last executing test programs:

10m35.963364798s ago: executing program 32 (id=59):
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$unix(0x1, 0x5, 0x0)
socket(0x400000000010, 0x3, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ipv6_route\x00')
read$FUSE(r3, 0x0, 0x0)
preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000340)=""/222, 0xde}], 0x1, 0xfffffff6, 0x100005)

8m32.157446197s ago: executing program 33 (id=255):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001200000008000800000000000800090003000000180001801400020076657468305f746f5f626f6e64000000"], 0x4c}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_usbip_server_init(0x1)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)

8m27.583113202s ago: executing program 34 (id=258):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001200000008000800000000000800090003000000180001801400020076657468305f746f5f626f6e64000000"], 0x4c}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_usbip_server_init(0x1)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$eJzs3MtvVFUYAPDvTh+8aUVEQdAqGomPlhZUFi7UaOJCExNd4LK2BZGBGloTIY0WY3BpSNwblyb+Be7cGHVhTNxq4tKQEG1MKK5q7gum02mZlpYpnd8vmc45c1/nu+eemXPv6b0BtK2+9E8SsT0ifo+Injw7f4a+/G12Zmrk+szUSBJzc2/9nWTzXZuZGilnLZfbVmQOVSIqnyXxYrJwuxPnL5werlbHzhX5gckzHwxMnL/wzKkzwyfHTo6dHTp27OiRweefG3p2VeJM47q27+Px/Xtfe+fyGyPHL7/707dpsfYcyKfXxnFL1xsE1EBfutf+mcvUT3t8GWW/G+yoSSedLSwIy9IREWl1dWXtvyc64mbl9cSrn7a0cMCaSn+bNi0+eXoO2MCSaHUJgNYof+jT89/ydYe6HuvC1Zciuov07MzUyOyN+DujUnzetYbb74uI49P/fZW+YrnXIQAAViDr2zzdqP9XiT3Zez7WsbMYQ+mNiHsiYldE3BsRuyPivohs3vujOx7IF57raXL7fXX5hf2fypWGZV4laf/vhZq+32xN/MVbb0eR25HF35WcOFUdO1zsk0PRtSnNDy6xje9f+e2LxabV9v/SV7r9si9YFOBKZ90FutHhyeHV2glXL0bs62wUf3JjJCA9AvZGxL7lrXpnmTj15Df7F5vp1vEvYRXGmea+jngir//pqIu/lCw9PjmwOapjhwfKo2Khn3+99GaR7K6fdlvxr4K0/rfOP/6LKReL955/k3y8tiuq1bFzE8vfxqU/Pl/0nGalx3938nY2Zv3Le/lnHw1PTp4bjOhOXs/y5Y7OPh+6uWyZL+dP4z90sHH731Usk8b/YESkB/GBiHgoIh4uyv5IRDwaEQeXiP/Hlx97f4n4k0iipfU/2vD7L4nYnCV6k9rx+hUkOk7/8N1iI+bN1f/RmM6+a3PZ998tNFvA29+DAAAAsP5VImJ7JJX+PN23PSqV/v78f/h3x9ZKdXxi8qkT4x+eHc3vEeiNrkp5paun5nroYDJdrDHPDxXXisvpR4rrxl92bMny/SPj1dEWxw7tbtv89h9l+0/91dHq0gFrzv1a0L7q23+lReUA7rxmfv+dC8DG1KD9b2lFOYA7z/k/tK9G7f+Turz+P2xMC9v/nw0eWQdsRPr/0L60f2hf2j+0pWbv4i+fp7DihwDMS5Q3C6x8PZubvsN//SX61mTNZQ2tZeG3xM1PorJqa55eB5WyzhNpi1nJ4rGz+WdhzE80eFgNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAXej/AAAA//+q8eIl")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r5, &(0x7f0000000280)='2', 0x1, 0x8080c61)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)

6m36.247127669s ago: executing program 35 (id=418):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001200000008000800000000000800090003000000180001801400020076657468305f746f5f626f6e64000000"], 0x4c}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_usbip_server_init(0x1)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r4, &(0x7f0000000280)='2', 0x1, 0x8080c61)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)

6m23.798624311s ago: executing program 36 (id=435):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000100200012800e0001006970366772657461700000000c00028008000100", @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x48}}, 0x0)

5m46.700942189s ago: executing program 37 (id=520):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
tgkill(r3, r3, 0x21)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r4, 0x800000010d, 0x2, &(0x7f0000000080)="922b223abf52", 0x6)
getsockopt$inet_int(r4, 0x10d, 0x2, &(0x7f0000000200), &(0x7f0000000280)=0x1c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f00000000c0), 0xf00)

5m43.198165159s ago: executing program 38 (id=522):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
tgkill(r3, r3, 0x21)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r4, 0x800000010d, 0x2, &(0x7f0000000080)="922b223abf52", 0x6)
getsockopt$inet_int(r4, 0x10d, 0x2, &(0x7f0000000200), &(0x7f0000000280)=0x1c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0)

5m42.064609635s ago: executing program 39 (id=526):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000100200012800e0001006970366772657461700000000c00028008000100", @ANYRES32=r5, @ANYBLOB, @ANYRES32=r5], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01"], 0x3c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r9 = socket$inet6(0xa, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmmsg$inet(r9, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)

4m59.137735007s ago: executing program 9 (id=619):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000340)={0x0, 0x2, 0x201, 0x1d})
fcntl$lock(0xffffffffffffffff, 0x7, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
rt_tgsigqueueinfo(0x0, 0x0, 0x15, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x14)

4m58.233691636s ago: executing program 9 (id=620):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0x200000fff, 0x5)
socket$xdp(0x2c, 0x3, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5)
ioctl$UI_DEV_CREATE(r3, 0x5501)
write$uinput_user_dev(r3, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
write(r4, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff", 0x11)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r5, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'})

4m56.933287257s ago: executing program 9 (id=623):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0x200000fff, 0x5)
socket$xdp(0x2c, 0x3, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5)
ioctl$UI_DEV_CREATE(r3, 0x5501)
write$uinput_user_dev(r3, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3})
write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'})

4m55.55310001s ago: executing program 9 (id=624):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010001fff00"/19, @ANYRES32=0x0, @ANYBLOB="0003000000000100200012800e0001006970366772657461700000000c00028008000100", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x48}}, 0x0)

4m55.170356552s ago: executing program 9 (id=625):
openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff0200000008000000000000000000011400040020010000000000000000000000000001060003400001000008000740000000"], 0xa0}}, 0x0)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB=',dots,check=strict,nfs,nodots,dots,dots,nodots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,showexec,dots,nodots,check=relaxed,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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")
bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xab402)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81)
close_range(r5, 0xffffffffffffffff, 0x0)

4m54.233079172s ago: executing program 9 (id=626):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01"], 0x3c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r9 = socket$inet6(0xa, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmmsg$inet(r9, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)

4m38.632031193s ago: executing program 40 (id=627):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
tgkill(r3, r3, 0x21)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r4, 0x800000010d, 0x2, &(0x7f0000000080)="922b223abf52", 0x6)
getsockopt$inet_int(r4, 0x10d, 0x2, &(0x7f0000000200), &(0x7f0000000280)=0x1c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)

4m38.621465393s ago: executing program 41 (id=626):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01"], 0x3c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r9 = socket$inet6(0xa, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmmsg$inet(r9, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)

4m20.681492788s ago: executing program 5 (id=654):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
tgkill(r3, r3, 0x21)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r4, 0x800000010d, 0x2, &(0x7f0000000080)="922b223abf52", 0x6)
getsockopt$inet_int(r4, 0x10d, 0x2, &(0x7f0000000200), &(0x7f0000000280)=0x1c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)

4m19.760208658s ago: executing program 5 (id=655):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x101}, 0x14}}, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x0)
dup(0xffffffffffffffff)
syz_emit_ethernet(0x6e, &(0x7f0000000a80)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0xff, @local, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x1, {0x3, 0x6, '|6M', 0x6, 0x2f, 0xff, @mcast2, @private0, [@fragment={0x33, 0x0, 0x1a, 0x0, 0x0, 0x8, 0x66}]}}}}}}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000406010200000000000000000a0000050500010007000000dc9911a0f0ea9f903548641dd00743d6d9ced983285c0db5e306412e0bfdb75e62de945ead2d8d865589b9c56c00a07f581919e917db93b9dcb61f1f9c28b5099e"], 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x28000080)

4m18.511647577s ago: executing program 5 (id=656):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000340)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x64)
syz_emit_vhci(0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000001c0)={{0xfffc, 0x2, 0x8}, 'syz0\x00'})
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x15)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000680)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x5d, 0x7f, 0x8, 0x3, 0x2, 0x9, "dd88ce2fa5232875e46103e0b46130ee28962177eaf48b8002580c407e6925e45f545feeab3897673b0f1f5e42a767f2ff57b0fd314218900ee11fe0577d95f9776a0781d838676327490c48f26076a7dc3d64ec328514fa42b935d81a"}}, 0x175)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x23, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff2}}}, 0x24}}, 0x4000010)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x14084, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x483, &(0x7f00000006c0)="$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")
mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c})

4m17.628900005s ago: executing program 5 (id=657):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001200000008000800000000000800090003000000180001801400020076657468305f746f5f626f6e64000000"], 0x4c}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_usbip_server_init(0x1)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r5, &(0x7f0000000280)='2', 0x1, 0x8080c61)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)

4m15.785969492s ago: executing program 5 (id=658):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0x200000fff, 0x5)
socket$xdp(0x2c, 0x3, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5)
ioctl$UI_DEV_CREATE(r3, 0x5501)
write$uinput_user_dev(r3, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff", 0x11)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3})
write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'})

4m14.484931224s ago: executing program 5 (id=659):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
tgkill(r3, r3, 0x21)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r4, 0x800000010d, 0x2, &(0x7f0000000080)="922b223abf52", 0x6)
getsockopt$inet_int(r4, 0x10d, 0x2, &(0x7f0000000200), &(0x7f0000000280)=0x1c)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)

3m59.074124679s ago: executing program 42 (id=659):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
tgkill(r3, r3, 0x21)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r4, 0x800000010d, 0x2, &(0x7f0000000080)="922b223abf52", 0x6)
getsockopt$inet_int(r4, 0x10d, 0x2, &(0x7f0000000200), &(0x7f0000000280)=0x1c)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)

3m34.116932445s ago: executing program 3 (id=699):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000440)={0x4, 0x200, {}, {}, 0xfffffffc, 0x80000001})
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x1)
r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r5 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
tkill(r5, 0xb)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@grpjquota}, {@noinit_itable}, {@quota}, {@debug}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4f1, &(0x7f0000000b00)="$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")

3m29.792642141s ago: executing program 3 (id=710):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000440)={0x4, 0x200, {}, {}, 0xfffffffc, 0x80000001})
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x1)
r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r5 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
tkill(r5, 0xb)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@grpjquota}, {@noinit_itable}, {@quota}, {@debug}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4f1, &(0x7f0000000b00)="$eJzs3V9rXGkZAPDnTDK1f1KTohe1YC22khTtTNLYNnhRFURBKKj1vsZkEkImmZCZtE0omuIHEERU8MorbwQ/gCD9CCIU9F5UlGW33b1Y2N3OMmdm0mw60ySb+bOb+f3gzLznnXPmed4zzJnznvNyJoCBdSkiLkfEi2q1ejUiRhv1mcYU2/WpttzzZ4/malMS1erdN5OIpF5XW2xi13ueaax2MiJ+9L2Inyavxi1vbi3PFouF9cZ8vrKyli9vbl1bWpldLCwWVqenp27O3Jq5MTPZkXaORMTt7/z3N7/843dv//VrD/517/8TP0sa9REv29Fp9aZn023RNBwR690I1ifDaQsBAPg0aB7nfzkirsZoDKVHcwAAAMBxUv3mSLyfRFQBAACAYyuTjoFNMrnGOICRyGRyufoY3s/H6UyxVK58daG0sTpfHys7FtnMwlKxMNkYKzwW2aQ2P5WWX85f3zM/HRHnIuLXo6fS+dxcqTjf75MfAAAAMCDO7On/vzNa7//v8l7fkgMAAAA6Z6zfCQAAAABdp/8PAAAAx5/+PwAAABxrP7hzpzZVm/9/PX9/c2O5dP/afKG8nFvZmMvNldbXcoul0mJ6z76V/d6vWCqtfT1WNx7mK4VyJV/e3Lq3UtpYrdxb+shfYAMAAAA9dO5LT/6ZRMT2N06lU82JficF9MTwYRb+T/fyAHpvqN8JAH1zqN9/4FjJ9jsBoO+SfV5vO3jnb53PBQAA6I7xL7S+/j+077mB7UyPUgS6xPk/GFyu/8Pgcv0fBlc2hkJHHgbbfrcAPfr1/2r1UAkBAAAdN5JOSSYXkZ4HGIlMJpeLOJv2CbLJwlKxMBkRn42If4xmP1Obn0rXTPYdMwwAAAAAAAAAAAAAAAAAAAAAAAAA1FWrSVQBAACAYy0i878kvZt/xPjolZG95wdOJO+Ops8R8eD3d3/7cLZSWZ+q1b+1U1/5XaP+ej/OYAAAAAB7NfvpzX48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTS82eP5ppTL+O+8e2IGGsVfzhOps8nIxsRp99OYnjXeklEDHUg/vbjiDjfKn5SSyvGGlm0in+qz/HPdCA+DLIntf3Pt1p9/zJxKX1u/f27me6hjq79/i+zs/8bahG/Vnf2gDEuPP1zvm38xxEXhlvvf5rxk1fif/9QbfzJj7e22r1W/UPEeMvfn2RnmVopX1lZy5c3t64trcwuFhYLq9PTUzdnbs3cmJnMLywVC43HljF+9cW/vHhd+0+3iT/Wtv31nK4csP0fPH347HP1YnZn9eRl/InLrT//823iZxqf/1ca5drr483ydr2828U//f3i69o/36b97T//esyJA7b/6g9/8e8DLgoA9EB5c2t5tlgsrA904Uhbo3ZY1LF8hqL/W6ODheYhY9djXf5Ya/28C/nUjsw/AVv+yIX+7ZMAAIDueLUPvEe2xwkBAAAAAAAAAAAAAAAAAADAAOrF7cT23kJgO33sxN3zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA658MAAAD//8UQz6k=")

3m26.211000574s ago: executing program 3 (id=717):
r0 = userfaultfd(0x80801)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet(0x2, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
setns(0xffffffffffffffff, 0x24020000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x3b, 0x0, &(0x7f0000000000))
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
userfaultfd(0x80001)

3m21.771559404s ago: executing program 3 (id=720):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000440)={0x4, 0x200, {}, {}, 0xfffffffc, 0x80000001})
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x1)
r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r5 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
tkill(r5, 0xb)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}})
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

3m19.703340129s ago: executing program 3 (id=725):
openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff0200000008000000000000000000011400040020010000000000000000000000000001060003400001000008000740000000"], 0xa0}}, 0x0)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB=',dots,check=strict,nfs,nodots,dots,dots,nodots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,showexec,dots,nodots,check=relaxed,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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")
bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2, 0x0, 0x23e8, 0x3}})
close_range(r4, 0xffffffffffffffff, 0x0)

3m11.543576846s ago: executing program 3 (id=738):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910280000000000de500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0xc4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x1008, 0x3}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0x8000}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0xc040)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000003f000701fefffffffcdbdf25027c000004004580080001801fa657"], 0x20}}, 0xc000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000000b0102000000000100000003000000080002400000000008000340000000010b0001006d616e676c65"], 0x30}}, 0x20004084)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
getsockopt$inet6_int(r9, 0x29, 0x4e, 0x0, &(0x7f0000000080))
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2m56.011526685s ago: executing program 43 (id=738):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910280000000000de500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0xc4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x1008, 0x3}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0x8000}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0xc040)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000003f000701fefffffffcdbdf25027c000004004580080001801fa657"], 0x20}}, 0xc000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000000b0102000000000100000003000000080002400000000008000340000000010b0001006d616e676c65"], 0x30}}, 0x20004084)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
getsockopt$inet6_int(r9, 0x29, 0x4e, 0x0, &(0x7f0000000080))
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)

55.259185489s ago: executing program 8 (id=993):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x7fff, 0x4)

55.161154322s ago: executing program 8 (id=997):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/udp\x00')
socket$inet(0x2, 0x802, 0x1)
pread64(r0, 0x0, 0x1c3ac0a93e37a7ba, 0xb6)

55.123947783s ago: executing program 8 (id=1002):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x200841a, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x5549, &(0x7f0000007a00)="$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")
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0)
r2 = open(&(0x7f0000000200)='.\x00', 0x301f00, 0x393)
renameat2(r2, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r2, &(0x7f00000002c0)='./file0\x00', 0x2)

54.313129808s ago: executing program 8 (id=1006):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x1000488, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x232, &(0x7f0000000640)="$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")
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x2c)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x80)
sched_setscheduler(0x0, 0x1, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = dup(0xffffffffffffffff)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}})
sched_setaffinity(0x0, 0x0, 0x0)
getpid()
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)

53.976394309s ago: executing program 8 (id=1012):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3df, &(0x7f0000000e00)="$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")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0)
write$FUSE_ATTR(r0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)

53.458218966s ago: executing program 8 (id=1015):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x4b0, 0x800}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4000880)

53.398843277s ago: executing program 44 (id=1015):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x4b0, 0x800}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4000880)

41.117390954s ago: executing program 0 (id=1064):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newtfilter={0x6c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r3, {0xe, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x3c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x4}, {0x7, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884)

30.949946325s ago: executing program 0 (id=1068):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x2, {0x2, 0xff, 0x2}, 0xfe}, 0x18)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)

30.79139946s ago: executing program 0 (id=1070):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80482, 0x0)
write$vga_arbiter(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='decodes .'], 0xd)

30.729153041s ago: executing program 0 (id=1072):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10400, &(0x7f0000000040)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@usrjquota}]}, 0x1, 0x50f, &(0x7f0000000a40)="$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")
chdir(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

30.557091877s ago: executing program 0 (id=1074):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x2dc2d, &(0x7f0000000300)=ANY=[], 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000400)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}}}}, 0x0)

29.904022638s ago: executing program 0 (id=1077):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0)
close(r8)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
r9 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4)

29.747937212s ago: executing program 45 (id=1077):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0)
close(r8)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
r9 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4)

4.641098463s ago: executing program 6 (id=1191):
syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4e04, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$eJzs3M9rG0cUwPEnWZYlGVs6lJYWiof20l4WW+25VBQbSgU1tlVqFwxre9UKbSWjFS4qpbZPvZbccwrkYHz0zZD4H/Alt+SSS266BHKICSEb9pf107asyJFjfz8QdjQzTzujGYW3i1f1X///s5i3tLxelXBMSUhE5EQkJWEJhPxj2C1HpdmOfD3+4vHni8srP2Wy2dkFpeYyS9+klVKTUw/++ifudzsck+PUav15+tnxx8ef1t8s/VGwVMFSpXJV6Wqt/LSqr5mG2ihYRU2pedPQLUMVSpZR8drLXnveLG9u1pRe2phIbFYMy1J6qaaKRk1Vy6paqSn9d71QUpqmqYmE4ALOgi7omT6j1wc8GlyRSiWjj4hIvKMltzeUAQEAgKFqz//DTkrfV/4vk27+73Ru5P/7XxxVx385mDx0Ylfrh9Fu+f+3T7z3asn/YyLST/5/Vy6R/3dmRLdLbm+h//wf18NUtKMq1PLKyf8T/vfXtfvb/rRbIP8HAAAAAAAAAAAAAAAAAAAAAOBDcGLbSdu2k8Ex+Nd4hMB/jRvprPUfE5GYs/o263+TLS6vSMx9cM9ZY/O/rdxWzjv6HY5ExBRDpiUpr9394HPKwZNHypGSh+a2G//KOY64LZm8FNz4GUlKqj3etud+zM7OKI8ff/qYUqI5Pi1J+ah7fLo13hn/9lYuKl992RSvSVIerUtZTNlw93Uj/t8ZpX74OdsWH/dOAgAAAADADaApFfIvn1Ot17/e9bumKdW93fuVkUzevU10xv0B7/p6uuv1eST5WWTYswcAAAAA4Hawan8XddM0KucU4nJxn/4Lkd46R9tqRs/rPNI0w17HE3VvZIi867zu9fipthSCP6RoaYr5lf2NJ5j/wNZrp7kmLD1ERdoHP+VUqEuefdefyGlNcNsoesbnLPOd7xM+ZyeMDmw/f3Ln/svBfUG+Owh2wMWdd/s9V6x917mF0av+fwcAAADA+9dI+oOa75ubQ0MZFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAt8yV/KRfW2HYcwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACui7cBAAD//5Oa+gc=")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0x10003})

4.555226146s ago: executing program 6 (id=1193):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x46, &(0x7f00000000c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '\x00', 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @ni={0x8b, 0x0, 0x0, 0xffff, 0x1, 0x596}}}}}}, 0x0)

2.988535345s ago: executing program 1 (id=1223):
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000000102010100000000002c00018014000300f355d167ff0ebec1cf26dd7b3ad768ff01000000000000000000000000000114000400000000000000000004000000000000010c0002800500010000000000"], 0x50}}, 0x0)

2.612391977s ago: executing program 4 (id=1229):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r2, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x1, 0x81, 0x6, 0x0, 0x7a}, {0x4, 0x0, 0x9, 0xfff2, 0xd66e, 0x4}, 0x1, 0x8, 0x1a77}}, @TCA_TBF_PTAB={0x404, 0x3, [0x4000004, 0x8, 0x0, 0x6, 0x4, 0x6, 0x6, 0x4, 0x7, 0xfffffff9, 0x81, 0x8001, 0x8000, 0x8, 0x5b, 0x7, 0xbaf, 0x4, 0x800, 0x5, 0xff8, 0x500000, 0x5a5, 0x3, 0x3ff, 0x2, 0xd4, 0xa0, 0x101, 0xed, 0x9, 0xfffffffd, 0x1, 0x57, 0xfffff000, 0x2, 0x0, 0x2, 0x3, 0x144c1fa0, 0x7, 0x200000, 0x57e68c20, 0x3ff, 0x1, 0x8e, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x842, 0x9, 0x6, 0x6, 0x7, 0x426, 0x7fffffff, 0x8000, 0x7, 0x3, 0x9, 0xb, 0x800, 0x8, 0xfffffffa, 0x5, 0x7, 0x3, 0xb2d8, 0xfffffffd, 0x5, 0x0, 0x4, 0x4, 0x1, 0xc, 0x4, 0x65bcf2b4, 0x6, 0x0, 0x7fffffff, 0x0, 0xb, 0x6, 0x0, 0x66, 0x5, 0x2, 0x2, 0xffffffff, 0x5, 0x2, 0x1ff, 0x10000, 0x1000, 0x7, 0x1, 0xfffffff8, 0x400, 0x4, 0x7fffffff, 0x26a6, 0x0, 0x1ff, 0x5, 0x2, 0x2, 0x80, 0x4, 0x8001, 0xfff, 0xffff0000, 0x4, 0x3, 0x5, 0x8, 0x7, 0x6, 0x8000, 0xf, 0xb3, 0x9a, 0x1, 0x4, 0x9, 0xc, 0x40, 0x47c097e1, 0x1, 0x1, 0x2, 0x5, 0x6, 0x8, 0x7fff, 0x1, 0x7fff, 0x5, 0xb0000000, 0x8, 0x10000, 0x3, 0x30, 0x6, 0xa1, 0x8, 0xe, 0x7, 0xfffffffb, 0x8, 0x5, 0x7, 0x80000001, 0x0, 0x8, 0x2, 0xa90, 0x5, 0x8516, 0x4, 0x8, 0x9, 0xc, 0x7dc52d1e, 0x1, 0x5, 0x5, 0x5, 0x93ab, 0x4, 0x200, 0x7398, 0x8, 0x8, 0x0, 0x2, 0x3, 0x400, 0x0, 0xc3, 0x6, 0x1, 0x5, 0x7, 0x2, 0x8000, 0x9, 0x2, 0xab, 0x5, 0xcfe, 0xb00, 0x2, 0x3, 0x2, 0xb5, 0x3c, 0x3, 0x80000003, 0x5, 0x1, 0x3b9, 0xfffffffe, 0xb976, 0x81b, 0x0, 0x5, 0x1, 0x2, 0x7, 0x0, 0x1ff, 0x7, 0x40, 0x1, 0x0, 0x62a25683, 0x2, 0x6, 0x6, 0xb, 0xfffffffa, 0x8, 0xfffffff8, 0x1, 0x800, 0xffffffc0, 0x10000, 0x3, 0xfffffffd, 0x7ff, 0x5, 0x10000, 0x8, 0xd3, 0x0, 0x4, 0x5, 0x8, 0x62, 0x6, 0x9e, 0xff, 0x4, 0xf, 0xaa, 0x6, 0x7f, 0x452, 0xfffffc00, 0x8, 0x0, 0x9, 0x81]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0)

2.50606121s ago: executing program 4 (id=1232):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setresuid(0x0, 0xee01, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r4, 0x0, 0x8, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
listen(r0, 0x1)

1.920706599s ago: executing program 1 (id=1237):
socket$nl_rdma(0x10, 0x3, 0x14)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x7, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d588dc050391"}]}}}}}}, 0x4e)

1.765104184s ago: executing program 7 (id=1240):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x2, {0x2, 0xff, 0x2}, 0xfe}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r1, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)

1.752832394s ago: executing program 1 (id=1242):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000006580)={0x0, 0x0, &(0x7f0000006540)={&(0x7f0000006480)={0x14, 0x0, 0x7, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24040004)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x20, 0x3, 0x7, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x10)

1.711936426s ago: executing program 1 (id=1244):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x8, 0xb2, 0xa8}, 0x39}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2)

1.612707099s ago: executing program 1 (id=1247):
syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f0000000080)='./file1\x00', 0x2, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESHEX], 0x1, 0x105bb, &(0x7f00000105c0)="$eJzs3M+LG+UfB/DP7Hb73fZb6yIevHVAhF1oQrP9gd6qtqjgluKPgyfNJmlIm2SWTbqNFaF4Fo/9R/Tk3bv/hDfxIHgrKJlnol1cEbrpxm1fL5i8Z54888kzYVl45gkTwHNrLf/t1yzOxqmIWI6IMxHlfpYiuZrilYg4FxFLj21Z1f5nw8mIOB0RZ6fFU82seuvLhw+2Hk22vvj+4S/Xvmr+eH5hFw0s3GsRMdhJ+/cGKYtuyttVe3OvV+bg0l6V6Y3Bneq4SHmvs11WuNec9WuWebGb+hc7d0fTvNVvtqbZ7d0q23eG6QNHe91ZnfKE283d8rjd2S6zNyrK7N5P45pUeX80TnXaVb3Py/IxHs8ytXcmnXQ9O3fKbA3HVXuqW7Q7k2nuVVl9XLSKfrscx/YTf83/ee/3hncn+V5nd9QrhvnleuP1euNKrbFbtDvjzqVac9C+cilf7/an3WrjTnNwtVsU3X6n3ioGG/l6t9WqNRr5+rXOdq85zBuN+sX6hdrljWrvfP7OjY/zfjtfn+ZbveHdca8/ym8Vu3k6YyPfrF98YyN/tZF/uHUzv/nB9etbNz/69NonN97ceu/tqtPfhpWvb17Y3Kw1LtQ2Gxuu/zBWD3c6z7ts/+HpRY0D4Bgp5/+n4qD5/1//Vs3/gTkz/zf/D/Pfp3f9q3Esrt/8n0PJFj0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAW5aeVb98td9bS8f+r9heqppeq4ywiliLi9wMsx8l9NZerOiv/0H9l1vF/KX7IoqyQVU3T7XREXK22Ry8ePPYTc/82AAAA4Nnz3YNz36TZenpZW/SAOErpps3Smc/mVC+LiJW1n+dUbWn68vKcipV/3ydiMqdq5Q2s1TkVS7fcjvZe1vK+WH0sshRLRzocAADgSOyfCVhRBwAAeHZ9vegBsBhZzJYyZ2vBsx/kVwuCpywEAgAAwHGXLXoAAAAAwFNXzv8X+vy/ypM+/w8AAAD4d+n5fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7BzPzmpQ1EcgE9b+h7vXx4xzt2KM1iGS3DokLAAN8EScAtugDXgzCUYMLQlUoOJkdsSyfcl7e1tzM9TwuTcSwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl57KxeRhenV/bM56c5w0TwMAAAAcsioXk+piVM//NPf/NbcumnkWEXlEHOrdi/jRyiyanPKDvy/f1fAYUSVs/8fP5vgdEdfN8fK/608BAAAAztdyNh/X3Xp9Gp26IPpUL9rkf28S5WURUY6eE6Xl29NlorDq+z2Iu0Rp1QLWMFFYveQ2SJX2KUVrGO4NWT3kvZYDAAD0ot0J9NuFAAAA0KfbvevpCeugZ1nstjJ3e8HVL+/fNgR/tWYAAADAN5SdugAAAACgc1X/7/1/AAAAcN7q9/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQpVW5mCxn8/GxOevN1xTNmOZpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXtmfdxQIgTAIg73rO5O5/2GlQVNTkyoQPv7GYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYn9eUiAEgiAK5oz/nfT9DysJegYRIqDhUUUtGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYud+XuOo4gCAv9nd2TYF6RploV6sWKgodLP1F4KXHoTgQfAkHpc0hej6gzYHW3IwFw+C/4EX9eChFyEgSD34F/TgyR7rpYLsoYKgp8ibH3XSxDAxZnazfj7w5n13eDvv+6ZQ8p03CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCaXApny7gdD708bhXnfrq/sRL7Ow/10b3RzTOxxThpNu1jpxPvUX/aWQAAADDv2mV9H0K4m24tx77Vi/V/8nE5Jtb8G4/kcVnPP1z3l31Z+8d26/sv33wwUS+fJw0hfNsbry41tsLZdq7muNM1xmTPEvInNO3sn631+uZjkzS768lnt2+/1s3CE4fLGAD4L1wo+yK4spb/fBT74TQTA2BudYoWKvV/uzfdnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACaMNkMz5VxEkJ4ovN3HN25v7GyV39vdPNM2U6//fgn1WvGS6QhhCtr49WlBtcyy87VHHft+o13R+Px6tUDBU/+q2/tDJLDfV1wbIPkj+3tGUhDsG9wxP9BAQAwV9Kixbr+brq1HM8liyFsf7Gz/j9fiUPN+v+HtVvnq3NV6/9hYyucbXXr/8H6ex8Orl2/0S0+v39x+MLw5aVXXhy+NMiepww8VQEAAOCfdYtWrf9bi7v3/09V4lCz/v/xl7d+rc7VVv/vcvD9/yNOCAAA4H/s0bO//5bscT7pdsNHo/X1q8P8+ODzxfw4hVT3t1DuHoeTZXCiaNX6v704rQQBAACAJk02kx37/5crcai5///ds39+Xr1mO4SwUOz/X1j5YHy5ueXMrN37/709xzXx68QNLBcAAIApWShadf8/zd7/bz1VjmmFEJ55Oo+LPwNYq/5/tfPppepc1ff/n29uiTOp1c/vR533/7Ox/RA6/QYSAwAAYC6djO2rr7P453Rr+Z1vTr3R9f4/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzF/tzbJgyEcRx+fUmUuE1GSG8lMAMNFYIR+JCQLHkGBmAhGipai0VgBZDgXNMZiudp/r/iinsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OVdHr54i4giUpcp0njzc3qPiI9I27Ydfd6y2J2Pzdc9Z/vDJOd3TH/LiCij6OMcAIDeVd3mWK3r5V/e/7yDvMO81bypF8/8NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAV3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADxwIAAAAAwvyt0+jYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAsQIAAP//9KJeIA==")
syz_clone(0xa49a4400, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)

1.585962909s ago: executing program 4 (id=1248):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='.\x02\x00', 0x0, &(0x7f0000000300)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@discard}, {@noblock_validity}, {@discard}]}, 0x4, 0xbc1, &(0x7f0000001080)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000240)='./file0\x00')
r0 = socket$inet(0x2, 0x802, 0x1)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f00000000c0)=0x1, 0x4)
write(r0, &(0x7f0000000080)="08008edf773c8000", 0xfd)
recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x25, 0x0}}], 0x3f, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0xffffff80, 0x178, 0x0, 0x178, 0x528, 0x22b, 0x258, 0x528, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x168, 0x190, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x59}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00', {0xff}}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
unshare(0x62040200)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file1\x00', 0x0)

1.481465323s ago: executing program 2 (id=1250):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000001f00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}}, @NFT_MSG_DELOBJ={0x48, 0x14, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x24004094)

1.375934646s ago: executing program 2 (id=1251):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0xd6, 0x2, 0x800, 0xa}}]}, {0x4, 0x3f}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)

799.369404ms ago: executing program 2 (id=1252):
socket$nl_rdma(0x10, 0x3, 0x14)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x7, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d588dc050391"}]}}}}}}, 0x4e)

460.985994ms ago: executing program 6 (id=1253):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007f00), r0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000007f40)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000081c0)={0x0, 0x0, &(0x7f0000008180)={&(0x7f0000007f80)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4040080)

453.506975ms ago: executing program 4 (id=1254):
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(0xffffffffffffffff, 0x2)
syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)

441.618665ms ago: executing program 7 (id=1255):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r2, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x1, 0x81, 0x6, 0x0, 0x7a}, {0x4, 0x0, 0x9, 0xfff2, 0xd66e, 0x4}, 0x1, 0x8, 0x1a77}}, @TCA_TBF_PTAB={0x404, 0x3, [0x4000004, 0x8, 0x0, 0x6, 0x4, 0x6, 0x6, 0x4, 0x7, 0xfffffff9, 0x81, 0x8001, 0x8000, 0x8, 0x5b, 0x7, 0xbaf, 0x4, 0x800, 0x5, 0xff8, 0x500000, 0x5a5, 0x3, 0x3ff, 0x2, 0xd4, 0xa0, 0x101, 0xed, 0x9, 0xfffffffd, 0x1, 0x57, 0xfffff000, 0x2, 0x0, 0x2, 0x3, 0x144c1fa0, 0x7, 0x200000, 0x57e68c20, 0x3ff, 0x1, 0x8e, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x842, 0x9, 0x6, 0x6, 0x7, 0x426, 0x7fffffff, 0x8000, 0x7, 0x3, 0x9, 0xb, 0x800, 0x8, 0xfffffffa, 0x5, 0x7, 0x3, 0xb2d8, 0xfffffffd, 0x5, 0x0, 0x4, 0x4, 0x1, 0xc, 0x4, 0x65bcf2b4, 0x6, 0x0, 0x7fffffff, 0x0, 0xb, 0x6, 0x0, 0x66, 0x5, 0x2, 0x2, 0xffffffff, 0x5, 0x2, 0x1ff, 0x10000, 0x1000, 0x7, 0x1, 0xfffffff8, 0x400, 0x4, 0x7fffffff, 0x26a6, 0x0, 0x1ff, 0x5, 0x2, 0x2, 0x80, 0x4, 0x8001, 0xfff, 0xffff0000, 0x4, 0x3, 0x5, 0x8, 0x7, 0x6, 0x8000, 0xf, 0xb3, 0x9a, 0x1, 0x4, 0x9, 0xc, 0x40, 0x47c097e1, 0x1, 0x1, 0x2, 0x5, 0x6, 0x8, 0x7fff, 0x1, 0x7fff, 0x5, 0xb0000000, 0x8, 0x10000, 0x3, 0x30, 0x6, 0xa1, 0x8, 0xe, 0x7, 0xfffffffb, 0x8, 0x5, 0x7, 0x80000001, 0x0, 0x8, 0x2, 0xa90, 0x5, 0x8516, 0x4, 0x8, 0x9, 0xc, 0x7dc52d1e, 0x1, 0x5, 0x5, 0x5, 0x93ab, 0x4, 0x200, 0x7398, 0x8, 0x8, 0x0, 0x2, 0x3, 0x400, 0x0, 0xc3, 0x6, 0x1, 0x5, 0x7, 0x2, 0x8000, 0x9, 0x2, 0xab, 0x5, 0xcfe, 0xb00, 0x2, 0x3, 0x2, 0xb5, 0x3c, 0x3, 0x80000003, 0x5, 0x1, 0x3b9, 0xfffffffe, 0xb976, 0x81b, 0x0, 0x5, 0x1, 0x2, 0x7, 0x0, 0x1ff, 0x7, 0x40, 0x1, 0x0, 0x62a25683, 0x2, 0x6, 0x6, 0xb, 0xfffffffa, 0x8, 0xfffffff8, 0x1, 0x800, 0xffffffc0, 0x10000, 0x3, 0xfffffffd, 0x7ff, 0x5, 0x10000, 0x8, 0xd3, 0x0, 0x4, 0x5, 0x8, 0x62, 0x6, 0x9e, 0xff, 0x4, 0xf, 0xaa, 0x6, 0x7f, 0x452, 0xfffffc00, 0x8, 0x0, 0x9, 0x81]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0)

357.112058ms ago: executing program 2 (id=1256):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000006580)={0x0, 0x0, &(0x7f0000006540)={&(0x7f0000006480)={0x14, 0x0, 0x7, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24040004)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x20, 0x3, 0x7, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x10)

356.840038ms ago: executing program 7 (id=1257):
r0 = socket(0x10, 0x80003, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x71, @local, 0x13}, 0x1c)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0)

354.844388ms ago: executing program 6 (id=1258):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x8, 0xb2, 0xa8}, 0x39}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2)

329.845989ms ago: executing program 2 (id=1259):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6, 0x0, 0x6c}]}, 0x10)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2})
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

315.4106ms ago: executing program 7 (id=1260):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, [@generic={0x73, 0x1, 0x1, 0x19}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

280.22767ms ago: executing program 4 (id=1261):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000001f00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}}, @NFT_MSG_DELOBJ={0x48, 0x14, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x24004094)

225.119262ms ago: executing program 7 (id=1262):
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee1768810006c08030300ecff3f00", 0x1b)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x3, 0xfffffffa, @mcast1, 0x9}, 0x1c)
write$binfmt_script(r0, &(0x7f00000000c0), 0x28)

210.511342ms ago: executing program 4 (id=1263):
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'ip6tnl0\x00', 0x0})
syz_usb_connect$uac2(0x3, 0x87, &(0x7f0000000400)=ANY=[@ANYBLOB="1201100300000020ba0d00104000010203010902750003e6061002080b0100010c200009040000000101200009240180ff071500040c2403020503050400ff011c"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

203.265603ms ago: executing program 6 (id=1264):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x2014000, &(0x7f0000000300)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@fat=@check_strict}, {@utf8}, {@shortname_winnt}, {}, {@fat=@gid}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@shortname_mixed}, {@shortname_lower}, {@utf8no}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp865'}}]}, 0x23, 0x34c, &(0x7f0000001740)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)

188.272153ms ago: executing program 7 (id=1265):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x2, {0x2, 0xff, 0x2}, 0xfe}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r1, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)

121.069705ms ago: executing program 2 (id=1266):
socket$nl_rdma(0x10, 0x3, 0x14)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x7, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d588dc050391"}]}}}}}}, 0x4e)

42.096468ms ago: executing program 6 (id=1267):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="644a0ce3a7d8a6cecbfc1f5c56d41c137c743ababa2b36ff835b00594da92f6c67dcd82c7f067560f0ae9c45a55703b2f63abe7b95fedddb78ffce323c6f268761010ce93367390b406d2c1c70d09af5afed61cfb468a7e31823ae78c049512c193a12da87aacdc2fdc9c89e01700735a98b0b27887de5256eb7dec192283771f49bcb"], 0x1, 0x1be, &(0x7f0000000380)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)
capset(0x0, &(0x7f0000000040)={0x0, 0x0, 0x100})
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x1, 0x0, &(0x7f0000000140))
listxattr(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@commit}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@bh}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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")
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$packet(0x11, 0x3, 0x300)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

0s ago: executing program 1 (id=1268):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r2, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x1, 0x81, 0x6, 0x0, 0x7a}, {0x4, 0x0, 0x9, 0xfff2, 0xd66e, 0x4}, 0x1, 0x8, 0x1a77}}, @TCA_TBF_PTAB={0x404, 0x3, [0x4000004, 0x8, 0x0, 0x6, 0x4, 0x6, 0x6, 0x4, 0x7, 0xfffffff9, 0x81, 0x8001, 0x8000, 0x8, 0x5b, 0x7, 0xbaf, 0x4, 0x800, 0x5, 0xff8, 0x500000, 0x5a5, 0x3, 0x3ff, 0x2, 0xd4, 0xa0, 0x101, 0xed, 0x9, 0xfffffffd, 0x1, 0x57, 0xfffff000, 0x2, 0x0, 0x2, 0x3, 0x144c1fa0, 0x7, 0x200000, 0x57e68c20, 0x3ff, 0x1, 0x8e, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x842, 0x9, 0x6, 0x6, 0x7, 0x426, 0x7fffffff, 0x8000, 0x7, 0x3, 0x9, 0xb, 0x800, 0x8, 0xfffffffa, 0x5, 0x7, 0x3, 0xb2d8, 0xfffffffd, 0x5, 0x0, 0x4, 0x4, 0x1, 0xc, 0x4, 0x65bcf2b4, 0x6, 0x0, 0x7fffffff, 0x0, 0xb, 0x6, 0x0, 0x66, 0x5, 0x2, 0x2, 0xffffffff, 0x5, 0x2, 0x1ff, 0x10000, 0x1000, 0x7, 0x1, 0xfffffff8, 0x400, 0x4, 0x7fffffff, 0x26a6, 0x0, 0x1ff, 0x5, 0x2, 0x2, 0x80, 0x4, 0x8001, 0xfff, 0xffff0000, 0x4, 0x3, 0x5, 0x8, 0x7, 0x6, 0x8000, 0xf, 0xb3, 0x9a, 0x1, 0x4, 0x9, 0xc, 0x40, 0x47c097e1, 0x1, 0x1, 0x2, 0x5, 0x6, 0x8, 0x7fff, 0x1, 0x7fff, 0x5, 0xb0000000, 0x8, 0x10000, 0x3, 0x30, 0x6, 0xa1, 0x8, 0xe, 0x7, 0xfffffffb, 0x8, 0x5, 0x7, 0x80000001, 0x0, 0x8, 0x2, 0xa90, 0x5, 0x8516, 0x4, 0x8, 0x9, 0xc, 0x7dc52d1e, 0x1, 0x5, 0x5, 0x5, 0x93ab, 0x4, 0x200, 0x7398, 0x8, 0x8, 0x0, 0x2, 0x3, 0x400, 0x0, 0xc3, 0x6, 0x1, 0x5, 0x7, 0x2, 0x8000, 0x9, 0x2, 0xab, 0x5, 0xcfe, 0xb00, 0x2, 0x3, 0x2, 0xb5, 0x3c, 0x3, 0x80000003, 0x5, 0x1, 0x3b9, 0xfffffffe, 0xb976, 0x81b, 0x0, 0x5, 0x1, 0x2, 0x7, 0x0, 0x1ff, 0x7, 0x40, 0x1, 0x0, 0x62a25683, 0x2, 0x6, 0x6, 0xb, 0xfffffffa, 0x8, 0xfffffff8, 0x1, 0x800, 0xffffffc0, 0x10000, 0x3, 0xfffffffd, 0x7ff, 0x5, 0x10000, 0x8, 0xd3, 0x0, 0x4, 0x5, 0x8, 0x62, 0x6, 0x9e, 0xff, 0x4, 0xf, 0xaa, 0x6, 0x7f, 0x452, 0xfffffc00, 0x8, 0x0, 0x9, 0x81]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0)

kernel console output (not intermixed with test programs):

.461022][   T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  597.564864][ T9346] EXT4-fs (loop8): unmounting filesystem.
[  597.567922][ T8724] EXT4-fs (loop6): unmounting filesystem.
[  597.931800][   T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  598.228609][ T4728] libceph: connect (1)[c::]:6789 error -101
[  598.229827][ T4728] libceph: mon0 (1)[c::]:6789 connect error
[  598.232023][ T4728] libceph: connect (1)[c::]:6789 error -101
[  598.233259][ T4728] libceph: mon0 (1)[c::]:6789 connect error
[  598.254505][T11103] ceph: No mds server is up or the cluster is laggy
[  598.270167][T11106] loop6: detected capacity change from 0 to 512
[  598.280182][T11106] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  598.281759][T11106] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  598.305283][T11106] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002]
[  598.313205][T11106] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3861: comm syz.6.852: Allocating blocks 41-42 which overlap fs metadata
[  598.316280][T11106] Quota error (device loop6): write_blk: dquota write failed
[  598.317890][T11106] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5
[  598.319612][T11106] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3861: comm syz.6.852: Allocating blocks 41-42 which overlap fs metadata
[  598.322488][T11106] Quota error (device loop6): write_blk: dquota write failed
[  598.323826][T11106] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  598.325738][T11106] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.852: Failed to acquire dquot type 1
[  598.329554][T11106] EXT4-fs error (device loop6): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  598.332222][T11106] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.852: corrupted inode contents
[  598.334969][T11106] EXT4-fs error (device loop6): ext4_dirty_inode:6156: inode #12: comm syz.6.852: mark_inode_dirty error
[  598.337533][T11106] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.852: corrupted inode contents
[  598.340063][T11106] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #12: comm syz.6.852: mark_inode_dirty error
[  598.342425][T11106] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.852: corrupted inode contents
[  598.344845][T11106] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem
[  598.346733][T11106] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.852: corrupted inode contents
[  598.349471][T11106] EXT4-fs error (device loop6): ext4_truncate:4325: inode #12: comm syz.6.852: mark_inode_dirty error
[  598.351610][T11106] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem
[  598.353704][T11106] EXT4-fs (loop6): 1 truncate cleaned up
[  598.354806][T11106] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  598.390832][T11103] EXT4-fs (loop6): re-mounted. Quota mode: writeback.
[  598.818475][T11116] loop8: detected capacity change from 0 to 512
[  598.820877][T11113] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6)
[  598.822099][T11113] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  598.823676][T11113] vhci_hcd vhci_hcd.0: Device attached
[  598.981016][T11116] EXT4-fs error (device loop8): ext4_orphan_get:1405: inode #15: comm syz.8.854: inode has both inline data and extents flags
[  598.985366][T11116] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.854: couldn't read orphan inode 15 (err -117)
[  598.989424][T11116] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  599.244583][ T4374] usb 18-1: new low-speed USB device number 7 using vhci_hcd
[  599.507098][T11114] vhci_hcd: connection reset by peer
[  599.513119][    T9] vhci_hcd: stop threads
[  599.514248][    T9] vhci_hcd: release socket
[  599.515755][    T9] vhci_hcd: disconnect device
[  600.009591][ T8724] EXT4-fs (loop6): unmounting filesystem.
[  600.036566][ T9346] EXT4-fs (loop8): unmounting filesystem.
[  600.242617][ T4490] libceph: connect (1)[c::]:6789 error -101
[  600.243834][ T4490] libceph: mon0 (1)[c::]:6789 connect error
[  600.285941][T11129] ceph: No mds server is up or the cluster is laggy
[  600.293745][T11134] loop6: detected capacity change from 0 to 512
[  600.312018][T11134] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  600.313709][T11134] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  600.346839][T11134] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002]
[  600.349998][T11134] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3861: comm syz.6.855: Allocating blocks 41-42 which overlap fs metadata
[  600.352638][T11134] Quota error (device loop6): write_blk: dquota write failed
[  600.354447][T11134] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5
[  600.377074][T11134] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3861: comm syz.6.855: Allocating blocks 41-42 which overlap fs metadata
[  600.396626][T11134] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.855: Failed to acquire dquot type 1
[  600.426394][T11134] EXT4-fs error (device loop6): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  600.448325][T11134] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.855: corrupted inode contents
[  600.452040][T11134] EXT4-fs error (device loop6): ext4_dirty_inode:6156: inode #12: comm syz.6.855: mark_inode_dirty error
[  600.454952][T11134] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.855: corrupted inode contents
[  600.460079][T11134] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #12: comm syz.6.855: mark_inode_dirty error
[  600.462570][T11134] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.855: corrupted inode contents
[  600.465212][T11134] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem
[  600.467139][T11134] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.855: corrupted inode contents
[  600.472878][T11134] EXT4-fs error (device loop6): ext4_truncate:4325: inode #12: comm syz.6.855: mark_inode_dirty error
[  600.475399][T11134] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem
[  600.493386][T11134] EXT4-fs (loop6): 1 truncate cleaned up
[  600.494586][T11134] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  600.546527][T11129] EXT4-fs (loop6): re-mounted. Quota mode: writeback.
[  600.579938][   T39] bond0 (unregistering): Released all slaves
[  600.869943][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  600.871991][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  600.881377][T11023] netlink: 76 bytes leftover after parsing attributes in process `syz.1.843'.
[  600.888261][T11123] netlink: 76 bytes leftover after parsing attributes in process `syz.8.856'.
[  601.015432][ T8724] EXT4-fs (loop6): unmounting filesystem.
[  601.064584][   T22] libceph: connect (1)[c::]:6789 error -101
[  601.065917][   T22] libceph: mon0 (1)[c::]:6789 connect error
[  601.100092][T11141] ceph: No mds server is up or the cluster is laggy
[  601.104250][T11156] loop4: detected capacity change from 0 to 512
[  601.106509][T11156] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  601.108040][T11156] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  601.687641][T11158] Injecting memory failure for pfn 0x15e5fe at process virtual address 0x20ffe000
[  601.967174][T11148] loop1: detected capacity change from 0 to 512
[  601.986232][T11148] EXT4-fs (loop1): Test dummy encryption mode enabled
[  601.987610][T11148] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  602.010651][ T4376] libceph: connect (1)[c::]:6789 error -101
[  602.013427][ T4376] libceph: mon0 (1)[c::]:6789 connect error
[  602.029719][T11164] loop6: detected capacity change from 0 to 512
[  602.098130][ T5423] vhci_hcd: vhci_device speed not set
[  602.319155][T11148] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.857: bad orphan inode 131083
[  602.345710][T11148] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  602.468666][T11164] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.859: inode has both inline data and extents flags
[  602.471849][T11164] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.859: couldn't read orphan inode 15 (err -117)
[  602.474819][T11164] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  602.740867][T11158] Memory failure: 0x15e5fe: recovery action for dirty LRU page: Recovered
[  602.749796][T11159] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6)
[  602.751083][T11159] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  602.752536][T11159] vhci_hcd vhci_hcd.0: Device attached
[  603.411866][T11156] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002]
[  603.415154][T11156] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3861: comm syz.4.858: Allocating blocks 41-42 which overlap fs metadata
[  603.424509][T11156] __quota_error: 2 callbacks suppressed
[  603.424520][T11156] Quota error (device loop4): write_blk: dquota write failed
[  603.427175][T11156] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5
[  603.429186][T11156] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3861: comm syz.4.858: Allocating blocks 41-42 which overlap fs metadata
[  603.436307][T11156] Quota error (device loop4): write_blk: dquota write failed
[  603.437957][T11156] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  603.439936][T11156] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.858: Failed to acquire dquot type 1
[  603.452828][T11156] EXT4-fs error (device loop4): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  603.455832][T11156] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.858: corrupted inode contents
[  603.461480][T11156] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #12: comm syz.4.858: mark_inode_dirty error
[  603.542413][T11161] vhci_hcd: connection closed
[  603.546202][   T11] vhci_hcd: stop threads
[  603.548680][T11156] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.858: corrupted inode contents
[  603.551132][   T11] vhci_hcd: release socket
[  603.552596][   T11] vhci_hcd: disconnect device
[  603.556341][T11156] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #12: comm syz.4.858: mark_inode_dirty error
[  603.564071][T11156] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.858: corrupted inode contents
[  603.570656][T11156] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  603.579947][T11156] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.858: corrupted inode contents
[  603.587693][T11156] EXT4-fs error (device loop4): ext4_truncate:4325: inode #12: comm syz.4.858: mark_inode_dirty error
[  603.593113][T11156] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  603.597726][ T5423] vhci_hcd: vhci_device speed not set
[  603.601322][T11156] EXT4-fs (loop4): 1 truncate cleaned up
[  603.602514][T11156] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  603.697954][ T4490] libceph: connect (1)[c::]:6789 error -101
[  603.699212][ T4490] libceph: mon0 (1)[c::]:6789 connect error
[  603.701565][T11156] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[  603.725593][ T8722] EXT4-fs (loop1): unmounting filesystem.
[  603.751964][ T8715] EXT4-fs (loop4): unmounting filesystem.
[  603.862846][T10966] chnl_net:caif_netlink_parms(): no params data found
[  604.216315][ T8724] EXT4-fs (loop6): unmounting filesystem.
[  604.289343][T10966] bridge0: port 1(bridge_slave_0) entered blocking state
[  604.290784][T10966] bridge0: port 1(bridge_slave_0) entered disabled state
[  604.292397][T11180] loop1: detected capacity change from 0 to 32768
[  604.292920][T10966] device bridge_slave_0 entered promiscuous mode
[  604.308714][T10966] bridge0: port 2(bridge_slave_1) entered blocking state
[  604.310077][T10966] bridge0: port 2(bridge_slave_1) entered disabled state
[  604.311727][T10966] device bridge_slave_1 entered promiscuous mode
[  604.317596][   T22] libceph: connect (1)[c::]:6789 error -101
[  604.318767][   T22] libceph: mon0 (1)[c::]:6789 connect error
[  604.337300][T11180] XFS (loop1): Mounting V5 Filesystem
[  604.338762][ T4374] vhci_hcd: vhci_device speed not set
[  604.352880][T11192] ceph: No mds server is up or the cluster is laggy
[  604.357135][T11202] loop6: detected capacity change from 0 to 512
[  604.360658][T10966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  604.366968][T11202] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  604.368659][T11202] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  604.372425][T10966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  604.389140][T11202] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002]
[  604.391590][T11202] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3861: comm syz.6.864: Allocating blocks 41-42 which overlap fs metadata
[  604.396175][T11202] Quota error (device loop6): write_blk: dquota write failed
[  604.397532][T11202] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5
[  604.399287][T11202] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3861: comm syz.6.864: Allocating blocks 41-42 which overlap fs metadata
[  604.408295][T11202] Quota error (device loop6): write_blk: dquota write failed
[  604.409718][T11202] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  604.411516][T11202] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.864: Failed to acquire dquot type 1
[  604.415701][T11202] EXT4-fs error (device loop6): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  604.418572][T11202] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.864: corrupted inode contents
[  604.421209][T11202] EXT4-fs error (device loop6): ext4_dirty_inode:6156: inode #12: comm syz.6.864: mark_inode_dirty error
[  604.423699][T11202] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.864: corrupted inode contents
[  604.424644][T11180] XFS (loop1): Ending clean mount
[  604.426987][T11202] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #12: comm syz.6.864: mark_inode_dirty error
[  604.430141][T11202] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.864: corrupted inode contents
[  604.432534][T11202] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem
[  604.434316][T11202] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.864: corrupted inode contents
[  604.436680][T11202] EXT4-fs error (device loop6): ext4_truncate:4325: inode #12: comm syz.6.864: mark_inode_dirty error
[  604.439164][T11202] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem
[  604.441587][T11202] EXT4-fs (loop6): 1 truncate cleaned up
[  604.442629][T11202] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  604.447440][T10966] team0: Port device team_slave_0 added
[  604.461775][T11176] loop8: detected capacity change from 0 to 32768
[  604.464516][T10966] team0: Port device team_slave_1 added
[  604.470599][T10966] batman_adv: batadv0: Adding interface: batadv_slave_0
[  604.472845][T11192] EXT4-fs (loop6): re-mounted. Quota mode: writeback.
[  604.487865][T10966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  604.492979][T10966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  604.495629][ T8724] EXT4-fs (loop6): unmounting filesystem.
[  605.089787][T11176] XFS (loop8): Mounting V5 Filesystem
[  605.091886][T10966] batman_adv: batadv0: Adding interface: batadv_slave_1
[  605.093226][T10966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  605.102139][T10966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  605.175154][ T8722] XFS (loop1): Unmounting Filesystem
[  605.208835][T11213] ceph: No mds server is up or the cluster is laggy
[  605.212804][T11226] loop6: detected capacity change from 0 to 512
[  605.217883][ T4373] libceph: connect (1)[c::]:6789 error -101
[  605.219134][ T4373] libceph: mon0 (1)[c::]:6789 connect error
[  605.224114][T11226] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  605.225710][T11226] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  605.304284][T11228] Injecting memory failure for pfn 0x15e1fe at process virtual address 0x20ffe000
[  605.389291][T11229] loop4: detected capacity change from 0 to 512
[  605.523835][T11229] EXT4-fs (loop4): Test dummy encryption mode enabled
[  605.525157][T11229] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  605.530548][T11228] Memory failure: 0x15e1fe: recovery action for dirty LRU page: Recovered
[  605.531728][T10966] device hsr_slave_0 entered promiscuous mode
[  605.533636][   T22] libceph: connect (1)[c::]:6789 error -101
[  605.534850][   T22] libceph: mon0 (1)[c::]:6789 connect error
[  605.554079][T11229] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.866: bad orphan inode 131083
[  605.556244][T11229] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  605.575301][T11176] XFS (loop8): Ending clean mount
[  605.579889][T10966] device hsr_slave_1 entered promiscuous mode
[  605.582218][T11226] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002]
[  605.584523][T11226] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3861: comm syz.6.865: Allocating blocks 41-42 which overlap fs metadata
[  605.592492][T11226] Quota error (device loop6): write_blk: dquota write failed
[  605.593918][T11226] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5
[  605.595653][T11226] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3861: comm syz.6.865: Allocating blocks 41-42 which overlap fs metadata
[  605.599281][T11226] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.865: Failed to acquire dquot type 1
[  605.604163][T11226] EXT4-fs error (device loop6): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  605.606850][T11226] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.865: corrupted inode contents
[  605.612096][T11226] EXT4-fs error (device loop6): ext4_dirty_inode:6156: inode #12: comm syz.6.865: mark_inode_dirty error
[  605.615170][T11226] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.865: corrupted inode contents
[  605.617551][T11226] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #12: comm syz.6.865: mark_inode_dirty error
[  605.621129][T11226] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.865: corrupted inode contents
[  605.623825][T11226] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem
[  605.625555][T11226] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.865: corrupted inode contents
[  605.628138][T10966] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  605.629549][T10966] Cannot create hsr debugfs directory
[  605.634048][T11226] EXT4-fs error (device loop6): ext4_truncate:4325: inode #12: comm syz.6.865: mark_inode_dirty error
[  605.636296][T11226] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem
[  605.641102][T11226] EXT4-fs (loop6): 1 truncate cleaned up
[  605.642152][T11226] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  605.657470][T11213] EXT4-fs (loop6): re-mounted. Quota mode: writeback.
[  605.742394][ T8724] EXT4-fs (loop6): unmounting filesystem.
[  606.243553][ T8715] EXT4-fs (loop4): unmounting filesystem.
[  606.382707][T11249] loop6: detected capacity change from 0 to 512
[  606.561715][T11249] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  606.563368][T11249] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  606.566251][ T9346] XFS (loop8): Unmounting Filesystem
[  606.581516][T11247] ceph: No mds server is up or the cluster is laggy
[  606.582947][ T4376] libceph: connect (1)[c::]:6789 error -101
[  606.584106][ T4376] libceph: mon0 (1)[c::]:6789 connect error
[  606.596336][T11249] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002]
[  606.599302][T11249] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3861: comm syz.6.868: Allocating blocks 41-42 which overlap fs metadata
[  606.602031][T11249] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3861: comm syz.6.868: Allocating blocks 41-42 which overlap fs metadata
[  606.604667][T11249] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.868: Failed to acquire dquot type 1
[  606.607041][T11249] EXT4-fs error (device loop6): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  606.609877][T11249] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.868: corrupted inode contents
[  606.612697][T11249] EXT4-fs error (device loop6): ext4_dirty_inode:6156: inode #12: comm syz.6.868: mark_inode_dirty error
[  606.615334][T11249] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.868: corrupted inode contents
[  606.689100][T11249] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #12: comm syz.6.868: mark_inode_dirty error
[  606.700172][T11249] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.868: corrupted inode contents
[  606.707452][T11249] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem
[  606.709822][T11249] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.868: corrupted inode contents
[  606.712069][T11249] EXT4-fs error (device loop6): ext4_truncate:4325: inode #12: comm syz.6.868: mark_inode_dirty error
[  606.714726][T11249] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem
[  606.716741][T11249] EXT4-fs (loop6): 1 truncate cleaned up
[  606.717921][T11249] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  607.320644][T11264] loop4: detected capacity change from 0 to 512
[  607.843108][ T4376] libceph: connect (1)[c::]:6789 error -101
[  607.844850][ T4376] libceph: mon0 (1)[c::]:6789 connect error
[  607.850640][T11264] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  607.852205][T11264] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  607.869720][T11243] EXT4-fs (loop6): re-mounted. Quota mode: writeback.
[  607.880153][T11262] ceph: No mds server is up or the cluster is laggy
[  607.881699][ T4376] libceph: connect (1)[c::]:6789 error -101
[  607.882956][ T4376] libceph: mon0 (1)[c::]:6789 connect error
[  607.885142][T11263] ceph: No mds server is up or the cluster is laggy
[  607.886811][ T4376] libceph: connect (1)[c::]:6789 error -101
[  607.888238][ T4376] libceph: mon0 (1)[c::]:6789 connect error
[  607.904801][T11264] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002]
[  607.907433][T11264] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3861: comm syz.4.869: Allocating blocks 41-42 which overlap fs metadata
[  607.916744][T11264] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3861: comm syz.4.869: Allocating blocks 41-42 which overlap fs metadata
[  607.938165][T11264] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.869: Failed to acquire dquot type 1
[  607.940823][T11264] EXT4-fs error (device loop4): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  607.943621][T11264] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.869: corrupted inode contents
[  608.076256][T11264] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #12: comm syz.4.869: mark_inode_dirty error
[  608.084295][T11264] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.869: corrupted inode contents
[  608.087318][T11264] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #12: comm syz.4.869: mark_inode_dirty error
[  608.092885][T11264] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.869: corrupted inode contents
[  608.097630][T11264] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  608.101333][T11264] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.869: corrupted inode contents
[  608.106045][T11264] EXT4-fs error (device loop4): ext4_truncate:4325: inode #12: comm syz.4.869: mark_inode_dirty error
[  608.107069][ T8724] EXT4-fs (loop6): unmounting filesystem.
[  608.118198][T11264] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  608.146867][T11264] EXT4-fs (loop4): 1 truncate cleaned up
[  608.148233][T11264] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  608.243926][T11259] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[  608.254624][ T4377] libceph: connect (1)[c::]:6789 error -101
[  608.255995][ T4377] libceph: mon0 (1)[c::]:6789 connect error
[  608.627437][ T4377] libceph: connect (1)[c::]:6789 error -101
[  608.631964][ T4377] libceph: mon0 (1)[c::]:6789 connect error
[  608.641013][T11292] loop1: detected capacity change from 0 to 512
[  608.662269][T11292] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  608.663856][T11292] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  608.664759][ T8715] EXT4-fs (loop4): unmounting filesystem.
[  608.704990][T11292] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002]
[  608.707341][T11292] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3861: comm syz.1.871: Allocating blocks 41-42 which overlap fs metadata
[  608.720421][T11292] __quota_error: 10 callbacks suppressed
[  608.720432][T11292] Quota error (device loop1): write_blk: dquota write failed
[  608.791899][T11292] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5
[  608.796465][T11292] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3861: comm syz.1.871: Allocating blocks 41-42 which overlap fs metadata
[  608.827263][T11292] Quota error (device loop1): write_blk: dquota write failed
[  608.841877][T11292] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  608.843788][T11292] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.871: Failed to acquire dquot type 1
[  608.848235][T11292] EXT4-fs error (device loop1): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  608.853780][T11292] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #12: comm syz.1.871: corrupted inode contents
[  608.856296][T11292] EXT4-fs error (device loop1): ext4_dirty_inode:6156: inode #12: comm syz.1.871: mark_inode_dirty error
[  608.859787][T11292] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #12: comm syz.1.871: corrupted inode contents
[  608.862033][T11292] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz.1.871: mark_inode_dirty error
[  608.864274][T11292] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #12: comm syz.1.871: corrupted inode contents
[  608.875833][T11292] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  608.880799][T11292] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #12: comm syz.1.871: corrupted inode contents
[  608.892686][T11292] EXT4-fs error (device loop1): ext4_truncate:4325: inode #12: comm syz.1.871: mark_inode_dirty error
[  608.901013][T11292] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  608.912696][T11292] EXT4-fs (loop1): 1 truncate cleaned up
[  608.913766][T11292] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  609.032506][T11292] EXT4-fs (loop1): re-mounted. Quota mode: writeback.
[  609.137706][ T4373] libceph: connect (1)[c::]:6789 error -101
[  609.138992][ T4373] libceph: mon0 (1)[c::]:6789 connect error
[  609.164864][ T4373] libceph: connect (1)[c::]:6789 error -101
[  609.166098][ T4373] libceph: mon0 (1)[c::]:6789 connect error
[  609.257461][T11314] loop4: detected capacity change from 0 to 256
[  609.634300][T11307] ceph: No mds server is up or the cluster is laggy
[  609.638677][ T4373] libceph: connect (1)[c::]:6789 error -101
[  609.639865][ T4373] libceph: mon0 (1)[c::]:6789 connect error
[  609.645876][T11315] loop6: detected capacity change from 0 to 512
[  609.648952][T11315] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  609.650516][T11315] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  609.666269][T11286] ceph: No mds server is up or the cluster is laggy
[  609.716084][T11315] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002]
[  609.718562][T11315] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3861: comm syz.6.873: Allocating blocks 41-42 which overlap fs metadata
[  609.721287][T11315] Quota error (device loop6): write_blk: dquota write failed
[  609.722594][T11315] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5
[  609.724326][T11315] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3861: comm syz.6.873: Allocating blocks 41-42 which overlap fs metadata
[  609.727057][T11315] Quota error (device loop6): write_blk: dquota write failed
[  609.728800][T11315] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  609.730580][T11315] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.873: Failed to acquire dquot type 1
[  609.733411][T11315] EXT4-fs error (device loop6): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  609.736221][T11315] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.873: corrupted inode contents
[  609.739073][T11315] EXT4-fs error (device loop6): ext4_dirty_inode:6156: inode #12: comm syz.6.873: mark_inode_dirty error
[  609.741335][T11315] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.873: corrupted inode contents
[  609.744031][T11315] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #12: comm syz.6.873: mark_inode_dirty error
[  609.746446][T11315] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.873: corrupted inode contents
[  609.748999][T11315] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem
[  609.750707][T11315] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.873: corrupted inode contents
[  609.753039][T11315] EXT4-fs error (device loop6): ext4_truncate:4325: inode #12: comm syz.6.873: mark_inode_dirty error
[  609.764741][T11315] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem
[  609.768487][T11315] EXT4-fs (loop6): 1 truncate cleaned up
[  609.769557][T11315] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  609.772783][T11302] loop8: detected capacity change from 0 to 32768
[  609.785056][T11307] EXT4-fs (loop6): re-mounted. Quota mode: writeback.
[  609.815814][ T8724] EXT4-fs (loop6): unmounting filesystem.
[  609.936560][T11302] XFS (loop8): Mounting V5 Filesystem
[  609.951803][T10966] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  610.163276][T11342] loop6: detected capacity change from 0 to 512
[  610.284181][T11342] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  610.285722][T11342] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  610.288628][T11340] ceph: No mds server is up or the cluster is laggy
[  610.290101][ T4377] libceph: connect (1)[c::]:6789 error -101
[  610.291232][ T4377] libceph: mon0 (1)[c::]:6789 connect error
[  610.364479][T11302] XFS (loop8): Ending clean mount
[  610.414077][T10966] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  610.995786][T11354] loop4: detected capacity change from 0 to 512
[  611.020605][ T9346] XFS (loop8): Unmounting Filesystem
[  611.068049][T11350] ceph: No mds server is up or the cluster is laggy
[  611.241742][T11354] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  611.243255][T11354] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  611.245257][T11342] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002]
[  611.247528][ T4373] libceph: connect (1)[c::]:6789 error -101
[  611.248664][ T4373] libceph: mon0 (1)[c::]:6789 connect error
[  611.251267][T11342] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3861: comm syz.6.875: Allocating blocks 41-42 which overlap fs metadata
[  611.255591][T11342] Quota error (device loop6): write_blk: dquota write failed
[  611.257134][T11342] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5
[  611.259113][T11342] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3861: comm syz.6.875: Allocating blocks 41-42 which overlap fs metadata
[  611.261899][T11342] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.875: Failed to acquire dquot type 1
[  611.263701][T10966] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  611.266118][T11342] EXT4-fs error (device loop6): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  611.269000][T11342] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.875: corrupted inode contents
[  611.271550][T11342] EXT4-fs error (device loop6): ext4_dirty_inode:6156: inode #12: comm syz.6.875: mark_inode_dirty error
[  611.281982][T11342] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.875: corrupted inode contents
[  611.289732][T11342] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #12: comm syz.6.875: mark_inode_dirty error
[  611.292061][T11342] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.875: corrupted inode contents
[  611.294643][T11342] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem
[  611.296238][T11354] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002]
[  611.299414][T11342] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.875: corrupted inode contents
[  611.302029][T11354] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3861: comm syz.4.876: Allocating blocks 41-42 which overlap fs metadata
[  611.304556][T11342] EXT4-fs error (device loop6): ext4_truncate:4325: inode #12: comm syz.6.875: mark_inode_dirty error
[  611.306821][T11342] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem
[  611.308673][T11354] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3861: comm syz.4.876: Allocating blocks 41-42 which overlap fs metadata
[  611.316183][T11354] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.876: Failed to acquire dquot type 1
[  611.318554][T11342] EXT4-fs (loop6): 1 truncate cleaned up
[  611.319585][T11342] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  611.344013][T11354] EXT4-fs error (device loop4): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  611.346832][T11354] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.876: corrupted inode contents
[  611.351984][ T8722] EXT4-fs (loop1): unmounting filesystem.
[  611.354962][T11339] EXT4-fs (loop6): re-mounted. Quota mode: writeback.
[  611.355727][T11354] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #12: comm syz.4.876: mark_inode_dirty error
[  611.361752][T11354] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.876: corrupted inode contents
[  611.367010][T11354] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #12: comm syz.4.876: mark_inode_dirty error
[  611.372018][T11354] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.876: corrupted inode contents
[  611.374607][T11354] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  611.376487][T11354] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.876: corrupted inode contents
[  611.379988][T11354] EXT4-fs error (device loop4): ext4_truncate:4325: inode #12: comm syz.4.876: mark_inode_dirty error
[  611.382312][T11354] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  611.384322][T11354] EXT4-fs (loop4): 1 truncate cleaned up
[  611.385389][T11354] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  611.452138][T11347] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[  611.460592][T10966] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  611.851692][ T8724] EXT4-fs (loop6): unmounting filesystem.
[  611.853462][ T8715] EXT4-fs (loop4): unmounting filesystem.
[  612.146867][T10966] 8021q: adding VLAN 0 to HW filter on device bond0
[  612.156029][ T4374] libceph: connect (1)[c::]:6789 error -101
[  612.157294][ T4374] libceph: mon0 (1)[c::]:6789 connect error
[  612.160958][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  612.162863][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  612.166310][T10966] 8021q: adding VLAN 0 to HW filter on device team0
[  612.172313][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  612.174338][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  612.176260][ T4617] bridge0: port 1(bridge_slave_0) entered blocking state
[  612.177599][ T4617] bridge0: port 1(bridge_slave_0) entered forwarding state
[  612.189260][   T39] device hsr_slave_0 left promiscuous mode
[  612.204767][T11380] ceph: No mds server is up or the cluster is laggy
[  612.214940][T11363] loop4: detected capacity change from 0 to 32768
[  612.245190][   T39] device hsr_slave_1 left promiscuous mode
[  612.258092][T11385] loop6: detected capacity change from 0 to 512
[  612.280571][T11385] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  612.282213][T11385] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  612.310610][T11363] XFS (loop4): Mounting V5 Filesystem
[  612.368693][T11363] XFS (loop4): Ending clean mount
[  612.382732][T11374] loop8: detected capacity change from 0 to 32768
[  612.420711][T11385] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002]
[  612.423297][T11385] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3861: comm syz.6.879: Allocating blocks 41-42 which overlap fs metadata
[  612.441642][T11385] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3861: comm syz.6.879: Allocating blocks 41-42 which overlap fs metadata
[  612.517036][T11385] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.879: Failed to acquire dquot type 1
[  612.522373][T11385] EXT4-fs error (device loop6): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  612.522420][T11374] XFS (loop8): Mounting V5 Filesystem
[  612.527135][T11388] loop1: detected capacity change from 0 to 32768
[  612.527893][T11385] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.879: corrupted inode contents
[  612.528637][   T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  612.530922][T11385] EXT4-fs error (device loop6): ext4_dirty_inode:6156: inode #12: comm syz.6.879: mark_inode_dirty error
[  612.531706][   T39] batman_adv: batadv0: Removing interface: batadv_slave_0
[  612.536546][T11385] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.879: corrupted inode contents
[  612.537715][   T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  612.545992][   T39] batman_adv: batadv0: Removing interface: batadv_slave_1
[  612.561642][T11385] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #12: comm syz.6.879: mark_inode_dirty error
[  612.564000][T11385] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.879: corrupted inode contents
[  612.959756][   T39] device bridge_slave_1 left promiscuous mode
[  612.961083][   T39] bridge0: port 2(bridge_slave_1) entered disabled state
[  612.963589][T11374] XFS (loop8): Ending clean mount
[  612.968532][T11385] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem
[  612.970728][ T8715] XFS (loop4): Unmounting Filesystem
[  612.989684][T11385] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.879: corrupted inode contents
[  613.000260][T11385] EXT4-fs error (device loop6): ext4_truncate:4325: inode #12: comm syz.6.879: mark_inode_dirty error
[  613.088044][T11385] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem
[  613.092910][T11385] EXT4-fs (loop6): 1 truncate cleaned up
[  613.095484][T11388] XFS (loop1): Mounting V5 Filesystem
[  613.108149][T11385] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  613.497741][ T9346] XFS (loop8): Unmounting Filesystem
[  613.504100][T11388] XFS (loop1): Ending clean mount
[  613.511564][   T39] device bridge_slave_0 left promiscuous mode
[  613.512817][   T39] bridge0: port 1(bridge_slave_0) entered disabled state
[  613.594581][   T39] device veth1_macvtap left promiscuous mode
[  613.595771][   T39] device veth0_macvtap left promiscuous mode
[  613.596919][   T39] device veth1_vlan left promiscuous mode
[  613.621002][   T39] device veth0_vlan left promiscuous mode
[  613.628755][T11380] EXT4-fs (loop6): re-mounted. Quota mode: writeback.
[  614.257084][ T8722] XFS (loop1): Unmounting Filesystem
[  614.489581][ T8724] EXT4-fs (loop6): unmounting filesystem.
[  614.930745][T11444] loop6: detected capacity change from 0 to 512
[  615.054934][T11442] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6)
[  615.056168][T11442] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  615.057639][T11442] vhci_hcd vhci_hcd.0: Device attached
[  615.072989][T11444] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.885: inode has both inline data and extents flags
[  615.075775][T11444] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.885: couldn't read orphan inode 15 (err -117)
[  615.080467][T11444] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  615.463137][ T6606] usb 14-1: new low-speed USB device number 9 using vhci_hcd
[  615.473897][T11443] vhci_hcd: connection closed
[  615.474378][ T4726] vhci_hcd: stop threads
[  615.476092][ T4726] vhci_hcd: release socket
[  615.477028][ T4726] vhci_hcd: disconnect device
[  616.007441][T11436] loop4: detected capacity change from 0 to 32768
[  616.106393][ T8724] EXT4-fs (loop6): unmounting filesystem.
[  616.439422][T11462] loop6: detected capacity change from 0 to 512
[  616.526794][T11462] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.887: inode has both inline data and extents flags
[  616.530675][T11462] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.887: couldn't read orphan inode 15 (err -117)
[  616.533308][T11462] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  616.625046][T11459] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6)
[  616.626247][T11459] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  616.627834][T11459] vhci_hcd vhci_hcd.0: Device attached
[  617.077887][T11460] vhci_hcd: connection reset by peer
[  617.082851][ T4639] vhci_hcd: stop threads
[  617.083803][ T4639] vhci_hcd: release socket
[  617.085133][ T4639] vhci_hcd: disconnect device
[  617.363743][T11436] XFS (loop4): Mounting V5 Filesystem
[  617.537144][ T2059] ieee802154 phy0 wpan0: encryption failed: -22
[  617.538548][ T2059] ieee802154 phy1 wpan1: encryption failed: -22
[  617.563526][ T4375] libceph: connect (1)[c::]:6789 error -101
[  617.564764][ T4375] libceph: mon0 (1)[c::]:6789 connect error
[  617.627928][T11468] ceph: No mds server is up or the cluster is laggy
[  617.630613][ T8724] EXT4-fs (loop6): unmounting filesystem.
[  617.656968][T11471] loop8: detected capacity change from 0 to 512
[  617.672529][T11471] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  617.676428][T11471] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  617.689408][T11471] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002]
[  617.691739][T11471] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3861: comm syz.8.886: Allocating blocks 41-42 which overlap fs metadata
[  617.694551][T11471] __quota_error: 10 callbacks suppressed
[  617.694558][T11471] Quota error (device loop8): write_blk: dquota write failed
[  617.697086][T11471] Quota error (device loop8): find_free_dqentry: Can't write quota data block 5
[  617.702096][T11471] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3861: comm syz.8.886: Allocating blocks 41-42 which overlap fs metadata
[  617.704974][T11471] Quota error (device loop8): write_blk: dquota write failed
[  617.706398][T11471] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota
[  617.708712][T11471] EXT4-fs error (device loop8): ext4_acquire_dquot:6841: comm syz.8.886: Failed to acquire dquot type 1
[  617.711199][T11471] EXT4-fs error (device loop8): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  617.714237][T11471] EXT4-fs error (device loop8): ext4_do_update_inode:5279: inode #12: comm syz.8.886: corrupted inode contents
[  617.717072][T11471] EXT4-fs error (device loop8): ext4_dirty_inode:6156: inode #12: comm syz.8.886: mark_inode_dirty error
[  617.722535][T11471] EXT4-fs error (device loop8): ext4_do_update_inode:5279: inode #12: comm syz.8.886: corrupted inode contents
[  617.725055][T11471] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #12: comm syz.8.886: mark_inode_dirty error
[  617.727271][T11471] EXT4-fs error (device loop8): ext4_do_update_inode:5279: inode #12: comm syz.8.886: corrupted inode contents
[  617.730273][T11471] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem
[  617.732037][T11471] EXT4-fs error (device loop8): ext4_do_update_inode:5279: inode #12: comm syz.8.886: corrupted inode contents
[  617.734622][T11471] EXT4-fs error (device loop8): ext4_truncate:4325: inode #12: comm syz.8.886: mark_inode_dirty error
[  617.736924][T11471] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem
[  617.741972][T11471] EXT4-fs (loop8): 1 truncate cleaned up
[  617.743099][T11471] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  617.764332][T11436] XFS (loop4): log mount failed
[  617.796297][ T4728] libceph: connect (1)[c::]:6789 error -101
[  617.797434][ T4728] libceph: mon0 (1)[c::]:6789 connect error
[  617.844704][T11468] EXT4-fs (loop8): re-mounted. Quota mode: writeback.
[  617.866162][T11461] loop1: detected capacity change from 0 to 512
[  617.894231][T11461] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  617.895890][T11461] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  618.060033][ T4728] libceph: connect (1)[c::]:6789 error -101
[  618.062694][ T4728] libceph: mon0 (1)[c::]:6789 connect error
[  618.229577][T11461] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002]
[  618.232282][T11461] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3861: comm syz.1.884: Allocating blocks 41-42 which overlap fs metadata
[  618.236157][T11461] Quota error (device loop1): write_blk: dquota write failed
[  618.239833][T11461] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5
[  618.243757][T11461] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3861: comm syz.1.884: Allocating blocks 41-42 which overlap fs metadata
[  618.248652][T11461] Quota error (device loop1): write_blk: dquota write failed
[  618.250175][T11461] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  618.252140][T11461] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.884: Failed to acquire dquot type 1
[  618.254477][T11461] EXT4-fs error (device loop1): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  618.257226][T11461] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #12: comm syz.1.884: corrupted inode contents
[  618.266895][T11461] EXT4-fs error (device loop1): ext4_dirty_inode:6156: inode #12: comm syz.1.884: mark_inode_dirty error
[  618.269441][T11461] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #12: comm syz.1.884: corrupted inode contents
[  618.271731][T11461] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz.1.884: mark_inode_dirty error
[  618.273877][T11461] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #12: comm syz.1.884: corrupted inode contents
[  618.278962][T11461] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  618.280678][T11461] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #12: comm syz.1.884: corrupted inode contents
[  618.282819][T11461] EXT4-fs error (device loop1): ext4_truncate:4325: inode #12: comm syz.1.884: mark_inode_dirty error
[  618.284870][T11461] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  618.286707][T11461] EXT4-fs (loop1): 1 truncate cleaned up
[  618.288262][T11461] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  618.321391][T11461] EXT4-fs (loop1): re-mounted. Quota mode: writeback.
[  618.431749][T11456] ceph: No mds server is up or the cluster is laggy
[  618.474891][T11483] loop4: detected capacity change from 0 to 32768
[  618.508654][ T8722] EXT4-fs (loop1): unmounting filesystem.
[  618.533827][ T9346] EXT4-fs (loop8): unmounting filesystem.
[  618.588422][T11483] XFS (loop4): Mounting V5 Filesystem
[  618.602699][T11483] XFS (loop4): Ending clean mount
[  619.133618][T11501] loop8: detected capacity change from 0 to 512
[  619.304937][T11499] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6)
[  619.306212][T11499] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  619.307852][T11499] vhci_hcd vhci_hcd.0: Device attached
[  619.321069][T11501] EXT4-fs error (device loop8): ext4_orphan_get:1405: inode #15: comm syz.8.891: inode has both inline data and extents flags
[  619.324710][T11501] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.891: couldn't read orphan inode 15 (err -117)
[  619.327060][T11501] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  619.686314][ T4728] usb 18-1: new low-speed USB device number 8 using vhci_hcd
[  620.350213][T11500] vhci_hcd: connection closed
[  620.408466][T11503] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  620.413632][ T4521] vhci_hcd: stop threads
[  620.414578][ T4521] vhci_hcd: release socket
[  620.415647][ T4521] vhci_hcd: disconnect device
[  620.567937][ T6606] vhci_hcd: vhci_device speed not set
[  620.878302][ T8715] XFS (loop4): Unmounting Filesystem
[  620.984684][ T9346] EXT4-fs (loop8): unmounting filesystem.
[  621.045315][T11511] loop1: detected capacity change from 0 to 32768
[  621.116036][T11511] XFS (loop1): Mounting V5 Filesystem
[  621.218856][T11531] loop8: detected capacity change from 0 to 256
[  621.470668][T11511] XFS (loop1): Ending clean mount
[  622.081141][ T8722] XFS (loop1): Unmounting Filesystem
[  622.123771][   T39] team0 (unregistering): Port device team_slave_1 removed
[  622.443985][T11542] loop8: detected capacity change from 0 to 512
[  622.588880][T11539] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6)
[  622.590139][T11539] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  622.591649][T11539] vhci_hcd vhci_hcd.0: Device attached
[  622.637339][T11542] EXT4-fs error (device loop8): ext4_orphan_get:1405: inode #15: comm syz.8.896: inode has both inline data and extents flags
[  622.641528][T11542] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.896: couldn't read orphan inode 15 (err -117)
[  622.643975][T11542] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  622.916346][   T39] team0 (unregistering): Port device team_slave_0 removed
[  623.134534][T11540] vhci_hcd: connection closed
[  623.141790][  T104] vhci_hcd: stop threads
[  623.155977][  T104] vhci_hcd: release socket
[  623.157863][  T104] vhci_hcd: disconnect device
[  623.573780][T11535] loop4: detected capacity change from 0 to 32768
[  623.601539][T11535] XFS (loop4): Mounting V5 Filesystem
[  623.638769][   T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  623.640959][T11535] XFS (loop4): Ending clean mount
[  623.737792][ T9346] EXT4-fs (loop8): unmounting filesystem.
[  623.753801][T11548] loop1: detected capacity change from 0 to 32768
[  623.783041][T11548] XFS (loop1): Mounting V5 Filesystem
[  624.398483][T11572] loop8: detected capacity change from 0 to 512
[  624.652047][ T8715] XFS (loop4): Unmounting Filesystem
[  624.661778][T11548] XFS (loop1): Ending clean mount
[  625.324934][T11569] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6)
[  625.326226][T11569] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  625.327740][T11569] vhci_hcd vhci_hcd.0: Device attached
[  625.330412][T11572] EXT4-fs error (device loop8): ext4_orphan_get:1405: inode #15: comm syz.8.898: inode has both inline data and extents flags
[  625.332905][T11572] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.898: couldn't read orphan inode 15 (err -117)
[  625.335161][T11572] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  625.351336][   T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  626.280284][ T8722] XFS (loop1): Unmounting Filesystem
[  626.285629][T11571] vhci_hcd: connection reset by peer
[  626.288086][ T4639] vhci_hcd: stop threads
[  626.288857][ T4639] vhci_hcd: release socket
[  626.294850][ T4639] vhci_hcd: disconnect device
[  626.367579][ T4728] vhci_hcd: vhci_device speed not set
[  626.699193][T11582] loop4: detected capacity change from 0 to 256
[  626.967582][ T9346] EXT4-fs (loop8): unmounting filesystem.
[  628.020026][T11595] loop1: detected capacity change from 0 to 32768
[  628.037122][T11595] XFS (loop1): Mounting V5 Filesystem
[  628.052241][T11595] XFS (loop1): Ending clean mount
[  629.042862][T11611] loop8: detected capacity change from 0 to 512
[  629.280265][T11611] EXT4-fs error (device loop8): ext4_orphan_get:1405: inode #15: comm syz.8.904: inode has both inline data and extents flags
[  629.283206][T11611] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.904: couldn't read orphan inode 15 (err -117)
[  629.286126][T11611] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  629.385369][T11608] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6)
[  629.386662][T11608] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  629.388211][T11608] vhci_hcd vhci_hcd.0: Device attached
[  629.586722][ T8722] XFS (loop1): Unmounting Filesystem
[  629.677708][ T4728] usb 18-1: new low-speed USB device number 9 using vhci_hcd
[  629.808541][T11610] vhci_hcd: connection reset by peer
[  629.813625][ T6679] vhci_hcd: stop threads
[  629.814974][ T6679] vhci_hcd: release socket
[  629.816301][ T6679] vhci_hcd: disconnect device
[  630.315949][T11616] loop4: detected capacity change from 0 to 32768
[  630.335652][ T9346] EXT4-fs (loop8): unmounting filesystem.
[  630.363107][T11616] XFS (loop4): Mounting V5 Filesystem
[  630.392426][T11616] XFS (loop4): Ending clean mount
[  631.002110][   T39] bond0 (unregistering): Released all slaves
[  631.048024][ T8715] XFS (loop4): Unmounting Filesystem
[  631.596815][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  631.608001][T11517] netlink: 76 bytes leftover after parsing attributes in process `syz.6.892'.
[  631.620762][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  631.624742][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  631.628193][ T4617] bridge0: port 2(bridge_slave_1) entered blocking state
[  631.629701][ T4617] bridge0: port 2(bridge_slave_1) entered forwarding state
[  631.631345][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  631.633395][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  631.635404][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  631.651220][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  631.671315][T10966] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  631.673272][T10966] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  631.684446][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  631.686186][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  631.700629][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  631.702768][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  631.706812][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  631.709110][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  631.714056][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  631.718562][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  631.872126][T10966] 8021q: adding VLAN 0 to HW filter on device batadv0
[  631.903606][T10966] device veth0_vlan entered promiscuous mode
[  631.906848][T10966] device veth1_vlan entered promiscuous mode
[  631.928833][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  631.930422][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  631.931784][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  631.933773][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  631.944194][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  631.945992][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  631.954025][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  631.968409][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  631.977732][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  631.986955][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  631.991841][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  631.998089][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  632.007604][T10966] device veth0_macvtap entered promiscuous mode
[  632.010095][T10966] device veth1_macvtap entered promiscuous mode
[  632.014630][T10966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  632.039705][T10966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  632.041498][T10966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  632.043471][T10966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  632.045388][T10966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  632.047328][T10966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  632.067631][T10966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  632.069589][T10966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  632.072360][T10966] batman_adv: batadv0: Interface activated: batadv_slave_0
[  632.074540][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  632.076338][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  632.083950][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  632.085707][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  632.101224][T10966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  632.103178][T10966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  632.104979][T10966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  632.105020][T11720] xt_connbytes: Forcing CT accounting to be enabled
[  632.106876][T10966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  632.121948][T10966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  632.123784][T10966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  632.125564][T10966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  632.134916][T10966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  632.150535][T10966] batman_adv: batadv0: Interface activated: batadv_slave_1
[  632.155515][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  632.157436][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  632.186913][T10966] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  632.190053][T10966] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  632.192508][T10966] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  632.197719][T10966] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  632.363072][ T4521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  632.364725][ T4521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  632.383188][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  632.396114][ T4352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  632.397808][ T4352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  632.399303][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  632.775135][T11772] loop0: detected capacity change from 0 to 512
[  633.074173][T11769] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  633.075428][T11769] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  633.077198][T11769] vhci_hcd vhci_hcd.0: Device attached
[  633.210851][T11772] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.755: inode has both inline data and extents flags
[  633.213968][T11772] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.755: couldn't read orphan inode 15 (err -117)
[  633.216397][T11772] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  633.488069][ T4757] usb 2-1: new low-speed USB device number 15 using vhci_hcd
[  633.740859][T11770] vhci_hcd: connection reset by peer
[  633.791979][    T9] vhci_hcd: stop threads
[  633.845759][    T9] vhci_hcd: release socket
[  633.848664][    T9] vhci_hcd: disconnect device
[  633.902944][T11782] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  633.904408][T11782] IPv6: NLM_F_CREATE should be set when creating new route
[  633.994187][T11782] netlink: 20 bytes leftover after parsing attributes in process `syz.4.945'.
[  634.279212][T10966] EXT4-fs (loop0): unmounting filesystem.
[  634.807990][ T4728] vhci_hcd: vhci_device speed not set
[  634.961961][T11836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.958'.
[  635.060202][T11843] device syzkaller0 entered promiscuous mode
[  635.084256][T11853] device syzkaller0 entered promiscuous mode
[  638.648170][ T4757] vhci_hcd: vhci_device speed not set
[  645.991191][T11888] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  646.454454][T11961] device syzkaller0 entered promiscuous mode
[  646.666451][T11997] loop6: detected capacity change from 0 to 256
[  646.670030][T11997] FAT-fs (loop6): Unrecognized mount option "shortname=winntNuni_xlate=0" or missing value
[  646.679941][T11996] loop0: detected capacity change from 0 to 256
[  646.759592][T11996] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d)
[  646.762061][T11996] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  646.763853][T11984] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  646.773332][T11996] syz.0.1000: attempt to access beyond end of device
[  646.773332][T11996] loop0: rw=524288, sector=440, nr_sectors = 256 limit=256
[  646.776432][T11996] syz.0.1000: attempt to access beyond end of device
[  646.776432][T11996] loop0: rw=524288, sector=696, nr_sectors = 256 limit=256
[  646.787753][T11996] syz.0.1000: attempt to access beyond end of device
[  646.787753][T11996] loop0: rw=0, sector=440, nr_sectors = 8 limit=256
[  646.790152][T11996] syz.0.1000: attempt to access beyond end of device
[  646.790152][T11996] loop0: rw=0, sector=440, nr_sectors = 8 limit=256
[  646.793938][T11996] syz.0.1000: attempt to access beyond end of device
[  646.793938][T11996] loop0: rw=0, sector=440, nr_sectors = 8 limit=256
[  646.797453][T11996] syz.0.1000: attempt to access beyond end of device
[  646.797453][T11996] loop0: rw=0, sector=440, nr_sectors = 8 limit=256
[  646.851024][T12008] bridge0: port 3(syz_tun) entered blocking state
[  646.854831][T12008] bridge0: port 3(syz_tun) entered disabled state
[  646.860671][T12008] device syz_tun entered promiscuous mode
[  646.862924][T12008] bridge0: port 3(syz_tun) entered blocking state
[  646.864117][T12008] bridge0: port 3(syz_tun) entered forwarding state
[  647.081284][T11997] loop6: detected capacity change from 0 to 4096
[  647.083607][T11996] syz.0.1000: attempt to access beyond end of device
[  647.083607][T11996] loop0: rw=0, sector=440, nr_sectors = 8 limit=256
[  647.101198][T11996] syz.0.1000: attempt to access beyond end of device
[  647.101198][T11996] loop0: rw=0, sector=440, nr_sectors = 8 limit=256
[  647.104043][T11996] syz.0.1000: attempt to access beyond end of device
[  647.104043][T11996] loop0: rw=0, sector=440, nr_sectors = 8 limit=256
[  647.118726][T11996] syz.0.1000: attempt to access beyond end of device
[  647.118726][T11996] loop0: rw=0, sector=440, nr_sectors = 8 limit=256
[  647.135963][T11997] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  647.206978][T12007] loop8: detected capacity change from 0 to 40427
[  647.210108][ T8724] EXT4-fs (loop6): unmounting filesystem.
[  647.215888][T12007] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[  647.218804][T12007] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  647.249461][T12007] F2FS-fs (loop8): Found nat_bits in checkpoint
[  647.270184][T12007] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  647.271774][T12007] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  647.323786][T11995] loop4: detected capacity change from 0 to 40427
[  647.346648][T11995] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  647.348431][T11995] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  647.365339][T12007] overlayfs: failed to resolve './file0': -2
[  647.375473][T11995] F2FS-fs (loop4): Found nat_bits in checkpoint
[  647.392456][T11995] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  647.393913][T11995] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  647.463162][T12037] loop6: detected capacity change from 0 to 1024
[  647.477390][T12037] EXT4-fs: Ignoring removed bh option
[  647.483991][T12037] EXT4-fs: Ignoring removed bh option
[  647.560384][T12037] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  647.575986][T12042] xt_hashlimit: size too large, truncated to 1048576
[  647.685703][ T8724] EXT4-fs (loop6): unmounting filesystem.
[  647.733915][T12054] loop8: detected capacity change from 0 to 128
[  647.804775][T12059] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  648.520122][ T4331] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  648.522850][ T4331] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  648.556501][ T4331] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  648.563748][ T4331] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  648.565386][ T4331] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  648.566858][ T4331] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  648.609925][    T9] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  648.759171][    T9] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  648.872153][    T9] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  648.933255][T12094] chnl_net:caif_netlink_parms(): no params data found
[  648.990858][T12052] loop6: detected capacity change from 0 to 131072
[  649.005955][T12052] F2FS-fs (loop6): inline encryption not supported
[  649.019102][    T9] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  649.031294][T12052] F2FS-fs (loop6): Test dummy encryption mode enabled
[  649.041200][T12052] F2FS-fs (loop6): invalid crc value
[  649.082601][T12094] bridge0: port 1(bridge_slave_0) entered blocking state
[  649.084320][T12094] bridge0: port 1(bridge_slave_0) entered disabled state
[  649.086015][T12094] device bridge_slave_0 entered promiscuous mode
[  649.092318][T12052] F2FS-fs (loop6): Found nat_bits in checkpoint
[  649.106904][T12094] bridge0: port 2(bridge_slave_1) entered blocking state
[  649.114734][T12094] bridge0: port 2(bridge_slave_1) entered disabled state
[  649.116492][T12052] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  649.124700][T12094] device bridge_slave_1 entered promiscuous mode
[  649.125494][T12052] fscrypt: AES-256-XTS using implementation "xts-aes-ce"
[  649.182530][T12094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  649.185563][T12094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  649.227242][T12094] team0: Port device team_slave_0 added
[  649.260786][T12094] team0: Port device team_slave_1 added
[  649.283360][T12094] batman_adv: batadv0: Adding interface: batadv_slave_0
[  649.284734][T12094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  649.304070][T12094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  649.320637][T12094] batman_adv: batadv0: Adding interface: batadv_slave_1
[  649.322027][T12094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  649.326678][T12094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  649.356891][T12077] loop4: detected capacity change from 0 to 131072
[  649.399004][T12077] F2FS-fs (loop4): invalid crc value
[  649.419469][T12094] device hsr_slave_0 entered promiscuous mode
[  649.424072][T12077] F2FS-fs (loop4): Found nat_bits in checkpoint
[  649.443582][T12077] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2
[  649.450794][T12094] device hsr_slave_1 entered promiscuous mode
[  649.453215][T12077] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  649.497788][T12094] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  649.499275][T12094] Cannot create hsr debugfs directory
[  649.576242][T12129] loop0: detected capacity change from 0 to 40427
[  649.605024][T12129] F2FS-fs (loop0): invalid crc value
[  649.618594][T12129] F2FS-fs (loop0): Found nat_bits in checkpoint
[  649.626044][T12129] F2FS-fs (loop0): Start checkpoint disabled!
[  649.652701][T12129] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  649.692548][T12156] xt_hashlimit: size too large, truncated to 1048576
[  650.207626][ T4373] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  650.393026][ T4373] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  650.395249][ T4373] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30
[  650.397236][ T4373] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 254
[  650.419317][ T4373] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  650.421032][ T4373] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  650.422595][ T4373] usb 1-1: Product: syz
[  650.426733][ T4373] usb 1-1: Manufacturer: syz
[  650.427799][ T4373] usb 1-1: SerialNumber: syz
[  650.647832][ T4331] Bluetooth: hci0: command 0x0409 tx timeout
[  650.651070][ T4373] usb 1-1: bad CDC descriptors
[  650.662685][ T4373] usb 1-1: USB disconnect, device number 2
[  650.708015][T12094] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  650.738961][T12094] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  650.832696][T12094] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  650.869657][T12094] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  650.870293][T12172] F2FS-fs (loop6): Wrong NAT boundary, start(2560) end(3584) blocks(0)
[  650.872581][T12172] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  650.875538][T12172] F2FS-fs (loop6): invalid crc value
[  650.897087][T12172] F2FS-fs (loop6): Found nat_bits in checkpoint
[  650.913229][T12172] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  650.914609][T12172] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  651.486808][T12203] capability: warning: `syz.6.1026' uses deprecated v2 capabilities in a way that may be insecure
[  651.583129][T12094] 8021q: adding VLAN 0 to HW filter on device bond0
[  651.584212][T12209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  651.590574][ T7035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  651.592998][ T7035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  651.596500][T12094] 8021q: adding VLAN 0 to HW filter on device team0
[  651.596703][T12209] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  651.601721][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  651.603800][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  651.605771][ T4617] bridge0: port 1(bridge_slave_0) entered blocking state
[  651.607118][ T4617] bridge0: port 1(bridge_slave_0) entered forwarding state
[  651.720082][T12211] set_capacity_and_notify: 1 callbacks suppressed
[  651.720092][T12211] loop0: detected capacity change from 0 to 256
[  651.739742][T12211] exFAT-fs (loop0): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d)
[  651.963349][T12213] bio_check_eod: 4267 callbacks suppressed
[  651.963380][T12213] syz.0.1032: attempt to access beyond end of device
[  651.963380][T12213] loop0: rw=524288, sector=4280, nr_sectors = 1 limit=256
[  651.967690][T12213] syz.0.1032: attempt to access beyond end of device
[  651.967690][T12213] loop0: rw=0, sector=4280, nr_sectors = 1 limit=256
[  652.148558][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  652.150327][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  652.151997][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  652.153643][ T4617] bridge0: port 2(bridge_slave_1) entered blocking state
[  652.154916][ T4617] bridge0: port 2(bridge_slave_1) entered forwarding state
[  652.160628][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  652.162967][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  652.165009][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  652.168518][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  652.170730][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  652.191365][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  652.194320][T12215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1033'.
[  652.194639][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  652.196853][T12215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1033'.
[  652.234263][T12217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  652.238935][T12217] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  652.272891][    T9] device hsr_slave_0 left promiscuous mode
[  652.309040][    T9] device hsr_slave_1 left promiscuous mode
[  652.387622][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  652.389334][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  652.391202][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  652.392737][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  652.394952][    T9] device bridge_slave_1 left promiscuous mode
[  652.397388][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  652.468747][    T9] device bridge_slave_0 left promiscuous mode
[  652.470142][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  652.931404][ T4340] Bluetooth: hci0: command 0x041b tx timeout
[  653.132350][T12229] loop4: detected capacity change from 0 to 2048
[  653.160841][    T9] device veth1_macvtap left promiscuous mode
[  653.162217][    T9] device veth0_macvtap left promiscuous mode
[  653.163631][    T9] device veth1_vlan left promiscuous mode
[  653.164997][    T9] device veth0_vlan left promiscuous mode
[  653.485746][T12229] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  653.515971][T12229] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  653.519796][T12229] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28
[  653.522206][T12229] EXT4-fs (loop4): This should not happen!! Data will be lost
[  653.522206][T12229] 
[  653.523991][T12229] EXT4-fs (loop4): Total free blocks count 0
[  653.525158][T12229] EXT4-fs (loop4): Free/Dirty block details
[  653.526379][T12229] EXT4-fs (loop4): free_blocks=4096
[  653.527374][T12229] EXT4-fs (loop4): dirty_blocks=32
[  653.528493][T12229] EXT4-fs (loop4): Block reservation details
[  653.529617][T12229] EXT4-fs (loop4): i_reserved_data_blocks=2
[  653.772678][T12236] loop0: detected capacity change from 0 to 1024
[  653.787788][T12236] EXT4-fs: Ignoring removed nomblk_io_submit option
[  653.796894][T12236] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  653.808544][T12236] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  653.810169][T12236] System zones: 0-1, 3-36
[  653.814713][T12236] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  654.064144][T12241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  654.065799][T12241] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  654.149269][T12239] loop1: detected capacity change from 0 to 4096
[  654.160773][T12239] EXT4-fs (loop1): Test dummy encryption mode enabled
[  654.162840][T12239] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8843c01c, mo2=0003]
[  654.164985][T12239] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  654.322672][ T8722] EXT4-fs (loop1): unmounting filesystem.
[  654.357291][T12245] loop1: detected capacity change from 0 to 256
[  654.361167][T12245] exfat: Deprecated parameter 'utf8'
[  654.371034][T10966] EXT4-fs (loop0): unmounting filesystem.
[  654.372229][T12245] exfat: Deprecated parameter 'namecase'
[  654.373352][T12245] exfat: Deprecated parameter 'namecase'
[  654.383560][T12245] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc3758327, utbl_chksum : 0xe619d30d)
[  654.455661][T12252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  654.458166][T12252] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  654.977670][ T4340] Bluetooth: hci0: command 0x040f tx timeout
[  655.144791][T12260] loop6: detected capacity change from 0 to 512
[  655.150960][T12260] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[  655.153147][T12260] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 not in group (block 2)!
[  655.155081][T12260] EXT4-fs (loop6): group descriptors corrupted!
[  655.196506][T12262] binder: 12261:12262 tried to acquire reference to desc 0, got 1 instead
[  655.199436][T12262] binder: 12261:12262 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  655.201925][T12262] binder: 12262 RLIMIT_NICE not set
[  655.202962][T12262] binder: 12262 RLIMIT_NICE not set
[  655.204212][ T4373] binder: release 12261:12262 transaction 18 out, still active
[  655.205528][ T4373] binder: undelivered TRANSACTION_COMPLETE
[  655.214861][ T4373] binder: release 12261:12262 transaction 18 in, still active
[  655.216324][ T4373] binder: send failed reply for transaction 18, target dead
[  655.999582][    T9] team0 (unregistering): Port device team_slave_1 removed
[  656.160155][    T9] team0 (unregistering): Port device team_slave_0 removed
[  656.318133][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  656.518063][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  657.047595][ T4331] Bluetooth: hci0: command 0x0419 tx timeout
[  657.958584][    T9] bond0 (unregistering): Released all slaves
[  658.249890][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  658.251753][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  658.258695][T12094] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  658.261266][T12094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  658.295750][ T6564] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  658.325702][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  658.330532][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  658.344182][T12272] loop0: detected capacity change from 0 to 256
[  658.364665][T12274] loop4: detected capacity change from 0 to 2048
[  658.366287][T12274] EXT4-fs: Ignoring removed mblk_io_submit option
[  658.367157][T12276] loop1: detected capacity change from 0 to 512
[  658.367408][T12274] EXT4-fs: Ignoring removed mblk_io_submit option
[  658.381793][T12272] FAT-fs (loop0): Directory bread(block 64) failed
[  658.387181][T12272] FAT-fs (loop0): Directory bread(block 65) failed
[  658.393691][T12272] FAT-fs (loop0): Directory bread(block 66) failed
[  658.394875][T12272] FAT-fs (loop0): Directory bread(block 67) failed
[  658.396099][T12272] FAT-fs (loop0): Directory bread(block 68) failed
[  658.397332][T12272] FAT-fs (loop0): Directory bread(block 69) failed
[  658.406815][T12272] FAT-fs (loop0): Directory bread(block 70) failed
[  658.411194][T12272] FAT-fs (loop0): Directory bread(block 71) failed
[  658.412408][T12272] FAT-fs (loop0): Directory bread(block 72) failed
[  658.419131][T12272] FAT-fs (loop0): Directory bread(block 73) failed
[  658.456059][T12274] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  658.481502][T12276] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  658.483174][T12276] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  658.552849][T12286] loop6: detected capacity change from 0 to 128
[  659.596869][T12272] syz.0.1052: attempt to access beyond end of device
[  659.596869][T12272] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256
[  659.627809][T12272] syz.0.1052: attempt to access beyond end of device
[  659.627809][T12272] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256
[  659.630503][T12272] Buffer I/O error on dev loop0, logical block 298, async page read
[  659.685098][T12094] 8021q: adding VLAN 0 to HW filter on device batadv0
[  659.687261][ T6630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  659.691090][ T6630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  659.724587][ T8715] EXT4-fs (loop4): unmounting filesystem.
[  659.759125][T12290] device syzkaller0 entered promiscuous mode
[  659.813384][T12295] loop0: detected capacity change from 0 to 2048
[  659.846596][T12295] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  659.848404][T12295] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  660.334472][ T8722] EXT4-fs (loop1): unmounting filesystem.
[  660.646456][T10966] EXT4-fs (loop0): unmounting filesystem.
[  670.782505][ T6630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  670.784466][ T6630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  670.791232][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  670.793117][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  670.797994][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  670.804956][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  670.807317][T12094] device veth0_vlan entered promiscuous mode
[  670.860449][T12094] device veth1_vlan entered promiscuous mode
[  670.977208][T12094] device veth0_macvtap entered promiscuous mode
[  670.987029][T12349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1068'.
[  671.032846][ T6564] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  671.034733][ T6564] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  671.038882][ T6564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  671.045290][ T6564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  671.049763][T12094] device veth1_macvtap entered promiscuous mode
[  671.054168][T12094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  671.055188][T12344] infiniband syz2: set active
[  671.056123][T12094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  671.056138][T12094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  671.057275][T12344] infiniband syz2: added bond0
[  671.066698][T12094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  671.070924][T12094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  671.072266][T12371] loop0: detected capacity change from 0 to 512
[  671.072838][T12094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  671.075818][T12094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  671.085816][T12094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  671.090090][T12371] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  671.094539][T12344] RDS/IB: syz2: added
[  671.096487][T12094] batman_adv: batadv0: Interface activated: batadv_slave_0
[  671.097785][T12344] smc: adding ib device syz2 with port count 1
[  671.099170][T12344] smc:    ib device syz2 port 1 has pnetid 
[  671.122036][ T6564] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  671.123813][ T6564] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  671.125419][ T6564] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  671.127170][ T6564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  671.140162][T12094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  671.142151][T12094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  671.144021][T12094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  671.145948][T12094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  671.160381][T12371] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.1072: iget: bad i_size value: 38620345925642
[  671.160421][T12094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  671.165342][T12371] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.1072: couldn't read orphan inode 15 (err -117)
[  671.170249][T12371] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  671.172204][T12094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  671.184931][T12094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  671.193029][T12094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  671.200551][T12371] overlayfs: failed to resolve './cgroup': -2
[  671.203327][T12094] batman_adv: batadv0: Interface activated: batadv_slave_1
[  671.212445][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  671.214340][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  671.217115][T12094] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  671.219265][T12094] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  671.220853][T12094] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  671.222485][T12094] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  671.578945][T12389] device vlan0 entered promiscuous mode
[  671.610901][ T4726] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  671.612477][ T4726] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  671.613906][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  671.623625][ T4726] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  671.625170][ T4726] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  671.626787][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  671.726145][T12399] loop7: detected capacity change from 0 to 1024
[  671.732332][T12399] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  671.735957][T12399] EXT4-fs (loop7): orphan cleanup on readonly fs
[  671.740979][T12399] EXT4-fs error (device loop7): ext4_free_blocks:6220: comm syz.7.1025: Freeing blocks not in datazone - block = 0, count = 4096
[  671.750494][T12399] EXT4-fs (loop7): Remounting filesystem read-only
[  671.753159][T12399] EXT4-fs (loop7): 1 orphan inode deleted
[  671.755496][T12399] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  671.781188][T12094] EXT4-fs (loop7): unmounting filesystem.
[  671.812109][T12406] loop7: detected capacity change from 0 to 512
[  671.852057][T12406] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  671.854181][T12406] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  671.881549][T10966] EXT4-fs (loop0): unmounting filesystem.
[  671.921644][T12412] loop6: detected capacity change from 0 to 512
[  671.940748][T12412] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  671.942616][T12412] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  671.953505][T12406] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  671.964665][T12406] EXT4-fs (loop7): re-mounted. Quota mode: writeback.
[  672.016809][ T8724] EXT4-fs (loop6): unmounting filesystem.
[  672.045357][T12094] EXT4-fs (loop7): unmounting filesystem.
[  672.182711][ T4340] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  672.184806][ T4340] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  672.187211][ T4325] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  672.334574][   T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  672.421319][ T4340] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  672.426060][ T4340] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  672.430126][ T4340] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  672.579162][T12425] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1080'.
[  672.669470][T12462] loop7: detected capacity change from 0 to 256
[  672.674164][T12462] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  672.679882][   T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  672.733333][T12465] rdma_rxe: rxe_register_device failed with error -23
[  672.734757][T12465] rdma_rxe: failed to add bond0
[  672.755831][T12468] xt_hashlimit: size too large, truncated to 1048576
[  672.770738][T12469] loop6: detected capacity change from 0 to 512
[  672.782968][T12469] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  672.809037][   T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  672.811300][T12469] EXT4-fs (loop6): 1 truncate cleaned up
[  672.812364][T12469] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  672.903123][   T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  672.985227][T12484] device sit0 entered promiscuous mode
[  672.993939][T12484] netlink: 'syz.1.1091': attribute type 1 has an invalid length.
[  672.995392][T12484] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1091'.
[  673.358709][T12438] chnl_net:caif_netlink_parms(): no params data found
[  673.453889][T12438] bridge0: port 1(bridge_slave_0) entered blocking state
[  673.456615][T12438] bridge0: port 1(bridge_slave_0) entered disabled state
[  673.462756][T12438] device bridge_slave_0 entered promiscuous mode
[  673.466934][T12438] bridge0: port 2(bridge_slave_1) entered blocking state
[  673.470688][T12438] bridge0: port 2(bridge_slave_1) entered disabled state
[  673.474407][T12438] device bridge_slave_1 entered promiscuous mode
[  673.510972][T12438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  673.517457][T12438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  673.540404][T12438] team0: Port device team_slave_0 added
[  673.545574][T12438] team0: Port device team_slave_1 added
[  673.557984][T12438] batman_adv: batadv0: Adding interface: batadv_slave_0
[  673.561583][T12438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  673.572014][T12438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  673.595150][T12438] batman_adv: batadv0: Adding interface: batadv_slave_1
[  673.629117][T12438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  673.642775][ T8724] EXT4-fs (loop6): unmounting filesystem.
[  673.654271][T12438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  674.041705][T12438] device hsr_slave_0 entered promiscuous mode
[  674.068757][T12438] device hsr_slave_1 entered promiscuous mode
[  674.117598][T12438] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  674.119206][T12438] Cannot create hsr debugfs directory
[  674.165404][T12504] device syzkaller0 entered promiscuous mode
[  674.487923][ T4331] Bluetooth: hci1: command 0x0409 tx timeout
[  674.558936][T12477] loop4: detected capacity change from 0 to 262144
[  674.573409][T12477] F2FS-fs (loop4): Found nat_bits in checkpoint
[  674.597006][T12477] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  676.018957][T12567] loop7: detected capacity change from 0 to 1024
[  676.034399][T12567] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  676.052799][T12567] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  676.064889][T12567] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  676.069776][T12567] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  676.072630][T12567] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 47 with max blocks 1 with error 28
[  676.074887][T12567] EXT4-fs (loop7): This should not happen!! Data will be lost
[  676.074887][T12567] 
[  676.076698][T12567] EXT4-fs (loop7): Total free blocks count 0
[  676.081324][T12567] EXT4-fs (loop7): Free/Dirty block details
[  676.082515][T12567] EXT4-fs (loop7): free_blocks=20480
[  676.083510][T12567] EXT4-fs (loop7): dirty_blocks=32
[  676.084469][T12567] EXT4-fs (loop7): Block reservation details
[  676.085584][T12567] EXT4-fs (loop7): i_reserved_data_blocks=2
[  676.100447][ T6564] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  676.567567][ T4340] Bluetooth: hci1: command 0x041b tx timeout
[  678.647537][ T4331] Bluetooth: hci1: command 0x040f tx timeout
[  678.888593][ T2059] ieee802154 phy0 wpan0: encryption failed: -22
[  678.889864][ T2059] ieee802154 phy1 wpan1: encryption failed: -22
[  680.727529][ T4331] Bluetooth: hci1: command 0x0419 tx timeout
[  685.322506][T12528] tipc: Started in network mode
[  685.323460][T12528] tipc: Node identity 6e1420c03445, cluster identity 4711
[  685.324946][T12528] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  685.495462][T12521] tipc: Disabling bearer <eth:syzkaller0>
[  685.635613][T12600] loop7: detected capacity change from 0 to 128
[  686.796049][T12583] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1108'.
[  686.882502][T12592] loop4: detected capacity change from 0 to 40427
[  686.903342][T12592] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  686.904845][T12592] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  686.913849][T12592] F2FS-fs (loop4): invalid crc value
[  686.928132][T12592] F2FS-fs (loop4): Found nat_bits in checkpoint
[  686.965531][T12592] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  686.966941][T12592] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  688.053243][T12605] loop7: detected capacity change from 0 to 40427
[  688.054886][T12632] loop1: detected capacity change from 0 to 512
[  688.091912][T12632] EXT4-fs: Ignoring removed i_version option
[  688.093895][T12605] F2FS-fs (loop7): invalid crc value
[  688.095233][T12632] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  688.119171][T12605] F2FS-fs (loop7): Found nat_bits in checkpoint
[  688.135624][T12605] F2FS-fs (loop7): Start checkpoint disabled!
[  688.154276][T12632] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  688.156153][T12632] ext4 filesystem being mounted at /99/file7 supports timestamps until 2038-01-19 (0x7fffffff)
[  688.181845][T12605] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  688.306518][T12632] EXT4-fs error (device loop1): ext4_dx_csum_verify:502: inode #2: comm syz.1.1114: dir seems corrupt?  Run e2fsck -D.
[  688.316758][T12632] EXT4-fs (loop1): Remounting filesystem read-only
[  688.318384][T12632] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.1114: Directory index failed checksum
[  688.326101][T12632] EXT4-fs (loop1): Remounting filesystem read-only
[  688.356479][ T8722] EXT4-fs (loop1): unmounting filesystem.
[  688.535122][T12672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1122'.
[  689.113872][T12697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  689.115617][T12697] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  689.229986][T12438] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  689.249155][T12438] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  689.290345][T12438] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  689.349321][T12669] loop6: detected capacity change from 0 to 131072
[  689.361555][T12669] F2FS-fs (loop6): Wrong NAT boundary, start(2560) end(3584) blocks(0)
[  689.363113][T12669] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  689.382080][T12669] F2FS-fs (loop6): invalid crc value
[  689.414140][T12669] F2FS-fs (loop6): Found nat_bits in checkpoint
[  689.434294][T12669] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  689.435686][T12669] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  689.503138][T12438] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  689.586920][T12730] binder: 12729:12730 got transaction to invalid handle, 1
[  689.593874][T12730] binder: 12730:12729 cannot find target node
[  689.594992][T12730] binder: 12729:12730 transaction async to 0:0 failed 19/29201/-22, size 0-0 line 3045
[  689.597382][   T22] binder: undelivered TRANSACTION_ERROR: 29201
[  689.783444][T12739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1135'.
[  689.916105][T12438] 8021q: adding VLAN 0 to HW filter on device bond0
[  689.932035][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  689.933764][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  689.936235][T12438] 8021q: adding VLAN 0 to HW filter on device team0
[  689.947226][ T6630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  689.949632][ T6630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  689.951505][ T6630] bridge0: port 1(bridge_slave_0) entered blocking state
[  689.952907][ T6630] bridge0: port 1(bridge_slave_0) entered forwarding state
[  689.968104][ T6630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  689.995921][ T6630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  689.997941][ T6630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  689.999677][ T6630] bridge0: port 2(bridge_slave_1) entered blocking state
[  690.001042][ T6630] bridge0: port 2(bridge_slave_1) entered forwarding state
[  690.002636][ T6630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  690.012242][ T6630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  690.016026][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  690.018299][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  690.020435][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  690.023203][ T6630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  690.039875][ T6630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  690.062413][   T11] device hsr_slave_0 left promiscuous mode
[  690.093034][   T11] device hsr_slave_1 left promiscuous mode
[  690.139697][T12770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  690.149337][T12770] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  690.150470][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  690.152186][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  690.154955][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  690.156344][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  690.164582][   T11] device bridge_slave_1 left promiscuous mode
[  690.165812][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  690.193491][   T11] device bridge_slave_0 left promiscuous mode
[  690.194869][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  690.317630][   T11] device veth1_macvtap left promiscuous mode
[  690.318835][   T11] device veth0_macvtap left promiscuous mode
[  690.320039][   T11] device veth1_vlan left promiscuous mode
[  690.321194][   T11] device veth0_vlan left promiscuous mode
[  690.524216][T12743] loop7: detected capacity change from 0 to 131072
[  690.526716][T12743] F2FS-fs (loop7): invalid crc value
[  690.558661][T12743] F2FS-fs (loop7): Found nat_bits in checkpoint
[  690.569119][T12743] F2FS-fs (loop7): Cannot turn on quotas: -2 on 2
[  690.584539][T12743] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  690.710992][T12788] loop6: detected capacity change from 0 to 1024
[  690.712560][T12788] ext4: Unknown parameter 'noacl'
[  690.742482][T12649] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  690.748564][T12788] overlayfs: failed to resolve './file0': -2
[  690.826573][T12790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  690.835849][T12790] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  690.926582][T12765] loop4: detected capacity change from 0 to 131072
[  690.940264][T12765] F2FS-fs (loop4): Invalid log sectorsize (67108873)
[  690.941518][T12765] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  690.943290][T12765] F2FS-fs (loop4): invalid crc value
[  690.982724][T12765] F2FS-fs (loop4): Found nat_bits in checkpoint
[  691.001853][T12765] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  691.003151][T12765] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  691.422559][T12799] loop6: detected capacity change from 0 to 4096
[  691.428120][T12799] EXT4-fs: inline encryption not supported
[  691.429186][T12799] EXT4-fs: Ignoring removed mblk_io_submit option
[  691.430582][T12799] EXT4-fs: Ignoring removed bh option
[  691.462112][T12799] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  691.468021][T12799] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002]
[  691.469482][T12799] System zones: 0-5
[  691.472173][T12799] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  692.690801][   T11] team0 (unregistering): Port device team_slave_1 removed
[  692.869800][   T11] team0 (unregistering): Port device team_slave_0 removed
[  693.028621][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  693.228498][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  694.729046][   T11] bond0 (unregistering): Released all slaves
[  694.930310][ T6564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  694.932159][ T6564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  694.933920][ T6564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  694.935655][ T6564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  694.938846][T12438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  694.984439][ T8724] EXT4-fs (loop6): unmounting filesystem.
[  694.988289][T12810] tipc: Started in network mode
[  694.989184][T12810] tipc: Node identity 0000000000002e000000000000000001, cluster identity 4711
[  694.990779][T12810] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  695.144415][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  695.146004][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  695.215554][T12438] 8021q: adding VLAN 0 to HW filter on device batadv0
[  695.218977][T12835] loop1: detected capacity change from 0 to 128
[  695.222315][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  695.224159][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  695.231722][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  695.233555][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  695.235419][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  695.236934][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  695.245927][T12438] device veth0_vlan entered promiscuous mode
[  695.250271][T12438] device veth1_vlan entered promiscuous mode
[  695.291727][ T6564] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  695.293567][ T6564] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  695.295220][ T6564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  695.297277][ T6564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  695.320876][T12438] device veth0_macvtap entered promiscuous mode
[  695.323457][T12438] device veth1_macvtap entered promiscuous mode
[  695.344196][T12840] loop6: detected capacity change from 0 to 4096
[  695.345742][T12840] EXT4-fs: inline encryption not supported
[  695.346936][T12840] ext4: Unknown parameter 'noacl'
[  695.350518][T12438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  695.352517][T12438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  695.354290][T12438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  695.364218][T12438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  695.366009][T12438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  695.370651][T12438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  695.372579][T12438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  695.374452][T12438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  695.418819][T12438] batman_adv: batadv0: Interface activated: batadv_slave_0
[  695.420259][ T6564] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  695.421947][ T6564] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  695.423543][ T6564] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  695.425269][ T6564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  695.433908][T12438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  695.435913][T12438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  695.445006][T12438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  695.446934][T12438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  695.459319][T12438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  695.461424][T12438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  695.479030][T12438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  695.481323][T12438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  695.494892][T12438] batman_adv: batadv0: Interface activated: batadv_slave_1
[  695.496312][ T6564] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  695.498335][ T6564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  695.505954][T12438] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  695.515967][T12438] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  695.521231][T12438] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  695.522987][T12438] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  695.541077][T12849] loop1: detected capacity change from 0 to 8192
[  695.578812][T12849] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  695.605644][ T4606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  695.607148][ T4606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  695.625273][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  695.627851][T12581] I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  695.642971][ T4521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  695.644506][ T4521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  695.646059][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  695.682980][T12856] tipc: Started in network mode
[  695.683911][T12856] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  695.685953][T12856] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  695.698577][T12856] tipc: Enabled bearer <udp:syz0>, priority 10
[  695.773396][T12863] loop2: detected capacity change from 0 to 512
[  695.787934][T12866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1161'.
[  695.796422][T12863] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  695.839728][T12863] EXT4-fs (loop2): 1 truncate cleaned up
[  695.840820][T12863] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  696.025117][T12852] loop6: detected capacity change from 0 to 40427
[  696.040089][T12852] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  696.042555][T12852] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  696.070247][T12852] F2FS-fs (loop6): invalid crc value
[  696.071428][T12438] EXT4-fs (loop2): unmounting filesystem.
[  696.114654][T12852] F2FS-fs (loop6): Found nat_bits in checkpoint
[  696.166744][T12852] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  696.176724][T12852] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  696.213562][  T104] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  696.218572][  T104] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  696.407410][T12912] loop7: detected capacity change from 0 to 2048
[  696.449264][T12912] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  696.453408][T12912] EXT4-fs error (device loop7): ext4_find_extent:936: inode #2: comm syz.7.1173: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  696.470260][T12919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1174'.
[  696.480215][T12912] EXT4-fs (loop7): Remounting filesystem read-only
[  696.481755][T12912] EXT4-fs error (device loop7): ext4_find_extent:936: inode #2: comm syz.7.1173: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  696.493657][T12912] EXT4-fs (loop7): Remounting filesystem read-only
[  696.513268][T12094] EXT4-fs (loop7): unmounting filesystem.
[  696.625783][T12937] loop7: detected capacity change from 0 to 512
[  696.822037][ T4757] tipc: Node number set to 1
[  696.859247][T12963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1186'.
[  696.917029][T12968] loop2: detected capacity change from 0 to 512
[  696.924994][T12968] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  696.956703][T12968] EXT4-fs (loop2): 1 orphan inode deleted
[  696.960811][T12968] EXT4-fs (loop2): 1 truncate cleaned up
[  696.961963][T12968] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  696.983806][T12968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  696.989515][T12968] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  697.166620][T12988] loop6: detected capacity change from 0 to 128
[  697.181615][T12988] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  697.186417][T12988] syz.6.1191: attempt to access beyond end of device
[  697.186417][T12988] loop6: rw=2051, sector=104, nr_sectors = 937 limit=128
[  697.271936][T12995] xt_hashlimit: size too large, truncated to 1048576
[  697.524462][T12438] EXT4-fs (loop2): unmounting filesystem.
[  697.582296][T13015] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1198'.
[  697.584265][T13015] device bridge_slave_0 left promiscuous mode
[  697.612997][T13015] bridge0: port 1(bridge_slave_0) entered disabled state
[  697.665097][T13019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1199'.
[  697.711149][T13029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  697.712870][T13029] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  697.785488][T13035] loop1: detected capacity change from 0 to 1024
[  697.787195][T13035] EXT4-fs: Ignoring removed nomblk_io_submit option
[  697.797724][T13035] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  697.805522][T13035] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  697.807066][T13035] System zones: 0-1, 3-36
[  697.810447][T13035] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  697.846076][ T8722] EXT4-fs (loop1): unmounting filesystem.
[  697.890903][T13041] loop1: detected capacity change from 0 to 512
[  697.893494][T13041] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  697.903922][T13041] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  697.906265][T13041] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (49809!=33349)
[  697.928236][T13041] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002]
[  697.930076][T13041] EXT4-fs (loop1): failed to initialize system zone (-117)
[  697.931457][T13041] EXT4-fs (loop1): mount failed
[  698.180917][T13063] loop1: detected capacity change from 0 to 1024
[  698.194447][T13063] EXT4-fs (loop1): Number of reserved GDT blocks insanely large: 2304
[  698.218790][T13068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1211'.
[  698.296933][T13071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1212'.
[  698.388024][T13079] loop1: detected capacity change from 0 to 512
[  698.394426][T13079] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  698.424686][T13079] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1217: bg 0: block 401: padding at end of block bitmap is not set
[  698.431553][T13079] EXT4-fs (loop1): Remounting filesystem read-only
[  698.442944][T13079] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  698.453054][T13079] EXT4-fs (loop1): Remounting filesystem read-only
[  698.454250][T13079] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.1217: attempt to clear invalid blocks 983260 len 1
[  698.456766][T13088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  698.469933][T13088] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  698.473526][T13079] EXT4-fs (loop1): Remounting filesystem read-only
[  698.475017][T13079] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.1217: Invalid inode table block 0 in block_group 0
[  698.492303][T13079] EXT4-fs (loop1): Remounting filesystem read-only
[  698.503776][T13079] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  698.532238][T13079] EXT4-fs (loop1): Remounting filesystem read-only
[  698.533601][T13079] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  698.557740][T13079] EXT4-fs (loop1): Remounting filesystem read-only
[  698.559002][T13079] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.1217: Invalid inode table block 0 in block_group 0
[  698.585402][T13079] EXT4-fs (loop1): Remounting filesystem read-only
[  698.586668][T13079] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  698.608100][T13079] EXT4-fs (loop1): Remounting filesystem read-only
[  698.615299][T13079] EXT4-fs error (device loop1): ext4_truncate:4325: inode #11: comm syz.1.1217: mark_inode_dirty error
[  698.627386][T13079] EXT4-fs (loop1): Remounting filesystem read-only
[  698.628671][T13079] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  698.650089][T13079] EXT4-fs (loop1): Remounting filesystem read-only
[  698.651424][T13079] EXT4-fs (loop1): 1 truncate cleaned up
[  698.652403][T13079] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  698.728346][ T8722] EXT4-fs (loop1): unmounting filesystem.
[  698.888716][T13119] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  699.036819][T13129] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1223'.
[  699.110111][T13135] usb usb7: usbfs: process 13135 (syz.2.1226) did not claim interface 46 before use
[  699.162638][T13142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1227'.
[  699.865980][T13171] binder: 13170:13171 BC_INCREFS_DONE node 20 has no pending increfs request
[  700.256622][    C1] vcan0: j1939_tp_rxtimer: 0x00000000de615f60: rx timeout, send abort
[  700.270510][T13217] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1249'.
[  700.276781][T13212] EXT4-fs: Ignoring removed mblk_io_submit option
[  700.300055][T13212] EXT4-fs (loop4): Test dummy encryption mode enabled
[  700.309866][T13212] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  700.371584][T13212] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce"
[  700.756633][    C1] vcan0: j1939_tp_rxtimer: 0x000000008a674eed: rx timeout, send abort
[  701.336330][    C1] vcan0: j1939_tp_rxtimer: 0x00000000de615f60: abort rx timeout. Force session deactivation
[  701.339170][    C1] vcan0: j1939_tp_rxtimer: 0x000000008a674eed: abort rx timeout. Force session deactivation
[  701.430392][ T8715] EXT4-fs (loop4): unmounting filesystem.
[  701.524794][T13210] set_capacity_and_notify: 1 callbacks suppressed
[  701.524803][T13210] loop1: detected capacity change from 0 to 131072
[  701.545488][T13210] F2FS-fs (loop1): Invalid segment/section count (31, 24 x 150994945)
[  701.547033][T13210] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  701.549449][T13210] F2FS-fs (loop1): invalid crc value
[  701.572999][T13210] F2FS-fs (loop1): Found nat_bits in checkpoint
[  701.601887][T13210] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  701.603264][T13210] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  701.634275][T13293] loop6: detected capacity change from 0 to 256
[  701.646403][T13291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  701.654474][T13291] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  701.656605][T13293] FAT-fs (loop6): Directory bread(block 64) failed
[  701.658023][T13293] FAT-fs (loop6): Directory bread(block 65) failed
[  701.659286][T13293] FAT-fs (loop6): Directory bread(block 66) failed
[  701.667694][T13293] FAT-fs (loop6): Directory bread(block 67) failed
[  701.669007][T13293] FAT-fs (loop6): Directory bread(block 68) failed
[  701.670171][T13293] FAT-fs (loop6): Directory bread(block 69) failed
[  701.680378][T13293] FAT-fs (loop6): Directory bread(block 70) failed
[  701.686652][T13293] FAT-fs (loop6): Directory bread(block 71) failed
[  701.689822][T13293] FAT-fs (loop6): Directory bread(block 72) failed
[  701.691115][T13293] FAT-fs (loop6): Directory bread(block 73) failed
[  701.784600][T13311] loop6: detected capacity change from 0 to 16
[  701.793876][T13311] erofs: (device loop6): mounted with root inode @ nid 36.
[  701.801060][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  701.802324][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Not tainted syzkaller #0
[  701.803746][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  701.805831][ T8722] Call trace:
[  701.806501][ T8722]  dump_backtrace+0x1c0/0x1ec
[  701.807457][ T8722]  show_stack+0x2c/0x3c
[  701.808322][ T8722]  __dump_stack+0x30/0x40
[  701.809224][ T8722]  dump_stack_lvl+0xf4/0x15c
[  701.810160][ T8722]  dump_stack+0x1c/0x5c
[  701.810774][T13311] erofs: (device loop6): z_erofs_readahead: readahead error at page 4 @ nid 89
[  701.810990][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  701.812712][T13311] erofs: (device loop6): z_erofs_readahead: readahead error at page 3 @ nid 89
[  701.813701][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  701.815375][T13311] syz.6.1267: attempt to access beyond end of device
[  701.815375][T13311] loop6: rw=524288, sector=34359738360, nr_sectors = 8 limit=16
[  701.816371][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  701.816388][ T8722]  f2fs_readdir+0x3bc/0xc10
[  701.816395][ T8722]  iterate_dir+0x1f0/0x4cc
[  701.821901][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  701.822985][ T8722]  invoke_syscall+0x98/0x2b4
[  701.823924][ T8722]  el0_svc_common+0x138/0x258
[  701.824608][T13311] syz.6.1267: attempt to access beyond end of device
[  701.824608][T13311] loop6: rw=524288, sector=88, nr_sectors = 48 limit=16
[  701.824885][ T8722]  do_el0_svc+0x58/0x130
[  701.827295][T13311] syz.6.1267: attempt to access beyond end of device
[  701.827295][T13311] loop6: rw=524288, sector=8, nr_sectors = 80 limit=16
[  701.828094][ T8722]  el0_svc+0x58/0x128
[  701.828114][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  701.832424][ T8722]  el0t_64_sync+0x18c/0x190
[  701.849781][T13311] syz.6.1267: attempt to access beyond end of device
[  701.849781][T13311] loop6: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[  701.859427][T13311] syz.6.1267: attempt to access beyond end of device
[  701.859427][T13311] loop6: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[  701.865216][T13311] syz.6.1267: attempt to access beyond end of device
[  701.865216][T13311] loop6: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[  701.879710][T13315] ==================================================================
[  701.881226][T13315] BUG: KASAN: use-after-free in z_erofs_transform_plain+0x3a4/0x490
[  701.882726][T13315] Read of size 4096 at addr ffff0000ca859000 by task syz.6.1267/13315
[  701.884361][T13315] 
[  701.884837][T13315] CPU: 0 PID: 13315 Comm: syz.6.1267 Not tainted syzkaller #0
[  701.886317][T13315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  701.888188][T13315] Call trace:
[  701.888803][T13315]  dump_backtrace+0x1c0/0x1ec
[  701.889713][T13315]  show_stack+0x2c/0x3c
[  701.890510][T13315]  __dump_stack+0x30/0x40
[  701.891342][T13315]  dump_stack_lvl+0xf4/0x15c
[  701.892231][T13315]  print_address_description+0x88/0x218
[  701.893316][T13315]  print_report+0x50/0x68
[  701.894132][T13315]  kasan_report+0xa8/0xfc
[  701.894956][T13315]  kasan_check_range+0x258/0x290
[  701.895911][T13315]  memcpy+0x48/0x90
[  701.896676][T13315]  z_erofs_transform_plain+0x3a4/0x490
[  701.897735][T13315]  z_erofs_decompress+0x9c/0xd4
[  701.898686][T13315]  z_erofs_decompress_queue+0x100c/0x1b40
[  701.899821][T13315]  z_erofs_runqueue+0x152c/0x16cc
[  701.900481][    C1] vcan0: j1939_tp_rxtimer: 0x00000000913a1d4f: rx timeout, send abort
[  701.900840][T13315]  z_erofs_read_folio+0x2d8/0x5c8
[  701.903288][T13315]  filemap_read_folio+0x134/0x384
[  701.904236][T13315]  filemap_fault+0x98c/0xe98
[  701.905148][T13315]  __do_fault+0x11c/0x3d8
[  701.905989][T13315]  handle_mm_fault+0x1cac/0x2fb0
[  701.906959][T13315]  __get_user_pages+0x33c/0x754
[  701.907886][T13315]  populate_vma_page_range+0x1f4/0x298
[  701.908963][T13315]  __mm_populate+0x210/0x334
[  701.909862][T13315]  do_mlock+0x420/0x514
[  701.910692][T13315]  __arm64_sys_mlock+0x60/0x78
[  701.911608][T13315]  invoke_syscall+0x98/0x2b4
[  701.912499][T13315]  el0_svc_common+0x138/0x258
[  701.913436][T13315]  do_el0_svc+0x58/0x130
[  701.914273][T13315]  el0_svc+0x58/0x128
[  701.915056][T13315]  el0t_64_sync_handler+0x84/0xf0
[  701.916049][T13315]  el0t_64_sync+0x18c/0x190
[  701.916931][T13315] 
[  701.917390][T13315] Allocated by task 13297:
[  701.918230][T13315]  kasan_set_track+0x4c/0x80
[  701.919140][T13315]  kasan_save_alloc_info+0x24/0x30
[  701.920149][T13315]  __kasan_kmalloc+0xa0/0xb8
[  701.921007][T13315]  __kmalloc+0xec/0x178
[  701.921779][T13315]  tomoyo_encode+0x26c/0x49c
[  701.922671][T13315]  tomoyo_path_perm+0x268/0x49c
[  701.923653][T13315]  tomoyo_path_symlink+0xac/0xf8
[  701.924662][T13315]  security_path_symlink+0xec/0x13c
[  701.925709][T13315]  do_symlinkat+0xfc/0x35c
[  701.926592][T13315]  __arm64_sys_symlinkat+0xa4/0xbc
[  701.927612][T13315]  invoke_syscall+0x98/0x2b4
[  701.928514][T13315]  el0_svc_common+0x138/0x258
[  701.929431][T13315]  do_el0_svc+0x58/0x130
[  701.930235][T13315]  el0_svc+0x58/0x128
[  701.930995][T13315]  el0t_64_sync_handler+0x84/0xf0
[  701.931969][T13315]  el0t_64_sync+0x18c/0x190
[  701.932841][T13315] 
[  701.933275][T13315] Freed by task 13297:
[  701.934042][T13315]  kasan_set_track+0x4c/0x80
[  701.934939][T13315]  kasan_save_free_info+0x38/0x5c
[  701.935938][T13315]  ____kasan_slab_free+0x148/0x1b0
[  701.936916][T13315]  __kasan_slab_free+0x18/0x28
[  701.937889][T13315]  slab_free_freelist_hook+0x16c/0x1e8
[  701.938968][T13315]  __kmem_cache_free+0xbc/0x218
[  701.939952][T13315]  kfree+0xd0/0x1a8
[  701.940709][T13315]  tomoyo_path_perm+0x33c/0x49c
[  701.941649][T13315]  tomoyo_path_symlink+0xac/0xf8
[  701.942612][T13315]  security_path_symlink+0xec/0x13c
[  701.943621][T13315]  do_symlinkat+0xfc/0x35c
[  701.944471][T13315]  __arm64_sys_symlinkat+0xa4/0xbc
[  701.945482][T13315]  invoke_syscall+0x98/0x2b4
[  701.946370][T13315]  el0_svc_common+0x138/0x258
[  701.947299][T13315]  do_el0_svc+0x58/0x130
[  701.948129][T13315]  el0_svc+0x58/0x128
[  701.948914][T13315]  el0t_64_sync_handler+0x84/0xf0
[  701.949907][T13315]  el0t_64_sync+0x18c/0x190
[  701.950773][T13315] 
[  701.951214][T13315] Last potentially related work creation:
[  701.952289][T13315]  kasan_save_stack+0x40/0x70
[  701.953208][T13315]  __kasan_record_aux_stack+0xc0/0xdc
[  701.954245][T13315]  kasan_record_aux_stack_noalloc+0x14/0x20
[  701.955390][T13315]  kvfree_call_rcu+0xb4/0x6e8
[  701.956241][T13315]  cfg80211_update_known_bss+0x11c/0x7f8
[  701.957332][T13315]  cfg80211_bss_update+0x150/0x1c78
[  701.958353][T13315]  cfg80211_inform_bss_frame_data+0x8a0/0x10dc
[  701.959540][T13315]  ieee80211_bss_info_update+0x654/0xa9c
[  701.960626][T13315]  ieee80211_ibss_rx_queued_mgmt+0x1438/0x25c4
[  701.961820][T13315]  ieee80211_iface_work+0x598/0xa34
[  701.962821][T13315]  cfg80211_wiphy_work+0x1d8/0x218
[  701.963795][T13315]  process_one_work+0x7f8/0x13a4
[  701.964760][T13315]  worker_thread+0x8c4/0xfec
[  701.965676][T13315]  kthread+0x250/0x2d8
[  701.966484][T13315]  ret_from_fork+0x10/0x20
[  701.967361][T13315] 
[  701.967800][T13315] Second to last potentially related work creation:
[  701.969069][T13315]  kasan_save_stack+0x40/0x70
[  701.969985][T13315]  __kasan_record_aux_stack+0xc0/0xdc
[  701.971014][T13315]  kasan_record_aux_stack_noalloc+0x14/0x20
[  701.972111][T13315]  kvfree_call_rcu+0xb4/0x6e8
[  701.972992][T13315]  cfg80211_update_known_bss+0x11c/0x7f8
[  701.974065][T13315]  cfg80211_bss_update+0x150/0x1c78
[  701.975049][T13315]  cfg80211_inform_bss_frame_data+0x8a0/0x10dc
[  701.976217][T13315]  ieee80211_bss_info_update+0x654/0xa9c
[  701.977272][T13315]  ieee80211_ibss_rx_queued_mgmt+0x1438/0x25c4
[  701.978436][T13315]  ieee80211_iface_work+0x598/0xa34
[  701.979402][T13315]  cfg80211_wiphy_work+0x1d8/0x218
[  701.980370][T13315]  process_one_work+0x7f8/0x13a4
[  701.981291][T13315]  worker_thread+0x8c4/0xfec
[  701.982177][T13315]  kthread+0x250/0x2d8
[  701.982935][T13315]  ret_from_fork+0x10/0x20
[  701.983806][T13315] 
[  701.984230][T13315] The buggy address belongs to the object at ffff0000ca859000
[  701.984230][T13315]  which belongs to the cache kmalloc-128 of size 128
[  701.986887][T13315] The buggy address is located 0 bytes inside of
[  701.986887][T13315]  128-byte region [ffff0000ca859000, ffff0000ca859080)
[  701.989396][T13315] 
[  701.989826][T13315] The buggy address belongs to the physical page:
[  701.991017][T13315] page:00000000dcc72c1c refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10a859
[  701.992989][T13315] flags: 0x5ffc00000000200(slab|node=0|zone=2|lastcpupid=0x7ff)
[  701.994469][T13315] raw: 05ffc00000000200 fffffc0003106d80 dead000000000003 ffff0000c0002300
[  701.996143][T13315] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  701.997862][T13315] page dumped because: kasan: bad access detected
[  701.999085][T13315] 
[  701.999521][T13315] Memory state around the buggy address:
[  702.000598][T13315]  ffff0000ca858f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  702.002138][T13315]  ffff0000ca858f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  702.003722][T13315] >ffff0000ca859000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  702.005276][T13315]                    ^
[  702.006079][T13315]  ffff0000ca859080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  702.007665][T13315]  ffff0000ca859100: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  702.009228][T13315] ==================================================================
[  702.026499][T13315] Disabling lock debugging due to kernel taint
[  702.037678][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  702.038954][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  702.040608][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  702.042571][ T8722] Call trace:
[  702.043196][ T8722]  dump_backtrace+0x1c0/0x1ec
[  702.044125][ T8722]  show_stack+0x2c/0x3c
[  702.044924][ T8722]  __dump_stack+0x30/0x40
[  702.045777][ T8722]  dump_stack_lvl+0xf4/0x15c
[  702.046681][ T8722]  dump_stack+0x1c/0x5c
[  702.047491][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  702.048519][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  702.049583][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  702.050583][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  702.051509][ T8722]  f2fs_rmdir+0x48/0x7c
[  702.052327][ T8722]  vfs_rmdir+0x304/0x438
[  702.053193][ T8722]  do_rmdir+0x244/0x524
[  702.054023][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  702.055001][ T8722]  invoke_syscall+0x98/0x2b4
[  702.055916][ T8722]  el0_svc_common+0x138/0x258
[  702.056815][ T8722]  do_el0_svc+0x58/0x130
[  702.057669][ T8722]  el0_svc+0x58/0x128
[  702.058456][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  702.059464][ T8722]  el0t_64_sync+0x18c/0x190
[  702.063376][T13311] syz.6.1267: attempt to access beyond end of device
[  702.063376][T13311] loop6: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[  702.072325][T13315] syz.6.1267: attempt to access beyond end of device
[  702.072325][T13315] loop6: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[  702.075105][T13315] syz.6.1267: attempt to access beyond end of device
[  702.075105][T13315] loop6: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[  702.085724][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  702.090299][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  702.091925][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  702.093855][ T8722] Call trace:
[  702.094495][ T8722]  dump_backtrace+0x1c0/0x1ec
[  702.095435][ T8722]  show_stack+0x2c/0x3c
[  702.096263][ T8722]  __dump_stack+0x30/0x40
[  702.097121][ T8722]  dump_stack_lvl+0xf4/0x15c
[  702.097995][ T8722]  dump_stack+0x1c/0x5c
[  702.098804][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  702.099850][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  702.100935][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  702.101942][ T8722]  f2fs_readdir+0x3bc/0xc10
[  702.102837][ T8722]  iterate_dir+0x1f0/0x4cc
[  702.103682][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  702.104736][ T8722]  invoke_syscall+0x98/0x2b4
[  702.105612][ T8722]  el0_svc_common+0x138/0x258
[  702.106531][ T8722]  do_el0_svc+0x58/0x130
[  702.107370][ T8722]  el0_svc+0x58/0x128
[  702.108140][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  702.109121][ T8722]  el0t_64_sync+0x18c/0x190
[  702.113880][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  702.124376][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  702.126049][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  702.127936][ T8722] Call trace:
[  702.128562][ T8722]  dump_backtrace+0x1c0/0x1ec
[  702.129496][ T8722]  show_stack+0x2c/0x3c
[  702.130305][ T8722]  __dump_stack+0x30/0x40
[  702.131146][ T8722]  dump_stack_lvl+0xf4/0x15c
[  702.132051][ T8722]  dump_stack+0x1c/0x5c
[  702.132878][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  702.133897][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  702.134959][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  702.135956][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  702.136874][ T8722]  f2fs_rmdir+0x48/0x7c
[  702.137692][ T8722]  vfs_rmdir+0x304/0x438
[  702.138516][ T8722]  do_rmdir+0x244/0x524
[  702.139339][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  702.140331][ T8722]  invoke_syscall+0x98/0x2b4
[  702.141223][ T8722]  el0_svc_common+0x138/0x258
[  702.142135][ T8722]  do_el0_svc+0x58/0x130
[  702.142940][ T8722]  el0_svc+0x58/0x128
[  702.143725][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  702.144717][ T8722]  el0t_64_sync+0x18c/0x190
[  702.156795][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  702.160068][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  702.161784][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  702.163831][ T8722] Call trace:
[  702.164495][ T8722]  dump_backtrace+0x1c0/0x1ec
[  702.165399][ T8722]  show_stack+0x2c/0x3c
[  702.166197][ T8722]  __dump_stack+0x30/0x40
[  702.167037][ T8722]  dump_stack_lvl+0xf4/0x15c
[  702.167957][ T8722]  dump_stack+0x1c/0x5c
[  702.168775][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  702.169826][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  702.170916][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  702.171946][ T8722]  f2fs_readdir+0x3bc/0xc10
[  702.172842][ T8722]  iterate_dir+0x1f0/0x4cc
[  702.173699][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  702.174752][ T8722]  invoke_syscall+0x98/0x2b4
[  702.175665][ T8722]  el0_svc_common+0x138/0x258
[  702.176599][ T8722]  do_el0_svc+0x58/0x130
[  702.177438][ T8722]  el0_svc+0x58/0x128
[  702.178257][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  702.179245][ T8722]  el0t_64_sync+0x18c/0x190
[  702.183143][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  702.184284][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  702.185978][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  702.187944][ T8722] Call trace:
[  702.188585][ T8722]  dump_backtrace+0x1c0/0x1ec
[  702.189505][ T8722]  show_stack+0x2c/0x3c
[  702.190318][ T8722]  __dump_stack+0x30/0x40
[  702.191157][ T8722]  dump_stack_lvl+0xf4/0x15c
[  702.192036][ T8722]  dump_stack+0x1c/0x5c
[  702.192842][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  702.193869][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  702.194913][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  702.195903][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  702.196772][ T8722]  f2fs_rmdir+0x48/0x7c
[  702.197557][ T8722]  vfs_rmdir+0x304/0x438
[  702.198421][ T8722]  do_rmdir+0x244/0x524
[  702.199267][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  702.200224][ T8722]  invoke_syscall+0x98/0x2b4
[  702.201084][ T8722]  el0_svc_common+0x138/0x258
[  702.201968][ T8722]  do_el0_svc+0x58/0x130
[  702.202777][ T8722]  el0_svc+0x58/0x128
[  702.203519][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  702.204504][ T8722]  el0t_64_sync+0x18c/0x190
[  702.207881][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  702.209057][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  702.210714][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  702.212573][ T8722] Call trace:
[  702.213220][ T8722]  dump_backtrace+0x1c0/0x1ec
[  702.214131][ T8722]  show_stack+0x2c/0x3c
[  702.214942][ T8722]  __dump_stack+0x30/0x40
[  702.215786][ T8722]  dump_stack_lvl+0xf4/0x15c
[  702.216694][ T8722]  dump_stack+0x1c/0x5c
[  702.217499][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  702.218536][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  702.219566][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  702.220547][ T8722]  f2fs_readdir+0x3bc/0xc10
[  702.221446][ T8722]  iterate_dir+0x1f0/0x4cc
[  702.222297][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  702.223363][ T8722]  invoke_syscall+0x98/0x2b4
[  702.224286][ T8722]  el0_svc_common+0x138/0x258
[  702.225217][ T8722]  do_el0_svc+0x58/0x130
[  702.226053][ T8722]  el0_svc+0x58/0x128
[  702.226842][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  702.227821][ T8722]  el0t_64_sync+0x18c/0x190
[  702.241098][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  702.242297][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  702.243946][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  702.245685][ T8722] Call trace:
[  702.246284][ T8722]  dump_backtrace+0x1c0/0x1ec
[  702.247185][ T8722]  show_stack+0x2c/0x3c
[  702.247988][ T8722]  __dump_stack+0x30/0x40
[  702.248815][ T8722]  dump_stack_lvl+0xf4/0x15c
[  702.249752][ T8722]  dump_stack+0x1c/0x5c
[  702.250570][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  702.251591][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  702.252671][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  702.253670][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  702.254545][ T8722]  f2fs_rmdir+0x48/0x7c
[  702.255338][ T8722]  vfs_rmdir+0x304/0x438
[  702.256176][ T8722]  do_rmdir+0x244/0x524
[  702.257027][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  702.258002][ T8722]  invoke_syscall+0x98/0x2b4
[  702.258880][ T8722]  el0_svc_common+0x138/0x258
[  702.259793][ T8722]  do_el0_svc+0x58/0x130
[  702.260625][ T8722]  el0_svc+0x58/0x128
[  702.261382][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  702.262359][ T8722]  el0t_64_sync+0x18c/0x190
[  702.265820][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  702.266994][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  702.268731][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  702.270636][ T8722] Call trace:
[  702.271279][ T8722]  dump_backtrace+0x1c0/0x1ec
[  702.272202][ T8722]  show_stack+0x2c/0x3c
[  702.273015][ T8722]  __dump_stack+0x30/0x40
[  702.273846][ T8722]  dump_stack_lvl+0xf4/0x15c
[  702.274728][ T8722]  dump_stack+0x1c/0x5c
[  702.275561][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  702.276632][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  702.277691][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  702.278680][ T8722]  f2fs_readdir+0x3bc/0xc10
[  702.279542][ T8722]  iterate_dir+0x1f0/0x4cc
[  702.280398][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  702.281418][ T8722]  invoke_syscall+0x98/0x2b4
[  702.282310][ T8722]  el0_svc_common+0x138/0x258
[  702.283209][ T8722]  do_el0_svc+0x58/0x130
[  702.284005][ T8722]  el0_svc+0x58/0x128
[  702.284783][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  702.285754][ T8722]  el0t_64_sync+0x18c/0x190
[  702.289753][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  702.290882][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  702.292581][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  702.294481][ T8722] Call trace:
[  702.295103][ T8722]  dump_backtrace+0x1c0/0x1ec
[  702.296028][ T8722]  show_stack+0x2c/0x3c
[  702.296818][ T8722]  __dump_stack+0x30/0x40
[  702.297662][ T8722]  dump_stack_lvl+0xf4/0x15c
[  702.298546][ T8722]  dump_stack+0x1c/0x5c
[  702.299329][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  702.300360][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  702.301436][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  702.302460][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  702.303387][ T8722]  f2fs_rmdir+0x48/0x7c
[  702.304129][ T8722]  vfs_rmdir+0x304/0x438
[  702.304931][ T8722]  do_rmdir+0x244/0x524
[  702.305731][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  702.306706][ T8722]  invoke_syscall+0x98/0x2b4
[  702.307582][ T8722]  el0_svc_common+0x138/0x258
[  702.308459][ T8722]  do_el0_svc+0x58/0x130
[  702.309274][ T8722]  el0_svc+0x58/0x128
[  702.310066][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  702.311038][ T8722]  el0t_64_sync+0x18c/0x190
[  702.312958][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  702.314141][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  702.315803][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  702.317609][ T8722] Call trace:
[  702.318211][ T8722]  dump_backtrace+0x1c0/0x1ec
[  702.319131][ T8722]  show_stack+0x2c/0x3c
[  702.319954][ T8722]  __dump_stack+0x30/0x40
[  702.320806][ T8722]  dump_stack_lvl+0xf4/0x15c
[  702.321697][ T8722]  dump_stack+0x1c/0x5c
[  702.322513][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  702.323551][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  702.324630][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  702.325661][ T8722]  f2fs_readdir+0x3bc/0xc10
[  702.326550][ T8722]  iterate_dir+0x1f0/0x4cc
[  702.327393][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  702.328443][ T8722]  invoke_syscall+0x98/0x2b4
[  702.329299][ T8722]  el0_svc_common+0x138/0x258
[  702.330219][ T8722]  do_el0_svc+0x58/0x130
[  702.331051][ T8722]  el0_svc+0x58/0x128
[  702.331841][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  702.332819][ T8722]  el0t_64_sync+0x18c/0x190
[  702.334873][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  702.336079][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  702.337712][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  702.339628][ T8722] Call trace:
[  702.340251][ T8722]  dump_backtrace+0x1c0/0x1ec
[  702.341149][ T8722]  show_stack+0x2c/0x3c
[  702.341925][ T8722]  __dump_stack+0x30/0x40
[  702.342785][ T8722]  dump_stack_lvl+0xf4/0x15c
[  702.343681][ T8722]  dump_stack+0x1c/0x5c
[  702.344510][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  702.345539][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  702.346623][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  702.347638][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  702.348565][ T8722]  f2fs_rmdir+0x48/0x7c
[  702.349382][ T8722]  vfs_rmdir+0x304/0x438
[  702.350224][ T8722]  do_rmdir+0x244/0x524
[  702.351045][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  702.352007][ T8722]  invoke_syscall+0x98/0x2b4
[  702.352866][ T8722]  el0_svc_common+0x138/0x258
[  702.353759][ T8722]  do_el0_svc+0x58/0x130
[  702.354546][ T8722]  el0_svc+0x58/0x128
[  702.355306][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  702.356290][ T8722]  el0t_64_sync+0x18c/0x190
[  702.360490][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  702.361708][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  702.363267][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  702.365085][ T8722] Call trace:
[  702.365731][ T8722]  dump_backtrace+0x1c0/0x1ec
[  702.366644][ T8722]  show_stack+0x2c/0x3c
[  702.367453][ T8722]  __dump_stack+0x30/0x40
[  702.368294][ T8722]  dump_stack_lvl+0xf4/0x15c
[  702.369167][ T8722]  dump_stack+0x1c/0x5c
[  702.369971][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  702.370951][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  702.371978][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  702.372912][ T8722]  f2fs_readdir+0x3bc/0xc10
[  702.373727][ T8722]  iterate_dir+0x1f0/0x4cc
[  702.374562][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  702.375536][ T8722]  invoke_syscall+0x98/0x2b4
[  702.376386][ T8722]  el0_svc_common+0x138/0x258
[  702.377262][ T8722]  do_el0_svc+0x58/0x130
[  702.378064][ T8722]  el0_svc+0x58/0x128
[  702.378806][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  702.379741][ T8722]  el0t_64_sync+0x18c/0x190
[  702.383124][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  702.384280][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  702.385949][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  702.387843][ T8722] Call trace:
[  702.388438][ T8722]  dump_backtrace+0x1c0/0x1ec
[  702.389334][ T8722]  show_stack+0x2c/0x3c
[  702.390132][ T8722]  __dump_stack+0x30/0x40
[  702.390959][ T8722]  dump_stack_lvl+0xf4/0x15c
[  702.391831][ T8722]  dump_stack+0x1c/0x5c
[  702.392644][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  702.393670][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  702.394730][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  702.395705][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  702.396580][ T8722]  f2fs_rmdir+0x48/0x7c
[  702.397388][ T8722]  vfs_rmdir+0x304/0x438
[  702.398228][ T8722]  do_rmdir+0x244/0x524
[  702.399021][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  702.400009][ T8722]  invoke_syscall+0x98/0x2b4
[  702.400512][    C1] vcan0: j1939_tp_rxtimer: 0x00000000d23d27ed: rx timeout, send abort
[  702.400893][ T8722]  el0_svc_common+0x138/0x258
[  702.403314][ T8722]  do_el0_svc+0x58/0x130
[  702.404104][ T8722]  el0_svc+0x58/0x128
[  702.404841][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  702.405801][ T8722]  el0t_64_sync+0x18c/0x190
[  702.406745][    C1] vcan0: j1939_tp_rxtimer: 0x00000000913a1d4f: abort rx timeout. Force session deactivation
[  702.409583][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  702.410588][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  702.412281][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  702.414224][ T8722] Call trace:
[  702.414841][ T8722]  dump_backtrace+0x1c0/0x1ec
[  702.415754][ T8722]  show_stack+0x2c/0x3c
[  702.416559][ T8722]  __dump_stack+0x30/0x40
[  702.417386][ T8722]  dump_stack_lvl+0xf4/0x15c
[  702.418244][ T8722]  dump_stack+0x1c/0x5c
[  702.419058][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  702.420098][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  702.421153][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  702.422107][ T8722]  f2fs_readdir+0x3bc/0xc10
[  702.422951][ T8722]  iterate_dir+0x1f0/0x4cc
[  702.423807][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  702.424829][ T8722]  invoke_syscall+0x98/0x2b4
[  702.425741][ T8722]  el0_svc_common+0x138/0x258
[  702.426662][ T8722]  do_el0_svc+0x58/0x130
[  702.427483][ T8722]  el0_svc+0x58/0x128
[  702.428250][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  702.429225][ T8722]  el0t_64_sync+0x18c/0x190
[  702.434316][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  702.435489][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  702.437174][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  702.439057][ T8722] Call trace:
[  702.439677][ T8722]  dump_backtrace+0x1c0/0x1ec
[  702.440552][ T8722]  show_stack+0x2c/0x3c
[  702.441345][ T8722]  __dump_stack+0x30/0x40
[  702.442184][ T8722]  dump_stack_lvl+0xf4/0x15c
[  702.443089][ T8722]  dump_stack+0x1c/0x5c
[  702.443893][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  702.444852][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  702.445878][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  702.446861][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  702.447795][ T8722]  f2fs_rmdir+0x48/0x7c
[  702.448623][ T8722]  vfs_rmdir+0x304/0x438
[  702.449402][ T8722]  do_rmdir+0x244/0x524
[  702.450210][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  702.451206][ T8722]  invoke_syscall+0x98/0x2b4
[  702.452114][ T8722]  el0_svc_common+0x138/0x258
[  702.453044][ T8722]  do_el0_svc+0x58/0x130
[  702.453878][ T8722]  el0_svc+0x58/0x128
[  702.454654][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  702.455600][ T8722]  el0t_64_sync+0x18c/0x190
[  702.457921][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  702.458970][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  702.460617][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  702.462493][ T8722] Call trace:
[  702.463071][ T8722]  dump_backtrace+0x1c0/0x1ec
[  702.463933][ T8722]  show_stack+0x2c/0x3c
[  702.464693][ T8722]  __dump_stack+0x30/0x40
[  702.465488][ T8722]  dump_stack_lvl+0xf4/0x15c
[  702.466313][ T8722]  dump_stack+0x1c/0x5c
[  702.467054][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  702.468041][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  702.469097][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  702.470074][ T8722]  f2fs_readdir+0x3bc/0xc10
[  702.470926][ T8722]  iterate_dir+0x1f0/0x4cc
[  702.471792][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  702.472837][ T8722]  invoke_syscall+0x98/0x2b4
[  702.473763][ T8722]  el0_svc_common+0x138/0x258
[  702.474660][ T8722]  do_el0_svc+0x58/0x130
[  702.475486][ T8722]  el0_svc+0x58/0x128
[  702.476249][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  702.477231][ T8722]  el0t_64_sync+0x18c/0x190
[  702.479153][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  702.480191][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  702.481792][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  702.483596][ T8722] Call trace:
[  702.484182][ T8722]  dump_backtrace+0x1c0/0x1ec
[  702.485034][ T8722]  show_stack+0x2c/0x3c
[  702.485803][ T8722]  __dump_stack+0x30/0x40
[  702.486584][ T8722]  dump_stack_lvl+0xf4/0x15c
[  702.487433][ T8722]  dump_stack+0x1c/0x5c
[  702.488246][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  702.489241][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  702.490304][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  702.491310][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  702.492222][ T8722]  f2fs_rmdir+0x48/0x7c
[  702.493027][ T8722]  vfs_rmdir+0x304/0x438
[  702.493824][ T8722]  do_rmdir+0x244/0x524
[  702.494600][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  702.495527][ T8722]  invoke_syscall+0x98/0x2b4
[  702.496365][ T8722]  el0_svc_common+0x138/0x258
[  702.497234][ T8722]  do_el0_svc+0x58/0x130
[  702.497980][ T8722]  el0_svc+0x58/0x128
[  702.498743][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  702.499716][ T8722]  el0t_64_sync+0x18c/0x190
[  702.500782][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  702.502420][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  702.504017][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  702.505820][ T8722] Call trace:
[  702.506424][ T8722]  dump_backtrace+0x1c0/0x1ec
[  702.507285][ T8722]  show_stack+0x2c/0x3c
[  702.508078][ T8722]  __dump_stack+0x30/0x40
[  702.508903][ T8722]  dump_stack_lvl+0xf4/0x15c
[  702.509789][ T8722]  dump_stack+0x1c/0x5c
[  702.510602][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  702.511576][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  702.512605][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  702.513611][ T8722]  f2fs_readdir+0x3bc/0xc10
[  702.514492][ T8722]  iterate_dir+0x1f0/0x4cc
[  702.515346][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  702.516382][ T8722]  invoke_syscall+0x98/0x2b4
[  702.517292][ T8722]  el0_svc_common+0x138/0x258
[  702.518217][ T8722]  do_el0_svc+0x58/0x130
[  702.519044][ T8722]  el0_svc+0x58/0x128
[  702.519814][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  702.520823][ T8722]  el0t_64_sync+0x18c/0x190
[  702.523189][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  702.524371][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  702.526029][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  702.527936][ T8722] Call trace:
[  702.528599][ T8722]  dump_backtrace+0x1c0/0x1ec
[  702.529577][ T8722]  show_stack+0x2c/0x3c
[  702.530435][ T8722]  __dump_stack+0x30/0x40
[  702.531313][ T8722]  dump_stack_lvl+0xf4/0x15c
[  702.532276][ T8722]  dump_stack+0x1c/0x5c
[  702.533124][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  702.534221][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  702.535360][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  702.536400][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  702.537359][ T8722]  f2fs_rmdir+0x48/0x7c
[  702.538205][ T8722]  vfs_rmdir+0x304/0x438
[  702.539081][ T8722]  do_rmdir+0x244/0x524
[  702.539947][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  702.540980][ T8722]  invoke_syscall+0x98/0x2b4
[  702.541945][ T8722]  el0_svc_common+0x138/0x258
[  702.542919][ T8722]  do_el0_svc+0x58/0x130
[  702.543793][ T8722]  el0_svc+0x58/0x128
[  702.544618][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  702.545657][ T8722]  el0t_64_sync+0x18c/0x190
[  702.546980][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  702.549060][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  702.550899][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  702.552920][ T8722] Call trace:
[  702.553579][ T8722]  dump_backtrace+0x1c0/0x1ec
[  702.554567][ T8722]  show_stack+0x2c/0x3c
[  702.555405][ T8722]  __dump_stack+0x30/0x40
[  702.556281][ T8722]  dump_stack_lvl+0xf4/0x15c
[  702.557204][ T8722]  dump_stack+0x1c/0x5c
[  702.558042][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  702.559106][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  702.560203][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  702.561252][ T8722]  f2fs_readdir+0x3bc/0xc10
[  702.562201][ T8722]  iterate_dir+0x1f0/0x4cc
[  702.563105][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  702.564201][ T8722]  invoke_syscall+0x98/0x2b4
[  702.565164][ T8722]  el0_svc_common+0x138/0x258
[  702.566119][ T8722]  do_el0_svc+0x58/0x130
[  702.566993][ T8722]  el0_svc+0x58/0x128
[  702.567832][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  702.568862][ T8722]  el0t_64_sync+0x18c/0x190
[  702.570456][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  702.571658][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  702.573412][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  702.575451][ T8722] Call trace:
[  702.576106][ T8722]  dump_backtrace+0x1c0/0x1ec
[  702.577085][ T8722]  show_stack+0x2c/0x3c
[  702.577937][ T8722]  __dump_stack+0x30/0x40
[  702.578822][ T8722]  dump_stack_lvl+0xf4/0x15c
[  702.579753][ T8722]  dump_stack+0x1c/0x5c
[  702.580611][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  702.581683][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  702.582780][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  702.583810][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  702.584789][ T8722]  f2fs_rmdir+0x48/0x7c
[  702.585652][ T8722]  vfs_rmdir+0x304/0x438
[  702.586529][ T8722]  do_rmdir+0x244/0x524
[  702.587404][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  702.588423][ T8722]  invoke_syscall+0x98/0x2b4
[  702.589343][ T8722]  el0_svc_common+0x138/0x258
[  702.590300][ T8722]  do_el0_svc+0x58/0x130
[  702.591175][ T8722]  el0_svc+0x58/0x128
[  702.592012][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  702.593033][ T8722]  el0t_64_sync+0x18c/0x190
[  702.594848][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  702.596102][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  702.597841][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  702.599821][ T8722] Call trace:
[  702.600468][ T8722]  dump_backtrace+0x1c0/0x1ec
[  702.601388][ T8722]  show_stack+0x2c/0x3c
[  702.602187][ T8722]  __dump_stack+0x30/0x40
[  702.603055][ T8722]  dump_stack_lvl+0xf4/0x15c
[  702.603982][ T8722]  dump_stack+0x1c/0x5c
[  702.604820][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  702.605873][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  702.606978][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  702.607996][ T8722]  f2fs_readdir+0x3bc/0xc10
[  702.608886][ T8722]  iterate_dir+0x1f0/0x4cc
[  702.609751][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  702.610841][ T8722]  invoke_syscall+0x98/0x2b4
[  702.611733][ T8722]  el0_svc_common+0x138/0x258
[  702.612658][ T8722]  do_el0_svc+0x58/0x130
[  702.613509][ T8722]  el0_svc+0x58/0x128
[  702.614303][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  702.615311][ T8722]  el0t_64_sync+0x18c/0x190
[  702.619224][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  702.620338][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  702.621990][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  702.623836][ T8722] Call trace:
[  702.624468][ T8722]  dump_backtrace+0x1c0/0x1ec
[  702.625368][ T8722]  show_stack+0x2c/0x3c
[  702.626180][ T8722]  __dump_stack+0x30/0x40
[  702.627026][ T8722]  dump_stack_lvl+0xf4/0x15c
[  702.627907][ T8722]  dump_stack+0x1c/0x5c
[  702.628712][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  702.629704][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  702.630725][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  702.631672][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  702.632548][ T8722]  f2fs_rmdir+0x48/0x7c
[  702.633296][ T8722]  vfs_rmdir+0x304/0x438
[  702.634071][ T8722]  do_rmdir+0x244/0x524
[  702.634817][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  702.635735][ T8722]  invoke_syscall+0x98/0x2b4
[  702.636587][ T8722]  el0_svc_common+0x138/0x258
[  702.637442][ T8722]  do_el0_svc+0x58/0x130
[  702.638218][ T8722]  el0_svc+0x58/0x128
[  702.638967][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  702.639879][ T8722]  el0t_64_sync+0x18c/0x190
[  702.644946][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  702.646275][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  702.647865][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  702.649697][ T8722] Call trace:
[  702.650319][ T8722]  dump_backtrace+0x1c0/0x1ec
[  702.651204][ T8722]  show_stack+0x2c/0x3c
[  702.652034][ T8722]  __dump_stack+0x30/0x40
[  702.652874][ T8722]  dump_stack_lvl+0xf4/0x15c
[  702.653762][ T8722]  dump_stack+0x1c/0x5c
[  702.654566][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  702.655574][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  702.656656][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  702.657663][ T8722]  f2fs_readdir+0x3bc/0xc10
[  702.658578][ T8722]  iterate_dir+0x1f0/0x4cc
[  702.659431][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  702.660472][ T8722]  invoke_syscall+0x98/0x2b4
[  702.661371][ T8722]  el0_svc_common+0x138/0x258
[  702.662290][ T8722]  do_el0_svc+0x58/0x130
[  702.663163][ T8722]  el0_svc+0x58/0x128
[  702.663903][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  702.664871][ T8722]  el0t_64_sync+0x18c/0x190
[  702.666717][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  702.667965][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  702.669583][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  702.671488][ T8722] Call trace:
[  702.672123][ T8722]  dump_backtrace+0x1c0/0x1ec
[  702.673035][ T8722]  show_stack+0x2c/0x3c
[  702.673838][ T8722]  __dump_stack+0x30/0x40
[  702.674690][ T8722]  dump_stack_lvl+0xf4/0x15c
[  702.675548][ T8722]  dump_stack+0x1c/0x5c
[  702.676354][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  702.677386][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  702.678454][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  702.679455][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  702.680368][ T8722]  f2fs_rmdir+0x48/0x7c
[  702.681177][ T8722]  vfs_rmdir+0x304/0x438
[  702.681995][ T8722]  do_rmdir+0x244/0x524
[  702.682807][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  702.683737][ T8722]  invoke_syscall+0x98/0x2b4
[  702.684617][ T8722]  el0_svc_common+0x138/0x258
[  702.685523][ T8722]  do_el0_svc+0x58/0x130
[  702.686333][ T8722]  el0_svc+0x58/0x128
[  702.687107][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  702.688077][ T8722]  el0t_64_sync+0x18c/0x190
[  702.690067][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  702.691254][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  702.692873][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  702.694710][ T8722] Call trace:
[  702.695337][ T8722]  dump_backtrace+0x1c0/0x1ec
[  702.696246][ T8722]  show_stack+0x2c/0x3c
[  702.697047][ T8722]  __dump_stack+0x30/0x40
[  702.697903][ T8722]  dump_stack_lvl+0xf4/0x15c
[  702.698801][ T8722]  dump_stack+0x1c/0x5c
[  702.699612][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  702.700659][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  702.701702][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  702.702696][ T8722]  f2fs_readdir+0x3bc/0xc10
[  702.703581][ T8722]  iterate_dir+0x1f0/0x4cc
[  702.704443][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  702.705462][ T8722]  invoke_syscall+0x98/0x2b4
[  702.706333][ T8722]  el0_svc_common+0x138/0x258
[  702.707225][ T8722]  do_el0_svc+0x58/0x130
[  702.708046][ T8722]  el0_svc+0x58/0x128
[  702.708813][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  702.709792][ T8722]  el0t_64_sync+0x18c/0x190
[  702.712169][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  702.713334][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  702.715006][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  702.716944][ T8722] Call trace:
[  702.717565][ T8722]  dump_backtrace+0x1c0/0x1ec
[  702.718448][ T8722]  show_stack+0x2c/0x3c
[  702.719237][ T8722]  __dump_stack+0x30/0x40
[  702.720102][ T8722]  dump_stack_lvl+0xf4/0x15c
[  702.720986][ T8722]  dump_stack+0x1c/0x5c
[  702.721805][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  702.722835][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  702.723912][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  702.724909][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  702.725846][ T8722]  f2fs_rmdir+0x48/0x7c
[  702.726680][ T8722]  vfs_rmdir+0x304/0x438
[  702.727507][ T8722]  do_rmdir+0x244/0x524
[  702.728341][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  702.729312][ T8722]  invoke_syscall+0x98/0x2b4
[  702.730203][ T8722]  el0_svc_common+0x138/0x258
[  702.731110][ T8722]  do_el0_svc+0x58/0x130
[  702.731946][ T8722]  el0_svc+0x58/0x128
[  702.732738][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  702.733727][ T8722]  el0t_64_sync+0x18c/0x190
[  702.735758][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  702.736969][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  702.738737][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  702.740699][ T8722] Call trace:
[  702.741336][ T8722]  dump_backtrace+0x1c0/0x1ec
[  702.742245][ T8722]  show_stack+0x2c/0x3c
[  702.743069][ T8722]  __dump_stack+0x30/0x40
[  702.743910][ T8722]  dump_stack_lvl+0xf4/0x15c
[  702.744802][ T8722]  dump_stack+0x1c/0x5c
[  702.745639][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  702.746668][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  702.747748][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  702.748733][ T8722]  f2fs_readdir+0x3bc/0xc10
[  702.749649][ T8722]  iterate_dir+0x1f0/0x4cc
[  702.750490][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  702.751542][ T8722]  invoke_syscall+0x98/0x2b4
[  702.752453][ T8722]  el0_svc_common+0x138/0x258
[  702.753374][ T8722]  do_el0_svc+0x58/0x130
[  702.754186][ T8722]  el0_svc+0x58/0x128
[  702.754972][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  702.755956][ T8722]  el0t_64_sync+0x18c/0x190
[  702.758221][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  702.759395][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  702.761103][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  702.763056][ T8722] Call trace:
[  702.763702][ T8722]  dump_backtrace+0x1c0/0x1ec
[  702.764632][ T8722]  show_stack+0x2c/0x3c
[  702.765440][ T8722]  __dump_stack+0x30/0x40
[  702.766295][ T8722]  dump_stack_lvl+0xf4/0x15c
[  702.767188][ T8722]  dump_stack+0x1c/0x5c
[  702.767984][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  702.768971][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  702.770000][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  702.770988][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  702.771897][ T8722]  f2fs_rmdir+0x48/0x7c
[  702.772713][ T8722]  vfs_rmdir+0x304/0x438
[  702.773536][ T8722]  do_rmdir+0x244/0x524
[  702.774291][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  702.775225][ T8722]  invoke_syscall+0x98/0x2b4
[  702.776106][ T8722]  el0_svc_common+0x138/0x258
[  702.777024][ T8722]  do_el0_svc+0x58/0x130
[  702.777868][ T8722]  el0_svc+0x58/0x128
[  702.778643][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  702.779622][ T8722]  el0t_64_sync+0x18c/0x190
[  702.781490][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  702.782637][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  702.784210][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  702.786053][ T8722] Call trace:
[  702.786654][ T8722]  dump_backtrace+0x1c0/0x1ec
[  702.787535][ T8722]  show_stack+0x2c/0x3c
[  702.788306][ T8722]  __dump_stack+0x30/0x40
[  702.789127][ T8722]  dump_stack_lvl+0xf4/0x15c
[  702.789970][ T8722]  dump_stack+0x1c/0x5c
[  702.790750][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  702.791703][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  702.792732][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  702.793697][ T8722]  f2fs_readdir+0x3bc/0xc10
[  702.794548][ T8722]  iterate_dir+0x1f0/0x4cc
[  702.795405][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  702.796448][ T8722]  invoke_syscall+0x98/0x2b4
[  702.797325][ T8722]  el0_svc_common+0x138/0x258
[  702.798223][ T8722]  do_el0_svc+0x58/0x130
[  702.799048][ T8722]  el0_svc+0x58/0x128
[  702.799817][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  702.800749][ T8722]  el0t_64_sync+0x18c/0x190
[  702.802611][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  702.803778][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  702.805488][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  702.807395][ T8722] Call trace:
[  702.808028][ T8722]  dump_backtrace+0x1c0/0x1ec
[  702.808926][ T8722]  show_stack+0x2c/0x3c
[  702.809729][ T8722]  __dump_stack+0x30/0x40
[  702.810570][ T8722]  dump_stack_lvl+0xf4/0x15c
[  702.811460][ T8722]  dump_stack+0x1c/0x5c
[  702.812250][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  702.813242][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  702.814288][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  702.815280][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  702.816170][ T8722]  f2fs_rmdir+0x48/0x7c
[  702.816976][ T8722]  vfs_rmdir+0x304/0x438
[  702.817792][ T8722]  do_rmdir+0x244/0x524
[  702.818588][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  702.819537][ T8722]  invoke_syscall+0x98/0x2b4
[  702.820358][ T8722]  el0_svc_common+0x138/0x258
[  702.821262][ T8722]  do_el0_svc+0x58/0x130
[  702.822079][ T8722]  el0_svc+0x58/0x128
[  702.822845][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  702.823801][ T8722]  el0t_64_sync+0x18c/0x190
[  702.827713][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  702.828867][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  702.830498][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  702.832316][ T8722] Call trace:
[  702.832935][ T8722]  dump_backtrace+0x1c0/0x1ec
[  702.833846][ T8722]  show_stack+0x2c/0x3c
[  702.834654][ T8722]  __dump_stack+0x30/0x40
[  702.835456][ T8722]  dump_stack_lvl+0xf4/0x15c
[  702.836293][ T8722]  dump_stack+0x1c/0x5c
[  702.837082][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  702.838125][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  702.839242][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  702.840273][ T8722]  f2fs_readdir+0x3bc/0xc10
[  702.841193][ T8722]  iterate_dir+0x1f0/0x4cc
[  702.842109][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  702.843208][ T8722]  invoke_syscall+0x98/0x2b4
[  702.844143][ T8722]  el0_svc_common+0x138/0x258
[  702.845095][ T8722]  do_el0_svc+0x58/0x130
[  702.845973][ T8722]  el0_svc+0x58/0x128
[  702.846802][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  702.847829][ T8722]  el0t_64_sync+0x18c/0x190
[  702.850016][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  702.851095][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  702.852761][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  702.854577][ T8722] Call trace:
[  702.855181][ T8722]  dump_backtrace+0x1c0/0x1ec
[  702.856031][ T8722]  show_stack+0x2c/0x3c
[  702.856814][ T8722]  __dump_stack+0x30/0x40
[  702.857690][ T8722]  dump_stack_lvl+0xf4/0x15c
[  702.858648][ T8722]  dump_stack+0x1c/0x5c
[  702.859507][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  702.860582][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  702.861715][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  702.862722][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  702.863679][ T8722]  f2fs_rmdir+0x48/0x7c
[  702.864526][ T8722]  vfs_rmdir+0x304/0x438
[  702.865395][ T8722]  do_rmdir+0x244/0x524
[  702.866256][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  702.867297][ T8722]  invoke_syscall+0x98/0x2b4
[  702.868256][ T8722]  el0_svc_common+0x138/0x258
[  702.869229][ T8722]  do_el0_svc+0x58/0x130
[  702.870118][ T8722]  el0_svc+0x58/0x128
[  702.870965][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  702.872011][ T8722]  el0t_64_sync+0x18c/0x190
[  702.873153][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  702.874209][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  702.875757][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  702.877514][ T8722] Call trace:
[  702.878163][ T8722]  dump_backtrace+0x1c0/0x1ec
[  702.879110][ T8722]  show_stack+0x2c/0x3c
[  702.879961][ T8722]  __dump_stack+0x30/0x40
[  702.880839][ T8722]  dump_stack_lvl+0xf4/0x15c
[  702.881766][ T8722]  dump_stack+0x1c/0x5c
[  702.882598][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  702.883682][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  702.884837][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  702.885909][ T8722]  f2fs_readdir+0x3bc/0xc10
[  702.886841][ T8722]  iterate_dir+0x1f0/0x4cc
[  702.887751][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  702.888837][ T8722]  invoke_syscall+0x98/0x2b4
[  702.889740][ T8722]  el0_svc_common+0x138/0x258
[  702.890677][ T8722]  do_el0_svc+0x58/0x130
[  702.891516][ T8722]  el0_svc+0x58/0x128
[  702.892312][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  702.893307][ T8722]  el0t_64_sync+0x18c/0x190
[  702.895640][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  702.896763][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  702.898644][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  702.900600][ T8722] Call trace:
[  702.901273][ T8722]  dump_backtrace+0x1c0/0x1ec
[  702.902155][ T8722]  show_stack+0x2c/0x3c
[  702.902983][ T8722]  __dump_stack+0x30/0x40
[  702.903848][ T8722]  dump_stack_lvl+0xf4/0x15c
[  702.904759][ T8722]  dump_stack+0x1c/0x5c
[  702.905595][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  702.906678][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  702.907771][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  702.908794][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  702.909738][ T8722]  f2fs_rmdir+0x48/0x7c
[  702.910582][ T8722]  vfs_rmdir+0x304/0x438
[  702.911426][ T8722]  do_rmdir+0x244/0x524
[  702.912266][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  702.913277][ T8722]  invoke_syscall+0x98/0x2b4
[  702.914222][ T8722]  el0_svc_common+0x138/0x258
[  702.915162][ T8722]  do_el0_svc+0x58/0x130
[  702.916021][ T8722]  el0_svc+0x58/0x128
[  702.916835][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  702.917833][ T8722]  el0t_64_sync+0x18c/0x190
[  702.918891][    C1] vcan0: j1939_tp_rxtimer: 0x00000000d23d27ed: abort rx timeout. Force session deactivation
[  702.921687][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  702.922725][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  702.924286][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  702.926068][ T8722] Call trace:
[  702.926671][ T8722]  dump_backtrace+0x1c0/0x1ec
[  702.927534][ T8722]  show_stack+0x2c/0x3c
[  702.928395][ T8722]  __dump_stack+0x30/0x40
[  702.929323][ T8722]  dump_stack_lvl+0xf4/0x15c
[  702.930270][ T8722]  dump_stack+0x1c/0x5c
[  702.931163][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  702.932277][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  702.933372][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  702.934378][ T8722]  f2fs_readdir+0x3bc/0xc10
[  702.935278][ T8722]  iterate_dir+0x1f0/0x4cc
[  702.936156][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  702.937225][ T8722]  invoke_syscall+0x98/0x2b4
[  702.938135][ T8722]  el0_svc_common+0x138/0x258
[  702.939055][ T8722]  do_el0_svc+0x58/0x130
[  702.939894][ T8722]  el0_svc+0x58/0x128
[  702.940691][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  702.941696][ T8722]  el0t_64_sync+0x18c/0x190
[  702.943779][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  702.944808][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  702.946408][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  702.948302][ T8722] Call trace:
[  702.948962][ T8722]  dump_backtrace+0x1c0/0x1ec
[  702.949932][ T8722]  show_stack+0x2c/0x3c
[  702.950791][ T8722]  __dump_stack+0x30/0x40
[  702.951669][ T8722]  dump_stack_lvl+0xf4/0x15c
[  702.952594][ T8722]  dump_stack+0x1c/0x5c
[  702.953423][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  702.954457][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  702.955569][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  702.956631][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  702.957571][ T8722]  f2fs_rmdir+0x48/0x7c
[  702.958405][ T8722]  vfs_rmdir+0x304/0x438
[  702.959271][ T8722]  do_rmdir+0x244/0x524
[  702.960114][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  702.961122][ T8722]  invoke_syscall+0x98/0x2b4
[  702.962025][ T8722]  el0_svc_common+0x138/0x258
[  702.962976][ T8722]  do_el0_svc+0x58/0x130
[  702.963829][ T8722]  el0_svc+0x58/0x128
[  702.964626][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  702.965696][ T8722]  el0t_64_sync+0x18c/0x190
[  702.967711][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  702.968810][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  702.970474][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  702.972324][ T8722] Call trace:
[  702.972946][ T8722]  dump_backtrace+0x1c0/0x1ec
[  702.973774][ T8722]  show_stack+0x2c/0x3c
[  702.974570][ T8722]  __dump_stack+0x30/0x40
[  702.975356][ T8722]  dump_stack_lvl+0xf4/0x15c
[  702.976191][ T8722]  dump_stack+0x1c/0x5c
[  702.976942][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  702.977947][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  702.979029][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  702.980051][ T8722]  f2fs_readdir+0x3bc/0xc10
[  702.980984][ T8722]  iterate_dir+0x1f0/0x4cc
[  702.981882][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  702.982993][ T8722]  invoke_syscall+0x98/0x2b4
[  702.983937][ T8722]  el0_svc_common+0x138/0x258
[  702.984899][ T8722]  do_el0_svc+0x58/0x130
[  702.985768][ T8722]  el0_svc+0x58/0x128
[  702.986575][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  702.987614][ T8722]  el0t_64_sync+0x18c/0x190
[  702.989429][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  702.990534][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  702.992168][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  702.993968][ T8722] Call trace:
[  702.994572][ T8722]  dump_backtrace+0x1c0/0x1ec
[  702.995432][ T8722]  show_stack+0x2c/0x3c
[  702.996200][ T8722]  __dump_stack+0x30/0x40
[  702.997031][ T8722]  dump_stack_lvl+0xf4/0x15c
[  702.997906][ T8722]  dump_stack+0x1c/0x5c
[  702.998759][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  702.999813][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.000929][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.001985][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  703.002932][ T8722]  f2fs_rmdir+0x48/0x7c
[  703.003765][ T8722]  vfs_rmdir+0x304/0x438
[  703.004584][ T8722]  do_rmdir+0x244/0x524
[  703.005438][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  703.006438][ T8722]  invoke_syscall+0x98/0x2b4
[  703.007397][ T8722]  el0_svc_common+0x138/0x258
[  703.008395][ T8722]  do_el0_svc+0x58/0x130
[  703.009297][ T8722]  el0_svc+0x58/0x128
[  703.010126][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.011174][ T8722]  el0t_64_sync+0x18c/0x190
[  703.013180][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.014226][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.015843][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.017667][ T8722] Call trace:
[  703.018349][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.019314][ T8722]  show_stack+0x2c/0x3c
[  703.020140][ T8722]  __dump_stack+0x30/0x40
[  703.021013][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.021957][ T8722]  dump_stack+0x1c/0x5c
[  703.022801][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.023874][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.024975][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.026025][ T8722]  f2fs_readdir+0x3bc/0xc10
[  703.026954][ T8722]  iterate_dir+0x1f0/0x4cc
[  703.027852][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  703.028931][ T8722]  invoke_syscall+0x98/0x2b4
[  703.029832][ T8722]  el0_svc_common+0x138/0x258
[  703.030776][ T8722]  do_el0_svc+0x58/0x130
[  703.031638][ T8722]  el0_svc+0x58/0x128
[  703.032433][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.033478][ T8722]  el0t_64_sync+0x18c/0x190
[  703.035511][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.036550][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.038255][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.040232][ T8722] Call trace:
[  703.040888][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.041814][ T8722]  show_stack+0x2c/0x3c
[  703.042664][ T8722]  __dump_stack+0x30/0x40
[  703.043540][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.044469][ T8722]  dump_stack+0x1c/0x5c
[  703.045305][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.046377][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.047479][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.048512][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  703.049474][ T8722]  f2fs_rmdir+0x48/0x7c
[  703.050315][ T8722]  vfs_rmdir+0x304/0x438
[  703.051169][ T8722]  do_rmdir+0x244/0x524
[  703.052002][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  703.053006][ T8722]  invoke_syscall+0x98/0x2b4
[  703.053918][ T8722]  el0_svc_common+0x138/0x258
[  703.054861][ T8722]  do_el0_svc+0x58/0x130
[  703.055708][ T8722]  el0_svc+0x58/0x128
[  703.056505][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.057509][ T8722]  el0t_64_sync+0x18c/0x190
[  703.059352][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.060460][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.062078][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.064019][ T8722] Call trace:
[  703.064613][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.065498][ T8722]  show_stack+0x2c/0x3c
[  703.066301][ T8722]  __dump_stack+0x30/0x40
[  703.067115][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.068030][ T8722]  dump_stack+0x1c/0x5c
[  703.068874][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.069938][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.071060][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.072103][ T8722]  f2fs_readdir+0x3bc/0xc10
[  703.073037][ T8722]  iterate_dir+0x1f0/0x4cc
[  703.073957][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  703.075042][ T8722]  invoke_syscall+0x98/0x2b4
[  703.075957][ T8722]  el0_svc_common+0x138/0x258
[  703.076919][ T8722]  do_el0_svc+0x58/0x130
[  703.077773][ T8722]  el0_svc+0x58/0x128
[  703.078594][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.079623][ T8722]  el0t_64_sync+0x18c/0x190
[  703.081842][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.082972][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.084696][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.086580][ T8722] Call trace:
[  703.087195][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.088144][ T8722]  show_stack+0x2c/0x3c
[  703.089004][ T8722]  __dump_stack+0x30/0x40
[  703.089922][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.090874][ T8722]  dump_stack+0x1c/0x5c
[  703.091720][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.092785][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.093884][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.094898][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  703.095844][ T8722]  f2fs_rmdir+0x48/0x7c
[  703.096693][ T8722]  vfs_rmdir+0x304/0x438
[  703.097557][ T8722]  do_rmdir+0x244/0x524
[  703.098413][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  703.099453][ T8722]  invoke_syscall+0x98/0x2b4
[  703.100398][ T8722]  el0_svc_common+0x138/0x258
[  703.101359][ T8722]  do_el0_svc+0x58/0x130
[  703.102213][ T8722]  el0_svc+0x58/0x128
[  703.103036][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.104060][ T8722]  el0t_64_sync+0x18c/0x190
[  703.105914][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.106958][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.108752][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.110809][ T8722] Call trace:
[  703.111475][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.112443][ T8722]  show_stack+0x2c/0x3c
[  703.113295][ T8722]  __dump_stack+0x30/0x40
[  703.114168][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.115100][ T8722]  dump_stack+0x1c/0x5c
[  703.115891][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.116930][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.118022][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.119050][ T8722]  f2fs_readdir+0x3bc/0xc10
[  703.119922][ T8722]  iterate_dir+0x1f0/0x4cc
[  703.120839][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  703.121924][ T8722]  invoke_syscall+0x98/0x2b4
[  703.122882][ T8722]  el0_svc_common+0x138/0x258
[  703.123842][ T8722]  do_el0_svc+0x58/0x130
[  703.124696][ T8722]  el0_svc+0x58/0x128
[  703.125475][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.126480][ T8722]  el0t_64_sync+0x18c/0x190
[  703.129534][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.130624][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.132255][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.134108][ T8722] Call trace:
[  703.134732][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.135704][ T8722]  show_stack+0x2c/0x3c
[  703.136567][ T8722]  __dump_stack+0x30/0x40
[  703.137448][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.138388][ T8722]  dump_stack+0x1c/0x5c
[  703.139224][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.140292][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.141455][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.142513][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  703.143476][ T8722]  f2fs_rmdir+0x48/0x7c
[  703.144335][ T8722]  vfs_rmdir+0x304/0x438
[  703.145209][ T8722]  do_rmdir+0x244/0x524
[  703.146059][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  703.147083][ T8722]  invoke_syscall+0x98/0x2b4
[  703.148006][ T8722]  el0_svc_common+0x138/0x258
[  703.148930][ T8722]  do_el0_svc+0x58/0x130
[  703.149792][ T8722]  el0_svc+0x58/0x128
[  703.150604][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.151619][ T8722]  el0t_64_sync+0x18c/0x190
[  703.154348][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.155460][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.157089][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.159085][ T8722] Call trace:
[  703.159751][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.160724][ T8722]  show_stack+0x2c/0x3c
[  703.161592][ T8722]  __dump_stack+0x30/0x40
[  703.162475][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.163414][ T8722]  dump_stack+0x1c/0x5c
[  703.164264][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.165326][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.166417][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.167459][ T8722]  f2fs_readdir+0x3bc/0xc10
[  703.168373][ T8722]  iterate_dir+0x1f0/0x4cc
[  703.169267][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  703.170355][ T8722]  invoke_syscall+0x98/0x2b4
[  703.171285][ T8722]  el0_svc_common+0x138/0x258
[  703.172241][ T8722]  do_el0_svc+0x58/0x130
[  703.173090][ T8722]  el0_svc+0x58/0x128
[  703.173878][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.174880][ T8722]  el0t_64_sync+0x18c/0x190
[  703.176628][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.177797][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.179366][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.181105][ T8722] Call trace:
[  703.181710][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.182580][ T8722]  show_stack+0x2c/0x3c
[  703.183370][ T8722]  __dump_stack+0x30/0x40
[  703.184187][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.185063][ T8722]  dump_stack+0x1c/0x5c
[  703.185822][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.186815][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.187843][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.188864][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  703.189818][ T8722]  f2fs_rmdir+0x48/0x7c
[  703.190653][ T8722]  vfs_rmdir+0x304/0x438
[  703.191502][ T8722]  do_rmdir+0x244/0x524
[  703.192346][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  703.193354][ T8722]  invoke_syscall+0x98/0x2b4
[  703.194269][ T8722]  el0_svc_common+0x138/0x258
[  703.195204][ T8722]  do_el0_svc+0x58/0x130
[  703.196068][ T8722]  el0_svc+0x58/0x128
[  703.196870][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.197833][ T8722]  el0t_64_sync+0x18c/0x190
[  703.199658][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.200739][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.202455][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.204312][ T8722] Call trace:
[  703.204929][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.205812][ T8722]  show_stack+0x2c/0x3c
[  703.206591][ T8722]  __dump_stack+0x30/0x40
[  703.207399][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.208337][ T8722]  dump_stack+0x1c/0x5c
[  703.209195][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.210260][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.211347][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.212369][ T8722]  f2fs_readdir+0x3bc/0xc10
[  703.213263][ T8722]  iterate_dir+0x1f0/0x4cc
[  703.214149][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  703.215237][ T8722]  invoke_syscall+0x98/0x2b4
[  703.216173][ T8722]  el0_svc_common+0x138/0x258
[  703.217128][ T8722]  do_el0_svc+0x58/0x130
[  703.217981][ T8722]  el0_svc+0x58/0x128
[  703.218783][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.219803][ T8722]  el0t_64_sync+0x18c/0x190
[  703.223174][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.224241][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.225975][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.227870][ T8722] Call trace:
[  703.228538][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.229506][ T8722]  show_stack+0x2c/0x3c
[  703.230360][ T8722]  __dump_stack+0x30/0x40
[  703.231237][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.232183][ T8722]  dump_stack+0x1c/0x5c
[  703.233016][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.234042][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.235139][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.236180][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  703.237158][ T8722]  f2fs_rmdir+0x48/0x7c
[  703.238027][ T8722]  vfs_rmdir+0x304/0x438
[  703.238891][ T8722]  do_rmdir+0x244/0x524
[  703.239734][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  703.240751][ T8722]  invoke_syscall+0x98/0x2b4
[  703.241672][ T8722]  el0_svc_common+0x138/0x258
[  703.242616][ T8722]  do_el0_svc+0x58/0x130
[  703.243487][ T8722]  el0_svc+0x58/0x128
[  703.244284][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.245260][ T8722]  el0t_64_sync+0x18c/0x190
[  703.247240][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.248518][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.250168][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.252038][ T8722] Call trace:
[  703.252631][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.253480][ T8722]  show_stack+0x2c/0x3c
[  703.254233][ T8722]  __dump_stack+0x30/0x40
[  703.255065][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.255933][ T8722]  dump_stack+0x1c/0x5c
[  703.256699][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.257699][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.258799][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.259811][ T8722]  f2fs_readdir+0x3bc/0xc10
[  703.260714][ T8722]  iterate_dir+0x1f0/0x4cc
[  703.261580][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  703.262604][ T8722]  invoke_syscall+0x98/0x2b4
[  703.263495][ T8722]  el0_svc_common+0x138/0x258
[  703.264437][ T8722]  do_el0_svc+0x58/0x130
[  703.265264][ T8722]  el0_svc+0x58/0x128
[  703.266045][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.267050][ T8722]  el0t_64_sync+0x18c/0x190
[  703.268902][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.269997][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.271666][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.273473][ T8722] Call trace:
[  703.274069][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.274925][ T8722]  show_stack+0x2c/0x3c
[  703.275688][ T8722]  __dump_stack+0x30/0x40
[  703.276501][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.277393][ T8722]  dump_stack+0x1c/0x5c
[  703.278224][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.279290][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.280397][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.281424][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  703.282366][ T8722]  f2fs_rmdir+0x48/0x7c
[  703.283219][ T8722]  vfs_rmdir+0x304/0x438
[  703.284059][ T8722]  do_rmdir+0x244/0x524
[  703.284900][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  703.285928][ T8722]  invoke_syscall+0x98/0x2b4
[  703.286837][ T8722]  el0_svc_common+0x138/0x258
[  703.287791][ T8722]  do_el0_svc+0x58/0x130
[  703.288650][ T8722]  el0_svc+0x58/0x128
[  703.289464][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.290483][ T8722]  el0t_64_sync+0x18c/0x190
[  703.293572][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.294653][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.296337][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.298251][ T8722] Call trace:
[  703.298908][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.299831][ T8722]  show_stack+0x2c/0x3c
[  703.300686][ T8722]  __dump_stack+0x30/0x40
[  703.301574][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.302510][ T8722]  dump_stack+0x1c/0x5c
[  703.303342][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.304401][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.305508][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.306528][ T8722]  f2fs_readdir+0x3bc/0xc10
[  703.307415][ T8722]  iterate_dir+0x1f0/0x4cc
[  703.308337][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  703.309462][ T8722]  invoke_syscall+0x98/0x2b4
[  703.310372][ T8722]  el0_svc_common+0x138/0x258
[  703.311277][ T8722]  do_el0_svc+0x58/0x130
[  703.312128][ T8722]  el0_svc+0x58/0x128
[  703.312930][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.313949][ T8722]  el0t_64_sync+0x18c/0x190
[  703.315949][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.317042][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.318738][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.320718][ T8722] Call trace:
[  703.321384][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.322342][ T8722]  show_stack+0x2c/0x3c
[  703.323184][ T8722]  __dump_stack+0x30/0x40
[  703.324094][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.325027][ T8722]  dump_stack+0x1c/0x5c
[  703.325895][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.326999][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.328087][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.329112][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  703.330013][ T8722]  f2fs_rmdir+0x48/0x7c
[  703.330847][ T8722]  vfs_rmdir+0x304/0x438
[  703.331664][ T8722]  do_rmdir+0x244/0x524
[  703.332498][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  703.333454][ T8722]  invoke_syscall+0x98/0x2b4
[  703.334350][ T8722]  el0_svc_common+0x138/0x258
[  703.335251][ T8722]  do_el0_svc+0x58/0x130
[  703.336114][ T8722]  el0_svc+0x58/0x128
[  703.336905][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.337939][ T8722]  el0t_64_sync+0x18c/0x190
[  703.340067][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.341218][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.342862][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.344684][ T8722] Call trace:
[  703.345283][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.346132][ T8722]  show_stack+0x2c/0x3c
[  703.346883][ T8722]  __dump_stack+0x30/0x40
[  703.347713][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.348634][ T8722]  dump_stack+0x1c/0x5c
[  703.349507][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.350583][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.351676][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.352735][ T8722]  f2fs_readdir+0x3bc/0xc10
[  703.353669][ T8722]  iterate_dir+0x1f0/0x4cc
[  703.354577][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  703.355699][ T8722]  invoke_syscall+0x98/0x2b4
[  703.356632][ T8722]  el0_svc_common+0x138/0x258
[  703.357595][ T8722]  do_el0_svc+0x58/0x130
[  703.358463][ T8722]  el0_svc+0x58/0x128
[  703.359264][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.360338][ T8722]  el0t_64_sync+0x18c/0x190
[  703.362250][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.363371][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.365045][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.366910][ T8722] Call trace:
[  703.367528][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.368517][ T8722]  show_stack+0x2c/0x3c
[  703.369377][ T8722]  __dump_stack+0x30/0x40
[  703.370272][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.371205][ T8722]  dump_stack+0x1c/0x5c
[  703.372092][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.373177][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.374300][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.375344][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  703.376311][ T8722]  f2fs_rmdir+0x48/0x7c
[  703.377159][ T8722]  vfs_rmdir+0x304/0x438
[  703.378031][ T8722]  do_rmdir+0x244/0x524
[  703.378871][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  703.379890][ T8722]  invoke_syscall+0x98/0x2b4
[  703.380818][ T8722]  el0_svc_common+0x138/0x258
[  703.381762][ T8722]  do_el0_svc+0x58/0x130
[  703.382614][ T8722]  el0_svc+0x58/0x128
[  703.383421][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.384425][ T8722]  el0t_64_sync+0x18c/0x190
[  703.386669][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.387816][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.389466][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.391271][ T8722] Call trace:
[  703.391840][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.392641][ T8722]  show_stack+0x2c/0x3c
[  703.393391][ T8722]  __dump_stack+0x30/0x40
[  703.394149][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.395001][ T8722]  dump_stack+0x1c/0x5c
[  703.395760][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.396704][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.397722][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.398783][ T8722]  f2fs_readdir+0x3bc/0xc10
[  703.399684][ T8722]  iterate_dir+0x1f0/0x4cc
[  703.400572][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  703.401634][ T8722]  invoke_syscall+0x98/0x2b4
[  703.402521][ T8722]  el0_svc_common+0x138/0x258
[  703.403412][ T8722]  do_el0_svc+0x58/0x130
[  703.404250][ T8722]  el0_svc+0x58/0x128
[  703.405019][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.405991][ T8722]  el0t_64_sync+0x18c/0x190
[  703.407751][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.408804][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.410462][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.412290][ T8722] Call trace:
[  703.412887][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.413760][ T8722]  show_stack+0x2c/0x3c
[  703.414545][ T8722]  __dump_stack+0x30/0x40
[  703.415353][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.416206][ T8722]  dump_stack+0x1c/0x5c
[  703.416987][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.418013][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.419124][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.420174][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  703.421120][ T8722]  f2fs_rmdir+0x48/0x7c
[  703.421970][ T8722]  vfs_rmdir+0x304/0x438
[  703.422840][ T8722]  do_rmdir+0x244/0x524
[  703.423695][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  703.424721][ T8722]  invoke_syscall+0x98/0x2b4
[  703.425653][ T8722]  el0_svc_common+0x138/0x258
[  703.426587][ T8722]  do_el0_svc+0x58/0x130
[  703.427437][ T8722]  el0_svc+0x58/0x128
[  703.428247][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.429279][ T8722]  el0t_64_sync+0x18c/0x190
[  703.431167][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.432288][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.433880][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.435674][ T8722] Call trace:
[  703.436259][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.437086][ T8722]  show_stack+0x2c/0x3c
[  703.437890][ T8722]  __dump_stack+0x30/0x40
[  703.438742][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.439625][ T8722]  dump_stack+0x1c/0x5c
[  703.440444][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.441454][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.442511][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.443589][ T8722]  f2fs_readdir+0x3bc/0xc10
[  703.444477][ T8722]  iterate_dir+0x1f0/0x4cc
[  703.445355][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  703.446420][ T8722]  invoke_syscall+0x98/0x2b4
[  703.447342][ T8722]  el0_svc_common+0x138/0x258
[  703.448286][ T8722]  do_el0_svc+0x58/0x130
[  703.449140][ T8722]  el0_svc+0x58/0x128
[  703.449919][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.450893][ T8722]  el0t_64_sync+0x18c/0x190
[  703.453266][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.454346][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.456004][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.457914][ T8722] Call trace:
[  703.458597][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.459562][ T8722]  show_stack+0x2c/0x3c
[  703.460425][ T8722]  __dump_stack+0x30/0x40
[  703.461329][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.462265][ T8722]  dump_stack+0x1c/0x5c
[  703.463122][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.464220][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.465350][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.466419][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  703.467380][ T8722]  f2fs_rmdir+0x48/0x7c
[  703.468239][ T8722]  vfs_rmdir+0x304/0x438
[  703.469110][ T8722]  do_rmdir+0x244/0x524
[  703.469963][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  703.470968][ T8722]  invoke_syscall+0x98/0x2b4
[  703.471870][ T8722]  el0_svc_common+0x138/0x258
[  703.472811][ T8722]  do_el0_svc+0x58/0x130
[  703.473656][ T8722]  el0_svc+0x58/0x128
[  703.474480][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.475520][ T8722]  el0t_64_sync+0x18c/0x190
[  703.477622][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.478703][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.480369][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.482140][ T8722] Call trace:
[  703.482743][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.483631][ T8722]  show_stack+0x2c/0x3c
[  703.484417][ T8722]  __dump_stack+0x30/0x40
[  703.485212][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.486073][ T8722]  dump_stack+0x1c/0x5c
[  703.486848][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.487874][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.488958][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.489984][ T8722]  f2fs_readdir+0x3bc/0xc10
[  703.490892][ T8722]  iterate_dir+0x1f0/0x4cc
[  703.491767][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  703.492829][ T8722]  invoke_syscall+0x98/0x2b4
[  703.493752][ T8722]  el0_svc_common+0x138/0x258
[  703.494699][ T8722]  do_el0_svc+0x58/0x130
[  703.495559][ T8722]  el0_svc+0x58/0x128
[  703.496388][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.497374][ T8722]  el0t_64_sync+0x18c/0x190
[  703.499144][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.500253][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.501882][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.503690][ T8722] Call trace:
[  703.504296][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.505173][ T8722]  show_stack+0x2c/0x3c
[  703.505943][ T8722]  __dump_stack+0x30/0x40
[  703.506721][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.507564][ T8722]  dump_stack+0x1c/0x5c
[  703.508400][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.509458][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.510560][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.511584][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  703.512517][ T8722]  f2fs_rmdir+0x48/0x7c
[  703.513356][ T8722]  vfs_rmdir+0x304/0x438
[  703.514214][ T8722]  do_rmdir+0x244/0x524
[  703.515038][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  703.516049][ T8722]  invoke_syscall+0x98/0x2b4
[  703.516997][ T8722]  el0_svc_common+0x138/0x258
[  703.517937][ T8722]  do_el0_svc+0x58/0x130
[  703.518793][ T8722]  el0_svc+0x58/0x128
[  703.519605][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.520628][ T8722]  el0t_64_sync+0x18c/0x190
[  703.522815][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.523896][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.525572][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.527396][ T8722] Call trace:
[  703.528061][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.529026][ T8722]  show_stack+0x2c/0x3c
[  703.529882][ T8722]  __dump_stack+0x30/0x40
[  703.530779][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.531749][ T8722]  dump_stack+0x1c/0x5c
[  703.532624][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.533703][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.534822][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.535873][ T8722]  f2fs_readdir+0x3bc/0xc10
[  703.536804][ T8722]  iterate_dir+0x1f0/0x4cc
[  703.537705][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  703.538788][ T8722]  invoke_syscall+0x98/0x2b4
[  703.539717][ T8722]  el0_svc_common+0x138/0x258
[  703.540642][ T8722]  do_el0_svc+0x58/0x130
[  703.541498][ T8722]  el0_svc+0x58/0x128
[  703.542306][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.543321][ T8722]  el0t_64_sync+0x18c/0x190
[  703.545389][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.547197][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.548899][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.550737][ T8722] Call trace:
[  703.551338][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.552216][ T8722]  show_stack+0x2c/0x3c
[  703.553007][ T8722]  __dump_stack+0x30/0x40
[  703.553847][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.554732][ T8722]  dump_stack+0x1c/0x5c
[  703.555526][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.556496][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.557540][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.558502][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  703.559370][ T8722]  f2fs_rmdir+0x48/0x7c
[  703.560143][ T8722]  vfs_rmdir+0x304/0x438
[  703.560929][ T8722]  do_rmdir+0x244/0x524
[  703.561703][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  703.562602][ T8722]  invoke_syscall+0x98/0x2b4
[  703.563472][ T8722]  el0_svc_common+0x138/0x258
[  703.564336][ T8722]  do_el0_svc+0x58/0x130
[  703.565126][ T8722]  el0_svc+0x58/0x128
[  703.565870][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.566797][ T8722]  el0t_64_sync+0x18c/0x190
[  703.569778][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.570944][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.572619][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.574771][ T8722] Call trace:
[  703.575415][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.576299][ T8722]  show_stack+0x2c/0x3c
[  703.577098][ T8722]  __dump_stack+0x30/0x40
[  703.577921][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.578782][ T8722]  dump_stack+0x1c/0x5c
[  703.579558][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.580588][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.581631][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.582623][ T8722]  f2fs_readdir+0x3bc/0xc10
[  703.583474][ T8722]  iterate_dir+0x1f0/0x4cc
[  703.584291][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  703.585365][ T8722]  invoke_syscall+0x98/0x2b4
[  703.586272][ T8722]  el0_svc_common+0x138/0x258
[  703.587192][ T8722]  do_el0_svc+0x58/0x130
[  703.588006][ T8722]  el0_svc+0x58/0x128
[  703.588767][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.589744][ T8722]  el0t_64_sync+0x18c/0x190
[  703.590828][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.591939][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.593577][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.595466][ T8722] Call trace:
[  703.596101][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.597005][ T8722]  show_stack+0x2c/0x3c
[  703.597812][ T8722]  __dump_stack+0x30/0x40
[  703.598655][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.599541][ T8722]  dump_stack+0x1c/0x5c
[  703.600354][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.601358][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.602410][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.603389][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  703.604292][ T8722]  f2fs_rmdir+0x48/0x7c
[  703.605092][ T8722]  vfs_rmdir+0x304/0x438
[  703.605913][ T8722]  do_rmdir+0x244/0x524
[  703.606712][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  703.607704][ T8722]  invoke_syscall+0x98/0x2b4
[  703.608586][ T8722]  el0_svc_common+0x138/0x258
[  703.609476][ T8722]  do_el0_svc+0x58/0x130
[  703.610300][ T8722]  el0_svc+0x58/0x128
[  703.611073][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.612045][ T8722]  el0t_64_sync+0x18c/0x190
[  703.614519][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.615675][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.617214][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.619009][ T8722] Call trace:
[  703.619609][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.620476][ T8722]  show_stack+0x2c/0x3c
[  703.621201][ T8722]  __dump_stack+0x30/0x40
[  703.621983][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.622858][ T8722]  dump_stack+0x1c/0x5c
[  703.623655][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.624684][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.625752][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.626760][ T8722]  f2fs_readdir+0x3bc/0xc10
[  703.627639][ T8722]  iterate_dir+0x1f0/0x4cc
[  703.628495][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  703.629554][ T8722]  invoke_syscall+0x98/0x2b4
[  703.630458][ T8722]  el0_svc_common+0x138/0x258
[  703.631394][ T8722]  do_el0_svc+0x58/0x130
[  703.632231][ T8722]  el0_svc+0x58/0x128
[  703.633032][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.633989][ T8722]  el0t_64_sync+0x18c/0x190
[  703.635371][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.636564][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.638255][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.640219][ T8722] Call trace:
[  703.640846][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.641755][ T8722]  show_stack+0x2c/0x3c
[  703.642558][ T8722]  __dump_stack+0x30/0x40
[  703.643397][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.644284][ T8722]  dump_stack+0x1c/0x5c
[  703.645079][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.646083][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.647109][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.648096][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  703.649001][ T8722]  f2fs_rmdir+0x48/0x7c
[  703.649793][ T8722]  vfs_rmdir+0x304/0x438
[  703.650583][ T8722]  do_rmdir+0x244/0x524
[  703.651390][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  703.652377][ T8722]  invoke_syscall+0x98/0x2b4
[  703.653272][ T8722]  el0_svc_common+0x138/0x258
[  703.654139][ T8722]  do_el0_svc+0x58/0x130
[  703.654955][ T8722]  el0_svc+0x58/0x128
[  703.655717][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.656690][ T8722]  el0t_64_sync+0x18c/0x190
[  703.658298][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.659446][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.661116][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.663051][ T8722] Call trace:
[  703.663693][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.664604][ T8722]  show_stack+0x2c/0x3c
[  703.665384][ T8722]  __dump_stack+0x30/0x40
[  703.666188][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.667044][ T8722]  dump_stack+0x1c/0x5c
[  703.667844][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.668865][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.669921][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.670906][ T8722]  f2fs_readdir+0x3bc/0xc10
[  703.671787][ T8722]  iterate_dir+0x1f0/0x4cc
[  703.672640][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  703.673651][ T8722]  invoke_syscall+0x98/0x2b4
[  703.674514][ T8722]  el0_svc_common+0x138/0x258
[  703.675392][ T8722]  do_el0_svc+0x58/0x130
[  703.676201][ T8722]  el0_svc+0x58/0x128
[  703.676945][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.677894][ T8722]  el0t_64_sync+0x18c/0x190
[  703.679517][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.680642][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.682228][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.684066][ T8722] Call trace:
[  703.684665][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.685512][ T8722]  show_stack+0x2c/0x3c
[  703.686294][ T8722]  __dump_stack+0x30/0x40
[  703.687101][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.687961][ T8722]  dump_stack+0x1c/0x5c
[  703.688772][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.689756][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.690793][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.691753][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  703.692652][ T8722]  f2fs_rmdir+0x48/0x7c
[  703.693431][ T8722]  vfs_rmdir+0x304/0x438
[  703.694248][ T8722]  do_rmdir+0x244/0x524
[  703.695051][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  703.696033][ T8722]  invoke_syscall+0x98/0x2b4
[  703.696940][ T8722]  el0_svc_common+0x138/0x258
[  703.697844][ T8722]  do_el0_svc+0x58/0x130
[  703.698674][ T8722]  el0_svc+0x58/0x128
[  703.699438][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.700426][ T8722]  el0t_64_sync+0x18c/0x190
[  703.701587][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.702704][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.704368][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.706280][ T8722] Call trace:
[  703.706894][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.707797][ T8722]  show_stack+0x2c/0x3c
[  703.708607][ T8722]  __dump_stack+0x30/0x40
[  703.709456][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.710353][ T8722]  dump_stack+0x1c/0x5c
[  703.711171][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.712198][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.713242][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.714216][ T8722]  f2fs_readdir+0x3bc/0xc10
[  703.715086][ T8722]  iterate_dir+0x1f0/0x4cc
[  703.715910][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  703.716886][ T8722]  invoke_syscall+0x98/0x2b4
[  703.717743][ T8722]  el0_svc_common+0x138/0x258
[  703.718637][ T8722]  do_el0_svc+0x58/0x130
[  703.719469][ T8722]  el0_svc+0x58/0x128
[  703.720248][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.721219][ T8722]  el0t_64_sync+0x18c/0x190
[  703.722247][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.723365][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.725003][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.726902][ T8722] Call trace:
[  703.727522][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.728413][ T8722]  show_stack+0x2c/0x3c
[  703.729222][ T8722]  __dump_stack+0x30/0x40
[  703.730061][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.730948][ T8722]  dump_stack+0x1c/0x5c
[  703.731748][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.732757][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.733826][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.734830][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  703.735737][ T8722]  f2fs_rmdir+0x48/0x7c
[  703.736538][ T8722]  vfs_rmdir+0x304/0x438
[  703.737343][ T8722]  do_rmdir+0x244/0x524
[  703.738145][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  703.739090][ T8722]  invoke_syscall+0x98/0x2b4
[  703.739964][ T8722]  el0_svc_common+0x138/0x258
[  703.740869][ T8722]  do_el0_svc+0x58/0x130
[  703.741681][ T8722]  el0_svc+0x58/0x128
[  703.742442][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.743418][ T8722]  el0t_64_sync+0x18c/0x190
[  703.744473][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.745611][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.747253][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.749168][ T8722] Call trace:
[  703.749789][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.750679][ T8722]  show_stack+0x2c/0x3c
[  703.751484][ T8722]  __dump_stack+0x30/0x40
[  703.752288][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.753158][ T8722]  dump_stack+0x1c/0x5c
[  703.753975][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.755023][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.756095][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.757094][ T8722]  f2fs_readdir+0x3bc/0xc10
[  703.757976][ T8722]  iterate_dir+0x1f0/0x4cc
[  703.758833][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  703.759873][ T8722]  invoke_syscall+0x98/0x2b4
[  703.760758][ T8722]  el0_svc_common+0x138/0x258
[  703.761646][ T8722]  do_el0_svc+0x58/0x130
[  703.762456][ T8722]  el0_svc+0x58/0x128
[  703.763227][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.764194][ T8722]  el0t_64_sync+0x18c/0x190
[  703.765361][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.766485][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.768131][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.770057][ T8722] Call trace:
[  703.770683][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.771560][ T8722]  show_stack+0x2c/0x3c
[  703.772336][ T8722]  __dump_stack+0x30/0x40
[  703.773164][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.774043][ T8722]  dump_stack+0x1c/0x5c
[  703.774824][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.775775][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.776778][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.777718][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  703.778565][ T8722]  f2fs_rmdir+0x48/0x7c
[  703.779332][ T8722]  vfs_rmdir+0x304/0x438
[  703.780124][ T8722]  do_rmdir+0x244/0x524
[  703.780933][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  703.781918][ T8722]  invoke_syscall+0x98/0x2b4
[  703.782814][ T8722]  el0_svc_common+0x138/0x258
[  703.783729][ T8722]  do_el0_svc+0x58/0x130
[  703.784558][ T8722]  el0_svc+0x58/0x128
[  703.785333][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.786321][ T8722]  el0t_64_sync+0x18c/0x190
[  703.787425][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.788672][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.790249][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.792054][ T8722] Call trace:
[  703.792651][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.793500][ T8722]  show_stack+0x2c/0x3c
[  703.794257][ T8722]  __dump_stack+0x30/0x40
[  703.795075][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.795944][ T8722]  dump_stack+0x1c/0x5c
[  703.796721][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.797710][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.798768][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.799758][ T8722]  f2fs_readdir+0x3bc/0xc10
[  703.800612][ T8722]  iterate_dir+0x1f0/0x4cc
[  703.801446][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  703.802493][ T8722]  invoke_syscall+0x98/0x2b4
[  703.803367][ T8722]  el0_svc_common+0x138/0x258
[  703.804274][ T8722]  do_el0_svc+0x58/0x130
[  703.805092][ T8722]  el0_svc+0x58/0x128
[  703.805870][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.806834][ T8722]  el0t_64_sync+0x18c/0x190
[  703.810761][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.811940][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.813650][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.815517][ T8722] Call trace:
[  703.816147][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.817063][ T8722]  show_stack+0x2c/0x3c
[  703.817868][ T8722]  __dump_stack+0x30/0x40
[  703.818742][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.819664][ T8722]  dump_stack+0x1c/0x5c
[  703.820492][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.821538][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.822667][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.823725][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  703.824681][ T8722]  f2fs_rmdir+0x48/0x7c
[  703.825548][ T8722]  vfs_rmdir+0x304/0x438
[  703.826448][ T8722]  do_rmdir+0x244/0x524
[  703.827341][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  703.828376][ T8722]  invoke_syscall+0x98/0x2b4
[  703.829306][ T8722]  el0_svc_common+0x138/0x258
[  703.830261][ T8722]  do_el0_svc+0x58/0x130
[  703.831133][ T8722]  el0_svc+0x58/0x128
[  703.831963][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.832994][ T8722]  el0t_64_sync+0x18c/0x190
[  703.836406][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.837557][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.839215][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.841084][ T8722] Call trace:
[  703.841708][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.842563][ T8722]  show_stack+0x2c/0x3c
[  703.843312][ T8722]  __dump_stack+0x30/0x40
[  703.844114][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.844944][ T8722]  dump_stack+0x1c/0x5c
[  703.845746][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.846731][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.847778][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.848787][ T8722]  f2fs_readdir+0x3bc/0xc10
[  703.849677][ T8722]  iterate_dir+0x1f0/0x4cc
[  703.850539][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  703.851640][ T8722]  invoke_syscall+0x98/0x2b4
[  703.852575][ T8722]  el0_svc_common+0x138/0x258
[  703.853523][ T8722]  do_el0_svc+0x58/0x130
[  703.854390][ T8722]  el0_svc+0x58/0x128
[  703.855195][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.856231][ T8722]  el0t_64_sync+0x18c/0x190
[  703.859486][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.860573][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.862224][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.864075][ T8722] Call trace:
[  703.864693][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.865571][ T8722]  show_stack+0x2c/0x3c
[  703.866350][ T8722]  __dump_stack+0x30/0x40
[  703.867147][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.868058][ T8722]  dump_stack+0x1c/0x5c
[  703.868878][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.869931][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.871034][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.872064][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  703.873006][ T8722]  f2fs_rmdir+0x48/0x7c
[  703.873865][ T8722]  vfs_rmdir+0x304/0x438
[  703.874745][ T8722]  do_rmdir+0x244/0x524
[  703.875589][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  703.876622][ T8722]  invoke_syscall+0x98/0x2b4
[  703.877574][ T8722]  el0_svc_common+0x138/0x258
[  703.878536][ T8722]  do_el0_svc+0x58/0x130
[  703.879408][ T8722]  el0_svc+0x58/0x128
[  703.880204][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.881219][ T8722]  el0t_64_sync+0x18c/0x190
[  703.884360][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.885407][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.886999][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.888826][ T8722] Call trace:
[  703.889465][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.890397][ T8722]  show_stack+0x2c/0x3c
[  703.891236][ T8722]  __dump_stack+0x30/0x40
[  703.892125][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.893084][ T8722]  dump_stack+0x1c/0x5c
[  703.893929][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.895005][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.896100][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.897121][ T8722]  f2fs_readdir+0x3bc/0xc10
[  703.898041][ T8722]  iterate_dir+0x1f0/0x4cc
[  703.898931][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  703.900033][ T8722]  invoke_syscall+0x98/0x2b4
[  703.900963][ T8722]  el0_svc_common+0x138/0x258
[  703.901902][ T8722]  do_el0_svc+0x58/0x130
[  703.902763][ T8722]  el0_svc+0x58/0x128
[  703.903576][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.904587][ T8722]  el0t_64_sync+0x18c/0x190
[  703.907721][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.908864][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.910409][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.912186][ T8722] Call trace:
[  703.912760][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.913611][ T8722]  show_stack+0x2c/0x3c
[  703.914369][ T8722]  __dump_stack+0x30/0x40
[  703.915144][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.915972][ T8722]  dump_stack+0x1c/0x5c
[  703.916698][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.917687][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.918769][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.919754][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  703.920656][ T8722]  f2fs_rmdir+0x48/0x7c
[  703.921480][ T8722]  vfs_rmdir+0x304/0x438
[  703.922316][ T8722]  do_rmdir+0x244/0x524
[  703.923062][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  703.924042][ T8722]  invoke_syscall+0x98/0x2b4
[  703.924955][ T8722]  el0_svc_common+0x138/0x258
[  703.925878][ T8722]  do_el0_svc+0x58/0x130
[  703.926721][ T8722]  el0_svc+0x58/0x128
[  703.927520][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.928511][ T8722]  el0t_64_sync+0x18c/0x190
[  703.934116][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.935489][ T8722] CPU: 0 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.937169][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.939042][ T8722] Call trace:
[  703.939643][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.940546][ T8722]  show_stack+0x2c/0x3c
[  703.941369][ T8722]  __dump_stack+0x30/0x40
[  703.942196][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.943071][ T8722]  dump_stack+0x1c/0x5c
[  703.943880][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.944893][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.945955][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.946922][ T8722]  f2fs_readdir+0x3bc/0xc10
[  703.947777][ T8722]  iterate_dir+0x1f0/0x4cc
[  703.948640][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  703.949663][ T8722]  invoke_syscall+0x98/0x2b4
[  703.950532][ T8722]  el0_svc_common+0x138/0x258
[  703.951425][ T8722]  do_el0_svc+0x58/0x130
[  703.952219][ T8722]  el0_svc+0x58/0x128
[  703.952975][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.953933][ T8722]  el0t_64_sync+0x18c/0x190
[  703.957626][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.958795][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.960508][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.962404][ T8722] Call trace:
[  703.962996][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.963857][ T8722]  show_stack+0x2c/0x3c
[  703.964657][ T8722]  __dump_stack+0x30/0x40
[  703.965477][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.966344][ T8722]  dump_stack+0x1c/0x5c
[  703.967124][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.968158][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.969255][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.970284][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  703.971247][ T8722]  f2fs_rmdir+0x48/0x7c
[  703.972107][ T8722]  vfs_rmdir+0x304/0x438
[  703.972961][ T8722]  do_rmdir+0x244/0x524
[  703.973822][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  703.974842][ T8722]  invoke_syscall+0x98/0x2b4
[  703.975768][ T8722]  el0_svc_common+0x138/0x258
[  703.976757][ T8722]  do_el0_svc+0x58/0x130
[  703.977639][ T8722]  el0_svc+0x58/0x128
[  703.978477][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  703.979503][ T8722]  el0t_64_sync+0x18c/0x190
[  703.983059][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  703.984160][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  703.985857][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  703.987780][ T8722] Call trace:
[  703.988441][ T8722]  dump_backtrace+0x1c0/0x1ec
[  703.989388][ T8722]  show_stack+0x2c/0x3c
[  703.990235][ T8722]  __dump_stack+0x30/0x40
[  703.991115][ T8722]  dump_stack_lvl+0xf4/0x15c
[  703.992026][ T8722]  dump_stack+0x1c/0x5c
[  703.992870][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  703.993967][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  703.995067][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  703.996149][ T8722]  f2fs_readdir+0x3bc/0xc10
[  703.997088][ T8722]  iterate_dir+0x1f0/0x4cc
[  703.997971][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  703.999070][ T8722]  invoke_syscall+0x98/0x2b4
[  704.000017][ T8722]  el0_svc_common+0x138/0x258
[  704.000976][ T8722]  do_el0_svc+0x58/0x130
[  704.001857][ T8722]  el0_svc+0x58/0x128
[  704.002682][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  704.003717][ T8722]  el0t_64_sync+0x18c/0x190
[  704.006720][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  704.009264][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  704.010930][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  704.012803][ T8722] Call trace:
[  704.013438][ T8722]  dump_backtrace+0x1c0/0x1ec
[  704.014302][ T8722]  show_stack+0x2c/0x3c
[  704.015119][ T8722]  __dump_stack+0x30/0x40
[  704.015914][ T8722]  dump_stack_lvl+0xf4/0x15c
[  704.016732][ T8722]  dump_stack+0x1c/0x5c
[  704.017494][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  704.018571][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  704.019678][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  704.020711][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  704.021667][ T8722]  f2fs_rmdir+0x48/0x7c
[  704.022503][ T8722]  vfs_rmdir+0x304/0x438
[  704.023368][ T8722]  do_rmdir+0x244/0x524
[  704.024195][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  704.025215][ T8722]  invoke_syscall+0x98/0x2b4
[  704.026150][ T8722]  el0_svc_common+0x138/0x258
[  704.027057][ T8722]  do_el0_svc+0x58/0x130
[  704.027914][ T8722]  el0_svc+0x58/0x128
[  704.028729][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  704.029746][ T8722]  el0t_64_sync+0x18c/0x190
[  704.033145][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  704.034229][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  704.035820][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  704.037733][ T8722] Call trace:
[  704.038378][ T8722]  dump_backtrace+0x1c0/0x1ec
[  704.039298][ T8722]  show_stack+0x2c/0x3c
[  704.040127][ T8722]  __dump_stack+0x30/0x40
[  704.040995][ T8722]  dump_stack_lvl+0xf4/0x15c
[  704.041911][ T8722]  dump_stack+0x1c/0x5c
[  704.042747][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  704.043845][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  704.044979][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  704.046037][ T8722]  f2fs_readdir+0x3bc/0xc10
[  704.046954][ T8722]  iterate_dir+0x1f0/0x4cc
[  704.047872][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  704.048955][ T8722]  invoke_syscall+0x98/0x2b4
[  704.049889][ T8722]  el0_svc_common+0x138/0x258
[  704.050844][ T8722]  do_el0_svc+0x58/0x130
[  704.051705][ T8722]  el0_svc+0x58/0x128
[  704.052520][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  704.053503][ T8722]  el0t_64_sync+0x18c/0x190
[  704.057143][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  704.058339][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  704.059946][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  704.061819][ T8722] Call trace:
[  704.062426][ T8722]  dump_backtrace+0x1c0/0x1ec
[  704.063273][ T8722]  show_stack+0x2c/0x3c
[  704.064049][ T8722]  __dump_stack+0x30/0x40
[  704.064881][ T8722]  dump_stack_lvl+0xf4/0x15c
[  704.065727][ T8722]  dump_stack+0x1c/0x5c
[  704.066490][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  704.067506][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  704.068628][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  704.069643][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  704.070601][ T8722]  f2fs_rmdir+0x48/0x7c
[  704.071454][ T8722]  vfs_rmdir+0x304/0x438
[  704.072319][ T8722]  do_rmdir+0x244/0x524
[  704.073158][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  704.074184][ T8722]  invoke_syscall+0x98/0x2b4
[  704.075118][ T8722]  el0_svc_common+0x138/0x258
[  704.076079][ T8722]  do_el0_svc+0x58/0x130
[  704.076935][ T8722]  el0_svc+0x58/0x128
[  704.077752][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  704.078762][ T8722]  el0t_64_sync+0x18c/0x190
[  704.081795][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  704.082865][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  704.084520][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  704.086354][ T8722] Call trace:
[  704.086971][ T8722]  dump_backtrace+0x1c0/0x1ec
[  704.087859][ T8722]  show_stack+0x2c/0x3c
[  704.088703][ T8722]  __dump_stack+0x30/0x40
[  704.089580][ T8722]  dump_stack_lvl+0xf4/0x15c
[  704.090521][ T8722]  dump_stack+0x1c/0x5c
[  704.091375][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  704.092438][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  704.093519][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  704.094571][ T8722]  f2fs_readdir+0x3bc/0xc10
[  704.095493][ T8722]  iterate_dir+0x1f0/0x4cc
[  704.096393][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  704.097482][ T8722]  invoke_syscall+0x98/0x2b4
[  704.098417][ T8722]  el0_svc_common+0x138/0x258
[  704.099351][ T8722]  do_el0_svc+0x58/0x130
[  704.100225][ T8722]  el0_svc+0x58/0x128
[  704.101048][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  704.102073][ T8722]  el0t_64_sync+0x18c/0x190
[  704.104999][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  704.106116][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  704.107876][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  704.109936][ T8722] Call trace:
[  704.110610][ T8722]  dump_backtrace+0x1c0/0x1ec
[  704.111585][ T8722]  show_stack+0x2c/0x3c
[  704.112420][ T8722]  __dump_stack+0x30/0x40
[  704.113333][ T8722]  dump_stack_lvl+0xf4/0x15c
[  704.114285][ T8722]  dump_stack+0x1c/0x5c
[  704.115125][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  704.116191][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  704.117309][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  704.118330][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  704.119252][ T8722]  f2fs_rmdir+0x48/0x7c
[  704.120099][ T8722]  vfs_rmdir+0x304/0x438
[  704.120985][ T8722]  do_rmdir+0x244/0x524
[  704.121850][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  704.122888][ T8722]  invoke_syscall+0x98/0x2b4
[  704.123821][ T8722]  el0_svc_common+0x138/0x258
[  704.124772][ T8722]  do_el0_svc+0x58/0x130
[  704.125638][ T8722]  el0_svc+0x58/0x128
[  704.126465][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  704.127510][ T8722]  el0t_64_sync+0x18c/0x190
[  704.132185][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  704.133289][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  704.134915][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  704.136807][ T8722] Call trace:
[  704.137395][ T8722]  dump_backtrace+0x1c0/0x1ec
[  704.138340][ T8722]  show_stack+0x2c/0x3c
[  704.139201][ T8722]  __dump_stack+0x30/0x40
[  704.140086][ T8722]  dump_stack_lvl+0xf4/0x15c
[  704.141017][ T8722]  dump_stack+0x1c/0x5c
[  704.141865][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  704.142954][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  704.144070][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  704.145139][ T8722]  f2fs_readdir+0x3bc/0xc10
[  704.146049][ T8722]  iterate_dir+0x1f0/0x4cc
[  704.146941][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  704.148047][ T8722]  invoke_syscall+0x98/0x2b4
[  704.148970][ T8722]  el0_svc_common+0x138/0x258
[  704.149918][ T8722]  do_el0_svc+0x58/0x130
[  704.150784][ T8722]  el0_svc+0x58/0x128
[  704.151594][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  704.152620][ T8722]  el0t_64_sync+0x18c/0x190
[  704.155664][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  704.156732][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  704.158545][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  704.160589][ T8722] Call trace:
[  704.161261][ T8722]  dump_backtrace+0x1c0/0x1ec
[  704.162227][ T8722]  show_stack+0x2c/0x3c
[  704.163087][ T8722]  __dump_stack+0x30/0x40
[  704.164000][ T8722]  dump_stack_lvl+0xf4/0x15c
[  704.164923][ T8722]  dump_stack+0x1c/0x5c
[  704.165769][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  704.166835][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  704.167919][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  704.168970][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  704.169928][ T8722]  f2fs_rmdir+0x48/0x7c
[  704.170764][ T8722]  vfs_rmdir+0x304/0x438
[  704.171634][ T8722]  do_rmdir+0x244/0x524
[  704.172489][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  704.173500][ T8722]  invoke_syscall+0x98/0x2b4
[  704.174438][ T8722]  el0_svc_common+0x138/0x258
[  704.175393][ T8722]  do_el0_svc+0x58/0x130
[  704.176273][ T8722]  el0_svc+0x58/0x128
[  704.177071][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  704.178061][ T8722]  el0t_64_sync+0x18c/0x190
[  704.181807][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  704.182881][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  704.184529][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  704.186368][ T8722] Call trace:
[  704.186984][ T8722]  dump_backtrace+0x1c0/0x1ec
[  704.187902][ T8722]  show_stack+0x2c/0x3c
[  704.188762][ T8722]  __dump_stack+0x30/0x40
[  704.189659][ T8722]  dump_stack_lvl+0xf4/0x15c
[  704.190611][ T8722]  dump_stack+0x1c/0x5c
[  704.191464][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  704.192535][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  704.193630][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  704.194686][ T8722]  f2fs_readdir+0x3bc/0xc10
[  704.195584][ T8722]  iterate_dir+0x1f0/0x4cc
[  704.196438][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  704.197484][ T8722]  invoke_syscall+0x98/0x2b4
[  704.198399][ T8722]  el0_svc_common+0x138/0x258
[  704.199314][ T8722]  do_el0_svc+0x58/0x130
[  704.200173][ T8722]  el0_svc+0x58/0x128
[  704.201005][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  704.202031][ T8722]  el0t_64_sync+0x18c/0x190
[  704.204996][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  704.206046][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  704.207765][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  704.209829][ T8722] Call trace:
[  704.210495][ T8722]  dump_backtrace+0x1c0/0x1ec
[  704.211452][ T8722]  show_stack+0x2c/0x3c
[  704.212307][ T8722]  __dump_stack+0x30/0x40
[  704.213207][ T8722]  dump_stack_lvl+0xf4/0x15c
[  704.214147][ T8722]  dump_stack+0x1c/0x5c
[  704.215009][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  704.216092][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  704.217212][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  704.218300][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  704.219294][ T8722]  f2fs_rmdir+0x48/0x7c
[  704.220180][ T8722]  vfs_rmdir+0x304/0x438
[  704.221089][ T8722]  do_rmdir+0x244/0x524
[  704.221929][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  704.222936][ T8722]  invoke_syscall+0x98/0x2b4
[  704.223888][ T8722]  el0_svc_common+0x138/0x258
[  704.224860][ T8722]  do_el0_svc+0x58/0x130
[  704.225687][ T8722]  el0_svc+0x58/0x128
[  704.226486][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  704.227513][ T8722]  el0t_64_sync+0x18c/0x190
[  704.230738][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  704.231826][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  704.233526][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  704.235415][ T8722] Call trace:
[  704.236017][ T8722]  dump_backtrace+0x1c0/0x1ec
[  704.236939][ T8722]  show_stack+0x2c/0x3c
[  704.237737][ T8722]  __dump_stack+0x30/0x40
[  704.238638][ T8722]  dump_stack_lvl+0xf4/0x15c
[  704.239604][ T8722]  dump_stack+0x1c/0x5c
[  704.240451][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  704.241523][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  704.242627][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  704.243662][ T8722]  f2fs_readdir+0x3bc/0xc10
[  704.244575][ T8722]  iterate_dir+0x1f0/0x4cc
[  704.245452][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  704.246553][ T8722]  invoke_syscall+0x98/0x2b4
[  704.247504][ T8722]  el0_svc_common+0x138/0x258
[  704.248437][ T8722]  do_el0_svc+0x58/0x130
[  704.249275][ T8722]  el0_svc+0x58/0x128
[  704.250065][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  704.251061][ T8722]  el0t_64_sync+0x18c/0x190
[  704.255370][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  704.256483][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  704.258214][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  704.260259][ T8722] Call trace:
[  704.260925][ T8722]  dump_backtrace+0x1c0/0x1ec
[  704.261876][ T8722]  show_stack+0x2c/0x3c
[  704.262720][ T8722]  __dump_stack+0x30/0x40
[  704.263630][ T8722]  dump_stack_lvl+0xf4/0x15c
[  704.264581][ T8722]  dump_stack+0x1c/0x5c
[  704.265437][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  704.266525][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  704.267635][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  704.268691][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  704.269645][ T8722]  f2fs_rmdir+0x48/0x7c
[  704.270492][ T8722]  vfs_rmdir+0x304/0x438
[  704.271355][ T8722]  do_rmdir+0x244/0x524
[  704.272212][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  704.273183][ T8722]  invoke_syscall+0x98/0x2b4
[  704.274079][ T8722]  el0_svc_common+0x138/0x258
[  704.274996][ T8722]  do_el0_svc+0x58/0x130
[  704.275816][ T8722]  el0_svc+0x58/0x128
[  704.276589][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  704.277585][ T8722]  el0t_64_sync+0x18c/0x190
[  704.280845][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  704.281988][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  704.283655][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  704.285475][ T8722] Call trace:
[  704.286072][ T8722]  dump_backtrace+0x1c0/0x1ec
[  704.286942][ T8722]  show_stack+0x2c/0x3c
[  704.287700][ T8722]  __dump_stack+0x30/0x40
[  704.288575][ T8722]  dump_stack_lvl+0xf4/0x15c
[  704.289524][ T8722]  dump_stack+0x1c/0x5c
[  704.290356][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  704.291459][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  704.292581][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  704.293630][ T8722]  f2fs_readdir+0x3bc/0xc10
[  704.294537][ T8722]  iterate_dir+0x1f0/0x4cc
[  704.295455][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  704.296539][ T8722]  invoke_syscall+0x98/0x2b4
[  704.297478][ T8722]  el0_svc_common+0x138/0x258
[  704.298447][ T8722]  do_el0_svc+0x58/0x130
[  704.299275][ T8722]  el0_svc+0x58/0x128
[  704.300061][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  704.301091][ T8722]  el0t_64_sync+0x18c/0x190
[  704.304424][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  704.305513][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  704.307146][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  704.309156][ T8722] Call trace:
[  704.309820][ T8722]  dump_backtrace+0x1c0/0x1ec
[  704.310771][ T8722]  show_stack+0x2c/0x3c
[  704.311611][ T8722]  __dump_stack+0x30/0x40
[  704.312488][ T8722]  dump_stack_lvl+0xf4/0x15c
[  704.313417][ T8722]  dump_stack+0x1c/0x5c
[  704.314260][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  704.315346][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  704.316460][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  704.317490][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  704.318420][ T8722]  f2fs_rmdir+0x48/0x7c
[  704.319268][ T8722]  vfs_rmdir+0x304/0x438
[  704.320143][ T8722]  do_rmdir+0x244/0x524
[  704.320985][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  704.322000][ T8722]  invoke_syscall+0x98/0x2b4
[  704.322916][ T8722]  el0_svc_common+0x138/0x258
[  704.323857][ T8722]  do_el0_svc+0x58/0x130
[  704.324692][ T8722]  el0_svc+0x58/0x128
[  704.325504][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  704.326503][ T8722]  el0t_64_sync+0x18c/0x190
[  704.329602][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  704.330702][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  704.332291][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  704.334063][ T8722] Call trace:
[  704.334667][ T8722]  dump_backtrace+0x1c0/0x1ec
[  704.335582][ T8722]  show_stack+0x2c/0x3c
[  704.336347][ T8722]  __dump_stack+0x30/0x40
[  704.337136][ T8722]  dump_stack_lvl+0xf4/0x15c
[  704.338048][ T8722]  dump_stack+0x1c/0x5c
[  704.338886][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  704.339969][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  704.341083][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  704.342124][ T8722]  f2fs_readdir+0x3bc/0xc10
[  704.343038][ T8722]  iterate_dir+0x1f0/0x4cc
[  704.343958][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  704.345055][ T8722]  invoke_syscall+0x98/0x2b4
[  704.345988][ T8722]  el0_svc_common+0x138/0x258
[  704.346932][ T8722]  do_el0_svc+0x58/0x130
[  704.347816][ T8722]  el0_svc+0x58/0x128
[  704.348642][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  704.349682][ T8722]  el0t_64_sync+0x18c/0x190
[  704.352602][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  704.353682][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  704.355326][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  704.357184][ T8722] Call trace:
[  704.357810][ T8722]  dump_backtrace+0x1c0/0x1ec
[  704.358788][ T8722]  show_stack+0x2c/0x3c
[  704.359627][ T8722]  __dump_stack+0x30/0x40
[  704.360492][ T8722]  dump_stack_lvl+0xf4/0x15c
[  704.361458][ T8722]  dump_stack+0x1c/0x5c
[  704.362314][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  704.363411][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  704.364512][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  704.365563][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  704.366523][ T8722]  f2fs_rmdir+0x48/0x7c
[  704.367359][ T8722]  vfs_rmdir+0x304/0x438
[  704.368279][ T8722]  do_rmdir+0x244/0x524
[  704.369125][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  704.370149][ T8722]  invoke_syscall+0x98/0x2b4
[  704.371110][ T8722]  el0_svc_common+0x138/0x258
[  704.372070][ T8722]  do_el0_svc+0x58/0x130
[  704.372927][ T8722]  el0_svc+0x58/0x128
[  704.373756][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  704.374783][ T8722]  el0t_64_sync+0x18c/0x190
[  704.379463][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  704.380524][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  704.382226][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  704.384092][ T8722] Call trace:
[  704.384713][ T8722]  dump_backtrace+0x1c0/0x1ec
[  704.385576][ T8722]  show_stack+0x2c/0x3c
[  704.386340][ T8722]  __dump_stack+0x30/0x40
[  704.387164][ T8722]  dump_stack_lvl+0xf4/0x15c
[  704.388086][ T8722]  dump_stack+0x1c/0x5c
[  704.388961][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  704.390067][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  704.391195][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  704.392241][ T8722]  f2fs_readdir+0x3bc/0xc10
[  704.393138][ T8722]  iterate_dir+0x1f0/0x4cc
[  704.394034][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  704.395133][ T8722]  invoke_syscall+0x98/0x2b4
[  704.396068][ T8722]  el0_svc_common+0x138/0x258
[  704.397031][ T8722]  do_el0_svc+0x58/0x130
[  704.397901][ T8722]  el0_svc+0x58/0x128
[  704.398716][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  704.399743][ T8722]  el0t_64_sync+0x18c/0x190
[  704.402687][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  704.403739][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  704.405395][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  704.407280][ T8722] Call trace:
[  704.407936][ T8722]  dump_backtrace+0x1c0/0x1ec
[  704.408903][ T8722]  show_stack+0x2c/0x3c
[  704.409770][ T8722]  __dump_stack+0x30/0x40
[  704.410666][ T8722]  dump_stack_lvl+0xf4/0x15c
[  704.411574][ T8722]  dump_stack+0x1c/0x5c
[  704.412403][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  704.413455][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  704.414580][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  704.415646][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  704.416614][ T8722]  f2fs_rmdir+0x48/0x7c
[  704.417441][ T8722]  vfs_rmdir+0x304/0x438
[  704.418316][ T8722]  do_rmdir+0x244/0x524
[  704.419172][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[  704.420205][ T8722]  invoke_syscall+0x98/0x2b4
[  704.421144][ T8722]  el0_svc_common+0x138/0x258
[  704.422101][ T8722]  do_el0_svc+0x58/0x130
[  704.422951][ T8722]  el0_svc+0x58/0x128
[  704.423750][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  704.424754][ T8722]  el0t_64_sync+0x18c/0x190
[  704.428131][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  704.429297][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  704.431006][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  704.432885][ T8722] Call trace:
[  704.433475][ T8722]  dump_backtrace+0x1c0/0x1ec
[  704.434321][ T8722]  show_stack+0x2c/0x3c
[  704.435095][ T8722]  __dump_stack+0x30/0x40
[  704.435902][ T8722]  dump_stack_lvl+0xf4/0x15c
[  704.436765][ T8722]  dump_stack+0x1c/0x5c
[  704.437532][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  704.438613][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  704.439730][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  704.440781][ T8722]  f2fs_readdir+0x3bc/0xc10
[  704.441708][ T8722]  iterate_dir+0x1f0/0x4cc
[  704.442615][ T8722]  __arm64_sys_getdents64+0x11c/0x320
[  704.443722][ T8722]  invoke_syscall+0x98/0x2b4
[  704.444670][ T8722]  el0_svc_common+0x138/0x258
[  704.445632][ T8722]  do_el0_svc+0x58/0x130
[  704.446509][ T8722]  el0_svc+0x58/0x128
[  704.447338][ T8722]  el0t_64_sync_handler+0x84/0xf0
[  704.448377][ T8722]  el0t_64_sync+0x18c/0x190
[  704.450154][ T8722] F2FS-fs (loop1): access invalid blkaddr:36
[  704.451230][ T8722] CPU: 1 PID: 8722 Comm: syz-executor Tainted: G    B              syzkaller #0
[  704.452787][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  704.454543][ T8722] Call trace:
[  704.455128][ T8722]  dump_backtrace+0x1c0/0x1ec
[  704.455958][ T8722]  show_stack+0x2c/0x3c
[  704.456671][ T8722]  __dump_stack+0x30/0x40
[  704.457432][ T8722]  dump_stack_lvl+0xf4/0x15c
[  704.458299][ T8722]  dump_stack+0x1c/0x5c
[  704.459147][ T8722]  f2fs_is_valid_blkaddr+0x9e4/0xf44
[  704.460224][ T8722]  f2fs_get_read_data_page+0x24c/0x60c
[  704.461342][ T8722]  f2fs_find_data_page+0x1c4/0x520
[  704.462430][ T8722]  f2fs_empty_dir+0x124/0x3d8
[  704.463393][ T8722]  f2fs_rmdir+0x48/0x7c
[  704.464217][ T8722]  vfs_rmdir+0x304/0x438
[  704.465049][ T8722]  do_rmdir+0x244/0x524
[  704.465943][ T8722]  __arm64_sys_unlinkat+0xcc/0xfc
[