed
[  535.651953][T29287] FAT-fs (loop9): Directory bread(block 73) failed
[  535.677746][   T33] audit: type=1800 audit(2000000037.009:274): pid=29287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.5085" name="bus" dev="loop9" ino=1048723 res=0 errno=0
[  535.907370][T28191] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  536.134600][T29315] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22)
[  536.222171][T29305] ceph: No mds server is up or the cluster is laggy
[  538.804184][T29366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5107'.
[  538.925247][T29374] loop2: detected capacity change from 0 to 1024
[  539.014137][T29374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  539.018371][T29374] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  539.114913][T28191] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  539.716287][   T33] audit: type=1326 audit(2000000040.536:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29399 comm="syz.2.5116" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa96998ebe9 code=0x0
[  539.769873][   T33] audit: type=1800 audit(2000000040.835:276): pid=29409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5119" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  539.828971][T29413] loop9: detected capacity change from 0 to 1024
[  539.842642][T29413] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  539.855011][T29413] EXT4-fs warning (device loop9): ext4_empty_dir:3103: inode #11: comm syz.9.5120: directory missing '..'
[  539.886626][T20820] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  540.316582][T21949] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[  540.479470][T21949] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  540.486219][T21949] usb 10-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  540.493191][T21949] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.502092][T21949] usb 10-1: Product: syz
[  540.503982][T21949] usb 10-1: Manufacturer: syz
[  540.506018][T21949] usb 10-1: SerialNumber: syz
[  540.518854][T21949] usb 10-1: config 0 descriptor??
[  540.787212][T21949] usb 10-1: USB disconnect, device number 19
[  540.963950][T29454] loop2: detected capacity change from 0 to 2048
[  540.996524][T29454] Alternate GPT is invalid, using primary GPT.
[  540.998681][T29454]  loop2: p2 p3 p7
[  541.179865][ T6380] udevd[6380]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory
[  542.507526][T29527] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5152'.
[  542.694165][T29519] loop9: detected capacity change from 0 to 32768
[  542.703811][T29519] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.5148 (29519)
[  542.708940][T29538] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5157'.
[  542.719420][T29519] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  542.727682][T29519] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm
[  542.731128][T29519] BTRFS info (device loop9): using free-space-tree
[  542.857499][T29559] loop2: detected capacity change from 0 to 1024
[  542.980770][T20820] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  543.144027][T29568] loop2: detected capacity change from 0 to 32768
[  543.255068][T29568] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  543.255082][T29568]   allowing incompatible features above 0.0: (unknown version)
[  543.255088][T29568]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  543.270090][T29568] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  543.272820][T29568] bcachefs (loop2): initializing new filesystem
[  543.278998][T29568] bcachefs (loop2): going read-write
[  543.293119][T29568] bcachefs (loop2): marking superblocks
[  543.298560][T29568] bcachefs (loop2): initializing freespace
[  543.302346][T29568] bcachefs (loop2): done initializing freespace
[  543.306266][T29568] bcachefs (loop2): reading snapshots table
[  543.308642][T29568] bcachefs (loop2): reading snapshots done
[  543.372803][T29568] bcachefs (loop2): done starting filesystem
[  544.884819][T28191] bcachefs (loop2): shutting down
[  544.886650][T28191] bcachefs (loop2): going read-only
[  544.902826][T28191] bcachefs (loop2): finished waiting for writes to stop
[  544.920910][T28191] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3
[  544.929139][T28191] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 4
[  544.932677][T28191] bcachefs (loop2): clean shutdown complete, journal seq 5
[  544.936972][T28191] bcachefs (loop2): marking filesystem clean
[  544.952415][T28191] bcachefs (loop2): shutdown complete
[  545.193294][T29595] loop9: detected capacity change from 0 to 262144
[  545.239455][T29595] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  545.243248][T29595] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  545.553508][T29634] veth4: entered promiscuous mode
[  545.556021][T29634] veth4: entered allmulticast mode
[  546.375573][T29648] loop9: detected capacity change from 0 to 32768
[  546.387904][T29648] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  546.437762][T20820] ocfs2: Unmounting device (7,9) on (node local)
[  547.710172][T29683] loop2: detected capacity change from 0 to 32768
[  547.745862][T29683] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5187 (29683)
[  547.769701][T29696] bond2: entered promiscuous mode
[  547.771982][T29696] bond2: entered allmulticast mode
[  547.774532][T29696] 8021q: adding VLAN 0 to HW filter on device bond2
[  547.788400][T29683] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  547.820076][T29683] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  547.827221][T29683] BTRFS info (device loop2): using free-space-tree
[  547.904905][T29750] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5194'.
[  547.965423][T29683] BTRFS info (device loop2): rebuilding free space tree
[  548.048284][T28191] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  548.779125][T29800] loop2: detected capacity change from 0 to 1024
[  548.787940][T29800] EXT4-fs: Ignoring removed nobh option
[  548.792639][T29800] EXT4-fs: Ignoring removed bh option
[  548.809330][T29800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  548.826524][T29800] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt.
[  548.864962][T28191] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  549.185516][T29827] IPv6: sit1: Disabled Multicast RS
[  549.326179][T29820] loop9: detected capacity change from 0 to 32768
[  549.347978][T29820] bcachefs (/dev/loop9): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  549.347978][T29820] clean (size 2912):
[  549.347978][T29820] flags:          0
[  549.347978][T29820] journal_seq:    8
[  549.347978][T29820] prio_ptrs: 
[  549.347978][T29820] usage: type=key_version v=0
[  549.347978][T29820] usage: type=reserved v=0
[  549.347978][T29820] usage: type=reserved v=0
[  549.347978][T29820] usage: type=reserved v=0
[  549.347978][T29820] usage: type=reserved v=0
[  549.347978][T29820] data_usage: btree: 1/1 [0]=2816
[  549.347978][T29820] data_usage: journal: 1/1 [0]=0
[  549.347978][T29820] data_usage: user: 1/1 [0]=32
[  549.347978][T29820] dev_usage: dev=0  
[  549.347978][T29820]   free: buckets=83 sectors=0 fragmented=0
[  549.347978][T29820]   sb: buckets=25 sectors=6152 fragmented=248
[  549.347978][T29820]   journal: buckets=8 sectors=2048 fragmented=0
[  549.347978][T29820]   btree: buckets=11 sectors=2816 fragmented=0
[  549.347978][T29820]   user: buckets=1 sectors=32 fragmented=224
[  549.347978][T29820]   cached: buckets=0 sectors=0 fragmented=0
[  549.347978][T29820]   parity: buckets=0 sectors=0 fragmented=786432
[  549.347978][T29820]   stripe: buckets=0 sectors=0 fragmented=0
[  549.347978][T29820]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  549.347978][T29820]   need_discard: buckets=0 sectors=0 fragmented=0
[  549.347978][T29820] clock: read=0
[  549.347978][T29820] clock: write=1288
[  549.347978][T29820] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 249e7ae2a
[  549.348143][T29820] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  551.184937][T29933] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5246'.
[  551.460890][T29939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5249'.
[  552.887028][T30007] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5269'.
[  552.891585][T30007] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5269'.
[  552.894792][T30007] netlink: 'syz.9.5269': attribute type 13 has an invalid length.
[  552.897994][T30007] netlink: 'syz.9.5269': attribute type 12 has an invalid length.
[  553.476845][T21949] usb 10-1: new full-speed USB device number 20 using dummy_hcd
[  553.651259][T21949] usb 10-1: config 0 has an invalid interface number: 46 but max is 8
[  553.654653][T21949] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  553.659598][T21949] usb 10-1: config 0 has no interface number 0
[  553.662361][T21949] usb 10-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  553.666850][T21949] usb 10-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  553.680461][T21949] usb 10-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  553.684454][T21949] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  553.687893][T21949] usb 10-1: Product: syz
[  553.689778][T21949] usb 10-1: Manufacturer: syz
[  553.695783][T21949] usb 10-1: SerialNumber: syz
[  553.700185][T21949] usb 10-1: config 0 descriptor??
[  553.707599][T30019] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  553.714552][T21949] ums-karma 10-1:0.46: USB Mass Storage device detected
[  553.860625][T21949] ums-karma 10-1:0.46: probe with driver ums-karma failed with error -5
[  553.929152][T30043] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5280'.
[  553.993284][   T10] usb 10-1: USB disconnect, device number 20
[  554.276723][T30075] netlink: 'syz.2.5289': attribute type 4 has an invalid length.
[  554.324539][   T33] audit: type=1326 audit(2000000054.455:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30078 comm="syz.2.5290" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96998ebe9 code=0x7ffc0000
[  554.335972][   T33] audit: type=1326 audit(2000000054.455:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30078 comm="syz.2.5290" exe="/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fa96998ebe9 code=0x7ffc0000
[  554.353023][   T33] audit: type=1326 audit(2000000054.455:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30078 comm="syz.2.5290" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96998ebe9 code=0x7ffc0000
[  554.369069][   T33] audit: type=1326 audit(2000000054.455:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30078 comm="syz.2.5290" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96998ebe9 code=0x7ffc0000
[  555.005573][T21949] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[  555.206368][T21949] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  555.226743][T21949] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  555.240043][T21949] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  555.256467][T21949] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  555.277635][T21949] usb 10-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e
[  555.281653][T21949] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.296874][T21949] usb 10-1: Product: syz
[  555.298865][T21949] usb 10-1: Manufacturer: syz
[  555.309468][T21949] usb 10-1: SerialNumber: syz
[  555.324747][T21949] usb 10-1: config 0 descriptor??
[  555.348150][T21949] ti_usb_3410_5052 10-1:0.0: TI USB 3410 1 port adapter converter detected
[  555.356000][T21949] usb 10-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0
[  555.593886][T16130] usb 10-1: USB disconnect, device number 21
[  555.605077][T16130] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0
[  555.615696][T16130] ti_usb_3410_5052 10-1:0.0: device disconnected
[  555.930430][T30160] loop2: detected capacity change from 0 to 32768
[  555.949425][T30160] non-latin1 character 0x3ff found in JFS file name
[  555.951767][T30160] mount with iocharset=utf8 to access
[  556.517963][T30200] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5325'.
[  556.677657][T30208] loop2: detected capacity change from 0 to 4096
[  556.687468][T30208] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  556.700066][T30212] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  556.718646][T30208] ntfs3(loop2): ino=1a, mi_enum_attr
[  556.721506][T30208] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  556.834298][T30208] ntfs3(loop2): ino=1e, "file1" ntfs3_write_inode failed, -22.
[  556.840200][T30208] ntfs3(loop2): ino=1e, "file1" ntfs3_write_inode failed, -22.
[  557.139718][T30224] loop9: detected capacity change from 0 to 4096
[  557.168439][T30224] ntfs3(loop9): ino=3, ntfs_set_state failed, -22.
[  557.170713][T30224] ntfs3(loop9): Failed to initialize $Extend/$ObjId.
[  557.571410][ T4497] ntfs3(loop2): ino=1e, ntfs3_write_inode failed, -22.
[  558.075780][   T77] ntfs3(loop9): ino=3, ntfs3_write_inode failed, -22.
[  558.084696][T20820] ntfs3(loop9): ino=3, ntfs_set_state failed, -22.
[  558.100424][T20820] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[  558.113342][T20820] ntfs3(loop9): ino=3, ntfs_set_state failed, -22.
[  558.121543][T22225] ntfs3(loop9): ino=3, ntfs3_write_inode failed, -22.
[  558.204994][T30281] loop9: detected capacity change from 0 to 128
[  559.805941][   T10] usb 10-1: new full-speed USB device number 22 using dummy_hcd
[  559.996143][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  560.005509][   T10] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83
[  560.017662][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  560.023865][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  560.034643][   T10] usb 10-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10
[  560.038448][   T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  560.045767][   T10] usb 10-1: Product: syz
[  560.047932][   T10] usb 10-1: Manufacturer: syz
[  560.050332][   T10] usb 10-1: SerialNumber: syz
[  560.056665][   T10] usb 10-1: config 0 descriptor??
[  560.080023][   T10] radioshark2 10-1:0.0: Invalid radioSHARK2 device
[  560.098170][   T10] radioshark2 10-1:0.0: probe with driver radioshark2 failed with error -22
[  560.319826][   T10] usb 10-1: USB disconnect, device number 22
[  560.828247][T30374] loop2: detected capacity change from 0 to 40427
[  560.837483][T30374] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  560.840696][T30374] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  560.926784][T30374] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  560.943195][T30374] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  560.946113][T30374] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  561.603115][T30374] syz.2.5374 (30374): drop_caches: 2
[  561.877342][T30424] vcan0: tx drop: invalid da for name 0x0000000000000001
[  562.005261][T30434] binder: 30433:30434 ioctl 400c620e 200000000000 returned -22
[  562.091124][T30441] loop2: detected capacity change from 0 to 2048
[  562.137587][T30441] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  562.148570][T30450] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5398'.
[  562.155878][T30441] EXT4-fs (loop2): shut down requested (2)
[  562.181507][T28191] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  562.253159][T30457] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5400'.
[  562.752263][T30479] loop2: detected capacity change from 0 to 32768
[  562.758660][T30479] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5407 (30479)
[  562.790970][T30479] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  562.795503][T30479] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  562.799953][T30479] BTRFS info (device loop2): using free-space-tree
[  562.896348][T25692] jfs_flush_journal: synclist not empty
[  562.899430][T25692] metapage: ffff88802f8585d0: 00001000 00000000 00003938 00000000
[  562.904192][T25692] metapage: ffff88802f8585e0: 2f858200 ffff8880 23a5aa28 ffff8880
[  562.919045][T25692] metapage: ffff88802f8585f0: 00000004 00000000 00000000 00000000
[  562.928237][T25692] metapage: ffff88802f858600: 2a932000 ffff8880 0000002d 00000000
[  562.945729][T25692] metapage: ffff88802f858610: 00000000 dead4ead ffffffff 00000000
[  562.955301][T25692] metapage: ffff88802f858620: ffffffff ffffffff 99bfb8a0 ffffffff
[  562.962688][T25692] metapage: ffff88802f858630: 93523e78 ffffffff 00000000 00000000
[  562.970314][T25692] metapage: ffff88802f858640: 8bc3f740 ffffffff 00000300 00000000
[  562.977174][T25692] metapage: ffff88802f858650: 2f858650 ffff8880 2f858650 ffff8880
[  562.999326][T25692] metapage: ffff88802f858660: 00aa4c80 ffffea00 20a14000 ffff8880
[  563.007394][T25692] metapage: ffff88802f858670: 00001000 00003e24 00000000 00000000
[  563.018912][T25692] metapage: ffff88802f858680: 23a5a800 ffff8880
[  563.026324][T25692] page: ffffea0000aa4c80: 00fff2000000403c ffffea0000c13d88
[  563.040080][T25692] page: ffffea0000aa4c90: ffffea0000da08c8 0000000000000000
[  563.043243][T25692] page: ffffea0000aa4ca0: 000000000000002d ffff88802f8585d0
[  563.046435][T25692] page: ffffea0000aa4cb0: 00000001ffffffff ffff8881000e1a00
[  563.048992][T25692] metapage: ffff88802f8581f0: 00001000 00000000 00003cb0 00000000
[  563.051752][T25692] metapage: ffff88802f858200: 2f8586d8 ffff8880 2f8585e0 ffff8880
[  563.054563][T25692] metapage: ffff88802f858210: 00000004 00000000 00000000 00000000
[  563.057739][T25692] metapage: ffff88802f858220: 2b54c000 ffff8880 00000030 00000000
[  563.062464][T25692] metapage: ffff88802f858230: 00000000 dead4ead ffffffff 00000000
[  563.065198][T25692] metapage: ffff88802f858240: ffffffff ffffffff 99bfb8a0 ffffffff
[  563.068344][T25692] metapage: ffff88802f858250: 93523e78 ffffffff 00000000 00000000
[  563.070994][T25692] metapage: ffff88802f858260: 8bc3f740 ffffffff 00000300 00000000
[  563.073562][T25692] metapage: ffff88802f858270: 2f858270 ffff8880 2f858270 ffff8880
[  563.079303][T25692] metapage: ffff88802f858280: 00ad5300 ffffea00 20a14000 ffff8880
[  563.081914][T25692] metapage: ffff88802f858290: 00001000 00003e24 00000000 00000000
[  563.084834][T25692] metapage: ffff88802f8582a0: 23a5a800 ffff8880
[  563.089498][T25692] page: ffffea0000ad5300: 00fff2800000403c ffffea0000d888c8
[  563.093641][T25692] page: ffffea0000ad5310: ffffea0000d6aec8 0000000000000000
[  563.095949][T25692] page: ffffea0000ad5320: 0000000000000030 ffff88802f8581f0
[  563.100199][T25692] page: ffffea0000ad5330: 00000001ffffffff ffff8881000e1a00
[  563.102544][T25692] metapage: ffff88802f8586c8: 00001000 00000000 00003d58 00000000
[  563.105472][T25692] metapage: ffff88802f8586d8: 23a5aa28 ffff8880 2f858200 ffff8880
[  563.108498][T25692] metapage: ffff88802f8586e8: 00000004 00000000 00000000 00000000
[  563.117146][T25692] metapage: ffff88802f8586f8: 3650f000 ffff8880 0000001c 00000000
[  563.125668][T25692] metapage: ffff88802f858708: 00000000 dead4ead ffffffff 00000000
[  563.141139][T25692] metapage: ffff88802f858718: ffffffff ffffffff 99bfb8a0 ffffffff
[  563.166206][T25692] metapage: ffff88802f858728: 93523e78 ffffffff 00000000 00000000
[  563.231521][T25692] metapage: ffff88802f858738: 8bc3f740 ffffffff 00000300 00000000
[  563.255882][T25692] metapage: ffff88802f858748: 2f858748 ffff8880 2f858748 ffff8880
[  563.511029][T25692] metapage: ffff88802f858758: 00d943c0 ffffea00 20a14000 ffff8880
[  563.514767][T25692] metapage: ffff88802f858768: 00001000 00003e24 00000000 00000000
[  563.525810][T25692] metapage: ffff88802f858778: 23a5a800 ffff8880
[  563.530544][T25692] page: ffffea0000d943c0: 00fff2800000403c ffffea0000da2b48
[  563.533907][T25692] page: ffffea0000d943d0: ffffea0000a116c8 0000000000000000
[  563.543669][T25692] page: ffffea0000d943e0: 000000000000001c ffff88802f8586c8
[  563.550227][T25692] page: ffffea0000d943f0: 00000001ffffffff ffff8881000e1a00
[  563.617092][T28191] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  563.694545][ T5966] Bluetooth: hci2: command 0x0406 tx timeout
[  564.411195][T30525] loop2: detected capacity change from 0 to 2048
[  564.456495][T30525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  565.337684][T28191] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  565.538323][T30559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5422'.
[  565.613961][T30566] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.5423'.
[  566.374990][T30596] loop2: detected capacity change from 0 to 32768
[  566.398827][T30596] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  566.415328][T30596] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  566.568039][T28191] ocfs2: Unmounting device (7,2) on (node local)
[  566.741509][T30617] netlink: 'syz.2.5436': attribute type 1 has an invalid length.
[  566.745357][T30617] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5436'.
[  566.857635][T30623] loop2: detected capacity change from 0 to 1024
[  566.877402][T30623] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  566.897111][T30623] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  leaving read-only.
[  566.961072][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  567.304438][T30664] netlink: 'syz.2.5455': attribute type 4 has an invalid length.
[  567.317451][T30664] netlink: 'syz.2.5455': attribute type 4 has an invalid length.
[  567.358436][T30669] loop9: detected capacity change from 0 to 1024
[  567.481810][T30677] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  567.564903][T30694] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5463'.
[  567.625430][T30697] loop9: detected capacity change from 0 to 4096
[  567.658954][T30700] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  567.738133][ T6008] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  567.849612][T30705] loop9: detected capacity change from 0 to 32768
[  567.859639][T30705] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.5465 (30705)
[  567.870996][T30705] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  567.875625][T30705] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm
[  567.880142][T30705] BTRFS info (device loop9): using free-space-tree
[  567.899640][ T6008] usb 3-1: Using ep0 maxpacket: 32
[  567.906688][ T6008] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  567.914772][ T6008] usb 3-1: config 0 has no interface number 0
[  567.918887][ T6008] usb 3-1: config 0 interface 12 has no altsetting 0
[  567.933624][ T6008] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40
[  567.937155][ T6008] usb 3-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3
[  567.940223][ T6008] usb 3-1: Product: syz
[  567.944483][ T6008] usb 3-1: Manufacturer: syz
[  567.946248][ T6008] usb 3-1: SerialNumber: syz
[  567.950636][ T6008] usb 3-1: config 0 descriptor??
[  568.033052][T20820] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  568.456863][T30746] netlink: 'syz.0.5472': attribute type 1 has an invalid length.
[  568.512480][T30749] program syz.9.5473 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  569.499398][ T6008] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71
[  569.507808][ T6008] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[  569.516876][ T6008] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  569.525447][ T6008] f81534 3-1:0.12: probe with driver f81534 failed with error -71
[  569.540354][ T6008] usb 3-1: USB disconnect, device number 13
[  569.692446][T30775] sctp: [Deprecated]: syz.0.5480 (pid 30775) Use of struct sctp_assoc_value in delayed_ack socket option.
[  569.692446][T30775] Use struct sctp_sack_info instead
[  570.416737][T30781] loop2: detected capacity change from 0 to 32768
[  570.447274][T30781] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  570.498767][T30781] XFS (loop2): Ending clean mount
[  570.513759][   T33] audit: type=1800 audit(2000000069.589:281): pid=30781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5482" name="file1" dev="loop2" ino=6150 res=0 errno=0
[  570.529536][T28191] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  570.766037][T30818] loop2: detected capacity change from 0 to 512
[  570.829820][T30818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  570.840065][T30818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  570.870391][ T6008] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[  571.270435][ T6008] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  571.274754][ T6008] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  571.282725][T30829] syzkaller1: entered promiscuous mode
[  571.284086][ T6008] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  571.285154][T30829] syzkaller1: entered allmulticast mode
[  571.292115][ T6008] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  571.295669][ T6008] usb 10-1: SerialNumber: syz
[  571.534156][ T6008] usb 10-1: 0:2 : does not exist
[  571.640047][ T6008] usb 10-1: USB disconnect, device number 23
[  571.680367][ T5959] udevd[5959]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  572.055952][ T5966] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  572.062663][ T5966] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  572.066453][ T5966] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  572.071325][ T5966] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  572.077399][ T5966] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  572.194984][ T5987] bridge_slave_1: left promiscuous mode
[  572.200190][ T5987] bridge0: port 2(bridge_slave_1) entered disabled state
[  572.207089][ T5987] bridge_slave_0: left promiscuous mode
[  572.209916][ T5987] bridge0: port 1(bridge_slave_0) entered disabled state
[  572.739807][ T5987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  572.748468][ T5987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  572.754952][ T5987] bond0 (unregistering): Released all slaves
[  572.920709][T30928] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5505'.
[  573.376001][T30872] chnl_net:caif_netlink_parms(): no params data found
[  573.466198][ T5987] hsr_slave_0: left promiscuous mode
[  573.471911][ T5987] hsr_slave_1: left promiscuous mode
[  573.475016][ T5987] batman_adv: batadv0: Removing interface: batadv_slave_0
[  573.484576][ T5987] batman_adv: batadv0: Removing interface: batadv_slave_1
[  573.539624][T31070] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5514'.
[  573.616193][T31072] netlink: 'syz.0.5515': attribute type 1 has an invalid length.
[  573.623666][T31072] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5515'.
[  574.291968][ T5237] Bluetooth: hci3: command tx timeout
[  574.383398][ T5987] team0 (unregistering): Port device team_slave_1 removed
[  574.473300][ T5987] team0 (unregistering): Port device team_slave_0 removed
[  575.216963][T31120] loop9: detected capacity change from 0 to 256
[  575.217262][T31117] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5524'.
[  575.236819][T30872] bridge0: port 1(bridge_slave_0) entered blocking state
[  575.236817][T31120] exfat: Deprecated parameter 'utf8'
[  575.236906][T30872] bridge0: port 1(bridge_slave_0) entered disabled state
[  575.239639][T31120] exfat: Deprecated parameter 'utf8'
[  575.242166][T30872] bridge_slave_0: entered allmulticast mode
[  575.245552][T31120] exfat: Deprecated parameter 'utf8'
[  575.256752][T31120] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  575.260113][T30872] bridge_slave_0: entered promiscuous mode
[  575.280157][T30872] bridge0: port 2(bridge_slave_1) entered blocking state
[  575.292049][T30872] bridge0: port 2(bridge_slave_1) entered disabled state
[  575.294900][T30872] bridge_slave_1: entered allmulticast mode
[  575.300891][T30872] bridge_slave_1: entered promiscuous mode
[  575.452105][T30872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  575.467251][T30872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  575.586395][T30872] team0: Port device team_slave_0 added
[  575.612682][T30872] team0: Port device team_slave_1 added
[  575.748451][T31205] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5531'.
[  575.770024][T30872] batman_adv: batadv0: Adding interface: batadv_slave_0
[  575.773033][T30872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  575.816800][T30872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  575.836340][T30872] batman_adv: batadv0: Adding interface: batadv_slave_1
[  575.839298][T30872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  575.869303][T30872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  575.962517][T30872] hsr_slave_0: entered promiscuous mode
[  575.967814][T30872] hsr_slave_1: entered promiscuous mode
[  575.971446][T31276] netlink: 27 bytes leftover after parsing attributes in process `syz.0.5535'.
[  575.975132][T30872] debugfs: 'hsr0' already exists in 'hsr'
[  575.977080][T30872] Cannot create hsr debugfs directory
[  576.075845][T31309] ==================================================================
[  576.079340][T31309] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  576.082734][T31309] Read of size 2 at addr ffff888122df8142 by task syz.0.5538/31309
[  576.087250][T31309] 
[  576.088326][T31309] CPU: 0 UID: 0 PID: 31309 Comm: syz.0.5538 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  576.088348][T31309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  576.088357][T31309] Call Trace:
[  576.088366][T31309]  <TASK>
[  576.088373][T31309]  dump_stack_lvl+0x189/0x250
[  576.088394][T31309]  ? __kasan_check_byte+0x12/0x40
[  576.088413][T31309]  ? __pfx_dump_stack_lvl+0x10/0x10
[  576.088427][T31309]  ? lock_release+0x4b/0x3e0
[  576.088445][T31309]  ? __virt_addr_valid+0x4a5/0x5c0
[  576.088460][T31309]  print_report+0xca/0x240
[  576.088471][T31309]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  576.088487][T31309]  kasan_report+0x118/0x150
[  576.088505][T31309]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  576.088523][T31309]  __xfrm_state_lookup+0x6ad/0x8d0
[  576.088542][T31309]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  576.088562][T31309]  xfrm_state_add+0x27d/0xc40
[  576.088589][T31309]  xfrm_add_sa+0x35a1/0x4070
[  576.088603][T31309]  ? __pfx_xfrm_add_sa+0x10/0x10
[  576.088616][T31309]  ? apparmor_capable+0x137/0x1b0
[  576.088632][T31309]  ? __nla_parse+0x40/0x60
[  576.088652][T31309]  xfrm_user_rcv_msg+0x7a3/0xab0
[  576.088667][T31309]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  576.088686][T31309]  ? __pfx___mutex_trylock_common+0x10/0x10
[  576.088700][T31309]  ? rcu_is_watching+0x15/0xb0
[  576.088712][T31309]  ? trace_contention_end+0x39/0x120
[  576.088724][T31309]  ? __mutex_lock+0x335/0x1360
[  576.088741][T31309]  netlink_rcv_skb+0x208/0x470
[  576.088758][T31309]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  576.088769][T31309]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  576.088789][T31309]  ? netlink_deliver_tap+0x2e/0x1b0
[  576.088802][T31309]  ? netlink_deliver_tap+0x2e/0x1b0
[  576.088817][T31309]  xfrm_netlink_rcv+0x79/0x90
[  576.088828][T31309]  netlink_unicast+0x82f/0x9e0
[  576.088843][T31309]  ? __pfx_netlink_unicast+0x10/0x10
[  576.088856][T31309]  ? netlink_sendmsg+0x642/0xb30
[  576.088869][T31309]  ? skb_put+0x11b/0x210
[  576.088886][T31309]  netlink_sendmsg+0x805/0xb30
[  576.088904][T31309]  ? __pfx_netlink_sendmsg+0x10/0x10
[  576.088921][T31309]  ? aa_sock_msg_perm+0xf1/0x1d0
[  576.088938][T31309]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  576.088952][T31309]  ? __pfx_netlink_sendmsg+0x10/0x10
[  576.088966][T31309]  __sock_sendmsg+0x21c/0x270
[  576.088982][T31309]  ____sys_sendmsg+0x505/0x830
[  576.089000][T31309]  ? __pfx_____sys_sendmsg+0x10/0x10
[  576.089019][T31309]  ? import_iovec+0x74/0xa0
[  576.089033][T31309]  ___sys_sendmsg+0x21f/0x2a0
[  576.089050][T31309]  ? __pfx____sys_sendmsg+0x10/0x10
[  576.089071][T31309]  ? __fget_files+0x2a/0x420
[  576.089087][T31309]  ? __fget_files+0x3a0/0x420
[  576.089106][T31309]  __x64_sys_sendmsg+0x19b/0x260
[  576.089125][T31309]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  576.089144][T31309]  ? rcu_is_watching+0x15/0xb0
[  576.089159][T31309]  ? do_syscall_64+0xbe/0x3b0
[  576.089176][T31309]  do_syscall_64+0xfa/0x3b0
[  576.089189][T31309]  ? lockdep_hardirqs_on+0x9c/0x150
[  576.089203][T31309]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.089215][T31309]  ? exc_page_fault+0x9f/0xf0
[  576.089259][T31309]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.089272][T31309] RIP: 0033:0x7fb7e758ebe9
[  576.089289][T31309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  576.089303][T31309] RSP: 002b:00007fb7e835d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  576.089319][T31309] RAX: ffffffffffffffda RBX: 00007fb7e77b5fa0 RCX: 00007fb7e758ebe9
[  576.089327][T31309] RDX: 0000000000000010 RSI: 00002000000035c0 RDI: 0000000000000003
[  576.089335][T31309] RBP: 00007fb7e7611e19 R08: 0000000000000000 R09: 0000000000000000
[  576.089342][T31309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  576.089350][T31309] R13: 00007fb7e77b6038 R14: 00007fb7e77b5fa0 R15: 00007ffe8a0f4ab8
[  576.089362][T31309]  </TASK>
[  576.089367][T31309] 
[  576.244898][T31309] Allocated by task 18282:
[  576.246845][T31309]  kasan_save_track+0x3e/0x80
[  576.248885][T31309]  __kasan_slab_alloc+0x6c/0x80
[  576.250891][T31309]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  576.253137][T31309]  xfrm_state_alloc+0x24/0x2f0
[  576.255253][T31309]  __find_acq_core+0x8a7/0x1c00
[  576.257364][T31309]  xfrm_find_acq+0x78/0xa0
[  576.259301][T31309]  xfrm_alloc_userspi+0x6b3/0xc90
[  576.261502][T31309]  xfrm_user_rcv_msg+0x7a3/0xab0
[  576.263621][T31309]  netlink_rcv_skb+0x208/0x470
[  576.265694][T31309]  xfrm_netlink_rcv+0x79/0x90
[  576.267757][T31309]  netlink_unicast+0x82f/0x9e0
[  576.269832][T31309]  netlink_sendmsg+0x805/0xb30
[  576.271952][T31309]  __sock_sendmsg+0x21c/0x270
[  576.273999][T31309]  ____sys_sendmsg+0x505/0x830
[  576.276066][T31309]  ___sys_sendmsg+0x21f/0x2a0
[  576.278115][T31309]  __x64_sys_sendmsg+0x19b/0x260
[  576.280309][T31309]  do_syscall_64+0xfa/0x3b0
[  576.282251][T31309]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.284773][T31309] 
[  576.285817][T31309] Freed by task 5994:
[  576.287560][T31309]  kasan_save_track+0x3e/0x80
[  576.289617][T31309]  kasan_save_free_info+0x46/0x50
[  576.291840][T31309]  __kasan_slab_free+0x5b/0x80
[  576.293951][T31309]  kmem_cache_free+0x18f/0x400
[  576.296050][T31309]  xfrm_state_gc_task+0x52d/0x6b0
[  576.298244][T31309]  process_scheduled_works+0xae1/0x17b0
[  576.300620][T31309]  worker_thread+0x8a0/0xda0
[  576.302644][T31309]  kthread+0x711/0x8a0
[  576.304449][T31309]  ret_from_fork+0x3fc/0x770
[  576.306431][T31309]  ret_from_fork_asm+0x1a/0x30
[  576.308524][T31309] 
[  576.309612][T31309] The buggy address belongs to the object at ffff888122df8000
[  576.309612][T31309]  which belongs to the cache xfrm_state of size 928
[  576.315505][T31309] The buggy address is located 322 bytes inside of
[  576.315505][T31309]  freed 928-byte region [ffff888122df8000, ffff888122df83a0)
[  576.321349][T31309] 
[  576.322419][T31309] The buggy address belongs to the physical page:
[  576.325083][T31309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888122df8d80 pfn:0x122df8
[  576.329349][T31309] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  576.332786][T31309] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  576.336040][T31309] page_type: f5(slab)
[  576.337775][T31309] raw: 057ff00000000040 ffff888104d68500 dead000000000122 0000000000000000
[  576.341439][T31309] raw: ffff888122df8d80 00000000800e000a 00000000f5000000 0000000000000000
[  576.345074][T31309] head: 057ff00000000040 ffff888104d68500 dead000000000122 0000000000000000
[  576.348756][T31309] head: ffff888122df8d80 00000000800e000a 00000000f5000000 0000000000000000
[  576.352410][T31309] head: 057ff00000000002 ffffea00048b7e01 00000000ffffffff 00000000ffffffff
[  576.355962][T31309] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  576.359661][T31309] page dumped because: kasan: bad access detected
[  576.362379][T31309] page_owner tracks the page as allocated
[  576.364841][T31309] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 17784, tgid 17776 (syz.7.2449), ts 313526227081, free_ts 271769628998
[  576.372940][T31309]  post_alloc_hook+0x240/0x2a0
[  576.375028][T31309]  get_page_from_freelist+0x21e4/0x22c0
[  576.377440][T31309]  __alloc_frozen_pages_noprof+0x181/0x370
[  576.379965][T31309]  alloc_pages_mpol+0x232/0x4a0
[  576.382070][T31309]  allocate_slab+0x8a/0x370
[  576.384051][T31309]  ___slab_alloc+0xbeb/0x1410
[  576.386112][T31309]  kmem_cache_alloc_noprof+0x283/0x3c0
[  576.388467][T31309]  xfrm_state_alloc+0x24/0x2f0
[  576.390483][T31309]  xfrm_state_find+0x37d4/0x5400
[  576.392446][T31309]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  576.394904][T31309]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  576.397309][T31309]  xfrm_lookup_route+0x3c/0x1c0
[  576.399328][T31309]  udp_sendmsg+0x142e/0x2170
[  576.401249][T31309]  __sock_sendmsg+0x19c/0x270
[  576.403280][T31309]  ____sys_sendmsg+0x52d/0x830
[  576.405364][T31309]  ___sys_sendmsg+0x21f/0x2a0
[  576.407430][T31309] page last free pid 4594 tgid 4594 stack trace:
[  576.410127][T31309]  __free_frozen_pages+0xbc4/0xd30
[  576.412329][T31309]  __put_partials+0x156/0x1a0
[  576.414392][T31309]  put_cpu_partial+0x17c/0x250
[  576.416487][T31309]  __slab_free+0x2d5/0x3c0
[  576.418400][T31309]  qlist_free_all+0x97/0x140
[  576.420333][T31309]  kasan_quarantine_reduce+0x148/0x160
[  576.422626][T31309]  __kasan_slab_alloc+0x22/0x80
[  576.424673][T31309]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  576.426946][T31309]  prepare_creds+0x31/0x6c0
[  576.428912][T31309]  copy_creds+0x106/0xa10
[  576.430753][T31309]  copy_process+0x964/0x3c00
[  576.432740][T31309]  kernel_clone+0x21e/0x840
[  576.434637][T31309]  user_mode_thread+0xdd/0x140
[  576.436692][T31309]  call_usermodehelper_exec_work+0x5c/0x230
[  576.439199][T31309]  process_scheduled_works+0xae1/0x17b0
[  576.441518][T31309]  worker_thread+0x8a0/0xda0
[  576.443520][T31309] 
[  576.444565][T31309] Memory state around the buggy address:
[  576.446910][T31309]  ffff888122df8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  576.450266][T31309]  ffff888122df8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  576.453689][T31309] >ffff888122df8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  576.457079][T31309]                                            ^
[  576.459673][T31309]  ffff888122df8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  576.463088][T31309]  ffff888122df8200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  576.466413][T31309] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  576.469926][T31309] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  576.473103][T31309] CPU: 0 UID: 0 PID: 31309 Comm: syz.0.5538 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  576.478125][T31309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  576.482216][T31309] Call Trace:
[  576.483648][T31309]  <TASK>
[  576.484937][T31309]  dump_stack_lvl+0x99/0x250
[  576.486930][T31309]  ? __asan_memcpy+0x40/0x70
[  576.488873][T31309]  ? __pfx_dump_stack_lvl+0x10/0x10
[  576.491049][T31309]  ? __pfx__printk+0x10/0x10
[  576.492991][T31309]  vpanic+0x281/0x750
[  576.494770][T31309]  ? __pfx_vpanic+0x10/0x10
[  576.496761][T31309]  ? irqentry_exit+0x74/0x90
[  576.498772][T31309]  panic+0xb9/0xc0
[  576.500379][T31309]  ? __pfx_panic+0x10/0x10
[  576.502275][T31309]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  576.504698][T31309]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  576.507253][T31309]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  576.509522][T31309]  check_panic_on_warn+0x89/0xb0
[  576.511625][T31309]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  576.513863][T31309]  end_report+0x78/0x160
[  576.515641][T31309]  kasan_report+0x129/0x150
[  576.517580][T31309]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  576.519844][T31309]  __xfrm_state_lookup+0x6ad/0x8d0
[  576.521780][T31309]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  576.523921][T31309]  xfrm_state_add+0x27d/0xc40
[  576.525896][T31309]  xfrm_add_sa+0x35a1/0x4070
[  576.527810][T31309]  ? __pfx_xfrm_add_sa+0x10/0x10
[  576.529819][T31309]  ? apparmor_capable+0x137/0x1b0
[  576.531911][T31309]  ? __nla_parse+0x40/0x60
[  576.533785][T31309]  xfrm_user_rcv_msg+0x7a3/0xab0
[  576.535886][T31309]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  576.538131][T31309]  ? __pfx___mutex_trylock_common+0x10/0x10
[  576.540553][T31309]  ? rcu_is_watching+0x15/0xb0
[  576.542520][T31309]  ? trace_contention_end+0x39/0x120
[  576.544734][T31309]  ? __mutex_lock+0x335/0x1360
[  576.546815][T31309]  netlink_rcv_skb+0x208/0x470
[  576.548880][T31309]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  576.551133][T31309]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  576.553335][T31309]  ? netlink_deliver_tap+0x2e/0x1b0
[  576.555587][T31309]  ? netlink_deliver_tap+0x2e/0x1b0
[  576.557834][T31309]  xfrm_netlink_rcv+0x79/0x90
[  576.559871][T31309]  netlink_unicast+0x82f/0x9e0
[  576.561944][T31309]  ? __pfx_netlink_unicast+0x10/0x10
[  576.564160][T31309]  ? netlink_sendmsg+0x642/0xb30
[  576.566303][T31309]  ? skb_put+0x11b/0x210
[  576.568159][T31309]  netlink_sendmsg+0x805/0xb30
[  576.570257][T31309]  ? __pfx_netlink_sendmsg+0x10/0x10
[  576.572527][T31309]  ? aa_sock_msg_perm+0xf1/0x1d0
[  576.574591][T31309]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  576.576846][T31309]  ? __pfx_netlink_sendmsg+0x10/0x10
[  576.578996][T31309]  __sock_sendmsg+0x21c/0x270
[  576.580933][T31309]  ____sys_sendmsg+0x505/0x830
[  576.582928][T31309]  ? __pfx_____sys_sendmsg+0x10/0x10
[  576.585148][T31309]  ? import_iovec+0x74/0xa0
[  576.587056][T31309]  ___sys_sendmsg+0x21f/0x2a0
[  576.589121][T31309]  ? __pfx____sys_sendmsg+0x10/0x10
[  576.591377][T31309]  ? __fget_files+0x2a/0x420
[  576.593373][T31309]  ? __fget_files+0x3a0/0x420
[  576.595447][T31309]  __x64_sys_sendmsg+0x19b/0x260
[  576.597606][T31309]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  576.599958][T31309]  ? rcu_is_watching+0x15/0xb0
[  576.602031][T31309]  ? do_syscall_64+0xbe/0x3b0
[  576.604044][T31309]  do_syscall_64+0xfa/0x3b0
[  576.605974][T31309]  ? lockdep_hardirqs_on+0x9c/0x150
[  576.608157][T31309]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.610794][T31309]  ? exc_page_fault+0x9f/0xf0
[  576.612812][T31309]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.615282][T31309] RIP: 0033:0x7fb7e758ebe9
[  576.617173][T31309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  576.625175][T31309] RSP: 002b:00007fb7e835d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  576.628556][T31309] RAX: ffffffffffffffda RBX: 00007fb7e77b5fa0 RCX: 00007fb7e758ebe9
[  576.631984][T31309] RDX: 0000000000000010 RSI: 00002000000035c0 RDI: 0000000000000003
[  576.635396][T31309] RBP: 00007fb7e7611e19 R08: 0000000000000000 R09: 0000000000000000
[  576.638696][T31309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  576.642072][T31309] R13: 00007fb7e77b6038 R14: 00007fb7e77b5fa0 R15: 00007ffe8a0f4ab8
[  576.645439][T31309]  </TASK>
[  576.647575][T31309] Kernel Offset: disabled
[  576.649463][T31309] Rebooting in 86400 seconds..

VM DIAGNOSIS:
01:48:13  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33bcc60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=00000000000015df RDI=00000000000015e0 RBP=ffffffff99de6770 RSP=ffffc900030ee970
R8 =ffff888020d10237 R9 =1ffff110041a2046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e7247 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb7e835d6c0 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000380 CR3=000000003c938000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fb7e7787498 00007fb7e7787470 XMM03=00007fb7e77874a8 00007fb7e77874a0
XMM04=00007fb7e82ed100 00007fb7e7787460 XMM05=00007fb7e7787478 00007fb7e77874c0
XMM06=00007fb7e77874b8 00007fb7e77874b0 XMM07=00007fb7e77874a8 00007fb7e77874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fb7e7612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b44d6b RBX=1ffff11009608341 RCX=ffff888106c10000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900031af700 RSP=ffffc900031af580
R8 =ffffffff8fa34237 R9 =1ffffffff1f46846 R10=dffffc0000000000 R11=fffffbfff1f46847
R12=ffff88804b041a08 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81b44d53 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5b43ce7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f5b431876c3 00007f5b431876c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0120100001d78004 0100000008060601
XMM06=68e602080001d7e0 0300100001d7d003 XMM07=00100001d7c00302 100001d7b0030598
XMM08=100001d690030408 0013900303a89db8 XMM09=660a79656b5f5f2e 6e6f6974656c706d
XMM10=2030323833303061 3966666666666666 XMM11=696c5f6f676c615f 7664617461622062
XMM12=5f5f2e6574616572 635f6b636f737761 XMM13=3030613966666666 666666660a79656b
XMM14=5f70636c6c5f6366 6e20622030306434 XMM15=2e6563697665645f 7265747369676572
