last executing test programs:

24m21.448691964s ago: executing program 32 (id=90):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @empty}}}]}]}, 0x94}}, 0x0)

23m44.212258771s ago: executing program 33 (id=440):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x20008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)={0x30, r2, 0x401, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x6008004)

21m49.72675643s ago: executing program 34 (id=1641):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0x4c}}, 0x0)

18m57.669389838s ago: executing program 35 (id=3573):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x0, {}, [{0x94, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0xfffffd0d, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0xffffffffffffffe7}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa8}}, 0x0)

17m10.977396586s ago: executing program 36 (id=4896):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}}, 0x0)

10m15.683894279s ago: executing program 4 (id=10936):
capset(&(0x7f0000000400)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xffffb9e3, 0x5})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)

10m15.582158953s ago: executing program 4 (id=10938):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_cmd={0x26, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffffb]}})

10m15.42458418s ago: executing program 4 (id=10941):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r3=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x38, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x38}, 0x4, 0x700000000000000}, 0x0)

10m15.421542627s ago: executing program 4 (id=10945):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

10m15.419546022s ago: executing program 4 (id=10946):
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e20, @local}}}, &(0x7f0000000040)=0x84)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5f}, &(0x7f0000000040)=0xfce8)

10m14.995436565s ago: executing program 4 (id=10953):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x101c552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x122e, &(0x7f00000024c0)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r1 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0)
dup3(r1, r0, 0x0)
io_setup(0x2, &(0x7f0000000400)=<r2=>0x0)
io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x2400}])

10m14.881219753s ago: executing program 37 (id=10953):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x101c552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x122e, &(0x7f00000024c0)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r1 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0)
dup3(r1, r0, 0x0)
io_setup(0x2, &(0x7f0000000400)=<r2=>0x0)
io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x2400}])

9m54.847895923s ago: executing program 8 (id=11238):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24001050}, 0x0)

9m54.588395416s ago: executing program 8 (id=11239):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = fanotify_init(0x200, 0x0)
r4 = memfd_create(&(0x7f00000007c0)='-B\xd5NI\xc5j\x9app\x8a\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7U\x99\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10\xc5\x8d\xbeQ\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\xff8\r\x0e\xc9\xc0\x03k|~\x82\xbf\x91\xa3\xa8\xe2a\x86\xcf\xcb\xfchw\x89\xe0\x11\xd1!\xfd\x1efb\x1ew\xc0\x1d\xcef\xd0\x89M\xea9\x11\xb69\nO\xd3\xd9\x88\xa9]\x8f\xf1F\xdb\x83\x00\x00\x00\x00jke\xf3G\x00&\xedbe\xf4zaR\xb5\xd2\xb3Z\xb9\xb1\x89\xa1\xd5\xd34\xf9\xeb}\x87\xd2\xaba\t\xc3H\xe7#~\xb9\xa3\xfe\xd7\xbd.\xacpr\x9f\x9c\x03\v\x8a\xfc\xa9\x16\xad(V4\xb5\x986\xca+\x12\x95\xd6\xbbZ\xa9P\xd8\x17\f\x02\x84K\xffy\a\xcd\x99\x10A\x9b\x8f\\\x8d;\x18f<22\\u\xce\xaa\x8c\xca\xffX\xcc\x9a.\x18\x14x\x92\xdd\xed\xb1\xd6\x9e|\x90Q9\xa4\x0faw\xb0\xee\x80P\xf9?\xe2\x89\xb7W\xac\fYr\xeaxh\v\xd3\x10\x97B\x80\xec){\xb3=\xcer3K\xa6/\xe6\x00\x00\x00\x00\x00\x00\x00\x00\xa5\xc0\xf1k\x1d\xc7\xac\x83\f\xa6\x92v*!m\xe3\x82\xef\xb1\xd9oW\xff\xa6*\n\x88\x11\xb3\xed\xfa\"\xe0\"\xcb\xe0>U\xafDY\x03\xee\x04q\xc2\xa3g\xbc\x9e\x87p6\x8bH\x8e\x03\xd3\xa7:\x82\\\xf4\xe9\xd6\fh\x928\xb7Q/\xf3\xa44\xf2\xc1\x06\xcapQa\xd7(\xbc0a\xd4\x81\x99%\x82\xed-\x06\xd4\x9f\xf3\"\xed\xd9z\xd0\xf8\x1a$\xfe\vAC\x95\x96\xc4.z\xb9VR\x06\x02\xde[\re_=~J\xc0\xf3~\x81\xc093g\xf9\'\xec\xda\x90\xa8q\x7fS\xad\xe3\x11S\x18\x80\x11\x1b\xf7:\ag\x15\xa42S\xc7\xa1\x00\xea\x9b\xe0a\x02\x00\x00\x00\xe8n\x10\x9b>p\xe6\\d \x8a\x90F=lep\x0e=\x0f?#\xf7=[\x84S\xd6\x16\xb0\x9a\xf7\xf6F\xe6\x01\x1f_(Y\x1e\xa3\x85\xff\xf0\xf3X\x03\x04\xf0\"\nX#!\xac\xd0\x92$\xe7o\xff\xa4\xdc\x15\x84\xa2\xb5D\xca\x01KK\xc3\xdb\xb0\xb8N\xa1Y\x18\t\xb2\xf8\xf5\x11\x01Q\xd9\xd9qN$\x8c\xa4m\xff\xcf\xd0\x8b\x1d\f\x1e\xc7\xa3\x90d\xbc<\xe9\xaa\x85>\xe8\xe7\xdc\x9a\x7f\xd7\t\xbe\xa8\xe5U\xd3f\x01\x00\x00\x00\x00\x00\x00\x00\xff\xf2\x1a\xb5\xb0\xe0!z\xa4\vj7\x90\xcc\xa2\xe5\xa9\v\xcd^(*\xab\x06\x9a>\xd7r\xf9\xc4x\xb5\xf7\xf9e\xa6\xc92K\'\x88RR|\xd4\xf5\x80\x8a\x1e\x91\x17\x96\xf4\x8e\x11V\xff\x04\xe6\x93-\xbd~\xcd\xb5\xb1\xabcZ\x1b\xa0w\x92w<\x1b\x95L\b\xe9\x9c\xaa\xaawe\xcb\xb9\xf1\xfce)\xfd\xe7\xa2x,\"x3\x03\x9d\x1a\xe2\x7f\xaf\xd6\xd3\x1dO\"<\xff\xff4\x1f\xf5\x1c\xc8\xbaIi\xb2\x0ep\xa6gWd#Y\xcb\x8aHE6R\xeb\x1eh\x8f\xe3#-\xe12\xd2\xbd\xe8\x03\x12\x10\xc1\x10\xd7\xd9\xfa\aY\x1c\x8a=\x1c\x9fS\xbb\xa5\xbb\"{\x8a1yG\xfc\x928p\v/\xbf\xc5\xea\x82\xf7\xb2\x8c&\xf1]3k\xef\x9c1\x02\x05\xec\x1e\xfd\x99\x00\xc6W\x11\xa9^\xc5\xe4H<\xda\xb8\xb6\x8d\xaa\xac\x1b\x84|z<\x10|\xe4\xbf\x85\x11\xef\xfd\xa3;\xf0W\rD\x16\ajYRQ\xeaQ&#\xdbIT\xb6I&P\xff\xc9!7\x83\x9a \xc1\x850A\x05*\xfa\xd5\x8e\xbd\xb7i\xa5\xaf\xf5\r|\xf7\xf50h\x10\x15\xba\x81\xc0mS]\x16\xef\xa7#\xfa[\x80\xef\xf9\x14;v\xc1q\xb1\x98<w4H\x85\xea\xadI\x8c\xb89\x87\xf8\xf4~\x1a\xa7\xb0-FL\x98+\\\x9f\x88\x00t\\l\xa6\xff\xaa9R0\xdc\x16\xbf\xf4\x18\f\xd9,\xac\xd6\x95i\x98\xf6K\x00\xa3\x15 j\xd8\x9d\x95\x8c\x94\x91\xf9.\x9c\xd7\xb7', 0x6)
r5 = dup(r4)
fanotify_mark(r3, 0x401, 0x1000, r5, 0x0)

9m53.164899831s ago: executing program 8 (id=11243):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

9m53.163978648s ago: executing program 8 (id=11244):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000580)={[{@fat=@debug}, {@shortname_winnt}, {@shortname_mixed}, {@numtail}, {@uni_xlate}, {@shortname_lower}, {@fat=@nfs}, {@fat=@showexec}, {@utf8no}, {@shortname_win95}, {@fat=@discard}, {@rodir}, {@utf8no}, {@shortname_lower}, {@rodir}, {}, {@utf8}, {@rodir}]}, 0x0, 0x2be, &(0x7f0000000840)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020)

9m53.143464968s ago: executing program 8 (id=11247):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000940)={[{0x2d, 'hugetlb'}, {0x2d, 'cpuset'}]}, 0x11)

9m52.710457246s ago: executing program 8 (id=11252):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

9m52.493874038s ago: executing program 38 (id=11252):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

8m15.547493836s ago: executing program 9 (id=12759):
ioperm(0xfffffffffffffff8, 0x0, 0xfffffffffffffffa)

8m15.44874024s ago: executing program 9 (id=12762):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071122d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

8m15.364623496s ago: executing program 9 (id=12764):
syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0xffff}, 0x1c)

8m12.047187166s ago: executing program 9 (id=12797):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file1\x00', 0x85)
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r1=>0x0}, 0x2020)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a00ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f3a6af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c7860e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2c85020d4ab1e4c87492e76b7e6f4bbd070000001885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d80762ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0x1, 0x2, 0x80000001, 0x0, 0x0, 0x10000004, {0x41, 0xd08, 0x0, 0xfe, 0x0, 0x8, 0x7, 0x0, 0x122, 0xc000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50)

8m11.812599505s ago: executing program 9 (id=12801):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101)
mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

8m11.812310609s ago: executing program 9 (id=12802):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x800000, &(0x7f0000000200)=ANY=[], 0x1, 0x3b6, &(0x7f0000000240)="$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")
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x42, 0x0)

7m55.699947137s ago: executing program 39 (id=12802):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x800000, &(0x7f0000000200)=ANY=[], 0x1, 0x3b6, &(0x7f0000000240)="$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")
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x42, 0x0)

3m46.801228886s ago: executing program 6 (id=17206):
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)

3m46.747037434s ago: executing program 6 (id=17207):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000013fedbdf25020202000900030073797a32000000000900010073797a3100000000050004"], 0x34}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80)

3m46.746714999s ago: executing program 6 (id=17208):
r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000800)={0x20, 0x6, 0x1, "c0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001500)={0x44, 0x0, 0x0, 0x0, &(0x7f00000013c0)={0x20, 0x81, 0x1, "bc"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)

3m46.061642289s ago: executing program 6 (id=17227):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000002c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@nogrpid}, {@barrier}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH")
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')

3m46.059239689s ago: executing program 6 (id=17229):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000406a05000000000000000109022d00010000000009040000010300000009210000080122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x8, "1f"}, @main=@item_012={0x2, 0x0, 0x8, '\x00\x00'}, @main=@item_012={0x1, 0x0, 0xb, "f2"}]}}, 0x0}, 0x0)

3m44.427056096s ago: executing program 6 (id=17248):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01')

3m44.258300257s ago: executing program 40 (id=17248):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01')

2m56.447187843s ago: executing program 3 (id=17964):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000300000000000000030000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701000008ffffffb702000008000000b703000007000000850000000400000085000000d000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc)

2m56.375139001s ago: executing program 3 (id=17965):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x7f}]}}]}, 0x3c}}, 0x24040084)

2m56.374617941s ago: executing program 3 (id=17966):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000085}, 0x20004000)

2m56.303948802s ago: executing program 3 (id=17967):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x95)
lseek(r0, 0x100, 0x1)

2m56.009840487s ago: executing program 3 (id=17969):
socket(0x2c, 0x1, 0x8)

2m55.658701517s ago: executing program 3 (id=17976):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c)

2m55.394766579s ago: executing program 41 (id=17976):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c)

2m30.531626342s ago: executing program 2 (id=18330):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x14, 0x15, 0x1, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x51}, 0x0)

2m30.5313867s ago: executing program 2 (id=18331):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x19}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

2m30.442996007s ago: executing program 2 (id=18332):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5b}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@generic={0x0, r0}, 0x18)
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
getcwd(0x0, 0x0)
r4 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000600)=0x3)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x7d)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0xfd)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0xfa)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902"], 0x0)

2m27.163404344s ago: executing program 2 (id=18373):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, 0x0, 0x0)

2m27.010953998s ago: executing program 2 (id=18374):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r0, &(0x7f0000000000)={{0x6, @rose, 0x6}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)=@caif=@dbg={0x25, 0x0, 0x4e}, 0x80)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@verity_require}, {@volatile}, {@default_permissions}], [], 0x2c})
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x44, 0x4, 0x2}, 0x50)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000600), &(0x7f0000000480)=@tcp=r5}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f00000003c0)="01b4", &(0x7f0000000300)=@tcp=r4, 0x1}, 0x20)
close(r4)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @local}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x0, 0x3ff}}}, 0x118)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000440)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x10003, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xffff7fff}, {0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10001}, r2, 0x4}}, 0x48)
write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000400)={0x13, 0x10, 0xfa00, {&(0x7f0000000200), r2, 0x2}}, 0x18)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80)
r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0)
write$P9_RREADDIR(r7, &(0x7f00000005c0)={0x49, 0x29, 0x1, {0x578, [{{0x10, 0x2, 0x7}, 0x40, 0x4, 0x7, './file1'}, {{0x80, 0x1, 0x1}, 0x6b, 0x11, 0x7, './file0'}]}}, 0x49)
r8 = fanotify_init(0x200, 0x0)
fanotify_mark(r8, 0x201, 0x4800003e, r6, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000080)='./file1\x00', 0x2000048, &(0x7f0000000000), 0x1, 0xb989, &(0x7f0000001280)="$eJzs3QtsXXUdwPHTru1WUFlEoxEJZYMNhFHaznU8lLaMjTIoyASq4zWgjMlghi0Kg0jRGFBCphJfIUZeIgbiA2d8gGFqYCCBjSAMRAUTGWDCa5gNNVBzes/t2ruuof/t/6+jn0+ynnvO7e/s9n77P5eSte2eu6Ajy2qykt6s0g3Lj32u8cb2H3xz2n2HL7626vXS0bZJxd0NxXbfYjsl6z9ZW367unSo5jurf1Gd71QPPu9u9fVV78my9xW7bcW2tbS5vKn8fn0VisOTy/dXDzyMqq+W/gyoz998ec6U8wafJ3/HLMsO3eYDHae62+fNLZ6TbFC3CcXdVVvv69/WlP4c9ccsO2pttt3PjzGVP87JZ6z6wpNj/UB2Bd3t8zor+rcVnauK9dhQuQbHo8rP83PPbFpWPIVVg69Hu5ru9rnHZyOs43/+5Ru9faXrZm2WZXVZlk3MsmzSWPdg52jvaOnIr/nl/SJ7ef1PHu7z4s7/Xv2zLMveXbxOHFZ+LQB2Le0dLUcPs/7rRlr/dx23/ibrH3Z9ne0dLflar1j/k0Za/9PuPmZh8UV3a2nqrbH9IAAAAACAYS2/bOWFi5Yu7bnEDTfccGPgxlhfmYDYti76sX4kQGop/nNirD9GAAAAGO86u9pfmlA15NCEwTt7P9zTv525pfuClXfPOaG8Le6eP8wph3yff19fX9/q05eeU+xOrPh+2UmVw/n5l9y36NJit6Hy+w9q+4/WZmefv2Rpz6H5XzW1Nrs032nKzzutNvtavtOc70yvzW7Pd1r6d+qzNfnOIecuW3pefuCAwGfsnaWzqzebMKRYNuSzYXD/Jff1/qq8HeGU5bP1/1CJvP/mplvuqrivbDv9B86/7//hzxd4Rxld/2uuKW9HOOU263/94llNw923/f4D55+if1zDXP+HNKq87ldc/xuGOeXA/K9P+/pzef8ZP113bXGo5u1c/wedf2pl//6TD1z/81PtV77+568t++/QkzEOdXZd9dJI63/k/jUfKt6tetDswNla+m77TN7/nuvaHi8O1Y6y/34jrf+qhm2uJ4xSZ9dNfRXrfxT9s+nDnHKgybvmdK7O+7/25iOPDrpvNP33r+zfuOKizzYuv2zljCUXLVrcs7jn4pbmWa3NrU2zZ89q7L8klN7u2JMyjuzY+s92q5ipyrL9B+ZnX3HMhrz/n28+9dbi0KRR9p824vo/e+hjZZAp1VldXXbpohUrLmkqvS3vNpfelt5tmP6jeP2fWv4iqr7YVmXZBwfmD7zy9YPz/ndu2HRLcahulP2nj9S/buvfS6AdXP/nVcwM6f/QIz035/2XH/ThC4tDo339P2DE9d9r/e+ozq6K/+Gzk+X9T958xMbA8QN9/RdXiv71G1tXBY5/RP+4UvRf82LL7YHjB+kfV4r+997feEbg+MH6x5Wi/+cePGhl4PgM/eNK0X/GU9P3DBw/RP+4UvT/xxNTZwaON+ofV4r+Jz174dWB44fqH1eK/t99ZdmNgeNN+seVov/v+859MHC8Wf+4UvTf/dXFLweOt+gfV4r+K565fK/A8Zn6x5Wi/2/XX3lk4PhH9Y8rRf+Na5afEjg+S/+4UvRvXPf5SwLHW/WPK0X/F1/44W8Cx2frH1eK/g3P3/K9wPHD9I8rRf/Lt/zkX4Hjh+sfV4r+d71xx2OB40foH1eK/g9v+OW0wPEj9Y8rRf+aJ38e+u80P6Z/XCn6n/XAvRcEjn9c/7hS9P/W2rtPDBw/avv9a3bWQxzXUvTve/bEZwPH26z/uFL0n/XK/NDfD9uuf1wp+l/UN+/HgeMd+seVov+trx79lcDxo/WPK0X/p58564rA8Tn6x5Wi/3vXL1wYOH6M/nGl6N+55rTmwPG5+seVon/vugXvDxyfp39cQ/vX7fTz5/3nvvClvwaOH6t/XCnW/6rnr/5P4Hin/nGl6P+nLddeHzh+nP5xpei/9xurVgeOz9c/rhT9z9lwfXvg+PH6x5Wi/x1Pfvv8wPET9I8rRf9XH7hhj8DxLv3jStH/sLXfD/1h6yfqH1eK/te9tuGGwPGT9I8rRf85bz12T+D4J/SPK0X/fV5+5vHA8ZP1jytF/yf+/vSmwPEF+seVov+PHlk7MXD8k/rHlaL/2b/7w3C/J+TtOEX/uFL0P+LRdZ2B46fqH1eK/pv+9tDFgeOn6R9Xiv4z/73XbYHj3frHlaL/m5v3uSpw/FP6x5Wi/20b93whcPzT+seVov+yFz+wLnB8of5xpeg/+f7dDw8cP13/uFL0f+rBPfYOHD9D/7hS9P/iUxNWBI6fqX9cKfrPf2LigsDxs/QHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+xAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYe9O4C4dC/+Pn1kZO6mkaOyUXVlSWbKWFluILNllC9kLLbK0kIS02IkWhQpZKlJE1lQqpbQoSZKK+L/GLI3xnflN/avRfN/v12ues91zXOf6nOt+jud+zhkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYHq0+TobrzkYDB936fCn3X7qvuvdu8xpa5x94qLXvmznY4c8NPba1Wccd/PoJyYxePLOVh9z29Cxmww/+eKzh465MHTi+51p1Kghsw2GzJ1HdcjW/8ew5xh/Zuydjh4MBkOOGftnglFjvqx2zz13/B/3VW3zNdZdZ8zkjf0zoduwcTePu37C+eFj/6y6zWCw6laDyT4/pr2N7rvr4Wk9hv8Fm6+x7vqT9B+M6/xk90nXd6tJn+eX3rr7qtM03L/J5muss8GY1pNbx+dutvrZTzy5Xx9+2mAw/PTBYPgZg8HwM6d1D/491lhzhTXH7PPHXx5b/fDxLwjS/n3IAhtvMdNgMBgx9vvE8LPGfy8A/resseYKrwrrf+T429P6X+2e2ea1/uF/3/prrLnCYKLX+WOvPXz8/9/H9X/vsA2Pn3YjBgAAAP5Zj99/2ZXjjvUNHQzmH0xyvPdJ434uMOTCq2++eZoN9JkhHCd7+u9M/I8Z03nG80cPBntuOq2HwjQwZFoPgGlK/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fQvNpnj/3OMP13jhE1eOW7TRVaae7OLJ/37Y66b8b8+6mlmej3+P9h1yNiWY5rvOhgMXrfGRpssPhgMLt5s7pUWHEy4beUxt60617BxHxCw+JNfF5nMHY+e+HSmCfdx4ZP3v/4Tpw8bMskgJvLatS4/eJfNH3nJpKeLTf5xTPh8iYvXX2uW8e9lGTrJRpN7ro6///GPZdLO48a++JixL7PfHnsvs+9BBy+16x7b7bzjzjvuucLyK660/ErLrbzyisvstOvuOy479utk5mzsrCw0NXM2ctI5u3+Nieds0sc2uTkbPeU5e/Ie7z1+s0vHz9nwf3LOFprynI3edfxYR48YbPvk1Iz5Ty48YnDgmAvLzTDRvmWeMdu+fK6hg8Fx/3igY87NMOE5OOTwXf8Nn1sy7nSBcacLxs8tuWRyn1syGP+5JeM/MGGVsSf7XTF+u0nfZz3u6qn+3JID1nxswcHT3pf1H/Evff9/Wq+Vh0yYqPEfGjJum7G9/vE5E+OnbfWJPmdipfRZMv9OTxvv6KETntdpvOPeFzdkkvmf0vviBjvvdOgi46KuNPZvPf4vR8n7jg2e/Dq59Tx6ktMp7TuG/ePsP67d8cb5Jt13vGbyQ3zKuhg/RzNMstHk9h0HbnftrhPvmyaz79hg13FvNP7HvmPMf3ah8fuOMWNfdMTguDEXlh9zYbERg/PGXFjhyQujBlePubD09nvtvsOQJ79fPe15sPiQp/zCY3jerjPJ83YqPh9ntesHg9WuS49r8tOZpeftyCmMN7+fezDF93Nftd0CFw0Gg1nHPa5Vxo/9X5HGO3zK4w2fPzGY0udPDE6/ef8z/83jnbDOnnyujdtNLz6Zv/OUdTbH09bZEcMmWhlT+7pmh7D92PPzTLi3M3a86YbxczRikvv9v75Hj38sqf/413wTG3L4YMiU5mZyr8OeMjezTXlupvb1y+LjXmCMmsLcLPnQYUuMn5uR/+TcLDaZuZn49fDERg4Go546N8MHa495RTNubhadmrmZ5d/zvJkpbD/2/CITrrpz7UNXHj83YS7i9//x97/oPzk3Q7ad8LxZ+MnbFhw6GDlycOB2++23z3Jjv46/uPzYr1NegwtPzVzO+O+Zy3nH7XWGPn1yJly12zlPrPCvrsGF/9m5HD0YOv7/uXeddLH8+/j5Tzf9u+nfTf9u+nfTv5v+3fQvNpnj/6PH/1zw6CFnbTzuhzEjrnlkzv2m9Xinsen6+P+4vk85/r/fnI9cM3Qw4bYpHp8du80z8vjsSmNPDllu/HaTHh8cd/VUH599+Njrthj8d47P/kvGr9Wp+Lmh/X83/bvp303/bvp307/bVPVf+JQJZ1f7Tw6G/zrrv5v+3fTvpn83/bvp303/YpM5/r/s+N8DuGXfx84adyB0xL6brProtB7vNDZdH/8f1/cpx/8fXXWTfYcOJtw2xeP/Y7fpOP6/6t2nHDl4Bh//H79WHf/n/6B/N/276d9N/276d9O/m/7d9O+mfzf9u+nfTf9u+hebzPH/1cf/HsCIPRdaaPzvA9z2wFHDpvV4p7Hp9fi/f/+/l/1/N/276d9N/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv9i44/+DSf7Zwzd4XkTh+P//tsn031D/qKX/RvpHLf031j9q6b+J/lFL/031j1r6v1H/qKX/ZvpHLf031z9q6b+F/lFL/zfpH7X031L/qKX/VvpHLf3frH/U0n9r/aOW/tvoH7X031b/qKX/dvpHLf3fon/U0n97/aOW/jvoH7X031H/qKX/TvpHLf131j9q6b+L/lFL/131j1r676Z/1NL/rfpHLf131z9q6b+H/lFL/z31j1r676V/1NJ/b/2jlv5v0z9q6b+P/lFL/331j1r676d/1NL/7fpHLf331z9q6X+A/lFL/wP1j1r6H6R/1NL/YP2jlv6H6B+19D9U/6il/zv0j1r6v1P/qKX/YfpHLf0P1z9q6X+E/lFL/3fpH7X0f7f+UUv/9+gftfR/r/5RS/8j9Y9a+r9P/6il/1H6Ry39j9Y/aul/jP5RS/9j9Y9a+r9f/6il/wf0j1r6f1D/qKX/h/SPWvofV9Z/5FRu19L/+LL+U6ul/4f1j1r6n6B/1NL/I/pHLf1P1D9q6f9R/aOW/ifpH7X0P1n/qKX/KfpHLf0/pn/U0v9U/aOW/h/XP2rp/wn9o5b+n9Q/aun/Kf2jlv6n6R+19D9d/6il/xn6Ry39z9Q/aul/lv5RS/+z9Y9a+p+jf9TS/1z9o5b+5+kftfT/tP5RS//z9Y9a+l+gf9TS/zP6Ry39P6t/1NL/c/pHLf0/r3/U0v9C/aOW/l/QP2rp/0X9o5b+F+kftfS/WP+opf8l+kct/b+kf9TS/8v6Ry39v6J/1NL/Uv2jlv6X6R+19L9c/6il/1f1j1r6X6F/1NL/Sv2jlv5X6R+19L9a/6il/9f0j1r6f13/qKX/N/SPWvpfo3/U0v9a/aOW/t/UP2rpf53+UUv/b+kftfT/tv5RS//r9Y9a+t9Q1n+Vqdyupf93yvpPrZb+N+oftfS/Sf+opf939Y9a+t+sf9TS/xb9o5b+t+oftfS/Tf+opf/t+kct/e/QP2rp/z39o5b+d+oftfT/vv5RS/8f6B+19P+h/lFL/7v0j1r6/0j/qKX/j/WPWvr/RP+opf/d+kct/X+qf9TS/2f6Ry3979E/aun/c/2jlv6/0D9q6X+v/lFL/1/qH7X0/5X+UUv/X+sftfT/jf5RS//79I9a+v9W/6il/+/0j1r6369/1NL/9/pHLf0f0D9q6f8H/aOW/g/qH7X0/6P+UUv/h/SPWvr/Sf+opf/D+kct/f+sf9TS/xH9o5b+f9E/aun/V/2jlv5/0z8q6T9qoH9U0n/wmP5RS/+/6x+19H9c/6il/xP6RyX9hwz0j1r6D9E/auk/VP+opf8w/aOW/sP1j1r6j9A/auk/Uv+opf8M+kct/WfUP2rpP0r/qKX/TPpHLf1n1j9q6T+L/lFL/1n1j1r6z6Z/1NJ/dv2jlv5z6B+19J9T/6il/1z6Ry39n6V/1NJ/bv2jlv7P1j9q6f8c/aOW/s/VP2rpP4/+UUv/5+kftfSfV/+opf/z9Y9a+r9A/6il/3z6Ry3959c/aun/Qv2jlv6j9Y9a+i+gf9TSf0H9o5b+C+kftfRfWP+opf8i+kct/RfVP2rpv5j+UUv/xfWPWvovoX/U0v9F+kct/V+sf9TSf0n9o5b+S+kftfRfur3/o0+MNcnVLf2Xae8/GS39l9U/aum/nP5RS//l9Y9a+q+gf9TS/yX6Ry39X6p/1NJ/Rf2jlv4r6R+19F9Z/6il/yr6Ry39X6Z/1NJ/Vf2jlv4v1z9q6f8K/aOW/q/UP2rpv5r+UUv/1fWPWvqvoX/U0n9N/aOW/q/SP2rpv5b+UUv/tfWPWvqvo3/U0n9d/aOW/uvpH7X0X1//qKX/q/WPWvq/Rv+opf8G+kct/V+rfzRJ/9mn1/6v0z9qWf+v1z9q6f8G/aOW/hvqH7X030j/qKX/xvpHLf030T9q6b+p/lFL/zfqH7X030z/qKX/5vpHLf230D9q6f8m/aOW/lvqH7X030r/qKX/m/WPWvpvrX/U0n8b/aOW/tvqH7X0307/qKX/W/SPWvpvr3/U0n8H/aOW/jvqH7X030n/qKX/zvpHLf130T9q6b+r/lFL/930j1r6v1X/qKX/7vpHLf330D9q6b+n/lFL/730j1r67z35/qP+K+N6hmrp/zbrP2rpv4/+UUv/ffWPWvrvp3/U0v/t+kct/ffXP2rpf4D+UUv/A/WPWvofpH/U0v9g/aOW/ofoH7X0P1T/qKX/O/SPWvq/U/+opf9h+kct/Q9v6z+Vv9XQ0v+Itv5TqaX/u/SPWvq/W/+opf979I9a+r9X/6il/5H6Ry3936d/1NL/KP2jlv5H6x+19D9G/6il/7H6Ry39369/1NL/A/pHLf0/qH/U0v9D+kct/Y/TP2rpf7z+UUv/D+sftfQ/Qf+opf9H9I86+s865MTi/sOmcFtH/8GQjxb3n5KW/ifpH7X0P1n/qKX/KfpHLf0/pn/U0v9U/aOW/h/XP2rp/wn9o5b+n9Q/aun/Kf2jlv6n6R+19D9d/6il/xn6Ry39z9Q/aul/lv5RS/+z9Y9a+p+jf9TS/1z9o5b+5+kftfT/tP5RS//z9Y9a+l+gf9TS/zP6Ry39P6t/1NL/c/pHLf0/r3/U0v9C/aOW/l/QP2rp/0X9o5b+F+kftfS/WP+opf8l+kct/b+kf9TS/8v6Ry39v6J/1NL/Uv2jlv6X6R+19L9c/6il/1f1j1r6X6F/1NL/Sv2jlv5X6R+19L9a/6il/9f0j1r6f13/qKX/N/SPWvpfo3/U0v9a/aOW/t/UP2rpf53+UUv/b+kftfT/tv5RS//r9Y9a+t+gf9TS/zv6Ry39b9Q/aul/k/5RS//v6h+19L9Z/6il/y36Ry39b9U/mLmm/236Ry39b9c/aul/h/5RS//v6R+19L9T/6il//cHg8HIaTWmZ7CW/j+w/qOW/j/UP2rpf5f+UUv/H+kftfT/sf5RS/+f6B+19L9b/6il/0/1j1r6/0z/qKX/PfpHLf1/rn/U0v8X+kct/e/VP2rp/0v9o5b+v9I/aun/a/2jlv6/0T9q6X9fXf8RU7VVS//f1vWfOi39f6d/1NL/fv2jlv6/1z9q6f+A/lFL/z/oH7X0f1D/qKX/H/WPWvo/pH/U0v9P+kct/R/WP2rp/2f9o5b+j+gftfT/i/5RS/+/6h+19P+b/lFL/0f1j1r6P6Z/1NL/7/pHLf0f1z9q6f+E/lFJ/yfP6v90Lf2H6B+19B+qf9TSf5j+UUv/4fpHLf1H6B+19B+pf9TSfwb9o5b+M+oftfQfpX/U0n8m/aOW/jPrH7X0n0X/qKX/rPpHLf1n0z9q6T+7/lFL/zn0j1r6z6l/1NJ/Lv2jlv7P0j9q6T+3/lFL/2frH7X0f47+UUv/5+oftfSfR/+opf/z9I9a+s+rf9TS//n6Ry39X6B/1NJ/Pv2jlv7z6x+19H+h/lFL/9H6Ry39F9A/aum/oP5RS/+F9I9a+i+sf9TSfxH9o5b+i+oftfRfTP+opf/i+kct/ZfQP2rp/yL9o5b+L9Y/aum/pP5RS/+l9I9a+i+tf9TSfxn9o5b+y+oftfRfTv+opf/y+kct/VfQP2rp/xL9o5b+L9U/aum/ov5RS/+V9I9a+q+sf9TSfxX9o5b+L9M/aum/qv5RS/+X6x+19H+F/lFL/1fqH7X0X20q+i/znxzXM1RL/9Un03+uxugTaem/hv1/1NJ/Tf2jlv6v0j9q6b+W/lFL/7X1j1r6r6N/1NJ/Xf2jlv7r6R+19F9f/6il/6v1j1r6v0b/qKX/BvpHLf1fq3/U0v91+kct/V+vf9TS/w36Ry39N9Q/aum/kf5RS/+N9Y9a+m+if9TSf1P9o5b+b9Q/aum/mf5RS//N9Y9a+m+hf9TS/036Ry39t9Q/aum/lf5RS/836x+19N9a/6il/zb6Ry39t9U/aum/nf5RS/+36B+19N9e/6il/w76Ry39d9Q/aum/k/5RS/+d9Y9a+u+if9TSf1f9o5b+u+k/kRETzrX0f6v+UUv/3fWPWvrvoX/U0n9P/aOW/nvpH7X031v/qKX/2/SPWvrvo3/U0n9f/aOW/vvpH7X0f7v+UUv//fWPWvofoH/U0v/Awv6jpmKblv4HFfafGi39D9Y/aul/iP5RS/9D9Y9a+r9D/6il/zv1j1r6H6Z/1NL/cP2jlv5H6B+19H+X/lFL/3frH7X0f4/+UUv/9+oftfQ/Uv+opf/79I9a+h+lf9TS/2j9o5b+x+gfDTn1pBnGnpu++x+rf9Sy/t+vf9TS/wP6Ry39P6h/1NL/Q/pHLf2P0z9q6X+8/lFL/w/rH7X0P0H/qKX/R/SPWvqfqH/U0v+j+kct/U8q63/4VG7X0v/ksv5Tq6X/KfpHLf0/pn/U0v9U/aOW/h/XP2rp/wn9o5b+n9Q/aun/Kf2jlv6n6R+19D9d/6il/xn6Ry39z9Q/aul/lv5RS/+z9Y9a+p+jf9TS/1z9o5b+5+kftfT/tP5RS//z9Y9a+l+gf9TS/zP6Ry39P6t/1NL/c/pHLf0/r3/U0v9C/aOW/l/QP2rp/0X9o5b+F+kftfS/WP+opf8l+kct/b+kf9TS/8v6Ry39v6J/1NL/Uv2jlv6X6R+19L9c/6il/1f1j1r6X6F/1NL/Sv2jlv5X6R+19L9a/6eYf9xpS/+v6R+19P+6/lFL/2/oH7X0v0b/qKX/tfpHLf2/qX/U0v86/aOW/t/SP2rp/239o5b+1+sftfS/Qf+opf939I9a+t+of9TS/yb9o5b+39U/aul/s/5RS/9b9I9a+t+qf9TS/zb9o5b+t+sftfS/Q/+opf/39I9a+t+pf9TS//v6Ry39f6B/1NL/h/pHLf3v0j9q6f8j/aOW/j/WPxhZ0/8n+kct/e/WP2rp/1P9o5b+P9M/aul/j/5RS/+f6x+19P+F/lFL/3v1j1r6/1L/qKX/r/SPWvr/Wv+opf9v9I9a+t+nf9TS/7f6R0NO3XeGhv6/0z9qWf/36x+19P+9/lFL/wf0j1r6/0H/qKX/g/pHLf3/qH/U0v8h/aOW/n/SP2rp/7D+UUv/P+sftfR/RP+opf9f9I9a+v9V/6il/9/0j1r6P6p/1NL/Mf2jlv5/1z9q6f+4/lFL/yf0j0r6DxvoH7X0H6J/1NJ/qP5RS/9h+kct/YfrH7X0H6F/1NJ/pP5RS/8Z9I9a+s+of9TSf5T+UUv/mfSPWvrPPMX+Q//z43qGauk/i/UftfSfVf+opf9s+kct/WfXP2rpP4f+UUv/OfWPWvrPpX/U0v9Z+kct/efWP2rp/2z9o5b+z9E/aun/XP2jlv7z6B+19H+e/lFL/3n1j1r6P1//qKX/C/SPWvrPp3/U0n9+/aOW/i/UP2rpP1r/qKX/AvpHLf0X1D9q6b+Q/lFL/4X1j1r6L6J/1NJ/Uf2jlv6L6R+19F9c/0mNGhT1X0L/qKX/i/SPWvq/WP+opf+S+kct/ZfSP2rpv7T+UUv/ZfSPWvovq3/U0n85/aOW/svrH7X0X0H/qKX/S/SPWvq/VP+opf+K+kct/VfSP2rpv3Jv/xmmdGNL/1V6+09RS/+X6R+19F9V/6il/8v1j1r6v0L/qKX/K/WPWvqvpn/U0n91/aOW/mvoH7X0X1P/qKX/q/SPWvqvpX/U0n9t/aOW/uvoH7X0X1f/qKX/evpHLf3X1z9q6f9q/aOW/q/RP2rpv4H+UUv/1+oftfR/nf5RS//X6x+19H+D/lFL/w31j1r6b6R/1NJ/Y/2jlv6b6B+19N9U/6il/xv1j1r6b6Z/1NJ/c/2jsf1nHEzv/bfQP2pZ/2/SP2rpv6X+UUv/rfSPWvq/Wf+opf/W+kct/bfRP2rpv63+UUv/7fSPWvq/Rf+opf/2+kct/XfQP2rpv6P+UUv/nfSPWvrvrH/U0n8X/aOW/rvqH7X0303/qKX/W/WPWvrvrn/U0n8P/aOW/nvqH7X030v/qKX/3vpHLf3fpn/U0n8f/aOW/vvqH7X030//qKX/2/WPWvrvr3/U0v8A/aOW/gfqH7X0P0j/qKX/wfpHLf0P0T9q6X+o/lFL/3foH7X0f6f+UUv/w/SPWvofrn/U0v8I/aOW/u/SP2rp/279o5b+79E/aun/Xv2jlv5H6j/eE09MdKGl//v0j1r6H6V/1NL/aP2jlv7H6B+19D9W/6il//v1j1r6f0D/qKX/B/WPWvp/SP+opf9x+kct/Y/XP2rp/2H9o5b+J+gftfT/iP5RS/8T9Y9a+n9U/6il/0n6Ry39T9Y/aul/iv5RS/+P6R+19D9V/6il/8f1j1r6f0L/qKX/J/WPWvp/Sv+opf9p+kct/U/XP2rpf4b+UUv/M/WPWvqfpX/U0v9s/aOW/ufoH7X0P1f/qKX/efpHLf0/rX/U0v98/aOW/hfoH7X0/4z+UUv/z+oftfT/nP5RS//P6x+19L9Q/6il/xf0j1r6f1H/qKX/RfpHLf0v1j9q6X+J/lFL/y/pH7X0/7L+UUv/r+gftfS/VP+opf9l+kct/S/XP5qe+6/+j2uHfVX/aHruP/H6v0L/qKX/lfpHLf2v0j9q6X+1/lFL/6/pH7X0/7r+UUv/b+gftfS/Rv+opf+1+kct/b+pf9TS/zr9o5b+39I/aun/bf2jlv7X6x+19L9B/6il/3f0j1r636h/1NL/Jv2jlv7f1T9q6X+z/lFL/1v0j1r636p/1NL/Nv2jlv636x+19L9D/6il//f0j1r636l/1NL/+/pHLf1/oH/U0v+H+kct/e/SP2rp/yP9o5b+P9Y/aun/E/2jlv536x+19P+p/lFL/5/pH7X0v0f/qKX/z/WPWvr/Qv+opf+9+kct/X+pf9TS/1f6Ry39f61/1NL/N/pHLf3v0z9q6f9b/aOW/r/TP2rpf7/+UUv/3+sftfR/QP+opf8f9I9a+j+of9TS/4/6Ry39H9I/aun/J/2jlv4P6x+19P+z/lFL/0f0j1r6/0X/qKX/X/WPWvr/Tf+opf+j+kct/R/TP2rp/3f9o5b+j+sftfR/Qv+opP/wgf5RS/8h+kct/Yf+n/2H/WfH9QzV0n+Y9R+19B+uf9TSf4T+UUv/kfpHLf1n0D9q6T+j/lFL/1H6Ry39Z9I/auk/s/5RS/9Z9I9a+s+qf9TSfzb9o5b+s+sftfSfQ/+opf+c+kct/efSP2rp/yz9o5b+c+sftfR/tv5RS//n6B+19H+u/lFL/3n0j1r6P0//qKX/vPpHLf2fr3/U0v8F+kct/efTP2rpP7/+UUv/F+oftfQfrX/U0n8B/aOW/gvqH7X0X0j/qKX/wvpHLf0X0T9q6b+o/lFL/8X0j1r6L65/1NJ/Cf2jlv4v0j9q6f9i/aOW/kvqH7X0X0r/qKX/0vpHLf2X0T9q6b+s/lFL/+X0j1r6L69/1NJ/Bf2j6bj/qImuHf4S/aPpuP9T1v9L9Y9a+q+of9TSfyX9o5b+K+sftfRfRf+opf/LavrP+E9t3dJ/1Zr+/5yW/i/XP2rp/wr9o5b+r9Q/aum/mv5RS//V9Y9a+q+hf9TSf039o5b+r9I/aum/lv5RS/+19Y9a+q+jf9TSf139o5b+6+kftfRfX/+opf+r9Y9a+r9G/6il/wb6Ry39X6t/1NL/dfpHLf1fr3/U0v8N+kct/TfUP2rpv5H+UUv/jfWPWvpvon/U0n9T/aOW/m/UP2rpv5n+UUv/zfWPWvpvoX/U0v9N+kct/bfUP2rpv5X+UUv/N+sftfTfWv+opf82+kct/bfVP2rpv53+UUv/t+gftfTfXv+opf8O+kct/XfUP2rpv5P+UUv/nfWPWvrvon/U0n9X/aOW/rvpH7X0f6v+UUv/3fWPWvrvoX/U0n9P/aOW/nvpH7X031v/qKX/2/SPWvrvo3/U0n9f/aOW/vvpH7X0f7v+UUv//fWPWvofoH/U0v9A/aOW/gfpH7X0P1j/qKX/IfpHLf0P1T9q6f8O/aOW/u/UP2rpf5j+UUv/w/WPWvofoX/U0v9d+kct/d+tf9TS/z36Ry3936t/1NL/SP2jlv7v0z9q6X+U/lFL/6P1j1r6H6N/1NL/WP2jlv7v1z9q6f8B/aOW/h/UP2rp/yH9o5b+x+kftfQ/Xv+opf+H9Y9a+p+gf9TS/yP6Ry39T9Q/aun/Uf2jlv4n6R+19D9Z/6il/yn6Ry39P6Z/1NL/VP2jlv4f1z9q6f8J/aOW/p/UP2rp/yn9o5b+p+kftfQ/Xf+opf8Z+kct/c/UP2rpf5b+UUv/s/WPWvqfo3/U0v9c/aOW/ufpH7X0/7T+0fTcf8Z/XDv8fP2j6bn/xOv/Av2jlv6f0T9q6f9Z/aOW/p/TP2rp/3n9o5b+F+oftfT/gv5RS/8v6h+19L9I/6il/8X6Ry39L9E/aun/Jf2jlv5f1j9q6f8V/aOW/pfqH7X0v0z/qKX/5fpHLf2/qn/U0v8K/aOW/lfqH7X0v0r/qKX/1fpHLf2/pn/U0v/r+kct/b+hf9TS/xr9o5b+1+oftfT/pv5RS//r9I9a+n9L/6il/7f1j1r6X69/1NL/Bv2jlv7f0T9q6X+j/lFL/5v0j1r6f1f/qKX/zfpHLf1v0T9q6X+r/lFL/9vq+t/xxNRs1dL/9rr+U6el/x36Ry39v6d/1NL/Tv2jlv7f1z9q6f8D/aOW/j/UP2rpf5f+UUv/H+kftfT/sf5RS/+f6B+19L9b/6il/0/1j1r6/0z/qKX/PfpHLf1/rn/U0v8X+kct/e/VP2rp/0v9o5b+v9I/aun/a/2jlv6/0T9q6X+f/lFL/9/qH7X0/53+UUv/+/WPWvr/Xv+opf8D+kct/f+gf9TS/0H9o5b+f9Q/aun/kP5RS/8/6R+19H9Y/6il/5/1j1r6P6J/1NL/L/pHLf3/qn/U0v9v+kct/R/VP2rp/5j+UUv/v+sftfR/XP+opf8T+kcl/UcM9I9a+g/RP2rpP1T/qKX/MP2jlv7D9Y9a+o/QP2rpP1L/qKX/DPpHLf1n1D9q6T9K/6il/0z6Ry39Z9Y/auk/i/7RhP5bDhkMpuP+s+oftaz/2fSPWvrPrn/U0n8O/aOW/nPqH7X0n0v/qKX/s/SPWvrPrX/U0v/Z+kct/Z+jf9TS/7n6Ry3959E/aun/vMFgMOu0GtMzWEv/ea3/qKX/8/WPWvq/QP+opf98+kct/efXP2rp/0L9o5b+o/WPWvovoH/U0n9B/aOW/gvpH7X0X1j/qKX/IvpHLf0X1T9q6b+Y/lFL/8X1j1r6L6F/1NL/RfpHLf1frH/U0n9J/aOW/kvpH7X0X1r/qKX/MvpHLf2X1T9q6b+c/lFL/+X1j1r6r6B/1NL/JfpHLf1fqn/U0n9F/aOW/ivpH7X0X1n/qKX/KvpHLf1fpn/U0n9V/aOW/i/XP2rp/wr9o5b+r9Q/aum/mv5RS//V9Y9a+q+hf9TSf039o5b+r9I/aum/Vug/9L85rmeolv5rW/9RS/919I9a+q+rf9TSfz39o5b+6+sftfR/tf5RS//X6B+19N9A/6il/2v1j1r6v07/qKX/6/WPWvq/Qf+opf+G+kdj+t8+GAym9/4b6R+1rP+N9Y9a+m+if9TSf1P9o5b+b9Q/aum/mf5RS//N9Y9a+m+hf9TS/036Ry39t9Q/aum/lf5RS/836x+19N9a/6il/zb6Ry39t9U/aum/nf5RS/+36B+19N9e/6il/w76Ry39d9Q/aum/k/5RS/+d9Y9a+u+if9TSf1f9o5b+u+kftfR/q/5RS//d9Y9a+u+hf9TSf0/9o5b+e+kftfTfW/+opf/b9I9a+u+jf9TSf1/9o5b+++kftfR/u/5RS//99Y9a+h+gf9TS/0D9o5b+B+kftfQ/WP+opf8h+kct/Q/VP2rp/w79o5b+79Q/aul/mP5RS//D9Y9a+h+hf9TS/136Ry39361/1NL/PfpHLf3fq3/U0v9I/aOW/u/TP2rpf5T+UUv/o/WPWvofo3/U0v9Y/aOW/u/XP2rp/wH9o5b+H9Q/aun/If2jlv7H6R9Np/1HDCbpf7z+0XTa/0kT9/+w/lFL/xP0j1r6f0T/qKX/ifpHLf0/qn/U0v8k/aOW/ifrH7X0P0X/qKX/x/SPWvqfqn/U0v/j+kct/T+hf9TS/5P6Ry39P6V/1NL/NP2jlv6n6x+19D9D/6il/5n6Ry39z9I/aul/tv5RS/9z9I9a+p+rf9TS/zz9o5b+n9Y/aul/vv5RS/8Lqvqvd/TUbtnS/zNV/adeS//P6h+19P+c/lFL/8/rH7X0v1D/qKX/F/SPWvp/Uf+opf9F+kct/S/WP2rpf4n+UUv/L+kftfT/sv5RS/+v6B+19L9U/6il/2X6Ry39L9c/aun/Vf2jlv5X6B+19L9S/6il/1X6Ry39r9Y/aun/Nf2jlv5f1z9q6f8N/aOW/tfoH7X0v1b/qKX/N/WPWvpfp3/U0v9b+kct/b+tf9TS/3r9o5b+N+gftfT/jv5RS/8b9Y9a+t+kf9TS/7v6Ry39b9Y/aul/i/5RS/9b9Y9a+t+mf9TS/3b9o5b+d+gftfT/nv5RS/879Y9a+n9f/6il/w/0j1r6/1D/qKX/XRP1f+yJJ02L0T3jtPT/kfUftfT/sf5RS/+f6B+19L9b/6il/0/1j1r6/0z/qKX/PfpHLf1/rn/U0v8X+kct/e/VP2rp/0v9o5b+v9I/aun/a/2jlv6/0T9q6X+f/lFL/9/qH7X0/53+UUv/+/WPWvr/Xv+opf8D+kct/f+gf9TS/0H9o5b+f9Q/aun/kP5RS/8/6R+19H9Y/6il/5/1j1r6P6J/1NL/L/pHLf3/qn/U0v9v+kct/R/VP2rp/5j+UUv/v+sftfR/XP+opf8TPf1H/jMbl/R/ck5K+v9TWvoP0T9q6T9U/6il/zD9o5b+w/WPWvqP0D9q6T9S/6il/wz6Ry39Z9Q/auk/Sv+opf9M+kct/WfWP2rpP4v+UUv/WfWPWvrPpn/U0n92/aOW/nPoH7X0n1P/qKX/XPpHLf2fpX/U0n9u/aOW/s/WP2rp/xz9o5b+z9U/auk/j/5RS//n6R+19J9X/6il//P1j1r6v0D/qKX/fPpHLf3n1z9q6f9C/aOW/qP1j1r6L6B/1NJ/waf0n+O/P65nqJb+C1n/UUv/hfWPWvovon/U0n9R/aOW/ovpH7X0X1z/qKX/EvpHLf1fpH/U0v/F+kct/ZfUP2rpv5T+UUv/pfWPWvovo38wpKb/svpHLf2X0z9q6b+8/lFL/xX0j1r6v0T/qKX/S/WPWvqvqH/U0n8l/aOW/ivrH7X0X0X/qKX/y/SPWvqvqn/U0v/l+kct/V+hf9TS/5X6Ry39V9M/aum/uv5RS/819I9a+q+pf9TS/1X6Ry3919I/aum/tv5RS/919I9a+q+rf9TSf70p9p/9Pz+uZ6iW/utb/1FL/1frH7X0f43+UUv/DfSPWvq/Vv+opf/r9I9a+r9e/6il/xv0j1r6b6h/1NJ/I/2jlv4b6x+19N9E/6il/6b6Ry3936h/1NJ/M/2jlv6b6x+19N9C/6il/5v0j1r6b6l/1NJ/K/2jlv5v1j9q6b+1/lFL/230j1r6b6t/1NJ/O/2jlv5v0T9q6b+9/lFL/x30j1r676h/1NJ/J/2jlv476x+19N9F/6il/676Ry39d9M/aun/Vv2jlv676x+19N9D/6il/576Ry3999I/aum/t/5RS/+36R+19N9H/6il/776Ry3999M/aun/dv2jlv776x+19D9A/6il/4H6Ry39D9I/aul/sP5RS/9D9I9a+h+qf9TS/x36Ry3936l/1NL/MP2jlv6H6x+19D9C/6il/7v0j1r6v1v/qKX/e/SPWvq/V/+opf+R+kct/d+nf9TS/yj9o5b+R+sftfQ/Rv+opf+x+kct/d+vf9TS/wP6Ry39P6h/1NL/Q/pHLf2P0z9q6X+8/lFL/w/rH7X0P0H/qKX/R/SPWvqfqH/U0v+j+kct/U/SP2rpf7L+UUv/U/SPWvp/TP+opf+p+kct/T+uf9TS/xP6Ry39P6l/1NL/U/pHLf1P0z9q6X+6/lFL/zP0j1r6n6l/1NL/LP2jlv5n6x+19D9H/6il/7n6Ry39z9M/aun/af2jlv7n6x+19L9A/6il/2f0j1r6f1b/qKX/5/SPWvp/Xv+opf+F+kct/b+gf9TS/4v6Ry39L9I/aul/sf5RS/9L9I9a+n9J/6il/5f1j1r6f0X/qKX/pfpHLf0v0z9q6X+5/lFL/6/qH7X0v0L/qKX/lfpHLf2v0j9q6X+1/lFL/6/pH7X0/7r+UUv/b+gftfS/Rv+opf+1+kct/b+pf9TS/zr9o5b+39I/aun/bf2jlv7X6x+19L9B/6il/3f0j1r636h/1NL/Jv2jlv7f1T9q6X+z/lFL/1v0j1r636p/1NL/Nv2jlv636x+19L9D/6il//f0j1r636l/1NL/+/pHLf1/oH/U0v+H+kct/e/SP2rp/yP9o5b+P9Y/aun/E/2jlv536x+19P+p/lFL/5/pH7X0v0f/qKX/z/WPWvr/Qv+opf+9+kct/X+pf9TS/1f6Ry39f61/1NL/N/pHLf3v0z9q6f9b/aOW/r/TP2rpf7/+UUv/3+sftfR/QP+opf8f9I9a+j+of9TS/4/6Ry39H9I/aun/J/2jlv4P6x+19P+z/lFL/0f0j1r6/0X/qKX/X/WPWvr/Tf+opf+j+kct/R/TP2rp/3f9o5b+j+sftfR/Qv+opP8MA/2jlv5D9I9a+g/VP2rpP0z/qKX/cP2jlv4j9I9a+o/UP2rpP4P+UUv/GfWPWvqP0j9q6T+T/lFL/5n1j1r6z6J/1NJ/Vv2jlv6z6R+19J9d/6il/xz6Ry3959Q/auk/l/5RS/9nxf7P+u+N6xmqpf/c1n/U0v/Z+kct/Z+jf9TS/7n6Ry3959E/aun/PP2jlv7z6h+19H++/lFL/xfoH7X0n0//aHrtP/SCp/afX/9oeu0/mGT9v1D/qKX/aP2jlv4L6B+19F9Q/6il/0L6Ry39F9Y/aum/iP5RS/9F9Y9a+i+mf9TSf3H9o5b+S+gftfR/kf5RS/8X6x+19F9S/6il/1L6Ry39l9Y/aum/jP5RS/9l9Y9a+i+nf9TSf3n9o5b+K+gftfR/if5RS/+X6h+19F9R/6il/0pT0f/B2f6TA3tmaum/svUftfRfRf+opf/L9I9a+q+qf9TS/+X6Ry39X6F/1NL/lfpHLf1X0z9q6b+6/lFL/zX0j1r6r6l/1NL/VfpHLf3X0j9q6b+2/lFL/3X0j1r6r6t/1NJ/Pf2jlv7r6x+19H+1/lFL/9foH7X030D/qKX/a/WPWvq/Tv+opf/r9Y9a+r9B/6il/4b6Ry39N9I/aum/sf5RS/9N9I9a+m+qf9TS/436Ry39N9M/aum/uf5RS/8t9I9a+r9J/6il/5b6Ry39t9I/aun/Zv2jlv5b6x+19N9G/6il/7b6Ry39t9M/aun/Fv2jlv7b6x+19N9B/6il/476Ry39d9I/aum/s/5RS/9d9I9a+u+qf9TSfzf9o5b+b9U/aum/u/5RS/899I9a+u+pf9TSfy/9o5b+e+sftfR/m/5RS/999I9a+u+rf9TSfz/9o5b+b9c/aum/v/5RS/8D9I9a+h+of9TS/yD9o5b+B+sftfQ/RP+opf+h+kct/d+hf9TS/536Ry39D9M/aul/uP5RS/8j9I9a+r9L/6il/7v1j1r6v0f/qKX/e/WPWvofqX/U0v99+kct/Y/SP2rpf7T+UUv/Y/SPWvofq3/U0v/9+kct/T+gf9TS/4P6Ry39P6R/1NL/OP2jlv7H6x+19P+w/lFL/xP0j1r6f0T/qKX/ifpHLf0/qn/U0v8k/aOW/ifrH7X0P0X/qKX/x/SPWvqfqn/U0v/j+kct/T+hf9TS/5P6Ry39P6V/1NL/NP2jlv6n6x+19D9D/6il/5n6Ry39z9I/aul/tv5RS/9z9I9a+p+rf9TS/zz9o5b+n9Y/aul/vv5RS/8L9I9a+n9G/6il/2f1j1r6f07/qKX/5/WPWvpfqH/U0v8L+kct/b+of9TS/yL9o5b+F+sftfS/RP+opf+X9I9a+n9Z/6il/1f0j1r6X6p/1NL/Mv2jlv6X6x+19P+q/lFL/yv0j1r6X6l/1NL/Kv2jlv5X6x+19P+a/lFL/6/rH7X0/4b+UUv/a/SPWvpfq3/U0v+b+kct/a/TP2rp/y39o5b+39Y/aul/vf5RS/8b9I9a+n9H/6il/436Ry39b9I/aun/Xf2jlv436x+19L9F/6il/636Ry39b9M/aul/u/5RS/879I9a+n9P/6il/536Ry39v69/1NL/B/pHLf1/qH/U0v8u/aOW/j/SP2rp/2P9o5b+P9E/aul/t/5RS/+f6h+19P+Z/lFL/3v0j1r6/1z/qKX/L/SPWvrfq380HfafOfX/pf7RdNg/rv9f6R+19P+1/lFL/9/oH7X0v0//qKX/b/WPWvr/Tv+opf/9+kct/X+vf9TS/wH9o5b+f9A/aun/oP5RS/8/6h+19H9I/6il/5/0j1r6P6x/1NL/z/pHLf0f0T9q6f8X/aOW/n/VP2rp/zf9o5b+j+oftfR/TP+opf/f9Y9a+j+uf9TS/wn9o5L+Mw70j1r6D9E/auk/VP+opf8w/aOW/sP1j1r6j9A/auk/Uv+opf8M+kct/WfUP2rpP0r/qKX/TPpHLf1n1j9q6T+L/lFL/1n1j1r6z6Z/1NJ/dv2jlv5z6B+19J9T/6il/1z6Ry39n6V/1NJ/bv2jlv7P1j9q6f8c/aOW/s/VP2rpP4/+UUv/5+kftfSfV/+opf/z9Y9a+r9A/6il/3x9/UdNzUYt/efv6z9VWvq/UP+opf9o/aOW/gvoH7X0X1D/qKX/QvpHLf0X1j9q6b+I/lFL/0X1j1r6L6Z/1NJ/cf2jlv5L6B+19H+R/lFL/xfrH7X0X1L/qKX/UvpHLf2X1j9q6b+M/lFL/2X1j1r6L6d/1NJ/ef2jlv4r6B+19H9J7P8//2j/v7X0f6n1H7X0X1H/qKX/SvpHLf1X1j9q6b+K/lFL/5fpH7X0X1X/qKX/y/WPWvq/Qv+opf8r9Y9a+q+mf9TSf3X9o5b+a+gftfRfU/+opf+r9I9a+q+lf9TSf239o5b+6+gftfRfV/+opf96+kct/dfXP2rp/2r9o5b+r9E/aum/gf5RS//X6h+19H+d/lFL/9frH7X0f4P+UUv/DfWPWvpvpH/U0n9j/aOW/pvoH7X031T/qKX/G/WPWvpvpn/U0n9z/aOW/lvoH7X0f5P+UUv/LfWPWvpvpX/U0v/N+kct/bfWP2rpv43+UUv/bfWPWvpvp3/U0v8t+kct/bfXP2rpv4P+UUv/HfWPWvrvpH/U0n9n/aOW/rvoH7X031X/qKX/bvpHLf3fqn/U0n93/aOW/nvoH7X031P/qKX/XvpHLf331j9q6f82/aOW/vvoH7X031f/qKX/fvpHLf3frn/U0n9//aOW/gfoH7X0P1D/qKX/QfpHLf0P1j9q6X+I/lFL/0P1j1r6v0P/qKX/O/WPWvofpn/U0v9w/aOW/kfoH7X0f5f+UUv/d+sftfR/j/5RS//36h+19D9S/6il//v0j1r6H6V/1NL/aP2jlv7H6B+19D9W/6il//v1j1r6f0D/qKX/B/WPWvp/SP+opf9x+kct/Y/XP2rp/2H9o5b+J+gftfT/iP5RS/8T9Y9a+n9U/6il/0n6Ry39T9Y/aul/iv5RS/+P6R+19D9V/6il/8f1j1r6f0L/qKX/J/WPWvp/Sv+opf9p+kct/U/XP2rpf4b+UUv/M/WPWvqfpX/U0v9s/aOW/ufoH7X0P1f/qKX/efpHLf0/rX/U0v98/aOW/hfoH7X0/4z+UUv/z+oftfT/nP5RS//P6x+19L9Q/6il/xf0j1r6f1H/qKX/RfpHLf0v1j9q6X+J/lFL/y/pH7X0/7L+UUv/r+gftfS/VP+opf9l+kct/S/XP2rp/1X9o5b+V+gftfS/Uv+opf9V+kct/a/WP2rp/zX9o5b+X9c/aun/Df2jlv7X6B+19L9W/6il/zf1j1r6X6d/1NL/W/pHLf2/rX/U0v96/aOW/jfoH7X0/47+UUv/G/WPWvrfpH/U0v+7+kct/W/WP2rpf4v+UUv/W/WPWvrfpn/U0v92/aOW/nfoH7X0/57+UUv/O/WPWvp/X/+opf8P9I9a+v9Q/6il/136Ry39f6R/1NL/x/pHLf1/on/U0v9u/aOW/j/VP2rp/zP9o5b+9+gftfT/uf5RS/9f6B+19L9X/6il/y/1j1r6/0r/qKX/r/WPWvr/Rv+opf99+kct/X+rf9TS/3f6Ry3979c/aun/e/2jlv4P6B+19P+D/lFL/wf1j1r6/1H/qKX/Q/pHLf3/pH/U0v9h/aOW/n/WP2rp/4j+UUv/v+gftfT/q/5RS/+/6R+19H9U/6il/2P6Ry39/65/1NL/cf2jlv5P6B+V9B810D9q6T9E/6cZWtR/qP5RS/9h+kct/YfrH7X0H6F/1NJ/pP5RS/8Z9I9a+s+o/9ONeVFc0n+U/lHL+p9J/6il/8z6Ry39Z9E/auk/q/5RS//Z9I9a+s+uf9TSfw79o5b+c+oftfSfS/+opf+z9I9a+s+tf9TS/9n6Ry39n6N/1NL/ufpHLf3n0T9q6f88/aOW/vPqH7X0f77+UUv/F+gftfSfT/+opf/8+kct/V+of9TSf7T+UUv/BfSPWvovqH/U0n8h/aOW/gvrH7X0X0T/qKX/ovpHLf0X0z9q6b+4/lFL/yX0j1r6v0j/qKX/i/WPWvovqX/U0n8p/aOW/kvrH7X0X0b/aLrrDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/jx04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANwUAAP//Y5QFhg==")
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, 0x0)
unlinkat(r6, &(0x7f0000000180)='./file1\x00', 0x0)

2m26.752631617s ago: executing program 2 (id=18378):
fanotify_init(0x1200, 0x0)

2m26.588973938s ago: executing program 42 (id=18378):
fanotify_init(0x1200, 0x0)

1m16.802888016s ago: executing program 1 (id=19464):
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000000308010100000000000000000000000006000240000000002c5411"], 0x50}}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

1m16.656617877s ago: executing program 1 (id=19467):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80080)
tee(r0, r1, 0x4, 0x7)

1m16.656507115s ago: executing program 1 (id=19468):
clock_adjtime(0x17, &(0x7f0000000000)={0xea36, 0x9, 0x379ee2, 0x4, 0x9, 0x7ff, 0x8a, 0x9, 0xda13, 0x7ffffffe, 0x3, 0x4, 0x9, 0x80000000000002, 0x8001, 0xffffffffffffffff, 0x200, 0x9, 0x9, 0x10000005, 0x200, 0x3, 0x11cb, 0x101, 0xc4d, 0x9})

1m16.507406319s ago: executing program 1 (id=19471):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000000)='./file0\x00')
stat(&(0x7f00000002c0)='./file0\x00', 0x0)

1m16.33649484s ago: executing program 1 (id=19472):
syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000080e372208c106801b284010203110902240001000010000904020002f8fd00000905060200020d0006090582020002"], 0x0)

1m15.962222323s ago: executing program 1 (id=19477):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000040)="460910bc996c301c8107070400", 0x12)
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000100))

1m15.851602247s ago: executing program 43 (id=19477):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000040)="460910bc996c301c8107070400", 0x12)
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000100))

2.499756507s ago: executing program 7 (id=20577):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.383863213s ago: executing program 7 (id=20578):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x1378, &(0x7f0000000040)={0x0, 0x835c, 0xc808, 0x20000a, 0x20002f7})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

2.330334254s ago: executing program 7 (id=20579):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$XFS_IOC_SCRUB_METADATA(0xffffffffffffffff, 0xc040583c, &(0x7f0000000180)={0x9, 0x1a2, 0x101, 0x6, 0x3})
pread64(0xffffffffffffffff, 0x0, 0x0, 0x5)
syz_clone(0x8200d380, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = getpid()
process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)

1.309143378s ago: executing program 7 (id=20582):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x40004)
sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x20000050}, 0x0)

1.22543466s ago: executing program 7 (id=20583):
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x8bd)
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
r2 = open(&(0x7f0000000340)='./file0\x00', 0x80402, 0x12)
write$FUSE_IOCTL(r2, &(0x7f0000000100)={0x20}, 0xfdef)
r3 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0)
read$FUSE(r3, &(0x7f0000001f40)={0x2020}, 0x2020)
splice(r0, 0x0, r3, 0x0, 0xffffffe1, 0x0)

917.448655ms ago: executing program 7 (id=20584):
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000)
openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffffd)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0))
r2 = syz_open_dev$vim2m(0x0, 0x242, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f00000001c0)={0x3, 0x6, 0x1, {0x2, @sliced={0x802, [0x4, 0x9, 0x84c, 0xc289, 0x8, 0xfe1b, 0x6, 0x4, 0x4, 0xf, 0xf3, 0x1fc, 0x8, 0x5, 0xe2, 0x4, 0xad9, 0x6bed, 0xffff, 0x7, 0x4, 0x1, 0x3, 0x2, 0xfff8, 0x6, 0x6, 0xa, 0x5, 0x1, 0x4, 0x1, 0x5, 0xff, 0x400, 0x3, 0x0, 0x3, 0xcbe, 0xf, 0x2, 0x5e, 0x9, 0x1, 0x0, 0x8, 0x1, 0x7fff], 0xfffffddc}}, 0xfffffe01})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000)
write$eventfd(r1, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8)
io_uring_enter(0xffffffffffffffff, 0x12a8f, 0xf264, 0x40, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x4}}, 0x9)

508.848859ms ago: executing program 5 (id=20586):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb], [0x10000], [0x6, 0x0, 0x0, 0x4]], '\x00', [{}, {0x0, 0xfffffffe}, {}, {0x0, 0xffffffff, 0x0, 0x1, 0x1}, {0x0, 0x6, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa}, {0x0, 0x3}, {}, {}, {0x0, 0x2000000}, {0x7}], '\x00', 0x1000})

421.274154ms ago: executing program 5 (id=20587):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/97, 0x61}], 0x1}, 0x7e1a}], 0x1, 0x142, 0x0)

289.079272ms ago: executing program 5 (id=20588):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x6, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x9})
fcntl$lock(r1, 0x6, &(0x7f00000002c0)={0x1, 0x1, 0xb, 0x2, 0xffffffffffffffff})
write$UHID_CREATE2(r0, &(0x7f0000000300)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x101, 0x33e, 0x800, 0x0, 0x999}}, 0x118)
fcntl$lock(r0, 0x6, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x9})

288.46227ms ago: executing program 5 (id=20589):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newtaction={0xe68, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x8001, 0x10000000, 0x8}, 0x92, 0x6}, [{0x4, 0xe, 0x8, 0xe42, 0x4, 0xec87}, {0x6, 0x40, 0x6, 0x458, 0x400, 0x7}, {0x40, 0xa6, 0x8, 0x0, 0x3ff, 0xf63}, {0x1, 0x2, 0xfc78, 0x3, 0x4, 0x7fff}, {0x0, 0x3c98, 0x1, 0x7fffffff, 0x9, 0xc}, {0x3, 0x7, 0x3, 0x0, 0x6, 0x4}, {0x1, 0x2, 0x0, 0x51, 0x6, 0x6}, {0xf, 0xfff, 0x9, 0x99, 0x6b2b}, {0x8e73, 0x3f8000, 0x1, 0x4, 0x7, 0x7}, {0x4, 0x3, 0x1, 0x4, 0x0, 0x400}, {0xec25, 0x60, 0xffffff00, 0xb45d, 0x552, 0x39f}, {0x100000, 0xfffff317, 0x2, 0x5, 0x974f, 0x17}, {0x4, 0x7, 0x100, 0x0, 0xfff, 0xffffffff}, {0xfffffff7, 0x101, 0x400, 0x6, 0x40, 0xb}, {0x0, 0x4, 0x5, 0x3, 0x81, 0x2}, {0xb2, 0x4c81440c, 0x8, 0x800, 0x2, 0xd66}, {0x4, 0x2bb, 0x80, 0xa, 0xfffffffa, 0x5}, {0xfffffffe, 0x5b92, 0x7, 0x4, 0x88f5, 0x9}, {0x6, 0xc, 0x200, 0x4, 0xfffffff1, 0x26}, {0x9, 0x56, 0x1, 0xd, 0x5, 0x1}, {0x5, 0x3, 0xc, 0xfffffff7, 0x2}, {0xfffffff7, 0xf9f5, 0x8, 0xfff, 0xe1, 0x2d5e}, {0x6, 0x10001, 0x2, 0xcb, 0x5, 0x4}, {0xe, 0x101, 0x80, 0xd, 0xfffffffc, 0x9}, {0x0, 0xb, 0xfffffff4, 0x9, 0xfff, 0x81}, {0x6, 0x4, 0x9, 0x38f5, 0xe, 0xb4}, {0x2, 0x6, 0x9, 0x3, 0xe5, 0x3800}, {0x9, 0x4, 0x1, 0x101, 0x49a, 0xfff}, {0x100, 0xffffffff, 0x80000001, 0x3, 0x12ab, 0xbc}, {0xa4a9, 0x3, 0x9, 0x7, 0x9, 0xb}, {0x7fffffff, 0x4, 0x5, 0x3, 0x7fff, 0xc}, {0x5, 0x9, 0x75, 0xffff8001, 0x9, 0x6}, {0xb0, 0x4, 0xffffffff, 0x6d, 0x81, 0xfffffffa}, {0x100, 0x6, 0xffffffff, 0x0, 0x4, 0x9}, {0x6, 0x9, 0x9, 0x1, 0xffff, 0x2}, {0x800, 0x4, 0xfffffffe, 0x10001, 0x7fffffff, 0x100}, {0xc, 0x2, 0x4, 0xfffffff8, 0x6, 0xfffffff9}, {0x1, 0x9, 0x5, 0x6, 0x84, 0x7}, {0xa, 0x0, 0x909d, 0x1, 0x9}, {0xbe0, 0x0, 0x5, 0x2, 0x3, 0x80000001}, {0x6, 0x0, 0x0, 0xce8, 0xc7f, 0x10001}, {0xe8, 0xaad, 0x8, 0x6, 0x1, 0x3}, {0x6, 0x5, 0x5, 0x7, 0x7247, 0x2}, {0x80000000, 0xfe9, 0x32b2, 0x7, 0x4, 0x7ff}, {0x40, 0x9, 0x68, 0x0, 0x2, 0x98a}, {0x7, 0x0, 0x5b02, 0x6, 0x8001, 0x2}, {0x6, 0x4, 0x1ff, 0xd, 0x8, 0xfff}, {0x2, 0x9, 0x800, 0x0, 0xfffffff8, 0x3a}, {0x4, 0x9, 0x9, 0xfff, 0x3, 0xd4f}, {0xb44, 0x7, 0x9, 0x7d, 0x3, 0x3}, {0xc1, 0x6, 0x2, 0x6, 0x1, 0x5}, {0x40, 0x6be, 0x4d1, 0x5, 0x2, 0x7}, {0x1ff, 0xb25, 0x80000001, 0x1, 0xf}, {0x4, 0x6, 0x1, 0x32}, {0xe6e1, 0x5, 0xfffffff9, 0x2, 0x60, 0x1a0}, {0x401, 0x0, 0x8000, 0xffff65ca, 0xffffffc0, 0xf9}, {0x1000000f, 0x2, 0x9, 0xa, 0x3, 0xffffffff}, {0x4, 0x3, 0x9, 0x6, 0x4, 0x7ff}, {0x7ff, 0xfffffffc, 0x15e5a53f, 0x67b, 0x1, 0x4}, {0x4, 0x7, 0x5, 0x10001, 0x8, 0x6}, {0x8f2, 0xfff, 0x6, 0x2, 0xc5, 0xfffffff8}, {0x8000, 0xc1, 0x8, 0x7fff, 0x7fff, 0x400}, {0x2900416, 0x10000, 0xe, 0x9, 0x1000, 0x9}, {0x10, 0xfffffff8, 0x0, 0x4, 0xe, 0x9}, {0x8, 0x8, 0x8000, 0x0, 0xd01, 0x4000}, {0x800, 0x3, 0x0, 0x0, 0x4, 0xf87b}, {0x1, 0x1ff, 0x3, 0x3, 0x9, 0x3ff}, {0x7, 0xfffffff6, 0x0, 0xde, 0x3, 0x7}, {0x8, 0xaf00, 0x1, 0x1, 0x8, 0x1}, {0x4, 0x2, 0x9, 0xfd, 0x0, 0x7}, {0x0, 0x6, 0x8, 0xc, 0xf15f10b, 0x6}, {0x4d, 0x6, 0x8, 0x7, 0xe582, 0x6}, {0x4, 0x0, 0x40, 0x8, 0x0, 0xffff8000}, {0x9, 0x4, 0x6, 0x6, 0xa, 0x8}, {0x3, 0x401, 0x6, 0xe, 0x1ff000, 0x1}, {0xfffffb2a, 0x8, 0x28f, 0xffff, 0x2, 0xffffff00}, {0x400, 0x6, 0x3, 0x9a, 0x1, 0x2000}, {0x5, 0x2, 0x81, 0xf, 0x5, 0x8}, {0x1, 0x4241, 0xfffffff8, 0x9, 0x400, 0xebed}, {0x5, 0x1ed, 0x2, 0x8, 0x707, 0xfc1a}, {0x1d, 0x33, 0xfffffff8, 0x2, 0x6, 0x9}, {0x9b, 0x6, 0x3a438d3b, 0x8000, 0x4}, {0x9, 0x74, 0x7fff, 0x800, 0x9}, {0x10, 0x4, 0x1, 0x620e, 0xd8, 0x9}, {0x33, 0x7, 0x9, 0x6, 0x1e, 0xd}, {0xd2, 0x7, 0x6, 0x2, 0x7, 0x1000}, {0x4, 0x0, 0x7, 0xab7, 0x5, 0x5}, {0xb, 0x7, 0xc, 0x1, 0x6, 0x80000000}, {0x3, 0x1, 0x2, 0x8, 0x2c, 0x10}, {0x50a49641, 0x2, 0x4, 0xef1, 0x8, 0x9a90}, {0x5e300141, 0x0, 0x7, 0x93, 0xa, 0x6e}, {0x36, 0x5, 0x6de, 0x80000001, 0x4, 0xcb7}, {0x8, 0x2, 0x5, 0x0, 0x0, 0x57d}, {0x3, 0x6, 0x7fc, 0x6, 0x8001, 0x8}, {0x5000, 0x7, 0x0, 0x4, 0x6, 0x4}, {0x4, 0x7fffffff, 0x7fff, 0xffffffff, 0x100000, 0x5}, {0x7d, 0x343, 0x6, 0x1, 0xa19a, 0x5}, {0x1, 0x4, 0x962, 0xd, 0x1, 0x8}, {0x1a4, 0x2, 0xffff, 0xa, 0x0, 0x1}, {0x800, 0x81, 0x6, 0x3, 0xfffffff9, 0x8001}, {0x8000, 0x3, 0x0, 0x1, 0x2, 0x8}, {0x101, 0x4, 0x7f, 0x3b24, 0xc16, 0x1ff}, {0x80, 0x8, 0x3, 0x2, 0x34c, 0x2}, {0x9, 0x6, 0x2, 0xac, 0x4, 0x3ff}, {0x6, 0x4, 0xf, 0x5, 0xfffff157, 0x7}, {0x400000, 0xbefa, 0x9, 0x6, 0x4, 0xffffffff}, {0x2fd, 0x4, 0x8, 0x3, 0x6, 0x1}, {0xa1, 0x1, 0xd, 0x7, 0x4, 0xe1}, {0x6, 0x101, 0x7, 0x3, 0x0, 0x3}, {0x3, 0x6, 0x7, 0x9}, {0x2, 0xc, 0x23c, 0x8, 0x12, 0x80}, {0x0, 0x292, 0x2, 0x8, 0xffff, 0x2}, {0x9, 0x0, 0x3, 0x4, 0x40, 0xffffffff}, {0x80000000, 0x6f95, 0x23, 0xf9, 0x8, 0x7fff}, {0x5, 0x19de554e, 0xfffff4b2, 0xb97, 0x1, 0x7}, {0x9, 0x0, 0x521, 0x5, 0x3}, {0xffff, 0x4, 0xfb1, 0x3, 0x0, 0xfffffff8}, {0x6, 0x19c1, 0x7ff, 0xa, 0xda8b, 0x9b}, {0x3, 0x8, 0x7fff, 0x6, 0x7, 0x8}, {0x80, 0x5, 0x48, 0xce6, 0x3, 0x4}, {0x9, 0x3ae2, 0x1, 0x7, 0x7, 0xfff}, {0xb5, 0x7f, 0xffffacad, 0x0, 0x4}, {0x3, 0x0, 0x7455, 0xe, 0x8000, 0x4}, {0x8, 0x8, 0x10, 0x0, 0x0, 0x3}, {0x2, 0x8, 0x0, 0x5, 0x1ff, 0x6}, {0xd, 0x4, 0x73f57df3, 0x8, 0xffffff62, 0x5af6}, {0x7, 0x8, 0x5, 0x5, 0xb, 0x40}, {0x6f, 0x0, 0xffff, 0x81, 0xc, 0x10000}], [{0x5, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {}, {}, {}, {0xff83427b013f8483}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x4}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x5}, {}, {0x2}, {0x5}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x5}, {0x5}, {0x7, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x5}, {0x2}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x1}, {0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x2}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {}, {0x2}, {0x1}, {0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800)
bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x10, 0x0, @val=@tracing={0x0, 0x47d}}, 0x20)

203.119562ms ago: executing program 0 (id=20590):
r0 = socket$nl_route(0x10, 0x3, 0x0)
flock(r0, 0x8)

202.697432ms ago: executing program 5 (id=20591):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
socket$kcm(0x2c, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000480)={0x8, 0x1, 0x836, 0xfffffff9, 0x7}, 0x14)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0x10000008, 0x4)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

202.522085ms ago: executing program 0 (id=20592):
syz_clone3(&(0x7f00000004c0)={0xd0012000, 0x0, 0x0, 0x0, {}, 0x0, 0x1f, 0x0, &(0x7f0000000480), 0x1}, 0x58)

149.93455ms ago: executing program 0 (id=20593):
r0 = socket$key(0xf, 0x3, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5")
sendmsg$key(r0, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2)

70.468052ms ago: executing program 0 (id=20594):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
bind$alg(r0, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58)

69.088143ms ago: executing program 5 (id=20595):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x78d, &(0x7f00000007c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x7a680000)

68.797493ms ago: executing program 0 (id=20596):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000200)={[{@dots}, {@dots}, {@fat=@flush}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@fat=@quiet}, {@nodots}, {@fat=@usefree}, {@nodots}, {@nodots}, {@dots}, {@dots}, {@dots}, {@fat=@errors_continue}, {}, {@fat=@check_strict}, {@fat=@sys_immutable}, {@dots}, {@fat=@showexec}, {@fat=@flush}, {@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@tz_utc}, {@dots}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
read$FUSE(r0, &(0x7f0000004c40)={0x2020}, 0x2020)

0s ago: executing program 0 (id=20597):
r0 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10)
listen(r0, 0x100)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = dup(r1)
sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)="88", 0x1}], 0x1}, 0x4048043)
write$FUSE_CREATE_OPEN(r2, &(0x7f0000000280)={0xa0, 0x0, 0x0, {{0x2, 0x1, 0x8e44, 0xaf5, 0x4, 0x200, {0x5, 0x7ff, 0x5, 0x3, 0x1000, 0x4, 0x9, 0x8, 0x1, 0x8000, 0xe1, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x1}}}, 0xa0)
shutdown(r1, 0x1)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x9}}, 0x1000000, 0x31, 0xffff1893, 0x3, 0x25, 0x0, 0x1b}, 0x9c)

kernel console output (not intermixed with test programs):

nk: 40 bytes leftover after parsing attributes in process `syz.0.17879'.
[ 1366.080301][T16024] netlink: 'syz.0.17900': attribute type 1 has an invalid length.
[ 1366.084683][T16024] netlink: 'syz.0.17900': attribute type 1 has an invalid length.
[ 1366.087321][T16024] netlink: 'syz.0.17900': attribute type 8 has an invalid length.
[ 1367.977567][T16084] xt_hashlimit: size too large, truncated to 1048576
[ 1367.980694][T16084] xt_hashlimit: max too large, truncated to 1048576
[ 1368.481679][T16097] loop3: detected capacity change from 0 to 32768
[ 1368.528746][T16097] ialloc: diAlloc returned -5!
[ 1368.533346][T16097] ialloc: diAlloc returned -5!
[ 1368.738168][T16110] netlink: 'syz.3.17939': attribute type 3 has an invalid length.
[ 1368.741402][T16110] __nla_validate_parse: 6 callbacks suppressed
[ 1368.741417][T16110] netlink: 46 bytes leftover after parsing attributes in process `syz.3.17939'.
[ 1368.832784][T16117] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17942'.
[ 1369.831796][T16157] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17960'.
[ 1369.834714][T16157] erspan0: entered promiscuous mode
[ 1370.240424][T16175] loop3: detected capacity change from 0 to 2048
[ 1370.250042][T16175] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1370.314017][T14370] UDF-fs: error (device loop3): udf_read_inode: (ino 1410) failed !bh
[ 1370.319274][T14370] UDF-fs: error (device loop3): udf_read_inode: (ino 1410) failed !bh
[ 1370.406073][T16182] netlink: 'syz.7.17971': attribute type 5 has an invalid length.
[ 1370.523411][T16186] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17973'.
[ 1370.939852][ T6124] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1371.040008][ T6124] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1371.107426][ T5198] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1371.116838][ T5198] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1371.120587][ T5198] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1371.125238][ T5198] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1371.130004][ T5198] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1371.163599][ T6124] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1371.200518][T16198] wg0 speed is unknown, defaulting to 1000
[ 1371.238485][ T6124] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1371.448496][T16198] chnl_net:caif_netlink_parms(): no params data found
[ 1371.551888][ T6124] bridge_slave_1: left allmulticast mode
[ 1371.553918][ T6124] bridge_slave_1: left promiscuous mode
[ 1371.555742][ T6124] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1371.568888][ T6124] bridge_slave_0: left allmulticast mode
[ 1371.570982][ T6124] bridge_slave_0: left promiscuous mode
[ 1371.573242][ T6124] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1371.707179][T16216] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1371.831916][ T6124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1371.844068][ T6124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1371.850580][ T6124] bond0 (unregistering): Released all slaves
[ 1371.893201][T16222] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[ 1371.942391][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1371.974894][T16222] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 1371.980562][T16198] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1371.983281][T16198] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1371.986772][T16198] bridge_slave_0: entered allmulticast mode
[ 1371.993167][T16198] bridge_slave_0: entered promiscuous mode
[ 1371.998895][T16198] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1372.001616][T16198] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1372.008992][T16198] bridge_slave_1: entered allmulticast mode
[ 1372.015197][T16198] bridge_slave_1: entered promiscuous mode
[ 1372.099649][T16198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1372.143273][T16198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1372.202378][T16198] team0: Port device team_slave_0 added
[ 1372.229292][T16198] team0: Port device team_slave_1 added
[ 1372.291327][ T5853] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1372.326538][T16198] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1372.329620][T16198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1372.339816][T16198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1372.350125][T16198] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1372.354476][T16198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1372.372641][T16198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1372.437505][ T6124] hsr_slave_0: left promiscuous mode
[ 1372.439754][ T6124] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1372.442686][ T6124] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1372.447522][ T6124] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1372.450244][ T6124] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1372.460815][ T6124] veth1_macvtap: left promiscuous mode
[ 1372.462912][ T6124] veth0_macvtap: left promiscuous mode
[ 1372.465272][ T6124] veth1_vlan: left promiscuous mode
[ 1372.471348][ T6124] veth0_vlan: left promiscuous mode
[ 1372.680966][ T6124] team0 (unregistering): Port device team_slave_1 removed
[ 1372.700106][ T6124] team0 (unregistering): Port device team_slave_0 removed
[ 1372.874999][T16198] hsr_slave_0: entered promiscuous mode
[ 1372.877466][T16198] hsr_slave_1: entered promiscuous mode
[ 1372.879646][T16198] debugfs: 'hsr0' already exists in 'hsr'
[ 1372.881420][T16198] Cannot create hsr debugfs directory
[ 1373.302018][ T6124] IPVS: stop unused estimator thread 0...
[ 1373.322048][ T9541] Bluetooth: hci0: command tx timeout
[ 1373.496875][ T5853] libceph: connect (1)[c::]:6789 error -101
[ 1373.499860][ T5853] libceph: mon0 (1)[c::]:6789 connect error
[ 1373.564177][ T5853] libceph: connect (1)[b::]:6789 error -101
[ 1373.569992][ T5853] libceph: mon0 (1)[b::]:6789 connect error
[ 1373.810168][ T5853] libceph: connect (1)[c::]:6789 error -101
[ 1373.812579][ T5853] libceph: mon0 (1)[c::]:6789 connect error
[ 1373.878689][ T5853] libceph: connect (1)[b::]:6789 error -101
[ 1373.880691][ T5853] libceph: mon0 (1)[b::]:6789 connect error
[ 1373.997857][T16198] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1374.002983][T16198] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1374.008053][T16198] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1374.013220][T16198] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1374.066774][T16198] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1374.081137][T16198] 8021q: adding VLAN 0 to HW filter on device team0
[ 1374.087072][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1374.089226][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1374.095737][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[ 1374.097626][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[ 1374.110690][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1374.113494][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1374.243954][T16198] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1374.298073][T16198] veth0_vlan: entered promiscuous mode
[ 1374.303818][T16198] veth1_vlan: entered promiscuous mode
[ 1374.323432][T16198] veth0_macvtap: entered promiscuous mode
[ 1374.329550][T16198] veth1_macvtap: entered promiscuous mode
[ 1374.340854][T16198] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1374.350593][T16198] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1374.360427][   T10] libceph: connect (1)[c::]:6789 error -101
[ 1374.362970][ T6124] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1374.379781][ T6124] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1374.390761][   T10] libceph: mon0 (1)[c::]:6789 connect error
[ 1374.393055][ T6124] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1374.393097][ T6124] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1374.404369][T16260] ceph: No mds server is up or the cluster is laggy
[ 1374.418382][T16266] ceph: No mds server is up or the cluster is laggy
[ 1374.433371][T14624] libceph: connect (1)[b::]:6789 error -101
[ 1374.436511][T14624] libceph: mon0 (1)[b::]:6789 connect error
[ 1374.604624][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1374.607133][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1374.666038][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1374.673981][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1374.804799][ T6124] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[ 1374.813638][ T6124] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[ 1374.816962][ T6124] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[ 1374.831960][ T6124] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[ 1376.007064][ T9541] Bluetooth: hci0: command tx timeout
[ 1376.977711][T16343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1377.182588][T16351] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 1377.194184][T16329] loop2: detected capacity change from 0 to 32768
[ 1377.227496][T16329] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1377.260396][T16329] XFS (loop2): Ending clean mount
[ 1377.301874][T16198] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1378.207620][ T9541] Bluetooth: hci0: command tx timeout
[ 1378.413334][T16386] netlink: 'syz.2.18017': attribute type 4 has an invalid length.
[ 1378.415948][T16386] netlink: 152 bytes leftover after parsing attributes in process `syz.2.18017'.
[ 1378.432267][T16386] .`: renamed from bond0 (while UP)
[ 1380.059686][T16427] netlink: 120 bytes leftover after parsing attributes in process `syz.2.18035'.
[ 1380.075476][T16427] netlink: 'syz.2.18035': attribute type 1 has an invalid length.
[ 1380.082714][T16427] netlink: 64 bytes leftover after parsing attributes in process `syz.2.18035'.
[ 1380.323511][T16448] overlayfs: failed to clone upperpath
[ 1380.423279][ T9541] Bluetooth: hci0: command tx timeout
[ 1380.462008][T16460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18044'.
[ 1380.558091][T16468] overlayfs: failed to clone upperpath
[ 1381.407231][T16508] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1382.272964][T16550] netem: change failed
[ 1382.797073][T16556] batadv_slave_0: left allmulticast mode
[ 1383.007896][ T5843] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[ 1383.169013][ T5843] usb 3-1: Using ep0 maxpacket: 16
[ 1383.173058][ T5843] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1383.177200][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1383.184405][ T5843] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[ 1383.187637][ T5843] usb 3-1: New USB device strings: Mfr=140, Product=215, SerialNumber=3
[ 1383.191402][ T5843] usb 3-1: Product: syz
[ 1383.192951][ T5843] usb 3-1: Manufacturer: syz
[ 1383.194635][ T5843] usb 3-1: SerialNumber: syz
[ 1383.201550][ T5843] usb 3-1: config 0 descriptor??
[ 1383.210364][ T5843] pegasus_notetaker 3-1:0.0: probe with driver pegasus_notetaker failed with error -22
[ 1383.427336][T18315] usb 3-1: USB disconnect, device number 29
[ 1383.856889][T16591] team0: entered allmulticast mode
[ 1383.858708][T16591] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1383.957553][T16595] netlink: 'syz.0.18100': attribute type 10 has an invalid length.
[ 1383.974796][T16595] team0: Device wg1 is of different type
[ 1386.357720][T16672] loop2: detected capacity change from 0 to 512
[ 1386.361010][T16672] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1386.376570][T16672] EXT4-fs (loop2): orphan cleanup on readonly fs
[ 1386.395971][T16672] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.18133: Allocating blocks 41-42 which overlap fs metadata
[ 1386.402302][T16672] loop2: lost filesystem error report for type 5 error -117
[ 1386.407181][T16672] Quota error (device loop2): write_blk: dquota write failed
[ 1386.410037][    C1] EXT4-fs (loop2): error count since last fsck: 1
[ 1386.410050][    C1] EXT4-fs (loop2): initial error at time 227070071: ext4_mb_mark_diskspace_used:4222
[ 1386.410062][    C1] EXT4-fs (loop2): last error at time 227070071: ext4_mb_mark_diskspace_used:4222
[ 1386.419625][T16672] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[ 1386.422823][T16672] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.18133: Failed to acquire dquot type 0
[ 1386.425920][T16672] loop2: lost filesystem error report for type 5 error -117
[ 1386.426403][T16672] EXT4-fs error (device loop2): mb_free_blocks:2047: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[ 1386.436534][T16672] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #12: comm syz.2.18133: corrupted inode contents
[ 1386.439944][T16672] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[ 1386.441008][T16672] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #12: comm syz.2.18133: mark_inode_dirty error
[ 1386.446947][T16672] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[ 1386.447408][T16672] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #12: comm syz.2.18133: corrupted inode contents
[ 1386.453699][T16672] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[ 1386.453890][T16672] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm syz.2.18133: mark_inode_dirty error
[ 1386.459874][T16672] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[ 1386.460097][T16672] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #12: comm syz.2.18133: corrupted inode contents
[ 1386.468261][T16672] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[ 1386.473857][T16672] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[ 1386.478985][T16672] loop2: lost filesystem error report for type 5 error -117
[ 1386.479217][T16672] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #12: comm syz.2.18133: corrupted inode contents
[ 1386.485121][T16672] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[ 1386.485344][T16672] EXT4-fs error (device loop2): ext4_truncate:4587: inode #12: comm syz.2.18133: mark_inode_dirty error
[ 1386.491211][T16672] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[ 1386.491396][T16672] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[ 1386.496646][T16672] loop2: lost filesystem error report for type 5 error -117
[ 1386.496954][T16672] EXT4-fs (loop2): 1 truncate cleaned up
[ 1386.503738][T16672] EXT4-fs (loop2): pa ffff8881aec9b828: logic 1, phys. 41, len 23
[ 1386.506947][T16672] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5465: group 0, free 22, pa_free 23
[ 1386.516673][T16672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1386.548476][T16198] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1386.812363][   T34] audit: type=1800 audit(227070072.073:9396): pid=16690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.18140" name="file1" dev="tmpfs" ino=8556 res=0 errno=0
[ 1387.056232][T16721] netlink: 'syz.7.18156': attribute type 10 has an invalid length.
[ 1387.245015][ T7251] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[ 1387.412943][ T7251] usb 3-1: Using ep0 maxpacket: 8
[ 1387.427196][ T7251] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d
[ 1387.429907][ T7251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1387.432216][ T7251] usb 3-1: Product: syz
[ 1387.433487][ T7251] usb 3-1: Manufacturer: syz
[ 1387.436416][ T7251] usb 3-1: SerialNumber: syz
[ 1387.439403][ T7251] usb 3-1: config 0 descriptor??
[ 1387.452647][ T7251] usb_ehset_test 3-1:0.0: probe with driver usb_ehset_test failed with error -32
[ 1387.661586][   T10] usb 3-1: USB disconnect, device number 30
[ 1387.842447][   T34] audit: type=1326 audit(227070073.045:9397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16747 comm="syz.0.18168" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8ad9c799 code=0x7ffc0000
[ 1387.850668][   T34] audit: type=1326 audit(227070073.045:9398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16747 comm="syz.0.18168" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8ad9c799 code=0x7ffc0000
[ 1387.862536][   T34] audit: type=1326 audit(227070073.045:9399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16747 comm="syz.0.18168" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8ad9c799 code=0x7ffc0000
[ 1387.881377][   T34] audit: type=1326 audit(227070073.045:9400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16747 comm="syz.0.18168" exe="/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f8c8ad9c799 code=0x7ffc0000
[ 1387.890432][   T34] audit: type=1326 audit(227070073.045:9401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16747 comm="syz.0.18168" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8ad9c799 code=0x7ffc0000
[ 1387.898805][   T34] audit: type=1326 audit(227070073.045:9402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16747 comm="syz.0.18168" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8ad9c799 code=0x7ffc0000
[ 1387.908713][   T34] audit: type=1326 audit(227070073.045:9403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16747 comm="syz.0.18168" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8c8ad9c799 code=0x7ffc0000
[ 1388.016224][T16759] overlayfs: failed to clone upperpath
[ 1388.462114][T16781] loop2: detected capacity change from 0 to 32768
[ 1388.466176][T16781] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.18183 (16781)
[ 1388.475856][T16781] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1388.478702][T16781] BTRFS info (device loop2): using sha256 checksum algorithm
[ 1388.494780][T16781] BTRFS info (device loop2): enabling ssd optimizations
[ 1388.496831][T16781] BTRFS info (device loop2): turning on async discard
[ 1388.498844][T16781] BTRFS info (device loop2): enabling free space tree
[ 1388.500779][T16781] BTRFS info (device loop2): enabling auto defrag
[ 1388.502626][T16781] BTRFS info (device loop2): max_inline set to 4096
[ 1388.603737][T16198] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1389.451251][T16848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18205'.
[ 1389.700329][T16864] IPVS: dh: TCP 172.20.20.170:0 - no destination available
[ 1389.861289][T14687] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[ 1390.047543][T14687] usb 3-1: config 0 has no interfaces?
[ 1390.049763][T14687] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1390.053423][T14687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1390.059022][T14687] usb 3-1: config 0 descriptor??
[ 1390.287733][   T24] usb 3-1: USB disconnect, device number 31
[ 1390.732470][T16886] netlink: 352 bytes leftover after parsing attributes in process `syz.0.18221'.
[ 1390.909071][T16900] 9pnet: Found fid 0 not clunked
[ 1391.050676][T16910] loop2: detected capacity change from 0 to 128
[ 1391.055576][T16910] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1391.084624][T26218] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1391.179031][T16916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18236'.
[ 1391.182436][T16916] netlink: 'syz.0.18236': attribute type 4 has an invalid length.
[ 1391.908064][T16965] bond0: entered promiscuous mode
[ 1391.910856][T16965] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18258'.
[ 1391.932430][T16969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18260'.
[ 1391.959984][T16971] Bluetooth: MGMT ver 1.23
[ 1392.130347][T16982] team0: entered allmulticast mode
[ 1392.132481][T16982] team_slave_0: entered allmulticast mode
[ 1392.140604][T16982] team_slave_1: entered allmulticast mode
[ 1392.145703][T16982] team0: left allmulticast mode
[ 1392.149374][T16982] team_slave_0: left allmulticast mode
[ 1392.151091][T16982] team_slave_1: left allmulticast mode
[ 1392.334432][T16992] loop2: detected capacity change from 0 to 512
[ 1392.362578][T16992] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.18270: inode has both inline data and extents flags
[ 1392.377086][T16992] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1392.379957][T16992] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.18270: couldn't read orphan inode 15 (err -117)
[ 1392.388159][    C1] EXT4-fs (loop2): error count since last fsck: 1
[ 1392.388185][    C1] EXT4-fs (loop2): initial error at time 227070077: ext4_orphan_get:1391: inode 15
[ 1392.388212][    C1] EXT4-fs (loop2): last error at time 227070077: ext4_orphan_get:1391: inode 15
[ 1392.444735][T16992] loop2: lost filesystem error report for type 5 error -117
[ 1392.464130][T16992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1392.612558][T16198] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1393.058088][ T5002] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[ 1393.240353][ T5002] usb 3-1: Using ep0 maxpacket: 32
[ 1393.246755][ T5002] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[ 1393.250027][ T5002] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1393.254609][ T5002] usb 3-1: Product: syz
[ 1393.256343][ T5002] usb 3-1: Manufacturer: syz
[ 1393.258199][ T5002] usb 3-1: SerialNumber: syz
[ 1393.266162][ T5002] usb 3-1: config 0 descriptor??
[ 1393.488344][ T5002] airspy 3-1:0.0: usb_control_msg() failed -71 request 09
[ 1393.492234][ T5002] airspy 3-1:0.0: Could not detect board
[ 1393.494205][ T5002] airspy 3-1:0.0: probe with driver airspy failed with error -71
[ 1393.499397][ T5002] usb 3-1: USB disconnect, device number 32
[ 1394.380956][T17087] program syz.2.18305 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1394.589755][T17101] loop2: detected capacity change from 0 to 512
[ 1394.621490][T17101] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1394.777586][T17108] PKCS7: Unknown OID: [4] (bad)
[ 1394.779145][T17108] PKCS7: Only support pkcs7_signedData type
[ 1395.447080][T17124] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.18321'.
[ 1395.557477][T16198] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1395.683973][T17134] netlink: 'syz.2.18326': attribute type 1 has an invalid length.
[ 1395.686446][T17134] netlink: 244 bytes leftover after parsing attributes in process `syz.2.18326'.
[ 1396.436906][T14687] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[ 1396.939127][T14687] usb 3-1: Using ep0 maxpacket: 32
[ 1396.946702][T14687] usb 3-1: config 0 has no interfaces?
[ 1396.955920][T14687] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1396.959305][T14687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1396.971357][T14687] usb 3-1: Product: syz
[ 1396.973031][T14687] usb 3-1: Manufacturer: syz
[ 1396.974752][T14687] usb 3-1: SerialNumber: syz
[ 1396.989614][T14687] usb 3-1: config 0 descriptor??
[ 1397.678319][T17197] netlink: 190972 bytes leftover after parsing attributes in process `syz.7.18352'.
[ 1398.824960][T17231] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false
[ 1399.150824][T14687] usb 3-1: USB disconnect, device number 33
[ 1399.182535][T17241] loop2: detected capacity change from 0 to 1024
[ 1399.214578][T17241] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1399.270415][T17241] loop2: detected capacity change from 1024 to 0
[ 1399.278201][T17241] EXT4-fs error (device loop2): ext4_get_inode_loc:4920: inode #18: block 9: comm syz.2.18373: unable to read itable block
[ 1399.284582][T17241] buffer_io_error: 28994 callbacks suppressed
[ 1399.284596][T17241] Buffer I/O error on dev loop2, logical block 1, lost sync page write
[ 1399.288754][T17241] EXT4-fs (loop2): I/O error while writing superblock
[ 1399.309650][T16198] EXT4-fs error (device loop2): ext4_get_inode_loc:4920: inode #2: block 5: comm syz-executor: unable to read itable block
[ 1399.313535][T16198] Buffer I/O error on dev loop2, logical block 1, lost sync page write
[ 1399.315881][T16198] EXT4-fs (loop2): I/O error while writing superblock
[ 1399.317809][T16198] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: IO failure
[ 1399.326385][T16198] Buffer I/O error on dev loop2, logical block 1, lost sync page write
[ 1399.328939][T16198] EXT4-fs (loop2): I/O error while writing superblock
[ 1399.330983][T16198] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #2: comm syz-executor: mark_inode_dirty error
[ 1399.335793][T16198] Buffer I/O error on dev loop2, logical block 1, lost sync page write
[ 1399.339173][T16198] EXT4-fs (loop2): I/O error while writing superblock
[ 1399.342002][   T88] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4905: inode #2: block 5: comm kworker/u9:4: unable to read itable block
[ 1399.347547][   T88] Buffer I/O error on dev loop2, logical block 1, lost sync page write
[ 1399.350736][   T88] EXT4-fs (loop2): I/O error while writing superblock
[ 1399.354993][T16198] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1399.377064][T16198] Buffer I/O error on dev loop2, logical block 1, lost sync page write
[ 1399.379755][T16198] EXT4-fs (loop2): I/O error while writing superblock
[ 1399.383132][T17242] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[ 1399.735116][ T6124] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1399.915748][ T6124] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1399.953166][ T5198] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1399.962238][ T5198] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1399.968316][ T5198] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1399.973386][ T5198] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1399.980965][ T5198] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1400.094800][ T6124] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1400.127301][T17261] wg0 speed is unknown, defaulting to 1000
[ 1400.229614][ T6124] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1400.516574][ T6124] bridge_slave_1: left allmulticast mode
[ 1400.518748][ T6124] bridge_slave_1: left promiscuous mode
[ 1400.521621][ T6124] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1400.555613][ T6124] bridge_slave_0: left allmulticast mode
[ 1400.557684][ T6124] bridge_slave_0: left promiscuous mode
[ 1400.559855][ T6124] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1400.967239][ T6124] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1400.986816][ T6124] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1400.992608][ T6124] .` (unregistering): Released all slaves
[ 1401.000241][ T6124] bond0 (unregistering): Released all slaves
[ 1401.015566][T17261] chnl_net:caif_netlink_parms(): no params data found
[ 1401.248217][T17261] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1401.251305][T17261] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1401.262978][T17261] bridge_slave_0: entered allmulticast mode
[ 1401.276746][T17261] bridge_slave_0: entered promiscuous mode
[ 1401.282687][T17261] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1401.285196][T17261] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1401.287616][T17261] bridge_slave_1: entered allmulticast mode
[ 1401.290241][T17261] bridge_slave_1: entered promiscuous mode
[ 1401.343854][T17320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18406'.
[ 1401.400437][T17261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1401.406442][T17261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1401.460230][T17261] team0: Port device team_slave_0 added
[ 1401.464358][T17261] team0: Port device team_slave_1 added
[ 1401.519505][ T6124] hsr_slave_0: left promiscuous mode
[ 1401.522457][ T6124] hsr_slave_1: left promiscuous mode
[ 1401.527646][ T6124] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1401.530511][ T6124] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1401.534149][ T6124] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1401.537373][ T6124] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1401.573293][ T6124] veth1_macvtap: left promiscuous mode
[ 1401.575512][ T6124] veth0_macvtap: left promiscuous mode
[ 1401.577993][ T6124] veth1_vlan: left promiscuous mode
[ 1401.584947][ T6124] veth0_vlan: left promiscuous mode
[ 1401.826857][ T6124] team0 (unregistering): Port device team_slave_1 removed
[ 1401.854795][ T6124] team0 (unregistering): Port device team_slave_0 removed
[ 1401.971410][T17261] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1401.973948][T17261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1401.983991][T17261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1401.995221][T17261] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1401.998028][T17261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1402.019111][T17261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1402.067427][T17261] hsr_slave_0: entered promiscuous mode
[ 1402.069913][T17261] hsr_slave_1: entered promiscuous mode
[ 1402.088294][T17261] debugfs: 'hsr0' already exists in 'hsr'
[ 1402.090037][T17261] Cannot create hsr debugfs directory
[ 1402.319168][ T9541] Bluetooth: hci0: command tx timeout
[ 1404.081632][T17261] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1404.087081][T17261] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1404.097033][T17261] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1404.109991][T17261] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1404.166173][T17261] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1404.176503][T17261] 8021q: adding VLAN 0 to HW filter on device team0
[ 1404.187377][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1404.190230][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1404.209314][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1404.212101][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1404.432913][T17261] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1404.527586][T17261] veth0_vlan: entered promiscuous mode
[ 1404.542173][T17261] veth1_vlan: entered promiscuous mode
[ 1404.551843][ T9541] Bluetooth: hci0: command tx timeout
[ 1404.592809][T17261] veth0_macvtap: entered promiscuous mode
[ 1404.601782][T17261] veth1_macvtap: entered promiscuous mode
[ 1404.615931][T17261] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1404.624508][T17261] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1404.695213][T17409] xt_policy: too many policy elements
[ 1404.778672][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1404.790217][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1404.803538][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1404.817999][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1405.037725][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1405.043272][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1405.069746][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1405.072420][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1405.260151][T17427] netlink: 1363 bytes leftover after parsing attributes in process `syz.7.18429'.
[ 1405.328267][T17436] binder: 17435:17436 ioctl c018620c 0 returned -14
[ 1405.447424][T17441] trusted_key: encrypted_key: master key parameter 'C' is invalid
[ 1406.061110][T17440] loop1: detected capacity change from 0 to 131072
[ 1406.074381][T17440] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0)
[ 1406.077475][T17440] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[ 1406.081804][T17440] F2FS-fs (loop1): invalid crc value
[ 1406.149413][T17440] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1406.154819][T17440] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[ 1406.157641][T17440] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[ 1406.425580][T17491] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[ 1406.629803][T17507] sit0: entered promiscuous mode
[ 1406.634647][T17507] netlink: 'syz.7.18450': attribute type 1 has an invalid length.
[ 1406.637325][T17507] netlink: 9 bytes leftover after parsing attributes in process `syz.7.18450'.
[ 1406.749375][T17515] netlink: 'syz.0.18454': attribute type 1 has an invalid length.
[ 1406.751663][T17515] netlink: 'syz.0.18454': attribute type 4 has an invalid length.
[ 1406.753923][T17515] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.18454'.
[ 1406.767187][ T9541] Bluetooth: hci0: command tx timeout
[ 1408.023545][   T34] kauditd_printk_skb: 1 callbacks suppressed
[ 1408.023557][   T34] audit: type=1326 audit(227070091.910:9405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17561 comm="syz.1.18464" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda23f9c799 code=0x7ffc0000
[ 1408.028389][T17562] futex_wake_op: syz.1.18464 tries to shift op by 32; fix this program
[ 1408.031977][   T34] audit: type=1326 audit(227070091.929:9406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17561 comm="syz.1.18464" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda23f9c799 code=0x7ffc0000
[ 1408.043210][   T34] audit: type=1326 audit(227070091.929:9407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17561 comm="syz.1.18464" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda23f9c799 code=0x7ffc0000
[ 1408.271926][   T34] audit: type=1326 audit(227070091.929:9408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17561 comm="syz.1.18464" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda23f9c799 code=0x7ffc0000
[ 1408.531176][T17565] tipc: Started in network mode
[ 1408.532885][T17565] tipc: Node identity ae5106638a13, cluster identity 4711
[ 1408.535211][T17565] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1408.538323][T17565] syzkaller0: entered promiscuous mode
[ 1408.541601][T17565] syzkaller0: entered allmulticast mode
[ 1408.547751][T17565] tipc: Resetting bearer <eth:syzkaller0>
[ 1408.551841][T17564] tipc: Resetting bearer <eth:syzkaller0>
[ 1408.575689][T17564] tipc: Disabling bearer <eth:syzkaller0>
[ 1408.988862][ T9541] Bluetooth: hci0: command tx timeout
[ 1409.137127][T17584] netlink: 7060 bytes leftover after parsing attributes in process `syz.0.18474'.
[ 1409.226926][T17588] new mount options do not match the existing superblock, will be ignored
[ 1409.296627][T17594] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1409.302665][T17594] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[ 1409.306341][T17593] netlink: 'syz.0.18478': attribute type 10 has an invalid length.
[ 1409.309012][T17594] bridge_slave_1: invalid flags given to default FDB implementation
[ 1409.312695][T17593] bond0: left allmulticast mode
[ 1409.314277][T17593] bond_slave_0: left allmulticast mode
[ 1409.315861][T17593] bond_slave_1: left allmulticast mode
[ 1409.317426][T17593] batadv0: left allmulticast mode
[ 1409.321816][T17593] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1409.332772][T17593] team0: Port device bond0 added
[ 1409.446373][T17600] loop1: detected capacity change from 0 to 512
[ 1409.450111][T17600] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1409.461996][T17600] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[ 1409.476495][T17600] EXT4-fs (loop1): 1 truncate cleaned up
[ 1409.479901][T17600] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1409.491873][T17600] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #12: block 7: comm syz.1.18482: bad entry in directory: directory entry overrun - offset=16, inode=2147483648, rec_len=1024, size=56 fake=0
[ 1409.557491][T17261] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1410.408697][T17630] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[ 1410.834691][T17646] netlink: 40 bytes leftover after parsing attributes in process `syz.7.18501'.
[ 1410.838167][T17646] netlink: 40 bytes leftover after parsing attributes in process `syz.7.18501'.
[ 1412.453281][T17704] sctp: [Deprecated]: syz.0.18525 (pid 17704) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1412.453281][T17704] Use struct sctp_sack_info instead
[ 1412.805332][T17726] loop1: detected capacity change from 0 to 128
[ 1412.817191][T17726] EXT4-fs: Ignoring removed nobh option
[ 1412.837268][T17726] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1412.911077][T17261] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1413.133406][T17750] loop1: detected capacity change from 0 to 2048
[ 1413.136459][T17750] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1413.150577][T17751] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1413.154065][T17750] syz.1.18546: attempt to access beyond end of device
[ 1413.154065][T17750] loop1: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048
[ 1413.163042][T17750] syz.1.18546: attempt to access beyond end of device
[ 1413.163042][T17750] loop1: rw=8388608, sector=33554430, nr_sectors = 2 limit=2048
[ 1413.167984][T17750] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=3)
[ 1413.232791][T17753] bond1: option xmit_hash_policy: invalid value (14)
[ 1413.237607][T17753] bond1 (unregistering): Released all slaves
[ 1413.597265][T17784] netlink: 456 bytes leftover after parsing attributes in process `syz.1.18560'.
[ 1413.685566][T17782] netlink: 4 bytes leftover after parsing attributes in process `syz.7.18558'.
[ 1413.750863][T17795] netlink: 84 bytes leftover after parsing attributes in process `syz.1.18564'.
[ 1413.895012][T17803] loop1: detected capacity change from 0 to 256
[ 1414.023710][T17811] netlink: 28 bytes leftover after parsing attributes in process `syz.7.18572'.
[ 1414.029278][T17811] netem: change failed
[ 1414.144717][T17821] kAFS: Can only specify source 'none' with -o dyn
[ 1414.365840][T17831] openvswitch: netlink: VXLAN extension message has 2 unknown bytes.
[ 1415.514106][T17842] bond1: entered promiscuous mode
[ 1415.515843][T17842] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1415.860626][T17864] bridge2: entered promiscuous mode
[ 1415.866797][T17864] bridge2: entered allmulticast mode
[ 1415.878836][T17864] team0: Port device bridge2 added
[ 1415.897334][T17864] bridge0: port 3(team0) entered blocking state
[ 1415.900538][T17864] bridge0: port 3(team0) entered disabled state
[ 1415.908041][T17864] team0: entered allmulticast mode
[ 1415.911580][T17864] team_slave_0: entered allmulticast mode
[ 1415.914773][T17864] team_slave_1: entered allmulticast mode
[ 1415.927013][T17864] bond0: entered allmulticast mode
[ 1415.933221][T17864] bond_slave_0: entered allmulticast mode
[ 1415.936456][T17864] bond_slave_1: entered allmulticast mode
[ 1415.940418][T17864] batadv0: entered allmulticast mode
[ 1415.952457][T17864] team0: entered promiscuous mode
[ 1415.954124][T17864] team_slave_0: entered promiscuous mode
[ 1415.957158][T17864] team_slave_1: entered promiscuous mode
[ 1415.959007][T17864] bond0: entered promiscuous mode
[ 1415.962013][T17864] bond_slave_0: entered promiscuous mode
[ 1415.966359][T17864] bond_slave_1: entered promiscuous mode
[ 1415.969402][T17864] batadv0: entered promiscuous mode
[ 1416.302207][   T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[ 1416.306793][   T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[ 1416.542007][T17888] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1416.544586][T17888] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1416.555540][T17888] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1416.557675][T17888] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1416.559964][T17888] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1416.562126][T17888] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1416.574453][T17888] team0: Port device bridge0 added
[ 1416.608364][T17890] loop1: detected capacity change from 0 to 2048
[ 1416.612712][T17890] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1416.640290][T17891] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1417.238492][T17913] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1536) !
[ 1417.336718][T17915] --map-set only usable from mangle table
[ 1417.895195][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1418.671489][T17967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18635'.
[ 1418.736310][T17969] geneve1: entered promiscuous mode
[ 1418.738849][T17969] macsec1: entered promiscuous mode
[ 1418.743472][T17969] macsec1: entered allmulticast mode
[ 1418.745146][T17969] geneve1: entered allmulticast mode
[ 1419.049677][T18163] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[ 1419.190259][T17979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18641'.
[ 1419.192922][T17979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18641'.
[ 1419.196389][T17979] netlink: 'syz.0.18641': attribute type 11 has an invalid length.
[ 1419.202463][T17979] netlink: 'syz.0.18641': attribute type 12 has an invalid length.
[ 1419.210154][T18163] usb 2-1: Using ep0 maxpacket: 8
[ 1419.215834][T18163] usb 2-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config
[ 1419.223461][T18163] usb 2-1: New USB device found, idVendor=0bfd, idProduct=011b, bcdDevice=33.a1
[ 1419.226675][T18163] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1419.229513][T18163] usb 2-1: Product: syz
[ 1419.231087][T18163] usb 2-1: Manufacturer: syz
[ 1419.233704][T18163] usb 2-1: SerialNumber: syz
[ 1419.460843][T18163] kvaser_usb 2-1:53.0: error -ENODEV: Cannot get usb endpoint(s)
[ 1419.478434][T18163] usb 2-1: USB disconnect, device number 39
[ 1419.939033][T18006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18653'.
[ 1419.941957][T18006] bond0: option miimon: invalid value (18446744071951403948)
[ 1419.944320][T18006] bond0: option miimon: allowed values 0 - 2147483647
[ 1420.122072][T18016] openvswitch: netlink: Missing key (keys=40, expected=2000)
[ 1421.604214][T18067] loop1: detected capacity change from 0 to 1024
[ 1421.713698][  T356] hfsplus: b-tree write err: -5, ino 25
[ 1421.718905][  T356] hfsplus: b-tree write err: -5, ino 4
[ 1421.721323][  T356] hfsplus: b-tree write err: -5, ino 2
[ 1422.188375][T18092] netlink: 'syz.1.18685': attribute type 1 has an invalid length.
[ 1422.190648][T18092] netlink: 96 bytes leftover after parsing attributes in process `syz.1.18685'.
[ 1422.193666][T18092] netlink: 'syz.1.18685': attribute type 1 has an invalid length.
[ 1422.195965][T18092] netlink: 'syz.1.18685': attribute type 8 has an invalid length.
[ 1422.198485][T18092] netlink: 582 bytes leftover after parsing attributes in process `syz.1.18685'.
[ 1422.199646][T18094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18686'.
[ 1422.283842][T18094] 8021q: adding VLAN 0 to HW filter on device team1
[ 1422.298711][   T34] audit: type=1326 audit(227070105.266:9409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18097 comm="syz.1.18688" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda23f9c799 code=0x0
[ 1423.330665][T18141] loop1: detected capacity change from 0 to 128
[ 1423.340388][T18141] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1423.375107][T17261] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1423.446770][T18146] netlink: 'syz.7.18711': attribute type 3 has an invalid length.
[ 1423.449434][T18146] netlink: 72 bytes leftover after parsing attributes in process `syz.7.18711'.
[ 1423.651890][T18162] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[ 1423.655558][T18162] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[ 1423.656103][T18160] loop1: detected capacity change from 0 to 4096
[ 1423.742155][T18160] pim6reg: entered allmulticast mode
[ 1423.821223][T18172] loop1: detected capacity change from 0 to 512
[ 1423.850624][T18172] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.18719: bg 0: block 5: invalid block bitmap
[ 1423.854706][T18172] loop1: lost filesystem error report for type 5 error -117
[ 1423.860912][    C0] EXT4-fs (loop1): error count since last fsck: 1
[ 1423.865204][    C0] EXT4-fs (loop1): initial error at time 227070106: ext4_validate_block_bitmap:432
[ 1423.868050][    C0] EXT4-fs (loop1): last error at time 227070106: ext4_validate_block_bitmap:432
[ 1423.874347][T18172] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem
[ 1423.877280][T18172] loop1: lost filesystem error report for type 5 error -117
[ 1423.877782][T18172] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.18719: invalid indirect mapped block 3 (level 2)
[ 1423.887181][T18172] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1423.887472][T18172] EXT4-fs (loop1): 1 orphan inode deleted
[ 1423.891901][T18172] EXT4-fs (loop1): 1 truncate cleaned up
[ 1423.894563][T18172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1423.927958][T18177] geneve3: entered promiscuous mode
[ 1423.931316][ T5682] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1423.935090][   T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1423.945051][ T5682] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1423.947933][ T5682] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1423.950659][ T5682] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1424.055746][T17261] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1424.072528][T18185] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1424.511615][T18195] syz_tun: entered allmulticast mode
[ 1424.517731][T18194] syz_tun: left allmulticast mode
[ 1424.935539][T18205] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[ 1426.059509][T18251] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1426.219435][T18259] netlink: 'syz.7.18753': attribute type 12 has an invalid length.
[ 1426.222605][T18259] netlink: 132 bytes leftover after parsing attributes in process `syz.7.18753'.
[ 1426.353543][  T597] IPVS: starting estimator thread 0...
[ 1426.448350][T18268] IPVS: using max 72 ests per chain, 172800 per kthread
[ 1426.916085][   T34] audit: type=1326 audit(227070109.588:9410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18276 comm="syz.7.18760" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae459c799 code=0x7ffc0000
[ 1426.922524][   T34] audit: type=1326 audit(227070109.588:9411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18276 comm="syz.7.18760" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae459c799 code=0x7ffc0000
[ 1426.928889][   T34] audit: type=1326 audit(227070109.588:9412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18276 comm="syz.7.18760" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae459c799 code=0x7ffc0000
[ 1426.937904][   T34] audit: type=1326 audit(227070109.588:9413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18276 comm="syz.7.18760" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae459c799 code=0x7ffc0000
[ 1426.948553][   T34] audit: type=1326 audit(227070109.588:9414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18276 comm="syz.7.18760" exe="/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f4ae459c799 code=0x7ffc0000
[ 1426.962789][   T34] audit: type=1326 audit(227070109.588:9415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18276 comm="syz.7.18760" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae459c799 code=0x7ffc0000
[ 1426.971699][   T34] audit: type=1326 audit(227070109.588:9416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18276 comm="syz.7.18760" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae459c799 code=0x7ffc0000
[ 1426.981210][   T34] audit: type=1326 audit(227070109.588:9417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18276 comm="syz.7.18760" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae459c799 code=0x7ffc0000
[ 1426.987750][   T34] audit: type=1326 audit(227070109.588:9418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18276 comm="syz.7.18760" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4ae459c799 code=0x7ffc0000
[ 1426.988336][T18279] netlink: 4 bytes leftover after parsing attributes in process `syz.7.18761'.
[ 1427.104979][T18293] xt_l2tp: missing protocol rule (udp|l2tpip)
[ 1427.133413][T18298] netlink: 260 bytes leftover after parsing attributes in process `syz.0.18770'.
[ 1427.348545][T18309] netlink: 12 bytes leftover after parsing attributes in process `syz.7.18775'.
[ 1427.843885][T18332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18785'.
[ 1428.125982][T18353] netlink: 8 bytes leftover after parsing attributes in process `syz.7.18794'.
[ 1428.128973][T18353] netlink: 8 bytes leftover after parsing attributes in process `syz.7.18794'.
[ 1428.131973][T18353] netlink: 8 bytes leftover after parsing attributes in process `syz.7.18794'.
[ 1428.134732][T18353] netlink: 8 bytes leftover after parsing attributes in process `syz.7.18794'.
[ 1428.139702][T18353] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 1428.305484][T18363] netlink: 'syz.7.18799': attribute type 33 has an invalid length.
[ 1428.312215][T18363] netlink: 152 bytes leftover after parsing attributes in process `syz.7.18799'.
[ 1428.576224][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1429.357594][T18416] xt_hashlimit: max too large, truncated to 1048576
[ 1429.642578][T18424] ptrace attach of "/syz-executor exec"[17261] was attempted by "\x22"[18424]
[ 1431.689442][T18484] loop1: detected capacity change from 0 to 256
[ 1432.015056][T18499] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1432.017347][T18499] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1432.024567][T18499] bridge0: entered promiscuous mode
[ 1432.583837][T18505] loop1: detected capacity change from 0 to 32768
[ 1432.626931][T18505] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1432.655521][T18505] XFS (loop1): Ending clean mount
[ 1432.660023][T18505] XFS (loop1): Quotacheck needed: Please wait.
[ 1432.712493][T18505] XFS (loop1): Quotacheck: Done.
[ 1432.763910][T17261] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1433.103113][T18544] __nla_validate_parse: 5 callbacks suppressed
[ 1433.103126][T18544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18873'.
[ 1433.414887][T18553] xt_hashlimit: overflow, try lower: 1/0
[ 1433.544662][T18556] loop1: detected capacity change from 0 to 128
[ 1433.582015][T18556] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1434.473247][T17261] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1434.776968][T18577] loop1: detected capacity change from 0 to 40427
[ 1434.786775][T18577] F2FS-fs (loop1): invalid crc value
[ 1434.832772][T18577] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1434.846590][T18577] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 1434.860130][ T1095] kworker/u10:4: attempt to access beyond end of device
[ 1434.860130][ T1095] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1434.866016][ T1095] CPU: 1 UID: 0 PID: 1095 Comm: kworker/u10:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1434.866039][ T1095] Tainted: [L]=SOFTLOCKUP
[ 1434.866044][ T1095] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1434.866052][ T1095] Workqueue: writeback wb_workfn (flush-7:1)
[ 1434.866080][ T1095] Call Trace:
[ 1434.866086][ T1095]  <TASK>
[ 1434.866090][ T1095]  dump_stack_lvl+0xe8/0x150
[ 1434.866111][ T1095]  f2fs_handle_critical_error+0x37c/0x540
[ 1434.866136][ T1095]  f2fs_write_end_io+0xcdb/0xff0
[ 1434.866193][ T1095]  __submit_merged_bio+0x256/0x700
[ 1434.866207][ T1095]  __submit_merged_write_cond+0x3c9/0x4e0
[ 1434.866222][ T1095]  ? __pfx___submit_merged_write_cond+0x10/0x10
[ 1434.866243][ T1095]  f2fs_write_data_pages+0x2975/0x35e0
[ 1434.866271][ T1095]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1434.866285][ T1095]  ? cfg80211_inform_single_bss_data+0x13c6/0x1b70
[ 1434.866338][ T1095]  ? __lock_acquire+0x6b5/0x2cf0
[ 1434.866359][ T1095]  ? __lock_acquire+0x6b5/0x2cf0
[ 1434.866388][ T1095]  ? update_load_avg+0x1b0/0x1ec0
[ 1434.866427][ T1095]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1434.866447][ T1095]  do_writepages+0x32e/0x550
[ 1434.866468][ T1095]  ? reacquire_held_locks+0x104/0x190
[ 1434.866479][ T1095]  ? writeback_sb_inodes+0x477/0x1a20
[ 1434.866494][ T1095]  __writeback_single_inode+0x133/0x11a0
[ 1434.866505][ T1095]  ? do_raw_spin_unlock+0x4d/0x210
[ 1434.866516][ T1095]  writeback_sb_inodes+0x992/0x1a20
[ 1434.866540][ T1095]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1434.866550][ T1095]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1434.866577][ T1095]  ? rcu_is_watching+0x15/0xb0
[ 1434.866593][ T1095]  wb_writeback+0x456/0xb70
[ 1434.866605][ T1095]  ? queue_io+0x211/0x4a0
[ 1434.866620][ T1095]  ? __pfx_wb_writeback+0x10/0x10
[ 1434.866629][ T1095]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1434.866645][ T1095]  wb_workfn+0x414/0xf50
[ 1434.866654][ T1095]  ? look_up_lock_class+0x57/0x110
[ 1434.866673][ T1095]  ? __pfx_wb_workfn+0x10/0x10
[ 1434.866684][ T1095]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1434.866693][ T1095]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1434.866709][ T1095]  ? process_scheduled_works+0xa8d/0x18c0
[ 1434.866721][ T1095]  ? process_scheduled_works+0xa8d/0x18c0
[ 1434.866732][ T1095]  process_scheduled_works+0xb6e/0x18c0
[ 1434.866757][ T1095]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1434.866770][ T1095]  ? assign_work+0x3d5/0x5e0
[ 1434.866783][ T1095]  worker_thread+0xa53/0xfc0
[ 1434.866807][ T1095]  kthread+0x388/0x470
[ 1434.866816][ T1095]  ? __pfx_worker_thread+0x10/0x10
[ 1434.866825][ T1095]  ? __pfx_kthread+0x10/0x10
[ 1434.866834][ T1095]  ret_from_fork+0x51e/0xb90
[ 1434.866847][ T1095]  ? __pfx_ret_from_fork+0x10/0x10
[ 1434.866857][ T1095]  ? __switch_to+0xc7d/0x1450
[ 1434.866870][ T1095]  ? __pfx_kthread+0x10/0x10
[ 1434.866878][ T1095]  ret_from_fork_asm+0x1a/0x30
[ 1434.866927][ T1095]  </TASK>
[ 1434.867680][ T1095] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[ 1434.962508][T18596] syz.1.18890: attempt to access beyond end of device
[ 1434.962508][T18596] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[ 1434.966938][T18596] syz.1.18890: attempt to access beyond end of device
[ 1434.966938][T18596] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427
[ 1435.421648][T18616] netlink: 40 bytes leftover after parsing attributes in process `syz.7.18905'.
[ 1435.784942][T18639] netlink: 8 bytes leftover after parsing attributes in process `syz.7.18914'.
[ 1436.332633][T18667] loop1: detected capacity change from 0 to 512
[ 1436.336066][T18667] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[ 1436.344533][T18667] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[ 1436.355567][T18667] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.18928: bad orphan inode 4
[ 1436.359281][T18667] loop1: lost filesystem error report for type 5 error -117
[ 1436.362019][    C0] EXT4-fs (loop1): error count since last fsck: 1
[ 1436.367167][    C0] EXT4-fs (loop1): initial error at time 227070118: ext4_orphan_get:1417
[ 1436.370412][    C0] EXT4-fs (loop1): last error at time 227070118: ext4_orphan_get:1417
[ 1436.378135][T18667] EXT4-fs (loop1): 1 orphan inode deleted
[ 1436.382458][T18667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1436.426555][T17261] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1436.604805][T18675] loop1: detected capacity change from 0 to 4096
[ 1436.784593][T18679] loop1: detected capacity change from 0 to 8192
[ 1436.811530][   T34] kauditd_printk_skb: 1 callbacks suppressed
[ 1436.811546][   T34] audit: type=1800 audit(227070118.847:9420): pid=18679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.18933" name="file2" dev="loop1" ino=1048854 res=0 errno=0
[ 1437.167379][T18692] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0
[ 1437.512363][T18696] bridge0: left promiscuous mode
[ 1437.864723][T18696] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1437.900790][T18696] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1438.263361][T18696] bond1: left promiscuous mode
[ 1438.266802][T18696] geneve1: left allmulticast mode
[ 1438.268533][T18696] macsec1: left promiscuous mode
[ 1438.270036][T18696] macsec1: left allmulticast mode
[ 1438.284744][ T6124] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1438.289113][ T6124] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1438.294138][ T6124] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1438.305797][ T6124] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1438.412692][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1438.436459][T18713] netem: incorrect ge model size
[ 1438.439701][T18713] netem: change failed
[ 1439.430293][   T24] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[ 1439.528428][T18755] netlink: 'syz.0.18965': attribute type 29 has an invalid length.
[ 1439.532917][T18755] netlink: 'syz.0.18965': attribute type 29 has an invalid length.
[ 1439.536033][T18755] netlink: 500 bytes leftover after parsing attributes in process `syz.0.18965'.
[ 1439.571196][T18759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18967'.
[ 1439.599293][   T24] usb 2-1: Using ep0 maxpacket: 32
[ 1439.603588][   T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1439.609653][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1439.614533][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1439.618766][   T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1439.625136][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1439.631056][   T24] usb 2-1: config 0 descriptor??
[ 1439.635013][T18708] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1439.641531][   T24] hub 2-1:0.0: USB hub found
[ 1439.785519][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[ 1439.788090][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[ 1439.877692][   T24] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19)
[ 1440.035176][T18797] netlink: 'syz.7.18985': attribute type 1 has an invalid length.
[ 1440.046863][T18797] netlink: 2096 bytes leftover after parsing attributes in process `syz.7.18985'.
[ 1440.049673][T18797] netlink: 5 bytes leftover after parsing attributes in process `syz.7.18985'.
[ 1440.096904][   T24] usbhid 2-1:0.0: can't add hid device: -71
[ 1440.098744][   T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1440.123628][   T24] usb 2-1: USB disconnect, device number 40
[ 1440.352329][T18820] overlayfs: empty lowerdir
[ 1440.774365][T18835] macvlan2: entered promiscuous mode
[ 1442.028242][T18875] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19020'.
[ 1442.032345][T18875] Unknown options in mask b7f2
[ 1442.589947][T18909] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19036'.
[ 1443.111920][T18931] loop1: detected capacity change from 0 to 128
[ 1443.118177][T18931] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1443.123920][T18931] hpfs: filesystem error: improperly stopped
[ 1443.125812][T18931] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1443.129312][T18931] hpfs: You really don't want any checks? You are crazy...
[ 1443.132829][T18931] hpfs: hpfs_map_sector(): read error
[ 1443.136429][T18931] hpfs: code page support is disabled
[ 1443.160752][T18931] hpfs: hpfs_map_4sectors(): unaligned read
[ 1443.167097][T18931] hpfs: hpfs_map_4sectors(): unaligned read
[ 1443.169422][T18931] hpfs: filesystem error: unable to find root dir
[ 1443.697866][T18945] netlink: 'syz.0.19053': attribute type 83 has an invalid length.
[ 1444.235099][T18953] loop1: detected capacity change from 0 to 16
[ 1444.284760][T18953] erofs (device loop1): mounted with root inode @ nid 36.
[ 1444.323320][T18954] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[ 1444.335033][T18953] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[ 1444.344033][T18953] erofs (device loop1): read error -117 @ 2 of nid 89
[ 1444.350174][   T34] audit: type=1800 audit(227070125.899:9421): pid=18953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.19057" name="file2" dev="loop1" ino=89 res=0 errno=0
[ 1444.810312][T18960] loop1: detected capacity change from 0 to 32768
[ 1444.829654][T18960] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1444.846698][T18960] XFS (loop1): Ending clean mount
[ 1444.862109][T18960] XFS (loop1): Quotacheck needed: Please wait.
[ 1444.954894][T18960] XFS (loop1): Quotacheck: Done.
[ 1444.986707][T17261] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1445.234291][T18999] loop1: detected capacity change from 0 to 64
[ 1445.304152][T19001] loop1: detected capacity change from 0 to 2048
[ 1445.321051][T19001] NILFS (loop1): Invalid checkpoint (checkpoint number=2)
[ 1445.323541][T19001] NILFS (loop1): error -22 while loading last checkpoint (checkpoint number=2)
[ 1445.511036][T19007] wg0 speed is unknown, defaulting to 1000
[ 1445.644252][T19017] bpf: Bad value for 'gid'
[ 1445.939458][   T24] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[ 1446.099980][   T24] usb 2-1: Using ep0 maxpacket: 32
[ 1446.105211][   T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1446.111790][   T24] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[ 1446.115332][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1446.118411][   T24] usb 2-1: Product: syz
[ 1446.120013][   T24] usb 2-1: Manufacturer: syz
[ 1446.122478][   T24] usb 2-1: SerialNumber: syz
[ 1446.130059][   T24] usb 2-1: config 0 descriptor??
[ 1446.135299][   T24] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out.
[ 1446.361294][T18315] usb 2-1: USB disconnect, device number 41
[ 1446.449585][T19035] overlayfs: failed to clone upperpath
[ 1447.356383][T19068] binder: 19067:19068 ioctl c0306201 2000000003c0 returned -14
[ 1448.969800][T19106] loop1: detected capacity change from 0 to 164
[ 1448.999901][T19106] isofs: isofs_export_get_parent(): child directory not normalized!
[ 1449.148801][T19112] nft_compat: unsupported protocol 0
[ 1450.423847][T19143] loop1: detected capacity change from 0 to 32768
[ 1450.429327][T19143] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.19135 (19143)
[ 1450.454054][T19143] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1450.457167][T19143] BTRFS info (device loop1): using sha256 checksum algorithm
[ 1450.516121][T19143] BTRFS info (device loop1): enabling ssd optimizations
[ 1450.518850][T19143] BTRFS info (device loop1): turning on async discard
[ 1450.521424][T19143] BTRFS info (device loop1): enabling free space tree
[ 1450.569494][T17261] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1450.700710][T19160] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1450.847427][T19166] syzkaller0: tun_chr_ioctl cmd 2147767520
[ 1451.009492][T19170] netlink: 'syz.7.19139': attribute type 4 has an invalid length.
[ 1451.018866][T19170] netlink: 'syz.7.19139': attribute type 4 has an invalid length.
[ 1452.012518][   T24] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[ 1452.185484][   T24] usb 2-1: config 3 has an invalid interface number: 71 but max is 0
[ 1452.188463][   T24] usb 2-1: config 3 has no interface number 0
[ 1452.191337][   T24] usb 2-1: config 3 interface 71 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1452.198953][   T24] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice=a7.ac
[ 1452.202394][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1452.220411][   T24] ati_remote 2-1:3.71: ati_remote_probe: Unexpected endpoint_in
[ 1452.458366][   T10] usb 2-1: USB disconnect, device number 42
[ 1453.823018][T19257] syz_tun: entered allmulticast mode
[ 1453.825455][T19256] syz_tun: left allmulticast mode
[ 1454.984919][T18315] usb 2-1: new full-speed USB device number 43 using dummy_hcd
[ 1455.078346][   T34] audit: type=1326 audit(227070135.926:9422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19304 comm="syz.7.19200" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ae459c799 code=0x0
[ 1455.147344][T18315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64
[ 1455.162172][T18315] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[ 1455.168005][T18315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1455.171325][T18315] usb 2-1: Product: syz
[ 1455.173294][T18315] usb 2-1: Manufacturer: syz
[ 1455.175455][T18315] usb 2-1: SerialNumber: syz
[ 1455.188977][T18315] usb 2-1: config 0 descriptor??
[ 1455.193250][T19293] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1455.196087][T19293] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1455.222285][T18315] port100 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[ 1455.295574][T19313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19203'.
[ 1455.424862][T18315] usb 2-1: USB disconnect, device number 43
[ 1456.310482][   T24] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[ 1456.323568][T19344] bridge5: entered promiscuous mode
[ 1456.325222][T19344] bridge5: entered allmulticast mode
[ 1456.503217][   T24] usb 2-1: Using ep0 maxpacket: 16
[ 1456.507127][   T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1456.510953][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1456.516934][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1456.520541][   T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1456.524089][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1456.553578][   T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1456.556902][   T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1456.559360][   T24] usb 2-1: Manufacturer: syz
[ 1456.562698][   T24] usb 2-1: config 0 descriptor??
[ 1456.787202][T19332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1456.829965][T19332] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1457.028099][   T24] rc_core: IR keymap rc-hauppauge not found
[ 1457.030891][   T24] Registered IR keymap rc-empty
[ 1457.032556][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1457.048214][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1457.081775][   T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 1457.088002][   T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input42
[ 1457.103806][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1457.134482][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1457.166121][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1457.187483][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1457.212674][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1457.232587][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1457.251370][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1457.272872][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1457.294621][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1457.316768][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1457.341103][   T24] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[ 1457.347018][   T24] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1457.460038][   T10] usb 2-1: USB disconnect, device number 44
[ 1457.572261][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1458.125420][T19429] loop1: detected capacity change from 0 to 256
[ 1458.816553][T19475] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1458.960826][T19491] wg0 speed is unknown, defaulting to 1000
[ 1460.413893][T19523] IPVS: Error connecting to the multicast addr
[ 1460.553113][T19533] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19300'.
[ 1461.151332][T19571] netlink: 'syz.0.19319': attribute type 30 has an invalid length.
[ 1461.274786][T19582] netlink: 'syz.7.19324': attribute type 1 has an invalid length.
[ 1461.734309][T19606] loop1: detected capacity change from 0 to 4096
[ 1461.736838][T19606] EXT4-fs: inline encryption not supported
[ 1461.742597][T19606] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 1461.745799][T19606] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 1461.748250][T19606] System zones: 0-5
[ 1461.756140][T19606] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1461.779639][   T34] audit: type=1800 audit(227070142.192:9423): pid=19606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.19335" name="file1" dev="loop1" ino=15 res=0 errno=0
[ 1461.802003][T17261] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1462.008332][T19620] loop1: detected capacity change from 0 to 1024
[ 1462.013881][T19620] EXT4-fs: Ignoring removed orlov option
[ 1462.043925][T19620] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1462.058541][T19620] EXT4-fs error (device loop1): ext4_free_inode:354: comm syz.1.19340: bit already cleared for inode 15
[ 1462.125032][T17261] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1462.284448][T19628] netlink: 'syz.0.19343': attribute type 6 has an invalid length.
[ 1462.296428][T19628] netlink: 32 bytes leftover after parsing attributes in process `syz.0.19343'.
[ 1462.552926][T19647] netlink: 48 bytes leftover after parsing attributes in process `syz.0.19352'.
[ 1462.569324][T19647] bond5: option miimon: invalid value (18446744071562264580)
[ 1462.571643][T19647] bond5: option miimon: allowed values 0 - 2147483647
[ 1462.578088][T19647] bond5 (unregistering): Released all slaves
[ 1465.414393][T19729] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19386'.
[ 1466.071247][T19760] loop1: detected capacity change from 0 to 4096
[ 1466.097523][T19764] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1466.194328][T19770] sctp: [Deprecated]: syz.0.19404 (pid 19770) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1466.194328][T19770] Use struct sctp_sack_info instead
[ 1466.341948][T19778] netlink: 12 bytes leftover after parsing attributes in process `syz.7.19409'.
[ 1468.700675][T19845] loop1: detected capacity change from 0 to 512
[ 1468.705671][T19845] EXT4-fs: Ignoring removed orlov option
[ 1468.709882][T19845] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1468.734554][T19845] EXT4-fs (loop1): 1 orphan inode deleted
[ 1468.736638][T19845] EXT4-fs (loop1): 1 truncate cleaned up
[ 1468.740512][T19845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1468.773685][T17261] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1469.039159][T19867] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1469.611178][T19904] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.19464'.
[ 1469.831492][T19918] loop1: detected capacity change from 0 to 512
[ 1469.866368][T19918] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1469.901800][T19918] EXT4-fs (loop1): 1 orphan inode deleted
[ 1469.903762][T19918] EXT4-fs (loop1): 1 truncate cleaned up
[ 1469.907011][T19918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1469.952620][T19918] EXT4-fs (loop1): shut down requested (1)
[ 1469.967719][T19918] overlayfs: failed to get redirect (-5)
[ 1470.309266][T17539] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1470.936390][ T5198] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1470.951666][ T5198] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1470.961054][ T5198] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1470.970573][ T5198] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1470.974779][ T5198] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1471.133979][T19946] wg0 speed is unknown, defaulting to 1000
[ 1471.255814][T19946] chnl_net:caif_netlink_parms(): no params data found
[ 1471.341517][T19946] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1471.343959][T19946] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1471.347084][T19946] bridge_slave_0: entered allmulticast mode
[ 1471.350545][T19946] bridge_slave_0: entered promiscuous mode
[ 1471.354865][T19946] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1471.357359][T19946] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1471.359664][T19946] bridge_slave_1: entered allmulticast mode
[ 1471.362697][T19946] bridge_slave_1: entered promiscuous mode
[ 1471.389635][T19946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1471.394442][T19946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1471.414155][T19946] team0: Port device team_slave_0 added
[ 1471.419988][T19946] team0: Port device team_slave_1 added
[ 1471.447107][T19946] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1471.451785][T19946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1471.462019][T19946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1471.468388][T19946] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1471.471145][T19946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1471.480422][T19946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1471.606822][T19946] hsr_slave_0: entered promiscuous mode
[ 1471.609987][T19946] hsr_slave_1: entered promiscuous mode
[ 1471.612592][T19946] debugfs: 'hsr0' already exists in 'hsr'
[ 1471.614722][T19946] Cannot create hsr debugfs directory
[ 1471.715112][T19973] overlayfs: failed to clone upperpath
[ 1472.611049][T19946] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1472.621646][T19946] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1472.639096][T19946] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1472.658822][T19946] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1472.786914][T19946] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1472.809422][T19946] 8021q: adding VLAN 0 to HW filter on device team0
[ 1472.822803][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1472.825620][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1472.840337][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1472.842547][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1473.033413][T19946] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1473.224019][ T5198] Bluetooth: hci0: command tx timeout
[ 1473.270610][T19946] veth0_vlan: entered promiscuous mode
[ 1473.282315][T19946] veth1_vlan: entered promiscuous mode
[ 1473.303167][T19946] veth0_macvtap: entered promiscuous mode
[ 1473.307239][T19946] veth1_macvtap: entered promiscuous mode
[ 1473.317357][T19946] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1473.334323][T19946] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1473.340822][ T5682] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1473.343674][ T5682] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1473.346725][ T5682] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1473.350033][ T5682] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1473.400925][T20093] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1473.518565][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1473.522866][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1473.552590][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1473.555186][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1473.716913][T20112] netlink: 'syz.0.19531': attribute type 11 has an invalid length.
[ 1473.719928][T20112] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.19531'.
[ 1473.913430][T20127] tmpfs: Bad value for 'mpol'
[ 1474.725517][T20156] openvswitch: netlink: ct_state flags 010000e0 unsupported
[ 1475.066597][T20178] netlink: 224 bytes leftover after parsing attributes in process `syz.0.19550'.
[ 1475.306264][T18699] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 1475.445696][ T5198] Bluetooth: hci0: command tx timeout
[ 1475.466532][T18699] usb 6-1: Using ep0 maxpacket: 32
[ 1475.469989][T18699] usb 6-1: config 0 has an invalid interface number: 86 but max is 0
[ 1475.472361][T18699] usb 6-1: config 0 has no interface number 0
[ 1475.474129][T18699] usb 6-1: config 0 interface 86 altsetting 2 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1475.488437][T18699] usb 6-1: config 0 interface 86 has no altsetting 0
[ 1475.492337][T18699] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=33.7a
[ 1475.495267][T18699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1475.497608][T18699] usb 6-1: Product: syz
[ 1475.500167][T18699] usb 6-1: Manufacturer: syz
[ 1475.501625][T18699] usb 6-1: SerialNumber: syz
[ 1475.508099][T18699] usb 6-1: config 0 descriptor??
[ 1475.741472][ T5002] usb 6-1: USB disconnect, device number 34
[ 1476.238996][T20218] xfrm0: entered promiscuous mode
[ 1476.446037][T20231] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19574'.
[ 1476.448931][T20231] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19574'.
[ 1477.037529][   T24] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[ 1477.222154][   T24] usb 6-1: Using ep0 maxpacket: 32
[ 1477.227984][   T24] usb 6-1: config 4 has an invalid interface number: 201 but max is 0
[ 1477.233601][   T24] usb 6-1: config 4 has no interface number 0
[ 1477.235551][   T24] usb 6-1: config 4 interface 201 has no altsetting 0
[ 1477.248388][   T24] usb 6-1: New USB device found, idVendor=47ed, idProduct=31ab, bcdDevice=a6.55
[ 1477.252136][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1477.255141][   T24] usb 6-1: Product: syz
[ 1477.256787][   T24] usb 6-1: Manufacturer: syz
[ 1477.258598][   T24] usb 6-1: SerialNumber: syz
[ 1477.489933][   T24] usb 6-1: USB disconnect, device number 35
[ 1477.678634][ T5198] Bluetooth: hci0: command tx timeout
[ 1479.511494][T20330] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method
[ 1479.890764][ T5198] Bluetooth: hci0: command tx timeout
[ 1480.286027][   T24] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[ 1480.405888][T20358] netlink: 'syz.7.19619': attribute type 1 has an invalid length.
[ 1480.441404][T20358] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address
[ 1480.445862][T20358] bond10: (slave vxcan1): Error -95 calling set_mac_address
[ 1480.467682][   T24] usb 6-1: Using ep0 maxpacket: 32
[ 1480.472202][   T24] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1480.487633][   T24] usb 6-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1480.492875][   T24] usb 6-1: config 1 interface 0 has no altsetting 0
[ 1480.499153][   T24] usb 6-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40
[ 1480.503539][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1480.510392][T20360] bond10: (slave gretap3): making interface the new active one
[ 1480.513408][T20360] bond10: (slave gretap3): Enslaving as an active interface with an up link
[ 1480.514339][   T24] usb 6-1: Product: syz
[ 1480.517864][   T24] usb 6-1: Manufacturer: syz
[ 1480.522853][   T24] usb 6-1: SerialNumber: syz
[ 1480.755954][   T24] usbhid 6-1:1.0: can't add hid device: -71
[ 1480.761710][   T24] usbhid 6-1:1.0: probe with driver usbhid failed with error -71
[ 1480.772095][   T24] usb 6-1: USB disconnect, device number 36
[ 1481.179630][T20388] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1481.804368][T20403] 9pnet: p9_errstr2errno: server reported unknown error 
[ 1481.841253][T20408] netlink: 96 bytes leftover after parsing attributes in process `syz.5.19639'.
[ 1481.851967][T20408] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19639'.
[ 1481.855391][T20408] netlink: 40 bytes leftover after parsing attributes in process `syz.5.19639'.
[ 1482.266118][T20432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19650'.
[ 1483.169669][T20453] loop5: detected capacity change from 0 to 4096
[ 1483.174666][T20453] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1483.179678][T20453] NILFS (loop5): mounting unchecked fs
[ 1483.202769][T14872] udevd[14872]: incorrect nilfs2 checksum on /dev/loop5
[ 1483.214572][T20453] NILFS (loop5): recovery complete
[ 1483.226029][T20458] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1483.602304][T20473] netlink: 88 bytes leftover after parsing attributes in process `syz.5.19669'.
[ 1485.368032][T20525] overlayfs: failed to clone upperpath
[ 1485.755047][T20530] loop5: detected capacity change from 0 to 32768
[ 1485.763611][T20530] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.19694 (20530)
[ 1485.794131][T20530] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[ 1485.798348][T20530] BTRFS info (device loop5): using blake2b checksum algorithm
[ 1485.839411][T20530] BTRFS info (device loop5): enabling ssd optimizations
[ 1485.842114][T20530] BTRFS info (device loop5): turning on async discard
[ 1485.845165][T20530] BTRFS info (device loop5): enabling free space tree
[ 1485.898403][T19946] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[ 1487.392800][T20580] loop5: detected capacity change from 0 to 32768
[ 1487.413998][T20580] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.19708 (20580)
[ 1487.427678][T20580] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1487.431699][T20580] BTRFS info (device loop5): using sha256 checksum algorithm
[ 1487.529596][T20580] BTRFS info (device loop5): enabling ssd optimizations
[ 1487.532527][T20580] BTRFS info (device loop5): turning on async discard
[ 1487.535115][T20580] BTRFS info (device loop5): enabling free space tree
[ 1487.624873][T19946] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1487.808225][T20605] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19713'.
[ 1487.832868][T20608] tmpfs: Bad value for 'mpol'
[ 1488.270523][T20619] loop5: detected capacity change from 0 to 32768
[ 1488.430840][T20619] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1488.522804][T20619] XFS (loop5): Ending clean mount
[ 1488.554288][T20619] XFS (loop5): Quotacheck needed: Please wait.
[ 1488.582582][T20636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19724'.
[ 1488.629388][T20619] XFS (loop5): Quotacheck: Done.
[ 1488.658292][T20636] syz_tun (unregistering): left promiscuous mode
[ 1488.846538][T19946] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1489.600648][T20648] loop5: detected capacity change from 0 to 40427
[ 1489.609645][T20648] F2FS-fs (loop5): invalid crc value
[ 1489.668065][T20648] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[ 1489.672274][T20648] F2FS-fs (loop5): Start checkpoint disabled!
[ 1489.675188][T20648] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[ 1489.678194][T20648] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[ 1490.095321][T20662] loop5: detected capacity change from 0 to 32768
[ 1490.100908][T20672] netlink: 24 bytes leftover after parsing attributes in process `syz.7.19740'.
[ 1490.104273][T20673] netlink: 104 bytes leftover after parsing attributes in process `syz.0.19739'.
[ 1490.126246][T20662] ERROR: (device loop5): dtSearch: stack overrun!
[ 1490.126246][T20662] 
[ 1490.136823][T20662] ERROR: (device loop5): remounting filesystem as read-only
[ 1490.143150][T20662] btstack dump:
[ 1490.144506][T20662] bn = 0, index = 4
[ 1490.147721][T20662] bn = 0, index = 4
[ 1490.150071][T20662] bn = 0, index = 4
[ 1490.151365][T20662] bn = 0, index = 4
[ 1490.152638][T20662] bn = 0, index = 4
[ 1490.152676][T20662] bn = 0, index = 4
[ 1490.152681][T20662] bn = 0, index = 4
[ 1490.152686][T20662] bn = 0, index = 0
[ 1490.152715][T20662] jfs_lookup: dtSearch returned -5
[ 1490.168766][T20662] ERROR: (device loop5): dtSearch: stack overrun!
[ 1490.168766][T20662] 
[ 1490.178748][T20677] netlink: 766 bytes leftover after parsing attributes in process `syz.7.19742'.
[ 1490.181366][T20662] btstack dump:
[ 1490.181412][T20662] bn = 0, index = 4
[ 1490.181424][T20662] bn = 0, index = 4
[ 1490.181431][T20662] bn = 0, index = 4
[ 1490.181440][T20662] bn = 0, index = 4
[ 1490.181448][T20662] bn = 0, index = 4
[ 1490.181455][T20662] bn = 0, index = 4
[ 1490.181464][T20662] bn = 0, index = 4
[ 1490.181471][T20662] bn = 0, index = 0
[ 1490.181594][T20662] jfs_lookup: dtSearch returned -5
[ 1490.511066][T20685] wg0 speed is unknown, defaulting to 1000
[ 1492.520721][T20747] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1492.834600][T20751] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19776'.
[ 1492.838568][T20751] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19776'.
[ 1492.854654][   T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1492.861176][   T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1492.870794][   T12] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1492.880186][   T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1493.209894][T20763] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[ 1493.213323][T20763] overlayfs: conflicting options: userxattr,metacopy=on
[ 1493.355233][  T597] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[ 1493.382201][T20775] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1493.516789][  T597] usb 6-1: Using ep0 maxpacket: 32
[ 1493.521009][  T597] usb 6-1: config 0 has an invalid interface number: 188 but max is 0
[ 1493.523489][  T597] usb 6-1: config 0 has no interface number 0
[ 1493.525441][  T597] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 1493.533846][  T597] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[ 1493.537091][  T597] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1493.539569][  T597] usb 6-1: Product: syz
[ 1493.540940][  T597] usb 6-1: Manufacturer: syz
[ 1493.542382][  T597] usb 6-1: SerialNumber: syz
[ 1493.545513][  T597] usb 6-1: config 0 descriptor??
[ 1493.548315][T20761] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1493.773005][T20761] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1494.504824][T20803] wg0 speed is unknown, defaulting to 1000
[ 1495.113707][T20817] pim6reg: entered allmulticast mode
[ 1495.303957][  T597] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1495.307905][  T597] asix 6-1:0.188: probe with driver asix failed with error -71
[ 1495.325708][  T597] usb 6-1: USB disconnect, device number 37
[ 1495.346516][T20825] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19808'.
[ 1495.648498][T20837] netlink: 182 bytes leftover after parsing attributes in process `syz.7.19814'.
[ 1495.877365][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1496.372811][T20869] netlink: 26 bytes leftover after parsing attributes in process `syz.7.19828'.
[ 1496.456362][T20876] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[ 1496.458307][T20876] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1496.460812][T20876] vhci_hcd vhci_hcd.0: Device attached
[ 1496.479733][T20876] vhci_hcd vhci_hcd.0: port 0 already used
[ 1496.482046][T20877] vhci_hcd: connection closed
[ 1496.482277][ T5682] vhci_hcd vhci_hcd.5: stop threads
[ 1496.485252][ T5682] vhci_hcd vhci_hcd.5: release socket
[ 1496.488035][ T5682] vhci_hcd vhci_hcd.5: disconnect device
[ 1497.457297][T20917] loop5: detected capacity change from 0 to 128
[ 1497.463063][T20917] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[ 1497.473205][T20917] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1498.634323][T20953] netlink: 'syz.5.19860': attribute type 9 has an invalid length.
[ 1498.636772][T20953] netlink: 32 bytes leftover after parsing attributes in process `syz.5.19860'.
[ 1498.979263][T20973] overlayfs: orphan index entry (index/00fb2100016323bfffe0cc447aa5106b847112216483a106df0502000000000000, ftype=2000, nlink=1)
[ 1499.030322][T20976] loop5: detected capacity change from 0 to 512
[ 1499.041847][T20976] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1499.062915][T20976] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.19871: invalid indirect mapped block 4294967295 (level 0)
[ 1499.068287][T20976] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[ 1499.068941][T20976] EXT4-fs (loop5): Remounting filesystem read-only
[ 1499.072478][    C0] EXT4-fs (loop5): error count since last fsck: 1
[ 1499.072496][    C0] EXT4-fs (loop5): initial error at time 1422: ext4_free_branches:1023: inode 16
[ 1499.072521][    C0] EXT4-fs (loop5): last error at time 1422: ext4_free_branches:1023: inode 16
[ 1499.085714][T20976] EXT4-fs (loop5): 1 orphan inode deleted
[ 1499.087961][T20976] EXT4-fs (loop5): 1 truncate cleaned up
[ 1499.091805][T20976] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1499.128602][T19946] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1499.807912][T21017] loop5: detected capacity change from 0 to 40427
[ 1499.816404][T21017] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[ 1499.824363][T21017] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 1499.827447][T21033] netlink: 'syz.0.19898': attribute type 5 has an invalid length.
[ 1499.839067][T21017] F2FS-fs (loop5): invalid crc value
[ 1499.906392][T21040] netlink: 108 bytes leftover after parsing attributes in process `syz.0.19900'.
[ 1499.909078][T21040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19900'.
[ 1499.926434][T21017] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1499.933251][T21017] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[ 1499.935956][T21017] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[ 1500.157891][T21053] loop5: detected capacity change from 0 to 512
[ 1500.204581][T21053] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1500.211936][T21053] fs-verity (loop5, inode 15): Unknown hash algorithm number: 3
[ 1500.231099][T19946] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1500.769582][T21084] loop5: detected capacity change from 0 to 16
[ 1500.802660][T21084] erofs (device loop5): mounted with root inode @ nid 36.
[ 1501.180026][T21088] vlan6: entered promiscuous mode
[ 1501.182651][T21088] vlan6: entered allmulticast mode
[ 1501.184610][T21088] hsr_slave_1: entered allmulticast mode
[ 1501.247415][T21088] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19920'.
[ 1501.694462][   T34] audit: type=1326 audit(1424.706:9424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21101 comm="syz.0.19926" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8ad9c799 code=0x7ffc0000
[ 1501.725744][T21100] loop5: detected capacity change from 0 to 2048
[ 1501.734706][   T34] audit: type=1326 audit(1424.706:9425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21101 comm="syz.0.19926" exe="/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f8c8ad9c799 code=0x7ffc0000
[ 1501.748337][T21100] EXT4-fs warning (device loop5): ext4_init_metadata_csum:4649: metadata_csum and uninit_bg are redundant flags; please run fsck.
[ 1501.761649][T21100] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[ 1501.772531][   T34] audit: type=1326 audit(1424.706:9426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21101 comm="syz.0.19926" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8ad9c799 code=0x7ffc0000
[ 1501.786658][   T34] audit: type=1326 audit(1424.706:9427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21101 comm="syz.0.19926" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8ad9c799 code=0x7ffc0000
[ 1501.795854][   T34] audit: type=1326 audit(1424.706:9428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21101 comm="syz.0.19926" exe="/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8c8ad9c799 code=0x7ffc0000
[ 1501.803682][   T34] audit: type=1326 audit(1424.706:9429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21101 comm="syz.0.19926" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8ad9c799 code=0x7ffc0000
[ 1501.810706][   T34] audit: type=1326 audit(1424.706:9430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21101 comm="syz.0.19926" exe="/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8c8ad9c799 code=0x7ffc0000
[ 1501.816960][   T34] audit: type=1326 audit(1424.706:9431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21101 comm="syz.0.19926" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8ad9c799 code=0x7ffc0000
[ 1501.848811][   T34] audit: type=1326 audit(1424.706:9432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21101 comm="syz.0.19926" exe="/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f8c8ad9c799 code=0x7ffc0000
[ 1501.877593][   T34] audit: type=1326 audit(1424.706:9433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21101 comm="syz.0.19926" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8c8ad96517 code=0x7ffc0000
[ 1502.531317][T21112] netlink: 'syz.7.19929': attribute type 10 has an invalid length.
[ 1502.547640][T21112] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1502.611608][T21112] netlink: 'syz.7.19929': attribute type 10 has an invalid length.
[ 1502.619391][T21112] netlink: 40 bytes leftover after parsing attributes in process `syz.7.19929'.
[ 1502.623587][T21112] batadv0: entered promiscuous mode
[ 1502.625255][T21112] batadv0: entered allmulticast mode
[ 1502.627406][T21112] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[ 1502.863262][T21130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19939'.
[ 1503.588057][T21158] openvswitch: netlink: Message has 4 unknown bytes.
[ 1503.634495][T21162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19953'.
[ 1503.910927][T21181] overlayfs: failed to clone upperpath
[ 1504.154189][T21195] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[ 1504.156391][T21195] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1504.162952][T21195] vhci_hcd vhci_hcd.0: Device attached
[ 1504.166800][T21196] vhci_hcd: connection closed
[ 1504.167055][ T6124] vhci_hcd vhci_hcd.5: stop threads
[ 1504.176083][ T6124] vhci_hcd vhci_hcd.5: release socket
[ 1504.181170][ T6124] vhci_hcd vhci_hcd.5: disconnect device
[ 1505.235048][T21240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19986'.
[ 1505.238893][T21240] tc_dump_action: action bad kind
[ 1505.455848][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[ 1505.458531][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[ 1506.926727][T21272] loop5: detected capacity change from 0 to 40427
[ 1506.936148][T21272] F2FS-fs (loop5): build fault injection rate: 14
[ 1506.939362][T21272] F2FS-fs (loop5): build fault injection type: 0xe4
[ 1506.942963][T21272] F2FS-fs (loop5): invalid crc value
[ 1506.953779][T21272] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1810
[ 1506.985510][T21272] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1506.989688][T21272] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[ 1507.006216][T21272] F2FS-fs (loop5): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x89d/0x2060
[ 1507.015310][T21272] F2FS-fs (loop5): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x11a/0xae0
[ 1507.034107][T19946] syz-executor: attempt to access beyond end of device
[ 1507.034107][T19946] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1507.043922][T19946] CPU: 1 UID: 0 PID: 19946 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1507.043941][T19946] Tainted: [L]=SOFTLOCKUP
[ 1507.043944][T19946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1507.043951][T19946] Call Trace:
[ 1507.043955][T19946]  <TASK>
[ 1507.043959][T19946]  dump_stack_lvl+0xe8/0x150
[ 1507.043978][T19946]  f2fs_handle_critical_error+0x37c/0x540
[ 1507.043999][T19946]  f2fs_write_end_io+0xcdb/0xff0
[ 1507.044027][T19946]  __submit_merged_bio+0x256/0x700
[ 1507.044044][T19946]  __submit_merged_write_cond+0x3c9/0x4e0
[ 1507.044065][T19946]  ? __pfx___submit_merged_write_cond+0x10/0x10
[ 1507.044094][T19946]  f2fs_write_data_pages+0x2975/0x35e0
[ 1507.044123][T19946]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1507.044157][T19946]  ? kernel_text_address+0xa5/0xe0
[ 1507.044170][T19946]  ? __lock_acquire+0x6b5/0x2cf0
[ 1507.044197][T19946]  ? __lock_acquire+0x6b5/0x2cf0
[ 1507.044217][T19946]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1507.044231][T19946]  ? do_raw_spin_unlock+0x4d/0x210
[ 1507.044239][T19946]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1507.044251][T19946]  do_writepages+0x32e/0x550
[ 1507.044269][T19946]  ? do_raw_spin_unlock+0x4d/0x210
[ 1507.044279][T19946]  filemap_fdatawrite+0x1e9/0x2f0
[ 1507.044295][T19946]  ? __pfx_filemap_fdatawrite+0x10/0x10
[ 1507.044347][T19946]  ? do_raw_spin_unlock+0x4d/0x210
[ 1507.044360][T19946]  f2fs_sync_dirty_inodes+0x30e/0x860
[ 1507.044381][T19946]  f2fs_write_checkpoint+0x9df/0x26a0
[ 1507.044409][T19946]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[ 1507.044446][T19946]  kill_f2fs_super+0x314/0x720
[ 1507.044461][T19946]  ? __pfx_kill_f2fs_super+0x10/0x10
[ 1507.044479][T19946]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1507.044495][T19946]  deactivate_locked_super+0xbc/0x130
[ 1507.044511][T19946]  cleanup_mnt+0x437/0x4d0
[ 1507.044521][T19946]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1507.044531][T19946]  task_work_run+0x1d9/0x270
[ 1507.044541][T19946]  ? __pfx_task_work_run+0x10/0x10
[ 1507.044554][T19946]  exit_to_user_mode_loop+0xed/0x480
[ 1507.044565][T19946]  ? rcu_is_watching+0x15/0xb0
[ 1507.044578][T19946]  do_syscall_64+0x32d/0xf80
[ 1507.044588][T19946]  ? trace_irq_disable+0x3b/0x150
[ 1507.044600][T19946]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1507.044611][T19946]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1507.044619][T19946] RIP: 0033:0x7fa04d99d9d7
[ 1507.044660][T19946] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 1507.044669][T19946] RSP: 002b:00007fff62ae1308 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1507.044680][T19946] RAX: 0000000000000000 RBX: 00007fa04da32050 RCX: 00007fa04d99d9d7
[ 1507.044685][T19946] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff62ae13c0
[ 1507.044690][T19946] RBP: 00007fff62ae13c0 R08: 00007fff62ae23c0 R09: 00000000ffffffff
[ 1507.044696][T19946] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff62ae2450
[ 1507.044701][T19946] R13: 00007fa04da32050 R14: 000000000015d0bc R15: 00007fff62ae2490
[ 1507.044716][T19946]  </TASK>
[ 1507.045372][T19946] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[ 1507.328120][T21279] loop5: detected capacity change from 0 to 256
[ 1507.351084][T21279] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d)
[ 1508.211089][T21287] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20006'.
[ 1508.346956][ T5853] kernel read not supported for file /cpu/0/msr (pid: 5853 comm: kworker/0:3)
[ 1508.721656][T21327] netlink: 40 bytes leftover after parsing attributes in process `syz.7.20024'.
[ 1509.749083][T21364] loop5: detected capacity change from 0 to 512
[ 1509.933751][T21379] netlink: 200 bytes leftover after parsing attributes in process `syz.7.20046'.
[ 1509.970530][T21383] netlink: 'syz.7.20048': attribute type 3 has an invalid length.
[ 1510.753655][T21403] netlink: 132 bytes leftover after parsing attributes in process `syz.0.20058'.
[ 1511.200296][T21434] netlink: 'syz.5.20072': attribute type 2 has an invalid length.
[ 1511.216197][T21434] : entered promiscuous mode
[ 1511.221821][T21434] netlink: 'syz.5.20072': attribute type 2 has an invalid length.
[ 1511.228937][T21436] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[ 1511.232996][T21434] : left promiscuous mode
[ 1511.569143][T21457] netlink: 'syz.5.20082': attribute type 12 has an invalid length.
[ 1511.572273][T21457] netlink: 'syz.5.20082': attribute type 29 has an invalid length.
[ 1511.575884][T21457] netlink: 148 bytes leftover after parsing attributes in process `syz.5.20082'.
[ 1511.579249][T21457] netlink: 'syz.5.20082': attribute type 1 has an invalid length.
[ 1512.480014][T21475] netlink: 'syz.0.20090': attribute type 1 has an invalid length.
[ 1513.213139][T21488] Cannot find set identified by id 0 to match
[ 1513.574674][   T34] kauditd_printk_skb: 3670 callbacks suppressed
[ 1513.574689][   T34] audit: type=1326 audit(1435.814:13104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21507 comm="syz.7.20105" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ae459c799 code=0x0
[ 1514.887458][ T5853] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[ 1515.047676][ T5853] usb 6-1: Using ep0 maxpacket: 8
[ 1515.051539][ T5853] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 19910, setting to 64
[ 1515.054770][ T5853] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1515.059636][ T5853] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[ 1515.062316][ T5853] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1515.064835][ T5853] usb 6-1: Product: syz
[ 1515.066114][ T5853] usb 6-1: Manufacturer: syz
[ 1515.067538][ T5853] usb 6-1: SerialNumber: syz
[ 1515.074827][ T5853] usb 6-1: config 0 descriptor??
[ 1515.079717][ T5853] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found
[ 1515.301225][ T5853] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected
[ 1515.313716][ T5853] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22
[ 1515.513148][ T5002] usb 6-1: USB disconnect, device number 38
[ 1515.864569][T21602] bond11: entered allmulticast mode
[ 1515.866830][T21602] 8021q: adding VLAN 0 to HW filter on device bond11
[ 1516.135526][T21618] netlink: 4 bytes leftover after parsing attributes in process `syz.7.20153'.
[ 1516.975559][T21644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20166'.
[ 1517.423591][T21667] QAT: Invalid ioctl 21531
[ 1517.521133][T21673] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[ 1517.526628][T21673] bond1 (unregistering): Released all slaves
[ 1517.821623][T21690] netlink: 8 bytes leftover after parsing attributes in process `syz.7.20188'.
[ 1517.922448][T21692] loop5: detected capacity change from 0 to 8192
[ 1518.515391][T21719] futex_wake_op: syz.5.20201 tries to shift op by 32; fix this program
[ 1518.623831][T21726] netlink: 14 bytes leftover after parsing attributes in process `syz.5.20205'.
[ 1518.813537][T21732] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20208'.
[ 1518.816475][T21732] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1518.840645][T21732] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1519.217659][T21742] overlayfs: failed to clone upperpath
[ 1519.481143][T21747] loop5: detected capacity change from 0 to 256
[ 1519.484122][T21747] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1519.506374][T21747] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1519.553441][T18163] IPVS: starting estimator thread 0...
[ 1519.654996][T21752] IPVS: using max 45 ests per chain, 108000 per kthread
[ 1519.700790][T21762] CIFS mount error: No usable UNC path provided in device string!
[ 1519.700790][T21762] 
[ 1519.703861][T21762] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1521.038438][T21818] netdevsim netdevsim5: Firmware load for './file0/../file0/file0' refused, path contains '..' component
[ 1521.472707][T21834] loop5: detected capacity change from 0 to 1024
[ 1521.505113][T21834] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1521.517410][T21834] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: comm syz.5.20254: lblock 0 mapped to illegal pblock 0 (length 1)
[ 1521.522029][T21834] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[ 1521.528045][T21834] EXT4-fs (loop5): This should not happen!! Data will be lost
[ 1521.528045][T21834] 
[ 1521.540409][T21834] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.20254: bg 0: block 112: padding at end of block bitmap is not set
[ 1521.558546][T21834] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117
[ 1521.566153][T21834] EXT4-fs (loop5): This should not happen!! Data will be lost
[ 1521.566153][T21834] 
[ 1521.584646][T19946] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1521.940182][T18163] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[ 1522.102120][T18163] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1522.105748][T18163] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1522.110813][T18163] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1522.118144][T18163] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1522.123025][T21859] netlink: 'syz.7.20265': attribute type 4 has an invalid length.
[ 1522.127064][T18163] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1522.150230][T18163] usb 6-1: config 0 descriptor??
[ 1522.165346][T21859] netlink: 'syz.7.20265': attribute type 4 has an invalid length.
[ 1522.432432][T21865] netlink: 8 bytes leftover after parsing attributes in process `syz.7.20267'.
[ 1522.621583][T18163] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[ 1522.810757][   T34] audit: type=1326 audit(1444.461:13105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21881 comm="syz.7.20275" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae459c799 code=0x7ffc0000
[ 1522.818940][   T34] audit: type=1326 audit(1444.471:13106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21881 comm="syz.7.20275" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae459c799 code=0x7ffc0000
[ 1522.829346][   T34] audit: type=1326 audit(1444.480:13107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21881 comm="syz.7.20275" exe="/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f4ae459c799 code=0x7ffc0000
[ 1522.837159][   T34] audit: type=1326 audit(1444.480:13108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21881 comm="syz.7.20275" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae459c799 code=0x7ffc0000
[ 1522.845426][   T34] audit: type=1326 audit(1444.480:13109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21881 comm="syz.7.20275" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae459c799 code=0x7ffc0000
[ 1522.853130][   T34] audit: type=1326 audit(1444.489:13110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21881 comm="syz.7.20275" exe="/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f4ae459c799 code=0x7ffc0000
[ 1522.861427][   T34] audit: type=1326 audit(1444.489:13111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21881 comm="syz.7.20275" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae459c799 code=0x7ffc0000
[ 1522.870929][   T34] audit: type=1326 audit(1444.489:13112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21881 comm="syz.7.20275" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae459c799 code=0x7ffc0000
[ 1524.031962][    C1] plantronics 0003:047F:FFFF.000C: usb_submit_urb(ctrl) failed: -1
[ 1524.728743][T21917] Bluetooth: MGMT ver 1.23
[ 1524.918788][T18163] usb 6-1: USB disconnect, device number 39
[ 1525.627093][T21959] team0: Cannot enslave team device to itself
[ 1525.719612][T21963] netlink: 36 bytes leftover after parsing attributes in process `syz.7.20311'.
[ 1525.808569][T18163] usb 6-1: new full-speed USB device number 40 using dummy_hcd
[ 1526.080956][T18163] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1526.087677][T18163] usb 6-1: not running at top speed; connect to a high speed hub
[ 1526.094889][T18163] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10
[ 1526.099607][T18163] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1526.103390][T18163] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 64
[ 1526.110835][T18163] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 1526.114809][T18163] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6E, changing to 0xE
[ 1526.122803][T18163] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 105, changing to 4
[ 1526.127525][T18163] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 12148, setting to 1023
[ 1526.178369][T18163] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[ 1526.181469][T18163] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1526.189909][T18163] usb 6-1: Product: syz
[ 1526.191642][T18163] usb 6-1: Manufacturer: syz
[ 1526.194224][T18163] usb 6-1: SerialNumber: syz
[ 1526.199526][T18163] usb 6-1: config 0 descriptor??
[ 1526.202768][T21953] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1526.214794][T18163] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1526.406318][T21972] udevd[21972]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1526.433129][  T597] usb 6-1: USB disconnect, device number 40
[ 1527.044897][T22008] xt_hashlimit: max too large, truncated to 1048576
[ 1527.272855][ T5002] wg0 speed is unknown, defaulting to 1000
[ 1527.379982][T18163] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[ 1527.411983][T22040] netlink: 4 bytes leftover after parsing attributes in process `syz.7.20346'.
[ 1527.561083][T18163] usb 6-1: Using ep0 maxpacket: 8
[ 1527.565713][T18163] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1527.570044][T18163] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1527.574413][T18163] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1527.579467][T18163] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1527.585714][T18163] usb 6-1: config 1 interface 1 has no altsetting 0
[ 1527.595086][T18163] usb 6-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40
[ 1527.598779][T18163] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1527.602101][T18163] usb 6-1: Product: syz
[ 1527.604984][T18163] usb 6-1: Manufacturer: syz
[ 1527.607655][T18163] usb 6-1: SerialNumber: syz
[ 1527.840882][T18163] usb 6-1: 0:2 : does not exist
[ 1527.852804][T18163] usb 6-1: cannot find UAC_HEADER
[ 1527.887237][T18163] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22
[ 1527.893959][T18163] usb 6-1: USB disconnect, device number 41
[ 1527.932062][T14872] udevd[14872]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1528.824523][T22061] netlink: 4 bytes leftover after parsing attributes in process `syz.7.20355'.
[ 1528.896933][ T5002] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[ 1529.071230][ T5002] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[ 1529.075124][ T5002] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1529.078885][ T5002] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1529.248164][T22066] 9p: Bad value for 'rfdno'
[ 1529.525504][ T5002] ath6kl: Failed to read usb control message: -71
[ 1529.533189][ T5002] ath6kl: Unable to read the bmi data from the device: -71
[ 1529.535869][ T5002] ath6kl: Unable to recv target info: -71
[ 1529.539622][ T5002] ath6kl: Failed to init ath6kl core: -71
[ 1529.542363][ T5002] ath6kl_usb 6-1:4.0: probe with driver ath6kl_usb failed with error -71
[ 1529.548270][ T5002] usb 6-1: USB disconnect, device number 42
[ 1530.615301][T22123] netlink: 5 bytes leftover after parsing attributes in process `syz.0.20383'.
[ 1532.912167][T22190] delete_channel: no stack
[ 1533.292693][T22216] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1534.406399][T22242] netlink: 212320 bytes leftover after parsing attributes in process `syz.7.20437'.
[ 1534.410147][T22242] openvswitch: netlink: Port 7041905 exceeds max allowable 65535
[ 1535.345040][T22253] netlink: 72 bytes leftover after parsing attributes in process `syz.0.20441'.
[ 1535.348498][T22253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20441'.
[ 1535.352686][T22253] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20441'.
[ 1535.593111][T22271] netlink: 'syz.7.20449': attribute type 1 has an invalid length.
[ 1535.596737][T22271] netlink: 5220 bytes leftover after parsing attributes in process `syz.7.20449'.
[ 1535.600587][T22271] nbd: illegal input index 1638444
[ 1535.684615][T22276] wg0 speed is unknown, defaulting to 1000
[ 1536.448567][T22286] input input43: cannot allocate more than FF_MAX_EFFECTS effects
[ 1536.614203][T22292] kAFS: unable to lookup cell 'էKyy
[ 1536.614203][T22292] 
[ 1536.614203][T22292] =6%*;eܲ5;Z*d{iElZSjUF/k!btF\_vfVnDPPB1%A)X\YT"8ώdJ_.5d#ۜhGp6"5ͺ*,ImI-(WA?WZ)n[qGjnڇ%(J-%ؘccʵ{|6ZA5k@a+oST;]5!G3{K,'
[ 1537.737152][T22353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20487'.
[ 1539.285619][T22397] siw: device registration error -23
[ 1540.102735][T22406] loop5: detected capacity change from 0 to 1024
[ 1540.108399][T22406] EXT4-fs: Ignoring removed orlov option
[ 1540.132650][T22406] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1540.168002][T19946] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1540.388719][T22427] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1540.538329][T22438] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20523'.
[ 1540.670511][T22445] loop5: detected capacity change from 0 to 1024
[ 1540.678868][T22445] EXT4-fs: Ignoring removed bh option
[ 1540.741902][T22445] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1540.873795][T22445] EXT4-fs error (device loop5): ext4_get_first_dir_block:3538: inode #11: comm syz.5.20526: directory missing '.'
[ 1540.894332][T22445] EXT4-fs (loop5): Remounting filesystem read-only
[ 1540.911872][T19946] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1540.989603][T22461] mac80211_hwsim hwsim29 wlan0: entered promiscuous mode
[ 1541.016485][T22461] macsec1: entered promiscuous mode
[ 1541.018675][T22461] macsec1: entered allmulticast mode
[ 1541.020646][T22461] mac80211_hwsim hwsim29 wlan0: entered allmulticast mode
[ 1541.785553][ T5853] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[ 1541.955237][ T5853] usb 6-1: Using ep0 maxpacket: 16
[ 1541.962186][ T5853] usb 6-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config
[ 1541.969049][ T5853] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[ 1541.973304][ T5853] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1541.977983][ T5853] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1541.985229][ T5853] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1541.991623][ T5853] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1541.994870][ T5853] usb 6-1: Product: syz
[ 1541.996693][ T5853] usb 6-1: Manufacturer: syz
[ 1541.999252][ T5853] usb 6-1: SerialNumber: syz
[ 1542.007239][ T5853] usb 6-1: config 0 descriptor??
[ 1542.018677][T22485] netlink: 40 bytes leftover after parsing attributes in process `syz.7.20544'.
[ 1542.034318][T22485] netlink: 40 bytes leftover after parsing attributes in process `syz.7.20544'.
[ 1542.237361][ T5853] appledisplay: Apple Cinema Display connected
[ 1542.313731][T22497] overlayfs: failed to clone upperpath
[ 1542.453177][ T5002] usb 6-1: USB disconnect, device number 43
[ 1542.453190][    C0] usb 6-1: appledisplay_complete - usb_submit_urb failed with result -19
[ 1542.780626][ T5002] appledisplay: Apple Cinema Display disconnected
[ 1543.059771][T22517] 9pnet_fd: Insufficient options for proto=fd
[ 1543.217097][T22523] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20561'.
[ 1543.447585][T22533] loop5: detected capacity change from 0 to 4096
[ 1543.462294][T22533] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[ 1543.471026][T22533] ntfs3(loop5): Failed to load $Extend (-22).
[ 1543.473285][T22533] ntfs3(loop5): Failed to initialize $Extend.
[ 1543.663270][T22541] loop5: detected capacity change from 0 to 2048
[ 1543.676074][T22541] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1543.685568][T14872] udevd[14872]: incorrect nilfs2 checksum on /dev/loop5
[ 1543.697253][T22542] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1543.882098][T22558] netlink: 'syz.7.20577': attribute type 25 has an invalid length.
[ 1543.885002][T22558] netlink: 4 bytes leftover after parsing attributes in process `syz.7.20577'.
[ 1543.896378][ T5682] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1543.901114][ T5682] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1543.904334][ T5682] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1543.907510][ T5682] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1543.912232][T22558] netlink: 'syz.7.20577': attribute type 25 has an invalid length.
[ 1543.914531][T22558] netlink: 4 bytes leftover after parsing attributes in process `syz.7.20577'.
[ 1546.311264][T22603] loop5: detected capacity change from 0 to 2048
[ 1546.331428][T22603] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1546.357233][T22603] 
[ 1546.358085][T22603] ======================================================
[ 1546.360744][T22603] WARNING: possible circular locking dependency detected
[ 1546.363300][T22603] syzkaller #0 Tainted: G             L     
[ 1546.365400][T22603] ------------------------------------------------------
[ 1546.367531][T22603] syz.5.20595/22603 is trying to acquire lock:
[ 1546.369321][T22603] ffff8881b596ea50 (&ei->xattr_sem){++++}-{4:4}, at: ext4_destroy_inline_data+0x28/0xe0
[ 1546.372135][T22603] 
[ 1546.372135][T22603] but task is already holding lock:
[ 1546.374259][T22603] ffff888172bc2b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0
[ 1546.377143][T22603] 
[ 1546.377143][T22603] which lock already depends on the new lock.
[ 1546.377143][T22603] 
[ 1546.380349][T22603] 
[ 1546.380349][T22603] the existing dependency chain (in reverse order) is:
[ 1546.383671][T22603] 
[ 1546.383671][T22603] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[ 1546.386189][T22603]        percpu_down_read_internal+0x48/0x1c0
[ 1546.388066][T22603]        ext4_writepages+0x205/0x3b0
[ 1546.389736][T22603]        do_writepages+0x32e/0x550
[ 1546.391509][T22603]        __writeback_single_inode+0x133/0x11a0
[ 1546.393421][T22603]        writeback_single_inode+0x4ac/0xdc0
[ 1546.395202][T22603]        write_inode_now+0x1c2/0x290
[ 1546.396803][T22603]        iput+0x8c1/0xe80
[ 1546.398065][T22603]        ext4_xattr_block_set+0x1fd4/0x2ad0
[ 1546.399746][T22603]        ext4_expand_extra_isize_ea+0x12cf/0x1ea0
[ 1546.401709][T22603]        __ext4_expand_extra_isize+0x30d/0x400
[ 1546.403532][T22603]        __ext4_mark_inode_dirty+0x45c/0x730
[ 1546.405277][T22603]        ext4_evict_inode+0x7a1/0xeb0
[ 1546.406929][T22603]        evict+0x61e/0xb10
[ 1546.408240][T22603]        ext4_orphan_cleanup+0xc38/0x1470
[ 1546.409955][T22603]        ext4_fill_super+0x59ff/0x6320
[ 1546.411542][T22603]        get_tree_bdev_flags+0x431/0x4f0
[ 1546.413194][T22603]        vfs_get_tree+0x92/0x2a0
[ 1546.414620][T22603]        do_new_mount+0x341/0xd30
[ 1546.416102][T22603]        __se_sys_mount+0x31d/0x420
[ 1546.417787][T22603]        do_syscall_64+0x14d/0xf80
[ 1546.419465][T22603]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1546.421699][T22603] 
[ 1546.421699][T22603] -> #0 (&ei->xattr_sem){++++}-{4:4}:
[ 1546.424399][T22603]        __lock_acquire+0x15a5/0x2cf0
[ 1546.426169][T22603]        lock_acquire+0xf0/0x2e0
[ 1546.427625][T22603]        down_write+0x96/0x200
[ 1546.429057][T22603]        ext4_destroy_inline_data+0x28/0xe0
[ 1546.431026][T22603]        ext4_do_writepages+0x51e/0x46e0
[ 1546.433162][T22603]        ext4_writepages+0x241/0x3b0
[ 1546.434905][T22603]        do_writepages+0x32e/0x550
[ 1546.436715][T22603]        file_write_and_wait_range+0x36e/0x440
[ 1546.438886][T22603]        generic_buffers_fsync_noflush+0x70/0x1d0
[ 1546.440733][T22603]        ext4_sync_file+0x321/0xb70
[ 1546.442335][T22603]        ext4_buffered_write_iter+0x2ca/0x3a0
[ 1546.444583][T22603]        ext4_file_write_iter+0x298/0x1bf0
[ 1546.446469][T22603]        do_iter_readv_writev+0x619/0x8c0
[ 1546.448119][T22603]        vfs_writev+0x33c/0x990
[ 1546.449547][T22603]        __se_sys_pwritev2+0x184/0x2a0
[ 1546.451482][T22603]        do_syscall_64+0x14d/0xf80
[ 1546.453223][T22603]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1546.455197][T22603] 
[ 1546.455197][T22603] other info that might help us debug this:
[ 1546.455197][T22603] 
[ 1546.458676][T22603]  Possible unsafe locking scenario:
[ 1546.458676][T22603] 
[ 1546.461305][T22603]        CPU0                    CPU1
[ 1546.463125][T22603]        ----                    ----
[ 1546.465065][T22603]   rlock(&sbi->s_writepages_rwsem);
[ 1546.467070][T22603]                                lock(&ei->xattr_sem);
[ 1546.469576][T22603]                                lock(&sbi->s_writepages_rwsem);
[ 1546.472436][T22603]   lock(&ei->xattr_sem);
[ 1546.473968][T22603] 
[ 1546.473968][T22603]  *** DEADLOCK ***
[ 1546.473968][T22603] 
[ 1546.476831][T22603] 2 locks held by syz.5.20595/22603:
[ 1546.478736][T22603]  #0: ffff888172bc4420 (sb_writers#4){.+.+}-{0:0}, at: vfs_writev+0x2aa/0x990
[ 1546.482100][T22603]  #1: ffff888172bc2b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0
[ 1546.485996][T22603] 
[ 1546.485996][T22603] stack backtrace:
[ 1546.488205][T22603] CPU: 1 UID: 0 PID: 22603 Comm: syz.5.20595 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1546.488225][T22603] Tainted: [L]=SOFTLOCKUP
[ 1546.488231][T22603] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1546.488239][T22603] Call Trace:
[ 1546.488248][T22603]  <TASK>
[ 1546.488258][T22603]  dump_stack_lvl+0xe8/0x150
[ 1546.488285][T22603]  print_circular_bug+0x2e1/0x300
[ 1546.488309][T22603]  check_noncircular+0x12e/0x150
[ 1546.488333][T22603]  __lock_acquire+0x15a5/0x2cf0
[ 1546.488353][T22603]  ? __lock_acquire+0x6b5/0x2cf0
[ 1546.488373][T22603]  ? __lock_acquire+0x6b5/0x2cf0
[ 1546.488391][T22603]  ? __lock_acquire+0x6b5/0x2cf0
[ 1546.488408][T22603]  lock_acquire+0xf0/0x2e0
[ 1546.488432][T22603]  ? ext4_destroy_inline_data+0x28/0xe0
[ 1546.488459][T22603]  down_write+0x96/0x200
[ 1546.488478][T22603]  ? ext4_destroy_inline_data+0x28/0xe0
[ 1546.488497][T22603]  ? __pfx_down_write+0x10/0x10
[ 1546.488518][T22603]  ext4_destroy_inline_data+0x28/0xe0
[ 1546.488540][T22603]  ext4_do_writepages+0x51e/0x46e0
[ 1546.488557][T22603]  ? kernel_text_address+0xa5/0xe0
[ 1546.488573][T22603]  ? unwind_get_return_address+0x4d/0x90
[ 1546.488594][T22603]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1546.488609][T22603]  ? arch_stack_walk+0xfb/0x150
[ 1546.488631][T22603]  ? __es_remove_extent+0x5fd/0x1da0
[ 1546.488650][T22603]  ? __es_insert_extent+0xb21/0x1790
[ 1546.488662][T22603]  ? look_up_lock_class+0x57/0x110
[ 1546.488677][T22603]  ? __pfx_ext4_do_writepages+0x10/0x10
[ 1546.488692][T22603]  ? __lock_acquire+0x6b5/0x2cf0
[ 1546.488709][T22603]  ? rcu_is_watching+0x15/0xb0
[ 1546.488728][T22603]  ? ext4_es_insert_delayed_extent+0xc15/0xf00
[ 1546.488784][T22603]  ext4_writepages+0x241/0x3b0
[ 1546.488807][T22603]  ? __pfx_ext4_writepages+0x10/0x10
[ 1546.488833][T22603]  ? do_raw_spin_unlock+0x4d/0x210
[ 1546.488848][T22603]  ? __pfx_ext4_writepages+0x10/0x10
[ 1546.488867][T22603]  do_writepages+0x32e/0x550
[ 1546.488890][T22603]  ? do_raw_spin_unlock+0x4d/0x210
[ 1546.488904][T22603]  file_write_and_wait_range+0x36e/0x440
[ 1546.488928][T22603]  ? __pfx_file_write_and_wait_range+0x10/0x10
[ 1546.488962][T22603]  ? generic_perform_write+0x80a/0x8f0
[ 1546.488983][T22603]  generic_buffers_fsync_noflush+0x70/0x1d0
[ 1546.489002][T22603]  ext4_sync_file+0x321/0xb70
[ 1546.489020][T22603]  ext4_buffered_write_iter+0x2ca/0x3a0
[ 1546.489037][T22603]  ext4_file_write_iter+0x298/0x1bf0
[ 1546.489056][T22603]  ? __futex_wait+0x1fc/0x420
[ 1546.489077][T22603]  ? __lock_acquire+0x6b5/0x2cf0
[ 1546.489095][T22603]  ? __pfx_ext4_file_write_iter+0x10/0x10
[ 1546.489109][T22603]  ? __pfx___futex_wait+0x10/0x10
[ 1546.489129][T22603]  do_iter_readv_writev+0x619/0x8c0
[ 1546.489147][T22603]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 1546.489166][T22603]  vfs_writev+0x33c/0x990
[ 1546.489188][T22603]  ? __pfx_vfs_writev+0x10/0x10
[ 1546.489210][T22603]  ? __fget_files+0x2a/0x420
[ 1546.489232][T22603]  ? __fget_files+0x3a0/0x420
[ 1546.489250][T22603]  ? __fget_files+0x2a/0x420
[ 1546.489272][T22603]  __se_sys_pwritev2+0x184/0x2a0
[ 1546.489290][T22603]  ? __pfx___se_sys_pwritev2+0x10/0x10
[ 1546.489308][T22603]  ? __x64_sys_pwritev2+0x20/0xc0
[ 1546.489325][T22603]  do_syscall_64+0x14d/0xf80
[ 1546.489341][T22603]  ? trace_irq_disable+0x3b/0x150
[ 1546.489360][T22603]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1546.489376][T22603]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1546.489390][T22603] RIP: 0033:0x7fa04d99c799
[ 1546.489406][T22603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1546.489427][T22603] RSP: 002b:00007fa04e77f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 1546.489445][T22603] RAX: ffffffffffffffda RBX: 00007fa04dc15fa0 RCX: 00007fa04d99c799
[ 1546.489456][T22603] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004
[ 1546.489466][T22603] RBP: 00007fa04da32c99 R08: 0000000000000000 R09: 0000000000000000
[ 1546.489475][T22603] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000000
[ 1546.489485][T22603] R13: 00007fa04dc16038 R14: 00007fa04dc15fa0 R15: 00007fff62ae2098
[ 1546.489503][T22603]  </TASK>
[ 1546.623241][T22611] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[ 1546.629654][T22611] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28
[ 1546.634199][T22611] EXT4-fs (loop5): This should not happen!! Data will be lost
[ 1546.634199][T22611] 
[ 1546.637780][T22611] EXT4-fs (loop5): Total free blocks count 0
[ 1546.639963][T22611] EXT4-fs (loop5): Free/Dirty block details
[ 1546.642152][T22611] EXT4-fs (loop5): free_blocks=2415919504
[ 1546.644325][T22611] EXT4-fs (loop5): dirty_blocks=48
[ 1546.646712][T22611] EXT4-fs (loop5): Block reservation details
[ 1546.648679][T22611] EXT4-fs (loop5): i_reserved_data_blocks=3
[ 1546.668994][T22603] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 28
[ 1549.221954][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
