last executing test programs:

9m19.265976674s ago: executing program 2 (id=1777):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
ppoll(&(0x7f00000002c0)=[{r0, 0x1000}], 0x1, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0xe)
r1 = syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0xfefffffe, 0x800, 0x3, 0x800000c5}, &(0x7f0000000580)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0, &(0x7f0000000f40)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}})
io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000000))

9m18.291919425s ago: executing program 2 (id=1787):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x40, 0x20, 0x1, 0x70bd27, 0x80, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x1}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x4}, @FRA_SRC={0x14, 0x2, @loopback}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040804}, 0x48040)

9m18.291847223s ago: executing program 2 (id=1788):
readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=""/163, 0xa3)

9m18.284657855s ago: executing program 2 (id=1789):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0)
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}})
io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)

9m18.214584417s ago: executing program 2 (id=1791):
syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000040, &(0x7f0000000880), 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66")
r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x4)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f00000000c0)='\f', 0x1, 0x8000c61)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
ioctl$HIDIOCSUSAGE(r1, 0x4018480c, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)
r3 = openat(0xffffffffffffff9c, 0x0, 0x101041, 0xf0)
pwrite64(r3, &(0x7f0000000140), 0x0, 0xe7c)
openat(0xffffffffffffff9c, 0x0, 0x42042, 0x1cb)

9m17.856831677s ago: executing program 2 (id=1795):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$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")
getpid()
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x0, 0x0, 0x0, 0x2}, 0x94)
syz_usb_connect(0x3, 0x2d, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@errors_remount}, {@resgid}, {@nolazytime}]}, 0x1, 0x5c5, &(0x7f00000000c0)="$eJzs3c9rHFUcAPDvbDZp01STiqC1BwMFW1DTJq0oKthivXnwR8GTYMyPUrptQxPB1oot1P9A/wDBmxfxWESKevHqTegfIMUiNSC9rcxkJ92ku8mm3d2pmc8HNpmZt8n3zS7ffTNv35sJoLSS9EclYm9ELCQRo01l1WgUjq887587l2eW71yeSaJef//vZHXbmv8VESONP94ZEb//nMQTA/fHXbx46cx0rTZ3obF+aOnswqHFi5dePH12+tTcqblzU5MvT7509MjU0cNd2c/dEfHrxInqtfk3930/8+2eL3787noSx7LtsW4/umU8xldfk2bp6/pKt4MVZKCxP81vcVJd96TX+lwpOpa/f4MR8VSMxkDce/NG48t3C60c0FP1JKIOlFQi/6Gk8uOA9Pw3fxR7RAL0y+3jKx0Aed/e8mr+V2M8+70z6xvYtZxEc7dOEhHd6JlLYyw8l4ymj+hRPxzQ2pWrEfF0q/Y/yXJzLOvFT/O/sib/KxHxTuN39d+I9x4w/vi6dfkP/fMw+f9Rnv8R8fEDxpf/AAAAAAAA0D03jkfEC+u//7ubfbOXj/+JFuN/RiLiWBfib/79X+VWF8IALdw+HvF6RCzfN/6vkj9lbKCx9lg2HmAwmT89OHc4Ih6PiIMxuGP+dG1ucoMY4/t+G2xb1jT+L32k8fOxgI163KruWPs3s9NL0w+zz8CK21cjnqmm+Z/E2vxPVtv/pEX7n34eLHQYo37ijV/alW2e/0Cv1L+JONCy/b935Ypk4+tzHErb/8bPljE++/D6D+3iy38oTtr+79o4/8eS7Cohjev1LG49xud/3XyI/G99/D+UnMwuOTPU2Pbp9NLShcmIoeTt+7dPbb3OsB3l+ZDnS5r/B/e3Pv/f6Ph/OCKudBjz5E9vXWtXpv2H4qT5P7tp+990vb4HWNj/wdd314Vd/ejorP0/mrXpBxtb9P/BxjpN0KLrCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/R5W4WV+xck/v3VGpTExEjETEk7GrUju/uPT8/PlPzs2mZdn9/yv5nX5HV9aT/P7/Y03rU+vWj0TEnoj4amA4W5+YOV+bLXrnAQAAAAAAAAAAAAAAAAAA4BExks35TyoTsXb+f+rPgaJrB/RctdXGof7XA+i/lvkPlIL8h/LaYv4P9qoeQP9p/6G85D+Ul/yH8pL/UF5p/u/cwvONC4LtQ/sPAAAAAADbyp5nb/yRRMSVV4ezRzTN/DXOH7a3StEVAApjKA+U15qhPzuKqwfQfx2c4yf9qAdQnM2SvP30AB8PAAAAAAAAAAAAANAvB/aa/w9ltZX5/8M9rAfQf+b/Q3m59QeUl3N8wPx/AAAAAAAAAAAAAHj0LV68dGa6Vpu7UMRCfr/RYqJb2GBh2JvSy4VoUzQU0a6o3wsFfzABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACr/gsAAP//ssH65w==")
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x33ed0000)
r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
getdents64(r0, &(0x7f0000000fc0)=""/214, 0xd6)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)

9m17.804952633s ago: executing program 32 (id=1795):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$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")
getpid()
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x0, 0x0, 0x0, 0x2}, 0x94)
syz_usb_connect(0x3, 0x2d, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@errors_remount}, {@resgid}, {@nolazytime}]}, 0x1, 0x5c5, &(0x7f00000000c0)="$eJzs3c9rHFUcAPDvbDZp01STiqC1BwMFW1DTJq0oKthivXnwR8GTYMyPUrptQxPB1oot1P9A/wDBmxfxWESKevHqTegfIMUiNSC9rcxkJ92ku8mm3d2pmc8HNpmZt8n3zS7ffTNv35sJoLSS9EclYm9ELCQRo01l1WgUjq887587l2eW71yeSaJef//vZHXbmv8VESONP94ZEb//nMQTA/fHXbx46cx0rTZ3obF+aOnswqHFi5dePH12+tTcqblzU5MvT7509MjU0cNd2c/dEfHrxInqtfk3930/8+2eL3787noSx7LtsW4/umU8xldfk2bp6/pKt4MVZKCxP81vcVJd96TX+lwpOpa/f4MR8VSMxkDce/NG48t3C60c0FP1JKIOlFQi/6Gk8uOA9Pw3fxR7RAL0y+3jKx0Aed/e8mr+V2M8+70z6xvYtZxEc7dOEhHd6JlLYyw8l4ymj+hRPxzQ2pWrEfF0q/Y/yXJzLOvFT/O/sib/KxHxTuN39d+I9x4w/vi6dfkP/fMw+f9Rnv8R8fEDxpf/AAAAAAAA0D03jkfEC+u//7ubfbOXj/+JFuN/RiLiWBfib/79X+VWF8IALdw+HvF6RCzfN/6vkj9lbKCx9lg2HmAwmT89OHc4Ih6PiIMxuGP+dG1ucoMY4/t+G2xb1jT+L32k8fOxgI163KruWPs3s9NL0w+zz8CK21cjnqmm+Z/E2vxPVtv/pEX7n34eLHQYo37ijV/alW2e/0Cv1L+JONCy/b935Ypk4+tzHErb/8bPljE++/D6D+3iy38oTtr+79o4/8eS7Cohjev1LG49xud/3XyI/G99/D+UnMwuOTPU2Pbp9NLShcmIoeTt+7dPbb3OsB3l+ZDnS5r/B/e3Pv/f6Ph/OCKudBjz5E9vXWtXpv2H4qT5P7tp+990vb4HWNj/wdd314Vd/ejorP0/mrXpBxtb9P/BxjpN0KLrCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/R5W4WV+xck/v3VGpTExEjETEk7GrUju/uPT8/PlPzs2mZdn9/yv5nX5HV9aT/P7/Y03rU+vWj0TEnoj4amA4W5+YOV+bLXrnAQAAAAAAAAAAAAAAAAAA4BExks35TyoTsXb+f+rPgaJrB/RctdXGof7XA+i/lvkPlIL8h/LaYv4P9qoeQP9p/6G85D+Ul/yH8pL/UF5p/u/cwvONC4LtQ/sPAAAAAADbyp5nb/yRRMSVV4ezRzTN/DXOH7a3StEVAApjKA+U15qhPzuKqwfQfx2c4yf9qAdQnM2SvP30AB8PAAAAAAAAAAAAANAvB/aa/w9ltZX5/8M9rAfQf+b/Q3m59QeUl3N8wPx/AAAAAAAAAAAAAHj0LV68dGa6Vpu7UMRCfr/RYqJb2GBh2JvSy4VoUzQU0a6o3wsFfzABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACr/gsAAP//ssH65w==")
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x33ed0000)
r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
getdents64(r0, &(0x7f0000000fc0)=""/214, 0xd6)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)

8m1.169033447s ago: executing program 0 (id=3118):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
mkdir(&(0x7f00000001c0)='./cgroup/../file0/file0/file0\x00', 0x0)

8m1.168485538s ago: executing program 0 (id=3120):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)="c3", 0x1)
setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, 0x0, 0x0)

8m1.038908795s ago: executing program 0 (id=3123):
mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000004, 0x31, 0xffffffffffffffff, 0xcee90000)
r0 = syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13f00}, &(0x7f0000000240), &(0x7f0000000480), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000002840)={&(0x7f0000003000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x3, 0x2}, 0x1)

8m0.950578388s ago: executing program 0 (id=3124):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000240)={[{@nodelalloc}, {@noblock_validity}, {@errors_remount}, {@data_err_ignore}, {@dioread_nolock}, {@dax_never}, {@noinit_itable}, {@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xafb}, 0x32}]}, 0x97, 0x4ef, &(0x7f0000000a40)="$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")
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
close(r0)
open(0x0, 0x8000, 0x50)
mount(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000200)='pstore\x00', 0x16, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x224)

8m0.713589754s ago: executing program 0 (id=3126):
r0 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x11, r0, 0x0)
ftruncate(r0, 0x8000000)

8m0.388901956s ago: executing program 0 (id=3132):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
sendmsg$netlink(r0, &(0x7f0000008b40)={0x0, 0x0, &(0x7f0000006240)=[{&(0x7f0000000300)={0x10, 0x2f, 0x100, 0x70bd2d, 0x25dfdbfd}, 0x10}], 0x1, &(0x7f0000008a40)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01, 0xee01}}}, @cred={{0x20}}], 0x40, 0x45804}, 0x4002)

8m0.337507236s ago: executing program 33 (id=3132):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpid()
sendmsg$netlink(r0, &(0x7f0000008b40)={0x0, 0x0, &(0x7f0000006240)=[{&(0x7f0000000300)={0x10, 0x2f, 0x100, 0x70bd2d, 0x25dfdbfd}, 0x10}], 0x1, &(0x7f0000008a40)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01, 0xee01}}}, @cred={{0x20}}], 0x40, 0x45804}, 0x4002)

6m58.332108843s ago: executing program 3 (id=4251):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000810}, 0x20004000)

6m58.331708129s ago: executing program 3 (id=4252):
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
socket(0x1, 0x5, 0x0)
setreuid(0x0, 0x0)
syz_open_dev$vim2m(0x0, 0x1, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x13f, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000240)={0x13, 0x10, 0x7, {0x0, r1, 0x1}}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)
write(r2, 0x0, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@private2, 0x0, r8})
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
r10 = socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
sendmsg$TCPDIAG_GETSOCK(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="680000001200050928bd7000ffdbdf2521090b004e224e26f004000000000104000006000000030000000200"/56, @ANYRES32=0x0, @ANYBLOB="00000100052000000600000004000000190001"], 0x68}, 0x1, 0x0, 0x0, 0x2000010}, 0x20000000)
setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000040)={@private2, r8}, 0x14)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010029bd7000fcdbdf2500000000", @ANYRES32=r8, @ANYBLOB="3a8d04005a1000000800040044"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xffffbffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x28}]}, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', r8, 0x1b, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
write(r2, &(0x7f0000000700)='\x00'/16, 0x10)
unlinkat(0xffffffffffffffff, 0x0, 0x200)

6m58.043437317s ago: executing program 3 (id=4253):
syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)

6m54.668567627s ago: executing program 3 (id=4306):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x2c754366, 0x10001, 0x9, 0x7, 0x9, "01000000000000c000000000800000e4018780"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x80000, 0x0, 0x2, 0x18, "00000000000700000000fffe00"})
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000280)=0x9)
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x1)

6m54.613619819s ago: executing program 3 (id=4308):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)="306663353a313232373a620afa6b6b", 0xf)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)

6m54.496832873s ago: executing program 3 (id=4310):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x43, 0x62f8, &(0x7f0000019f80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40000, 0x42)

6m38.236749575s ago: executing program 34 (id=4310):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x43, 0x62f8, &(0x7f0000019f80)="$eJzs3U9vHGcdB/Df7D//KW2jHqpSIeS2AVpK87eE0AJtD3DoBSSUK2rkulVECigJKK0i4ioXDrwEDiAkjoA4cuoL6IErN14AkRIkoKcOGvt5nPHizTpOd2ft5/OR3JnfPDPeZ/rd8e5mZvYJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACDe/N4PT1cR8dYv0oJjEZ+LfkQvYqWp1yJiZe1YXn8QEU/FVnM8GRHDpYgqNz4e8XJEfPxYxJ27N9abRWf22Y/v/vnvv//RI9//2x+HJ//zl2v9Vyetd/36r//915sH318AAAAoUV3XdZU+5j+dPt/3uu4UADAX+fW/TvJy9cLVmwvWH7VarVYfwrqt3tvNdhERm+1tmvcMTscDwCGzGZ903QU6JP+iDSLika47ASy0qusOMBN37t5Yr1K+Vfv1YG27PV8Lsiv/zWrn/o5J02nGrzGZ1/PrVvTjiQn9WZlTHxZJzr83lv9Sah+l6azzn5dJ+Y+2b30qTs6/P378jzk6+ff2zL9UOf/BA+Xflz8AAAAAACyw/O//xzo+/7v08LuyL/c7/7s2pz4AAAAAAAAAwGftYcf/21EZ/w8AAAAWVfNZvfHbx+4tm/RdbM3yC1XEo2PrA4VJN8usdt0PAAAAAAAAAAAAACjJYPsa3gtVxDAiHl1dreu6+Wkbrx/Uw25/2JW+/1Cyrv/IAwDAto8fG7uXv4pYjogL6bv+hqurq3W9vLJar9YrS/n97GhpuV5pfa7N02bZ0mgfb4gHo7r5Zcut7dqmfV6e1j7++5rHGtX9fXRsPjoMHAAiYvvV6I5XpCOmrh+Prt/lcDg4/o8exz/70fXzFAAAAJi9uq7rKn2d99PpnH+v604BAHORX//Hzwuo1Wq1Wq0+enVbvbeb7SIiNtvbNO8ZDMcPAIfMZnzSdRfokPyLNoiIp7ruBLDQqq47wEzcuXtjvUr5Vu3XgzS+e74WZFf+m9XWdnn7vabTjF9jMq/n163oxxMT+vPknPqwSHL+vfH839puH6X1Zp3/vEzKv9nPYx30p2s5//54/mOOTv69PfMvVc5/8ED59+UPAAAAAAALLP/7/7GFOv87OujuTHW/879rM3tUAAAAAAAAAJitO3dvrOf7XvP5/y/ssZ77P4+mnH8l/yLl/NP9/zsX3jw/tl6/NX/7jXv5/+vujfU/XPvn5/N0v/kv5ZkqPbOq9Iyo0iNVgzQ94I5NcGvYHzWPNKx6/UG65qcevhOX4nJsxKld6/bS8XCv/fSu9qanw632ur/dfmZX+2CnPW9/dlf7MF3pVK/k9hOxHj+Ny/H2VnvTtjRl/5entNdT2nP+fcd/kXL+g9ZPk/9qaq/Gpo3bH/b+77hvT/d6nNcvffFXp2a/O1Pdiv7OvrU1+/dsB/3Z+n/yyCh+fnXjyonrF69du3I60mTX0jORJp+xnP8w/eT8n39uuz3/3W8fr7c/HD1w/oviVgwm5v9ca77Z3xfm3Lcu5PxH6Sfn/3Zq3/v4P8z5Tz7+X+ygPwAAAAAAAAAAAAAAAHA/dV1v3SL6ekScS/f/dHVvJgAwX/n1v07y8nnV/YNu/6fd+9FV/9XqOdfVgvVnrvWn9awf782F2l/1ger/Llh/Fq5uq/f2WruIiI/a2zTvGX651y8DABbZpxHxj647QWfkX7D8fX/N9HjXnQHm6ur7H/z44uXLG1eudt0TAAAAAAAAAOCg8vifa63xn4/XdX1zbL1d47++EWsPO/7nIM/sDDA6YaDq/oPv0/30Ivq91nDjz8Sk8b+HO3P3G/97MOXxhlPaR1Pal6a0L09p3/NGj5ac/zOt8c6PR8TTY8OvlzD+6/iY9yXI+T/bej43+X9lbL12/vXvDnP+vV35n7z23s9OXn3/g5cuvXfx3Y13N35y9vTpU2fPnTt//vzJdy5d3ji1/d8OezxbOf889rXrQMuS88+Zy78sOf8vpVr+Zcn5fznV8i9Lzj+/35N/WXL++bOP/MuS838h1fIvS87/q6mWf1ly/i+mWv5lyfl/LdXyL0vO/6VUy78sOf8TqZZ/WXL+J1O9z/xXZt0v5iPnn89wOf7LkvPPVzbIvyw5/zOpln9Zcv5nUy3/suT8X061/MuS8/96quVflpz/uVTLvyw5/2+kWv5lyfmfT7X8y5Lz/2aq5V+WnP8rqZZ/WXL+r6Za/mXJ+X8r1fIvS87/26kefPSbV37QcZ+Yn5z/d1Lt+C9Lzv+1VMu/LPe+/9+MGTNm8kzXf5kAAAAAAAAAAAAAgHHzuJy4630EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgf+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCnt3GyPHXd8BfPaefHYgMRBSJ3XCxTFJSJzc2U78QJtiwmPDU0lICn3Adn1nc+DYxmdDoFHtKFAiYVRU0Ta8aAsItXlTEVW8oBWgvECtKlWC9gV9g6hQeRFVAQWkSrQCrtqZ//9/u3t7u3e+893szOcjJb/c7uzMf2b/M3e/u3x3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAVje/YeZTjSzLGo1G8cDWLHtJs26e2Jo/8tqNHR8AAACwer/I//3iNemBQ8t4Ucsy/3zTt786Pz8/n713+M9GPzc/n56YyLLRTVmWPxc9+4P3NVqXCZ7MxhtDLV8P9dn8cJ/nR/o8P9rn+bE+z2/q8/x4n+cXHYBFNmeNtLKd+X9uLQ5pdm02mj+3s8urnmxsGmoeu/TarJG/Zn70eDabncxmsqm25YtlG/nyX7+5ua23ZnFbQy3b2t6cIT95/FgcQyMc451t21pYZ/Sj12cTP/3J48f+5twL13erfQ9D2/qKcd6+oznOT4RHirE2sk3pmMRxDrWMc3uX92S4bZyN/HXN/+4c54vLHOfwwjDXVed7Pp4N5f/9nfw4jTSyLsdpe3jsZ7dkWXZxYdidyyzaVjaUbWl7ZGjh/RkvZmRzHc2p9PJsZEXz9OZlzNNmnd7ZPk87z4n4/t8cXjeyxBha36YfPTHW8r7/fP5y5mnU3OulzpXOObjW50pZ5mCcF9/Jd/qprnNwZ9j/x29deg52nTtd5mDa75Y5uKPfHBwaG87HnN6ERv6ahTm4u2354XxLjbw+f2vvOTh57tEzk3Mf+/hds48ePTFzYubU3t27p/bu23fgwIHJ47MnZ6aKf1/m0S6/LdlQOgd2hGMXz4HbOpZtnarzXxxbdP293PNwvMd5uLVj2bU+D0c6d66xPifk4jldnBvvaR708UtD2RLnWP7+3LH68zDtd8t5ONJyHnb9ntLlPBxZxnnYXObMHcv7mWWk5Z9uY1j6e8Hq5uDWljnY+fNI5xxc659HyjIHx8O8+N4dS38v2B7G+9Sulf48MrxoDqbdDdee5iPp5/3xA3npNi9vaD5x1Vh2fm7m7N2PHT137uzuLJR18YqWudI5X7e07FO2aL4OrXi+Hpq96akbujy+NRyr8bua/xpf8r1qLnPP3b3fq/y7W/fj2fboniyUNbbex7Pbd/Pm8RzLss9/64kHv/H459+w5PFs9pufmFz+3I/ndufcT31py/V3dInrb+z7f1lsL63qyeHRkeL8HU5HZ7Tterxn0ViG85Fm2YuTy7sej4Z/1vt6fG2P6/G2jmXX+no82rlz8Xrc6PfbjtXpfD/Hwzw5OdX7etxcZtuelV6PR3pej28JtRGO/2tCp5D6opa5s9S8TdsaGRkN+zUSt9A+T/e2LT8aerPmtp7Zc3nz9PZbinUNp71bsF7zdKJj2bWep+l3X0vN00a/375dns73czzMi2v39p6nzWWeu2f1v8fYHP+z5do51m8Ojg6PNcc8miZhfr3P5jfHOXh3diw7nZ3MpvNnx/L51Mi3teve5c3BsfDPel8rt/WYg7d3LLvWczB9H1tq7jVGFu/8Guh8P8fDvHj63t5zsLnMG/ev7c+ut4dH0jItP7t2/n5tqd953dBxmK7UXBkJ4/zW/t6/m20uc/LASvvM3sfpzvDIVV2OU+f5u9Q5NZ2tz3HaFsb5woGlj1NzPM1lPndwmfPpUJZlFz58f/773vD3lb8//92vtv3dpdvfdC58+P4fv/T4P61k/AAMvl8WZUvxva7lL1PL+fs/AAAAMBBi3z8UaqL/BwAAgMqIfX/8v8IT/T8AAABURuz7R0JNatL/b3vjC7O/vJClZP58EJ9Ph+GBYrmYcZ0KX0/ML2g+fv+XZ/7nHy8sb9tDWZb9/IE/7Lr8tgfiuAoTYZzPvqn98UW+eteytn3k4Qtpu6359S+E9cf9We406BbBncqy7OvXfCbfzsT7LuX1uQeO5PXBi0892VzmxYPF1/H1z7+iWP4vQ/j30PGjba9/PhyHH4Y69bbuxyO+7iuXXrN9/yML24uva+y4Ot/tp99frDd+lsZnnyyWj8d5qfF/49PPfKW5/GOv7j7+C0Pdx/9MWO+XQ/3fG4vlW9+D5tfxdZ8M44/bi6+7+0vf7Dr+Zz9VLH/mzcVyR0KN2789fL3zzS/Mth6vxxpH2/Yre0uxXNz+1Hf/JH8+ri+uv3P844cvtR2Pzvnx3L8X65nsWD4+HrcT/UPH9pvraZ2fcfvP/PGRtuPcb/vPPvj8jc31dm7/zo7lznz4jnz7C+tr/8Smv/rkZ7puL47n0N+dadufQ+8O53HY/tPvD/MxPP9/zxbr6/x0hSPvbr/+xOW/sPVC2/5Eb/1psf1nX3cir5vGN2+56iUvvfriq5rHLsu+s6lYX7/tn/jr023j/+J1xfGIz8eMfuf2lxK3f/aju06dnjs/O52O6uPX5J+d8/ZiPHG814Rra+fXh0+f+8DM2Ympiaksm6juR+hdti+F+uOiXOy99PyiK+gdD4f384a/+PqWW//t0/Hx/3hP8filtxXft257+Pkbxx7Jss+Gx7eG929l21/s6Zuvy8/vxnNhhPOLPy94Nbbv/O8Dy1ow7H/nzwVxvp955Qfy49B8Lv++Ec/rVY7/+9PFer4Wjut8+GTmHdctbK91+fjZCJceKs73VR+/cJmL7+vfhvf7HT8s1h/HFff3++HnmG9ua7/e3Rbm0dcuDHWuP/8Uj4vhepJdLJ6PS8XjfenF67oOL34OSXbx+vzrP03ruX5Fu7mUuY/NTZ6cPXX+sclzM3PnJuc+9vHDj54+f+rc4fyzPA9/sN/rF65PW/Lr0/TMvnuy/Gp1uihXxEhpxn/m4WPT+6dunZ45fvT88XMPn5k5e+LY3Nyxmem5W48ePz7z0X6vn52+b/eeg3v379l1Ynb6vgMHD+49uGv21OnmMIpB9bFv6kO7Tp09nL9k7r57Du6+9957pnY9enp65r79U1O7zvd7ff69aVfz1R/ZdXbm5NFzs4/O7Jqb/fjMfbsP7tu3p++nAT565vjcxOTZ86cmz8/NnJ0s9mXiXP5w83tfv9dTTXP/Wfw826lRfBBf9q4796XPZ2368hNLrqpYpOMDRF8In0XzLy87c2A5X8e+fzTUpCb9PwAAANRB7PvHQk30/wAAAFAZse/fFGqi/wcAAIDKiH3/eKhJTfr/yuX/t11Y1vbl/+X/W4+X/H/N8v8PlS3/X1wv5P/Xxmrz9yvJ/++X/5f/l/9vszH5//KMX/5f/p/Fypb/j33/5iyrZf8PAAAAdRD7/i2hJvp/AAAAqIzY918VaqL/BwAAgMqIff9LQk1q0v/L/8v/y//L/8v/d9++/P9g2vj8/9Cqti//L/+/0fn/rF75/4trOX75f/l/Fitb/j/2/S8NNalJ/w8AAAB1EPv+q0NN9P8AAABQGbHvvybURP8PAAAAlRH7/q2hJjXp/+X/s2yoJbws/y//nz8g/y//L/8/sDY+/7+67cv/y/9vdP7f/f9Lnv//+dKvl/+njMqW/499/8tCTWrS/wMAAEAdxL7/5aEm+n8AAAAon5HLe1ns+18RarKo/7/MDQAAAAAbLvb912YdN4Kvyd//Nz7//5Hu43L//5z8f3M8m9Jz8v/y/1kp8//Dmfx/ecj/9yb/34f8v/x/2fP/Pcj/U0Zly//nfX82nr0y1KQm/T8AAADUQez7rws10f8DAABAZcS+/1dCTfT/AAAAUBmx798WalKT/n/j8/8luP9/y+Py/2XM/7v/v/x/2fP/7v9fJvL/vcn/9yH/L/8v/y//z5oqW/4/9v3Xh5rUpP8HAACAOoh9/w2hJvp/AAAAqIzY9/9qqIn+HwAAACoj9v3bQ01q0v/L/5c8/x+To/L/8v/y//L/8v/LIv/fm/x/H/L/8v/y//L/rKmy5f9j339jqElN+n8AAACog9j33xRqov8HAACAyoh9/6tCTfT/AAAAUBmx758INalJ/y//X/L8f5GDH3P/f/l/+X/5f/n/5ZH/703+vw/5f/n/Ncn/z1+Q/5f/p1C2/H/s+28ONalJ/w8AAAB1EPv+HaEm+n8AAACojNj33xJqov8HAACAyoh9/85Qk5r0//L/A5H/z+T/5f/l/+X/5f+XR/6/N/n/PuT/5f/d/1/+nzVVtvx/7PtfHWpSk/4fAAAA6iD2/beGmuj/AQAAoDJi339bqIn+HwAAACoj9v23h5rUpP+X/5f/l/+X/5f/7759+f/BJP/fm/x/H/L/8v/y//L/rKmy5f9j3/+aUJOa9P8AAABQB7HvvyPURP8PAAAAlRH7/jtDTfT/AAAAUBmx798ValKT/l/+X/5f/l/+X/6/+/bl/weT/H9v8v99yP/L/8v/y/+zpsqW/499/12hJjXp/wEAAKAOYt9/d6iJ/h8AAAAqI/b9k6Em+n8AAACojNj3T4Wa1KT/l/+X/5f/l/9fUf7/VQvrlf8v9Mn/N+IG5P/Xh/x/b/L/fcj/y/9veP5/VP6fSilb/j/2/btDTWrS/wMAAEAdxL5/T6iJ/h8AAAAqI/b9e0NN9P8AAABQGbHvvyfUpCb9v/y//L/8v/y/+/933777/w8m+f/e1j7/H3dR/l/+X/7f/f/l/1msbPn/2PffG2pSk/4fAAAA6iD2/ftCTfT/AAAAUBmx798faqL/BwAAgMqIff+BUJOa9P/y//L/8v/y/0vn/ztnlvy//H/5yf/35v7/fcj/D37+P8vk/+X/2VAP/VHrV2XL/8e+/2CoSU36fwAAAKiD2Pe/NtRE/w8AAACVEfv+Xws10f8DAABAZcS+/9dDTWrS/8v/t2XPm7sr/7/++f9NrWOX/1943cbn/93/X/5/8Mj/9yb/34f8/+Dn/93/X/6fUlky/x9a7/XO/8e+/75Qk5r0/wAAAFAHse//jVAT/T8AAABURuz7Xxdqov8HAACAyoh9/6FQk5r0//L/7v9fgvy/+//L/+fqnv8fi+uV/18V+f/e5P/7kP+X/5f/l/9nTZXt/v+x7399qElN+n8AAACog9j33x9qov8HAACAyoh9/xtCTfT/AAAAUBmx739jqElN+n/5f/n/Qcn/XyX/L//fsT9Vy/+7///akP/vTf6/D/l/+X/5f/l/1lTZ8v+x739TqElN+n8AAACog9j3vznURP8PAAAAlRH7/reEmuj/AQAAoDJi3//WUJOa9P/y//L/g5L/z+T/5f879kf+X/6/G/n/3uT/+5D/l/+vR/6/67VJ/p8roWz5/9j3/2aoSU36fwAAAKiD2Pc/EGqi/wcAAIDKiH3/20JN9P8AAABQGbHvf3uoSU36f/l/+X/5f/n/VeX/N8v/y/+Xi/x/bwOW///F1eFx+f+C/H+5x7/S/P9Ix9dXJP//g6Xu/z+/qfP18v9cCWXL/8e+/x2hJjXp/wEAAKAOYt//zlAT/T8AAABURuz73xVqov8HAACAyoh9/2+FmtSk/5f/b45jIb0s/1/V/P+Q/L/7/8v/14T8f28Dlv93//8O8v/lHv8A3f+/K/l/roSy5f9j3//uUJOa9P8AAABQB7HvfzDURP8PAAAAlRH7/odCTfT/AAAAUBmx739PqElN+n/5f/f/r0f+3/3/M/l/+f+aWF3+flT+P5L/l/+X/y9H/v+/5P8ZbGXL/8e+/+FQk5r0/wAAAFAHse9/JNRE/w8AAACVEfv+3w410f8DAABAZcS+/72hJjXp/+X/ByX/PzGg+f8n5P+vYP7/pquL5eT/5f9Z4P7/vcn/9yH/L/9ftvy/+/8z4MqW/499//tCTZbf/48ve0kAAADgyuj8Q1KH2Pf/TqhJTf7+DwAAAHUQ+/7fDTXR/wMAAEBlxL7/90JNatL/y/8PSv7f/f8z+X/3/+/YH/l/+f9u1i//H6888v/y//L/UVnz/5sy+X/5fzZK2fL/se///VCTmvT/AAAAUAex739/qIn+HwAAAAZCt/8nu1Ps+w+Hmuj/AQAAoDJi338k1OTQ4mxBFcn/y//L/5c0///nO/71e99+55Hd8v/y//L/K7Ku9/9vnvzu/y//L/+flDX/7/7/8v9snLLl/2PffzTUxN//AQAAoDJi3/8HoSb6fwAAAKiM2PcfCzXR/wMAAEBlxL5/OtSkJv2//L/8v/x/SfP/A3z//3g85P/brVn+P1505f+7KvL3aRZd2fz/Iws5cfn/leb/x7o+Kv8v/z/I45f/l/9nsbLl/2PfPxNqUpP+HwAAAOog9P1Dx4u68IT+HwAAACoj9v0nQk30/wAAAFAZse//QKhJTfp/+X/5f/l/+X/3/+++/V75/8aI+/+XVcrf/yw/UeT/O5Qn/9+d/L/8/yCPX/5f/p/Fypb/j33/bKhJTfp/AAAAqIPY938w1ET/DwAAAJUR+/4PhZro/wEAAKAyYt///+zd2ZOl9V3H8ad1lp7CCy6s8sIbq7z0T+BCr/UP8MIbb6yyLMUFFXcG9xUFxQ0VwX0BFQQRFdyTQBJCQnZIQvZ9IQuEhJrUdH+/357uPv2cXs7ynN/v9bqYb+hMc06oYYYPPe883xu3dLL/9f/6f/2//l//P/v1J/v8f/3/qLP29/r/oP/vu/9/Uf+v/9f/sxhT6/9z939f3NLJ/gcAAIAe5O6/MW6x/wEAAKAZufu/P26x/wEAAKAZuft/IG7pZP/r/8/S/+9Vyvr//e9/fv+fr7jE/v+b9f9Hvb7+X//fMv3/OP3/HLP7/wvDMPTV/3v+v/5f/8+CTK3/z93/g3FLJ/sfAAAAepC7/4fiFvsfAAAAmpG7/6a4xf4HAACAZuTu/+G4pZP9f6D/3xr67P8z4/X8f8//1/8f1f/vfKP/1/9P32r7/1uv/syn/z92/3//HfNedqL9f4vP/78w64Pr7ufPat3v/5j9/8WjPl//T4um1v/n7v+RuKWT/Q8AAAA9yN3/o3GL/Q8AAADNyN1/c9xi/wMAAEAzcvf/WNzSyf5f3PP/L+18fEP7/6L/1//vfED/7/n/+v+N5fn/43p6/v9Nz1x34wsPf/0jJ3n9jvr/mdbdz2/6+/f8f/0/h02t/8/d/+NxSyf7HwAAAHqQu/8n4hb7HwAAAJqRu/8n4xb7HwAAAJqRu/+n4pZO9v/i+v+Nfv5/0f/r/3c+oP/X/+v/N5b+f1xP/f9pXl//r//X/+v/Wayp9f+5+386bulk/wMAAEAPcvf/TNxi/wMAAEAzcvffErfY/wAAANCM3P2X45ZO9r/+f/n9/yv6f/1/XP2//l//v3z6/3H6/zn0//p//b/+n4WaWv+fu//WuKWT/Q8AAAA9yN3/s3GL/Q8AAADNyN3/c3GL/Q8AAADNyN3/83FLJ/tf/+/5//p//b/+f/br6/83k/5/nP5/Dv3/Wfv58/p//b/+n2udsP9/eeSn7YX0/7n7fyFu6WT/AwAAQA9y9/9i3GL/AwAAQDNy9/9S3GL/AwAAQDNy9/9y3NLJ/tf/6//1//r/U/f/h3/o7dD/z6b/Xw39/7jJ9P9b52Z+WP+/8f2/5//r//X/7DO15//n7v+VuKWT/Q8AAAA9yN3/q3HLyP4/8b/MBwAAANYqd/+vxS2+/g8AAAAbL6uz3P2/Hrd0sv/1//p//b/+3/P/Z7/+WP//yDXvT/8/Lfr/cZPp/4/Qdf+/tfee9f+b+f71//p/Dpta/5+7/zfilk72PwAAAPQgd/9tcYv9DwAAAM3I3f+bcYv9DwAAAM3I3f9bcUsn+392/7/33+v/j0f/v//96/9n//hYVP+ff0b9/2j//y2e/98n/f+41ff/F/X/+//8nv+/ROt+/433/5fmfb7+n1mm1v/n7r89bulk/wMAAEAPcvffEbfY/wAAANCM3P2/HbfY/wAAANCM3P2/E7d0sv89/1//r//fvP7f8/93rfP5/8PK+/9z+v9j0v+P8/z/OfT/+v/m+/8LR36+5/+zDFPr/3P33xm3dLL/AQAAoAd3vjTs7P7fHQb7HwAAADbRtb934OBvKA25+38vbrH/AQAAoBm5+38/bulk/+v/9f/6f/2//n/265+0/5/3YGTP/18N/f84/f8c+v9l9PPnGuv/7z7q86fQ/9+yvOf/6/85lX39/2N7H19X/5+7/w/ilk72PwAAAPQgd/8fxi32PwAAADQjd/9dcYv9DwAAAM3I3f9HcUsn+3/p/f9IEKv/1//r//X/LfX/8+j/V0P/P07/P4f+3/P/m3/+/9H0/yzDXv+//+fDdfX/ufv/OG7pZP8DAABAD3L3/0ncYv8DAABAM3L33x232P8AAADQjNz9fxq3dLL/Pf9f/6//1//r/2e/vv5/M+n/x+n/59D/6//1//p/Fmrf8/+vsa7+P3f/PXFLJ/sfAAAAepC7/964xf4HAACAZuTu/7O4xf4HAACAZuTu//O4pZP9r/9fbv+fH9f/6/8H/b/+X/+/Et32/1uzfiU67Ij+/8nvvvxt+z+i/9f/6//1//p/FmAS/f+VvX+6zN3/F3FLJ/sfAAAAepC7/y/jFvsfAAAAmpG7/6/iFvsfAAAAmpG7/6/jlhPu/+sX+q5WR//v+f/6f/2//n/26+v/N1O3/f8xef7/HPp//b/+X//PQk2i/7/mj3P3/03c4uv/AAAA0Izc/X8bt9j/AAAA0Izc/X8Xt9j/AAAA0Izc/X8ft3Sy//X/+n/9v/5f/z/79U/b/28Ps+n/V0P/P07/P4f+X/+v/9f/s1BT6/9z998Xt3Sy/wEAAKAHufvvj1vsfwAAAGhG7v5/iFvsfwAAAGhG7v5/jFs62f/6f/2//v8M/f+lYRj0//p/z/+fFP3/OP3/MAwPjLyBWf3/lYv6f/2//l//zylNrf/P3f9PcUsn+x8AAAB6kLv/gbjF/gcAAIBm5O5/MG6x/wEAAKAZufv/OW7pZP/r//X/+n/P/9f/z359/f9m0v+P0//P4fn/+n/9v/6fhZpa/5+7/6G4pZP9DwAAAD3I3f9w3GL/AwAAQDNy9/9L3GL/AwAAQDNy9z8St7S3/++a9UH9v/5f/6//X0r/f1n/f5D+fzWW1/8P+n/9v/5/Dv2//l//z0Gr6v9fjp/v5/X/ufv/NW5pb/8DAABAt3L3Pxq32P8AAADQjNz9/xa32P8AAADQjNz9/x63dLL/9f/6f/2//r/r5/8P1+v/G+P5/+P0/3Po//X/J3r/X7vvj/T/+n8OW1X/f1Tvf/CPc/f/R9zSyf4HAACAHuTufyxusf8BAACgGbn7H49b7H8AAABoRu7+/4xbOtn/+n/9//7+fxj0//r/rvr/9T7/f3vQ/y+c/n+c/n8O/X+b/f9XDQ09///SkZ+v/2eKptb/5+7/r7ilk/0PAAAAPcjd/99xi/0PAAAAzcjd/z9xi/0PAAAAzcjd/79xS0v7/5Wj07fN7/8vHvhE/f8wDM/e7Pn/+v+R19f/T6b/r7+q+v/F0f+P0//Pof9vs/9f0fv3/H/9P4dNrf/P3f9/cUtL+x8AAAA6l7v//+MW+x8AAACakbv/VXGL/Q8AAADNyN3/6rilk/2/+f3/wU/U/w9nev6//n/nA/p//b/+f2Odtb+/Zzt+TdP/6/+P7P8vXf0Vr9v+f+uIf+4Z9P/6f/0/M0yt/8/d/5q4pZP9DwAAAD3I3f9E3GL/AwAAQDNy9z8Zt9j/AAAA0Izc/a+NWzrZ//p//b/+fzP7/239v/5f/z/TVJ7/f8MN3/q0/r/V/t/z/4+i/9f/6/85aGr9f+7+18Utnex/AAAA6EHu/tfHLfY/AAAANCN3/1Nxi/0PAAAAzXhqJ+TcHt4wDF3u/8P9//lht1DdNav/j0ZN/38N/f/+96//n/3jw/P/9f/6/+WbSv/v+f+ne//6f/3/Jr//E/X/33D48/X/tGhq/X/u/qfjlk72PwAAAPQgd/8b4xb7HwAAAJqRu/9NcYv9DwAAAM3I3f9M3NLJ/vf8/yX3/+f1//p//X/9uNT/6/9XQP8/Tv8/h/7/7P18/qyq/9/c5/9/tf6fxZla/5+7/81xy87w+8avOeX/TAAAAGBCcve/JW7p5Ov/AAAA0IPc/W+NW+x/AAAAaEbu/rfFLZ3sf/2/5//r//X/+v/Zr6//30z6/3H6/zn66f+3Z31w3f38Wa37/a+x/9/5YeH5/0zR1Pr/3P1vj1s62f8AAADQtpd2vs3d/464xf4HAACAZuTuf2fcYv8DAABAM3L3Pxu3dLL/N7H/v6T/1/+fqP//Tv3/gdfX/+v/W6b/z1/RZ9P/z9FP/z/Tuvv5hb3/q38T9NX/79D/M0VT6/9z9z8Xt3Sy/wEAAKAHufvfFbfY/wAAANCM3P3vjlvsfwAAANhQFw99JHf/e+KWJvb/ubnfYxP7f8//P33/vzX02P97/r/+X//fk83p/++d+Yu05//r//X/m/v+9f/6fw6bWv+fu//5rXMN7n8AAABo17d/0/c8d9zv+/zOt9vDe+MW+x8AAACakbv/fXGL/Q8AAADNyN3//rilk/2v/++r/+/z+f/6f/2//r8nm9P/z7bZ/f/Vvzv0/4P+X/+v/9f/U6bW/+fu/0Dccs3wm///ogcAAACs1IWTfffc/R+MWzr5+j8AAAD0IHf/h+KWQ/v/yjF/VzsAAAAwNbn7Pxy3dPL1f/3/xPv/YUn9f3w//f+uVff/Wwe+v/5/l/5f/78I+v9xZ+z/r2x5/r/+f4T+X/+v/+egqfX/ufsffWjocv8DAABAo/b9G4WP7Hy7PXw0bjnu/j/4hSoAAABgcnL3fyxu8fV/AAAAaEbu/o/HLZ3sf/3/xPv/Uz3//1L9J8//n2b/v7Ln/9+2PfP19f/6/5bp/8ct9/n/+v+k/9f/6//1/+w6Qf+/M0iX3f/n7v9E3NLJ/gcAAIAe5O7/ZNxi/wMAAEAzcvd/Km6x/wEAAKAZufs/Hbd0sv/1/2vo/2+/OAyn6//P55/7zM//1//30f8f8frt9P9fd93lJ77jux68T//PnlX2//ljQf+v/9f/79L/6//1/xw0tef/5+7/TNzSyf4HAACAHuTufyFusf8BAACgGbn7Pxu3XN3/j6/rXQEAAACLlLv/c3FLJ1//1/+3+Pz/zez/86/1Gvr/y5vX/2dT3Hv/7/n/+v/DPP9/nP5/Dv2//l//r/9noabW/+fu/3zc0sn+BwAAgB7k7v9C3JL7f+vE/+oeAAAAmJjc/S/GLb7+DwAAAM3I3f9S3NLJ/tf/6/+n0v8nz//f+zzP/9+l/9f/n4T+f5z+fw79v/5f/6//Z6Gm1v/n7v9i3NLJ/gcAAIAe5O5/OW6x/wEAAKAZufu/FLfY/wAAANCM3P1fjls62f/6f/2//l//v/r+f/fnWv3/3l9V/f/i6P/H6f/n0P/r//X/+n8Wamr9f+7+rwQAAP//t+NayQ==")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40000, 0x42)

6m9.614754949s ago: executing program 4 (id=4985):
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80)
bind$packet(r1, &(0x7f0000000180)={0x11, 0xfa, r3, 0x1, 0x4, 0x6, @link_local}, 0x14)
getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="00000000e000d1a7000100feffffff000000000008"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

6m9.614498162s ago: executing program 4 (id=4986):
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x6, 0x8, 0x2)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
pread64(r0, &(0x7f0000001c00)=""/4108, 0x100c, 0x3)

6m9.613877676s ago: executing program 4 (id=4988):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x2fff)

6m9.529955603s ago: executing program 4 (id=4990):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@noinit_itable}]}, 0xfe, 0x596, &(0x7f00000026c0)="$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")
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)

6m9.346128499s ago: executing program 4 (id=4992):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)

6m8.674543898s ago: executing program 4 (id=5003):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x7}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x12004, 0x3, 0x2, 0xf250, 0x482, 0x4800, 0x300000, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0xffffffff, 0x5, 0x8, 0x4, 0x2, 0x6f, 0x243, 0x7, 0x1, 0x199d, 0x6, 0x1ff, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x41, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x1, 0x24, 0x5, 0xfffffffb, 0x8, 0x7fff, 0x72c, 0x1c32, 0x2, 0x8, 0x10000, 0x3fe, 0x7ffd, 0x3, 0x3, 0x297, 0x8, 0x0, 0xa, 0x4, 0x0, 0x3ff, 0x3, 0xff, 0x8, 0x1000003, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xfdff, 0x2, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0xb, 0x9, 0xe, 0x1, 0x7, 0x6, 0x2, 0x800001, 0x1, 0x8, 0x4, 0x1f6, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x0, 0x0, 0x1e86, 0x5, 0x3d, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108f, 0xffff, 0x3, 0x0, 0x1000088, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x406, 0x1, 0xfff, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x0, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x46, 0xc09, 0x6, 0x4, 0x168, 0x800, 0x4, 0xffffffff, 0x7fff, 0xfdff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0xe, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
readv(r0, &(0x7f0000002300)=[{0x0}, {&(0x7f0000000200)=""/203, 0xcb}], 0x2)
write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)

6m8.59155575s ago: executing program 35 (id=5003):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x7}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x12004, 0x3, 0x2, 0xf250, 0x482, 0x4800, 0x300000, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0xffffffff, 0x5, 0x8, 0x4, 0x2, 0x6f, 0x243, 0x7, 0x1, 0x199d, 0x6, 0x1ff, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x41, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x1, 0x24, 0x5, 0xfffffffb, 0x8, 0x7fff, 0x72c, 0x1c32, 0x2, 0x8, 0x10000, 0x3fe, 0x7ffd, 0x3, 0x3, 0x297, 0x8, 0x0, 0xa, 0x4, 0x0, 0x3ff, 0x3, 0xff, 0x8, 0x1000003, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xfdff, 0x2, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0xb, 0x9, 0xe, 0x1, 0x7, 0x6, 0x2, 0x800001, 0x1, 0x8, 0x4, 0x1f6, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x0, 0x0, 0x1e86, 0x5, 0x3d, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108f, 0xffff, 0x3, 0x0, 0x1000088, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x406, 0x1, 0xfff, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x0, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x46, 0xc09, 0x6, 0x4, 0x168, 0x800, 0x4, 0xffffffff, 0x7fff, 0xfdff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0xe, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
readv(r0, &(0x7f0000002300)=[{0x0}, {&(0x7f0000000200)=""/203, 0xcb}], 0x2)
write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)

1m20.237821088s ago: executing program 1 (id=10865):
r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0xf)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2231, 0x3, 0x1}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000005c0)=0x200000, 0x4)
r5 = getpgid(0x0)
fcntl$setownex(r3, 0xf, &(0x7f0000000140)={0x2, r5})
sendmmsg$unix(r2, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x40015)

1m19.154027967s ago: executing program 1 (id=10868):
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000001900)=""/4119, 0x1017}, {&(0x7f00000001c0)=""/25, 0x19}], 0x2)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8004)

1m18.954035451s ago: executing program 1 (id=10874):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0)
ftruncate(r3, 0xc17a)
sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0)

1m18.850028555s ago: executing program 1 (id=10876):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

1m18.84987564s ago: executing program 1 (id=10877):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@ipv6_newroute={0x44, 0x18, 0x1, 0x70bd31, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0xfc, 0x2, 0xff, 0xa, 0x2400}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x0, {0x89, 0x0, 0x4, 0x0, 0xff, 0x20, 0x4}}}}}]}, 0x44}}, 0x0)

1m17.9292051s ago: executing program 1 (id=10878):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffdffffe}, [@alu={0xf, 0x0, 0xd, 0xa, 0x8, 0xfffffffffffffffe, 0x1}], {0x95, 0x0, 0x6c00}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)

1m17.7055068s ago: executing program 36 (id=10878):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffdffffe}, [@alu={0xf, 0x0, 0xd, 0xa, 0x8, 0xfffffffffffffffe, 0x1}], {0x95, 0x0, 0x6c00}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)

1m13.940615368s ago: executing program 6 (id=10912):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8206, 0x110}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x19}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x2}]}}}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x50}}, 0x0)

1m13.550297542s ago: executing program 6 (id=10915):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xb)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0)

1m13.021209319s ago: executing program 6 (id=10924):
syz_mount_image$fuse(&(0x7f0000002040), 0x0, 0x20, &(0x7f0000000240)=ANY=[], 0x40, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
syz_fuse_handle_req(r0, &(0x7f00000040c0)="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", 0x2000, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
syslog(0x3, 0xffffffffffffffff, 0x1000000)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
listen(r1, 0x0)
accept4(r1, 0x0, 0x0, 0x0)

1m11.986293192s ago: executing program 6 (id=10933):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0)

1m11.984325068s ago: executing program 6 (id=10934):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0xc, &(0x7f00000010c0)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x73, 0xa, 0x2, 0xffc0}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0xe, 0x0, &(0x7f0000002280)="0011223344550011223344560800", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m11.134872409s ago: executing program 6 (id=10936):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x9, 0x7}, {}, {0x10, 0x5}}, [@filter_kind_options=@f_route={{0xa}, {0x8, 0x2, [@TCA_ROUTE4_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010)

1m10.895361076s ago: executing program 37 (id=10936):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x9, 0x7}, {}, {0x10, 0x5}}, [@filter_kind_options=@f_route={{0xa}, {0x8, 0x2, [@TCA_ROUTE4_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010)

20.914715949s ago: executing program 5 (id=11784):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000000)={0x6, 0x6, 0x2, 0x0, 0xc3ba, 0x2})
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0)

20.859096506s ago: executing program 5 (id=11787):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20842, 0x95)
bind$inet6(r0, 0x0, 0x0)

20.804324944s ago: executing program 5 (id=11789):
syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@local, @remote, @void, {@llc={0x8864, {@snap={0x0, 0x0, '~', "3fab95", 0x892f}}}}}, 0x0)

20.80381861s ago: executing program 5 (id=11791):
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810714, &(0x7f0000000240), 0xdf, 0x486, &(0x7f0000000c00)="$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")
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10)

20.424555965s ago: executing program 5 (id=11793):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe)
shutdown(r0, 0x1)
recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0)

20.002725046s ago: executing program 5 (id=11800):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
uname(&(0x7f0000000080)=""/206)

19.944893116s ago: executing program 38 (id=11800):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
uname(&(0x7f0000000080)=""/206)

1.956122307s ago: executing program 9 (id=12012):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000ac0)={0x34, &(0x7f0000000800)={0x20, 0xa, 0x5, "86b22b0e2b"}, 0x0, 0x0, 0x0, 0x0, 0x0})

1.770530672s ago: executing program 8 (id=12017):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/webusb/landingPage\x00', 0x1, 0x0)
write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x401, 0x0, 0x76, 0x4, 0x40, 0xc6, 0x0, 0x0, 0x80, 0x401}}, 0x50)

1.706453237s ago: executing program 8 (id=12018):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018000000", @ANYRES32, @ANYBLOB="00000000d5160000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0xf, 0x1011, &(0x7f00000016c0)=""/4113}, 0x94)

1.706220068s ago: executing program 8 (id=12019):
set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7)
syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x236, &(0x7f0000000000)="$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")

1.629472709s ago: executing program 8 (id=12020):
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000580)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0)
write(r0, &(0x7f0000000000)='\f', 0x1)

1.629050981s ago: executing program 8 (id=12021):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4)
sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r1)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x3, 0x800, 0x1, 0x40055}, &(0x7f00000000c0)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}})
io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)

592.134437ms ago: executing program 8 (id=12028):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0)

503.468723ms ago: executing program 7 (id=12032):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x1, 0x70bd29, 0x25dfdbfa, {0x0, 0x0, 0x0, r1, 0x8013, 0x1b223}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xfffffff7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xc094)

429.277784ms ago: executing program 7 (id=12033):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
readv(r0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/165, 0xa5}], 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r2, @ANYBLOB="841073a0dbed09869d48555b6ed11859cb0834b8f44af3d96161c0253770bce87854a3394976563f2ae0a699e0a11779fef4cffc4724bf5e0b5f565194b5e799d0d35fcde90c225443560728a6eb28b6904da03a29f67b2e6a13b73c0fa815220722779486df0c9cf00b3043d50def7834ea6e963012a154452a905c3ae68efa1ba8b06260"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)

327.605225ms ago: executing program 7 (id=12034):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x100}}, 0x0)

327.315235ms ago: executing program 7 (id=12035):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001700), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r1, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20044885}, 0x0)

267.373628ms ago: executing program 7 (id=12036):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100010000000000000017000000480006804400040067636d286165142cf5a786b0b5df7dbd290000000000000000000000000000000000000000000000001c7e63d3f93a030000001f31d3d208ebf300"], 0x5c}}, 0x40880)

216.171374ms ago: executing program 9 (id=12037):
mknodat$loop(0xffffffffffffff9c, 0x0, 0x1004, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff, 0x1, 0xfd, 0x9}}, 0x1c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1fb69, 0x51267}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00, 0x10d}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008801}, 0x20040040)

147.092166ms ago: executing program 7 (id=12038):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x243, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xbe, 0x43, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfc, 0x0, 0x5}}}}}]}}]}}, 0x0)

134.043482ms ago: executing program 9 (id=12039):
r0 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4)

59.929148ms ago: executing program 9 (id=12040):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48)

261.954µs ago: executing program 9 (id=12041):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x9, 0x5}]}, 0x10)
sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)

0s ago: executing program 9 (id=12042):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$eJzs3c9rVNceAPBzb/KeiU998cfCBw/ewBPeoy0hcdU2QjVGY6KpxVYp3YyTZNS0k4wkk9KFi3QndFXoQrqQFrrLSrLo1v4J3XRp10K76KZQkKbMzJ0492aGTCXXVPl8wJzc8zvznXvmzOJ64kTt1sJKYWGlUFoqVOdurJwsfFytrC6WQ/yc7PX49CaPOIn93rl89vy7106G8N38D483Nzc3Q11/6Gi07fdff7kz1562xJk29X4797ZbPgghHNs2r7q+EML734YQhRDOJHnjSToYQjgUmmXX7nx2vbBLs3nwqHyq+GTm7sbYien1+xvd//YohC8r/3rt5uJP/+0b+/GVXRoeAAAAAAAAAAAAAAAAAIAX3OSVy1ffGRkND6PQvx5tf153Mkm7PR+7uWv+k/8fCwAAAAAAAAAAAAAAAAAAAH9RT5//L0RHOjz/P5Gkp7u033wr/zmSn6m3L0+cGxlNzn+PtpW/nmT9fKYvHO5w7nv2/Pczmfadz3/fPs6zas2vNe5QiOLh1HUcDw+H8HVy8PvxaH9cqa7UXr1RXV2a37VpvLDS8W+e3p+KTnKgf6/xH8/0n//5/0e3vZvq19d37y32UkvHv69rvW8+jXqK/9l0s3s5TbvN0fyHeIml49/fyBtsr7CvmdTj/3n/zvGfyPSf1/1/KIRQiOpzLaRWgPoepp7fbb9CWjr+f2vkpZbO5IXsdv//lon/uUz/e7X+r2U/iOgoHf+/N/IGUjWaG4BG/OOd7//zmf73Iv71+a/5/O9JOv7JYt+fqtJ4JXtd/ycz/ecV/6txMs9DUeodsB4187v9f3WkpeM/sK386fe/uKf934VM++f1/a81buv7X2v5/3/U/P5HZ+n4D3at1+v9P5Vpl/f6f7qx/+NZpeO/v5GX3jsPNX72Gv/pTP95xb+xKxloxf/pevL7vmb+V/Z/PUnH/x/NzLi9xlrjZ2P/F+28/7+Y6X8v9n/1+a/F+Y76skjH/0DXevX4f9/D5/+lTLv84x/CiL3+M0vH/2DXeo37f2Dn+M9k2uUd///l2TkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAC2A8SYdCFA+nruN4eDiEs8n18bA/mi3NF2cr1bmPVkKYSPIL4Uh0s1KdLVWKC0vV+XKxVKlU50I4l5QfCwPRSqVaKy6Wbp/f6mswulUuLddmy6VaCGEyyf93ONjqa3ahtli6HUK4sFX2z7i6fPtWaak4v7D85sjIyEiY2prD4aj8Sa28VGuO3iwNYXqr7VDUNrlG8cWtuRyIPqyuLi+VKo38S21tKtW5UqWtzUxS9kU4HNWWV5fmSrVysVK92RpvL51O0ompK+9duTS6rfx61EzHn++0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHo69cS+E0N+8ikMIhSj5JUr+pTx4VD5VfDJzd2PsxPT6/Y3HneoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAH+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhl/5RIgaiOAC/GQUtPYZVSDrbiCJaGBE8gR7Dw+hRvIR3sLCwtVgWdiew5A+EwHbf1zyYH2/ewDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgubvn7uWpbiJSnG/OIr7evn8O84dSP66n+09WzDxd0cNx3D92N7d1U/49jfKrcvTb5l36//f+GhO19znYk+E+7Y3nDM3t29z7+rkXkXIVEW3JL1POVbXsLgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDLDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgWAAAAABAmL91FH0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwKAAD//4w3HM8=")
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x110)
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000340)=ANY=[], 0x700, 0x0)

kernel console output (not intermixed with test programs):

7616][T29365] x_tables: unsorted entry at hook 4
[  603.481628][T29398] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10219'.
[  603.490038][T29398] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10219'.
[  604.471709][T29459] bond2: entered promiscuous mode
[  604.474960][T29459] 8021q: adding VLAN 0 to HW filter on device bond2
[  604.484973][ T1371] ieee802154 phy0 wpan0: encryption failed: -22
[  604.487003][ T1371] ieee802154 phy1 wpan1: encryption failed: -22
[  604.521750][T29463] sch_fq: defrate 0 ignored.
[  604.878371][T29487] trusted_key: encrypted_key: key user:syz not found
[  604.921321][T29495] xt_cluster: node mask cannot exceed total number of nodes
[  604.971651][   T31] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[  605.107516][T29513] netlink: 'syz.5.10265': attribute type 16 has an invalid length.
[  605.110034][T29513] netlink: 'syz.5.10265': attribute type 17 has an invalid length.
[  605.132210][T29513] 8021q: adding VLAN 0 to HW filter on device bond0
[  605.137276][T29513] 8021q: adding VLAN 0 to HW filter on device team0
[  605.144907][   T31] usb 7-1: Using ep0 maxpacket: 32
[  605.147149][   T31] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  605.150479][T29513] 8021q: adding VLAN 0 to HW filter on device batadv0
[  605.153870][   T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  605.161868][   T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  605.167036][   T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  605.174772][   T31] usb 7-1: config 0 descriptor??
[  605.183377][   T31] hub 7-1:0.0: USB hub found
[  605.186881][T29513] batman_adv: batadv0: Interface activated: batadv_slave_0
[  605.191179][T29513] batman_adv: batadv0: Interface activated: batadv_slave_1
[  605.197136][T29513] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  605.201038][T29513] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  605.208995][T29513] veth1_vlan: left promiscuous mode
[  605.211775][T29513] veth0_vlan: left promiscuous mode
[  605.214648][T29513] veth0_vlan: entered promiscuous mode
[  605.221090][T29513] veth1_vlan: entered promiscuous mode
[  605.229078][T29513] veth1_macvtap: left promiscuous mode
[  605.232582][T29513] veth0_macvtap: left promiscuous mode
[  605.237001][T29513] veth0_macvtap: entered promiscuous mode
[  605.240273][T29513] veth1_macvtap: entered promiscuous mode
[  605.247640][T29513] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  605.251916][T29513] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  605.257462][T29513] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  605.264655][T29513] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  605.268845][T29513] mac80211_hwsim hwsim17 wlan0: left promiscuous mode
[  605.274261][T29513] 8021q: adding VLAN 0 to HW filter on device bond1
[  605.278922][T29513] 8021q: adding VLAN 0 to HW filter on device bond2
[  605.281656][T29513] 8021q: adding VLAN 0 to HW filter on device bond3
[  605.289512][T29513] 8021q: adding VLAN 0 to HW filter on device bond4
[  605.292268][T29513] 8021q: adding VLAN 0 to HW filter on device bond5
[  605.300120][T29513] 8021q: adding VLAN 0 to HW filter on device bond6
[  605.315267][T10682] bridge0: port 1(bridge_slave_0) entered blocking state
[  605.317618][T10682] bridge0: port 1(bridge_slave_0) entered listening state
[  605.321294][T10682] bridge0: port 2(bridge_slave_1) entered blocking state
[  605.323605][T10682] bridge0: port 2(bridge_slave_1) entered listening state
[  605.394342][T22922] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  605.399019][T22922] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  605.402134][T22922] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  605.406386][    C1] raw-gadget.0 gadget.6: ignoring, device is not running
[  605.408926][    C1] raw-gadget.0 gadget.6: ignoring, device is not running
[  605.411296][   T31] hub 7-1:0.0: config failed, can't read hub descriptor (err -22)
[  605.414257][T22922] netdevsim netdevsim5 netdevsim3: set [1, 2] type 2 family 0 port 47104 - 0
[  605.422944][    C1] raw-gadget.0 gadget.6: ignoring, device is not running
[  605.425199][T22922] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  605.428042][T22922] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  605.431000][T22922] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  605.433740][T22922] netdevsim netdevsim5 netdevsim2: set [1, 2] type 2 family 0 port 47104 - 0
[  605.437056][    C1] raw-gadget.0 gadget.6: ignoring, device is not running
[  605.439936][    C1] raw-gadget.0 gadget.6: ignoring, device is not running
[  605.444180][   T31] usbhid 7-1:0.0: can't add hid device: -71
[  605.446351][   T31] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  605.449110][ T5632] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  605.454340][ T5632] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  605.457164][ T5632] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  605.461197][ T5632] netdevsim netdevsim5 netdevsim0: set [1, 2] type 2 family 0 port 47104 - 0
[  605.469398][ T5632] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  605.472843][   T31] usb 7-1: USB disconnect, device number 50
[  605.476608][ T5632] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  605.480989][ T5632] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  605.483781][ T5632] netdevsim netdevsim5 netdevsim1: set [1, 2] type 2 family 0 port 47104 - 0
[  605.576689][T29535] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10276'.
[  606.136410][T29551] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10283'.
[  606.247488][T29559] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10287'.
[  606.261671][T29559] netlink: 'syz.1.10287': attribute type 4 has an invalid length.
[  606.374466][T29572] loop6: detected capacity change from 0 to 1024
[  606.422747][T29572] hfsplus: xattr exists yet
[  606.656451][T29597] net_ratelimit: 10 callbacks suppressed
[  606.656510][T29597] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  606.715921][T29601] 9p: Bad value for 'rfdno'
[  606.719187][T29602] netlink: 'syz.5.10306': attribute type 11 has an invalid length.
[  606.859072][T29615] loop6: detected capacity change from 0 to 8192
[  606.862158][T29615] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  607.313598][T29641] dvmrp27: entered allmulticast mode
[  607.346733][T29643] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10324'.
[  607.478920][T29653] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  608.020882][T29696] loop6: detected capacity change from 0 to 128
[  608.025809][T29696] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  608.156251][T29706] bridge8: entered promiscuous mode
[  608.158726][T29706] bridge8: entered allmulticast mode
[  608.332204][  T624] usb 7-1: new high-speed USB device number 51 using dummy_hcd
[  608.494777][  T624] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 1.00
[  608.500594][  T624] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  608.504846][  T624] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  608.510090][  T624] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  608.756291][  T624] usb 7-1: USB disconnect, device number 51
[  609.254780][T29724] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  609.332146][T29728] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.10360'.
[  609.353468][T29730] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10361'.
[  609.392917][  T624] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  609.436995][  T624] hid-generic 0000:0000:0000.001E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  609.761018][T29755] kAFS: unable to lookup cell '(,c'
[  609.788454][   T34] audit: type=1326 audit(2000000076.787:4740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29756 comm="syz.5.10373" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa05dd9e0d9 code=0x0
[  610.260706][T29764] No such timeout policy "s"
[  610.266091][T29764] netlink: Failed to associated timeout policy 's'
[  610.518921][T29776] loop6: detected capacity change from 0 to 4096
[  610.554390][T29776] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  610.588782][T17587] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  610.782930][T29786] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10386'.
[  610.785846][T29786] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10386'.
[  611.068687][T29804] netlink: 188 bytes leftover after parsing attributes in process `syz.6.10394'.
[  611.123421][T29806] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT'
[  611.936001][T29860] libceph: resolve '4' (ret=-3): failed
[  612.056597][T29879] SET target dimension over the limit!
[  612.475431][T29927] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10448'.
[  612.674530][T29946] netlink: 'syz.5.10457': attribute type 1 has an invalid length.
[  612.677500][T29946] netlink: 'syz.5.10457': attribute type 2 has an invalid length.
[  613.434118][T29972] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10470'.
[  613.439954][T29972] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10470'.
[  613.616282][T29997] batadv0: entered promiscuous mode
[  613.618438][T29996] batadv0: left promiscuous mode
[  614.285967][T30035] netlink: 'syz.5.10496': attribute type 2 has an invalid length.
[  614.443324][T30045] overlayfs: failed to clone upperpath
[  614.970331][T30071] trusted_key: encrypted_key: keyword 'ew' not recognized
[  615.557750][T30091] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  615.564273][T30091] bond7 (unregistering): Released all slaves
[  615.867747][T30119] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10535'.
[  616.145249][   T31] usb 7-1: new high-speed USB device number 52 using dummy_hcd
[  616.321266][   T31] usb 7-1: unable to get BOS descriptor or descriptor too short
[  616.329947][   T31] usb 7-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40
[  616.344129][   T31] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  616.351434][   T31] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  616.354321][   T31] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  616.359292][   T31] usb 7-1: New USB device strings: Mfr=69, Product=2, SerialNumber=3
[  616.366209][   T31] usb 7-1: Product: syz
[  616.369333][   T31] usb 7-1: Manufacturer: syz
[  616.370852][   T31] usb 7-1: SerialNumber: syz
[  616.488525][T30149] x_tables: unsorted underflow at hook 4
[  616.528401][T30151] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  616.698447][   T31] usb 7-1: USB disconnect, device number 52
[  617.395819][   T34] audit: type=1326 audit(2000000083.808:4741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30221 comm="syz.5.10578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05dd9e0d9 code=0x7ffc0000
[  617.419852][   T34] audit: type=1326 audit(2000000083.808:4742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30221 comm="syz.5.10578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05dd9e0d9 code=0x7ffc0000
[  617.437175][   T34] audit: type=1326 audit(2000000083.808:4743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30221 comm="syz.5.10578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05dd9e0d9 code=0x7ffc0000
[  617.449017][   T34] audit: type=1326 audit(2000000083.808:4744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30221 comm="syz.5.10578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05dd9e0d9 code=0x7ffc0000
[  617.462361][   T34] audit: type=1326 audit(2000000083.808:4745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30221 comm="syz.5.10578" exe="/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7fa05dd9e0d9 code=0x7ffc0000
[  617.470396][   T34] audit: type=1326 audit(2000000083.808:4746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30221 comm="syz.5.10578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05dd9e0d9 code=0x7ffc0000
[  617.487152][   T34] audit: type=1326 audit(2000000083.808:4747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30221 comm="syz.5.10578" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa05dd9e0d9 code=0x7ffc0000
[  617.501157][   T34] audit: type=1326 audit(2000000083.808:4748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30221 comm="syz.5.10578" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa05dd9e0d9 code=0x7ffc0000
[  617.511391][T30232] loop6: detected capacity change from 0 to 512
[  617.513980][T30232] EXT4-fs: Ignoring removed i_version option
[  617.515907][T30232] EXT4-fs: Ignoring removed nobh option
[  617.518043][T30232] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  617.531279][T30232] EXT4-fs (loop6): 1 truncate cleaned up
[  617.534142][T30232] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  617.560325][T30238] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10585'.
[  617.563441][T30238] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10585'.
[  617.578433][T17587] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  617.627782][   T34] audit: type=1326 audit(2000000084.021:4749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30243 comm="syz.6.10590" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754cd9e0d9 code=0x7ffc0000
[  617.645271][   T34] audit: type=1326 audit(2000000084.030:4750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30243 comm="syz.6.10590" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754cd9e0d9 code=0x7ffc0000
[  618.634120][T30279] netlink: 'syz.6.10603': attribute type 2 has an invalid length.
[  618.930940][  T624] usb 7-1: new high-speed USB device number 53 using dummy_hcd
[  619.094619][  T624] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  619.099738][  T624] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  619.106488][  T624] usb 7-1: config 0 descriptor??
[  619.390314][T30302] sit1: entered promiscuous mode
[  619.554967][  T624] ath6kl: Failed to read usb control message: -71
[  619.558257][  T624] ath6kl: Unable to read the bmi data from the device: -71
[  619.560888][  T624] ath6kl: Unable to recv target info: -71
[  619.572230][  T624] ath6kl: Failed to init ath6kl core: -71
[  619.590063][  T624] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71
[  619.598991][  T624] usb 7-1: USB disconnect, device number 53
[  619.763142][T30330] netlink: 100 bytes leftover after parsing attributes in process `syz.5.10626'.
[  619.836815][T30338] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10630'.
[  620.680307][T30355] loop6: detected capacity change from 0 to 32768
[  620.751427][T30355] read_mapping_page failed!
[  620.762185][T30355] ERROR: (device loop6): txCommit: 
[  620.762185][T30355] 
[  620.928019][T30369] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3)
[  620.930175][T30369] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  620.933432][T30369] vhci_hcd vhci_hcd.0: Device attached
[  621.228145][   T31] usb 45-1: new low-speed USB device number 2 using vhci_hcd
[  621.230883][T25120] usb 7-1: new low-speed USB device number 54 using dummy_hcd
[  621.397001][T25120] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  621.402334][T25120] usb 7-1: config 0 has no interfaces?
[  621.406447][T25120] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  621.428232][T25120] usb 7-1: config 0 descriptor??
[  621.657435][T25120] usb 7-1: USB disconnect, device number 54
[  621.662613][T30370] vhci_hcd: connection closed
[  621.665307][   T13] vhci_hcd vhci_hcd.6: stop threads
[  621.669076][   T13] vhci_hcd vhci_hcd.6: release socket
[  621.674593][   T13] vhci_hcd vhci_hcd.6: disconnect device
[  621.726772][   T31] vhci_hcd vhci_hcd.6: vhci_device speed not set
[  622.098905][T30424] netlink: 'syz.5.10667': attribute type 1 has an invalid length.
[  622.101397][T30424] netlink: 1 bytes leftover after parsing attributes in process `syz.5.10667'.
[  622.724633][  T624] usb 7-1: new high-speed USB device number 55 using dummy_hcd
[  622.813883][T30464] fuse: fd is not a fuse device
[  622.892095][  T624] usb 7-1: Using ep0 maxpacket: 8
[  622.900053][  T624] usb 7-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f
[  622.916147][  T624] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  622.919917][  T624] usb 7-1: Product: syz
[  622.921691][  T624] usb 7-1: Manufacturer: syz
[  622.923538][  T624] usb 7-1: SerialNumber: syz
[  622.928325][  T624] usb 7-1: config 0 descriptor??
[  622.933784][  T624] usbtest 7-1:0.0: FX2 device
[  622.935495][  T624] usbtest 7-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt)
[  623.026429][T30476] netlink: 'syz.5.10693': attribute type 2 has an invalid length.
[  623.029466][T30476] netlink: 'syz.5.10693': attribute type 2 has an invalid length.
[  623.099463][T30488] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  623.155476][   T31] usb 7-1: USB disconnect, device number 55
[  623.877905][T30548] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10727'.
[  624.000901][T30558] loop6: detected capacity change from 0 to 8192
[  624.154401][T30564] loop6: detected capacity change from 0 to 32768
[  624.157531][T30564] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.10735 (30564)
[  624.169651][T30564] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  624.172886][T30564] BTRFS info (device loop6): using sha256 checksum algorithm
[  624.203472][T30564] BTRFS info (device loop6): enabling ssd optimizations
[  624.205812][T30564] BTRFS info (device loop6): turning on async discard
[  624.208180][T30564] BTRFS info (device loop6): enabling free space tree
[  624.247343][T17587] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  624.460659][T30601] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10745'.
[  625.408029][T30621] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10754'.
[  625.986047][  T624] usb 7-1: new low-speed USB device number 56 using dummy_hcd
[  626.151803][  T624] usb 7-1: unable to get BOS descriptor or descriptor too short
[  626.156942][  T624] usb 7-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40
[  626.165699][  T624] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  626.176455][  T624] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  626.192267][  T624] usb 7-1: string descriptor 0 read error: -22
[  626.194877][  T624] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  626.541919][  T624] usb 7-1: USB disconnect, device number 56
[  626.754281][T30676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10780'.
[  626.763362][T30676] netlink: 'syz.1.10780': attribute type 2 has an invalid length.
[  626.804700][T30679] overlayfs: failed to clone upperpath
[  627.102410][T30696] loop6: detected capacity change from 0 to 22
[  627.112296][T30696] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  627.154795][T30696] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  627.600977][  T624] usb 7-1: new full-speed USB device number 57 using dummy_hcd
[  627.656737][T30728] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10805'.
[  627.766918][  T624] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  627.775686][  T624] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  627.783041][  T624] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  627.797798][  T624] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  628.042522][  T624] usb 7-1: usb_control_msg returned -32
[  628.052225][  T624] usbtmc 7-1:16.0: can't read capabilities
[  628.153038][T30742] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10811'.
[  628.216116][T30747] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10811'.
[  628.279046][T30751] sctp: [Deprecated]: syz.1.10815 (pid 30751) Use of struct sctp_assoc_value in delayed_ack socket option.
[  628.279046][T30751] Use struct sctp_sack_info instead
[  628.321497][  T624] libceph: connect (1)[c::]:6789 error -22
[  628.323713][  T624] libceph: mon0 (1)[c::]:6789 connect error
[  628.439090][T30758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  628.448866][T30758] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  628.476020][T30753] ceph: No mds server is up or the cluster is laggy
[  630.536770][T30807] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[  630.642185][T13245] usb 7-1: USB disconnect, device number 57
[  631.037662][T30813] loop6: detected capacity change from 0 to 32768
[  631.253409][T30813] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  631.303691][T30813] XFS (loop6): Ending clean mount
[  631.493635][T17587] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  632.513453][T30872] loop6: detected capacity change from 0 to 8192
[  632.524258][   T34] kauditd_printk_skb: 15 callbacks suppressed
[  632.524268][   T34] audit: type=1800 audit(2000000097.769:4766): pid=30872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.10858" name="file1" dev="loop6" ino=1048685 res=0 errno=0
[  634.096308][ T5597] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  634.162936][T30903] fuse: fd is not a fuse device
[  635.040504][ T8626] syz_tun (unregistering): left allmulticast mode
[  635.042658][ T8626] syz_tun (unregistering): left promiscuous mode
[  635.045136][ T8626] bridge0: port 4(syz_tun) entered disabled state
[  635.401892][ T5652] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  635.717050][ T5652] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  635.817055][ T5652] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  635.866792][ T5600] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  635.881806][ T5600] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  635.888578][ T5600] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  635.900898][ T5600] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  635.904774][ T5600] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  636.030109][T30930] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0
[  636.195891][ T5652] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  636.510994][T30950] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10889'.
[  636.520131][T30950] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10889'.
[  636.537081][T30950] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10889'.
[  636.813718][T30922] wg0 speed is unknown, defaulting to 1000
[  636.935081][ T5652] bridge_slave_1: left allmulticast mode
[  636.937840][ T5652] bridge_slave_1: left promiscuous mode
[  636.950529][ T5652] bridge0: port 2(bridge_slave_1) entered disabled state
[  637.003900][ T5652] erspan0: left allmulticast mode
[  637.009151][ T5652] erspan0: left promiscuous mode
[  637.019174][ T5652] bridge5: port 1(erspan0) entered disabled state
[  637.076512][ T5652] pim6reg: left allmulticast mode
[  637.318283][ T5652] bond2 (unregistering): (slave ip6gre2): Releasing backup interface
[  637.321309][ T5652] ip6gre2 (unregistering): left promiscuous mode
[  637.441455][T10023] usb 7-1: new high-speed USB device number 58 using dummy_hcd
[  637.480910][ T5652] bond5 (unregistering): (slave geneve3): Releasing active interface
[  637.545902][ T5652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  637.549473][ T5652] bond0 (unregistering): Released all slaves
[  637.554808][ T5652] bond1 (unregistering): Released all slaves
[  637.565810][ T5652] bond2 (unregistering): Released all slaves
[  637.581996][ T5652] bond3 (unregistering): Released all slaves
[  637.589572][ T5652] bond4 (unregistering): Released all slaves
[  637.598494][ T5652] bond5 (unregistering): Released all slaves
[  637.605728][T10023] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  637.609689][T10023] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  637.617840][T10023] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  637.626340][T10023] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  637.629872][ T5652] bond6 (unregistering): Released all slaves
[  637.631890][T10023] usb 7-1: SerialNumber: syz
[  637.656809][ T5344] 8021q: adding VLAN 0 to HW filter on device eth13
[  637.780335][ T5652] tipc: Left network mode
[  637.953136][T10023] usb 7-1: skipping empty audio interface (v1)
[  638.068927][T10023] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22
[  638.122794][T10023] usb 7-1: USB disconnect, device number 58
[  638.181859][ T5602] udevd[5602]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  638.202127][ T5600] Bluetooth: hci0: command tx timeout
[  638.333216][T30994] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10903'.
[  638.372399][ T5344] 8021q: adding VLAN 0 to HW filter on device eth14
[  638.462075][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[  638.466988][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[  638.554998][T30922] bridge0: port 1(bridge_slave_0) entered blocking state
[  638.593736][T30922] bridge0: port 1(bridge_slave_0) entered disabled state
[  638.609898][T30922] bridge_slave_0: entered allmulticast mode
[  638.617920][T30922] bridge_slave_0: entered promiscuous mode
[  638.634408][T30922] bridge0: port 2(bridge_slave_1) entered blocking state
[  638.655860][T30922] bridge0: port 2(bridge_slave_1) entered disabled state
[  638.668699][T30922] bridge_slave_1: entered allmulticast mode
[  638.701135][T30922] bridge_slave_1: entered promiscuous mode
[  638.760309][ T5652] IPVS: stopping master sync thread 24339 ...
[  638.821054][ T5652] IPVS: stopping backup sync thread 8017 ...
[  639.013783][ T5344] 8021q: adding VLAN 0 to HW filter on device eth15
[  639.020456][T30922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  639.054188][T30922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  639.120032][T31017] loop6: detected capacity change from 0 to 128
[  639.148494][T30922] team0: Port device team_slave_0 added
[  639.151535][T30922] team0: Port device team_slave_1 added
[  639.182769][T31017] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  639.209940][T31017] ext4 filesystem being mounted at /1488/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  639.344792][T30922] batman_adv: batadv0: Adding interface: batadv_slave_0
[  639.375410][T30922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  639.401994][T17587] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  639.403086][T30922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  639.518304][T30922] batman_adv: batadv0: Adding interface: batadv_slave_1
[  639.525236][T30922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  639.543864][T30922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  639.640997][ T5344] 8021q: adding VLAN 0 to HW filter on device eth16
[  639.822678][T30922] hsr_slave_0: entered promiscuous mode
[  639.838313][T30922] hsr_slave_1: entered promiscuous mode
[  639.843815][T30922] debugfs: 'hsr0' already exists in 'hsr'
[  639.845746][T30922] Cannot create hsr debugfs directory
[  639.891745][T31048] tap0: tun_chr_ioctl cmd 1074025678
[  639.897651][T31048] tap0: group set to 0
[  640.454528][ T5600] Bluetooth: hci0: command tx timeout
[  640.601187][ T5652] hsr_slave_0: left promiscuous mode
[  640.605329][ T5652] hsr_slave_1: left promiscuous mode
[  640.610017][ T5652] batman_adv: batadv0: Removing interface: batadv_slave_1
[  641.255348][ T5652] team0 (unregistering): Port device team_slave_1 removed
[  641.280848][ T5652] team0 (unregistering): Port device team_slave_0 removed
[  641.534623][ T4907] smbdirect: ib_dev[syz2] removed
[  642.120055][T30922] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  642.129462][T30922] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  642.136642][T30922] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  642.153984][T30922] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  642.160688][T30922] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  642.164705][T30922] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  642.182112][T30922] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  642.197851][T30922] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  642.234123][ T5652] IPVS: stop unused estimator thread 0...
[  642.390763][T30922] 8021q: adding VLAN 0 to HW filter on device bond0
[  642.423926][T30922] 8021q: adding VLAN 0 to HW filter on device team0
[  642.478388][ T5597] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  642.487285][ T6012] bridge0: port 1(bridge_slave_0) entered blocking state
[  642.488916][ T5597] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  642.490134][ T6012] bridge0: port 1(bridge_slave_0) entered forwarding state
[  642.500892][ T5597] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  642.519625][ T5597] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  642.527189][ T5597] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  642.529928][ T6012] bridge0: port 2(bridge_slave_1) entered blocking state
[  642.532754][ T6012] bridge0: port 2(bridge_slave_1) entered forwarding state
[  642.712075][ T5597] Bluetooth: hci0: command tx timeout
[  642.867078][T30922] 8021q: adding VLAN 0 to HW filter on device batadv0
[  643.046494][T31115] bridge0: port 1(bridge_slave_0) entered blocking state
[  643.049138][T31115] bridge0: port 1(bridge_slave_0) entered disabled state
[  643.051648][T31115] bridge_slave_0: entered allmulticast mode
[  643.054358][T31115] bridge_slave_0: entered promiscuous mode
[  643.062681][T31115] bridge0: port 2(bridge_slave_1) entered blocking state
[  643.065221][T31115] bridge0: port 2(bridge_slave_1) entered disabled state
[  643.067886][T31115] bridge_slave_1: entered allmulticast mode
[  643.070496][T31115] bridge_slave_1: entered promiscuous mode
[  643.092317][T30922] veth0_vlan: entered promiscuous mode
[  643.096088][T31115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  643.100788][T31115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  643.112991][T30922] veth1_vlan: entered promiscuous mode
[  643.127792][T31115] team0: Port device team_slave_0 added
[  643.135101][T31115] team0: Port device team_slave_1 added
[  643.158422][T31115] batman_adv: batadv0: Adding interface: batadv_slave_0
[  643.164148][T31115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  643.176869][T31115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  643.181617][T30922] veth0_macvtap: entered promiscuous mode
[  643.185006][T31115] batman_adv: batadv0: Adding interface: batadv_slave_1
[  643.190000][T31115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  643.198181][T31115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  643.203227][T30922] veth1_macvtap: entered promiscuous mode
[  643.232153][T30922] batman_adv: batadv0: Interface activated: batadv_slave_0
[  643.248794][T31115] hsr_slave_0: entered promiscuous mode
[  643.252374][T31176] fuse: fd is not a fuse device
[  643.253761][T31115] hsr_slave_1: entered promiscuous mode
[  643.256097][T31115] debugfs: 'hsr0' already exists in 'hsr'
[  643.261999][T31115] Cannot create hsr debugfs directory
[  643.278519][T30922] batman_adv: batadv0: Interface activated: batadv_slave_1
[  643.332212][T22922] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  643.336600][T22922] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  643.647909][T10688] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  643.653025][T10688] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  643.692787][T10688] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  643.697039][T10688] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  643.826985][T31115] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  643.838112][T31115] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  643.842685][T31115] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  643.848525][T31115] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  643.851517][T31115] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  643.855477][T31115] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  643.859496][T31115] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  643.864223][T31115] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  643.925074][   T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  643.966128][T22922] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  644.007919][T31115] 8021q: adding VLAN 0 to HW filter on device bond0
[  644.034267][T31115] 8021q: adding VLAN 0 to HW filter on device team0
[  644.046302][T10688] bridge0: port 1(bridge_slave_0) entered blocking state
[  644.049348][T10688] bridge0: port 1(bridge_slave_0) entered forwarding state
[  644.072220][   T34] audit: type=1326 audit(2000000108.417:4767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31215 comm="syz.7.10955" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b6d9e0d9 code=0x7ffc0000
[  644.083121][T10688] bridge0: port 2(bridge_slave_1) entered blocking state
[  644.085438][T10688] bridge0: port 2(bridge_slave_1) entered forwarding state
[  644.091828][   T34] audit: type=1326 audit(2000000108.435:4768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31215 comm="syz.7.10955" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b6d9e0d9 code=0x7ffc0000
[  644.113755][   T34] audit: type=1326 audit(2000000108.435:4769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31215 comm="syz.7.10955" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b6d9e0d9 code=0x7ffc0000
[  644.121566][   T34] audit: type=1326 audit(2000000108.435:4770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31215 comm="syz.7.10955" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b6d9e0d9 code=0x7ffc0000
[  644.129636][   T34] audit: type=1326 audit(2000000108.435:4771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31215 comm="syz.7.10955" exe="/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f26b6d9e0d9 code=0x7ffc0000
[  644.137604][   T34] audit: type=1326 audit(2000000108.435:4772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31215 comm="syz.7.10955" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b6d9e0d9 code=0x7ffc0000
[  644.160902][   T34] audit: type=1326 audit(2000000108.435:4773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31215 comm="syz.7.10955" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b6d9e0d9 code=0x7ffc0000
[  644.171487][T31115] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  644.184647][   T34] audit: type=1326 audit(2000000108.435:4774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31215 comm="syz.7.10955" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b6d9e0d9 code=0x7ffc0000
[  644.201481][   T34] audit: type=1326 audit(2000000108.435:4775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31215 comm="syz.7.10955" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b6d9e0d9 code=0x7ffc0000
[  644.217816][   T34] audit: type=1326 audit(2000000108.435:4776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31215 comm="syz.7.10955" exe="/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f26b6d9e0d9 code=0x7ffc0000
[  644.275336][T31226] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  644.416451][T31115] 8021q: adding VLAN 0 to HW filter on device batadv0
[  644.498963][T31235] loop7: detected capacity change from 0 to 32768
[  644.512593][T31245] nbd: must specify at least one socket
[  644.526424][T31235] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.10960 (31235)
[  644.564004][T31235] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  644.568703][T31115] veth0_vlan: entered promiscuous mode
[  644.570938][T31235] BTRFS info (device loop7): using sha256 checksum algorithm
[  644.588740][T31115] veth1_vlan: entered promiscuous mode
[  644.611382][T31115] veth0_macvtap: entered promiscuous mode
[  644.618099][T31115] veth1_macvtap: entered promiscuous mode
[  644.634256][T31115] batman_adv: batadv0: Interface activated: batadv_slave_0
[  644.636806][T31235] BTRFS info (device loop7): enabling ssd optimizations
[  644.642832][T31115] batman_adv: batadv0: Interface activated: batadv_slave_1
[  644.647709][T31235] BTRFS info (device loop7): turning on async discard
[  644.656216][T31235] BTRFS info (device loop7): enabling free space tree
[  644.740170][ T5652] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  644.745177][ T5652] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  644.812594][ T5597] Bluetooth: hci1: command tx timeout
[  644.832958][T30922] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  644.871217][ T6167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  644.906022][ T6167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  644.909447][   T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  644.926315][   T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  644.987099][ T5597] Bluetooth: hci0: command tx timeout
[  645.087045][T10688] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  645.089563][T10688] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  645.423131][T31278] loop7: detected capacity change from 0 to 8
[  645.511049][T31278] squashfs image failed sanity check
[  646.024950][ T5704] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  646.188012][ T5704] usb 9-1: Using ep0 maxpacket: 16
[  646.196912][ T5704] usb 9-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=91.34
[  646.205052][ T5704] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  646.212450][ T5704] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 4
[  646.223416][ T5704] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  646.226904][ T5704] usb 9-1: Product: syz
[  646.229060][ T5704] usb 9-1: Manufacturer: syz
[  646.232729][ T5704] usb 9-1: SerialNumber: syz
[  646.246884][ T5704] usb 9-1: config 0 descriptor??
[  646.309749][ T5704] usb 9-1: selecting invalid altsetting 1
[  646.317642][ T5704] flexcop_usb: set interface failed.
[  646.320124][ T5704] b2c2_flexcop_usb 9-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22
[  646.428498][T31294] usb usb8: usbfs: interface 0 claimed by hub while 'syz.7.10971' sets config #9
[  646.558620][   T10] usb 9-1: USB disconnect, device number 2
[  646.657747][T31305] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10977'.
[  647.044049][ T5597] Bluetooth: hci1: command tx timeout
[  647.190346][T31314] loop8: detected capacity change from 0 to 128
[  647.270637][T31314] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  647.277155][T31314] System zones: 1-3, 19-19, 35-36
[  647.286053][T31314] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  647.292363][T31314] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  647.371186][T31314] EXT4-fs (loop8): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro.
[  647.454288][T31115] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  647.862477][T31344] netlink: 'syz.7.10993': attribute type 12 has an invalid length.
[  648.220789][T31360] netlink: 60 bytes leftover after parsing attributes in process `syz.5.11001'.
[  648.263374][T31364] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  648.503206][T31390] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11015'.
[  648.506090][T31390] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11015'.
[  648.703259][T31404] loop7: detected capacity change from 0 to 4096
[  648.743806][T31404] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512).
[  648.756943][T31404] ntfs3(loop7): Failed to load $BadClus (-22).
[  648.862083][T31421] loop8: detected capacity change from 0 to 1024
[  648.887302][T31421] hfsplus: invalid length 1280 has been corrected to 255
[  649.070574][T13245] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  649.234123][T13245] usb 8-1: Using ep0 maxpacket: 32
[  649.236407][T13245] usb 8-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  649.240235][T13245] usb 8-1: config 0 has an invalid interface number: 35 but max is 0
[  649.243091][T13245] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  649.246384][   T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  649.248801][T13245] usb 8-1: config 0 has no interface number 0
[  649.250811][T13245] usb 8-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  649.260190][T13245] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  649.263294][T13245] usb 8-1: Product: syz
[  649.264699][T13245] usb 8-1: Manufacturer: syz
[  649.266264][T13245] usb 8-1: SerialNumber: syz
[  649.271160][T13245] usb 8-1: config 0 descriptor??
[  649.274987][T13245] radio-si470x 8-1:0.35: could not find interrupt in endpoint
[  649.277494][T13245] radio-si470x 8-1:0.35: probe with driver radio-si470x failed with error -5
[  649.298360][ T5597] Bluetooth: hci1: command tx timeout
[  649.417267][   T10] usb 9-1: Using ep0 maxpacket: 8
[  649.420961][   T10] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  649.424910][   T10] usb 9-1: config 179 has an invalid interface number: 65 but max is 0
[  649.427528][   T10] usb 9-1: config 179 has no interface number 0
[  649.429728][   T10] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  649.433137][   T10] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  649.437259][   T10] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  649.441818][   T10] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  649.446338][   T10] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  649.451736][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  649.456981][T31431] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  649.493819][T13245] radio-raremono 8-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  649.707079][   T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input37
[  649.717777][T13245] radio-raremono 8-1:0.35: raremono_cmd_main failed (-71)
[  649.744033][T13245] radio-raremono 8-1:0.35: V4L2 device registered as radio48
[  649.756688][T13245] usb 8-1: USB disconnect, device number 2
[  649.759187][T13245] radio-raremono 8-1:0.35: Thanko's Raremono disconnected
[  650.147803][   T31] usb 9-1: USB disconnect, device number 3
[  650.147823][    C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  650.152977][    C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  650.505466][T31460] loop7: detected capacity change from 0 to 32768
[  650.534377][T31460] JBD2: Ignoring recovery information on journal
[  650.575015][T31460] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  650.668744][T30922] ocfs2: Unmounting device (7,7) on (node local)
[  650.812376][T31466] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11046'.
[  650.852754][T31468] loop7: detected capacity change from 0 to 512
[  650.861265][T31468] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  650.964926][T31468] EXT4-fs (loop7): 1 truncate cleaned up
[  650.967716][T31468] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  650.985327][T30922] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  651.223374][T31477] loop7: detected capacity change from 0 to 8192
[  651.345657][T31486] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11055'.
[  651.350960][T31486] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11055'.
[  651.398592][T31492] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11058'.
[  651.404349][T31492] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11058'.
[  651.557631][T31501] netlink: 71 bytes leftover after parsing attributes in process `syz.5.11062'.
[  651.563510][ T5597] Bluetooth: hci1: command tx timeout
[  651.885928][T31518] loop8: detected capacity change from 0 to 1024
[  652.404432][T31536] loop7: detected capacity change from 0 to 256
[  652.487411][T31538] overlay: filesystem on ./bus not supported
[  652.706514][T31547] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11079'.
[  652.801004][T31550] netlink: 'syz.5.11080': attribute type 19 has an invalid length.
[  653.980766][T31585] loop7: detected capacity change from 0 to 32768
[  653.985192][T31585] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.11093 (31585)
[  654.006139][T31586] loop8: detected capacity change from 0 to 32768
[  654.026062][T31586] ocfs2: Slot 0 on device (7,8) was already allocated to this node!
[  654.029059][T31585] BTRFS info (device loop7): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  654.029205][T31585] BTRFS info (device loop7): using crc32c checksum algorithm
[  654.063072][T31586] JBD2: Ignoring recovery information on journal
[  654.074665][T31585] BTRFS info (device loop7): enabling ssd optimizations
[  654.079569][T31585] BTRFS info (device loop7): turning on async discard
[  654.082154][T31585] BTRFS info (device loop7): enabling free space tree
[  654.105713][T31586] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  654.260718][T30922] BTRFS info (device loop7): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  654.373511][T31115] ocfs2: Unmounting device (7,8) on (node local)
[  654.562212][T31632] jffs2: notice: (31632) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  654.898981][T31663] loop8: detected capacity change from 0 to 2048
[  654.918568][T31663] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c128, mo2=0003]
[  654.922262][T31663] System zones: 0-7
[  654.929184][T31663] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  654.947264][T31663] EXT4-fs error (device loop8): ext4_ext_precache:631: inode #2: comm syz.8.11114: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[  654.971191][T31663] EXT4-fs (loop8): Remounting filesystem read-only
[  654.985109][T31115] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  655.330457][   T31] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  655.519307][   T31] usb 9-1: Using ep0 maxpacket: 16
[  655.545407][   T31] usb 9-1: New USB device found, idVendor=2013, idProduct=0245, bcdDevice=61.15
[  655.567605][   T31] usb 9-1: config 1 has an invalid interface number: 2 but max is 0
[  655.571017][   T31] usb 9-1: config 1 has no interface number 0
[  655.574610][   T31] usb 9-1: config 1 interface 2 has no altsetting 0
[  655.579347][   T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  655.594647][   T31] usb 9-1: Product: syz
[  655.596395][   T31] usb 9-1: Manufacturer: syz
[  655.598194][   T31] usb 9-1: SerialNumber: syz
[  655.832367][   T31] dvb-usb: found a 'Pinnacle PCTV 73e SE' in cold state, will try to load a firmware
[  655.872087][   T31] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  655.875156][   T31] dib0700: firmware download failed at 7 with -22
[  655.883407][   T31] usb 9-1: USB disconnect, device number 4
[  655.933818][T31687] netlink: 104 bytes leftover after parsing attributes in process `syz.5.11124'.
[  656.945483][T31710] netlink: 'syz.8.11134': attribute type 12 has an invalid length.
[  657.031870][T31720] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11140'.
[  657.197985][T31740] gadgetfs: bound to dummy_udc driver
[  657.204657][T31742] netlink: 72 bytes leftover after parsing attributes in process `syz.5.11149'.
[  657.458744][   T10] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  657.462482][    C0] gadgetfs: connected
[  657.467774][   T10] gadgetfs: disconnected
[  657.497911][T31751] loop8: detected capacity change from 0 to 16
[  657.500920][T31751] MTD: Attempt to mount non-MTD device "/dev/loop8"
[  657.531858][T31753] loop8: detected capacity change from 0 to 64
[  657.573829][T31755] netlink: 'syz.8.11153': attribute type 3 has an invalid length.
[  657.576336][T31755] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11153'.
[  657.851382][T13245] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  658.011478][T13245] usb 9-1: Using ep0 maxpacket: 16
[  658.016076][T13245] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  658.021062][T13245] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  658.025642][T13245] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  658.032560][T13245] usb 9-1: config 0 descriptor??
[  658.266314][T13245] usb 9-1: USB disconnect, device number 5
[  659.527073][T31818] loop8: detected capacity change from 0 to 40427
[  659.668805][T31826] bridge0: entered allmulticast mode
[  659.679006][T31826] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11185'.
[  659.686482][T31826] bridge_slave_1: left allmulticast mode
[  659.690177][T31826] bridge_slave_1: left promiscuous mode
[  659.695345][T31826] bridge0: port 2(bridge_slave_1) entered disabled state
[  659.710370][T31826] bridge_slave_0: left allmulticast mode
[  659.712458][T31826] bridge_slave_0: left promiscuous mode
[  659.714970][T31826] bridge0: port 1(bridge_slave_0) entered disabled state
[  659.729161][T31826] bridge0 (unregistering): left allmulticast mode
[  660.771615][T31863] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11201'.
[  660.774460][T31863] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11201'.
[  660.808323][T31865] netlink: 128 bytes leftover after parsing attributes in process `syz.8.11202'.
[  660.812187][T31865] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  660.862406][T31867] loop8: detected capacity change from 0 to 512
[  660.866465][T31867] EXT4-fs: Ignoring removed bh option
[  660.910234][T31867] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  660.915299][T31867] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  660.928402][T31867] EXT4-fs error (device loop8): ext4_search_dir:1474: inode #2: block 3: comm syz.8.11203: bad entry in directory: directory entry overrun - offset=16444, inode=113, rec_len=2048, size=2048 fake=0
[  660.936577][T31867] EXT4-fs (loop8): Remounting filesystem read-only
[  660.955044][T31115] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  661.156004][T31878] loop8: detected capacity change from 0 to 4096
[  661.666754][T31911] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11222'.
[  661.701066][T31914] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not ''
[  661.991104][T31938] loop8: detected capacity change from 0 to 4096
[  661.995037][T31938] EXT4-fs: quotafile must be on filesystem root
[  662.014792][T31944] netlink: 20 bytes leftover after parsing attributes in process `syz.7.11237'.
[  662.142187][   T34] kauditd_printk_skb: 9 callbacks suppressed
[  662.142204][   T34] audit: type=1326 audit(2000000125.099:4786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31937 comm="syz.8.11235" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4136d9e0d9 code=0x0
[  662.252057][T31946] loop7: detected capacity change from 0 to 40427
[  662.268820][T31946] F2FS-fs (loop7): invalid crc value
[  662.313165][T31946] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  662.324206][T31946] F2FS-fs (loop7): f2fs_disable_checkpoint starts, unusable: 0
[  662.326956][T31946] F2FS-fs (loop7): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  662.330358][T31946] F2FS-fs (loop7): Start checkpoint disabled!
[  662.350996][T31946] F2FS-fs (loop7): f2fs_disable_checkpoint finishes, err:0
[  662.355862][T31946] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  662.610166][T31955] loop7: detected capacity change from 0 to 4096
[  662.654591][   T34] audit: type=1326 audit(2000000125.570:4787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31954 comm="syz.7.11241" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b6d9e0d9 code=0x7ffc0000
[  662.679162][   T34] audit: type=1326 audit(2000000125.570:4788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31954 comm="syz.7.11241" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b6d9e0d9 code=0x7ffc0000
[  662.694651][   T34] audit: type=1326 audit(2000000125.570:4789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31954 comm="syz.7.11241" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b6d9e0d9 code=0x7ffc0000
[  662.702270][   T34] audit: type=1326 audit(2000000125.570:4790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31954 comm="syz.7.11241" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b6d9e0d9 code=0x7ffc0000
[  662.711102][   T34] audit: type=1326 audit(2000000125.579:4791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31954 comm="syz.7.11241" exe="/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f26b6d9e0d9 code=0x7ffc0000
[  662.718953][   T34] audit: type=1326 audit(2000000125.579:4792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31954 comm="syz.7.11241" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b6d9e0d9 code=0x7ffc0000
[  662.727846][   T34] audit: type=1326 audit(2000000125.579:4793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31954 comm="syz.7.11241" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b6d9e0d9 code=0x7ffc0000
[  662.738525][   T34] audit: type=1326 audit(2000000125.579:4794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31954 comm="syz.7.11241" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b6d9e0d9 code=0x7ffc0000
[  662.745571][   T34] audit: type=1326 audit(2000000125.579:4795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31954 comm="syz.7.11241" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b6d9e0d9 code=0x7ffc0000
[  662.757771][T17778] IPVS: starting estimator thread 0...
[  662.859464][T31956] IPVS: using max 106 ests per chain, 254400 per kthread
[  663.067488][T31975] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11250'.
[  663.076302][T31975] netlink: 65011 bytes leftover after parsing attributes in process `syz.8.11250'.
[  663.135768][T31979] Invalid ELF header len 4
[  663.154605][T31983] netlink: 20 bytes leftover after parsing attributes in process `syz.8.11254'.
[  663.462992][T13245] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  663.485875][T32009] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11266'.
[  663.578955][T32017] loop7: detected capacity change from 0 to 512
[  663.587644][T32017] EXT4-fs: Ignoring removed nomblk_io_submit option
[  663.590963][T32017] EXT4-fs: Ignoring removed mblk_io_submit option
[  663.600465][T32017] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  663.604090][T32017] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2
[  663.621429][T32017] EXT4-fs (loop7): 1 truncate cleaned up
[  663.624416][T32017] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  663.629035][T13245] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  663.633213][T13245] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  663.637226][T32017] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #2: block 4: comm syz.7.11270: lblock 0 mapped to illegal pblock 4 (length 1)
[  663.641787][T13245] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  663.645134][T32017] EXT4-fs (loop7): Remounting filesystem read-only
[  663.647635][T13245] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  663.656866][T13245] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  663.663300][T13245] usb 9-1: config 0 descriptor??
[  663.680946][T30922] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  663.730023][T32020] loop7: detected capacity change from 0 to 64
[  663.753926][T32020] BFS-fs: bfs_fill_super(): Inode 0x00000032 corrupted on loop7
[  663.831173][T32024] loop7: detected capacity change from 0 to 8
[  663.848384][T32024] SQUASHFS error: Failed to read block 0x29b: -5
[  663.860824][T32024] SQUASHFS error: Unable to read metadata cache entry [299]
[  663.989261][T32030] loop8: detected capacity change from 0 to 8
[  663.993611][T32030] Dev loop8: unable to read RDB block 8
[  663.996411][T32030]  loop8: unable to read partition table
[  663.998554][T32030] loop8: partition table beyond EOD, truncated
[  664.000730][T32030] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5)
[  664.101021][T32034] xt_CT: No such helper "pptp"
[  664.128314][T13245] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[  666.436800][T16606] usb 9-1: reset high-speed USB device number 6 using dummy_hcd
[  666.642570][T16606] usb 9-1: device firmware changed
[  666.665696][T17778] usb 9-1: USB disconnect, device number 6
[  666.858676][T17778] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  666.870639][T32094] __nla_validate_parse: 1 callbacks suppressed
[  666.870649][T32094] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11306'.
[  666.875780][T32094] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11306'.
[  667.029446][T17778] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  667.033584][T17778] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  667.037923][T17778] usb 9-1: config 0 descriptor??
[  667.263985][T17778] usb 9-1: Cannot read MAC address
[  667.266137][T17778] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  667.273054][T17778] usb 9-1: USB disconnect, device number 7
[  667.340431][T32106] netlink: 'syz.7.11312': attribute type 1 has an invalid length.
[  667.626620][T32112] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  667.841286][T32128] loop7: detected capacity change from 0 to 512
[  667.843750][T32128] EXT4-fs: Ignoring removed nobh option
[  667.860401][T32128] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.11323: corrupted in-inode xattr: e_value size too large
[  667.865725][T32128] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  667.865953][T32128] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.11323: couldn't read orphan inode 15 (err -117)
[  667.872496][T32128] loop7: lost filesystem error report for type 5 error -117
[  667.875409][T32128] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  667.904877][T32128] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.11323: invalid indirect mapped block 234881024 (level 0)
[  667.912139][   T34] kauditd_printk_skb: 93 callbacks suppressed
[  667.912148][   T34] audit: type=1800 audit(2000000130.405:4889): pid=32128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.11323" name="file0" dev="loop7" ino=13 res=0 errno=0
[  667.925156][T32133] loop8: detected capacity change from 0 to 2048
[  667.945329][T30922] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  667.971575][T32133] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  668.012449][T31115] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  668.045520][T32137] netlink: 148 bytes leftover after parsing attributes in process `syz.7.11325'.
[  668.138799][T32137] netlink: 148 bytes leftover after parsing attributes in process `syz.7.11325'.
[  668.262992][T32147] PM: Enabling pm_trace changes system date and time during resume.
[  668.262992][T32147] PM: Correct system time has to be restored manually after resume.
[  669.156851][T32174] openvswitch: netlink: IP tunnel dst address not specified
[  669.159976][T32174] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  669.279966][T32182] netlink: 80 bytes leftover after parsing attributes in process `syz.8.11346'.
[  669.497112][T32204] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11357'.
[  669.501476][T32204] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11357'.
[  669.591089][T32210] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11360'.
[  669.911410][   T10] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  670.087636][   T10] usb 9-1: unable to get BOS descriptor or descriptor too short
[  670.090142][   T10] usb 9-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40
[  670.094011][   T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  670.097426][   T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  670.102181][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  670.104927][   T10] usb 9-1: Product: syz
[  670.106865][   T10] usb 9-1: Manufacturer: syz
[  670.108452][   T10] usb 9-1: SerialNumber: syz
[  670.399932][   T10] usb 9-1: USB disconnect, device number 8
[  670.445994][ T5755] udevd[5755]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  670.937102][T32249] cgroup: release_agent respecified
[  670.978160][T32251] overlayfs: failed to clone upperpath
[  671.032405][T32253] loop8: detected capacity change from 0 to 4096
[  671.035887][   T34] audit: type=1326 audit(2000000133.293:4890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32254 comm="syz.5.11381" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05dd9e0d9 code=0x7ffc0000
[  671.048285][   T34] audit: type=1326 audit(2000000133.293:4891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32254 comm="syz.5.11381" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05dd9e0d9 code=0x7ffc0000
[  671.058186][   T34] audit: type=1326 audit(2000000133.311:4892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32254 comm="syz.5.11381" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05dd9e0d9 code=0x7ffc0000
[  671.067153][    C1] bridge0: port 1(bridge_slave_0) entered forwarding state
[  671.067202][    C1] bridge0: topology change detected, propagating
[  671.067472][    C1] bridge0: port 2(bridge_slave_1) entered forwarding state
[  671.067483][    C1] bridge0: topology change detected, propagating
[  671.080320][ T1371] ieee802154 phy0 wpan0: encryption failed: -22
[  671.084037][ T1371] ieee802154 phy1 wpan1: encryption failed: -22
[  671.089259][   T34] audit: type=1326 audit(2000000133.311:4893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32254 comm="syz.5.11381" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05dd9e0d9 code=0x7ffc0000
[  671.098931][T32256] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  671.104678][   T34] audit: type=1326 audit(2000000133.320:4894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32254 comm="syz.5.11381" exe="/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fa05dd9e0d9 code=0x7ffc0000
[  671.125358][   T34] audit: type=1326 audit(2000000133.320:4895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32254 comm="syz.5.11381" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05dd9e0d9 code=0x7ffc0000
[  671.143000][   T34] audit: type=1326 audit(2000000133.320:4896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32254 comm="syz.5.11381" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05dd9e0d9 code=0x7ffc0000
[  671.154097][   T34] audit: type=1326 audit(2000000133.320:4897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32254 comm="syz.5.11381" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa05dd9e0d9 code=0x7ffc0000
[  671.167332][   T34] audit: type=1326 audit(2000000133.320:4898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32254 comm="syz.5.11381" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa05dd9e0d9 code=0x7ffc0000
[  671.181411][T32258] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11382'.
[  671.443935][T32281] xt_socket: unknown flags 0x8
[  671.490446][T32283] netlink: 4804 bytes leftover after parsing attributes in process `syz.8.11395'.
[  671.776427][T17778] usb 9-1: new full-speed USB device number 9 using dummy_hcd
[  671.940219][T17778] usb 9-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39
[  671.945307][T17778] usb 9-1: config 0 has an invalid interface number: 200 but max is 0
[  671.948668][T17778] usb 9-1: config 0 has no interface number 0
[  671.951441][T17778] usb 9-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xD8, changing to 0x88
[  671.956250][T17778] usb 9-1: config 0 interface 200 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0
[  671.960438][T17778] usb 9-1: config 0 interface 200 has no altsetting 0
[  671.965796][T17778] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  671.969168][T17778] usb 9-1: Product: syz
[  671.971762][T17778] usb 9-1: Manufacturer: syz
[  671.973756][T17778] usb 9-1: SerialNumber: syz
[  671.977857][T17778] usb 9-1: config 0 descriptor??
[  672.207483][T17778] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.200/input/input39
[  672.223462][T17778] usb 9-1: USB disconnect, device number 9
[  673.157258][T32328] loop7: detected capacity change from 0 to 32768
[  673.342757][T32334] ALSA: mixer_oss: invalid OSS volume ''
[  673.453890][T32343] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11422'.
[  673.534812][T32349] loop8: detected capacity change from 0 to 4096
[  673.537782][T32349] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512).
[  673.557284][T32349] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  673.693114][T32361] loop8: detected capacity change from 0 to 256
[  674.001476][T32382] loop7: detected capacity change from 0 to 128
[  674.032556][T32382] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  674.054610][T32382] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  674.107475][T30922] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  674.108654][T32396] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11447'.
[  674.169607][   T34] kauditd_printk_skb: 9 callbacks suppressed
[  674.169618][   T34] audit: type=1326 audit(2000000136.190:4908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32401 comm="syz.5.11449" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa05dd9e0d9 code=0x0
[  674.475340][T32414] loop7: detected capacity change from 0 to 32768
[  674.494138][T32414] OCFS2: ERROR (device loop7): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #71: fs_generation is 3923181505
[  674.502122][T32414] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  674.505282][T32414] OCFS2: File system is now read-only.
[  674.509591][T32414] (syz.7.11453,32414,0):ocfs2_read_locked_inode:633 ERROR: status = -30
[  674.512309][T32414] (syz.7.11453,32414,0):_ocfs2_get_system_file_inode:141 ERROR: status = -30
[  674.517247][T32414] (syz.7.11453,32414,0):ocfs2_init_global_system_inodes:465 ERROR: status = -30
[  674.523877][T32414] (syz.7.11453,32414,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 4, possibly corrupt fs?
[  674.523892][T32414] (syz.7.11453,32414,0):ocfs2_init_global_system_inodes:476 ERROR: status = -30
[  674.533179][T32414] (syz.7.11453,32414,0):ocfs2_initialize_super:2195 ERROR: status = -30
[  674.536180][T32414] (syz.7.11453,32414,0):ocfs2_fill_super:1177 ERROR: status = -30
[  674.552621][T32424] netlink: 'syz.8.11458': attribute type 4 has an invalid length.
[  674.557949][T32424] netlink: 'syz.8.11458': attribute type 8 has an invalid length.
[  674.569026][T32424] netlink: 212 bytes leftover after parsing attributes in process `syz.8.11458'.
[  674.725042][T32430] loop7: detected capacity change from 0 to 4096
[  674.729589][T32430] ntfs3(loop7): Primary boot: invalid record size -127.
[  674.734691][T32430] ntfs3(loop7): try to read out of volume at offset 0x1ffe00
[  674.804618][T32438] loop7: detected capacity change from 0 to 2048
[  674.812633][T32440] netlink: 'syz.8.11466': attribute type 1 has an invalid length.
[  674.819720][T32438] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  674.847273][T32440] bond1: entered promiscuous mode
[  674.850609][T32440] bond1: entered allmulticast mode
[  674.854441][T32440] 8021q: adding VLAN 0 to HW filter on device bond1
[  674.981755][T32447] loop8: detected capacity change from 0 to 128
[  674.989677][T32447] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  675.002749][T32447] hpfs: filesystem error: improperly stopped
[  675.006860][T32447] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  675.011019][T32447] hpfs: You really don't want any checks? You are crazy...
[  675.015757][T32447] hpfs: hpfs_map_sector(): read error
[  675.021051][T32447] hpfs: code page support is disabled
[  675.023347][T32447] hpfs: hpfs_map_4sectors(): unaligned read
[  675.025515][T32447] hpfs: hpfs_map_4sectors(): unaligned read
[  675.032224][T32447] hpfs: filesystem error: unable to find root dir
[  675.159392][T32461] loop7: detected capacity change from 0 to 256
[  675.174267][T32461] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  675.200482][T32461] exFAT-fs (loop7): valid_size(150994954) is greater than size(10)
[  675.247376][T32466] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11478'.
[  675.385629][   T34] audit: type=1326 audit(2000000137.306:4909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32469 comm="syz.7.11480" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b6d9e0d9 code=0x7ffc0000
[  675.406917][   T34] audit: type=1326 audit(2000000137.306:4910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32469 comm="syz.7.11480" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b6d9e0d9 code=0x7ffc0000
[  675.430487][   T34] audit: type=1326 audit(2000000137.316:4911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32469 comm="syz.7.11480" exe="/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f26b6d9e0d9 code=0x7ffc0000
[  675.444348][T32468] (syz.8.11479,32468,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  675.449109][T32468] (syz.8.11479,32468,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  675.462921][   T34] audit: type=1326 audit(2000000137.325:4912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32469 comm="syz.7.11480" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b6d9e0d9 code=0x7ffc0000
[  675.463304][T32468] JBD2: Ignoring recovery information on journal
[  675.478869][   T34] audit: type=1326 audit(2000000137.325:4913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32469 comm="syz.7.11480" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b6d9e0d9 code=0x7ffc0000
[  675.487316][T32468] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  675.826046][T32484] 9p: Bad value for 'rfdno'
[  676.014009][ T5597] Bluetooth: hci1: command 0x0406 tx timeout
[  676.137266][T32492] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  676.227636][T30922] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  676.489188][T32504] set_capacity_and_notify: 2 callbacks suppressed
[  676.489200][T32504] loop7: detected capacity change from 0 to 128
[  677.069657][T31115] ocfs2: Unmounting device (7,8) on (node local)
[  677.702834][T32550] Bluetooth: MGMT ver 1.23
[  677.733100][T32553] netlink: 598 bytes leftover after parsing attributes in process `syz.7.11515'.
[  678.061683][T32578] 9pnet_fd: Insufficient options for proto=fd
[  678.597676][T32582] loop8: detected capacity change from 0 to 131072
[  678.601060][T32582] F2FS-fs (loop8): invalid crc value
[  678.633723][T32582] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  678.643960][T32582] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[  679.228852][T32606] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11538'.
[  679.334288][T32612] loop8: detected capacity change from 0 to 256
[  679.374587][T32614] x_tables: duplicate underflow at hook 3
[  679.396895][T32616] loop8: detected capacity change from 0 to 128
[  679.409103][T32616] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  679.420204][T32616] ext4 filesystem being mounted at /166/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  679.447860][T31115] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  679.718087][T32636] netlink: 'syz.8.11552': attribute type 21 has an invalid length.
[  680.895744][T32667] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11568'.
[  681.427952][T32683] overlayfs: failed to clone lowerpath
[  681.455994][T32683] overlayfs: failed to clone lowerpath
[  681.532471][T32685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  682.060945][T13245] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  682.233940][T13245] usb 9-1: Using ep0 maxpacket: 32
[  682.247738][T13245] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  682.257059][T13245] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  682.272394][T13245] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  682.283563][T13245] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  682.290830][T13245] usb 9-1: Product: syz
[  682.292352][T13245] usb 9-1: Manufacturer: syz
[  682.309991][T13245] hub 9-1:4.0: USB hub found
[  682.488024][T32736] tmpfs: Bad value for 'nr_inodes'
[  682.531712][T13245] hub 9-1:4.0: config failed, hub has too many ports! (err -19)
[  682.611578][T32746] ip_tables: iptables: counters copy to user failed while replacing table
[  682.873588][T13245] usb 9-1: USB disconnect, device number 10
[  682.997620][T32756] loop7: detected capacity change from 0 to 32768
[  683.061708][T32756] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  683.080797][T32756] XFS (loop7): Ending clean mount
[  683.098194][T30922] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  683.764743][  T323] SET target dimension over the limit!
[  684.076949][  T342] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  684.201759][  T348] cifs: Bad value for 'source'
[  684.871281][  T374] loop8: detected capacity change from 0 to 1024
[  685.070822][  T380] loop8: detected capacity change from 0 to 32768
[  685.089394][  T380] *** Log Is Dirty ! ***
[  685.092922][  T380] lmLogInit: exit(-22)
[  685.094297][  T380] lmLogOpen: exit(-22)
[  685.096811][  T380] jfs_dirty_inode called on read-only volume
[  685.100593][  T380] Is remount racy?
[  685.220407][  T384] loop8: detected capacity change from 0 to 256
[  685.225995][  T384] exfat: Deprecated parameter 'utf8'
[  685.229609][  T384] exfat: Deprecated parameter 'namecase'
[  685.234669][  T384] exfat: Deprecated parameter 'namecase'
[  685.237837][  T384] exfat: Deprecated parameter 'utf8'
[  685.242453][  T384] exFAT-fs (loop8): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  685.246313][  T384] exFAT-fs (loop8): failed to test first cluster bit of root dir(5)
[  685.466462][  T400] netlink: 'syz.5.11652': attribute type 1 has an invalid length.
[  685.468953][  T400] netlink: 'syz.5.11652': attribute type 2 has an invalid length.
[  685.514088][  T396] loop8: detected capacity change from 0 to 32768
[  685.537591][  T396] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  685.643352][T31115] ocfs2: Unmounting device (7,8) on (node local)
[  685.878255][  T414] loop8: detected capacity change from 0 to 32768
[  685.881403][  T414] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.11658 (414)
[  685.887294][  T414] BTRFS info (device loop8 state S): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  685.890758][  T414] BTRFS info (device loop8 state S): using sha256 checksum algorithm
[  685.893373][  T414] BTRFS error (device loop8 state S): ignoremetacsums must be used with ro mount option
[  685.896476][  T414] BTRFS error (device loop8 state S): open_ctree failed: -22
[  686.080025][  T421] loop8: detected capacity change from 0 to 40427
[  686.083379][  T421] F2FS-fs (loop8): build fault injection rate: 174
[  686.085493][  T421] F2FS-fs (loop8): build fault injection type: 0x3bfe8c
[  686.088900][  T421] F2FS-fs (loop8): invalid crc value
[  686.118805][  T421] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  686.128040][  T421] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  686.154116][  T421] F2FS-fs (loop8): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  686.160395][  T421] F2FS-fs (loop8): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8c1/0xdf0
[  686.164372][  T421] F2FS-fs (loop8): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0]
[  686.174618][  T421] F2FS-fs (loop8): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  686.183646][  T421] F2FS-fs (loop8): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  686.191874][  T421] F2FS-fs (loop8): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  686.200020][  T421] F2FS-fs (loop8): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  686.209496][  T421] F2FS-fs (loop8): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  686.214935][  T421] F2FS-fs (loop8): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  686.219877][  T426] F2FS-fs (loop8): inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0xfd7/0x1840
[  686.239855][  T426] CPU: 0 UID: 0 PID: 426 Comm: syz.8.11661 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  686.239872][  T426] Tainted: [L]=SOFTLOCKUP
[  686.239875][  T426] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  686.239880][  T426] Call Trace:
[  686.239885][  T426]  <TASK>
[  686.239889][  T426]  dump_stack_lvl+0xe8/0x150
[  686.239906][  T426]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  686.239919][  T426]  ? f2fs_write_single_data_page+0xfd7/0x1840
[  686.239936][  T426]  f2fs_balance_fs+0x349/0x870
[  686.239947][  T426]  ? f2fs_write_single_data_page+0xfd7/0x1840
[  686.239958][  T426]  ? __pfx_f2fs_balance_fs+0x10/0x10
[  686.239968][  T426]  ? __lock_acquire+0x683/0x2cf0
[  686.239983][  T426]  ? folio_unlock+0x101/0x160
[  686.239997][  T426]  f2fs_write_single_data_page+0xfd7/0x1840
[  686.240012][  T426]  ? __pfx_f2fs_write_single_data_page+0x10/0x10
[  686.240033][  T426]  ? folio_clear_dirty_for_io+0x1bf/0x820
[  686.240045][  T426]  ? folio_clear_dirty_for_io+0x1bf/0x820
[  686.240054][  T426]  ? folio_clear_dirty_for_io+0x646/0x820
[  686.240064][  T426]  f2fs_write_data_pages+0x1d2e/0x36f0
[  686.240085][  T426]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  686.240109][  T426]  ? kernel_text_address+0xa5/0xe0
[  686.240120][  T426]  ? __lock_acquire+0x683/0x2cf0
[  686.240132][  T426]  ? __lock_acquire+0x683/0x2cf0
[  686.240143][  T426]  ? __lock_acquire+0x683/0x2cf0
[  686.240154][  T426]  ? __lock_acquire+0x683/0x2cf0
[  686.240164][  T426]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  686.240173][  T426]  do_writepages+0x338/0x560
[  686.240185][  T426]  ? do_raw_spin_unlock+0x4d/0x210
[  686.240195][  T426]  filemap_write_and_wait_range+0x335/0x3f0
[  686.240205][  T426]  ? __pfx_filemap_write_and_wait_range+0x10/0x10
[  686.240214][  T426]  ? is_bpf_text_address+0x26/0x2b0
[  686.240237][  T426]  ? __lock_acquire+0x683/0x2cf0
[  686.240248][  T426]  f2fs_bmap+0x182/0xb20
[  686.240259][  T426]  ? __pfx_f2fs_bmap+0x10/0x10
[  686.240270][  T426]  ? __might_fault+0xaf/0x130
[  686.240279][  T426]  ? __might_fault+0xaf/0x130
[  686.240290][  T426]  ? __pfx_f2fs_bmap+0x10/0x10
[  686.240298][  T426]  bmap+0xac/0xe0
[  686.240309][  T426]  file_ioctl+0x45f/0x7d0
[  686.240317][  T426]  ? __pfx_file_ioctl+0x10/0x10
[  686.240328][  T426]  ? kasan_quarantine_put+0xbb/0x1f0
[  686.240339][  T426]  ? tomoyo_path_number_perm+0x219/0x5f0
[  686.240350][  T426]  ? tomoyo_path_number_perm+0x219/0x5f0
[  686.240360][  T426]  do_vfs_ioctl+0xc27/0x1530
[  686.240368][  T426]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  686.240376][  T426]  ? do_raw_spin_lock+0x30/0x2f0
[  686.240385][  T426]  ? hook_file_ioctl+0x1f0/0x5f0
[  686.240401][  T426]  ? __fget_files+0x2a/0x420
[  686.240411][  T426]  ? __fget_files+0x2a/0x420
[  686.240419][  T426]  ? __fget_files+0x3a2/0x420
[  686.240426][  T426]  ? __fget_files+0x2a/0x420
[  686.240454][  T426]  ? bpf_lsm_file_ioctl+0x9/0x20
[  686.240465][  T426]  __se_sys_ioctl+0x82/0x170
[  686.240472][  T426]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  686.240482][  T426]  do_syscall_64+0x174/0x580
[  686.240493][  T426]  ? trace_irq_disable+0x3b/0x140
[  686.240508][  T426]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  686.240517][  T426] RIP: 0033:0x7f4136d9e0d9
[  686.240549][  T426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  686.240557][  T426] RSP: 002b:00007f4134fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  686.240568][  T426] RAX: ffffffffffffffda RBX: 00007f4137026090 RCX: 00007f4136d9e0d9
[  686.240574][  T426] RDX: 0000200000000000 RSI: 0000000000000001 RDI: 0000000000000004
[  686.240579][  T426] RBP: 00007f4136e35024 R08: 0000000000000000 R09: 0000000000000000
[  686.240584][  T426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  686.240589][  T426] R13: 00007f4137026128 R14: 00007f4137026090 R15: 00007ffd73a1b6d8
[  686.240604][  T426]  </TASK>
[  686.240695][  T426] F2FS-fs (loop8): Stopped filesystem due to reason: 1
[  686.560738][  T433] netlink: 128 bytes leftover after parsing attributes in process `syz.5.11666'.
[  686.563630][  T433] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11666'.
[  686.631945][  T441] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11669'.
[  686.635466][  T441] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11669'.
[  686.737445][  T449] loop8: detected capacity change from 0 to 4096
[  686.767606][  T455] openvswitch: netlink: IP tunnel dst address not specified
[  686.773319][  T449] ntfs3(loop8): Failed to load $Extend (-22).
[  686.775653][  T449] ntfs3(loop8): Failed to initialize $Extend.
[  686.801806][  T457] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11677'.
[  686.966637][  T463] loop8: detected capacity change from 0 to 32768
[  686.979514][  T463] JBD2: Ignoring recovery information on journal
[  687.008424][  T463] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  687.061406][T31115] ocfs2: Unmounting device (7,8) on (node local)
[  687.204914][  T472] sctp: [Deprecated]: syz.8.11683 (pid 472) Use of struct sctp_assoc_value in delayed_ack socket option.
[  687.204914][  T472] Use struct sctp_sack_info instead
[  687.236982][  T474] xt_hashlimit: size too large, truncated to 1048576
[  687.277069][  T476] loop8: detected capacity change from 0 to 1024
[  687.280022][  T476] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  687.283488][  T476] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[  687.287843][  T476] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  687.291087][  T476] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #3: comm syz.8.11685: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0)
[  687.296353][  T476] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  687.296516][  T476] EXT4-fs (loop8): no journal found
[  687.301027][  T476] EXT4-fs (loop8): can't get journal size
[  687.304662][  T476] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  687.326985][T31115] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  687.537568][  T485] gadgetfs: bound to dummy_udc driver
[  687.610054][T16606] IPVS: starting estimator thread 0...
[  687.668753][  T494] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input40
[  687.709464][  T492] IPVS: using max 93 ests per chain, 223200 per kthread
[  687.844490][  T501] hfsplus: unable to find HFS+ superblock
[  687.871953][  T503] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11696'.
[  687.879850][  T503] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11696'.
[  687.893807][  T505] netlink: 1068 bytes leftover after parsing attributes in process `syz.8.11697'.
[  687.903260][  T505] sch_tbf: burst 1 is lower than device bridge_slave_0 mtu (1514) !
[  688.076873][  T511] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.11700 (511)
[  688.103836][  T511] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  688.108589][  T511] BTRFS info (device loop8): using sha256 checksum algorithm
[  688.130832][  T511] BTRFS info (device loop8): rebuilding free space tree
[  688.162569][  T511] BTRFS info (device loop8): disabling free space tree
[  688.165278][  T511] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  688.170257][  T511] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  688.180072][  T511] BTRFS info (device loop8): setting nodatasum
[  688.182620][  T511] BTRFS info (device loop8): setting nodatacow
[  688.185314][  T511] BTRFS info (device loop8): turning off barriers
[  688.187729][  T511] BTRFS info (device loop8): force clearing of disk cache
[  688.269600][T31115] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  688.826957][  T560] set_capacity_and_notify: 2 callbacks suppressed
[  688.826974][  T560] loop8: detected capacity change from 0 to 32768
[  688.832200][  T560] XFS (loop8): sunit and swidth options incompatible with the noalign option
[  688.983051][  T578] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11720'.
[  688.997779][  T578] macsec2: entered promiscuous mode
[  688.999699][  T578] bridge0: entered promiscuous mode
[  690.421654][  T612] syzkaller1: entered promiscuous mode
[  690.424057][  T612] syzkaller1: entered allmulticast mode
[  690.878259][  T615] loop8: detected capacity change from 0 to 40427
[  690.894769][  T615] F2FS-fs (loop8): Invalid SB checksum offset: 0
[  690.904098][  T615] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock
[  690.909098][  T630] netdevsim netdevsim5 netdevsim0: refused to change device tx_queue_len
[  690.912673][  T615] F2FS-fs (loop8): invalid crc value
[  690.984338][  T615] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  691.018387][  T615] F2FS-fs (loop8): Try to recover 2th superblock, ret: 0
[  691.022253][  T615] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  691.070117][T31115] syz-executor: attempt to access beyond end of device
[  691.070117][T31115] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  691.081829][T31115] CPU: 0 UID: 0 PID: 31115 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  691.081854][T31115] Tainted: [L]=SOFTLOCKUP
[  691.081859][T31115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  691.081866][T31115] Call Trace:
[  691.081872][T31115]  <TASK>
[  691.081878][T31115]  dump_stack_lvl+0xe8/0x150
[  691.081902][T31115]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  691.081919][T31115]  f2fs_write_end_io+0x124b/0x1710
[  691.081946][T31115]  __submit_merged_bio+0x258/0x6a0
[  691.081966][T31115]  ? rcu_is_watching+0x15/0xb0
[  691.081985][T31115]  __submit_merged_write_cond+0x3c9/0x4e0
[  691.082004][T31115]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  691.082031][T31115]  f2fs_write_data_pages+0x2a27/0x36f0
[  691.082066][T31115]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  691.082078][T31115]  ? is_bpf_text_address+0x26/0x2b0
[  691.082101][T31115]  ? arch_stack_walk+0xfb/0x150
[  691.082130][T31115]  ? add_lock_to_list+0xc7/0x100
[  691.082147][T31115]  ? lockdep_unlock+0x5d/0xd0
[  691.082158][T31115]  ? __lock_acquire+0x13e8/0x2cf0
[  691.082188][T31115]  ? do_raw_spin_lock+0x12b/0x2f0
[  691.082207][T31115]  ? do_raw_spin_unlock+0x4d/0x210
[  691.082219][T31115]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  691.082233][T31115]  do_writepages+0x338/0x560
[  691.082254][T31115]  ? do_raw_spin_unlock+0x4d/0x210
[  691.082267][T31115]  filemap_fdatawrite+0x1e9/0x2f0
[  691.082284][T31115]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  691.082324][T31115]  ? do_raw_spin_unlock+0x4d/0x210
[  691.082338][T31115]  f2fs_sync_dirty_inodes+0x30e/0x830
[  691.082362][T31115]  f2fs_write_checkpoint+0xa3d/0x2710
[  691.082375][T31115]  ? __lock_acquire+0x683/0x2cf0
[  691.082407][T31115]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  691.082453][T31115]  kill_f2fs_super+0x2f6/0x700
[  691.082472][T31115]  ? __pfx_kill_f2fs_super+0x10/0x10
[  691.082493][T31115]  ? call_rcu+0x64b/0x8b0
[  691.082508][T31115]  ? lockdep_hardirqs_on+0x7a/0x110
[  691.082559][T31115]  deactivate_locked_super+0xbc/0x130
[  691.082577][T31115]  cleanup_mnt+0x3d3/0x460
[  691.082596][T31115]  task_work_run+0x1d9/0x270
[  691.082615][T31115]  ? __pfx_task_work_run+0x10/0x10
[  691.082629][T31115]  exit_to_user_mode_loop+0x1fa/0x730
[  691.082638][T31115]  ? rcu_is_watching+0x15/0xb0
[  691.082649][T31115]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.082656][T31115]  do_syscall_64+0x353/0x580
[  691.082685][T31115]  ? trace_irq_disable+0x3b/0x140
[  691.082696][T31115]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.082703][T31115] RIP: 0033:0x7f4136d9f317
[  691.082712][T31115] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  691.082719][T31115] RSP: 002b:00007ffd73a1a948 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  691.082728][T31115] RAX: 0000000000000000 RBX: 00007f4136e34474 RCX: 00007f4136d9f317
[  691.082733][T31115] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd73a1aa00
[  691.082737][T31115] RBP: 00007ffd73a1aa00 R08: 00007ffd73a1ba00 R09: 00000000ffffffff
[  691.082742][T31115] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd73a1ba90
[  691.082747][T31115] R13: 00007f4136e34474 R14: 000000000009ce45 R15: 00007ffd73a1bad0
[  691.082758][T31115]  </TASK>
[  691.084754][T31115] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  691.363069][  T657] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11753'.
[  691.366452][  T657] netlink: 'syz.8.11753': attribute type 11 has an invalid length.
[  691.599128][  T665] loop8: detected capacity change from 0 to 64
[  691.608160][  T665] BFS-fs: bfs_fill_super(): loop8 is unclean, continuing
[  692.062172][  T700] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  692.078486][  T700] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  692.096734][  T700] bridge_slave_1: invalid flags given to default FDB implementation
[  692.378125][  T724] __nla_validate_parse: 4 callbacks suppressed
[  692.378136][  T724] netlink: 20 bytes leftover after parsing attributes in process `syz.8.11785'.
[  693.245214][   T10] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  693.408629][   T10] usb 9-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=9e.06
[  693.424200][   T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  693.427986][ T5597] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  693.439912][ T5597] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  693.443238][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  693.446068][ T5597] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  693.452093][ T5597] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  693.455162][ T5597] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  693.459128][   T10] usb 9-1: config 0 descriptor??
[  693.470402][   T10] gspca_main: kinect-2.14.0 probing 045e:02bf
[  693.691791][   T10] usb 9-1: USB disconnect, device number 11
[  693.817850][  T756] bridge0: port 1(bridge_slave_0) entered blocking state
[  693.820493][  T756] bridge0: port 1(bridge_slave_0) entered disabled state
[  693.822912][  T756] bridge_slave_0: entered allmulticast mode
[  693.825733][  T756] bridge_slave_0: entered promiscuous mode
[  693.829587][  T756] bridge0: port 2(bridge_slave_1) entered blocking state
[  693.832072][  T756] bridge0: port 2(bridge_slave_1) entered disabled state
[  693.834574][  T756] bridge_slave_1: entered allmulticast mode
[  693.837319][  T756] bridge_slave_1: entered promiscuous mode
[  693.872353][  T756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  693.881072][  T756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  693.898688][  T756] team0: Port device team_slave_0 added
[  693.902298][  T756] team0: Port device team_slave_1 added
[  693.923123][  T756] batman_adv: batadv0: Adding interface: batadv_slave_0
[  693.925700][  T756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  693.933973][  T756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  693.939164][  T756] batman_adv: batadv0: Adding interface: batadv_slave_1
[  693.941373][  T756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  693.949587][  T756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  694.011138][  T756] hsr_slave_0: entered promiscuous mode
[  694.013889][  T756] hsr_slave_1: entered promiscuous mode
[  694.015089][  T756] debugfs: 'hsr0' already exists in 'hsr'
[  694.018046][  T756] Cannot create hsr debugfs directory
[  694.063124][  T778] misc userio: No port type given on /dev/userio
[  694.111854][  T780] loop7: detected capacity change from 0 to 16
[  694.118380][  T780] erofs: Bad value for 'cache_strategy'
[  694.573044][  T756] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  694.591170][  T756] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  694.594891][  T756] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  694.608118][  T756] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  694.613715][  T756] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  694.658565][  T756] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  694.664193][  T756] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  694.683079][  T756] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  694.731162][  T794] loop8: detected capacity change from 0 to 512
[  694.752251][  T794] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.11811: inode has both inline data and extents flags
[  694.760855][  T794] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  694.761146][  T794] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.11811: couldn't read orphan inode 15 (err -117)
[  694.764933][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  694.764947][    C0] EXT4-fs (loop8): initial error at time 2000000155: ext4_orphan_get:1399: inode 15
[  694.764967][    C0] EXT4-fs (loop8): last error at time 2000000155: ext4_orphan_get:1399: inode 15
[  694.784993][  T794] loop8: lost filesystem error report for type 5 error -117
[  694.786686][  T794] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  694.843446][T31115] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  694.949676][  T756] 8021q: adding VLAN 0 to HW filter on device bond0
[  695.041094][  T756] 8021q: adding VLAN 0 to HW filter on device team0
[  695.059056][T13055] bridge0: port 1(bridge_slave_0) entered blocking state
[  695.061835][T13055] bridge0: port 1(bridge_slave_0) entered forwarding state
[  695.122277][T10691] bridge0: port 2(bridge_slave_1) entered blocking state
[  695.125180][T10691] bridge0: port 2(bridge_slave_1) entered forwarding state
[  695.190400][  T756] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  695.194762][  T756] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  695.571055][  T756] 8021q: adding VLAN 0 to HW filter on device batadv0
[  695.694626][ T5597] Bluetooth: hci2: command tx timeout
[  695.709115][  T756] veth0_vlan: entered promiscuous mode
[  695.714754][  T756] veth1_vlan: entered promiscuous mode
[  695.753898][  T756] veth0_macvtap: entered promiscuous mode
[  695.763354][  T756] veth1_macvtap: entered promiscuous mode
[  695.788995][  T756] batman_adv: batadv0: Interface activated: batadv_slave_0
[  695.800664][  T756] batman_adv: batadv0: Interface activated: batadv_slave_1
[  695.857193][T22922] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  695.865613][T22922] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  695.871877][T22922] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  695.881696][T22922] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  695.975276][T10106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  695.984251][T10106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  696.093213][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  696.099324][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  696.527498][  T867] loop9: detected capacity change from 0 to 32768
[  696.578274][  T867] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.11801 (867)
[  696.604361][  T894] loop8: detected capacity change from 0 to 4096
[  696.609623][  T867] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  696.617631][  T867] BTRFS info (device loop9): using sha256 checksum algorithm
[  696.623870][  T894] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  696.675423][T31115] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  696.679490][  T867] BTRFS info (device loop9): enabling ssd optimizations
[  696.686269][  T867] BTRFS info (device loop9): turning on async discard
[  696.688453][  T867] BTRFS info (device loop9): enabling free space tree
[  696.774453][  T756] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  696.921761][  T921] loop8: detected capacity change from 0 to 256
[  696.936338][  T920] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11841'.
[  696.971188][  T920] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11841'.
[  696.995372][ T5632] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  697.024090][ T5632] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  697.026892][ T5632] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  697.030881][ T5632] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  697.368175][  T948] loop8: detected capacity change from 0 to 2048
[  697.385967][  T948] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  697.817152][  T962] loop8: detected capacity change from 0 to 32768
[  697.823233][  T962] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.11855 (962)
[  697.838443][  T962] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  697.844364][  T962] BTRFS info (device loop8): using crc32c checksum algorithm
[  697.871967][  T962] BTRFS info (device loop8): enabling ssd optimizations
[  697.874697][  T962] BTRFS info (device loop8): turning on flush-on-commit
[  697.876905][  T962] BTRFS info (device loop8): enabling free space tree
[  697.878940][  T962] BTRFS info (device loop8): enabling auto defrag
[  697.880900][  T962] BTRFS info (device loop8): use lzo compression, level 1
[  697.883204][  T962] BTRFS info (device loop8): max_inline set to 4096
[  697.913369][T31115] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  697.948808][ T5597] Bluetooth: hci2: command tx timeout
[  698.295659][   T10] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  698.461435][   T10] usb 9-1: Using ep0 maxpacket: 16
[  698.467132][   T10] usb 9-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00
[  698.473867][   T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  698.478982][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  698.486547][   T10] usb 9-1: config 0 descriptor??
[  698.704965][  T992] netlink: 'syz.9.11862': attribute type 5 has an invalid length.
[  698.715463][   T10] usbhid 9-1:0.0: can't add hid device: -71
[  698.717665][   T10] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  698.727287][   T10] usb 9-1: USB disconnect, device number 12
[  698.747039][  T994] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.11863'.
[  698.791429][  T996] loop9: detected capacity change from 0 to 4096
[  698.803105][  T997] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  698.803461][  T996] NILFS (loop9): corrupt root inode
[  699.141771][ T5704] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[  699.315962][ T5704] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[  699.321556][ T5704] usb 10-1: config index 0 descriptor too short (expected 63186, got 210)
[  699.326215][ T5704] usb 10-1: config 0 has an invalid interface number: 106 but max is 0
[  699.329346][ T5704] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  699.333171][ T5704] usb 10-1: config 0 has no interface number 0
[  699.335707][ T5704] usb 10-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  699.339981][ T5704] usb 10-1: config 0 interface 106 altsetting 0 has an endpoint descriptor with address 0x22, changing to 0x2
[  699.344439][ T5704] usb 10-1: config 0 interface 106 altsetting 0 endpoint 0x2 has invalid maxpacket 70, setting to 64
[  699.348822][ T5704] usb 10-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  699.354729][ T5704] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  699.361688][ T5704] usb 10-1: config 0 descriptor??
[  699.386339][ T5704] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  699.601031][T22922] usb 10-1: Failed to submit usb control message: -71
[  699.601485][   T10] usb 10-1: USB disconnect, device number 2
[  699.603813][T22922] usb 10-1: unable to send the bmi data to the device: -71
[  699.617383][T22922] usb 10-1: unable to get target info from device
[  699.619867][T22922] usb 10-1: could not get target info (-71)
[  699.622011][T22922] usb 10-1: could not probe fw (-71)
[  700.192838][ T5597] Bluetooth: hci2: command tx timeout
[  700.258709][ T1012] loop9: detected capacity change from 0 to 128
[  700.268609][ T1012] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[  700.279464][ T1009] loop8: detected capacity change from 0 to 4096
[  700.281968][ T1012] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found!
[  700.282033][ T1012] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found!
[  700.282054][ T1012] UDF-fs: Scanning with blocksize 512 failed
[  700.285783][ T1012] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[  700.314968][ T1012] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512
[  700.318968][ T1012] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found
[  700.323833][ T1012] UDF-fs: Scanning with blocksize 1024 failed
[  700.327453][ T1012] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[  700.331228][ T1009] ntfs3(loop8): Failed to initialize $Extend/$Reparse.
[  700.331958][ T1012] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512
[  700.338562][ T1012] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found
[  700.341627][ T1012] UDF-fs: Scanning with blocksize 2048 failed
[  700.350101][ T1012] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[  700.360979][ T1012] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512
[  700.365845][ T1012] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found
[  700.384549][ T1012] UDF-fs: Scanning with blocksize 4096 failed
[  700.393279][ T1012] UDF-fs: warning (device loop9): udf_fill_super: No partition found (1)
[  700.630140][ T1025] loop9: detected capacity change from 0 to 512
[  700.639323][ T1025] journal_path: Non-blockdev passed as './file0'
[  700.645554][ T1025] EXT4-fs: error: could not find journal device path
[  701.163113][ T1056] loop8: detected capacity change from 0 to 32768
[  701.495328][ T1082] loop7: detected capacity change from 0 to 8192
[  701.503509][ T5673] usb 10-1: new full-speed USB device number 3 using dummy_hcd
[  701.525189][   T10] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  701.553061][ T1086] loop7: detected capacity change from 0 to 8
[  701.677233][ T1100] loop7: detected capacity change from 0 to 512
[  701.677595][ T5673] usb 10-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00
[  701.683165][ T1100] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  701.691848][   T10] usb 9-1: Using ep0 maxpacket: 32
[  701.695142][ T5673] usb 10-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30
[  701.700186][ T1100] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended
[  701.703575][ T1100] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[  701.706252][ T1100] System zones: 0-2, 18-18, 34-34
[  701.706360][   T10] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  701.712795][ T1100] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.11902: bad orphan inode 15
[  701.716484][ T1100] loop7: lost filesystem error report for type 5 error -117
[  701.716831][ T1100] ext4_test_bit(bit=14, block=18) = 1
[  701.719437][ T5673] usb 10-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  701.719872][ T1100] is_bad_inode(inode)=0
[  701.721930][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  701.721941][    C1] EXT4-fs (loop7): initial error at time 2000000161: ext4_orphan_get:1425
[  701.721956][    C1] EXT4-fs (loop7): last error at time 2000000161: ext4_orphan_get:1425
[  701.724763][ T5673] usb 10-1: config 0 interface 0 has no altsetting 0
[  701.726641][ T1100] NEXT_ORPHAN(inode)=2264924160
[  701.732501][ T5673] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  701.732698][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  701.735604][ T1100] max_ino=32
[  701.739152][ T1100] i_nlink=0
[  701.749266][   T10] usb 9-1: config 0 descriptor??
[  701.750614][ T1100] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2972: inode #15: comm syz.7.11902: corrupted xattr block 19: e_value out of bounds
[  701.754996][ T5673] usb 10-1: config 0 descriptor??
[  701.766733][ T1100] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  701.766983][ T1100] EXT4-fs warning (device loop7): ext4_evict_inode:287: xattr delete (err -117)
[  701.777208][ T1100] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  701.813153][T30922] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  701.983979][   T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  701.988803][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  701.998155][   T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  702.002776][   T10] usb 9-1: media controller created
[  702.024392][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  702.214828][ T5673] lg-g15 0003:046D:C22D.0020: ignoring exceeding usage max
[  702.218788][   T10] az6027: usb out operation failed. (-71)
[  702.226028][ T5673] lg-g15 0003:046D:C22D.0020: hidraw0: USB HID v0.0c Device [HID 046d:c22d] on usb-dummy_hcd.9-1/input0
[  702.231417][   T10] az6027: usb out operation failed. (-71)
[  702.233421][   T10] stb0899_attach: Driver disabled by Kconfig
[  702.235638][   T10] az6027: no front-end attached
[  702.235638][   T10] 
[  702.245151][   T10] az6027: usb out operation failed. (-71)
[  702.247011][   T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  702.250164][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input41
[  702.258265][   T10] dvb-usb: schedule remote query interval to 400 msecs.
[  702.260807][   T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  702.266685][   T10] usb 9-1: USB disconnect, device number 13
[  702.310355][   T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  702.429575][T16606] usb 10-1: USB disconnect, device number 3
[  702.446765][ T5597] Bluetooth: hci2: command tx timeout
[  703.302579][ T5704] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  703.465222][ T5704] usb 10-1: Using ep0 maxpacket: 8
[  703.469029][ T5704] usb 10-1: New USB device found, idVendor=07ca, idProduct=1867, bcdDevice=f0.d3
[  703.473990][ T5704] usb 10-1: config 0 has an invalid interface number: 86 but max is 0
[  703.485366][ T5704] usb 10-1: config 0 has no interface number 0
[  703.490927][ T5704] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  703.519962][ T5704] usb 10-1: config 0 descriptor??
[  703.783320][ T5704] usb 10-1: USB disconnect, device number 4
[  704.543787][ T1121] loop9: detected capacity change from 0 to 32768
[  704.667687][ T1123] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun!
[  704.732311][ T1129] loop8: detected capacity change from 0 to 8
[  704.872837][ T5597] Bluetooth: hci1: unexpected cc 0x1407 length: 11 > 9
[  704.875835][ T5597] Bluetooth: hci1: unexpected event for opcode 0x1407
[  705.295161][ T1150] loop7: detected capacity change from 0 to 64
[  705.548661][ T1162] batadv_slave_1: entered promiscuous mode
[  705.551917][ T1162] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11928'.
[  705.555900][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  705.623609][ T1162] batadv_slave_1 (unregistering): left promiscuous mode
[  705.634703][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_1
[  706.795640][ T1203] loop7: detected capacity change from 0 to 4096
[  706.800440][ T1203] EXT4-fs: Ignoring removed orlov option
[  706.806243][ T1203] EXT4-fs (loop7): Test dummy encryption mode enabled
[  706.874664][ T1203] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  706.906462][ T1214] ucma_write: process 714 (syz.8.11949) changed security contexts after opening file descriptor, this is not allowed.
[  706.959239][T30922] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  707.239949][ T1235] loop7: detected capacity change from 0 to 512
[  707.258369][   T10] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  707.268036][ T1235] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  707.276487][ T1235] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  707.365011][T30922] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  707.422879][   T10] usb 9-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46
[  707.432079][   T10] usb 9-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0
[  707.438006][   T10] usb 9-1: Product: syz
[  707.446472][   T10] usb 9-1: Manufacturer: syz
[  707.498135][   T10] usb 9-1: config 0 descriptor??
[  707.509321][   T10] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected
[  707.522802][   T10] ftdi_sio ttyUSB0: unknown device type: 0xa446
[  707.732381][   T10] usb 9-1: USB disconnect, device number 14
[  707.741339][   T10] ftdi_sio 9-1:0.0: device disconnected
[  709.522295][ T1272] loop8: detected capacity change from 0 to 1024
[  709.544304][ T1272] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  709.586641][   T34] audit: type=1800 audit(2000000168.872:4914): pid=1272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.11974" name="file1" dev="loop8" ino=15 res=0 errno=0
[  709.624368][T31115] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  709.689125][ T1276] SET target dimension over the limit!
[  709.802413][ T1282] netlink: 156 bytes leftover after parsing attributes in process `syz.8.11978'.
[  709.807026][ T1282] netlink: 156 bytes leftover after parsing attributes in process `syz.8.11978'.
[  710.213954][ T1302] overlayfs: conflicting lowerdir path
[  710.221630][ T1302] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[  710.280616][ T1306] Invalid source name
[  710.613557][ T1322] vhci_hcd vhci_hcd.0: failed to lookup sock
[  710.683645][ T5600] Bluetooth: hci2: command 0x0405 tx timeout
[  710.993590][ T1340] loop7: detected capacity change from 0 to 128
[  711.004331][ T1340] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  711.031228][   T34] audit: type=1800 audit(2000000170.201:4915): pid=1340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.12005" name="file1" dev="loop7" ino=94 res=0 errno=0
[  711.078716][ T1342] loop8: detected capacity change from 0 to 16
[  711.086963][ T1343] UDF-fs: error (device loop7): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  711.097621][ T1342] erofs (device loop8): too large lz4 pclusterblks 16832
[  711.149332][ T1340] UDF-fs: error (device loop7): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  711.164416][ T1345] loop8: detected capacity change from 0 to 8
[  711.177107][ T1345] SQUASHFS error: lzo decompression failed, data probably corrupt
[  711.189234][ T1345] SQUASHFS error: Failed to read block 0x91: -5
[  711.198382][ T1345] SQUASHFS error: Unable to read metadata cache entry [8f]
[  711.209781][ T1345] SQUASHFS error: Unable to read inode 0x11f
[  711.241803][ T1347] loop9: detected capacity change from 0 to 16
[  711.247077][ T1347] erofs (device loop9): mounted with root inode @ nid 36.
[  711.559025][ T1372] loop8: detected capacity change from 0 to 8
[  711.563592][ T1372] SQUASHFS error: xz decompression failed, data probably corrupt
[  711.566134][ T1372] SQUASHFS error: Failed to read block 0x108: -5
[  711.568245][ T1372] SQUASHFS error: Unable to read metadata cache entry [106]
[  711.570627][ T1372] SQUASHFS error: Unable to read inode 0x11f
[  711.609574][ T1375] Format for deleting device is "id" (uint).
[  711.625982][T25120] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  711.788633][T25120] usb 10-1: Using ep0 maxpacket: 8
[  711.791705][T25120] usb 10-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  711.796875][T25120] usb 10-1: config 2 has an invalid interface number: 31 but max is 0
[  711.800614][T25120] usb 10-1: config 2 has no interface number 0
[  711.803382][T25120] usb 10-1: config 2 interface 31 has no altsetting 0
[  711.814452][T25120] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  711.818046][T25120] usb 10-1: Product: syz
[  711.819932][T25120] usb 10-1: Manufacturer: syz
[  711.822941][T25120] usb 10-1: SerialNumber: syz
[  711.947605][ T1381] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  712.209495][ T1383] loop7: detected capacity change from 0 to 32768
[  712.226035][ T1383] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  712.278987][ T1383] XFS (loop7): Ending clean mount
[  712.286774][ T1383] XFS (loop7): User initiated shutdown received.
[  712.295174][ T1383] XFS (loop7): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:464).  Shutting down filesystem.
[  712.300823][ T1383] XFS (loop7): Please unmount the filesystem and rectify the problem(s)
[  712.316803][T30922] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  712.494106][T25120] ch9200 10-1:2.31: probe with driver ch9200 failed with error -22
[  712.509413][T25120] usb 10-1: USB disconnect, device number 5
[  712.524537][ T1393] loop7: detected capacity change from 0 to 4096
[  712.548694][ T1394] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  712.743105][ T5597] Bluetooth: hci0: Ignoring connect complete event for invalid link type
[  712.789156][ T1408] bond0: option resend_igmp: invalid value (18446744073709551607)
[  712.792300][ T1408] bond0: option resend_igmp: allowed values 0 - 255
[  712.980601][ T5704] usb 9-1: new full-speed USB device number 15 using dummy_hcd
[  712.990930][ T1418] tipc: Started in network mode
[  712.992676][ T1418] tipc: Node identity 7f000001, cluster identity 4711
[  712.995286][ T1418] tipc: Enabled bearer <udp:syz1>, priority 10
[  713.123785][ T1424] ip6gre1: entered allmulticast mode
[  713.127281][ T5902] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  713.166292][ T5704] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  713.177835][ T5704] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  713.189320][ T5704] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  713.196804][ T5704] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  713.202593][ T5704] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  713.205257][ T5704] usb 9-1: Product: syz
[  713.206696][ T5704] usb 9-1: Manufacturer: syz
[  713.208360][ T5704] usb 9-1: SerialNumber: syz
[  713.211887][ T5704] usb 9-1: config 0 descriptor??
[  713.214210][ T1400] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  713.265100][ T5704] rc_core: IR keymap rc-streamzap not found
[  713.268483][ T5704] Registered IR keymap rc-empty
[  713.273019][ T5704] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[  713.283414][ T5704] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input42
[  713.423231][ T1433] loop9: detected capacity change from 0 to 32768
[  713.436639][ T1433] JBD2: Ignoring recovery information on journal
[  713.455675][ T1433] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  713.496439][ T5704] usb 9-1: USB disconnect, device number 15
[  713.504958][ T1433] 
[  713.505812][ T1433] ======================================================
[  713.508133][ T1433] WARNING: possible circular locking dependency detected
[  713.510388][ T1433] syzkaller #0 Tainted: G             L     
[  713.512849][ T1433] ------------------------------------------------------
[  713.515566][ T1433] syz.9.12042/1433 is trying to acquire lock:
[  713.517943][ T1433] ffff888118f389a0 (&ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_xattr_set+0xbeb/0x13a0
[  713.522252][ T1433] 
[  713.522252][ T1433] but task is already holding lock:
[  713.524552][ T1433] ffff888118f3cce8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x494/0x13a0
[  713.527498][ T1433] 
[  713.527498][ T1433] which lock already depends on the new lock.
[  713.527498][ T1433] 
[  713.531541][ T1433] 
[  713.531541][ T1433] the existing dependency chain (in reverse order) is:
[  713.535034][ T1433] 
[  713.535034][ T1433] -> #3 (&oi->ip_xattr_sem){++++}-{4:4}:
[  713.538079][ T1433]        down_read+0x4a/0x330
[  713.539690][ T1433]        ocfs2_init_acl+0x2fd/0x7e0
[  713.541317][ T1433]        ocfs2_mknod+0x166a/0x2240
[  713.542920][ T1433]        ocfs2_create+0x195/0x460
[  713.544474][ T1433]        path_openat+0x133a/0x3830
[  713.546140][ T1433]        do_file_open+0x23e/0x4a0
[  713.547757][ T1433]        do_sys_openat2+0x115/0x200
[  713.549564][ T1433]        __x64_sys_creat+0x8f/0xc0
[  713.551252][ T1433]        do_syscall_64+0x174/0x580
[  713.552910][ T1433]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  713.554892][ T1433] 
[  713.554892][ T1433] -> #2 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  713.557476][ T1433]        down_read+0x4a/0x330
[  713.558965][ T1433]        ocfs2_start_trans+0x3ab/0x700
[  713.560658][ T1433]        ocfs2_shutdown_local_alloc+0x1ef/0xa50
[  713.562611][ T1433]        ocfs2_dismount_volume+0x1ec/0x8d0
[  713.564426][ T1433]        generic_shutdown_super+0x13d/0x2d0
[  713.566281][ T1433]        kill_block_super+0x44/0x90
[  713.567923][ T1433]        deactivate_locked_super+0xbc/0x130
[  713.569763][ T1433]        cleanup_mnt+0x3d3/0x460
[  713.571265][ T1433]        task_work_run+0x1d9/0x270
[  713.572874][ T1433]        exit_to_user_mode_loop+0x1fa/0x730
[  713.574720][ T1433]        do_syscall_64+0x353/0x580
[  713.576316][ T1433]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  713.578316][ T1433] 
[  713.578316][ T1433] -> #1 (sb_internal#6){.+.+}-{0:0}:
[  713.580680][ T1433]        ocfs2_start_trans+0x2ac/0x700
[  713.582372][ T1433]        ocfs2_remove_btree_range+0x819/0x15f0
[  713.584403][ T1433]        ocfs2_commit_truncate+0xc60/0x2560
[  713.586673][ T1433]        ocfs2_evict_inode+0xf8f/0x4390
[  713.588384][ T1433]        evict+0x624/0xb50
[  713.589861][ T1433]        vfs_rmdir+0x413/0x6a0
[  713.591386][ T1433]        filename_rmdir+0x292/0x520
[  713.593028][ T1433]        __se_sys_rmdir+0x2e/0x140
[  713.594635][ T1433]        do_syscall_64+0x174/0x580
[  713.596229][ T1433]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  713.598211][ T1433] 
[  713.598211][ T1433] -> #0 (&ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE]){+.+.}-{4:4}:
[  713.601532][ T1433]        __lock_acquire+0x1520/0x2cf0
[  713.603185][ T1433]        lock_acquire+0x106/0x350
[  713.604752][ T1433]        down_write+0x96/0x200
[  713.606210][ T1433]        ocfs2_xattr_set+0xbeb/0x13a0
[  713.608141][ T1433]        __vfs_setxattr+0x442/0x480
[  713.609886][ T1433]        __vfs_setxattr_noperm+0x12a/0x660
[  713.611798][ T1433]        vfs_setxattr+0x163/0x360
[  713.613360][ T1433]        filename_setxattr+0x296/0x630
[  713.615051][ T1433]        path_setxattrat+0x408/0x450
[  713.616709][ T1433]        __x64_sys_setxattr+0xbc/0xe0
[  713.618458][ T1433]        do_syscall_64+0x174/0x580
[  713.620153][ T1433]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  713.622183][ T1433] 
[  713.622183][ T1433] other info that might help us debug this:
[  713.622183][ T1433] 
[  713.625282][ T1433] Chain exists of:
[  713.625282][ T1433]   &ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE] --> &journal->j_trans_barrier --> &oi->ip_xattr_sem
[  713.625282][ T1433] 
[  713.630396][ T1433]  Possible unsafe locking scenario:
[  713.630396][ T1433] 
[  713.632724][ T1433]        CPU0                    CPU1
[  713.634351][ T1433]        ----                    ----
[  713.636021][ T1433]   lock(&oi->ip_xattr_sem);
[  713.637460][ T1433]                                lock(&journal->j_trans_barrier);
[  713.639838][ T1433]                                lock(&oi->ip_xattr_sem);
[  713.641988][ T1433]   lock(&ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE]);
[  713.644229][ T1433] 
[  713.644229][ T1433]  *** DEADLOCK ***
[  713.644229][ T1433] 
[  713.646607][ T1433] 3 locks held by syz.9.12042/1433:
[  713.648206][ T1433]  #0: ffff88801f064450 (sb_writers#40){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  713.651091][ T1433]  #1: ffff888118f3cfa0 (&sb->s_type->i_mutex_key#53){+.+.}-{4:4}, at: vfs_setxattr+0x13e/0x360
[  713.654311][ T1433]  #2: ffff888118f3cce8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x494/0x13a0
[  713.657276][ T1433] 
[  713.657276][ T1433] stack backtrace:
[  713.659114][ T1433] CPU: 0 UID: 0 PID: 1433 Comm: syz.9.12042 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  713.659127][ T1433] Tainted: [L]=SOFTLOCKUP
[  713.659130][ T1433] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  713.659136][ T1433] Call Trace:
[  713.659142][ T1433]  <TASK>
[  713.659147][ T1433]  dump_stack_lvl+0xe8/0x150
[  713.659160][ T1433]  print_circular_bug+0x2e1/0x300
[  713.659176][ T1433]  check_noncircular+0x12e/0x150
[  713.659188][ T1433]  __lock_acquire+0x1520/0x2cf0
[  713.659200][ T1433]  ? irqentry_exit+0x218/0x8f0
[  713.659212][ T1433]  ? lockdep_hardirqs_on+0x7a/0x110
[  713.659222][ T1433]  ? irqentry_exit+0x218/0x8f0
[  713.659231][ T1433]  ? trace_irq_disable+0x3b/0x140
[  713.659241][ T1433]  ? ocfs2_xattr_set+0xbeb/0x13a0
[  713.659250][ T1433]  lock_acquire+0x106/0x350
[  713.659258][ T1433]  ? ocfs2_xattr_set+0xbeb/0x13a0
[  713.659268][ T1433]  down_write+0x96/0x200
[  713.659279][ T1433]  ? ocfs2_xattr_set+0xbeb/0x13a0
[  713.659287][ T1433]  ? __pfx_down_write+0x10/0x10
[  713.659296][ T1433]  ? ocfs2_xattr_ibody_find+0xc4/0x980
[  713.659304][ T1433]  ? ocfs2_xattr_set+0x3ac/0x13a0
[  713.659313][ T1433]  ocfs2_xattr_set+0xbeb/0x13a0
[  713.659325][ T1433]  ? __pfx_ocfs2_xattr_set+0x10/0x10
[  713.659335][ T1433]  ? step_into_slowpath+0x3be/0x820
[  713.659349][ T1433]  ? __asan_memset+0x22/0x50
[  713.659357][ T1433]  ? terminate_walk+0x38a/0x4c0
[  713.659366][ T1433]  ? evm_protected_xattr_common+0x170/0x190
[  713.659376][ T1433]  ? evm_protect_xattr+0x75c/0xb20
[  713.659385][ T1433]  ? ima_get_hash_algo+0x1d4/0x4a0
[  713.659392][ T1433]  ? __pfx_evm_protect_xattr+0x10/0x10
[  713.659401][ T1433]  ? __pfx_ocfs2_xattr_security_set+0x10/0x10
[  713.659412][ T1433]  __vfs_setxattr+0x442/0x480
[  713.659427][ T1433]  __vfs_setxattr_noperm+0x12a/0x660
[  713.659436][ T1433]  vfs_setxattr+0x163/0x360
[  713.659445][ T1433]  ? __pfx_vfs_setxattr+0x10/0x10
[  713.659454][ T1433]  filename_setxattr+0x296/0x630
[  713.659464][ T1433]  ? __pfx_filename_setxattr+0x10/0x10
[  713.659473][ T1433]  ? do_getname+0x151/0x250
[  713.659481][ T1433]  path_setxattrat+0x408/0x450
[  713.659489][ T1433]  ? __pfx_path_setxattrat+0x10/0x10
[  713.659494][ T1433]  ? do_futex+0x3e7/0x4e0
[  713.659537][ T1433]  ? rcu_is_watching+0x15/0xb0
[  713.659552][ T1433]  __x64_sys_setxattr+0xbc/0xe0
[  713.659562][ T1433]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  713.659570][ T1433]  do_syscall_64+0x174/0x580
[  713.659579][ T1433]  ? trace_irq_disable+0x3b/0x140
[  713.659588][ T1433]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  713.659596][ T1433] RIP: 0033:0x7f1a3219e0d9
[  713.659607][ T1433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  713.659614][ T1433] RSP: 002b:00007f1a33083028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  713.659622][ T1433] RAX: ffffffffffffffda RBX: 00007f1a32425fa0 RCX: 00007f1a3219e0d9
[  713.659627][ T1433] RDX: 0000200000000340 RSI: 0000200000000140 RDI: 0000200000000100
[  713.659632][ T1433] RBP: 00007f1a32235024 R08: 0000000000000000 R09: 0000000000000000
[  713.659636][ T1433] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000
[  713.659640][ T1433] R13: 00007f1a32426038 R14: 00007f1a32425fa0 R15: 00007ffe52ebab88
[  713.659648][ T1433]  </TASK>
[  713.813201][  T756] ocfs2: Unmounting device (7,9) on (node local)
[  714.086027][ T5704] tipc: Node number set to 2130706433
[  717.532532][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
