last executing test programs:

2m56.079132781s ago: executing program 1 (id=78):
r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x1000840, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x3, 0x356, &(0x7f00000005c0)="$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")
statx(r0, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, &(0x7f00000003c0))

2m55.924993239s ago: executing program 1 (id=80):
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
r1 = io_uring_setup(0x2114, &(0x7f0000000640)={0x0, 0x37c3, 0x80, 0x1, 0x2f})
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000006c0)=r0, 0x1)

2m55.871561528s ago: executing program 1 (id=81):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000006d40)=@newtaction={0xe6c, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x6}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {0x26f, 0x0, 0x40, 0x0, 0x20000}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x10}, {0x0, 0x404, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x30}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x1e}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x2000000, 0x2000}, {}, {0x0, 0x7, 0x0, 0x1, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff, 0x10000000}, {0x10000000}, {0x0, 0x0, 0xc, 0x2000007, 0x0, 0x6}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0xffffffff, 0x2, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x29, 0x0, 0x4, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x28e, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x6, 0x7f}, {0x0, 0x15, 0x0, 0x48510, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x4000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x100000, 0x1}, {0x0, 0x2, 0x0, 0x88}, {0x5}, {}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x40000000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x5}, {}, {0x0, 0x0, 0x0, 0x4000, 0x0, 0xfb4}, {}, {0x0, 0x104, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0xfffffffb, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0xfffffffd, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {0x0, 0x0, 0xfffffffd, 0x80000}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0x0, 0x9, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6, 0x0, 0x100000f}, {0x7f, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x80000000, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd}, {}, {0x0, 0x1}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x2}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x7}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0)

2m55.821066577s ago: executing program 1 (id=82):
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00e611ed6229b237ad2a184a94283e2b34c24caf7280c18475708140abe763dfb52cdb0ba0cdc8c572346d0a832984b36248c4fa844eda0af4b1652605421a7821dcfde12aa77458d811a84538a156b05b0ec3eaf24a90ceb5b7463d9fd38b49d41fbfa868653605702abe43d9c2c30aed4da0b8cc18c6b369f086a965442c1217f19a67a534064b7236a6660000000000"], 0x1, 0x17b, &(0x7f0000000300)="$eJzs28tO4nAUx/FfoVyGuTHDXJLJLGY1mc1QwAR1h49CoBJiUSJuICbqe7hx58PJwp0rMZS2SmWFtEX5fjacHydND4s/nBAQgI3V0B8ZMpSdht/54lnJSHokADGZeI/3EwCbJ32X9AQAkjHek/qSbm5PW0pn/bXgp19M+w2/n8o92x/GF9Iv0+sbeb0L7xdX0l//eqOw8PpC0H+/sP9PRe/+H/RRn/RZRX3RV5W8fju4/scLtyEAADaDoXI4zz2R0n7XsStBzri5qoI5y1k314L+LG8FOefmcuvIaUf4KgAsI6Xy9dMcPv/p0Pk3vfMP4PUbDEcHTcexj2Mq/O8HYr3pagqdr8UYKykyWosxKBYUptZijITfmABEzjrp9a3BcPS/22t27I59WK/V67uVne2q5S7+1vz6D+ANefzQT3oSAAAAAAAAAAAAAACwrG/6nvQIAAAAAGIS2b+IDEmX4pfFAAAAAAAAAAAAAAAAAABE4CEAAP//gNgaag==")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000000)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r0, 0x0, 0x0)

2m55.728141635s ago: executing program 1 (id=85):
setreuid(0xee01, 0xee01)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})

2m55.48063754s ago: executing program 1 (id=93):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x3c}, 0xb71, 0x2, 0x0, 0x1, 0x5, 0xffff}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r0, 0x8b32, &(0x7f0000000040))

2m55.320998964s ago: executing program 32 (id=93):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x3c}, 0xb71, 0x2, 0x0, 0x1, 0x5, 0xffff}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r0, 0x8b32, &(0x7f0000000040))

2m25.887083823s ago: executing program 2 (id=420):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bond_slave_1\x00', &(0x7f0000000240)=@ethtool_gstrings={0x4a, 0x1}})

2m25.780966588s ago: executing program 2 (id=422):
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000140)='/dev/hwrng\x00')
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00')

2m25.699468992s ago: executing program 2 (id=423):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0xfffffffe, 0xe0}, 0x8)

2m25.699015648s ago: executing program 2 (id=425):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xa048c5, &(0x7f0000000140)={[{@utf8no}, {@shortname_winnt}, {@rodir}, {@fat=@discard}, {@rodir}, {@shortname_winnt}, {@fat=@showexec}, {@shortname_lower}, {@fat=@nfs_stale_rw}, {@utf8}, {@fat=@sys_immutable}, {@utf8}]}, 0x0, 0x28b, &(0x7f0000000a80)="$eJzs3c9qE1EUx/Ffk6Z/UtpkIYKCeNCNboY2PkGQFsSAUhtRF8LUTjRkTEomViJiu3PrcxSX7gT1Bbpx517cFEFw04UYaZKxSRux1sapzfcDZU7nzpm58y+cGcjN5q0XD0uFwCm4NcXGTDFpTVtSejtqG2pPY814RJ3WdHHi64czN27fuZrN5WbnzeayC5cyZjZ19s3jpy/PvatN3Hw19XpUG+m7m18yHzdObpza/L4Qrr0iubZYqdTcRd+zpWJQcsyu+54beFYsB161Zh3tBb+yvFw3t7w0mVyuekFgbrluJa9utYrVqnVz77vFsjmOY5NJDZr4H2fk1+fn3WxfOoMojPeaWa1m3XjPxvz6v+gUAAA4WqKq/x8UAysGVq501fd76/+YqP/7h/p/EGzX/8n2/duN+h8AAAAAAAAAAAAAAAAAAAAAgP/BVqORajQaqXAa/o1KGpMU/h91P9EfnP/B1vHFvTHJf76SX8m3pq32bEFF+fI0nZC+Na+HtlY8dyU3O21Nab31V9v5qyv5uEbD/FC6d/5MK9+68xNKdm4/o5RO9M7P9Mwf0YXzYX7Ck6OU3t9TRb6Wmtf1Tv6zGbPL13K78sebywEAAAAAcBw49tOe5/dmu2PhsCG72lszd94PKPWb9wO7nq+HdXo4uv0GAAAAAGCQBPUnJdf3vWpXENsz5zgE4e8fHMoKf3XoCA4tiEk6aHr8787yZ0kJHYWDcKjBp0etO2A/C0f5qQQAAACgH8KifyjqjgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMMD2O3hYuPxBxh7r2Fw8mr0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjoYfAQAA//8pFRpx")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100)

2m25.630154822s ago: executing program 2 (id=426):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b80)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r2, 0x201, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xd64555aed3aa2eb1}, 0x4040)

2m25.500805613s ago: executing program 2 (id=430):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000000280))

2m25.351837829s ago: executing program 33 (id=430):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000000280))

1m55.869464307s ago: executing program 4 (id=761):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001380)={0x14, 0x1, 0x2, 0x801, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4004044)

1m55.869097267s ago: executing program 4 (id=763):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0xc2882, 0x0)
pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000001680)="9803492a7451c07d106d27257c", 0xd}], 0x1, 0x5, 0x2)

1m55.813004943s ago: executing program 4 (id=766):
r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x10001, 0x2, 0x2})
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix_mp={0x101, 0x6, 0x43353039, 0x3, 0x9, [{0x9285, 0x10}, {0xc0cf, 0x4}, {0x327, 0x4a}, {0x5ce3, 0x4}, {0x10001, 0x2}, {0x0, 0x1}, {0x200, 0x3}, {0xfff, 0xff}], 0xf, 0x5, 0x1, 0x0, 0x2}})

1m55.730282481s ago: executing program 4 (id=767):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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")
creat(&(0x7f0000000000)='./bus\x00', 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
open_by_handle_at(r1, &(0x7f0000000080)=@shmem={0xc, 0x1, {0x20, 0x5}}, 0x0)

1m55.310472896s ago: executing program 4 (id=769):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$nfs(&(0x7f00000000c0)='/.//', &(0x7f0000000300)='./file0\x00', 0x0, 0x2009000, 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')

1m55.060145103s ago: executing program 4 (id=770):
landlock_create_ruleset(&(0x7f0000000080)={0x1, 0x2, 0x1}, 0x48, 0x0)

1m54.992924552s ago: executing program 34 (id=770):
landlock_create_ruleset(&(0x7f0000000080)={0x1, 0x2, 0x1}, 0x48, 0x0)

1m53.799286485s ago: executing program 3 (id=784):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0xffff0018)
ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, 0x0)

1m53.72025258s ago: executing program 3 (id=785):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x24, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x10, 0x18, 0x0, 0x0, @binary="05ac0f0002ac0f000dac0f00"}]}, 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

1m53.251430656s ago: executing program 3 (id=786):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='nv\x00', 0x3)
shutdown(r0, 0x2)

1m53.126898601s ago: executing program 3 (id=787):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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")
creat(&(0x7f0000000000)='./bus\x00', 0xd931d3864d39ddd8)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
creat(0x0, 0x44)
mount(0x0, 0x0, 0x0, 0x301400, 0x0)
ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000080)=0x3f)
copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xae8, 0x863, 0x0)

1m52.979621465s ago: executing program 3 (id=788):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x50, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)

1m52.570257938s ago: executing program 3 (id=789):
r0 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)='C', 0x14}], 0x1}}], 0x1, 0x200400c1)

1m52.470389398s ago: executing program 35 (id=789):
r0 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)='C', 0x14}], 0x1}}], 0x1, 0x200400c1)

1m14.249459123s ago: executing program 0 (id=1142):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m14.157292613s ago: executing program 0 (id=1143):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x9}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x1000084}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}, 0x1, 0x0, 0x0, 0xdae27cb1b3302389}, 0x0)

1m14.156781821s ago: executing program 0 (id=1144):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002400)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x2000}})
read$FUSE(r6, &(0x7f0000000200)={0x2020, 0x0, <r7=>0x0, <r8=>0x0, <r9=>0x0}, 0x2092)
syz_fuse_handle_req(r6, &(0x7f0000008e40)="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", 0x2000, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18, 0x0, 0x0, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r6, &(0x7f00000046c0)={0x50, 0x0, r7, {0x7, 0x9, 0x0, 0x403a1810, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50)
chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
read$FUSE(r6, 0x0, 0x0)
write$FUSE_CREATE_OPEN(r6, &(0x7f0000002c00)={0xa0, 0x0, 0x0, {{0x5, 0x3, 0x6, 0x4, 0xb8d, 0x5, {0x1, 0x1ff, 0x80005, 0x2, 0x8, 0x7fff, 0x20000000, 0xa5, 0x2, 0x8000, 0x8, r8, r9, 0x64, 0xc5}}, {0x0, 0x13}}}, 0xa0)
close_range(r5, r2, 0x2)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000040)=ANY=[], 0x0, 0x295, &(0x7f0000000140)="$eJzs3E1rK1UYAOB3mtx7a0HShVAUwRE3rkJbceGuRSqIAUUJoriw2BQlUwsNFJJFPzb6JxT/gS7dCi7EjQv/gAhSBTd2JyJE8mmaTpJaSYPe59nM4cx5z/vORztlmJ53nzyo7x029i8vk7OIJIpJbMUfEauxFIUAAP6Pfm+347d2z6JrAQDuxuTn/yOLKgkAmLP8539xfNhrvc3pXZYGAMzJv3v/7x0BAPwXvfHW269sVyo7r6fpcsTBx8fV42p3O3i078cHkUUt1qMUf0a0h3rtl16u7KynHT+vRvXgtB9/elztfT24PYjfiFKs5sUnOxtpz9X4e7HSj/9hJWqxGaV4LD//Zm78/Xj2mZH85SjF9+/FYWSxF53Yv+NPNtL0xVcraRRjJP5Bd1xX/p85vpcAAAAAAAAAAAAAAAAAAAAAAODWyulQ7vo95fKk/b347cnrAy1fXR9ofH2eYjxxbZlhAAAAAAAAAAAAAAAAAAAAeDg1mq36bpbVjqY1Pvz2868jpo9pXnx39uaMeZqtetLPOzvpvBuPPv3TJ5PHnCezz08yI0WhP8c/LOyrp8Z63inkz7M02pOc3SDFcv/szy6jMKPUby7ef/y5xtrz13cNcnR7ho2x8AdzuKb3pt1av5YicqPOb5Er7VyMYc8XncbgqO/8Nh4c9cjPV/7gtU+3dr88+fGXm8489189AAAAAAAAAAAAAAAAAADAmO6/kd/IRy/MuxYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWJRGs1XfzbLa/Wi2Possqx0NeqY1kogY9Cz1Z5octeBDBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA+CsAAP//3Pl/Vg==")
sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x4400)

1m13.23928523s ago: executing program 0 (id=1151):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r0, &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000080)={0x2, 0xf8, 0x40000, {r0}}, 0x20)

1m13.168586149s ago: executing program 0 (id=1152):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000014b80), 0x4)

1m12.948756074s ago: executing program 0 (id=1153):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000400, &(0x7f00000003c0)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@usrquota}, {@nodiscard}, {@uid}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x21, 0x61b6, &(0x7f00000075c0)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxTaV7esb2dHW7fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+QP24/t//scffnLsR3//0/DMf/9yq//GpOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eq5qzfnrD9qtVqtXsC6rhzvbr2IiM36OtV7BofjAWDBbMYnbXeBFsm/0wYRcaztTgBzrWi7AxyJ+w/urBcp36L+erC2057PBdmT/2axe33HpOk0zXNMZvX42op+PDehPysz6sM8yfn3mvlf2WkfpeWOOv9ZmZT/aOfSp87J+feb+Tc8Pfn3xubfVTn/waHy78sfAAAAAADmWP77/4mWj/8uPf6mHMh+x3/XZtQHAAAAAAAAAHjSDjv+36Ax/t8u4/8BAADA3Ko+q1d+d/zhbZO+i626/XIR8UxjeaBj0sUyq233AwAAAAAAAAAAAAC6ZLBzDu/lImIYEc+srpZlWf3UNevDetz1F13Xtx+6rO0neQAA2PHx8ca1/EXEckRcTt/1N1xdXS3L5ZXVcrVcWcrvZ0dLy+VK7XNtnla3LY0O8IZ4MCqrX7ZcW69u2uflae3N31fd16jsH6Bjs9Fi4AAQETuvRvcnvSL9z+vVYirLZ6PlNzksiH32fxaU/Z+DaPtxCgAAABy9sizLIn2d98l0zL/XdqcAgJnIr//N4wJqtVqtVqufvrquHO9uvYiIzfo61XsGw/EDwILZjE/a7gItkn+nDSLihbY7Acy1ou0OcCTuP7izXqR8i/rrQRrfPZ8Lsif/zWJ7vbz+uOk0zXNMZvX42op+PDehP8/PqA/zJOffa+Z/Zad9lJZ7/PzLPX8mbOsco0n5V9t5ooX+tC3n32/m33DU+/+sbEVvbP5dlfMfHCr/vvwBAAAAAGCO5b//n5ir47+jR92cqfY7/rs2do2j6wsAAAAAAAAAPCn3H9xZz9e95uP/XxiznOs/n045/0L+nZTz7zXy/2pjuX5t/t7bD/P/94M763+89a/P5+lB81/KM0V6ZBXpEVGkeyoGafo4W/dZW8P+qLqnYdHrD9I5P+Xw3bgW12Mjzu5Ztpf+Px62n9vTXvV0uN1e9nfaz+9pH+y25/Uv7GkfprOLypXcfjrW4+dxPd7Zbq/alqZs//KU9nJKe86/b//vpJz/oPZT5b+a2ovGtHLvo95n9vv6dNz9vHXti785e/SbM9VW9He3ra7avpda6M/2/8mxUfzy5saN07ev3rp141ykyZ5bz0eaPGE5/2H62X3+f3mnPT/v1/fXex+NDp3/vNiKwcT8X67NV9v7yoz71oac/yj95PzfSe3j9/9Fzn/y/v9qC/0BAAAAAAAAAAAAAACA/ZRluX2J6FsRcTFd/9PWtZkAwGzl1/8yybfPqu7P+P7U6gWviznrz0zrT8v56o9avYh1XTnem/UiIv5WX6d6z/Drcb8MAJhnn0bEP9vuBK2Rf4fl7/urpqfa7gwwUzc/+PCnV69f37hxs+2eAAAAAAAAAACPKo//uVYb//lUWZZ3G8vtGf/17Vh73PE/B3lmd4DRCQNV9w+/TfvZ6o36vdpw4y/GpPG/h7tz+43/PZhyf8Mp7aMp7UtT2pentI+90KMm5/9ibbzzUxFxsjH8ehfGf22Oed8FOf+Xao/nKv+vNJar51/+fpHz7+3J/8yt939x5uYHH7527f2r7228t/GzC+fOnb1w8eKlS5fOvHvt+sbZnX9b7PHRyvnnsa+dB9otOf+cufy7Jef/pVTLv1ty/l9Otfy7Jeef3+/Jv1ty/vmzj/y7Jef/Sqrl3y05/6+lWv7dkvN/NdXy75ac/9dTLf9uyfm/lmr5d0vO/3Sq5d8tOf8zqT5g/itH3S9mI+efj3DZ/7sl55/PbJB/t+T8z6da/t2S87+Qavl3S87/9VTLv1ty/t9Itfy7Jed/MdXy75ac/zdTLf9uyflfSrX8uyXn/61Uy79bcv7fTrX8uyXn/0aq5d8tOf/vpFr+3ZLz/26q5d8tOf/vpVr+3ZLzfzPV8u+Wh9//b8aMGTN5pu1nJgAAAAAAAAAAAACgaRanE7e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuLkaus74f+Jl989qBxEDI38nfwMYxISSb7NpO/EKbYsJrw1sJhEJfsF3v2iz4Da9dAo1k00CJhFFRRdtw0RYQanNTkQsuaAUoF6gVUiVoL+gNokLlIqoCCkiVaAXZas55nmdnZmdndu3x+sw5n4+U/LIzZ+acOXPm7H53850BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoNWtr5//dCPLsuY/+b+2ZtkLmv+9eWprftlrrvUWAgAAAFfqV/m/n7shXXBwDTdqWeafX/7dry0tLS1l7xv98/HPLy2lK6aybHxTluXXRU/96P2N1mWCx7LJxkjL1yN9Vj/a5/qxPteP97l+os/1m/pcP9nn+hU7YIXNxe9j8jvbmf/n1mKXZjdm4/l1O7vc6rHGppGR+LucXCO/zdL4sWwhO5HNZ7NtyxfLNvLlv3Frc11vyeK6RlrWtb15hPzs0aNxGxphH+9sW9fyfUY/eV029fOfPXr0b889e3O32Xc3tN1fsZ137Ghu5yfDJcW2NrJNaZ/E7Rxp2c7tXZ6T0bbtbOS3a/5353Y+t8btHF3ezA3V+ZxPZiP5f38v309jrb/WS/tpe7jsF7dlWXZxebM7l1mxrmwk29J2ycjy8zNZHJHN+2geSi/OxtZ1nN66huO0Oed2th+nna+J+PzfGm43tso2tD5NP/nERMvz/sulyzlOo+ajXu210nkMDvq1UpZjMB4X38sf9ONdj8Gd4fE/evvqx2DXY6fLMZged8sxuKPfMTgyMZpvc3oSGvltlo/BXW3Lj+ZrauTzmdt7H4Mz506emVn82MfvXjh55Pj88flTe3btmt2zd+/+/ftnji2cmJ8t/n2Ze7v8tmQj6TWwI+y7+Bp4VceyrYfq0pcmVpx/L/d1ONnjdbi1Y9lBvw7HOh9cY2NekCuP6eK18Z7mTp+8NJKt8hrLn587r/x1mB53y+twrOV12PV7SpfX4dgaXofNZc7cubafWcZa/um2Dat/L7iyY3BryzHY+fNI5zE46J9HynIMTobj4gd3rv69YHvY3sen1/vzyOiKYzA93HDuaV6Sft6f3J+PbsflLc0rrpvIzi/On73nkSPnzp3dlYWxIV7Scqx0Hq9bWh5TtuJ4HVn38Xpw4eWP39Ll8q1hX03e3fzX5KrPVXOZe+/p/Vzl392678+2S3dnYQzYRu/Pbt/Nm/tzIsu+8O1PPPTNR7/w+lX3ZzNvfnLmyn8WT7m05fw7vsr5N+b+54v1pbt6bHR8rHj9jqa9M952Pm5/qsbyc1cjX/dzM2s7H4+Hfzb6fHxjj/Pxto5lB30+Hu98cPF83Oj3244r0/l8Tobj5MRs7/Nxc5ltu9d7TI71PB/fFmYj7P9Xh6SQclHLsbPacZvWNTY2Hh7XWFxD+3G6p2358ZDNmut6cnf4oTBt5dqO0ztuK5YfbbldtFHH6VTHsoM+TtPvvlY7Thv9fvt2eTqfz8lwXNy4p/dx2lzm6Xuv/Ny5Of5ny7lzot8xOD460dzm8XQQ5uf7bGlzPAbvyY5mp7MT2Vx+7UR+PDXydU3ft7Zz5UT4Z6PPldt6HIN3dCw76GMwfR9b7dhrjK188APQ+XxOhuPiift6H4PNZd6wb7A/u94RLknLtPzs2vn7tdV+53VLx266WsfKWNjOb+/r/bvZ5jIn9q83Z/beT3eFS67rsp86X7+rvabmso3ZT9vCdj67f/X91Nye5jKfP7DG4+lglmUXPvJA/vve8PeVC+e//7W2v7t0+5vOhY888NMXHvun9Ww/AMPv+WJsKb7Xtfxlai1//wcAAACGQsz9I2Em8j8AAABURsz98f8KT+R/AAAAqIyY+8fCTKqQ//+4/yLb3vDswvMXstTMXwri9Wk3PFgsFzuus+HrqaVlzcsf+Mr8f//jhbVt3kiWZb988I+6Lr/twbhdhamwnU+9sf3yFb5295rWffjhC2m9rf31L4b7j49nrYdBtwrubJZl37jhs/l6pt5/KZ9PP3g4nw9dfPyx5jLPHSi+jrd/5iXF8n8Vyr8Hjx1pu/0zYT/8OMzZt3bfH/F2X7306u373ru8vni7xo7r84f9xAeK+43vk/O5x4rl435ebfu/+Zknv9pc/pFXdt/+CyPdt//JcL9fCfN/XlYs3/ocNL+Ot/tU2P64vni7e778ra7b/9Sni+XPvKlY7nCYcf13hK93vunZhdb99UjjSNvjyt5cLBfXP/v9P82vj/cX779z+ycPXWrbH53Hx9P/VtzPTMfy8fK4nugfOtbfvJ/W4zOu/8k/Ody2n/ut/6mHnnlZ8347139Xx3JnPnJnvv7l+2t/x6a//tRnu64vbs/Bvz/T9ngOviu8jsP6n/hAOB7D9f/7VHF/ne+ucPhd7eefuPwXt15oezzRW35erP+p1x7P56bJzVuue8ELr7/4iua+y7LvbSrur9/6j//N6bbt/9JNxf6I18eOfuf6VxPXf/aj06dOL55fmEt79dEb8vfOeVuxPXF7bwjn1s6vD50+98H5s1OzU7NZNlXdt9C7bF8O86fFuNh76aUVZ9A7Hw7P5y1/+Y0tt//rZ+Ll//6e4vJLby2+b70qLPe5cPnW8Pytb/0rPXHrTfnru/F02MKlle8XfCW27/yv/WtaMDz+zp8L4vF+5qUfzPdD87r8+0Z8XV/h9v9wrrifr4f9uhTemXnHTcvra10+vjfCpXcXr/cr3n/hNBef178Lz/fbf1zcf9yu+Hh/GH6O+da29vNdPD6+fmGk8/7zd/G4GM4n2cXi+rhU3N+Xnrup6+bF9yHJLt6cf/1n6X5uXtfDXM3ixxZnTiycOv/IzLn5xXMzix/7+KGTp8+fOncofy/PQx/qd/vl89OW/Pw0N7/33iw/W50uxlV2rbf/zMNH5/bN3j43f+zI+WPnHj4zf/b40cXFo/Nzi7cfOXZs/qP9br8wd/+u3Qf27Ns9fXxh7v79Bw7sOTC9cOp0czOKjepj7+yHp0+dPZTfZPH+ew/suu++e2enT56em79/3+zs9Pl+t8+/N003b/2H02fnTxw5t3Byfnpx4ePz9+86sHfv7r7vBnjyzLHFqZmz50/NnF+cPztTPJapc/nFze99/W5PNS3+R/HzbKdG8UZ82Tvv2pven7XpK59Y9a6KRTreQPTZ8F4033nRmf1r+Trm/vEwkyrkfwAAACAXc/9EmIn8DwAAAJURc/+mMBP5HwAAACoj5v7JMNP/ElCT/F+5/v+2C2tav/6//n/r/tL/r1n//91l6/8X5wv9/8G40v69/n+g/6//r/+v/6//zwCUrf8fc//mLPP3fwAAAKiomPu3hJnI/wAAAFAZMfdfF2Yi/wMAAEBlxNz/gjCTmuR//X/9f/1//X/9/+7r1/8fTvr/ven/96H/P5PVq/9/cZDbfw36/5tbv9D/p4zK1v+Puf+FYSY1yf8AAABQBzH3Xx9mIv8DAABAZcTcf0OYifwPAAAAlRFz/9Ywk5rkf/3/K+r/p86V/n/79uv/t9P/D8eD/r/+/wbQ/+9N/78P/X+f/z9c/f82+v+UUdn6/zH3vyjMpCb5HwAAAOog5v4Xh5nI/wAAAFA+Y5d3s5j7XxJmsiL/X+YKAAAAgGsu5v4bs44ieE3+/q//7/P/9f/1//X/u69/7f3/0Uz/vzz0/3vT/+9D/1//X/9f/5+BKlv/P8/92WT20jCTmuR/AAAAqIOY+28KM5H/AQAAoDJi7v9/YSbyPwAAAFRGzP3bwkxqkv/1/yvT//9F61On/6//32v9+v8+/7/K9P970//vQ/9f/1//X/+fgSpb/z/m/pvDTGqS/wEAAKAOYu6/JcxE/gcAAIDKiLn//4eZyP8AAABQGTH3bw8zqUn+1/8vef8/Nkd9/r/+v/5/Kfv/k/r/paP/35v+fx/6//r/+v/6/wxU2fr/Mfe/LMykJvkfAAAA6iDm/peHmcj/AAAAUBkx978izET+BwAAgMqIuX8qzKQm+X89/f/GRf3/1Vzlz/+fWMPn/7fR/9f/77V+/X+f/19l+v+96f/3of+v/6//r//PQJWt/x9z/61hJjXJ/wAAAFAHMffvCDOR/wEAAKAyYu6/LcxE/gcAAIDKiLl/Z5hJTfK/z/8fiv5/pv+v/6//r/+v/782+v+96f/3of+v/6//r//PQJWt/x9z/yvDTGqS/wEAAKAOYu6/PcxE/gcAAIDKiLn/VWEm8j8AAABURsz9d4SZ1CT/6//r/+v/6//r/3dfv/7/cNL/703/vw/9f/1//X/9fwaqbP3/mPtfHWZSk/wPAAAAdRBz/51hJvI/AAAAVEbM/XeFmcj/AAAAUBkx90+HmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j77w4zqUn+BwAAgDqIuf+eMBP5HwAAACoj5v6ZMBP5HwAAACoj5v7ZMJOa5H/9f/1//X/9/3X1/1+xfL/6/wX9/3LR/+9N/78P/X/9/2ve/x/X/6dSytb/j7l/V5hJTfI/AAAA1EHM/bvDTOR/AAAAqIyY+/eEmcj/AAAAUBkx998bZlKT/K//r/+v/6//7/P/u69f/3846f/3Nvj+f3yI+v/6//r/Pv9f/5+Vytb/j7n/vjCTmuR/AAAAqIOY+/eGmcj/AAAAUBkx9+8LM5H/AQAAoDJi7t8fZlKT/K//r/+v/6//r//fff36/8NJ/783n//fh/6//v8Q9/+bx5b+P2VTtv5/zP0Hwkxqkv8BAACgDmLuf02YifwPAAAAlRFz/6+Fmcj/AAAAUBkx9/96mElN8r/+v/6//r/+f9n7/xP6//r/66D/35v+fx/6//r/Q9z/9/n/lFHZ+v8x998fZlKT/A8AAAB1EHP/b4SZyP8AAABQGTH3vzbMRP4HAACAyoi5/2CYSU3yv/7/BvX/44X6//r/+v8+/1///6rS/+9N/78P/X/9f/1//X8Gqmz9/5j7XxdmUpP8DwAAAHUQc/8DYSbyPwAAAFRGzP2vDzOR/wEAAKAyYu5/Q5hJTfK//r/P/7/2/f/xtm3X/1++nf5/Qf9f/3899P970//vQ/9f/1//X/+fgSpb/z/m/jeGmdQk/wMAAEAdxNz/pjAT+R8AAAAqI+b+N4eZyP8AAABQGTH3vyXMpCb5X/9f///a9/99/r/+f0H/X/9/EPT/e9P/70P/X/9f/1//n4EqW/8/5v7fDDOpSf4HAACAOoi5/8EwE/kfAAAAKiPm/reGmcj/AAAAUBkx978tzKQm+V//X/9f/1//X/+/+/r1/4eT/n9vQ9b//9X14XL9/4L+f7m3f739/7GOr69K//9Hq/X/lzZ13l7/n6uhbP3/mPvfHmZSk/wPAAAAdRBz/zvCTOR/AAAAqIyY+98ZZiL/AwAAQGXE3P9bYSY1yf/6/83tWG4v6//r/+cX6P/r/+v/Dy39/96GrP/v8/876P+Xe/t9/r/+PyuVrf8fc/+7wkxqkv8BAACgDmLufyjMRP4HAACAyoi5/91hJvI/AAAAVEbM/e8JM6lJ/tf/9/n/+v/6//r/3dev/z+c9P970//vQ/9f/79s/f//1P9nuJWt/x9z/8NhJjXJ/wAAAFAHMfe/N8xE/gcAAIDKiLn/t8NM5H8AAACojJj73xdmUpP8r/8/LP3/Kf3/dfb/J8Jl+v/6//r/9aL/35v+fx/6//r/Zev/+/x/hlzZ+v8x978/zGTt+X9yzUsCAAAA10TM/b8TZlKTv/8DAABAHcTc/7thJvI/AAAAVEbM/b8XZlKT/K//Pyz9f5//n/n8f/3/jsej/6//383G9f/jmUf/X/9f/z/S/9f/1/+nU9n6/zH3/36YSU3yPwAAANRBzP0fCDOR/wEAAGAodPt/sjvF3H8ozET+BwAAgMqIuf9wmElN8r/+v/6//n9J+/9/seNffvDddxzepf+v/6//vy4b+vn/zRe/z//X/9f/T/T/9f/1/+lUtv5/zP1HwkyWg9/bfMA/AAAADLeY+/8gzKQmf/8HAACAOoi5/2iYifwPAAAAlRFz/1yYSU3yv/6//r/+f0n7/0P8+f9xfwxT/3960xD1/+NJV/+/qw3t/793uSeu/7/e/v9E10s7+/8N/f82+v/r3v7vZFmm/6//zzVUtv5/zP3zYSY1yf8AAABQByH3jxwr5vIV8j8AAABURsz9x8NM5H8AAACojJj7PxhmUpP8r/+v/6//r//v8/+7r7+0/X+f/9+T/n9v5en/d+fz//X/h3n79f/1/1mpbP3/mPsXwkxqkv8BAACgDmLu/1CYifwPAAAAlRFz/4fDTOR/AAAAqIyY+0+EmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j7T4aZ1CT/AwAAQB3E3H8qzOT/2LuPJsvq847jt3FTzBQb77zwwt77JbAwa/sFeMHGC7vK5YWxjXNicI4454BtJRRQAAmhhHICJSSUhSSUc0AZSTUqmOd5Znr69LndM7e7z/0/n89CDzSMzkU1BfrRfDn2PwAAAAwjd//NcYv9DwAAAMPI3f/LcUuT/a//1/8P2///pP7/oOfr//X/I9P/z9P/r6H/1//r//X/bNTS+v/c/b8StzTZ/wAAANBB7v5fjVvsfwAAABhG7v5b4hb7HwAAAIaRu//X4pYm+/+y/n9n1bP/z4xX/z9S/+/9/wc+X/+v/x/Zyfb/tz3xZz79v/5f/x/0//p//T+XW1r/n7v/1+OWJvsfAAAAOsjd/xtxi/0PAAAAw8jd/5txi/0PAAAAw8jd/1txS5P97/3/3v+v/9f/6/+nn6//307e/z+vU/9/y8PX/9Jj9/7ofUd5vv5f/6//1/+zWUvr/3P3/3bc0mT/AwAAQAe5+38nbrH/AQAAYBi5+383brH/AQAAYAudnfxq7v7fi1ua7H/9v/5f/x/9/xn9v/5f/z8C/f+8Tv3/lTxf/6//1//r/9mspfX/uft/P25psv8BAACgg9z9fxC32P8AAACwXFP/IPaM3P23xi32PwAAAAwjd/+5uKXJ/tf/H3///339/3b0/97/r//X/w9B/z9P/7+G/l//r//X/7NRS+v/c/ffFrc02f8AAADQQe7+P4xb7H8AAAAYRu7+P4pb7H8AAAAYRu7+P45bmux//b/3/+v/9f/6/+nn6/+3k/5/nv5/Df3/1fbz1+r/9f/6fy51xP7/8Zk/bW+k/8/d/ydxS5P9DwAAAB3k7v/TuMX+BwAAgGHk7v+zuMX+BwAAgGHk7v/zuKXJ/tf/6//1//r/K+7/9//Ue5L+f5r+/2To/+ctpv/f2Z38sv5/6/t/7//X/+v/2WNp7//P3f8XcUuT/Q8AAAAd5O7/y7hlZv8f+W/mAwAAAKcqd/9fxS2+/w8AAABbL6uz3P1/Hbc02f/6f/2//l//7/3/08+f6//vu+Tz6f+XRf8/bzH9/wH0//r/bf78+n/9P/strf/P3f83cUuT/Q8AAAAd5O6/PW6x/wEAAGAYufv/Nm6x/wEAAGAYufv/Lm5psv+n+/+Lv13/fzj6/72fX/8//fNjU/1//jfq/2f7/xu9/78n/f88/f8a+n/9v/7/oP7/7Lofr/9nytL6/9z9fx+3NNn/AAAA0EHu/n+IW+x/AAAAGEbu/n+MW+x/AAAAGEbu/n+KW5rsf+//1//r/7ev//f+/wtO8/3/qxPv/3f1/4ek/5+n/19D/6//1//Pv/9/5t8CoP9nytL6/9z9/xy3NNn/AAAA0EHu/n+JW+x/AAAA2A6X/rMDl/8DpSF3/7/GLfY/AAAADCN3/7/FLePs/9l3der/9f/6f/2//n/6+cvq/73//7D0//P0/2vo/4+jn98drP+/46Afv4T+/9bj7v9n6P+Zsqf/v//i10+r/8/d/+9xyzj7HwAAANrL3f8fcYv9DwAAAMPI3f+fcYv9DwAAAMPI3f9fcUuT/X/s/f/Mv31A/6//1//r//X/+v9N0//P0/+vof/3/n/v/9f/s1F7+v9LnFb/n7v/v+OWJvsfAAAAOsjd/z9xi/0PAAAAw8jdf0fcYv8DAADAMHL3/2/c0mT/e/+//l//r//X/08/X/+/na6qv79G/1/0//p//b/+X//PBiyt/8/d/39xS5P9DwAAAB3k7v//uMX+BwAAgGHk7n9K3GL/AwAAwDBy9z81bmmy//X/x9v/59f1//r/lf5f/6//PxFt3/+/M/VXov0O6P8f/IVzP733K/p//b/+X/+v/+eQfnjmty2i/z9/8f9d5u5/WtzSZP8DAABAB7n7nx632P8AAAAwjNz9z4hb7H8AAAAYRu7+O+OWI+7/ueZhyfT/3v+v/9f/6/+nn6//305t+/9D8v7/NfT/+n/9v/6fjVpE/3/Jr+fuf2bc4vv/AAAAMIzc/c+KW+x/AAAAGEbu/mfHLfY/AAAADCN3/3Pilib7X/+v/9f/6//1/9PP1/9vJ/3/PP3/GtvU/995Ff3/7vSXT7ufv1qn/fn1//p/9lta/5+7/664pcn+BwAAgA5y9z83brH/AQAAYBi5+58Xt9j/AAAAMIzc/c+PW5rsf/2//l//r//X/08/X/+/nfT/8/T/q9Xq7pkPMNX/n79umf2/9/8v7vPr//X/7Le0/j93/wvilib7HwAAADrI3X933GL/AwAAwDBy998Tt9j/AAAAMIzc/S+MW5rsf/2//l//r//X/08/X/+/nfT/8/T/a2zT+//1/4v7/Pp//T/7La3/z93/orilyf4HAACADnL33xu32P8AAAAwjNz9L45b7H8AAAAYRu7+++KWJvtf/6//1//r//X/08/X/2+n4+v/V/p//b/+fw39v/5f/8/lltb/5+5/SdzSZP8DAABAB7n7Xxq32P8AAAAwjNz9L4tb7H8AAAAYRu7+l8ctTfa//l//r//X/+v/p5+v/99O3v8/T/+/hv5f/6//1/+zUdP9/62n1v/n7n9F3NJk/wMAAEAHufvvj1vsfwAAABhG7v5Xxi32PwAAAAwjd/+r4pYm+1//r//f2/+vVvp//b/+/4IT6P/PrPT/G6f/n6f/X0P/P2b/f81qoP7/7IE/Xv/PEi3t/f+5+18dtzTZ/wAAANBB7v7XxC32PwAAAAwjd/9r4xb7HwAAAIaRu/91cUuT/a//1/97/7/+X/8//Xzv/99O+v95+v819P9j9v/e/6//59Qsrf/P3f/6uKXJ/gcAAIAOcve/IW6x/wEAAGAYufvfGLfY/wAAADCM3P1vilua7H/9v/5f/6//1/9PP1//v530//P0/2vo//X/+n/9Pxu1tP4/d/+b45Ym+x8AAAA6yN3/QNxi/wMAAMAwcvc/GLfY/wAAADCM3P1viVua7H/9v/5f/7+d/f8Z/b/+X/8/aSn9/w03/NRD+n/9v/5f/6//1/93t7T+P3f/W+OWJvsfAAAAOsjd/7a4xf4HAACAYeTuf3vcYv8DAADAMHL3vyNuabL/9/f/164uFKoXTPX/0ajp/y+h/9/7+fX/0z8/vP9f/6//P35L6f+9///KPr/+X/+/zZ//SP3/j+//8fp/RrS0/j93/0NxS5P9DwAAAB3k7n9n3GL/AwAAwDBy978rbrH/AQAAYBi5+x+OW5rsf+//1//r//X/+v/p5+v/t5P+f57+fw39v/7f+/9v/rkf0v+zOUvr/3P3vztuabL/AQAAoIPc/e+JW+x/AAAAGEbu/vfGLfY/AAAADCN3//vilib7X/+v/9f/6//1/9PP1/9vJ/3/PP1/ufwP7YI+/f+ZqS+edj9/tU778w/T/3v/Pxu0tP4/d//745Ym+x8AAAA6yN3/gbjF/gcAAIBh5O7/YNxi/wMAAMAwcvd/KG5psv/1//r/8fv/n9X/X/Z8/b/+f2T6//wr+jT9/xp9+v9Jp93Pb/vn1//r/9lvaf1/7v5H4pYm+x8AAAA6yN3/4bjF/gcAAIBh5O7/SNxi/wMAAMAwcvd/NG5psv/1/736/51Vx/7f+//1//r/TvT/8/T/a+j/9f/6f/0/G7W0/j93/6M7uy33PwAAAGyrn/mJX3zksL/vo0/+55nVx+KWG1fnD/ltbAAAAGDhntj9O7ur1cef/DXf/wcAAIAR5e7/RNzSZP/r/3v1/z3f/6//1//r/zvR/8/T/6+h/9f/6//1/2zU0vr/3P2fjFsuGX67R/6jBAAAAJYkd/+n4pYm3/8HAACADnL3fzpu2bf//esAAQAAYFvl7v9M3NLk+//6/4X3/6tj6v/j99P/X6D/1/9PPV//v530//Ousv8/v6P/1//P0P/r//X/XG5p/X/u/s/GLU32PwAAAAxqz99RyN3/ubjF/gcAAIBh5O7/fNxi/wMAAMAwcvd/IW5psv/1/yfe/2eqfozv/z9bv+T9/837/9vPTD5f/6//H5n+f573/6+h/x+l/79O/6//ZxmW1v/n7v9i3NJk/wMAAEAHufu/FLfY/wAAADCM3P1fjlvsfwAAABhG7v6vxC1N9r/+f+Hv/7+i/v8Q7//X//fo/w94/jj9/49cf+6Bm37+nrv0/1x0kv1//lzQ/+v/9f8XLKj/9/5//T8Lsfn+f3fPF4/a/+fu/2rc0mT/AwAAQAe5+x+LW+x/AAAAGEbu/q/FLfY/AAAADCN3/9fjlib7X/+v/19K/5//W59C/3/uivv/s6vV6lT6/2yKu/f/3v+v/9/P+//n6f/X0P/r//X/+n82avP9/94vHrX/z93/jbilyf4HAACADnL3fzNuyf2/c+S/dQ8AAAAsTO7+b8Utvv8PAAAAw8jd/+24pcn+1//r/5fS/yfv/7/448Z6//9NFaf27P9/rH5J/3+89P/z9P9r6P/1//p//T8btbT+P3f/d+KWJvsfAAAAOsjd/3jcYv8DAADAMHL3fzdusf8BAABgGLn7vxe3NNn/+v9R+/8s4vX/+v+l9P/e/+/9/ydD/z9P/7+G/l//r//X/7NRS+v/c/f/IAAA//9GqnSo")
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000340)=ANY=[], 0x700, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000280), &(0x7f000000a440)=ANY=[], 0x90f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)

1m12.847464222s ago: executing program 36 (id=1153):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000400, &(0x7f00000003c0)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@usrquota}, {@nodiscard}, {@uid}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x21, 0x61b6, &(0x7f00000075c0)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxTaV7esb2dHW7fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+QP24/t//scffnLsR3//0/DMf/9yq//GpOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eq5qzfnrD9qtVqtXsC6rhzvbr2IiM36OtV7BofjAWDBbMYnbXeBFsm/0wYRcaztTgBzrWi7AxyJ+w/urBcp36L+erC2057PBdmT/2axe33HpOk0zXNMZvX42op+PDehPysz6sM8yfn3mvlf2WkfpeWOOv9ZmZT/aOfSp87J+feb+Tc8Pfn3xubfVTn/waHy78sfAAAAAADmWP77/4mWj/8uPf6mHMh+x3/XZtQHAAAAAAAAAHjSDjv+36Ax/t8u4/8BAADA3Ko+q1d+d/zhbZO+i626/XIR8UxjeaBj0sUyq233AwAAAAAAAAAAAAC6ZLBzDu/lImIYEc+srpZlWf3UNevDetz1F13Xtx+6rO0neQAA2PHx8ca1/EXEckRcTt/1N1xdXS3L5ZXVcrVcWcrvZ0dLy+VK7XNtnla3LY0O8IZ4MCqrX7ZcW69u2uflae3N31fd16jsH6Bjs9Fi4AAQETuvRvcnvSL9z+vVYirLZ6PlNzksiH32fxaU/Z+DaPtxCgAAABy9sizLIn2d98l0zL/XdqcAgJnIr//N4wJqtVqtVqufvrquHO9uvYiIzfo61XsGw/EDwILZjE/a7gItkn+nDSLihbY7Acy1ou0OcCTuP7izXqR8i/rrQRrfPZ8Lsif/zWJ7vbz+uOk0zXNMZvX42op+PDehP8/PqA/zJOffa+Z/Zad9lJZ7/PzLPX8mbOsco0n5V9t5ooX+tC3n32/m33DU+/+sbEVvbP5dlfMfHCr/vvwBAAAAAGCO5b//n5ir47+jR92cqfY7/rs2do2j6wsAAAAAAAAAPCn3H9xZz9e95uP/XxiznOs/n045/0L+nZTz7zXy/2pjuX5t/t7bD/P/94M763+89a/P5+lB81/KM0V6ZBXpEVGkeyoGafo4W/dZW8P+qLqnYdHrD9I5P+Xw3bgW12Mjzu5Ztpf+Px62n9vTXvV0uN1e9nfaz+9pH+y25/Uv7GkfprOLypXcfjrW4+dxPd7Zbq/alqZs//KU9nJKe86/b//vpJz/oPZT5b+a2ovGtHLvo95n9vv6dNz9vHXti785e/SbM9VW9He3ra7avpda6M/2/8mxUfzy5saN07ev3rp141ykyZ5bz0eaPGE5/2H62X3+f3mnPT/v1/fXex+NDp3/vNiKwcT8X67NV9v7yoz71oac/yj95PzfSe3j9/9Fzn/y/v9qC/0BAAAAAAAAAAAAAACA/ZRluX2J6FsRcTFd/9PWtZkAwGzl1/8yybfPqu7P+P7U6gWviznrz0zrT8v56o9avYh1XTnem/UiIv5WX6d6z/Drcb8MAJhnn0bEP9vuBK2Rf4fl7/urpqfa7gwwUzc/+PCnV69f37hxs+2eAAAAAAAAAACPKo//uVYb//lUWZZ3G8vtGf/17Vh73PE/B3lmd4DRCQNV9w+/TfvZ6o36vdpw4y/GpPG/h7tz+43/PZhyf8Mp7aMp7UtT2pentI+90KMm5/9ibbzzUxFxsjH8ehfGf22Oed8FOf+Xao/nKv+vNJar51/+fpHz7+3J/8yt939x5uYHH7527f2r7228t/GzC+fOnb1w8eKlS5fOvHvt+sbZnX9b7PHRyvnnsa+dB9otOf+cufy7Jef/pVTLv1ty/l9Otfy7Jeef3+/Jv1ty/vmzj/y7Jef/Sqrl3y05/6+lWv7dkvN/NdXy75ac/9dTLf9uyfm/lmr5d0vO/3Sq5d8tOf8zqT5g/itH3S9mI+efj3DZ/7sl55/PbJB/t+T8z6da/t2S87+Qavl3S87/9VTLv1ty/t9Itfy7Jed/MdXy75ac/zdTLf9uyflfSrX8uyXn/61Uy79bcv7fTrX8uyXn/0aq5d8tOf/vpFr+3ZLz/26q5d8tOf/vpVr+3ZLzfzPV8u+Wh9//b8aMGTN5pu1nJgAAAAAAAAAAAACgaRanE7e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuLkaus74f+Jl989qBxEDI38nfwMYxISSb7NpO/EKbYsJrw1sJhEJfsF3v2iz4Da9dAo1k00CJhFFRRdtw0RYQanNTkQsuaAUoF6gVUiVoL+gNokLlIqoCCkiVaAXZas55nmdnZmdndu3x+sw5n4+U/LIzZ+acOXPm7H53850BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoNWtr5//dCPLsuY/+b+2ZtkLmv+9eWprftlrrvUWAgAAAFfqV/m/n7shXXBwDTdqWeafX/7dry0tLS1l7xv98/HPLy2lK6aybHxTluXXRU/96P2N1mWCx7LJxkjL1yN9Vj/a5/qxPteP97l+os/1m/pcP9nn+hU7YIXNxe9j8jvbmf/n1mKXZjdm4/l1O7vc6rHGppGR+LucXCO/zdL4sWwhO5HNZ7NtyxfLNvLlv3Frc11vyeK6RlrWtb15hPzs0aNxGxphH+9sW9fyfUY/eV029fOfPXr0b889e3O32Xc3tN1fsZ137Ghu5yfDJcW2NrJNaZ/E7Rxp2c7tXZ6T0bbtbOS3a/5353Y+t8btHF3ezA3V+ZxPZiP5f38v309jrb/WS/tpe7jsF7dlWXZxebM7l1mxrmwk29J2ycjy8zNZHJHN+2geSi/OxtZ1nN66huO0Oed2th+nna+J+PzfGm43tso2tD5NP/nERMvz/sulyzlOo+ajXu210nkMDvq1UpZjMB4X38sf9ONdj8Gd4fE/evvqx2DXY6fLMZged8sxuKPfMTgyMZpvc3oSGvltlo/BXW3Lj+ZrauTzmdt7H4Mz506emVn82MfvXjh55Pj88flTe3btmt2zd+/+/ftnji2cmJ8t/n2Ze7v8tmQj6TWwI+y7+Bp4VceyrYfq0pcmVpx/L/d1ONnjdbi1Y9lBvw7HOh9cY2NekCuP6eK18Z7mTp+8NJKt8hrLn587r/x1mB53y+twrOV12PV7SpfX4dgaXofNZc7cubafWcZa/um2Dat/L7iyY3BryzHY+fNI5zE46J9HynIMTobj4gd3rv69YHvY3sen1/vzyOiKYzA93HDuaV6Sft6f3J+PbsflLc0rrpvIzi/On73nkSPnzp3dlYWxIV7Scqx0Hq9bWh5TtuJ4HVn38Xpw4eWP39Ll8q1hX03e3fzX5KrPVXOZe+/p/Vzl392678+2S3dnYQzYRu/Pbt/Nm/tzIsu+8O1PPPTNR7/w+lX3ZzNvfnLmyn8WT7m05fw7vsr5N+b+54v1pbt6bHR8rHj9jqa9M952Pm5/qsbyc1cjX/dzM2s7H4+Hfzb6fHxjj/Pxto5lB30+Hu98cPF83Oj3244r0/l8Tobj5MRs7/Nxc5ltu9d7TI71PB/fFmYj7P9Xh6SQclHLsbPacZvWNTY2Hh7XWFxD+3G6p2358ZDNmut6cnf4oTBt5dqO0ztuK5YfbbldtFHH6VTHsoM+TtPvvlY7Thv9fvt2eTqfz8lwXNy4p/dx2lzm6Xuv/Ny5Of5ny7lzot8xOD460dzm8XQQ5uf7bGlzPAbvyY5mp7MT2Vx+7UR+PDXydU3ft7Zz5UT4Z6PPldt6HIN3dCw76GMwfR9b7dhrjK188APQ+XxOhuPiift6H4PNZd6wb7A/u94RLknLtPzs2vn7tdV+53VLx266WsfKWNjOb+/r/bvZ5jIn9q83Z/beT3eFS67rsp86X7+rvabmso3ZT9vCdj67f/X91Nye5jKfP7DG4+lglmUXPvJA/vve8PeVC+e//7W2v7t0+5vOhY888NMXHvun9Ww/AMPv+WJsKb7Xtfxlai1//wcAAACGQsz9I2Em8j8AAABURsz98f8KT+R/AAAAqIyY+8fCTKqQ//+4/yLb3vDswvMXstTMXwri9Wk3PFgsFzuus+HrqaVlzcsf+Mr8f//jhbVt3kiWZb988I+6Lr/twbhdhamwnU+9sf3yFb5295rWffjhC2m9rf31L4b7j49nrYdBtwrubJZl37jhs/l6pt5/KZ9PP3g4nw9dfPyx5jLPHSi+jrd/5iXF8n8Vyr8Hjx1pu/0zYT/8OMzZt3bfH/F2X7306u373ru8vni7xo7r84f9xAeK+43vk/O5x4rl435ebfu/+Zknv9pc/pFXdt/+CyPdt//JcL9fCfN/XlYs3/ocNL+Ot/tU2P64vni7e778ra7b/9Sni+XPvKlY7nCYcf13hK93vunZhdb99UjjSNvjyt5cLBfXP/v9P82vj/cX779z+ycPXWrbH53Hx9P/VtzPTMfy8fK4nugfOtbfvJ/W4zOu/8k/Ody2n/ut/6mHnnlZ8347139Xx3JnPnJnvv7l+2t/x6a//tRnu64vbs/Bvz/T9ngOviu8jsP6n/hAOB7D9f/7VHF/ne+ucPhd7eefuPwXt15oezzRW35erP+p1x7P56bJzVuue8ELr7/4iua+y7LvbSrur9/6j//N6bbt/9JNxf6I18eOfuf6VxPXf/aj06dOL55fmEt79dEb8vfOeVuxPXF7bwjn1s6vD50+98H5s1OzU7NZNlXdt9C7bF8O86fFuNh76aUVZ9A7Hw7P5y1/+Y0tt//rZ+Ll//6e4vJLby2+b70qLPe5cPnW8Pytb/0rPXHrTfnru/F02MKlle8XfCW27/yv/WtaMDz+zp8L4vF+5qUfzPdD87r8+0Z8XV/h9v9wrrifr4f9uhTemXnHTcvra10+vjfCpXcXr/cr3n/hNBef178Lz/fbf1zcf9yu+Hh/GH6O+da29vNdPD6+fmGk8/7zd/G4GM4n2cXi+rhU3N+Xnrup6+bF9yHJLt6cf/1n6X5uXtfDXM3ixxZnTiycOv/IzLn5xXMzix/7+KGTp8+fOncofy/PQx/qd/vl89OW/Pw0N7/33iw/W50uxlV2rbf/zMNH5/bN3j43f+zI+WPnHj4zf/b40cXFo/Nzi7cfOXZs/qP9br8wd/+u3Qf27Ns9fXxh7v79Bw7sOTC9cOp0czOKjepj7+yHp0+dPZTfZPH+ew/suu++e2enT56em79/3+zs9Pl+t8+/N003b/2H02fnTxw5t3Byfnpx4ePz9+86sHfv7r7vBnjyzLHFqZmz50/NnF+cPztTPJapc/nFze99/W5PNS3+R/HzbKdG8UZ82Tvv2pven7XpK59Y9a6KRTreQPTZ8F4033nRmf1r+Trm/vEwkyrkfwAAACAXc/9EmIn8DwAAAJURc/+mMBP5HwAAACoj5v7JMNP/ElCT/F+5/v+2C2tav/6//n/r/tL/r1n//91l6/8X5wv9/8G40v69/n+g/6//r/+v/6//zwCUrf8fc//mLPP3fwAAAKiomPu3hJnI/wAAAFAZMfdfF2Yi/wMAAEBlxNz/gjCTmuR//X/9f/1//X/9/+7r1/8fTvr/ven/96H/P5PVq/9/cZDbfw36/5tbv9D/p4zK1v+Puf+FYSY1yf8AAABQBzH3Xx9mIv8DAABAZcTcf0OYifwPAAAAlRFz/9Ywk5rkf/3/K+r/p86V/n/79uv/t9P/D8eD/r/+/wbQ/+9N/78P/X+f/z9c/f82+v+UUdn6/zH3vyjMpCb5HwAAAOog5v4Xh5nI/wAAAFA+Y5d3s5j7XxJmsiL/X+YKAAAAgGsu5v4bs44ieE3+/q//7/P/9f/1//X/u69/7f3/0Uz/vzz0/3vT/+9D/1//X/9f/5+BKlv/P8/92WT20jCTmuR/AAAAqIOY+28KM5H/AQAAoDJi7v9/YSbyPwAAAFRGzP3bwkxqkv/1/yvT//9F61On/6//32v9+v8+/7/K9P970//vQ/9f/1//X/+fgSpb/z/m/pvDTGqS/wEAAKAOYu6/JcxE/gcAAIDKiLn//4eZyP8AAABQGTH3bw8zqUn+1/8vef8/Nkd9/r/+v/5/Kfv/k/r/paP/35v+fx/6//r/+v/6/wxU2fr/Mfe/LMykJvkfAAAA6iDm/peHmcj/AAAAUBkx978izET+BwAAgMqIuX8qzKQm+X89/f/GRf3/1Vzlz/+fWMPn/7fR/9f/77V+/X+f/19l+v+96f/3of+v/6//r//PQJWt/x9z/61hJjXJ/wAAAFAHMffvCDOR/wEAAKAyYu6/LcxE/gcAAIDKiLl/Z5hJTfK/z/8fiv5/pv+v/6//r/+v/782+v+96f/3of+v/6//r//PQJWt/x9z/yvDTGqS/wEAAKAOYu6/PcxE/gcAAIDKiLn/VWEm8j8AAABURsz9d4SZ1CT/6//r/+v/6//r/3dfv/7/cNL/703/vw/9f/1//X/9fwaqbP3/mPtfHWZSk/wPAAAAdRBz/51hJvI/AAAAVEbM/XeFmcj/AAAAUBkx90+HmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j77w4zqUn+BwAAgDqIuf+eMBP5HwAAACoj5v6ZMBP5HwAAACoj5v7ZMJOa5H/9f/1//X/9/3X1/1+xfL/6/wX9/3LR/+9N/78P/X/9/2ve/x/X/6dSytb/j7l/V5hJTfI/AAAA1EHM/bvDTOR/AAAAqIyY+/eEmcj/AAAAUBkx998bZlKT/K//r/+v/6//7/P/u69f/3846f/3Nvj+f3yI+v/6//r/Pv9f/5+Vytb/j7n/vjCTmuR/AAAAqIOY+/eGmcj/AAAAUBkx9+8LM5H/AQAAoDJi7t8fZlKT/K//r/+v/6//r//fff36/8NJ/783n//fh/6//v8Q9/+bx5b+P2VTtv5/zP0Hwkxqkv8BAACgDmLuf02YifwPAAAAlRFz/6+Fmcj/AAAAUBkx9/96mElN8r/+v/6//r/+f9n7/xP6//r/66D/35v+fx/6//r/Q9z/9/n/lFHZ+v8x998fZlKT/A8AAAB1EHP/b4SZyP8AAABQGTH3vzbMRP4HAACAyoi5/2CYSU3yv/7/BvX/44X6//r/+v8+/1///6rS/+9N/78P/X/9f/1//X8Gqmz9/5j7XxdmUpP8DwAAAHUQc/8DYSbyPwAAAFRGzP2vDzOR/wEAAKAyYu5/Q5hJTfK//r/P/7/2/f/xtm3X/1++nf5/Qf9f/3899P970//vQ/9f/1//X/+fgSpb/z/m/jeGmdQk/wMAAEAdxNz/pjAT+R8AAAAqI+b+N4eZyP8AAABQGTH3vyXMpCb5X/9f///a9/99/r/+f0H/X/9/EPT/e9P/70P/X/9f/1//n4EqW/8/5v7fDDOpSf4HAACAOoi5/8EwE/kfAAAAKiPm/reGmcj/AAAAUBkx978tzKQm+V//X/9f/1//X/+/+/r1/4eT/n9vQ9b//9X14XL9/4L+f7m3f739/7GOr69K//9Hq/X/lzZ13l7/n6uhbP3/mPvfHmZSk/wPAAAAdRBz/zvCTOR/AAAAqIyY+98ZZiL/AwAAQGXE3P9bYSY1yf/6/83tWG4v6//r/+cX6P/r/+v/Dy39/96GrP/v8/876P+Xe/t9/r/+PyuVrf8fc/+7wkxqkv8BAACgDmLufyjMRP4HAACAyoi5/91hJvI/AAAAVEbM/e8JM6lJ/tf/9/n/+v/6//r/3dev/z+c9P970//vQ/9f/79s/f//1P9nuJWt/x9z/8NhJjXJ/wAAAFAHMfe/N8xE/gcAAIDKiLn/t8NM5H8AAACojJj73xdmUpP8r/8/LP3/Kf3/dfb/J8Jl+v/6//r/9aL/35v+fx/6//r/Zev/+/x/hlzZ+v8x978/zGTt+X9yzUsCAAAA10TM/b8TZlKTv/8DAABAHcTc/7thJvI/AAAAVEbM/b8XZlKT/K//Pyz9f5//n/n8f/3/jsej/6//383G9f/jmUf/X/9f/z/S/9f/1/+nU9n6/zH3/36YSU3yPwAAANRBzP0fCDOR/wEAAGAodPt/sjvF3H8ozET+BwAAgMqIuf9wmElN8r/+v/6//n9J+/9/seNffvDddxzepf+v/6//vy4b+vn/zRe/z//X/9f/T/T/9f/1/+lUtv5/zP1HwkyWg9/bfMA/AAAADLeY+/8gzKQmf/8HAACAOoi5/2iYifwPAAAAlRFz/1yYSU3yv/6//r/+f0n7/0P8+f9xfwxT/3960xD1/+NJV/+/qw3t/793uSeu/7/e/v9E10s7+/8N/f82+v/r3v7vZFmm/6//zzVUtv5/zP3zYSY1yf8AAABQByH3jxwr5vIV8j8AAABURsz9x8NM5H8AAACojJj7PxhmUpP8r/+v/6//r//v8/+7r7+0/X+f/9+T/n9v5en/d+fz//X/h3n79f/1/1mpbP3/mPsXwkxqkv8BAACgDmLu/1CYifwPAAAAlRFz/4fDTOR/AAAAqIyY+0+EmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j7T4aZ1CT/AwAAQB3E3H8qzOT/2LuPJsvq847jt3FTzBQb77zwwt77JbAwa/sFeMHGC7vK5YWxjXNicI4454BtJRRQAAmhhHICJSSUhSSUc0AZSTUqmOd5Znr69LndM7e7z/0/n89CDzSMzkU1BfrRfDn2PwAAAAwjd//NcYv9DwAAAMPI3f/LcUuT/a//1/8P2///pP7/oOfr//X/I9P/z9P/r6H/1//r//X/bNTS+v/c/b8StzTZ/wAAANBB7v5fjVvsfwAAABhG7v5b4hb7HwAAAIaRu//X4pYm+/+y/n9n1bP/z4xX/z9S/+/9/wc+X/+v/x/Zyfb/tz3xZz79v/5f/x/0//p//T+XW1r/n7v/1+OWJvsfAAAAOsjd/xtxi/0PAAAAw8jd/5txi/0PAAAAw8jd/1txS5P97/3/3v+v/9f/6/+nn6//307e/z+vU/9/y8PX/9Jj9/7ofUd5vv5f/6//1/+zWUvr/3P3/3bc0mT/AwAAQAe5+38nbrH/AQAAYBi5+383brH/AQAAYAudnfxq7v7fi1ua7H/9v/5f/x/9/xn9v/5f/z8C/f+8Tv3/lTxf/6//1//r/9mspfX/uft/P25psv8BAACgg9z9fxC32P8AAACwXFP/IPaM3P23xi32PwAAAAwjd/+5uKXJ/tf/H3///339/3b0/97/r//X/w9B/z9P/7+G/l//r//X/7NRS+v/c/ffFrc02f8AAADQQe7+P4xb7H8AAAAYRu7+P4pb7H8AAAAYRu7+P45bmux//b/3/+v/9f/6/+nn6/+3k/5/nv5/Df3/1fbz1+r/9f/6fy51xP7/8Zk/bW+k/8/d/ydxS5P9DwAAAB3k7v/TuMX+BwAAgGHk7v+zuMX+BwAAgGHk7v/zuKXJ/tf/6//1//r/K+7/9//Ue5L+f5r+/2To/+ctpv/f2Z38sv5/6/t/7//X/+v/2WNp7//P3f8XcUuT/Q8AAAAd5O7/y7hlZv8f+W/mAwAAAKcqd/9fxS2+/w8AAABbL6uz3P1/Hbc02f/6f/2//l//7/3/08+f6//vu+Tz6f+XRf8/bzH9/wH0//r/bf78+n/9P/strf/P3f83cUuT/Q8AAAAd5O6/PW6x/wEAAGAYufv/Nm6x/wEAAGAYufv/Lm5psv+n+/+Lv13/fzj6/72fX/8//fNjU/1//jfq/2f7/xu9/78n/f88/f8a+n/9v/7/oP7/7Lofr/9nytL6/9z9fx+3NNn/AAAA0EHu/n+IW+x/AAAAGEbu/n+MW+x/AAAAGEbu/n+KW5rsf+//1//r/7ev//f+/wtO8/3/qxPv/3f1/4ek/5+n/19D/6//1//Pv/9/5t8CoP9nytL6/9z9/xy3NNn/AAAA0EHu/n+JW+x/AAAA2A6X/rMDl/8DpSF3/7/GLfY/AAAADCN3/7/FLePs/9l3der/9f/6f/2//n/6+cvq/73//7D0//P0/2vo/4+jn98drP+/46Afv4T+/9bj7v9n6P+Zsqf/v//i10+r/8/d/+9xyzj7HwAAANrL3f8fcYv9DwAAAMPI3f+fcYv9DwAAAMPI3f9fcUuT/X/s/f/Mv31A/6//1//r//X/+v9N0//P0/+vof/3/n/v/9f/s1F7+v9LnFb/n7v/v+OWJvsfAAAAOsjd/z9xi/0PAAAAw8jdf0fcYv8DAADAMHL3/2/c0mT/e/+//l//r//X/08/X/+/na6qv79G/1/0//p//b/+X//PBiyt/8/d/39xS5P9DwAAAB3k7v//uMX+BwAAgGHk7n9K3GL/AwAAwDBy9z81bmmy//X/x9v/59f1//r/lf5f/6//PxFt3/+/M/VXov0O6P8f/IVzP733K/p//b/+X/+v/+eQfnjmty2i/z9/8f9d5u5/WtzSZP8DAABAB7n7nx632P8AAAAwjNz9z4hb7H8AAAAYRu7+O+OWI+7/ueZhyfT/3v+v/9f/6/+nn6//305t+/9D8v7/NfT/+n/9v/6fjVpE/3/Jr+fuf2bc4vv/AAAAMIzc/c+KW+x/AAAAGEbu/mfHLfY/AAAADCN3/3Pilib7X/+v/9f/6//1/9PP1/9vJ/3/PP3/GtvU/995Ff3/7vSXT7ufv1qn/fn1//p/9lta/5+7/664pcn+BwAAgA5y9z83brH/AQAAYBi5+58Xt9j/AAAAMIzc/c+PW5rsf/2//l//r//X/08/X/+/nfT/8/T/q9Xq7pkPMNX/n79umf2/9/8v7vPr//X/7Le0/j93/wvilib7HwAAADrI3X933GL/AwAAwDBy998Tt9j/AAAAMIzc/S+MW5rsf/2//l//r//X/08/X/+/nfT/8/T/a2zT+//1/4v7/Pp//T/7La3/z93/orilyf4HAACADnL33xu32P8AAAAwjNz9L45b7H8AAAAYRu7+++KWJvtf/6//1//r//X/08/X/2+n4+v/V/p//b/+fw39v/5f/8/lltb/5+5/SdzSZP8DAABAB7n7Xxq32P8AAAAwjNz9L4tb7H8AAAAYRu7+l8ctTfa//l//r//X/+v/p5+v/99O3v8/T/+/hv5f/6//1/+zUdP9/62n1v/n7n9F3NJk/wMAAEAHufvvj1vsfwAAABhG7v5Xxi32PwAAAAwjd/+r4pYm+1//r//f2/+vVvp//b/+/4IT6P/PrPT/G6f/n6f/X0P/P2b/f81qoP7/7IE/Xv/PEi3t/f+5+18dtzTZ/wAAANBB7v7XxC32PwAAAAwjd/9r4xb7HwAAAIaRu/91cUuT/a//1/97/7/+X/8//Xzv/99O+v95+v819P9j9v/e/6//59Qsrf/P3f/6uKXJ/gcAAIAOcve/IW6x/wEAAGAYufvfGLfY/wAAADCM3P1vilua7H/9v/5f/6//1/9PP1//v530//P0/2vo//X/+n/9Pxu1tP4/d/+b45Ym+x8AAAA6yN3/QNxi/wMAAMAwcvc/GLfY/wAAADCM3P1viVua7H/9v/5f/7+d/f8Z/b/+X/8/aSn9/w03/NRD+n/9v/5f/6//1/93t7T+P3f/W+OWJvsfAAAAOsjd/7a4xf4HAACAYeTuf3vcYv8DAADAMHL3vyNuabL/9/f/164uFKoXTPX/0ajp/y+h/9/7+fX/0z8/vP9f/6//P35L6f+9///KPr/+X/+/zZ//SP3/j+//8fp/RrS0/j93/0NxS5P9DwAAAB3k7n9n3GL/AwAAwDBy978rbrH/AQAAYBi5+x+OW5rsf+//1//r//X/+v/p5+v/t5P+f57+fw39v/7f+/9v/rkf0v+zOUvr/3P3vztuabL/AQAAoIPc/e+JW+x/AAAAGEbu/vfGLfY/AAAADCN3//vilib7X/+v/9f/6//1/9PP1/9vJ/3/PP1/ufwP7YI+/f+ZqS+edj9/tU778w/T/3v/Pxu0tP4/d//745Ym+x8AAAA6yN3/gbjF/gcAAIBh5O7/YNxi/wMAAMAwcvd/KG5psv/1//r/8fv/n9X/X/Z8/b/+f2T6//wr+jT9/xp9+v9Jp93Pb/vn1//r/9lvaf1/7v5H4pYm+x8AAAA6yN3/4bjF/gcAAIBh5O7/SNxi/wMAAMAwcvd/NG5psv/1/736/51Vx/7f+//1//r/TvT/8/T/a+j/9f/6f/0/G7W0/j93/6M7uy33PwAAAGyrn/mJX3zksL/vo0/+55nVx+KWG1fnD/ltbAAAAGDhntj9O7ur1cef/DXf/wcAAIAR5e7/RNzSZP/r/3v1/z3f/6//1//r/zvR/8/T/6+h/9f/6//1/2zU0vr/3P2fjFsuGX67R/6jBAAAAJYkd/+n4pYm3/8HAACADnL3fzpu2bf//esAAQAAYFvl7v9M3NLk+//6/4X3/6tj6v/j99P/X6D/1/9PPV//v530//Ousv8/v6P/1//P0P/r//X/XG5p/X/u/s/GLU32PwAAAAxqz99RyN3/ubjF/gcAAIBh5O7/fNxi/wMAAMAwcvd/IW5psv/1/yfe/2eqfozv/z9bv+T9/837/9vPTD5f/6//H5n+f573/6+h/x+l/79O/6//ZxmW1v/n7v9i3NJk/wMAAEAHufu/FLfY/wAAADCM3P1fjlvsfwAAABhG7v6vxC1N9r/+f+Hv/7+i/v8Q7//X//fo/w94/jj9/49cf+6Bm37+nrv0/1x0kv1//lzQ/+v/9f8XLKj/9/5//T8Lsfn+f3fPF4/a/+fu/2rc0mT/AwAAQAe5+x+LW+x/AAAAGEbu/q/FLfY/AAAADCN3/9fjlib7X/+v/19K/5//W59C/3/uivv/s6vV6lT6/2yKu/f/3v+v/9/P+//n6f/X0P/r//X/+n82avP9/94vHrX/z93/jbilyf4HAACADnL3fzNuyf2/c+S/dQ8AAAAsTO7+b8Utvv8PAAAAw8jd/+24pcn+1//r/5fS/yfv/7/448Z6//9NFaf27P9/rH5J/3+89P/z9P9r6P/1//p//T8btbT+P3f/d+KWJvsfAAAAOsjd/3jcYv8DAADAMHL3fzdusf8BAABgGLn7vxe3NNn/+v9R+/8s4vX/+v+l9P/e/+/9/ydD/z9P/7+G/l//r//X/7NRS+v/c/f/IAAA//9GqnSo")
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000340)=ANY=[], 0x700, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000280), &(0x7f000000a440)=ANY=[], 0x90f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)

5.076946635s ago: executing program 7 (id=2119):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000004980)={0x0, 0x0, &(0x7f0000004940)={&(0x7f0000004900)={0x18, 0x140f, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x884}, 0x0)

5.076719681s ago: executing program 7 (id=2120):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000240), 0x4)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4)

5.017746377s ago: executing program 7 (id=2121):
syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@local, @random="a15cc14e96b3", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}}}}}}, 0x0)

5.01641865s ago: executing program 7 (id=2122):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303031373737373737373737372c6e6c733d63703934392c63726561746f723d7af940e22c63726561746f723d0aee18b02c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c63726561746f723d1362a84f2c001ff9431eef5603a24fd03ed91e53947f1c1b0db87d311ac2332606851a5634c431970f558844dd9de7c5411a6a043cd24b8dac907e9e8575657ddeae1a3b6113873ccbc19593f645cac58983c2694a9c166df86f5cc5fdb0a4f7285667940bab9d107a53ca4f3f986662f9c2050388a55392282348754d"], 0x1, 0x6f4, &(0x7f0000000680)="$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")
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000640)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r0, 0x10, 0x6, 0x10001)

4.899349268s ago: executing program 7 (id=2123):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000002880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[@hoplimit_2292={{0x14}}], 0x18}}], 0x1, 0x24001c00)

4.548360564s ago: executing program 7 (id=2125):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x108, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xd8, 0x2, {{0x4, 0x10000, 0x0, 0xffffffff}, [@TCA_NETEM_LOSS={0x9c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x8001, 0xfffffffc, 0x2, 0x5}}, @NETEM_LOSS_GE={0x14, 0x2, {0x3, 0x6, 0x5, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x409, 0xa4, 0x3, 0xc11a, 0x1}}, @NETEM_LOSS_GE={0xfffffffffffffeb5, 0x2, {0xfff, 0xd2b0, 0x80000002, 0x200}}, @NETEM_LOSS_GI={0x18, 0x1, {0x2, 0x30, 0xffffffff, 0x200, 0xfffffffa}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7ffd, 0x7, 0x3, 0x8, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x40000000, 0x1, 0x3, 0x4}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x108}, 0x1, 0x0, 0x0, 0x850}, 0x0)

4.423732645s ago: executing program 37 (id=2125):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x108, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xd8, 0x2, {{0x4, 0x10000, 0x0, 0xffffffff}, [@TCA_NETEM_LOSS={0x9c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x8001, 0xfffffffc, 0x2, 0x5}}, @NETEM_LOSS_GE={0x14, 0x2, {0x3, 0x6, 0x5, 0x81}}, @NETEM_LOSS_GI={0x18, 0x1, {0x409, 0xa4, 0x3, 0xc11a, 0x1}}, @NETEM_LOSS_GE={0xfffffffffffffeb5, 0x2, {0xfff, 0xd2b0, 0x80000002, 0x200}}, @NETEM_LOSS_GI={0x18, 0x1, {0x2, 0x30, 0xffffffff, 0x200, 0xfffffffa}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7ffd, 0x7, 0x3, 0x8, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x40000000, 0x1, 0x3, 0x4}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x108}, 0x1, 0x0, 0x0, 0x850}, 0x0)

3.700683763s ago: executing program 5 (id=2132):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)

3.469064158s ago: executing program 5 (id=2133):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r4, 0x0, 0x300}, 0x38)

2.827649512s ago: executing program 6 (id=2137):
ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000700)={'\x00', 0x6, 0x6bd, 0x4, 0x9, 0x2})
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
syz_usb_connect(0x17aff7a88c855ce9, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f00000001c0)=ANY=[]}]})
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x97, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000480)={0x0, 0x15, 0x2, "efe6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000180)={0x60, 0xa, 0x10, "6e56f55f13ba3b119fd04cadd22c96ec"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="24ed83030000002382e5"], 0x0, 0x0})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x10}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}}, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000000))
write$binfmt_misc(r2, &(0x7f0000001280), 0x6)

2.560221517s ago: executing program 5 (id=2138):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x4, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x20000080)

2.551477187s ago: executing program 5 (id=2139):
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x8000, 0x0, 0x0, 0x0, 0x33, 0x40, 0x0, 0xea})

2.469857307s ago: executing program 5 (id=2140):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={<r2=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000bc0)={0x6, 0x118, 0xfa00, {{0x1, 0x1, "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", 0x0, 0x4c, 0x9, 0x1f, 0xe9, 0x6, 0x5, 0x1}, r2}}, 0x120)

2.469570774s ago: executing program 5 (id=2141):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x300}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000600))
ioctl$sock_SIOCSPGRP(r0, 0x8902, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80240, 0x0)
mount$9p_tcp(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port='])
ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, r3, 0x0, 0x80, 0x2, 0x101, 0x0, {0x10000, 0xd6, 0x1c, 0x7, 0x7, 0x401, 0x7, 0xa, 0x0, 0x50, 0x8000, 0x7e9, 0x401, 0x5, "cb6f0dab3a0338057401a192419598961f50dc45c87d55b42a28b8f01c0e0e7a"}})

2.21979696s ago: executing program 6 (id=2142):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20)

1.199227366s ago: executing program 6 (id=2143):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000100)='.request_key_auth\x00', &(0x7f00000001c0)=@chain)

1.119338733s ago: executing program 6 (id=2144):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6a}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a)

1.029795004s ago: executing program 6 (id=2145):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x6001)
syz_open_dev$tty1(0xc, 0x4, 0x3)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x6}, 0x4)
setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x9, 0x0, 0x1, 0x8000}]}, 0x10)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r6, 0x84, 0x85, 0x0, 0x0)

0s ago: executing program 6 (id=2146):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x800700, &(0x7f0000000340)={[{@grpjquota}, {@discard}, {@norecovery}, {@noinit_itable}, {@test_dummy_encryption}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@jqfmt_vfsold}, {@dioread_lock}, {@noblock_validity}, {@nouid32}]}, 0x3, 0x465, &(0x7f0000000f00)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBi0YTDxhN9IDH2hZCWKihNRFCpBqDFxND1LPxaOJf4M2LUU8mXvVuSIhyAT3VzOwM7C67pYXtLnQ/n2SX92Ze+963b97Mm3m7BNC3RrK3JGJrRPwREUO1bGOBkdo/Vy+fnf738tnpJJaW3v47yctduXx2uixa/tyWIjOaRqSfJkUljeZPnzk+Va3Oniry4wsn3h+fP33muWMnpo7OHp09OXnw4IH9Ey++MPn8Mq3fuOI4s7iu7P5obs+u19+98Mb04Qvv/fJ91t6txf76ODplJAv8n6Vc3eYvs7cnO11Zj22rSycDPWwIq1KJiKy7BvPxPxSVuN55Q/HaJz1tHLCmsmvTMlfRxSVgHUtihcViZQWBu0V5oc/uf8tXl6Yed4RLL9dugLK4rxav2p6BSIsyg033t500EhGHF//7JnvFGj2HAACo9/n014fi2VbzvzQeqCu3vVhDGY6IeyNiR0TcFxE7I+L+iLzsgxHxUNuaNrTc2rw0dOP8J714y8GtQDb/e6lY22qc/5Wzv8pwpchty+MfTI4cq87uK/4mozG4MctPLFPHj6/+/kW7ffXzv+yV1V/OBYt2XBxoekA3M7UwlU9KO+DSxxG7B1rFn1xbCchu/XdFxO7V/ertZeLY09/taVfo5vEvowPrTEvfRjxV6//FaIq/lCy/Pjl+T1Rn942XR8WNfv3t/Fvt6r+t+Dsg6//Njcd/c5HhpH69dn71dZz/87O29zS3evxvSN7J+6U8q3w4tbBwaiJiQ3Iozzdsn7z+s2W+LJ/FP7q39fjfUUtsyt4ejojsIH4kIh6NiMeKtj8eEU9ExN5l4v/5lfb77oT+n2l5/rt2/Df1/+oTleM//dCu/pX1/4E8NVpsyc9/N7HSBt7O3w4AAADuFmn+GfgkHbuWTtOxsdpn+HfG5rQ6N7/wzJG5D07O1D4rPxyDafmka6jueehEslj8xlp+snhWXO7fXzw3/qqyKc+PTc9VZ3ocO/S7LW3Gf+avSq9bB6y5Vutoky3Xaxu+yAasA83jP23Mnnuzm40Busr3taF/3WT8p91qB9B9rv/Qv1qN/3NNeWsBsD65/kP/Mv6hfxn/0L+Mf+hLt/O9/n5OZKfMO6AZ1aGiH7tfe6S9jl1iLRKt/58mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu9X/AQAA//9l+OT1")
r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
getdents64(r0, 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

r after parsing attributes in process `syz.5.955'.
[  149.829231][   T33] kauditd_printk_skb: 19 callbacks suppressed
[  149.829300][   T33] audit: type=1326 audit(1756822683.165:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8458 comm="syz.0.954" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48138ebe9 code=0x7fc00000
[  150.006447][ T8482] loop6: detected capacity change from 0 to 8192
[  150.295592][   T54] Bluetooth: hci0: command tx timeout
[  150.780927][ T8512] netlink: 'syz.6.974': attribute type 30 has an invalid length.
[  150.850773][ T8516] loop6: detected capacity change from 0 to 8
[  150.985073][ T8499] ceph: No mds server is up or the cluster is laggy
[  150.985144][ T8502] ceph: No mds server is up or the cluster is laggy
[  150.990243][ T8505] ceph: No mds server is up or the cluster is laggy
[  151.507825][   T95] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  151.681708][   T95] usb 6-1: config 1 interface 0 has no altsetting 0
[  151.700184][   T95] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  151.703735][   T95] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.708363][   T95] usb 6-1: Product: syz
[  151.710309][   T95] usb 6-1: Manufacturer: syz
[  151.712150][   T95] usb 6-1: SerialNumber: syz
[  151.959176][   T95] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  151.971903][   T95] usb 6-1: USB disconnect, device number 5
[  151.983971][   T95] usblp0: removed
[  152.206382][ T8531] netlink: 36 bytes leftover after parsing attributes in process `syz.6.982'.
[  152.210808][ T8530] netlink: 36 bytes leftover after parsing attributes in process `syz.6.982'.
[  152.891808][ T8550] netlink: 'syz.0.991': attribute type 3 has an invalid length.
[  153.431669][ T8546] loop5: detected capacity change from 0 to 32768
[  153.458358][ T8546] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  153.484809][ T8546] XFS (loop5): Ending clean mount
[  153.540857][ T7961] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  153.574476][ T8554] loop0: detected capacity change from 0 to 40427
[  153.588669][ T8554] F2FS-fs (loop0): Wrong SSA boundary, start(3584) end(4096) blocks(0)
[  153.592249][ T8554] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  153.596204][ T8554] F2FS-fs (loop0): build fault injection type: 0x6
[  153.601158][ T8554] F2FS-fs (loop0): invalid crc value
[  153.649262][ T8554] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  153.653722][ T8554] F2FS-fs (loop0): Start checkpoint disabled!
[  153.676645][ T8554] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  153.681811][ T8554] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  154.221345][ T8583] netlink: 'syz.6.1002': attribute type 8 has an invalid length.
[  154.784753][ T8581] loop5: detected capacity change from 0 to 40427
[  154.789733][ T8581] F2FS-fs: heap/no_heap options were deprecated
[  154.797614][ T8581] F2FS-fs (loop5): invalid crc value
[  154.857883][ T8581] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  154.864146][ T8581] F2FS-fs (loop5): Start checkpoint disabled!
[  154.870386][ T8581] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  154.881767][   T33] audit: type=1800 audit(1756822688.225:37): pid=8581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1001" name="file1" dev="loop5" ino=10 res=0 errno=0
[  154.884908][ T8581] syz.5.1001: attempt to access beyond end of device
[  154.884908][ T8581] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  154.900795][ T8581] syz.5.1001: attempt to access beyond end of device
[  154.900795][ T8581] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  154.915381][ T8581] syz.5.1001: attempt to access beyond end of device
[  154.915381][ T8581] loop5: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  154.930406][ T8581] syz.5.1001: attempt to access beyond end of device
[  154.930406][ T8581] loop5: rw=2049, sector=45120, nr_sectors = 8 limit=40427
[  154.949133][ T8581] syz.5.1001: attempt to access beyond end of device
[  154.949133][ T8581] loop5: rw=2049, sector=45128, nr_sectors = 8 limit=40427
[  154.950076][   T33] audit: type=1800 audit(1756822688.295:38): pid=8597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1001" name="file1" dev="loop5" ino=10 res=0 errno=0
[  154.980491][ T8581] syz.5.1001: attempt to access beyond end of device
[  154.980491][ T8581] loop5: rw=2049, sector=45136, nr_sectors = 8 limit=40427
[  155.003859][ T8581] syz.5.1001: attempt to access beyond end of device
[  155.003859][ T8581] loop5: rw=2049, sector=45144, nr_sectors = 8 limit=40427
[  155.014202][ T8581] syz.5.1001: attempt to access beyond end of device
[  155.014202][ T8581] loop5: rw=2049, sector=45152, nr_sectors = 8 limit=40427
[  155.034349][ T8581] syz.5.1001: attempt to access beyond end of device
[  155.034349][ T8581] loop5: rw=2049, sector=45160, nr_sectors = 8 limit=40427
[  155.048604][ T8581] syz.5.1001: attempt to access beyond end of device
[  155.048604][ T8581] loop5: rw=2049, sector=45168, nr_sectors = 8 limit=40427
[  155.101838][ T8599] tipc: Started in network mode
[  155.104286][ T8599] tipc: Node identity 663e0aec516d, cluster identity 4711
[  155.114826][ T8599] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.136055][ T8599] syzkaller0: entered promiscuous mode
[  155.137330][ T1834] CPU: 1 UID: 0 PID: 1834 Comm: kworker/u10:3 Not tainted syzkaller #0 PREEMPT(full) 
[  155.137356][ T1834] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  155.137364][ T1834] Workqueue: writeback wb_workfn (flush-7:5)
[  155.137385][ T1834] Call Trace:
[  155.137390][ T1834]  <TASK>
[  155.137396][ T1834]  dump_stack_lvl+0x189/0x250
[  155.137415][ T1834]  ? __pfx_dump_stack_lvl+0x10/0x10
[  155.137429][ T1834]  ? __pfx_queue_work_on+0x10/0x10
[  155.137440][ T1834]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  155.137457][ T1834]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  155.137480][ T1834]  f2fs_handle_critical_error+0x37c/0x540
[  155.137503][ T1834]  f2fs_write_end_io+0x886/0xb60
[  155.137528][ T1834]  __submit_merged_bio+0x27a/0x6a0
[  155.137549][ T1834]  __submit_merged_write_cond+0x255/0x530
[  155.137570][ T1834]  f2fs_write_data_pages+0x261d/0x3000
[  155.137612][ T1834]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  155.137664][ T1834]  ? ktime_get+0x3e/0x1f0
[  155.137679][ T1834]  ? ktime_get+0x3e/0x1f0
[  155.137697][ T1834]  ? ktime_get+0x3e/0x1f0
[  155.137711][ T1834]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  155.137742][ T1834]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  155.137760][ T1834]  do_writepages+0x32e/0x550
[  155.137780][ T1834]  ? reacquire_held_locks+0x127/0x1d0
[  155.137792][ T1834]  ? writeback_sb_inodes+0x384/0x1010
[  155.137813][ T1834]  __writeback_single_inode+0x145/0xff0
[  155.137828][ T1834]  ? do_raw_spin_unlock+0x4d/0x240
[  155.137845][ T1834]  writeback_sb_inodes+0x6c7/0x1010
[  155.137859][ T1834]  ? lockdep_hardirqs_on+0x9c/0x150
[  155.137893][ T1834]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  155.137938][ T1834]  ? rcu_is_watching+0x15/0xb0
[  155.137957][ T1834]  wb_writeback+0x43b/0xaf0
[  155.138007][ T1834]  ? queue_io+0x3a1/0x590
[  155.138025][ T1834]  ? __pfx_wb_writeback+0x10/0x10
[  155.138046][ T1834]  ? _raw_spin_unlock_irq+0x23/0x50
[  155.138084][ T1834]  wb_workfn+0x409/0xef0
[  155.138107][ T1834]  ? __pfx_wb_workfn+0x10/0x10
[  155.138124][ T1834]  ? __lock_acquire+0xab9/0xd20
[  155.138148][ T1834]  ? process_scheduled_works+0x9ef/0x17b0
[  155.138165][ T1834]  ? _raw_spin_unlock_irq+0x23/0x50
[  155.138179][ T1834]  ? process_scheduled_works+0x9ef/0x17b0
[  155.138189][ T1834]  ? process_scheduled_works+0x9ef/0x17b0
[  155.138202][ T1834]  process_scheduled_works+0xae1/0x17b0
[  155.138234][ T1834]  ? __pfx_process_scheduled_works+0x10/0x10
[  155.138259][ T1834]  worker_thread+0x8a0/0xda0
[  155.138292][ T1834]  kthread+0x711/0x8a0
[  155.138308][ T1834]  ? __pfx_worker_thread+0x10/0x10
[  155.138320][ T1834]  ? __pfx_kthread+0x10/0x10
[  155.138335][ T1834]  ? _raw_spin_unlock_irq+0x23/0x50
[  155.138355][ T1834]  ? lockdep_hardirqs_on+0x9c/0x150
[  155.138369][ T1834]  ? __pfx_kthread+0x10/0x10
[  155.138384][ T1834]  ret_from_fork+0x3fc/0x770
[  155.138399][ T1834]  ? __pfx_ret_from_fork+0x10/0x10
[  155.138415][ T1834]  ? __switch_to_asm+0x39/0x70
[  155.138430][ T1834]  ? __switch_to_asm+0x33/0x70
[  155.138443][ T1834]  ? __pfx_kthread+0x10/0x10
[  155.138458][ T1834]  ret_from_fork_asm+0x1a/0x30
[  155.138485][ T1834]  </TASK>
[  155.138561][ T1834] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  155.142411][ T8599] syzkaller0: entered allmulticast mode
[  155.286456][ T8599] tipc: Resetting bearer <eth:syzkaller0>
[  155.291588][ T8598] tipc: Resetting bearer <eth:syzkaller0>
[  155.305091][ T8598] tipc: Disabling bearer <eth:syzkaller0>
[  155.348395][   T27] CPU: 1 UID: 0 PID: 27 Comm: kworker/u10:0 Not tainted syzkaller #0 PREEMPT(full) 
[  155.348409][   T27] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  155.348414][   T27] Workqueue: writeback wb_workfn (flush-7:0)
[  155.348427][   T27] Call Trace:
[  155.348431][   T27]  <TASK>
[  155.348434][   T27]  dump_stack_lvl+0x189/0x250
[  155.348446][   T27]  ? __pfx_dump_stack_lvl+0x10/0x10
[  155.348455][   T27]  ? __pfx_queue_work_on+0x10/0x10
[  155.348463][   T27]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  155.348473][   T27]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  155.348487][   T27]  f2fs_handle_critical_error+0x37c/0x540
[  155.348502][   T27]  f2fs_write_end_io+0x886/0xb60
[  155.348516][   T27]  __submit_merged_bio+0x27a/0x6a0
[  155.348529][   T27]  __submit_merged_write_cond+0x255/0x530
[  155.348542][   T27]  f2fs_write_data_pages+0x261d/0x3000
[  155.348567][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  155.348583][   T27]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  155.348605][   T27]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  155.348614][   T27]  ? look_up_lock_class+0x74/0x170
[  155.348629][   T27]  ? trace_f2fs_writepages+0x7f/0x200
[  155.348639][   T27]  ? f2fs_write_node_pages+0x478/0x6e0
[  155.348650][   T27]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  155.348666][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  155.348676][   T27]  do_writepages+0x32e/0x550
[  155.348689][   T27]  ? reacquire_held_locks+0x127/0x1d0
[  155.348696][   T27]  ? writeback_sb_inodes+0x384/0x1010
[  155.348709][   T27]  __writeback_single_inode+0x145/0xff0
[  155.348717][   T27]  ? do_raw_spin_unlock+0x4d/0x240
[  155.348727][   T27]  writeback_sb_inodes+0x6c7/0x1010
[  155.348748][   T27]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  155.348775][   T27]  ? rcu_is_watching+0x15/0xb0
[  155.348788][   T27]  wb_writeback+0x43b/0xaf0
[  155.348800][   T27]  ? queue_io+0x3a1/0x590
[  155.348810][   T27]  ? __pfx_wb_writeback+0x10/0x10
[  155.348822][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  155.348833][   T27]  wb_workfn+0x409/0xef0
[  155.348847][   T27]  ? __pfx_wb_workfn+0x10/0x10
[  155.348857][   T27]  ? __lock_acquire+0xab9/0xd20
[  155.348872][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  155.348881][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  155.348889][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  155.348895][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  155.348903][   T27]  process_scheduled_works+0xae1/0x17b0
[  155.348923][   T27]  ? __pfx_process_scheduled_works+0x10/0x10
[  155.348937][   T27]  worker_thread+0x8a0/0xda0
[  155.348956][   T27]  kthread+0x711/0x8a0
[  155.348966][   T27]  ? __pfx_worker_thread+0x10/0x10
[  155.349002][   T27]  ? __pfx_kthread+0x10/0x10
[  155.349011][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  155.349020][   T27]  ? lockdep_hardirqs_on+0x9c/0x150
[  155.349028][   T27]  ? __pfx_kthread+0x10/0x10
[  155.349037][   T27]  ret_from_fork+0x3fc/0x770
[  155.349047][   T27]  ? __pfx_ret_from_fork+0x10/0x10
[  155.349057][   T27]  ? __switch_to_asm+0x39/0x70
[  155.349065][   T27]  ? __switch_to_asm+0x33/0x70
[  155.349072][   T27]  ? __pfx_kthread+0x10/0x10
[  155.349081][   T27]  ret_from_fork_asm+0x1a/0x30
[  155.349097][   T27]  </TASK>
[  155.349100][   T27] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  155.443309][ T8604] loop5: detected capacity change from 0 to 4096
[  155.445687][ T8604] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  155.489165][ T8604] ntfs3(loop5): ino=19, mi_enum_attr
[  155.491090][ T8604] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  155.500838][ T8604] ntfs3(loop5): failed to convert "c46c" to iso8859-13
[  155.505148][ T8604] ntfs3(loop5): ino=20, mi_enum_attr
[  155.600113][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1015'.
[  155.736065][ T6391] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  155.845594][ T5318] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  155.895603][ T6391] usb 7-1: Using ep0 maxpacket: 8
[  155.902533][ T6391] usb 7-1: config index 0 descriptor too short (expected 74, got 45)
[  155.908393][ T6391] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  155.913323][ T6391] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  155.917738][ T6391] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  155.923216][ T6391] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  155.928400][ T6391] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  155.933833][ T6391] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  155.937736][ T6391] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.000422][ T5318] usb 1-1: unable to get BOS descriptor or descriptor too short
[  156.005006][ T5318] usb 1-1: not running at top speed; connect to a high speed hub
[  156.010764][ T5318] usb 1-1: config 8 has an invalid interface number: 24 but max is 0
[  156.014419][ T5318] usb 1-1: config 8 has no interface number 0
[  156.020520][ T5318] usb 1-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 64
[  156.025337][ T5318] usb 1-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 10
[  156.031990][ T5318] usb 1-1: config 8 interface 24 altsetting 2 endpoint 0x85 has invalid wMaxPacketSize 0
[  156.036499][ T5318] usb 1-1: config 8 interface 24 has no altsetting 0
[  156.044419][ T5318] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af
[  156.048679][ T5318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.052300][ T5318] usb 1-1: Product: syz
[  156.054316][ T5318] usb 1-1: Manufacturer: syz
[  156.057622][ T5318] usb 1-1: SerialNumber: syz
[  156.097576][ T8614] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  156.157343][ T6391] usb 7-1: GET_CAPABILITIES returned 0
[  156.159898][ T6391] usbtmc 7-1:16.0: can't read capabilities
[  156.351824][ T5318] vmk80xx 1-1:8.24: driver 'vmk80xx' failed to auto-configure device.
[  156.361345][ T5897] usb 7-1: USB disconnect, device number 5
[  156.362226][ T5318] vmk80xx 1-1:8.24: probe with driver vmk80xx failed with error -22
[  156.374050][ T5318] usb 1-1: USB disconnect, device number 13
[  156.958763][ T8624] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1019'.
[  156.995210][ T8626] 9pnet: Could not find request transport: f0xffffffffffffffff0xffffffffffffffffWN%/`ְfp7.O3̒0͹:xޙS
[  158.859896][ T8675] loop5: detected capacity change from 0 to 4096
[  158.885813][ T8675] ntfs3(loop5): ino=5, "/" mi_enum_attr
[  158.898598][ T8675] ntfs3(loop5): ino=5, "/" mi_enum_attr
[  158.952617][ T8677] openvswitch: netlink: Duplicate or invalid key (type 0).
[  158.956970][ T8677] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.090319][ T8695] loop5: detected capacity change from 0 to 131072
[  160.162759][ T8695] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0)
[  160.165828][ T8695] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  160.236043][ T8695] F2FS-fs (loop5): invalid crc value
[  160.372220][ T8695] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  160.383705][ T8695] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  160.386886][ T8695] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  160.520184][   T47] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  160.677165][   T47] usb 7-1: config 0 has an invalid interface number: 8 but max is 0
[  160.680150][   T47] usb 7-1: config 0 has no interface number 0
[  160.682183][   T47] usb 7-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  160.686472][   T47] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  160.700099][   T47] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  160.702822][   T47] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  160.705297][   T47] usb 7-1: Product: syz
[  160.710392][   T47] usb 7-1: SerialNumber: syz
[  160.713821][   T47] usb 7-1: config 0 descriptor??
[  160.716666][ T8686] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  160.720159][   T47] cm109 7-1:0.8: invalid payload size 64, expected 4
[  160.723846][   T47] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input7
[  160.786308][ T8715] loop5: detected capacity change from 0 to 512
[  160.790486][ T8715] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  160.798007][ T8715] EXT4-fs (loop5): 1 truncate cleaned up
[  160.802409][ T8715] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.821670][ T8715] syz.5.1050 (pid 8715) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  160.833285][ T8715] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload
[  160.838098][ T8722] netlink: 'syz.0.1056': attribute type 29 has an invalid length.
[  160.847596][ T8722] netlink: 'syz.0.1056': attribute type 29 has an invalid length.
[  160.871180][ T7961] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.006909][ T8733] loop0: detected capacity change from 0 to 512
[  161.021372][ T8733] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.027082][ T8733] ext4 filesystem being mounted at /333/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  161.052552][ T5856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.172996][ T8741] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1064'.
[  161.176759][ T8741] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1064'.
[  161.180642][ T8741] netlink: 'syz.0.1064': attribute type 6 has an invalid length.
[  161.195652][ T5897] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  161.346063][ T5897] usb 6-1: Using ep0 maxpacket: 32
[  161.350794][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.355977][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  161.359345][ T5897] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  161.362448][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.368527][ T5897] usb 6-1: config 0 descriptor??
[  161.634539][ T8766] loop0: detected capacity change from 0 to 128
[  161.639694][ T8766] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  161.647086][ T8766] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  161.792702][ T5897] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0
[  162.327612][ T5897] usb 6-1: USB disconnect, device number 6
[  162.381964][    C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  162.386002][    C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  162.388634][    C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  162.391177][ T6391] usb 7-1: USB disconnect, device number 6
[  162.393239][    C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  162.393248][    C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  162.423404][ T6391] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  162.446885][ T8776] all (unregistering): Released all slaves
[  162.834678][ T8789] input: syz1 as /devices/virtual/input/input8
[  162.846424][ T6391] usb 7-1: new low-speed USB device number 7 using dummy_hcd
[  162.997405][ T6391] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  163.000695][ T6391] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  163.009175][ T6391] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  163.014247][ T6391] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  163.021183][ T6391] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  163.024171][ T8800] dlm: Unknown command passed to DLM device : 11
[  163.024171][ T8800] 
[  163.030776][ T6391] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  163.034072][ T6391] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  163.040907][ T6391] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  163.047896][ T6391] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  163.052606][ T6391] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  163.062729][ T6391] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  163.069330][ T6391] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  163.073879][ T6391] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  163.079199][ T6391] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  163.083837][ T6391] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  163.084153][ T8802] loop5: detected capacity change from 0 to 4096
[  163.091484][ T8802] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  163.093759][ T6391] usb 7-1: string descriptor 0 read error: -22
[  163.097046][ T8802] ntfs3(loop5): ino=3, mi_enum_attr
[  163.098375][ T6391] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  163.104573][ T6391] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.116222][ T6391] adutux 7-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  163.318307][   T95] usb 7-1: USB disconnect, device number 7
[  163.908391][ T8820] loop6: detected capacity change from 0 to 128
[  163.912415][ T8820] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  163.928201][   T33] audit: type=1800 audit(1756822697.275:39): pid=8820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1097" name="bus" dev="loop6" ino=1048625 res=0 errno=0
[  163.957884][ T8821] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  163.957884][ T8821] The task syz.0.1096 (8821) triggered the difference, watch for misbehavior.
[  163.990798][ T1094] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  164.058443][ T8826] block nbd0: Unsupported socket: shutdown callout must be supported.
[  164.067712][ T6391] IPVS: starting estimator thread 0...
[  164.141999][ T8833] loop6: detected capacity change from 0 to 8
[  164.156665][ T8824] IPVS: using max 81 ests per chain, 194400 per kthread
[  164.209375][ T8833] unable to read fragment index table
[  164.231360][ T8835] blk_print_req_error: 5 callbacks suppressed
[  164.231371][ T8835] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  164.240511][ T8835] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32
[  164.391402][ T8837] loop6: detected capacity change from 0 to 1024
[  164.396159][ T8837] EXT4-fs: Ignoring removed orlov option
[  164.401141][ T8837] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  164.428271][ T8837] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.485934][ T8019] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.115753][ T6391] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  165.285557][ T6391] usb 7-1: Using ep0 maxpacket: 8
[  165.293063][ T6391] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  165.297855][ T6391] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping
[  165.302114][ T6391] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  165.310300][ T6391] usb 7-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[  165.313814][ T6391] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.317315][ T6391] usb 7-1: Product: syz
[  165.318920][ T6391] usb 7-1: Manufacturer: syz
[  165.320541][ T6391] usb 7-1: SerialNumber: syz
[  165.326437][ T6391] usb 7-1: config 0 descriptor??
[  165.334127][ T6391] imon_raw 7-1:0.0: IR endpoint missing
[  165.533814][ T5897] usb 7-1: USB disconnect, device number 8
[  165.675628][ T6391] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  165.828850][ T6391] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  165.832612][ T6391] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.838182][ T6391] usb 6-1: config 0 descriptor??
[  166.204972][ T8860] loop0: detected capacity change from 0 to 40427
[  166.209553][ T8860] F2FS-fs (loop0): build fault injection rate: 16
[  166.212438][ T8860] F2FS-fs (loop0): build fault injection type: 0x3bfe8d
[  166.217590][ T8860] F2FS-fs (loop0): invalid crc value
[  166.221234][ T8860] F2FS-fs (loop0): inject kmalloc in f2fs_kmalloc of f2fs_fill_super+0x4429/0x6ff0
[  166.225178][ T8860] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-12)
[  166.404417][ T8868] (unnamed net_device) (uninitialized): down delay (2) is not a multiple of miimon (100), value rounded to 0 ms
[  166.413957][ T8868] (unnamed net_device) (uninitialized): peer notification delay (8) is not a multiple of miimon (100), value rounded to 0 ms
[  166.444857][ T8868] 8021q: adding VLAN 0 to HW filter on device bond1
[  166.704008][ T8871] loop6: detected capacity change from 0 to 32768
[  166.708521][ T8871] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1117 (8871)
[  166.717967][ T8871] BTRFS info (device loop6 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  166.722674][ T8871] BTRFS info (device loop6 state S): using blake2b (blake2b-256-generic) checksum algorithm
[  166.776041][ T8871] BTRFS info (device loop6 state CS): enabling ssd optimizations
[  166.779269][ T8871] BTRFS info (device loop6 state CS): using spread ssd allocation scheme
[  166.784585][ T8871] BTRFS info (device loop6 state CS): turning off barriers
[  166.787742][ T8871] BTRFS info (device loop6 state CS): disabling log replay at mount time
[  166.791343][ T8871] BTRFS info (device loop6 state CS): enabling free space tree
[  166.794580][ T8871] BTRFS info (device loop6 state CS): ignoring bad roots
[  166.798106][ T8871] BTRFS info (device loop6 state CS): ignoring data csums
[  166.801109][ T8871] BTRFS info (device loop6 state CS): ignoring meta csums
[  166.804042][ T8871] BTRFS info (device loop6 state CS): ignoring unknown super block flags
[  166.807684][ T8871] BTRFS info (device loop6 state CS): force zlib compression, level 3
[  166.859140][ T8875] loop0: detected capacity change from 0 to 32768
[  166.861306][ T8019] BTRFS info (device loop6 state CS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  167.062051][ T6391] pegasus 6-1:0.0: can't reset MAC
[  167.064453][ T6391] pegasus 6-1:0.0: probe with driver pegasus failed with error -5
[  167.078497][ T6391] usb 6-1: USB disconnect, device number 7
[  167.449355][ T8900] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1123'.
[  167.452473][ T8900] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1123'.
[  167.975710][ T6391] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  168.126691][ T6391] usb 6-1: Using ep0 maxpacket: 16
[  168.130613][ T6391] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  168.134037][ T6391] usb 6-1: config 0 has no interface number 0
[  168.139040][ T6391] usb 6-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d
[  168.142813][ T6391] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.150086][ T6391] usb 6-1: Product: syz
[  168.155557][ T6391] usb 6-1: Manufacturer: syz
[  168.163534][ T6391] usb 6-1: SerialNumber: syz
[  168.168101][ T6391] usb 6-1: config 0 descriptor??
[  168.174333][ T6391] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  168.199852][ T6391] snd-usb-audio 6-1:0.1: probe with driver snd-usb-audio failed with error -2
[  168.383669][ T6391] usb 6-1: USB disconnect, device number 8
[  168.817527][ T8949] loop0: detected capacity change from 0 to 256
[  168.834218][ T8949] FAT-fs (loop0): bogus logical sector size 128
[  168.837235][ T8949] FAT-fs (loop0): Can't find a valid FAT filesystem
[  169.001712][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1146'.
[  169.011395][ T8954] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1146'.
[  169.057068][ T8958] input: syz1 as /devices/virtual/input/input9
[  169.640025][ T6208] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.730522][ T6208] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.821494][ T6208] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.942343][ T6208] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.953589][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  169.957715][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  169.963602][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  169.971201][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  169.974286][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  170.156890][ T8974] TCP: TCP_TX_DELAY enabled
[  170.189633][ T8956] syz.6.1147 (8956): drop_caches: 2
[  170.261769][ T8969] chnl_net:caif_netlink_parms(): no params data found
[  170.310027][ T6208] bridge_slave_1: left allmulticast mode
[  170.312055][ T6208] bridge_slave_1: left promiscuous mode
[  170.314058][ T6208] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.321389][ T6208] bridge_slave_0: left allmulticast mode
[  170.323372][ T6208] bridge_slave_0: left promiscuous mode
[  170.329927][ T6208] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.341186][ T8984] loop9: detected capacity change from 0 to 3
[  170.537546][   T95] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  170.685602][   T95] usb 6-1: Using ep0 maxpacket: 32
[  170.689345][   T95] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  170.693775][   T95] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  170.697970][   T95] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  170.701931][   T95] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.709285][   T95] usb 6-1: config 0 descriptor??
[  170.712288][   T95] hub 6-1:0.0: USB hub found
[  170.813728][ T6208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  170.818816][ T6208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  170.822670][ T6208] bond0 (unregistering): Released all slaves
[  170.914539][   T95] hub 6-1:0.0: 1 port detected
[  170.941767][ T6208] bond1 (unregistering): Released all slaves
[  171.020533][ T6208] tipc: Disabling bearer <eth:vlan0>
[  171.039160][ T6208] tipc: Left network mode
[  171.040264][ T8969] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.043640][ T8969] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.047644][ T8969] bridge_slave_0: entered allmulticast mode
[  171.051078][ T8969] bridge_slave_0: entered promiscuous mode
[  171.055265][ T8969] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.059053][ T8969] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.061647][ T8969] bridge_slave_1: entered allmulticast mode
[  171.067267][ T8969] bridge_slave_1: entered promiscuous mode
[  171.126360][ T8969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  171.134654][ T8969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  171.208487][ T8969] team0: Port device team_slave_0 added
[  171.215050][ T8969] team0: Port device team_slave_1 added
[  171.259446][ T8969] batman_adv: batadv0: Adding interface: batadv_slave_0
[  171.262361][ T8969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.280536][ T8969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  171.288845][ T6208] hsr_slave_0: left promiscuous mode
[  171.290416][ T8992] input: syz1 as /devices/virtual/input/input10
[  171.294075][ T6208] 0: left promiscuous mode
[  171.298328][ T6208] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.303083][ T6208] batman_adv: batadv0: Removing interface: batadv_slave_0
[  171.313290][ T6208] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.313522][ T6208] batman_adv: batadv0: Removing interface: batadv_slave_1
[  171.331628][ T6208] veth1_macvtap: left promiscuous mode
[  171.331679][ T6208] veth0_macvtap: left promiscuous mode
[  171.331783][ T6208] veth1_vlan: left promiscuous mode
[  171.331836][ T6208] veth0_vlan: left promiscuous mode
[  171.374214][ T8992] loop6: detected capacity change from 0 to 1024
[  171.378487][ T8992] EXT4-fs: Ignoring removed bh option
[  171.381499][ T8992] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  171.399404][ T8992] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  171.520325][   T95] hub 6-1:0.0: activate --> -90
[  171.744356][ T6208] team0 (unregistering): Port device team_slave_1 removed
[  171.779249][ T6208] team0 (unregistering): Port device team_slave_0 removed
[  171.923061][ T5318] usb 6-1: USB disconnect, device number 9
[  171.979444][ T8992] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.056047][ T5859] Bluetooth: hci2: command tx timeout
[  172.180897][ T9000] loop6: detected capacity change from 0 to 32768
[  172.187937][ T9000] (syz.6.1165,9000,0):ocfs2_verify_volume:2290 ERROR: found superblock with incorrect block size bits: found 265, should be 9, 10, 11, or 12
[  172.194027][ T9000] (syz.6.1165,9000,0):ocfs2_verify_volume:2331 ERROR: status = -22
[  172.199220][ T9000] (syz.6.1165,9000,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  172.203407][ T9000] (syz.6.1165,9000,0):ocfs2_fill_super:1177 ERROR: status = -22
[  172.263232][ T8969] batman_adv: batadv0: Adding interface: batadv_slave_1
[  172.268686][ T8969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.282245][ T8969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  172.351633][ T8969] hsr_slave_0: entered promiscuous mode
[  172.354900][ T8969] hsr_slave_1: entered promiscuous mode
[  172.367073][ T8969] debugfs: 'hsr0' already exists in 'hsr'
[  172.369253][ T8969] Cannot create hsr debugfs directory
[  172.544352][ T9008] loop6: detected capacity change from 0 to 1024
[  172.556350][ T9008] EXT4-fs: Ignoring removed nobh option
[  172.558770][ T9008] EXT4-fs: Ignoring removed bh option
[  172.590516][ T9008] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.632091][ T8019] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.649352][ T8969] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  172.670279][ T8969] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  172.684375][ T8969] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  172.702502][ T8969] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  172.860000][ T8969] 8021q: adding VLAN 0 to HW filter on device bond0
[  172.900530][ T8969] 8021q: adding VLAN 0 to HW filter on device team0
[  172.909128][ T3528] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.912232][ T3528] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.929132][ T3528] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.932203][ T3528] bridge0: port 2(bridge_slave_1) entered forwarding state
[  173.110834][ T8969] 8021q: adding VLAN 0 to HW filter on device batadv0
[  173.178815][ T5883] usb 7-1: new full-speed USB device number 9 using dummy_hcd
[  173.677666][ T8969] veth0_vlan: entered promiscuous mode
[  173.687883][ T8969] veth1_vlan: entered promiscuous mode
[  173.692286][ T5883] usb 7-1: config 0 has an invalid interface number: 207 but max is 0
[  173.697385][ T5883] usb 7-1: config 0 has no interface number 0
[  173.705351][ T5883] usb 7-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd
[  173.713009][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.714836][ T8969] veth0_macvtap: entered promiscuous mode
[  173.719334][ T5883] usb 7-1: Product: syz
[  173.721476][ T5883] usb 7-1: Manufacturer: syz
[  173.724333][ T5883] usb 7-1: SerialNumber: syz
[  173.728673][ T8969] veth1_macvtap: entered promiscuous mode
[  173.731951][ T5883] usb 7-1: config 0 descriptor??
[  173.742196][ T5883] qmi_wwan 7-1:0.207: bogus CDC Union: master=0, slave=1
[  173.747417][ T8969] batman_adv: batadv0: Interface activated: batadv_slave_0
[  173.758424][ T8969] batman_adv: batadv0: Interface activated: batadv_slave_1
[  173.769131][ T5864] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  173.775279][ T5864] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  173.782608][ T5864] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  173.788502][ T5864] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  173.866541][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.869910][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.904149][ T3525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.910099][ T3525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.000150][ T5883] qmi_wwan 7-1:0.207: probe with driver qmi_wwan failed with error -22
[  174.145780][ T5859] Bluetooth: hci2: command tx timeout
[  174.168418][ T9064] tmpfs: Bad value for 'mpol'
[  174.173175][ T9063] loop5: detected capacity change from 0 to 1024
[  174.211581][ T5883] usb 7-1: USB disconnect, device number 9
[  174.258571][ T9070] loop7: detected capacity change from 0 to 128
[  174.279098][ T9070] qnx4: no qnx4 filesystem (no root dir).
[  174.339445][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1191'.
[  174.342745][ T9076] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  174.346973][ T9076] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  174.913418][   T33] audit: type=1326 audit(1756822708.255:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9089 comm="syz.5.1197" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2378ebe9 code=0x7ffc0000
[  174.922657][   T33] audit: type=1326 audit(1756822708.265:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9089 comm="syz.5.1197" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2378ebe9 code=0x7ffc0000
[  174.934369][   T33] audit: type=1326 audit(1756822708.265:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9089 comm="syz.5.1197" exe="/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fcf2378ebe9 code=0x7ffc0000
[  174.949261][   T33] audit: type=1326 audit(1756822708.265:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9089 comm="syz.5.1197" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2378ebe9 code=0x7ffc0000
[  174.959367][   T33] audit: type=1326 audit(1756822708.265:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9089 comm="syz.5.1197" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2378ebe9 code=0x7ffc0000
[  175.267976][ T9106] netlink: 130984 bytes leftover after parsing attributes in process `syz.5.1204'.
[  175.290341][ T9107] loop7: detected capacity change from 0 to 4096
[  175.298392][ T9107] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.315258][ T8969] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.452596][ T9123] pim6reg1: entered promiscuous mode
[  175.454819][ T9123] pim6reg1: entered allmulticast mode
[  175.675631][ T5883] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  175.696557][ T9125] loop5: detected capacity change from 0 to 32768
[  175.700113][ T9125] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1213 (9125)
[  175.721709][ T9125] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  175.725749][ T9125] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm
[  175.760332][ T9125] BTRFS info (device loop5): enabling ssd optimizations
[  175.763468][ T9125] BTRFS info (device loop5): enabling free space tree
[  175.825599][ T5883] usb 8-1: Using ep0 maxpacket: 32
[  175.833438][ T5883] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  175.838274][ T5883] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  175.842533][ T5883] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  175.847340][ T5883] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.852901][ T5883] usb 8-1: config 0 descriptor??
[  175.859016][ T5883] hub 8-1:0.0: USB hub found
[  175.889256][ T7961] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  176.063044][ T5883] hub 8-1:0.0: 1 port detected
[  176.216963][ T5859] Bluetooth: hci2: command tx timeout
[  176.259370][ T9166] loop6: detected capacity change from 0 to 4096
[  176.266305][ T5883] hub 8-1:0.0: hub_hub_status failed (err = -71)
[  176.266343][ T5883] hub 8-1:0.0: config failed, can't get hub status (err -71)
[  176.269202][ T9166] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  176.277207][ T5883] usbhid 8-1:0.0: can't add hid device: -71
[  176.277255][ T5883] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  176.290577][ T9166] ntfs3(loop6): ino=19, mi_enum_attr
[  176.307828][ T5883] usb 8-1: USB disconnect, device number 2
[  176.367271][ T9174] loop5: detected capacity change from 0 to 256
[  176.370621][ T9174] exfat: Deprecated parameter 'utf8'
[  176.383712][   T33] audit: type=1800 audit(1756822709.725:45): pid=9174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1230" name="file2" dev="loop5" ino=1048630 res=0 errno=0
[  176.589882][ T9184] netlink: 'syz.6.1234': attribute type 1 has an invalid length.
[  177.346559][ T9189] loop7: detected capacity change from 0 to 32768
[  177.355378][ T9189] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1237 (9189)
[  177.371913][ T9189] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  177.385707][ T9189] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm
[  177.497980][ T9189] BTRFS info (device loop7): enabling ssd optimizations
[  177.501178][ T9189] BTRFS info (device loop7): enabling free space tree
[  177.504028][ T9189] BTRFS info (device loop7): use zstd compression, level 3
[  177.657892][ T8969] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  177.690846][ T9220] netlink: 304 bytes leftover after parsing attributes in process `syz.5.1246'.
[  177.968746][ T9226] Illegal XDP return value 4294967274 on prog  (id 121) dev N/A, expect packet loss!
[  178.135797][ T5859] Bluetooth: hci1: command tx timeout
[  178.296479][ T5859] Bluetooth: hci2: command tx timeout
[  178.338206][ T9240] block nbd7: Attempted send on invalid socket
[  178.341100][ T9240] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  178.348411][ T9240] block nbd7: Attempted send on invalid socket
[  178.351091][ T9240] I/O error, dev nbd7, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  178.530052][ T9244] loop6: detected capacity change from 0 to 512
[  178.543463][ T9244] usb usb8: check_ctrlrecip: process 9244 (syz.6.1255) requesting ep 01 but needs 81
[  178.555783][ T9244] usb usb8: usbfs: process 9244 (syz.6.1255) did not claim interface 0 before use
[  178.622359][   T33] audit: type=1326 audit(1756822711.965:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.5.1256" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2378ebe9 code=0x7ffc0000
[  178.642958][   T33] audit: type=1326 audit(1756822711.965:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.5.1256" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2378ebe9 code=0x7ffc0000
[  178.669291][   T33] audit: type=1326 audit(1756822711.965:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.5.1256" exe="/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fcf2378ebe9 code=0x7ffc0000
[  178.692038][   T33] audit: type=1326 audit(1756822711.965:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.5.1256" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2378ebe9 code=0x7ffc0000
[  178.856698][ T5904] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  179.027708][ T5904] usb 7-1: Using ep0 maxpacket: 8
[  179.033537][ T5904] usb 7-1: config index 0 descriptor too short (expected 30, got 18)
[  179.041857][ T5904] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  179.048782][ T5904] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.052114][ T5904] usb 7-1: Product: syz
[  179.053763][ T5904] usb 7-1: Manufacturer: syz
[  179.058773][ T5904] usb 7-1: SerialNumber: syz
[  179.063213][ T5904] usb 7-1: config 0 descriptor??
[  179.068180][ T5904] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  179.071768][ T5904] usb 7-1: setting power ON
[  179.074115][ T5904] dvb-usb: bulk message failed: -22 (2/0)
[  179.085114][ T5904] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  179.090075][ T5904] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  179.093735][ T5904] usb 7-1: media controller created
[  179.130434][ T5904] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  179.150865][ T5904] usb 7-1: selecting invalid altsetting 6
[  179.153417][ T5904] usb 7-1: digital interface selection failed (-22)
[  179.157464][ T5904] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  179.162074][ T5904] usb 7-1: setting power OFF
[  179.164288][ T5904] dvb-usb: bulk message failed: -22 (2/0)
[  179.173005][ T5904] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  179.178803][ T5904] (NULL device *): no alternate interface
[  179.218577][ T5904] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  179.281196][ T9279] overlayfs: failed to verify upper root origin
[  179.287946][ T5904] usb 7-1: USB disconnect, device number 10
[  179.628419][ T9291] loop5: detected capacity change from 0 to 32768
[  179.633715][ T9291] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1277 (9291)
[  179.647785][ T9291] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  179.651837][ T9291] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  179.780483][ T9291] BTRFS info (device loop5): enabling ssd optimizations
[  179.783450][ T9291] BTRFS info (device loop5): enabling free space tree
[  181.075092][ T9331] loop6: detected capacity change from 0 to 32768
[  181.078088][ T9331] XFS: ikeep mount option is deprecated.
[  181.079100][   T47] libceph: connect (1)[c::]:6789 error -101
[  181.090695][   T47] libceph: mon0 (1)[c::]:6789 connect error
[  181.155873][ T9331] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  181.206917][ T9331] XFS (loop6): Ending clean mount
[  181.215610][ T9331] XFS (loop6): Quotacheck needed: Please wait.
[  181.253537][ T9331] XFS (loop6): Quotacheck: Done.
[  181.363224][   T47] libceph: connect (1)[c::]:6789 error -101
[  181.367882][ T8019] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  181.372782][   T47] libceph: mon0 (1)[c::]:6789 connect error
[  181.401386][ T7961] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  181.730439][ T9359] loop6: detected capacity change from 0 to 512
[  181.733673][ T9359] EXT4-fs (loop6): bad geometry: first data block 0 is beyond end of filesystem (0)
[  181.825947][ T9365] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1298'.
[  181.834713][ T9335] ceph: No mds server is up or the cluster is laggy
[  181.914871][ T9368] loop5: detected capacity change from 0 to 256
[  181.929257][ T9368] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  181.933742][ T9368] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  181.943405][ T9368] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  182.090280][ T9377] loop5: detected capacity change from 0 to 4096
[  182.106421][ T9378] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  182.110369][ T9378] block device autoloading is deprecated and will be removed.
[  182.122944][ T9377] ntfs3(loop5): ino=5, "/" indx_read
[  182.126143][ T9377] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  182.239994][ T9375] loop6: detected capacity change from 0 to 32768
[  182.244367][ T9375] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1304 (9375)
[  182.258471][ T9375] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  182.262293][ T9375] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm
[  182.331671][ T9375] BTRFS info (device loop6): enabling ssd optimizations
[  182.333840][ T9375] BTRFS info (device loop6): enabling free space tree
[  182.337530][ T9375] BTRFS info (device loop6): use zstd compression, level 3
[  182.357541][ T8019] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  182.490959][ T9384] loop7: detected capacity change from 0 to 40427
[  182.501066][ T9384] F2FS-fs (loop7): build fault injection rate: 771
[  182.505699][ T9384] F2FS-fs (loop7): invalid crc value
[  182.555536][ T5883] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  182.566415][ T9384] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  182.570867][ T9384] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  182.587054][ T9384] F2FS-fs (loop7): access invalid blkaddr:2816
[  182.589780][ T9384] CPU: 1 UID: 0 PID: 9384 Comm: syz.7.1307 Not tainted syzkaller #0 PREEMPT(full) 
[  182.589796][ T9384] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  182.589803][ T9384] Call Trace:
[  182.589809][ T9384]  <TASK>
[  182.589815][ T9384]  dump_stack_lvl+0x189/0x250
[  182.589838][ T9384]  ? __pfx_dump_stack_lvl+0x10/0x10
[  182.589853][ T9384]  ? __pfx_f2fs_get_dnode_of_data+0x10/0x10
[  182.589880][ T9384]  __f2fs_is_valid_blkaddr+0xe52/0x14f0
[  182.589907][ T9384]  f2fs_map_blocks+0xd84/0x4130
[  182.589939][ T9384]  ? __page_table_check_zero+0x320/0x530
[  182.589973][ T9384]  ? __pfx_f2fs_map_blocks+0x10/0x10
[  182.589990][ T9384]  ? xa_load+0x60/0x210
[  182.590014][ T9384]  ? xa_load+0x1ea/0x210
[  182.590031][ T9384]  f2fs_mpage_readpages+0xcb2/0x1ac0
[  182.590063][ T9384]  ? __pfx_f2fs_mpage_readpages+0x10/0x10
[  182.590081][ T9384]  ? __folio_batch_add_and_move+0x20a/0xd20
[  182.590110][ T9384]  ? f2fs_readahead+0x177/0x330
[  182.590130][ T9384]  read_pages+0x17a/0x580
[  182.590153][ T9384]  ? __pfx_read_pages+0x10/0x10
[  182.590177][ T9384]  ? filemap_add_folio+0x1af/0x270
[  182.590199][ T9384]  page_cache_ra_unbounded+0x6b0/0x7b0
[  182.590232][ T9384]  f2fs_readdir+0x49b/0xa60
[  182.590261][ T9384]  ? __pfx_f2fs_readdir+0x10/0x10
[  182.590286][ T9384]  ? down_read_killable+0x1d1/0x350
[  182.590302][ T9384]  iterate_dir+0x399/0x570
[  182.590322][ T9384]  __se_sys_getdents64+0xe4/0x260
[  182.590340][ T9384]  ? __pfx___se_sys_getdents64+0x10/0x10
[  182.590354][ T9384]  ? __pfx_filldir64+0x10/0x10
[  182.590394][ T9384]  ? rcu_is_watching+0x15/0xb0
[  182.590413][ T9384]  ? do_syscall_64+0xbe/0x3b0
[  182.590428][ T9384]  do_syscall_64+0xfa/0x3b0
[  182.590438][ T9384]  ? lockdep_hardirqs_on+0x9c/0x150
[  182.590456][ T9384]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.590468][ T9384]  ? exc_page_fault+0x9f/0xf0
[  182.590483][ T9384]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.590494][ T9384] RIP: 0033:0x7fb07778ebe9
[  182.590507][ T9384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  182.590515][ T9384] RSP: 002b:00007fb0759ee038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  182.590528][ T9384] RAX: ffffffffffffffda RBX: 00007fb0779c5fa0 RCX: 00007fb07778ebe9
[  182.590536][ T9384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[  182.590542][ T9384] RBP: 00007fb077811e19 R08: 0000000000000000 R09: 0000000000000000
[  182.590550][ T9384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  182.590557][ T9384] R13: 00007fb0779c6038 R14: 00007fb0779c5fa0 R15: 00007fff8260d9c8
[  182.590601][ T9384]  </TASK>
[  182.723851][ T9410] bio_check_eod: 30 callbacks suppressed
[  182.723866][ T9410] syz.7.1307: attempt to access beyond end of device
[  182.723866][ T9410] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  182.737227][ T9410] syz.7.1307: attempt to access beyond end of device
[  182.737227][ T9410] loop7: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  182.743237][ T9384] F2FS-fs (loop7): access invalid blkaddr:2816
[  182.747855][ T9384] CPU: 1 UID: 0 PID: 9384 Comm: syz.7.1307 Not tainted syzkaller #0 PREEMPT(full) 
[  182.747871][ T9384] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  182.747879][ T9384] Call Trace:
[  182.747883][ T9384]  <TASK>
[  182.747890][ T9384]  dump_stack_lvl+0x189/0x250
[  182.747912][ T9384]  ? __pfx_dump_stack_lvl+0x10/0x10
[  182.747932][ T9384]  ? __pfx_f2fs_get_dnode_of_data+0x10/0x10
[  182.747958][ T9384]  __f2fs_is_valid_blkaddr+0xe52/0x14f0
[  182.747982][ T9384]  f2fs_map_blocks+0xd84/0x4130
[  182.748009][ T9384]  ? __page_table_check_zero+0x320/0x530
[  182.748044][ T9384]  ? __pfx_f2fs_map_blocks+0x10/0x10
[  182.748061][ T9384]  ? xa_load+0x60/0x210
[  182.748085][ T9384]  ? xa_load+0x1ea/0x210
[  182.748102][ T9384]  f2fs_mpage_readpages+0xcb2/0x1ac0
[  182.748131][ T9384]  ? __pfx_f2fs_mpage_readpages+0x10/0x10
[  182.748148][ T9384]  ? __folio_batch_add_and_move+0x20a/0xd20
[  182.748174][ T9384]  ? f2fs_readahead+0x177/0x330
[  182.748195][ T9384]  read_pages+0x17a/0x580
[  182.748217][ T9384]  ? __pfx_read_pages+0x10/0x10
[  182.748241][ T9384]  ? filemap_add_folio+0x1af/0x270
[  182.748262][ T9384]  page_cache_ra_unbounded+0x6b0/0x7b0
[  182.748295][ T9384]  f2fs_readdir+0x49b/0xa60
[  182.748323][ T9384]  ? __pfx_f2fs_readdir+0x10/0x10
[  182.748346][ T9384]  ? down_read_killable+0x1d1/0x350
[  182.748362][ T9384]  iterate_dir+0x399/0x570
[  182.748382][ T9384]  __se_sys_getdents64+0xe4/0x260
[  182.748398][ T9384]  ? __pfx___se_sys_getdents64+0x10/0x10
[  182.748411][ T9384]  ? __pfx_filldir64+0x10/0x10
[  182.748428][ T9384]  ? rcu_is_watching+0x15/0xb0
[  182.748444][ T9384]  ? do_syscall_64+0xbe/0x3b0
[  182.748459][ T9384]  do_syscall_64+0xfa/0x3b0
[  182.748470][ T9384]  ? lockdep_hardirqs_on+0x9c/0x150
[  182.748485][ T9384]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.748496][ T9384]  ? exc_page_fault+0x9f/0xf0
[  182.748513][ T9384]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.748524][ T9384] RIP: 0033:0x7fb07778ebe9
[  182.748534][ T9384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  182.748545][ T9384] RSP: 002b:00007fb0759ee038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  182.748559][ T9384] RAX: ffffffffffffffda RBX: 00007fb0779c5fa0 RCX: 00007fb07778ebe9
[  182.748593][ T9384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[  182.748601][ T9384] RBP: 00007fb077811e19 R08: 0000000000000000 R09: 0000000000000000
[  182.748608][ T9384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  182.748616][ T9384] R13: 00007fb0779c6038 R14: 00007fb0779c5fa0 R15: 00007fff8260d9c8
[  182.748636][ T9384]  </TASK>
[  182.749827][ T9384] syz.7.1307: attempt to access beyond end of device
[  182.749827][ T9384] loop7: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  182.912893][ T8969] syz-executor: attempt to access beyond end of device
[  182.912893][ T8969] loop7: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  182.919046][ T8969] CPU: 1 UID: 0 PID: 8969 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  182.919062][ T8969] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  182.919069][ T8969] Call Trace:
[  182.919075][ T8969]  <TASK>
[  182.919079][ T8969]  dump_stack_lvl+0x189/0x250
[  182.919101][ T8969]  ? __pfx_dump_stack_lvl+0x10/0x10
[  182.919116][ T8969]  ? __pfx_queue_work_on+0x10/0x10
[  182.919128][ T8969]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  182.919145][ T8969]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  182.919171][ T8969]  f2fs_handle_critical_error+0x37c/0x540
[  182.919194][ T8969]  f2fs_write_end_io+0x886/0xb60
[  182.919222][ T8969]  __submit_merged_bio+0x27a/0x6a0
[  182.919245][ T8969]  __submit_merged_write_cond+0x255/0x530
[  182.919266][ T8969]  f2fs_write_data_pages+0x261d/0x3000
[  182.919309][ T8969]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  182.919364][ T8969]  ? __mod_zone_page_state+0xd7/0x140
[  182.919387][ T8969]  ? folios_put_refs+0x560/0x640
[  182.919408][ T8969]  ? __pfx_folios_put_refs+0x10/0x10
[  182.919420][ T8969]  ? rcu_is_watching+0x15/0xb0
[  182.919440][ T8969]  ? __lock_acquire+0xab9/0xd20
[  182.919470][ T8969]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  182.919489][ T8969]  do_writepages+0x32e/0x550
[  182.919515][ T8969]  ? do_raw_spin_unlock+0x4d/0x240
[  182.919532][ T8969]  filemap_fdatawrite+0x199/0x240
[  182.919547][ T8969]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  182.919623][ T8969]  ? do_raw_spin_unlock+0x4d/0x240
[  182.919642][ T8969]  f2fs_sync_dirty_inodes+0x31f/0x830
[  182.919666][ T8969]  f2fs_write_checkpoint+0x95a/0x1df0
[  182.919703][ T8969]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  182.919748][ T8969]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  182.919761][ T8969]  ? kfree+0x18e/0x440
[  182.919777][ T8969]  ? kill_f2fs_super+0x298/0x6c0
[  182.919794][ T8969]  kill_f2fs_super+0x2c3/0x6c0
[  182.919812][ T8969]  ? __pfx_kill_f2fs_super+0x10/0x10
[  182.919821][ T8969]  ? radix_tree_delete_item+0x2b6/0x400
[  182.919844][ T8969]  ? shrinker_free+0x2ce/0x3e0
[  182.919859][ T8969]  deactivate_locked_super+0xbc/0x130
[  182.919877][ T8969]  cleanup_mnt+0x425/0x4c0
[  182.919891][ T8969]  ? lockdep_hardirqs_on+0x9c/0x150
[  182.919910][ T8969]  task_work_run+0x1d4/0x260
[  182.919934][ T8969]  ? __pfx_task_work_run+0x10/0x10
[  182.919948][ T8969]  ? __x64_sys_umount+0x122/0x160
[  182.919967][ T8969]  ? exit_to_user_mode_loop+0x40/0x110
[  182.919986][ T8969]  exit_to_user_mode_loop+0xec/0x110
[  182.920004][ T8969]  do_syscall_64+0x2bd/0x3b0
[  182.920014][ T8969]  ? lockdep_hardirqs_on+0x9c/0x150
[  182.920048][ T8969]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.920060][ T8969]  ? exc_page_fault+0x9f/0xf0
[  182.920077][ T8969]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.920089][ T8969] RIP: 0033:0x7fb07778ff17
[  182.920100][ T8969] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  182.920110][ T8969] RSP: 002b:00007fff8260cc58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  182.920122][ T8969] RAX: 0000000000000000 RBX: 00007fb077811c05 RCX: 00007fb07778ff17
[  182.920130][ T8969] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff8260cd10
[  182.920137][ T8969] RBP: 00007fff8260cd10 R08: 0000000000000000 R09: 0000000000000000
[  182.920142][ T8969] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff8260dda0
[  182.920151][ T8969] R13: 00007fb077811c05 R14: 000000000002ca02 R15: 00007fff8260dde0
[  182.920172][ T8969]  </TASK>
[  182.923101][ T8969] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  183.435541][ T5883] usb 6-1: Using ep0 maxpacket: 32
[  183.439981][ T5883] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[  183.442679][ T5883] usb 6-1: config 0 has no interface number 0
[  183.458158][ T5883] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  183.461718][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.464387][ T5883] usb 6-1: Product: syz
[  183.468548][ T5883] usb 6-1: Manufacturer: syz
[  183.470149][ T5883] usb 6-1: SerialNumber: syz
[  183.476126][ T5883] usb 6-1: config 0 descriptor??
[  183.480505][ T5883] smsc95xx v2.0.0
[  183.529212][ T9425] usb usb8: usbfs: process 9425 (syz.7.1317) did not claim interface 0 before use
[  183.697908][ T9421] loop6: detected capacity change from 0 to 32768
[  183.701309][ T9421] XFS: ikeep mount option is deprecated.
[  183.709766][ T9421] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  183.724293][ T9421] XFS (loop6): Ending clean mount
[  183.731964][ T9421] XFS (loop6): Quotacheck needed: Please wait.
[  183.768376][ T9421] XFS (loop6): Quotacheck: Done.
[  183.793918][ T8019] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  183.883991][ T5883] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  183.890583][ T5883] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  184.255611][   T47] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  184.407848][   T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  184.411869][   T47] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  184.417110][   T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.422517][   T47] usb 7-1: config 0 descriptor??
[  184.701314][ T5883] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  184.706299][ T5883] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71
[  184.714138][ T5883] usb 6-1: USB disconnect, device number 10
[  184.760649][ T9444] loop7: detected capacity change from 0 to 40427
[  184.764657][ T9444] F2FS-fs (loop7): extra_attr or flexible_inline_xattr feature is off
[  184.840072][   T47] lenovo 0003:17EF:6047.0007: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.6-1/input0
[  184.896227][ T9446] netlink: 'syz.7.1323': attribute type 4 has an invalid length.
[  185.032891][   T33] kauditd_printk_skb: 19 callbacks suppressed
[  185.032905][   T33] audit: type=1326 audit(1756822718.375:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9450 comm="syz.7.1325" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb07778ebe9 code=0x0
[  185.044814][   T47] lenovo 0003:17EF:6047.0007: Failed to switch F7/9/11 mode: -71
[  185.048957][   T47] lenovo 0003:17EF:6047.0007: Failed to switch middle button: -71
[  185.051972][   T47] lenovo 0003:17EF:6047.0007: Fn-lock setting failed: -71
[  185.055082][   T47] lenovo 0003:17EF:6047.0007: Sensitivity setting failed: -71
[  185.063579][   T47] usb 7-1: USB disconnect, device number 11
[  186.148465][ T5897] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  186.151802][ T9480] netlink: 300 bytes leftover after parsing attributes in process `syz.7.1338'.
[  186.327216][ T5897] usb 7-1: Using ep0 maxpacket: 32
[  186.334219][ T5897] usb 7-1: unable to get BOS descriptor or descriptor too short
[  186.339131][ T5897] usb 7-1: config 4 has an invalid interface number: 91 but max is 0
[  186.342722][ T5897] usb 7-1: config 4 has no interface number 0
[  186.674851][ T5897] usb 7-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=6c.05
[  186.677911][ T5897] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.681278][ T5897] usb 7-1: Product: syz
[  186.683091][ T5897] usb 7-1: Manufacturer: syz
[  186.685095][ T5897] usb 7-1: SerialNumber: syz
[  186.899707][ T5897] empeg 7-1:4.91: empeg converter detected
[  186.901628][ T5897] usb 7-1: active config #4 != 1 ??
[  186.905070][ T5897] usb 7-1: USB disconnect, device number 12
[  187.192655][ T9498] loop5: detected capacity change from 0 to 128
[  188.124796][ T9515] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1351'.
[  188.364528][ T9531] loop7: detected capacity change from 0 to 256
[  188.375161][ T9531] vfat: Bad value for 'nonumtail'
[  188.615777][   T24] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  188.765996][   T24] usb 8-1: Using ep0 maxpacket: 8
[  188.770018][   T24] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD9, changing to 0x89
[  188.774978][   T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 99, changing to 10
[  188.782416][   T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 34391, setting to 1024
[  188.787443][   T24] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  188.791019][   T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.799725][   T24] usb 8-1: config 0 descriptor??
[  188.802672][ T9531] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  189.018468][   T24] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  189.024855][   T24] usb 8-1: USB disconnect, device number 3
[  189.658911][ T9565] loop7: detected capacity change from 0 to 4096
[  189.668968][ T9565] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.767771][ T8969] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.054062][ T9610] loop5: detected capacity change from 0 to 32768
[  191.068186][ T9610] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  191.095385][ T7961] ocfs2: Unmounting device (7,5) on (node local)
[  191.219031][ T9624] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1397'.
[  191.222791][ T9624] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1397'.
[  191.280674][ T9628] loop5: detected capacity change from 0 to 2048
[  191.318787][ T9633] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  191.343302][   T33] audit: type=1800 audit(1756822724.685:70): pid=9628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1399" name="file2" dev="loop5" ino=16 res=0 errno=0
[  191.397046][ T9628] NILFS (loop5): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 4)
[  191.405080][ T9628] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=16)
[  191.414804][ T9628] Remounting filesystem read-only
[  191.479567][ T7961] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer
[  191.507589][ T9643] team_slave_0: entered promiscuous mode
[  191.510311][ T9643] team_slave_1: entered promiscuous mode
[  191.513968][ T9643] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  191.517413][ T9643] team0: Device macvtap1 is already an upper device of the team interface
[  191.523789][ T9643] team_slave_0: left promiscuous mode
[  191.526122][ T9643] team_slave_1: left promiscuous mode
[  191.689199][ T9647] loop5: detected capacity change from 0 to 32768
[  191.820079][ T9645] loop7: detected capacity change from 0 to 32768
[  191.823932][ T9645] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1408 (9645)
[  191.838790][ T9645] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  191.843169][ T9645] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm
[  191.931579][ T9645] BTRFS info (device loop7): rebuilding free space tree
[  191.942086][ T9645] BTRFS info (device loop7): allowing degraded mounts
[  191.944944][ T9645] BTRFS info (device loop7): enabling ssd optimizations
[  191.948180][ T9645] BTRFS info (device loop7): enabling free space tree
[  191.955640][ T9645] BTRFS info (device loop7): force clearing of disk cache
[  191.958719][ T9645] BTRFS info (device loop7): max_inline set to 0
[  192.012919][ T8969] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  192.151032][   T33] audit: type=1326 audit(1756822725.495:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9691 comm="syz.6.1424" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff329b8ebe9 code=0x0
[  192.165670][    T9] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  192.408211][ T9710] loop7: detected capacity change from 0 to 4096
[  192.413872][    T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  192.417501][    T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  192.437652][    T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  192.442957][ T9710] EXT4-fs (loop7): Test dummy encryption mode enabled
[  192.443934][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.450193][    T9] usb 6-1: Product: syz
[  192.452221][    T9] usb 6-1: Manufacturer: syz
[  192.454152][    T9] usb 6-1: SerialNumber: syz
[  192.511279][ T9710] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  192.559416][ T8969] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.669110][    T9] usb 6-1: 0:2 : does not exist
[  192.674126][    T9] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  192.698050][    T9] usb 6-1: USB disconnect, device number 11
[  192.719602][ T9723] loop7: detected capacity change from 0 to 4096
[  192.745416][ T9726] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  192.754381][   T33] audit: type=1800 audit(1756822726.095:72): pid=9723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1437" name="file1" dev="loop7" ino=15 res=0 errno=0
[  192.766298][ T9728] capability: warning: `syz.6.1439' uses 32-bit capabilities (legacy support in use)
[  193.979836][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  193.983908][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.136211][ T9766] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1456'.
[  194.145908][ T9766] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1456'.
[  194.149777][ T9766] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  195.119146][ T9789] loop7: detected capacity change from 0 to 512
[  195.122187][ T9789] EXT4-fs: Ignoring removed oldalloc option
[  195.137105][ T9789] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.1465: Parent and EA inode have the same ino 15
[  195.153265][ T9789] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.1465: Parent and EA inode have the same ino 15
[  195.163621][ T9789] EXT4-fs (loop7): 1 orphan inode deleted
[  195.169555][ T9789] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  195.202733][ T8969] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.703532][ T9821] loop7: detected capacity change from 0 to 256
[  195.708343][ T9821] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  195.712689][ T9821] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  195.718631][ T9821] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  197.230283][ T9875] loop7: detected capacity change from 0 to 512
[  197.233171][ T9875] EXT4-fs: Ignoring removed nomblk_io_submit option
[  197.236261][ T9875] EXT4-fs (loop7): filesystem is read-only
[  197.238487][ T9875] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  197.243829][ T9875] EXT4-fs (loop7): filesystem is read-only
[  197.248804][ T9875] EXT4-fs (loop7): orphan cleanup on readonly fs
[  197.251828][ T9875] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #16: comm syz.7.1501: iget: bad i_size value: 648518346341360424
[  197.259302][ T9875] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1501: couldn't read orphan inode 16 (err -117)
[  197.265939][ T9875] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  197.291388][ T8969] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.975832][   T47] usb 8-1: new full-speed USB device number 4 using dummy_hcd
[  198.169553][   T47] usb 8-1: unable to get BOS descriptor or descriptor too short
[  198.173137][   T47] usb 8-1: no configurations
[  198.176503][   T47] usb 8-1: can't read configurations, error -22
[  198.525520][ T9937] netlink: 'syz.6.1529': attribute type 10 has an invalid length.
[  198.534181][ T9937] 8021q: adding VLAN 0 to HW filter on device batadv0
[  198.541030][ T9937] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  199.002908][ T9975] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1548'.
[  199.035067][ T9971] loop7: detected capacity change from 0 to 512
[  199.053597][ T9971] EXT4-fs: Ignoring removed nobh option
[  199.070508][ T9971] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.081024][ T9971] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  199.100203][ T9971] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.1546: corrupted xattr block 33: bad e_name length
[  199.179822][ T9986] virtio-fs: tag </dev/md0> not found
[  199.254541][ T9971] EXT4-fs error (device loop7): ext4_get_inode_usage:884: inode #15: comm syz.7.1546: corrupted xattr block 33: bad e_name length
[  199.334600][ T9985] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1551'.
[  199.440282][ T8969] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.711041][T10004] loop5: detected capacity change from 0 to 1024
[  199.741514][T10004] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  199.777625][ T9998] loop7: detected capacity change from 0 to 32768
[  199.788454][ T7961] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.796776][ T9998] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  199.855155][ T9998] XFS (loop7): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  199.869388][ T9998] XFS (loop7): Starting recovery (logdev: internal)
[  199.883606][ T9998] XFS (loop7): Ending recovery (logdev: internal)
[  199.915650][ T8969] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  200.578135][T10043] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1573'.
[  200.692096][T10049] loop7: detected capacity change from 0 to 4096
[  200.696845][T10049] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512).
[  201.035791][   T47] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  201.187995][   T47] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  201.192189][   T47] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  201.197522][   T47] usb 8-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00
[  201.200943][   T47] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.204802][   T47] usb 8-1: config 0 descriptor??
[  201.612019][   T47] hid (null): report_id 393985501 is invalid
[  201.620324][   T47] macally 0003:060B:0001.0008: report_id 393985501 is invalid
[  201.623556][   T47] macally 0003:060B:0001.0008: item 0 4 1 8 parsing failed
[  201.627255][   T47] macally 0003:060B:0001.0008: probe with driver macally failed with error -22
[  201.813389][    T9] usb 8-1: USB disconnect, device number 6
[  202.991343][T10099] netlink: 'syz.6.1597': attribute type 10 has an invalid length.
[  202.997197][T10099] veth1_vlan: entered allmulticast mode
[  203.009224][T10099] team0: Device veth1_vlan failed to register rx_handler
[  203.522475][T10123] ceph: No source
[  203.582498][T10129] 9pnet_fd: Insufficient options for proto=fd
[  203.771647][T10141] loop7: detected capacity change from 0 to 4096
[  203.787971][T10141] ntfs3(loop7): ino=0, mi_enum_attr
[  203.791001][T10141] ntfs3(loop7): ino=0, mi_enum_attr
[  203.793746][T10141] ntfs3(loop7): Failed to load $MFT (-22).
[  203.910313][T10159] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  204.037798][T10173] 8021q: adding VLAN 0 to HW filter on device bond1
[  204.042085][T10176] netlink: 'syz.5.1634': attribute type 3 has an invalid length.
[  204.198766][T10189] loop5: detected capacity change from 0 to 64
[  204.255568][   T47] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  204.445626][   T47] usb 8-1: Using ep0 maxpacket: 16
[  204.473851][   T47] usb 8-1: config 0 has an invalid interface number: 217 but max is 0
[  204.478510][   T47] usb 8-1: config 0 has no interface number 0
[  204.515776][   T47] usb 8-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=32.5e
[  204.519804][   T47] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.523954][   T47] usb 8-1: Product: syz
[  204.526214][   T47] usb 8-1: Manufacturer: syz
[  204.528546][   T47] usb 8-1: SerialNumber: syz
[  204.553062][   T47] usb 8-1: config 0 descriptor??
[  204.580872][   T47] ttusb_dec_send_command: command bulk message failed: error -22
[  204.584744][   T47] ttusb-dec 8-1:0.217: probe with driver ttusb-dec failed with error -22
[  204.761770][ T6391] usb 8-1: USB disconnect, device number 7
[  204.865554][ T5883] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  205.015563][ T5883] usb 6-1: Using ep0 maxpacket: 8
[  205.019381][ T5883] usb 6-1: config 8 has an invalid interface number: 161 but max is 0
[  205.022418][ T5883] usb 6-1: config 8 has no interface number 0
[  205.024823][ T5883] usb 6-1: config 8 interface 161 has no altsetting 0
[  205.030060][ T5883] usb 6-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=60.da
[  205.033606][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.036571][ T5883] usb 6-1: Product: syz
[  205.038061][ T5883] usb 6-1: Manufacturer: syz
[  205.039820][ T5883] usb 6-1: SerialNumber: syz
[  205.250084][ T5883] net1080 6-1:8.161: probe with driver net1080 failed with error -22
[  205.255031][ T5883] usb 6-1: USB disconnect, device number 12
[  205.371482][T10213] netlink: 'syz.6.1651': attribute type 6 has an invalid length.
[  205.386849][T10213] netlink: 'syz.6.1651': attribute type 6 has an invalid length.
[  205.506608][T10211] loop7: detected capacity change from 0 to 40427
[  205.510676][T10211] F2FS-fs (loop7): invalid crc value
[  205.556338][T10211] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  205.566770][T10211] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  205.586490][T10211] syz.7.1650: attempt to access beyond end of device
[  205.586490][T10211] loop7: rw=34817, sector=53248, nr_sectors = 8 limit=40427
[  205.602574][   T33] audit: type=1800 audit(1756822738.925:73): pid=10211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1650" name="file1" dev="loop7" ino=10 res=0 errno=0
[  205.617519][ T8969] syz-executor: attempt to access beyond end of device
[  205.617519][ T8969] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  205.622313][ T8969] CPU: 1 UID: 0 PID: 8969 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  205.622324][ T8969] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  205.622328][ T8969] Call Trace:
[  205.622332][ T8969]  <TASK>
[  205.622335][ T8969]  dump_stack_lvl+0x189/0x250
[  205.622351][ T8969]  ? __pfx_dump_stack_lvl+0x10/0x10
[  205.622360][ T8969]  ? __pfx_queue_work_on+0x10/0x10
[  205.622367][ T8969]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  205.622378][ T8969]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  205.622392][ T8969]  f2fs_handle_critical_error+0x37c/0x540
[  205.622406][ T8969]  f2fs_write_end_io+0x886/0xb60
[  205.622421][ T8969]  __submit_merged_bio+0x27a/0x6a0
[  205.622433][ T8969]  __submit_merged_write_cond+0x255/0x530
[  205.622446][ T8969]  f2fs_write_data_pages+0x261d/0x3000
[  205.622470][ T8969]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  205.622499][ T8969]  ? __kernel_text_address+0xd/0x40
[  205.622508][ T8969]  ? unwind_get_return_address+0x4d/0x90
[  205.622516][ T8969]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  205.622527][ T8969]  ? unwind_next_frame+0xa5/0x2390
[  205.622551][ T8969]  ? rcu_is_watching+0x15/0xb0
[  205.622558][ T8969]  ? __kasan_check_byte+0x12/0x40
[  205.622574][ T8969]  ? __lock_acquire+0xab9/0xd20
[  205.622588][ T8969]  ? do_raw_spin_lock+0x121/0x290
[  205.622607][ T8969]  ? do_raw_spin_unlock+0x4d/0x240
[  205.622615][ T8969]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  205.622626][ T8969]  do_writepages+0x32e/0x550
[  205.622641][ T8969]  ? do_raw_spin_unlock+0x4d/0x240
[  205.622651][ T8969]  filemap_fdatawrite+0x199/0x240
[  205.622661][ T8969]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  205.622669][ T8969]  ? __pfx_SOFTIRQ_verbose+0x10/0x10
[  205.622697][ T8969]  ? do_raw_spin_unlock+0x4d/0x240
[  205.622707][ T8969]  f2fs_sync_dirty_inodes+0x31f/0x830
[  205.622721][ T8969]  f2fs_write_checkpoint+0x95a/0x1df0
[  205.622739][ T8969]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  205.622768][ T8969]  ? kill_f2fs_super+0x298/0x6c0
[  205.622777][ T8969]  kill_f2fs_super+0x2c3/0x6c0
[  205.622787][ T8969]  ? __pfx_kill_f2fs_super+0x10/0x10
[  205.622793][ T8969]  ? radix_tree_delete_item+0x2b6/0x400
[  205.622806][ T8969]  ? shrinker_free+0x2ce/0x3e0
[  205.622815][ T8969]  deactivate_locked_super+0xbc/0x130
[  205.622825][ T8969]  cleanup_mnt+0x425/0x4c0
[  205.622833][ T8969]  ? lockdep_hardirqs_on+0x9c/0x150
[  205.622844][ T8969]  task_work_run+0x1d4/0x260
[  205.622854][ T8969]  ? __pfx_task_work_run+0x10/0x10
[  205.622862][ T8969]  ? __x64_sys_umount+0x122/0x160
[  205.622873][ T8969]  ? exit_to_user_mode_loop+0x40/0x110
[  205.622885][ T8969]  exit_to_user_mode_loop+0xec/0x110
[  205.622895][ T8969]  do_syscall_64+0x2bd/0x3b0
[  205.622901][ T8969]  ? lockdep_hardirqs_on+0x9c/0x150
[  205.622910][ T8969]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.622916][ T8969]  ? exc_page_fault+0x9f/0xf0
[  205.622927][ T8969]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.622933][ T8969] RIP: 0033:0x7fb07778ff17
[  205.622941][ T8969] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  205.622947][ T8969] RSP: 002b:00007fff8260cc58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  205.622956][ T8969] RAX: 0000000000000000 RBX: 00007fb077811c05 RCX: 00007fb07778ff17
[  205.622960][ T8969] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff8260cd10
[  205.622964][ T8969] RBP: 00007fff8260cd10 R08: 0000000000000000 R09: 0000000000000000
[  205.622968][ T8969] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff8260dda0
[  205.622973][ T8969] R13: 00007fb077811c05 R14: 000000000003217c R15: 00007fff8260dde0
[  205.622985][ T8969]  </TASK>
[  205.623774][ T8969] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  205.858697][T10227] loop5: detected capacity change from 0 to 8192
[  205.869209][T10227] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  206.046438][T10227] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[  206.050362][T10227] FAT-fs (loop5): Filesystem has been set read-only
[  206.053888][T10227] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[  206.057430][T10227] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[  206.211339][ T7961] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[  206.371059][T10239] ALSA: mixer_oss: invalid OSS volume ''
[  206.976412][T10254] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1668'.
[  207.092734][T10256] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1669'.
[  208.492820][T10289] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1685'.
[  208.496894][T10289] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1685'.
[  209.292137][T10314] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1696'.
[  209.336852][ T5859] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  209.443655][T10332] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1705'.
[  209.495355][T10337] syz_tun: entered allmulticast mode
[  209.500223][T10338] loop7: detected capacity change from 0 to 1024
[  209.506824][T10336] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1707'.
[  209.537290][T10338] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  209.546076][T10338] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  209.571918][T10336] bond0: (slave bond_slave_0): Releasing backup interface
[  209.644939][   T40] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: comm kworker/u10:2: lblock 0 mapped to illegal pblock 0 (length 2)
[  209.658059][   T40] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 117
[  209.662454][   T40] EXT4-fs (loop7): This should not happen!! Data will be lost
[  209.662454][   T40] 
[  209.680479][ T8969] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  209.879187][T10355] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1715'.
[  210.107552][T10351] loop7: detected capacity change from 0 to 40427
[  210.110313][T10351] F2FS-fs: inline encryption not supported
[  210.129287][T10367] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  210.405722][ T5883] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  210.925992][ T5883] usb 6-1: Using ep0 maxpacket: 16
[  210.931694][ T5883] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  210.936640][ T5883] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  210.940621][ T5883] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  210.944574][ T5883] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023
[  210.949134][ T5883] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  210.956371][ T5883] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  210.959996][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  210.971423][ T5883] usb 6-1: SerialNumber: syz
[  210.987635][T10365] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  211.056329][T10416] loop7: detected capacity change from 0 to 256
[  211.084710][T10416] FAT-fs (loop7): Directory bread(block 64) failed
[  211.090069][T10416] FAT-fs (loop7): Directory bread(block 65) failed
[  211.092928][T10416] FAT-fs (loop7): Directory bread(block 66) failed
[  211.098517][T10416] FAT-fs (loop7): Directory bread(block 67) failed
[  211.101582][T10416] FAT-fs (loop7): Directory bread(block 68) failed
[  211.104312][T10416] FAT-fs (loop7): Directory bread(block 69) failed
[  211.115826][T10416] FAT-fs (loop7): Directory bread(block 70) failed
[  211.125847][T10416] FAT-fs (loop7): Directory bread(block 71) failed
[  211.132977][T10416] FAT-fs (loop7): Directory bread(block 72) failed
[  211.139253][T10416] FAT-fs (loop7): Directory bread(block 73) failed
[  211.197077][   T33] audit: type=1800 audit(1756822744.535:74): pid=10416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1732" name="cpu.stat" dev="loop7" ino=1048637 res=0 errno=0
[  211.218791][ T5883] cdc_acm 6-1:1.0: Control and data interfaces are not separated!
[  211.223889][ T5883] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -12
[  211.237822][ T5883] usb 6-1: USB disconnect, device number 13
[  211.875671][   T47] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  211.951744][T10452] loop5: detected capacity change from 0 to 32768
[  211.967090][T10452] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  212.013780][T10452] XFS (loop5): Ending clean mount
[  212.024067][T10452] XFS (loop5): Quotacheck needed: Please wait.
[  212.027512][   T47] usb 8-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a
[  212.031427][   T47] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.042611][   T47] usb 8-1: config 0 descriptor??
[  212.057534][T10452] XFS (loop5): Quotacheck: Done.
[  212.057694][   T47] gspca_main: xirlink-cit-2.14.0 probing 0545:800d
[  212.067913][   T47] input: xirlink-cit as /devices/platform/dummy_hcd.7/usb8/8-1/input/input11
[  212.104205][ T7961] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  212.264428][    T9] usb 8-1: USB disconnect, device number 8
[  212.687380][T10474] loop5: detected capacity change from 0 to 40427
[  212.693283][T10474] F2FS-fs (loop5): invalid crc value
[  212.754458][T10474] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  212.760939][T10474] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  212.783927][   T33] audit: type=1800 audit(1756822746.125:75): pid=10474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1753" name="file1" dev="loop5" ino=10 res=0 errno=0
[  212.798394][T10474] syz.5.1753: attempt to access beyond end of device
[  212.798394][T10474] loop5: rw=34817, sector=45096, nr_sectors = 128 limit=40427
[  212.847266][ T7961] syz-executor: attempt to access beyond end of device
[  212.847266][ T7961] loop5: rw=2049, sector=45224, nr_sectors = 8 limit=40427
[  212.853282][ T7961] CPU: 1 UID: 0 PID: 7961 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  212.853297][ T7961] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  212.853305][ T7961] Call Trace:
[  212.853309][ T7961]  <TASK>
[  212.853314][ T7961]  dump_stack_lvl+0x189/0x250
[  212.853334][ T7961]  ? __pfx_dump_stack_lvl+0x10/0x10
[  212.853350][ T7961]  ? __pfx_queue_work_on+0x10/0x10
[  212.853361][ T7961]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  212.853377][ T7961]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  212.853402][ T7961]  f2fs_handle_critical_error+0x37c/0x540
[  212.853424][ T7961]  f2fs_write_end_io+0x886/0xb60
[  212.853450][ T7961]  __submit_merged_bio+0x27a/0x6a0
[  212.853472][ T7961]  __submit_merged_write_cond+0x255/0x530
[  212.853501][ T7961]  f2fs_write_data_pages+0x261d/0x3000
[  212.853543][ T7961]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  212.853598][ T7961]  ? folios_put_refs+0x559/0x640
[  212.853618][ T7961]  ? __pfx_folios_put_refs+0x10/0x10
[  212.853628][ T7961]  ? rcu_is_watching+0x15/0xb0
[  212.853645][ T7961]  ? __lock_acquire+0xab9/0xd20
[  212.853673][ T7961]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  212.853712][ T7961]  do_writepages+0x32e/0x550
[  212.853739][ T7961]  ? do_raw_spin_unlock+0x4d/0x240
[  212.853758][ T7961]  filemap_fdatawrite+0x199/0x240
[  212.853775][ T7961]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  212.853832][ T7961]  ? do_raw_spin_unlock+0x4d/0x240
[  212.853850][ T7961]  f2fs_sync_dirty_inodes+0x31f/0x830
[  212.853877][ T7961]  f2fs_write_checkpoint+0x95a/0x1df0
[  212.853910][ T7961]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  212.853964][ T7961]  ? kill_f2fs_super+0x298/0x6c0
[  212.853982][ T7961]  kill_f2fs_super+0x2c3/0x6c0
[  212.854000][ T7961]  ? __pfx_kill_f2fs_super+0x10/0x10
[  212.854010][ T7961]  ? radix_tree_delete_item+0x2b6/0x400
[  212.854034][ T7961]  ? shrinker_free+0x2ce/0x3e0
[  212.854050][ T7961]  deactivate_locked_super+0xbc/0x130
[  212.854068][ T7961]  cleanup_mnt+0x425/0x4c0
[  212.854082][ T7961]  ? lockdep_hardirqs_on+0x9c/0x150
[  212.854101][ T7961]  task_work_run+0x1d4/0x260
[  212.854144][ T7961]  ? __pfx_task_work_run+0x10/0x10
[  212.854159][ T7961]  ? __x64_sys_umount+0x122/0x160
[  212.854179][ T7961]  ? exit_to_user_mode_loop+0x40/0x110
[  212.854199][ T7961]  exit_to_user_mode_loop+0xec/0x110
[  212.854216][ T7961]  do_syscall_64+0x2bd/0x3b0
[  212.854227][ T7961]  ? lockdep_hardirqs_on+0x9c/0x150
[  212.854241][ T7961]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.854253][ T7961]  ? exc_page_fault+0x9f/0xf0
[  212.854272][ T7961]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.854283][ T7961] RIP: 0033:0x7fcf2378ff17
[  212.854295][ T7961] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  212.854305][ T7961] RSP: 002b:00007ffdb1c5bcb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  212.854319][ T7961] RAX: 0000000000000000 RBX: 00007fcf23811c05 RCX: 00007fcf2378ff17
[  212.854327][ T7961] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdb1c5bd70
[  212.854334][ T7961] RBP: 00007ffdb1c5bd70 R08: 0000000000000000 R09: 0000000000000000
[  212.854340][ T7961] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdb1c5ce00
[  212.854348][ T7961] R13: 00007fcf23811c05 R14: 0000000000033edf R15: 00007ffdb1c5ce40
[  212.854371][ T7961]  </TASK>
[  212.990976][    C1] vkms_vblank_simulate: vblank timer overrun
[  212.999114][ T7961] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  213.000290][T10498] loop7: detected capacity change from 0 to 16
[  213.004851][T10498] MTD: Attempt to mount non-MTD device "/dev/loop7"
[  213.683241][T10502] loop7: detected capacity change from 0 to 32768
[  213.689152][T10502] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1766 (10502)
[  213.699444][T10502] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  213.703631][T10502] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  213.736904][T10502] BTRFS info (device loop7): enabling ssd optimizations
[  213.740332][T10502] BTRFS info (device loop7): enabling free space tree
[  213.783015][ T8969] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  214.788064][T10571] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1787'.
[  214.791813][T10571] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1787'.
[  214.799442][T10571] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1787'.
[  214.803304][T10571] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1787'.
[  215.117019][T10577] loop5: detected capacity change from 0 to 40427
[  215.120977][T10577] F2FS-fs (loop5): build fault injection rate: 14
[  215.123714][T10577] F2FS-fs (loop5): build fault injection type: 0x77fd1
[  215.129360][T10577] F2FS-fs (loop5): invalid crc value
[  215.141397][T10577] F2FS-fs (loop5): inject kmalloc in f2fs_kmalloc of f2fs_fill_super+0x4429/0x6ff0
[  215.145244][T10577] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-12)
[  215.465648][ T5318] usb 8-1: new full-speed USB device number 9 using dummy_hcd
[  215.622960][ T5318] usb 8-1: config 8 has an invalid interface number: 95 but max is 0
[  215.627644][ T5318] usb 8-1: config 8 has no interface number 0
[  215.634237][ T5318] usb 8-1: New USB device found, idVendor=05ac, idProduct=024a, bcdDevice=29.78
[  215.638483][ T5318] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.641932][ T5318] usb 8-1: Product: syz
[  215.643806][ T5318] usb 8-1: Manufacturer: syz
[  215.646207][ T5318] usb 8-1: SerialNumber: syz
[  215.911218][ T5318] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:8.95/input/input12
[  215.920610][ T5285] bcm5974 8-1:8.95: could not read from device
[  215.925644][ T5285] bcm5974 8-1:8.95: could not read from device
[  215.937272][ T5285] bcm5974 8-1:8.95: could not read from device
[  215.937656][ T5318] usb 8-1: USB disconnect, device number 9
[  215.948704][ T5285] bcm5974 8-1:8.95: could not read from device
[  216.394769][T10602] veth3: entered promiscuous mode
[  216.397339][T10602] veth3: entered allmulticast mode
[  216.603895][T10607] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  216.644702][    C1] Unknown status report in ack skb
[  216.712191][T10616] openvswitch: netlink: Key type 40 is out of range max 32
[  216.746769][T10618] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1808'.
[  216.834104][T10626] netlink: 'syz.7.1812': attribute type 3 has an invalid length.
[  216.839785][T10626] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.1812'.
[  217.013333][T10648] loop5: detected capacity change from 0 to 164
[  217.030784][T10648] iso9660: Corrupted directory entry in block 4 of inode 1792
[  217.206802][ T5318] usb 8-1: new full-speed USB device number 10 using dummy_hcd
[  217.366940][ T5318] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  217.371016][ T5318] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  217.375135][ T5318] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  217.381727][ T5318] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  217.384881][ T5318] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.389078][ T5318] usb 8-1: Product: syz
[  217.390765][ T5318] usb 8-1: Manufacturer: syz
[  217.392598][ T5318] usb 8-1: SerialNumber: syz
[  217.399951][ T5318] usb 8-1: config 0 descriptor??
[  217.402527][T10638] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  217.408838][ T5318] usb 8-1: ucan: probing device on interface #0
[  217.412221][ T5318] usb 8-1: ucan: invalid in_ep MaxPacketSize
[  217.414822][ T5318] usb 8-1: ucan: probe failed; try to update the device firmware
[  217.458656][T10680] loop5: detected capacity change from 0 to 256
[  217.472501][   T33] audit: type=1804 audit(1756822750.815:76): pid=10680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1838" name="/newroot/348/bus/file0" dev="loop5" ino=1048638 res=1 errno=0
[  217.518265][T10682] loop5: detected capacity change from 0 to 256
[  217.549548][T10682] FAT-fs (loop5): IO charset cp863 not found
[  217.613339][ T5883] usb 8-1: USB disconnect, device number 10
[  217.730205][T10690] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  217.964073][T10697] netlink: 'syz.6.1845': attribute type 6 has an invalid length.
[  217.967848][T10697] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1845'.
[  219.092969][T10723] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1858'.
[  219.096733][T10723] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1858'.
[  219.135422][ T5318] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  219.297870][ T5318] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  219.302155][ T5318] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  219.306899][ T5318] usb 8-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  219.310644][ T5318] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.318131][ T5318] usb 8-1: config 0 descriptor??
[  219.340472][T10731] bridge1: the hash_elasticity option has been deprecated and is always 16
[  219.344685][T10731] bridge1: entered allmulticast mode
[  219.742013][ T5318] hid-led 0003:0FC5:B080.0009: unknown main item tag 0x0
[  219.946679][ T5318] hid-led 0003:0FC5:B080.0009: probe with driver hid-led failed with error -71
[  219.953268][ T5318] usb 8-1: USB disconnect, device number 11
[  220.220200][T10756] netlink: 'syz.6.1872': attribute type 2 has an invalid length.
[  221.365241][T10785] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1883'.
[  221.369033][T10785] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1883'.
[  221.372733][T10785] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1883'.
[  222.527171][T10803] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  223.043052][T10833] netlink: 'syz.7.1904': attribute type 5 has an invalid length.
[  223.072520][   T33] audit: type=1326 audit(1756822756.416:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10834 comm="syz.5.1905" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2378ebe9 code=0x7ffc0000
[  223.110937][   T33] audit: type=1326 audit(1756822756.426:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10834 comm="syz.5.1905" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2378ebe9 code=0x7ffc0000
[  223.143669][   T33] audit: type=1326 audit(1756822756.426:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10834 comm="syz.5.1905" exe="/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fcf2378ebe9 code=0x7ffc0000
[  223.152366][   T33] audit: type=1326 audit(1756822756.426:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10834 comm="syz.5.1905" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2378ebe9 code=0x7ffc0000
[  223.163778][   T33] audit: type=1326 audit(1756822756.426:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10834 comm="syz.5.1905" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2378ebe9 code=0x7ffc0000
[  223.176072][   T33] audit: type=1326 audit(1756822756.426:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10834 comm="syz.5.1905" exe="/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fcf2378ebe9 code=0x7ffc0000
[  223.185130][   T33] audit: type=1326 audit(1756822756.426:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10834 comm="syz.5.1905" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2378ebe9 code=0x7ffc0000
[  223.225274][T10845] netlink: 196 bytes leftover after parsing attributes in process `syz.7.1910'.
[  223.229134][T10845] netlink: 196 bytes leftover after parsing attributes in process `syz.7.1910'.
[  223.232799][T10845] netlink: 19 bytes leftover after parsing attributes in process `syz.7.1910'.
[  224.575832][T10888] vcan0: tx drop: invalid sa for name 0x00000000000000f0
[  225.508856][T10908] loop5: detected capacity change from 0 to 16
[  225.530298][T10908] erofs (device loop5): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  225.539099][T10908] erofs (device loop5): mounted with root inode @ nid 36.
[  225.568790][T10908] erofs (device loop5): corrupted dir block 0 @ nid 36
[  225.575851][T10908] erofs (device loop5): corrupted dir block 0 @ nid 36
[  225.598895][T10908] erofs (device loop5): corrupted dir block 0 @ nid 36
[  226.142478][T10924] loop7: detected capacity change from 0 to 32768
[  226.243770][T10924] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  226.243788][T10924]   allowing incompatible features above 0.0: (unknown version)
[  226.243794][T10924]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  226.258910][T10924] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0
[  226.261619][T10924] bcachefs (loop7): initializing new filesystem
[  226.270069][T10924] bcachefs (loop7): going read-write
[  226.278309][T10924] bcachefs (loop7): marking superblocks
[  226.285525][T10924] bcachefs (loop7): initializing freespace
[  226.289728][T10924] bcachefs (loop7): done initializing freespace
[  226.293320][T10924] bcachefs (loop7): reading snapshots table
[  226.296070][T10924] bcachefs (loop7): reading snapshots done
[  226.330603][T10924] bcachefs (loop7): done starting filesystem
[  226.644206][T10956] loop5: detected capacity change from 0 to 512
[  226.688602][T10956] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  226.692792][T10956] ext4 filesystem being mounted at /386/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  226.957541][ T7961] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  227.105811][T10966] mkiss: ax0: crc mode is auto.
[  227.187116][T10966] Falling back ldisc for ttyS3.
[  227.317373][T10969] pim6reg: entered allmulticast mode
[  227.399292][T10973] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1961'.
[  227.767952][ T8969] bcachefs (loop7): shutting down
[  227.770197][ T8969] bcachefs (loop7): going read-only
[  227.774972][ T8969] bcachefs (loop7): finished waiting for writes to stop
[  227.780445][ T8969] bcachefs (loop7): flushing journal and stopping allocators, journal seq 3
[  227.792780][ T8969] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 4
[  227.796723][ T8969] bcachefs (loop7): clean shutdown complete, journal seq 5
[  227.799412][ T8969] bcachefs (loop7): marking filesystem clean
[  227.811967][ T8969] bcachefs (loop7): shutdown complete
[  227.864969][ T5904] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  228.014845][ T5904] usb 6-1: Using ep0 maxpacket: 16
[  228.018990][ T5904] usb 6-1: config 0 interface 0 has no altsetting 0
[  228.024002][ T5904] usb 6-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=48.e3
[  228.028221][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.031459][ T5904] usb 6-1: Product: syz
[  228.033199][ T5904] usb 6-1: Manufacturer: syz
[  228.046778][ T5904] usb 6-1: SerialNumber: syz
[  228.051006][ T5904] usb 6-1: config 0 descriptor??
[  228.146009][T10989] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1970'.
[  228.158386][T10989] bond_slave_0: entered promiscuous mode
[  228.161198][T10989] batadv0: entered promiscuous mode
[  228.166701][T10989] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  228.171262][T10989] bond_slave_0: left promiscuous mode
[  228.173541][T10989] batadv0: left promiscuous mode
[  228.266338][ T5904] usb 6-1: USB disconnect, device number 14
[  228.897271][T11008] loop5: detected capacity change from 0 to 256
[  228.900715][T11008] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  228.915065][T11008] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  228.927921][T11008] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  229.029957][T11018] Invalid ELF header magic: != ELF
[  229.130676][T11028] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  229.191544][T11032] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1990'.
[  229.216191][T11024] loop7: detected capacity change from 0 to 32768
[  229.233414][T11024] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  229.308846][ T8969] (syz-executor,8969,1):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[  229.317471][ T8969] ocfs2: Unmounting device (7,7) on (node local)
[  229.433322][T11043] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  230.064802][T11057] netlink: 159784 bytes leftover after parsing attributes in process `syz.7.2000'.
[  230.204557][T11074] loop7: detected capacity change from 0 to 256
[  230.208805][T11074] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  230.282051][T11082] netlink: 'syz.7.2011': attribute type 21 has an invalid length.
[  231.588126][T11101] binder: 11100:11101 ioctl c0306201 200000000080 returned -14
[  231.659067][   T33] audit: type=1326 audit(1756822765.006:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11095 comm="syz.7.2015" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07778ebe9 code=0x7ffc0000
[  231.727126][   T33] audit: type=1326 audit(1756822765.006:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11095 comm="syz.7.2015" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07778ebe9 code=0x7ffc0000
[  232.644953][ T5318] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  232.794603][ T5318] usb 8-1: Using ep0 maxpacket: 16
[  232.810316][ T5318] usb 8-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=91.ed
[  232.824651][ T5318] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.828008][ T5318] usb 8-1: Product: syz
[  232.831376][ T5318] usb 8-1: Manufacturer: syz
[  232.833402][ T5318] usb 8-1: SerialNumber: syz
[  232.854180][ T5318] usb 8-1: config 0 descriptor??
[  232.860138][ T5318] s2255 8-1:0.0: Could not find bulk-in endpoint
[  232.870375][T11130] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2030'.
[  232.874377][ T5318] Sensoray 2255 driver load failed: 0xfffffff4
[  232.879499][ T5318] s2255 8-1:0.0: probe with driver s2255 failed with error -12
[  233.068062][    T9] usb 8-1: USB disconnect, device number 12
[  233.396575][T11142] team0: entered promiscuous mode
[  233.398367][T11142] team_slave_0: entered promiscuous mode
[  233.400788][T11142] team_slave_1: entered promiscuous mode
[  233.575735][T11144] loop5: detected capacity change from 0 to 32768
[  233.640599][T11144] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  233.640615][T11144]   allowing incompatible features above 0.0: (unknown version)
[  233.640621][T11144]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  233.659846][T11144] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  233.663087][T11144] bcachefs (loop5): initializing new filesystem
[  233.673021][T11144] bcachefs (loop5): going read-write
[  233.680704][T11144] bcachefs (loop5): marking superblocks
[  233.695464][T11144] bcachefs (loop5): initializing freespace
[  233.702433][T11144] bcachefs (loop5): done initializing freespace
[  233.708932][T11144] bcachefs (loop5): reading snapshots table
[  233.711410][T11144] bcachefs (loop5): reading snapshots done
[  233.730006][T11144] bcachefs (loop5): done starting filesystem
[  233.804094][ T7961] bcachefs (loop5): shutting down
[  233.806936][ T7961] bcachefs (loop5): going read-only
[  233.809587][T11175] openvswitch: netlink: Message has 16 unknown bytes.
[  233.811947][ T7961] bcachefs (loop5): finished waiting for writes to stop
[  233.817471][ T7961] bcachefs (loop5): flushing journal and stopping allocators, journal seq 3
[  233.852911][ T7961] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 4
[  233.858197][ T7961] bcachefs (loop5): clean shutdown complete, journal seq 5
[  233.861580][ T7961] bcachefs (loop5): marking filesystem clean
[  233.876044][ T7961] bcachefs (loop5): shutdown complete
[  233.940751][T11183] netlink: 'syz.7.2052': attribute type 16 has an invalid length.
[  235.023993][   T33] audit: type=1326 audit(1756822768.366:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11220 comm="syz.6.2068" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff329b8ebe9 code=0x0
[  235.144447][ T5904] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  235.305442][ T5904] usb 6-1: Using ep0 maxpacket: 32
[  235.309382][ T5904] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  235.315851][ T5904] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  235.320248][ T5904] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  235.324244][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.331688][ T5904] usb 6-1: config 0 descriptor??
[  235.337282][ T5904] hub 6-1:0.0: USB hub found
[  235.483946][T11230] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (36)
[  235.538822][ T5904] hub 6-1:0.0: 1 port detected
[  236.146557][ T5904] hub 6-1:0.0: activate --> -90
[  236.334521][T11240] loop7: detected capacity change from 0 to 32768
[  236.347417][T11240] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  236.369485][T11240] XFS (loop7): Ending clean mount
[  236.412378][ T8969] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  236.552541][ T5318] usb 6-1: USB disconnect, device number 15
[  236.603220][T11277] netlink: 'syz.7.2088': attribute type 1 has an invalid length.
[  236.606582][T11277] netlink: 1 bytes leftover after parsing attributes in process `syz.7.2088'.
[  236.888160][T11297] overlayfs: failed to clone lowerpath
[  237.047346][T11308] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2105'.
[  237.051547][T11307] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2105'.
[  237.079523][T11302] loop7: detected capacity change from 0 to 40427
[  237.082128][T11302] F2FS-fs: heap/no_heap options were deprecated
[  237.084628][T11302] F2FS-fs (loop7): build fault injection rate: 19
[  237.086733][T11302] F2FS-fs (loop7): build fault injection type: 0x7
[  237.095316][T11302] F2FS-fs (loop7): invalid crc value
[  237.099991][T11302] F2FS-fs (loop7): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x4429/0x6ff0
[  237.103749][T11302] F2FS-fs (loop7): Failed to initialize F2FS segment manager (-12)
[  237.108975][T11313] netlink: 'syz.5.2106': attribute type 1 has an invalid length.
[  237.112265][T11313] netlink: 'syz.5.2106': attribute type 4 has an invalid length.
[  237.219145][T11323] netlink: 'syz.5.2110': attribute type 21 has an invalid length.
[  237.222625][T11323] netlink: 'syz.5.2110': attribute type 4 has an invalid length.
[  237.299989][T11329] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2114'.
[  237.592500][T11347] loop7: detected capacity change from 0 to 1024
[  237.598452][T11347] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  237.606665][T11334] loop5: detected capacity change from 0 to 40427
[  237.614780][T11334] F2FS-fs (loop5): invalid crc value
[  237.642541][ T8969] hfsplus: bad catalog entry type
[  237.669178][T11334] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  237.675735][T11334] F2FS-fs (loop5): Start checkpoint disabled!
[  237.681797][T11334] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  237.721377][T11334] syz.5.2117: attempt to access beyond end of device
[  237.721377][T11334] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  237.760022][T11334] F2FS-fs (loop5): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  237.789005][T10776] kworker/u10:7: attempt to access beyond end of device
[  237.789005][T10776] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  237.795141][T10776] CPU: 1 UID: 0 PID: 10776 Comm: kworker/u10:7 Not tainted syzkaller #0 PREEMPT(full) 
[  237.795159][T10776] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  237.795167][T10776] Workqueue: writeback wb_workfn (flush-7:5)
[  237.795187][T10776] Call Trace:
[  237.795193][T10776]  <TASK>
[  237.795199][T10776]  dump_stack_lvl+0x189/0x250
[  237.795219][T10776]  ? __pfx_dump_stack_lvl+0x10/0x10
[  237.795234][T10776]  ? __pfx_queue_work_on+0x10/0x10
[  237.795245][T10776]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  237.795262][T10776]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  237.795288][T10776]  f2fs_handle_critical_error+0x37c/0x540
[  237.795311][T10776]  f2fs_write_end_io+0x886/0xb60
[  237.795338][T10776]  __submit_merged_bio+0x27a/0x6a0
[  237.795360][T10776]  __submit_merged_write_cond+0x255/0x530
[  237.795382][T10776]  f2fs_write_data_pages+0x261d/0x3000
[  237.795428][T10776]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  237.795513][T10776]  ? f2fs_write_meta_pages+0x357/0x450
[  237.795539][T10776]  ? __lock_acquire+0xab9/0xd20
[  237.795560][T10776]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  237.795578][T10776]  do_writepages+0x32e/0x550
[  237.795598][T10776]  ? reacquire_held_locks+0x127/0x1d0
[  237.795610][T10776]  ? writeback_sb_inodes+0x384/0x1010
[  237.795632][T10776]  __writeback_single_inode+0x145/0xff0
[  237.795647][T10776]  ? do_raw_spin_unlock+0x4d/0x240
[  237.795665][T10776]  writeback_sb_inodes+0x6c7/0x1010
[  237.795702][T10776]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  237.795753][T10776]  ? rcu_is_watching+0x15/0xb0
[  237.795799][T10776]  wb_writeback+0x43b/0xaf0
[  237.795821][T10776]  ? queue_io+0x3a1/0x590
[  237.795837][T10776]  ? __pfx_wb_writeback+0x10/0x10
[  237.795859][T10776]  ? _raw_spin_unlock_irq+0x23/0x50
[  237.795879][T10776]  wb_workfn+0x409/0xef0
[  237.795905][T10776]  ? __pfx_wb_workfn+0x10/0x10
[  237.795922][T10776]  ? __lock_acquire+0xab9/0xd20
[  237.795948][T10776]  ? process_scheduled_works+0x9ef/0x17b0
[  237.795965][T10776]  ? _raw_spin_unlock_irq+0x23/0x50
[  237.795977][T10776]  ? process_scheduled_works+0x9ef/0x17b0
[  237.795988][T10776]  ? process_scheduled_works+0x9ef/0x17b0
[  237.796001][T10776]  process_scheduled_works+0xae1/0x17b0
[  237.796036][T10776]  ? __pfx_process_scheduled_works+0x10/0x10
[  237.796064][T10776]  worker_thread+0x8a0/0xda0
[  237.796084][T10776]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  237.796107][T10776]  ? __kthread_parkme+0x7b/0x200
[  237.796129][T10776]  kthread+0x711/0x8a0
[  237.796145][T10776]  ? __pfx_worker_thread+0x10/0x10
[  237.796157][T10776]  ? __pfx_kthread+0x10/0x10
[  237.796173][T10776]  ? _raw_spin_unlock_irq+0x23/0x50
[  237.796188][T10776]  ? lockdep_hardirqs_on+0x9c/0x150
[  237.796203][T10776]  ? __pfx_kthread+0x10/0x10
[  237.796218][T10776]  ret_from_fork+0x3fc/0x770
[  237.796233][T10776]  ? __pfx_ret_from_fork+0x10/0x10
[  237.796250][T10776]  ? __switch_to_asm+0x39/0x70
[  237.796264][T10776]  ? __switch_to_asm+0x33/0x70
[  237.796276][T10776]  ? __pfx_kthread+0x10/0x10
[  237.796291][T10776]  ret_from_fork_asm+0x1a/0x30
[  237.796320][T10776]  </TASK>
[  237.796325][T10776] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  238.042488][ T5852] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.140592][ T5852] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.234439][ T5852] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.333635][ T5852] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.430023][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  238.437499][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  238.441486][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  238.446222][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  238.449626][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  238.650220][ T5852] bridge_slave_1: left allmulticast mode
[  238.652841][ T5852] bridge_slave_1: left promiscuous mode
[  238.655550][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.661102][ T5852] bridge_slave_0: left allmulticast mode
[  238.663538][ T5852] bridge_slave_0: left promiscuous mode
[  238.669959][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.693472][T11359] loop5: detected capacity change from 0 to 32768
[  238.697214][T11359] XFS: noikeep mount option is deprecated.
[  238.718349][T11359] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  238.756490][T11359] XFS (loop5): Ending clean mount
[  238.774862][T11359] XFS (loop5): Quotacheck needed: Please wait.
[  238.819140][T11359] XFS (loop5): Quotacheck: Done.
[  238.869014][ T7961] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  239.183063][ T5852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  239.206594][ T5852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  239.442555][ T5852] bond0 (unregistering): Released all slaves
[  239.643782][T11363] chnl_net:caif_netlink_parms(): no params data found
[  239.786185][T11363] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.790126][T11363] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.793192][T11363] bridge_slave_0: entered allmulticast mode
[  239.797775][T11363] bridge_slave_0: entered promiscuous mode
[  239.802575][T11363] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.808319][T11363] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.811534][T11363] bridge_slave_1: entered allmulticast mode
[  239.816044][T11363] bridge_slave_1: entered promiscuous mode
[  239.858334][T11363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  239.868222][ T5852] hsr_slave_0: left promiscuous mode
[  239.871257][ T5852] hsr_slave_1: left promiscuous mode
[  239.873595][ T5852] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  239.878216][ T5852] batman_adv: batadv0: Removing interface: batadv_slave_0
[  239.881942][ T5852] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  239.885710][ T5852] batman_adv: batadv0: Removing interface: batadv_slave_1
[  239.899167][ T5852] veth1_macvtap: left promiscuous mode
[  239.901441][ T5852] veth0_macvtap: left promiscuous mode
[  239.903799][ T5852] veth1_vlan: left promiscuous mode
[  239.906174][ T5852] veth0_vlan: left promiscuous mode
[  240.561799][   T54] Bluetooth: hci2: command tx timeout
[  240.809556][ T5852] team0 (unregistering): Port device team_slave_1 removed
[  240.880996][ T5852] team0 (unregistering): Port device team_slave_0 removed
[  242.025098][T11363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  242.151161][T11363] team0: Port device team_slave_0 added
[  242.156933][T11363] team0: Port device team_slave_1 added
[  242.248627][T11363] batman_adv: batadv0: Adding interface: batadv_slave_0
[  242.256579][T11363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  242.266992][T11363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  242.272234][T11363] batman_adv: batadv0: Adding interface: batadv_slave_1
[  242.275598][T11363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  242.288162][T11363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  242.484903][T11363] hsr_slave_0: entered promiscuous mode
[  242.487366][T11363] hsr_slave_1: entered promiscuous mode
[  242.489858][T11363] debugfs: 'hsr0' already exists in 'hsr'
[  242.493218][T11363] Cannot create hsr debugfs directory
[  242.615195][   T54] Bluetooth: hci2: command tx timeout
[  242.661403][ T5852] ------------[ cut here ]------------
[  242.663665][ T5852] WARNING: CPU: 0 PID: 5852 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x26d/0x2f0
[  242.668652][ T5852] Modules linked in:
[  242.671040][ T5852] CPU: 0 UID: 0 PID: 5852 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  242.675150][ T5852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  242.678908][ T5852] Workqueue: netns cleanup_net
[  242.680894][ T5852] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  242.683168][ T5852] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 1b d9 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 59 9e e1 f7 e8 24 72 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 16 72 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  242.690979][ T5852] RSP: 0018:ffffc9000393f898 EFLAGS: 00010293
[  242.693410][ T5852] RAX: ffffffff8a223bec RBX: ffff888105250000 RCX: ffff888108e2d640
[  242.696599][ T5852] RDX: 0000000000000000 RSI: ffffffff8dba7657 RDI: ffff888108e2d640
[  242.699120][ T5852] RBP: ffffc9000393f9b0 R08: ffffffff8fa38f37 R09: 1ffffffff1f471e6
[  242.701744][ T5852] R10: dffffc0000000000 R11: fffffbfff1f471e7 R12: ffffffff8f631940
[  242.704451][ T5852] R13: 1ffff92000727f40 R14: ffff888105251480 R15: dffffc0000000000
[  242.707458][ T5852] FS:  0000000000000000(0000) GS:ffff8880b8618000(0000) knlGS:0000000000000000
[  242.710514][ T5852] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  242.712667][ T5852] CR2: 00007fcf239c7dac CR3: 0000000027e42000 CR4: 00000000000006f0
[  242.715386][ T5852] Call Trace:
[  242.716713][ T5852]  <TASK>
[  242.717715][ T5852]  xfrm_net_exit+0x2d/0x70
[  242.719176][ T5852]  ops_undo_list+0x49a/0x990
[  242.720628][ T5852]  ? __pfx_ops_undo_list+0x10/0x10
[  242.722612][ T5852]  ? do_raw_spin_unlock+0x4d/0x240
[  242.724571][ T5852]  cleanup_net+0x4c5/0x800
[  242.726384][ T5852]  ? __pfx_cleanup_net+0x10/0x10
[  242.728412][ T5852]  ? _raw_spin_unlock_irq+0x23/0x50
[  242.730389][ T5852]  ? process_scheduled_works+0x9ef/0x17b0
[  242.732330][ T5852]  ? process_scheduled_works+0x9ef/0x17b0
[  242.734203][ T5852]  process_scheduled_works+0xae1/0x17b0
[  242.735967][ T5852]  ? __pfx_process_scheduled_works+0x10/0x10
[  242.737978][ T5852]  worker_thread+0x8a0/0xda0
[  242.739651][ T5852]  kthread+0x711/0x8a0
[  242.741317][ T5852]  ? __pfx_worker_thread+0x10/0x10
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  242.743141][ T5852]  ? __pfx_kthread+0x10/0x10
[  242.745514][ T5852]  ? _raw_spin_unlock_irq+0x23/0x50
[  242.747607][ T5852]  ? lockdep_hardirqs_on+0x9c/0x150
[  242.749934][ T5852]  ? __pfx_kthread+0x10/0x10
[  242.751838][ T5852]  ret_from_fork+0x3fc/0x770
[  242.753724][ T5852]  ? __pfx_ret_from_fork+0x10/0x10
[  242.756089][ T5852]  ? __switch_to_asm+0x39/0x70
[  242.758085][ T5852]  ? __switch_to_asm+0x33/0x70
[  242.760270][ T5852]  ? __pfx_kthread+0x10/0x10
[  242.762210][ T5852]  ret_from_fork_asm+0x1a/0x30
[  242.764370][ T5852]  </TASK>
[  242.765859][ T5852] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  242.768899][ T5852] CPU: 0 UID: 0 PID: 5852 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  242.772803][ T5852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  242.777039][ T5852] Workqueue: netns cleanup_net
[  242.779055][ T5852] Call Trace:
[  242.780493][ T5852]  <TASK>
[  242.781675][ T5852]  dump_stack_lvl+0x99/0x250
[  242.783547][ T5852]  ? __asan_memcpy+0x40/0x70
[  242.785418][ T5852]  ? __pfx_dump_stack_lvl+0x10/0x10
[  242.787501][ T5852]  ? __pfx__printk+0x10/0x10
[  242.789410][ T5852]  vpanic+0x281/0x750
[  242.791082][ T5852]  ? __pfx__printk+0x10/0x10
[  242.792936][ T5852]  ? __pfx_vpanic+0x10/0x10
[  242.794782][ T5852]  ? is_bpf_text_address+0x292/0x2b0
[  242.796998][ T5852]  panic+0xb9/0xc0
[  242.798540][ T5852]  ? __pfx_panic+0x10/0x10
[  242.800471][ T5852]  __warn+0x31b/0x4b0
[  242.802223][ T5852]  ? xfrm_state_fini+0x26d/0x2f0
[  242.804220][ T5852]  ? xfrm_state_fini+0x26d/0x2f0
[  242.806248][ T5852]  report_bug+0x2be/0x4f0
[  242.808006][ T5852]  ? xfrm_state_fini+0x26d/0x2f0
[  242.810045][ T5852]  ? xfrm_state_fini+0x26d/0x2f0
[  242.812073][ T5852]  ? xfrm_state_fini+0x26f/0x2f0
[  242.814090][ T5852]  handle_bug+0x84/0x160
[  242.815843][ T5852]  exc_invalid_op+0x1a/0x50
[  242.817718][ T5852]  asm_exc_invalid_op+0x1a/0x20
[  242.819704][ T5852] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  242.821961][ T5852] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 1b d9 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 59 9e e1 f7 e8 24 72 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 16 72 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  242.829565][ T5852] RSP: 0018:ffffc9000393f898 EFLAGS: 00010293
[  242.832113][ T5852] RAX: ffffffff8a223bec RBX: ffff888105250000 RCX: ffff888108e2d640
[  242.835383][ T5852] RDX: 0000000000000000 RSI: ffffffff8dba7657 RDI: ffff888108e2d640
[  242.838645][ T5852] RBP: ffffc9000393f9b0 R08: ffffffff8fa38f37 R09: 1ffffffff1f471e6
[  242.842476][ T5852] R10: dffffc0000000000 R11: fffffbfff1f471e7 R12: ffffffff8f631940
[  242.845652][ T5852] R13: 1ffff92000727f40 R14: ffff888105251480 R15: dffffc0000000000
[  242.848835][ T5852]  ? xfrm_state_fini+0x26c/0x2f0
[  242.850942][ T5852]  ? xfrm_state_fini+0x26c/0x2f0
[  242.852989][ T5852]  xfrm_net_exit+0x2d/0x70
[  242.854859][ T5852]  ops_undo_list+0x49a/0x990
[  242.856792][ T5852]  ? __pfx_ops_undo_list+0x10/0x10
[  242.858923][ T5852]  ? do_raw_spin_unlock+0x4d/0x240
[  242.861125][ T5852]  cleanup_net+0x4c5/0x800
[  242.863050][ T5852]  ? __pfx_cleanup_net+0x10/0x10
[  242.865092][ T5852]  ? _raw_spin_unlock_irq+0x23/0x50
[  242.867047][ T5852]  ? process_scheduled_works+0x9ef/0x17b0
[  242.869041][ T5852]  ? process_scheduled_works+0x9ef/0x17b0
[  242.870947][ T5852]  process_scheduled_works+0xae1/0x17b0
[  242.873035][ T5852]  ? __pfx_process_scheduled_works+0x10/0x10
[  242.875496][ T5852]  worker_thread+0x8a0/0xda0
[  242.877471][ T5852]  kthread+0x711/0x8a0
[  242.879231][ T5852]  ? __pfx_worker_thread+0x10/0x10
[  242.881426][ T5852]  ? __pfx_kthread+0x10/0x10
[  242.883414][ T5852]  ? _raw_spin_unlock_irq+0x23/0x50
[  242.885654][ T5852]  ? lockdep_hardirqs_on+0x9c/0x150
[  242.887933][ T5852]  ? __pfx_kthread+0x10/0x10
[  242.889888][ T5852]  ret_from_fork+0x3fc/0x770
[  242.891838][ T5852]  ? __pfx_ret_from_fork+0x10/0x10
[  242.894032][ T5852]  ? __switch_to_asm+0x39/0x70
[  242.896035][ T5852]  ? __switch_to_asm+0x33/0x70
[  242.897916][ T5852]  ? __pfx_kthread+0x10/0x10
[  242.899553][ T5852]  ret_from_fork_asm+0x1a/0x30
[  242.901318][ T5852]  </TASK>
[  242.903386][ T5852] Kernel Offset: disabled
[  242.905135][ T5852] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:19:36  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33be460 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99df26b0 RSP=ffffc9000393ef90
R8 =ffff8881063d0237 R9 =1ffff11020c7a046 R10=dffffc0000000000 R11=ffffffff854f30b0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f3127 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fcf239c7dac CR3=0000000027e42000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fcf23812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000000 RCX=43fe9bf3a7581400 RDX=0000000000000000
RSI=ffffffff8be337e0 RDI=ffffffff8be337a0 RBP=0000000000000000 RSP=ffffc9000255eb20
R8 =0000000000000000 R9 =ffffffff81cea4a6 R10=ffffc9000255ec98 R11=ffffffff81ac3aa0
R12=000000000000032a R13=ffffffff81cea4a6 R14=ffffffff8e139f20 R15=0000000000000000
RIP=ffffffff8b7c9b20 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00100
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00100
FS =0000 00005555830ae500 ffffffff 00c00100
GS =0000 ffff8881a3c18000 ffffffff 00c00100
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fcf246bafc8 CR3=000000004001a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fcf23997498 00007fcf23997470 XMM03=00007fcf239974a8 00007fcf239974a0
XMM04=00007fcf244fd100 00007fcf23997460 XMM05=00007fcf23997478 00007fcf239974c0
XMM06=00007fcf239974b8 00007fcf239974b0 XMM07=00007fcf239974a8 00007fcf239974a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fcf23812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
