last executing test programs: 5.857877197s ago: executing program 0 (id=237): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) ftruncate(r0, 0x4a8e) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x74, 0x7, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000001) 5.74444787s ago: executing program 0 (id=238): openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf0}, 0x80) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x3e8) 5.663045782s ago: executing program 0 (id=239): r0 = socket$netlink(0x10, 0x3, 0x7) fcntl$getown(r0, 0x9) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bond_slave_1\x00') r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x8, 0x0, 0x0, @uid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe0, 0xa, 0xa, 0x104, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_DESC={0x2c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6e}]}]}]}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x90, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, [""]}}}, {0x54, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xffffff81}]}}}]}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x10}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x85) 5.606096474s ago: executing program 0 (id=240): r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x2, @local, 0x80000000}, 0x1c) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000240)='./bus\x00', 0x1800004, &(0x7f0000005a00)=ANY=[@ANYBLOB='discard_unit=segment,background_gc=sync,acl,disable_roll_forward,grpjquota=checkpoint=disable,alloc_mode=default,compress_cache,nogc_merge,checkpoint=disable,noacl,noinline_dentry,memory=low,jqfmt=vfsold,disable_ext_identify,ec_merge,\x00'], 0xfd, 0x552d, &(0x7f00000004c0)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000000000000001600000000000000"], 0x24, 0x0) (async) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) unshare(0x42040400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000020000100ecc2000000000000020020000000000100000000140003006c6f0000000000000000000000000000080002"], 0x38}}, 0x4026) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendfile(0xffffffffffffffff, r1, &(0x7f0000000040)=0xd76, 0x100000000000ac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r2, &(0x7f0000000140)="b7", 0x1, 0x0, 0x0, 0x2}]) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) readahead(r5, 0x8, 0x800) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) close(0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/warn_count', 0x2480, 0x8) 5.260656872s ago: executing program 0 (id=249): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2b, 0x63f, &(0x7f0000000d80)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x80) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) 5.113821047s ago: executing program 0 (id=252): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x48}}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f0000000100)={0x1}) setresuid(0x0, 0x0, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x19}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newnexthop={0x30, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@empty}, @NHA_BLACKHOLE={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x9801}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002d80), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002d00), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f30303030303004000000000000007365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c461e6e0f805a68d7bfef22b32b8ef257a497f5ca00"], 0x5, 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 5.085700268s ago: executing program 32 (id=252): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x48}}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f0000000100)={0x1}) setresuid(0x0, 0x0, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x19}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newnexthop={0x30, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@empty}, @NHA_BLACKHOLE={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x9801}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002d80), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002d00), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f30303030303004000000000000007365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c461e6e0f805a68d7bfef22b32b8ef257a497f5ca00"], 0x5, 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 4.037894785s ago: executing program 4 (id=259): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket(0xa, 0x3, 0xff) recvmmsg(r4, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x4020, 0x0) shutdown(r4, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x34, r1, 0x1, 0x70bd2c, 0x2, {0x18}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}}, 0x20048004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000200025a729bd7000fddbdf250a0000cdff000001020001000800060000000000080018004e234e230c0014"], 0x38}, 0x1, 0x0, 0x0, 0x240088d4}, 0x841) 3.854232489s ago: executing program 4 (id=261): openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf0}, 0x80) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0xa00) 3.84462803s ago: executing program 4 (id=262): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x20400049, &(0x7f0000000f00)={[{@nombcache}, {@abort}, {@nomblk_io_submit}, {@noblock_validity}, {@nolazytime}, {@noblock_validity}, {@auto_da_alloc}, {@nobarrier}, {@jqfmt_vfsold}]}, 0x84, 0x4b2, &(0x7f0000000580)="$eJzs3MtvVFUYAPDv3umDV2lBfIAoo2hsRFsoqCzcaDRhY2KiC1zWUkilgKE1EUKkGINL48K1ujTxL3ClG6OuNG51b0yIYSO6MGPu3Dtl2t6BdqYPYH6/ZDrn3Mec8917Tu+Ze2YmgK5Vzf4kEdsi4reIGMyzCzeo5k83rl+a+Of6pYkkarU3/krq2/19/dJEY9NtxfPW4jWH04j0oyTmSsqduXDx9Pj09OT5Ij86e+bd0ZkLF5+dOjN+avLU5Nmxo0ePHD70wvNjz61KnANZXfd8cG7v7mNvffraRMy9/ePXWf0rxfrmOHJDHZdZjWrUarVa2rywp+OXvSMNRMyHmdyjMd6LKkWT7K33/8GoNDXQwXj1w/K9Nq1fBYE1k12fdixZml8V0yeT+nrgXqWPQ7dqXPGz97+Nx/qOQDbWtZfyN0BZ3DeKR76mp/6GNhmK6Gu6T7DatkXE8bl/P88eUXofAgBgdX2bjX+eKRv/pfFA03bbi7mhoYg4EBE7I+K+iNgVEfdH1Ld9MCIeWmH51UX5peOfXza3FdgyZeO/F4u5rYXjv/npjKFKkRuox9+bnJyqxMHimAxHb//JqenJQ7co47tXfv2k1bpq0/gve2TlH29MmNWf0z97+hfuc2J8dryzqG+6diViT09Z/Mn8TEASEbsjYk8br58ds6mnv9qbpbdvXbq+PP58LHxbqzDPVPsy4qn8/M/FovgbkrykVvOTo5tievLgaNYKDpaW8dPPV19vzvc2pVvEv6Ztvll2/rcsav/5YS3ib3SDxnztzMrLuPr7xy3f09z+/Je3/77kzXq6r1j2/vjs7PlDEX3FggXLx27u28g3ts/iH95f3v93Rvz3RbHfwxGRNeJHIuLRiNhX1P2xiHg8IvaXBVec6B9efuKdWx+hNtv/KsjiP1H6/y9ptIChpHm+vo1E5fT337Qqf3nn/0g9NVwsWc7/v+VWsLOjBwAAAHeHtD4HnaQj8+k0HRnJP8O/K7ak0+dmZg9U472zJ/K56qHoTRt3ugbn74fm9z+HmvJji/KHI2JH/ZNGm+v5kYlz0wMbHTx0ua0t+n/mj7X60Atw51jRPFqydvUA1p/va0KX+qx3o2sAbCDXf+he+j90r7L+fznixgZUBVhnrv/QvUr6/5WNqAew/lz/oXvp/9CVln4lvvHTE+180/9mYuexNvbq77DQuzJR6Wz30YgoXRXNP9qxBolI2959U8el1y7Xaq232XzbH6xIV/+wpCv+lYx9RaI/IlpuXFm46vKantPF7eeWfDsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4K/wfAAD//5Fr3NQ=") r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x310, 0x25, 0x148, 0x310, 0x60, 0x3e0, 0x2a8, 0x2a8, 0x3e0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2c8, 0x310, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@socket2={{0x28}, 0xb0950de4a1e82a43}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00', {0x15}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'bond_slave_0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x5, 0x0, 0x0, 0x0, 0x0, 0x3]}, {0x0, [0x0, 0x0, 0x0, 0x6]}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4d8) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) 2.954649683s ago: executing program 5 (id=265): r0 = getpid() tkill(r0, 0xe) (async) r1 = open(&(0x7f0000000000)='./file0\x00', 0x42001, 0x30) write$char_usb(r1, &(0x7f0000000040)="fc56a60019b66703dec97c276007861a7b40781893e2a5dcb423c13427b96fd437245acab871551292b168f0726d4aca2bcec02273f635661f37f43be0be1fc43df532cdd59615853c5f8cfc5dd2ed3cef0feb41fe7d48c608742379dcbcae9b24bda71cda475feaba393ce0408fecf66265649ed4510d3f19e32f962b6295feab3f1b0c3d0533248a046e2df6e66950192571dcaced7d2b48bb0013f45b69451cdac00f3b47e55c6fa6c16f18bf9a7109c379c90ebe0f2ab8a7ea5b585704c3d3d2f7122eedfb6c24464454a49905edbde15985bd8cce066fa33732db0de55d4ca21b58b54558", 0xe7) (async) r2 = syz_open_procfs$namespace(r0, &(0x7f0000000140)='ns/time\x00') (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x44}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x20008800) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r4, &(0x7f0000001a40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001a00)={&(0x7f0000000340)={0x16c0, r5, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x134, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x3}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x50}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x5}, @NL80211_NAN_FUNC_SERVICE_INFO={0xf1, 0xb, "9c09ac77da3f6e52f8fd2feb02edce92cbfefaf37e9770c983263b3aa5317a2cd5e373fe302e9fca7c14756913364b670c389a7f26c9fc752335ce10ee6917238c37a7b9702b18fd6969fdc8071b899cda9d5892535c60a53f044164ff3bd54d5750ab463567607f0e621322f24b11e594f8f45ff050b42a47030fccf09e9cb2e032f39e9d1905531e604a55f833159292901a4953f34ecf5de5add86b4c2f792fa0572276af731fd2326c5589d2e6971ec68c44dcbdb1deeef203ffbd5bec3c441d9a6ce142c9cb34861283075baaafbd7bfd503605629a192a3009eae84caa6c36622eb0ad9439b2e12e27c2"}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x3}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x3}]}, @NL80211_ATTR_NAN_FUNC={0x1534, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x14ac, 0xd, 0x0, 0x1, [{0x5a, 0x0, "120ee55864586bb70df81123476c33ea6c8b0d353b63f4e06f449553f93fa384f04eac82bc3f5958716670cec018fa1e3a034ac86c223621bc688a72aaf456d405e6bc65463e3288a0a09cd9d5ed79d53ef6f50ed8ac"}, {0x8c, 0x0, "2353ddf9c1ef488a21b9c9e6da559d6a4bd7b3fbc32342e1623e4cc7ae1c2a443ae99b2ae362b3435b3aa99ade419ce460cdf99edd80e666843006230cce95595f5370aeddc06d96ff696ba77409ab0e2beb192a701be8a05498cc04440f1aa6d7b473e5792fca044c6e5697adee2977bf7e1eaec2b173ec4bc1513e8613cadc0d632cf39137d73b"}, {0x61, 0x0, "b594fdb6432e51674a65ddc712021fea7f16efa7db4fba05a9c0a6e8b71507e69ce5db0033acfa8b1264c6a2f4f6fd726d3a274cd4cd1bc231bff45bdfbadc982e5677aabe786f3524e441062f5b541a2cf85446eaf10339cf6f854990"}, {0x1004, 0x0, "6f6d1ee8e1f2ddb15d97a5b4912a86cf8c9ec6a47f44d438ea74a548752023102a2e54ce09cfa46347ba4f599363efca077e82221b08fcbdc1072c3ac2ebe4ea3b32a300bfb61b0a6db38652a604473f64ec7b5795787ad978bae191ab621110fa589a28be052d6bb4cb67c9eab5d71dce0177fcfebf68104790a44cf74c481ee696755025c5ab2269a26674aab50e387e70f294b14153cbbc3f3f0f209c6bc1a2475993a523328efab16b015da19022ea868929c5702dd7a9ba85c3e00edc8215ad03c78bff22442d872a81e03b6caf68e25bdd5bb8070fb4fda75690169d9e441234207887f893eda40873f48e7a5c7d3aac1e59042d63ac846e1b124d0b97aca5b205ce2e948be20b7b7def9c14194f5cba1a3ef401c30ac2ef106b9f2397f3d40af98febcfe26e26d89928e565b963236ef852f91e50e503faa9b105c95f98c7967c41550c46862e29635c7f536e5ce626f9d4c59dd86fb3f2b8db47a5e4183ad9f42cd46f70e750667f8e805399334e3694e9ad4eb88c6e954ea43f534269a5b472c02202497285dd6cfa13778c59cf319f348878ef7ea34b0152eb51f2994c6991713227ba50ed46621bef31c520f5b807706591c88e631c1376674d9e4dd59fb49ae158cd2b41878908ef288359c920e840bbca26919bdec22ece64e46ee70109a00c2bf45a764ee6dca4e079aba73e28b2b05f34507ce2d7d1aa237712c068fe86a46a0b2abf868e059163fa3f87f46c0a78ef3a749a2083648c81ef1a8309b5a65159c866feb8ec83d9da4ae3c8a125bcc0abc33d4de1b432573bdd64219cdd2e77dd5f57145f4ec4defd1ea683b99ab610c49190169706d1e30ac2dc7bce08ecb276fa6f146784e361163282dfde5939010d59e48d99dca0b2907ec8881c3f638d119573dcc728b1940a5ac0ebc8cf7bbce0c4519ec0a057defeb2bffccff1564f92e5a304f6f205992bb6df14a3ff0aec0b9f74317ef2c52cff2b1dbb1e760d9ed04594f52d07c94d841b9fc4d29e7302f19f5ed08e7fd5500e0f19cf1a46adecde34c9f70f88773d07e354617bb24af4d8e73499856e83476583c0053be34ce53f59e6bc7d407861cd0dfd9cea2d6fb37b13c5af82669ce21379a8424f806c2dbc1cc19f1b01bed03cead17560656dad600dc50e55490220781e5d18e91aadb554996846c1d643acb3b9171140f5e15bda8ae3c530719ccf76aac3588887c84a9ba79c0c9487a2e5fc5a1f97950dfdee7681bd5e25d32306f90a068dd96e4408e37c7fbd27c2c1056bf4a236806f3982def6996d85792d7af4a32257680925870266f27b011c20aa4d5b98e6f6a4b6f427029895bdd239ab7d43f0b809d0d3795cf3f0dbb00d7218c63279534f07245c565db42943d2471c8fedc0543792c1764c64253c3c89934cdd67df4b6f4fce25dc5cd815f86273c930a030bef2ede571ae28d47afca15db40c8579780dac49ddadcdbd02cff3a7c6ff1ae39d50840fc781a7554d398b56c5656d43c92a903c36544eb8a0614ad023b5aad1d37f017199a2bb8413f531ede39924c69b419cca0de9a4154b1d92806724c679800fc69a4c6605496a533503ffcab531b8c59300b8841041bd8ff81424d416dd284c3b5e56b6dc7f754aa8adfe51ddd3a8b3952ff0cc20ca60725a19fde3cf153e13aee617e1350bf8bc4a582b989a26dbf11e19e918937d8a81d3ff2a6d2ad667efe3572def9617001aa03350dd0023cf1243d2e1d3418189b750bf03968ebb9693b39535f2c93a7b52f566517750d98823b24fa13a9d03e5dd936891ff9c64af3dc59e610b7f61cf07fefc9f7f0fb5d3bdfdd9f1112359536cc1ce5de02a4097ef1b4a1a2341c3eb0a98412be19fdfb53cc3870067df78e4cc0fdb64d57e3c5e0fd77d1a6b1d45c728d987d706090b4d86caf54a81d6540a81787953675a29017f8d810967cf60938b96f34d74216264ae7f7a16602cb5cbd1f017177972f8803931c0bdd446af5cbe4dc9500ea68c3e8dbae9be647bebd5bf4dc9251caef5bcc2604a838a34678b36b507ccb6fae05634f509c1a1c5fa3b6a5819ced65cf3af63ba68b591b59f111124b8fb848cc16c74ecd1ceaeacf53cd43da72c5be48dfc3d564bb55d52ffa84b79562af738c53b05cc35732c8c37c0f4806f5bf49aa84192483a52072c180501fd3eb5ed98835b54f3bac664a4151fa141a979e270c8bfa4917636e401fe0a60dfda958f5a7e909f1377a177d76b07bd51b5d119a1f31648fd39d3658d1cb46d5f5bb9ccb4caabaddefd597643333d299ca2b87837c7fe3a6b3ca372555150abdf2d86d9e0d336adc86b2ed724d23087335cf36857bfb2e9bd47fbbdb579ee5727b67c85bd3b22107568140b8ce610a78e717efae0790b3fff548b79e88ee006ad306349e24a37588d6e33289f7f851eb71c2b93307bf01dce4170c6ea2f4e716e58e3840714b8426472edc5d2722e0a25488d1261b40ea7d24288ab2e213fe5813bf8092e8d41916c4717d628b37103647639f90d77d8e9ece317a93785f30a4cac08f51b759960ab3253e584b79ad80127abe0c3ff723eab20a95d7ba52fc0d491877a063fda0276734978658ab65b1fe271244af0124335496a6bb153befc24a22d21f22a17c9979e74706872f948d5f15b55306307714c4009d9d8123a3c253b22c72d0b85fb145c4dc6cca9be127a3c0db01978c351f8e38f709a0fdcc8c85f3e92470dfb7670beaedb359945fd338c8bfbc11b4bfa8d8fd33250540ee92e667888062d00d63549d562cef21058800098bd72e4cac4d997d50389330b1c1105914df594296f97e4a19c7bb6013f8886d1567c874eea03214633752f317bd37557349fa042c89191a7039603e18daea758a7ffea50a2dcf0d14c3db3ea270a302d34da63abcef3ad85dca473ef4b231b8264e8cbd954c961c3088496c8be90fdac37a230735e1079ce5552b8796d6701ed6c08027d314d2cd09c770ed530b24adaa9e986f6df79a975f6a272483e6c7f97c7c933bc6003e9a5a1896d74f6868bdef3d88cb7fa2b12a4adeff7b37ce59f1e9290ecaf17724b414fc5d70a9dec0fcc682faa18d7c9995b66dca1cd2d7d9978e0855e55f8b043233cf7ea07a559ec5840c56dc929f8e70617658e7eab8ce6deaf5005676b12d9bc2bb41f9ef08506d97891a9919230086ef9d5b9ba3e79046ee90ca87de7b693a257156a0d28f5050b8e929e98c353182dd31a85d6c0ed527037aeaadf421d1d0b9092760a8ebe11f03af13642dd100f1971ccc3d1a24435c45dafca81791063746f0cf2e45ea307a08979a10d3dc6b627967bb2a0ee071e0f0decb0d746a19825fc77929efba9600a1bf94994ea786502f950e8113aa6eb43e721c170e3c39052ac7b967c94ea7474b33d6394689256ce2a582346751d326ba2f24acb631bd56f20521fb7870e6d1a24d26aee268abcc3a6d97c3229805d33175841ed4d2033050db99a9df1d0aabb6b0a9d27ec9624b48caef033dc97b44289a3cddf156901c0de29a0caa4e6aeae0cbad5007cc860a088d47231192d93b7f3f155fa8976bf790809b281839db797b5f6071eeda6656ed8f15b6840b58100cdaadd992553274a7e27296e052665da7764ae81158cf27fd983a2cf8a8e56cf631ebbfb1c74e513a2a5d7dfe3a8d582b9f1d93a185eb2fff0260d316de4745d1c11c78b115f0dea9cc5ad2e74635f52aeae2f7968d8489cbb00581f4ca20107090649eb70da4ab240ad3b101c6bd4201e4acc906390486df7206ae19fb06dd95d7e16b75dca565f52c020e2d772ca6a0dd266a9dbddea2ac2d8cb8c1e88fbd923264f9c3c525b593bb5aface5735a071c9e4f2167f69529a87f02d809706771859fc7fd2bd63cc53dfa23e7ba6776a81a165bc80b270eaeafd6dc1cb04404413ef869ec73c709af6560de101e28fafbe69d092cc423d12555a9d6dfff1c16971c134c00cf31c9a265c2f801c12c0ec1c63a7306910c593eb00da5d4faec05142a7ccc1993ee481d34f92193559067cf610cb04e2b24e3dfe85b5f1659e816bf8f626fc1f1ab0009155a33362772ef03efbbaa8bdf298de004219c6d1bc6d49600598d719685e3d92e320ae6dd5e923cf9404927fc80f4bc7e037edd54512f31d0e8cb45a0c705b779e904c984a650f753fe8c547e14f1eddb05600eeaf582d856bdaaad4a7402e7a15476c7367e9316d26cbb3915a25554a923c7e953d1b74128de0e32e4f74942a43efb96c37ee51aaee933309082a4661d60409805ecd3199b65e1bee3e0972e01ce8d642b1d5e2813a9e790762f8ab089e19308917b5c1154288b564cf728dedfef47c7afaad881a2ba3b3996f3e5565056f5d598766f98649419897092cd386750d849baa99a11ceff7d48e1f38ed1f1a62b3ac0e8475bc0b6073ac4ea9eebe89adde3b4107fcbb596805d67571ad8fb71c274eba873bcaecc54cfde06740b072e90a19480a04bfbaedaa3fd8805bd5cd1019475332ef55bb53b659ce193966155e362862ad4e923a923e4a352c7f5dd871b72adf9036d081a8a9db48bfe8eb38934d47249483186853713859310bee7fa73c36938869d1c1c582b135f549501e534e35427f1d58cf46e71c32c6440620f1f9a4730584399c5a090fae7e2f7263e42170bcf56e0ec020fbc9bcd0a5a07cc5baced26f7814f624524e3d188c565398d787ceb8379afa349f24de120d05de1c85138171c5d206ab7660fd3b92350743daf3d0e1e89aebf5c24b07f417d0e436d888dbfead90a38ecf010eaa2f331d0b74963bae32ef8c9e2cb5d960ff395be7addffcaa89cdf0197508f31f9809bf47284a1f9693af722d3e6dc38442518ad028b8e9a94cac7c8c86e9145a639b67d645724dd0290020c03668a7fc07cf2c06b3c4a9ce9644b936a1490a45cdc5011bd43e49cfdf328b2a569c7416b03af4ff64f9b47e0488a14f7cd99696c3ff0f1e15022fc757fdd654355ac081bd29980c388358458c1be583a0f39c8e4de2a67d8a4419828ab4225191ea4ecd4bdfd874d2c0d8da7ad9e96af5a319eb4acae7e94922a803dc9ee0a9b5bc7382532e92d22e049342dac58bdd52de99623c50f58788cd01e32cb46549a47e8b439d783900c429c1028b9ef8f7e400448ad424b9ca898a6ece8fe83f2c863209a9b2cd5c4d848c5c0cc375683202fc28674efe3dd862a87d84c4b561b3a2d4374874ad791c90bfa1091cece11ab4479aa71ab76f1f7bc3428ab62ca4510aa611f1798e0e1b8253f6c38c2460946c850286aa917d0a31f4dc9689efbccf0d26bab7d574d1385a9eb5859acbf7d82846f3c4c733140f18bd03b92dbf765b7f4569e27c810f285568351f1d13419cbdf363f9e7c287de249b20a6d7c6be13dde6100bec16545d9859d450530c6cdc2ceaaa37a8747315cc07655be2d33d6a935ee415c9ba62141fdcab01e59e64736afbb1cce27171d1077083a0abaa1c72f99594ed686d42ef2c0bd2861cb90e7e4952ecaac6016c6a81811f2f114bbff4b1a0d0fa3b40fa74895bf9d6e3761c917ab34a8600165633c553448397cdba0766d10e357d1d1ac2ebf41a3366db50d824a01fd98d7be1440071a189a408e2b355cc3bb2780efe379857c1f02b69bb635219404134868982b1cdf239a308c29d4a45e601c006891ada3eaf66548a0921c7f03652b184cc09727a3559350ce93635fbcb361652133cb7f2565065aa3c0d3483afcd8de467549aa3385e1f3dd387f555ef7bc913d94b92ce59b6eb80fd6"}, {0xe1, 0x0, "0ed32289be229b382de36c368a0f15a62ad73e81f707569e49412aa3439f5b804c8d887264f94030fcbf299ce2b7d6ef68a7daa645fc61fcc812dbd669613e2c00edadd23358e5d4a3f0aa0689820388a9e863f3b5a5b99f90aa6a597cb8c2bc5132a3397315fc675c42fc24dee45adb4a2e8844858962f59139b1ce5f0434a866294a39fedd746f7cc150556bfe3bd41c68cb57dc1742d18acf0c6b3aa571fe731c977c2072641e85a8631956bc3030e80c41e1f0dcac5af1b4ad58972bd35000ddefbb357c3641bc63dbc060f48aaf02a916cb92373523626179d8dd"}, {0x5a, 0x0, "18f000a8d1c8d09fb46a35685294b9c0ff9b89176b4828fd2401d07ec9a1d361e1b407f64d3a698400a8627900152b2159cc75167b47f8ab66f0a6c65c88d86ac9c95133993195aff81ffae1c624913f13def5b5eb11"}, {0xd7, 0x0, "22565317e58923595069dd67aa50b937691fff9146c63370795d169b70b378b02cfd8bcfdb4523690a64e6d36654a047be145e627374a1042334564da379acdffab381f2683e004cc0931c9658694a28aedbba7d951c0af6273e3f0064a5e68336aa9bebe210e369cf08568d891b26794a48250d1a642c3cbee09c7f4ebf0f4efe1c31964c49961539152836912a1b697a82a422ad0caefdd9b2a3f7c9e525c15d8c626e17ea1de5aad275b28d97d59b9831ad4ebbd09e6d20ab876387d5d5fe3a7b9afd51eb1b7aacb19cd552d1c960319bc9"}, {0xa2, 0x0, "fd5c95dbfba080abc7a41861ebb9806fcaaacc158b0fc6ad5a27c1aa0c3649efb639f4d55583415af6baa46a0789be127b97dfef9c95e167cadee791ab9fb609f4be21ed3ea01e3cf5472ed3b4cf84560bb18bfa07a73e88c6d327630d5c3d2bbfa8ae27fd0a973fa23f61ecebe5d99a4454301677405c64b6ea1b29cd0f84fcadbd5b2f712ed2ab66dadba72a675063dcfce130ab6b2f6987be54844ed6"}, {0x9c, 0x0, "01f8e297de3b069958b154d74238263cde7c729ef4a9da675f1e90cf20772ea762e75f8a1f9d22e9ce6ce60a8b71482f65481f5024fc32a9ca396ec734277c5c44bff9d27b0c96a4cae638f110d13e3030c6a12b912f6a64a73e32dbf72707a25182aa68f433819ba7f8214401d53e18f9b6bb01743677a7c278b74bb8a4ee0c2d8f63ecd0dbbaff18c2fd37f2c07e09948abfb8a9ac8b73"}]}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xc1}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x9}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0x64, 0xb, "f74d05e44fab922cd7ad70c5f13e5d201d047906c6d0a0ffc9db8f8556b845a180137eba0a0100b2f168d4658b24067f2b663ccb666c226e5ed8c9c0f29752e4231c5b66128e2fc9723fd0ed0842fe56982a56f39a690ccd5258fb768f74e058"}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x3c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x38, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x34, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}]}]}]}]}, 0x16c0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000001a80)={'\x00', 0x2000, 0x101, 0x1ff, 0x8, 0x8, r0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001b00)={'batadv_slave_1\x00'}) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001b80)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40004044}, 0x1) (async) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000001c00)={0x0, 0x3, 0x8, 0xffffffffffffffff}) (async) getdents64(0xffffffffffffffff, &(0x7f0000001c40), 0x0) (async) r7 = open_tree(r1, &(0x7f0000001c80)='./file0\x00', 0x1000) ioctl$AUTOFS_IOC_EXPIRE(r7, 0x810c9365, &(0x7f0000001cc0)={{0x10000, 0x9}, 0x100, '.\x00'}) (async) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001e00)={0x0, "8eca990416bf1f40bff5c044b4b12494"}) (async) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000002e00)={0x0, 0x59, 0x6}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000003200)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000003600)={0x0, 0x0, {0x9, @usage=0x5, r8, 0x4, 0x6, 0xf, 0xfffffffffffffffb, 0x10, 0x15, @usage=0x200, 0x8, 0x9, [0x8000000000000000, 0x2cbf, 0x6, 0x0, 0x81, 0x7fff]}, {0x0, @struct={0x10001, 0x4}, r9, 0x7, 0x731a, 0xfffffffffffffffb, 0x3, 0x7fff, 0x8, @struct={0x5, 0x4553}, 0x8, 0xa, [0x8000000000000000, 0x3, 0xcf, 0x3, 0x7, 0x8]}, {0x6, @usage=0xbf7, r10, 0xffffffff, 0x0, 0x4, 0x8, 0x8000, 0x2, @struct={0x2, 0x96c7}, 0x0, 0x4d, [0x7, 0x10, 0x5, 0xffffffffffff0000, 0x80, 0x7]}, {0x5b28, 0xfffffffffffffffa, 0xf98}}) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000003a00)=0x7) (async) r11 = open(&(0x7f0000003a40)='./file0\x00', 0x8200, 0x2d) sendmsg$NL80211_CMD_GET_MPP(r11, &(0x7f0000003b40)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003b00)={&(0x7f0000003ac0)={0x38, r5, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1969953a, 0x13}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}}, 0x40000) mkdirat(r11, &(0x7f0000003b80)='./file0\x00', 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000003c40)={'ip6gre0\x00', &(0x7f0000003bc0)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0xf, 0x3ff, 0x44, @loopback, @dev={0xfe, 0x80, '\x00', 0x41}, 0x7800, 0x7800, 0xfffffffe}}) fcntl$setlease(r7, 0x400, 0x1) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r12, &(0x7f0000003d40)={&(0x7f0000003c80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003d00)={&(0x7f0000003cc0)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x80) 2.947822683s ago: executing program 1 (id=266): close$binfmt(0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a1c000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 2.866807605s ago: executing program 5 (id=268): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000001340)=""/239, 0xffffff9a, 0x10120, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x200000000, 0xffffffffffffffff}, {0x4000}, 0x0, 0x6e6bbe}, {{@in6=@loopback, 0x0, 0x6c}}}, 0xe8) syz_usb_connect$uac3(0x5, 0xac, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x499, 0x105c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0xff, 0xc0, 0x10, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x2a, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0xff, 0x401, 0x6, 0x6, 0x2, 0x3, 0x5, 0x7f, 0x80}, @feature_unit={0xd, 0x24, 0x7, 0x2, 0x5, [0x8, 0x10]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xf5, 0x4, 0xe, 0x5, "fa6c", "4bf3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x40, 0xd4, 0x4, {0xa, 0x25, 0x25, 0x6, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x210, 0xfa, 0xa, 0x2, {0xa, 0x25, 0x25, 0x0, 0x5, 0x9}}}}}}}}]}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) (async) listen(r0, 0xfffffffe) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) accept4$unix(r0, 0x0, 0x0, 0x0) (async) recvfrom$unix(r2, &(0x7f0000001340)=""/239, 0xffffff9a, 0x10120, 0x0, 0x0) (async) socket$inet6(0xa, 0x1, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x200000000, 0xffffffffffffffff}, {0x4000}, 0x0, 0x6e6bbe}, {{@in6=@loopback, 0x0, 0x6c}}}, 0xe8) (async) syz_usb_connect$uac3(0x5, 0xac, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x499, 0x105c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0xff, 0xc0, 0x10, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x2a, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0xff, 0x401, 0x6, 0x6, 0x2, 0x3, 0x5, 0x7f, 0x80}, @feature_unit={0xd, 0x24, 0x7, 0x2, 0x5, [0x8, 0x10]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xf5, 0x4, 0xe, 0x5, "fa6c", "4bf3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x40, 0xd4, 0x4, {0xa, 0x25, 0x25, 0x6, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x210, 0xfa, 0xa, 0x2, {0xa, 0x25, 0x25, 0x0, 0x5, 0x9}}}}}}}}]}}, 0x0) (async) 2.788016387s ago: executing program 4 (id=269): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@orlov}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt/bmd33vjPv7b6Z15kA2tZA+ieJ2BYRv0dEX5a9fYWB7Gl+bmbs5tzMWBILC2//nVTWuzE3M1asWrxva545VIoofZbE8WRpuVMXL50ZLZcnzuf5oemzHw5NXbz03Omzo6cmTk2cGzl27OiR4RdfGHl+TeJM47qx9+PJfXtef/fqm2Mnrr7307dptXbvz5ZXx3FHN+sEVMdAutX+WaioXfZkE3W/F2yvSiedLawITemIiHR3dVX6f190xOLO64vXPm1p5YB1lf42bWm8eHYB2MSSaHUNgNYofujT49/isUFDj/+F6y9HdOfp+bmZsflb8XdGKX+9ax3LH4iIE7P/fpU+otnzEAAAq1AZ2zxbb/xXit2V52yuY0c+h9IfEfdHxM6IeCAidkXEgxGVdR+KiIezNy/0rbD8gZr80vFP6VrdOq+RdPz3UtXYb74q/vypvyPPba/E35WcPF2eOJxvk0PRtSXNDy9Txvev/vZFo2XV47/0kZZfjAXzClzrrDlBNz46PbpWG+H65Yi9nfXiT27NBKQtYE9E7G3uo3cUidNPf7Ov0Up3jn8ZazDPtPB1xFPZ/p+NmvgLyfLzk0M9UZ44PFS0iqV+/vXKW43Kv6v418D1A49kicX9X7NGVUMrlyfOTzVfxpU/Pm94TLPa9t+dvFOZs/7l/ey1C6PT0+eHI7qTNyr54piu8vrI4nsvjE73pvli/bT9HzpYv//vzN+T7v90K6WNeH9EPBoRj+V1fzwiDkTEwWXi//GVJz5YJv4kkmjd/r8cMV73++9W++9PqufrV5HoOPPDd41mzFe2/4/GbOW7NlP5/ruDlVbwLjcfAAAA3BNKEbEtktJglh7YFqXS4GD2P/y74r5SeXJq+pmTkx+dG8+uEeiPrlJxpquv6nzocDKbf2KWH8nPFRfLj+Tnjb/s6K3kB8cmy+Mtjh3a3dbb+38U/T/1V0erawesO9drQfuq7f+lFtUD2Hgr+f13LACb0+39vyf909uqugAby/E/tK96/f+TmrzxP2xOS/v/n3VuWQdsRsb/0L70f2hf+j+0pWYu54/jjRb1REQztwUoLhZY/V0FelZ8hX+7JIo7XqxnWb1x6Ux3/kqUWhRpR5ONbVMk0h6zsYUu3kMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgXvZfAAAA//8hId5P") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x880, &(0x7f00000005c0)=ANY=[@ANYBLOB='time_offset=0x0000000000000006,iocharset=iso8859-13,utf8,allow_utime=00000000000000000000003,discard,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d69736f383835392d372c6572726f72733d72656d6f756e742d726f2c646d61736b3d30303030303030303030303030303030303030303030302c616c6c6f775f7574696d653d30303030303030303030303030303030303030313337312c005d67be522c4eeab3afbfa43bbda48ee0a6d7e18a4e550bdf9e0bcbde43fae869be71181fad5ff81e5aa8c3f569597539170150666b645fa1a84ee198c78c3f620cb2562a161a2eca8f47"], 0x1, 0x1548, &(0x7f0000003300)="$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") r2 = open(&(0x7f00000000c0)='.\x00', 0x40100, 0x33) r3 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000000)=ANY=[]) recvfrom$inet(r2, &(0x7f0000000300)=""/93, 0x5d, 0x40000100, &(0x7f0000000380)={0x2, 0x4e20, @local}, 0x10) getdents(r2, &(0x7f0000001880)=""/4081, 0xdfd784c7745043a9) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f1, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x1, 0x0, 0x3, 0x2, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x2, 0x0, 0x29, 0x0, @loopback, @empty}}}}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_XSAVE(r7, 0x5000aea5, &(0x7f0000000600)={[0x4c94, 0x200, 0x4, 0x488e, 0x9, 0xa, 0x9d110b0, 0x1d69, 0x4, 0xffff741c, 0xe, 0x2, 0x7, 0xa, 0xf, 0xfff, 0x1, 0x0, 0x8000, 0x1ff, 0x0, 0x1, 0x40, 0x10000, 0x9, 0x709, 0x3, 0x2, 0xffffffff, 0x3, 0x1000, 0xf, 0xfffffffc, 0x0, 0x5, 0x4ef2, 0x9, 0x3ff, 0xf, 0xf, 0x80000001, 0x2, 0x7, 0xffff, 0x0, 0x3, 0xffffff7f, 0x7, 0x8, 0x7ff, 0x9, 0x7f, 0x24fc, 0xfffffffd, 0x40, 0x955, 0x1, 0x7fff, 0x1ff, 0x4, 0x1, 0x7, 0x6, 0x2, 0x7f18d2c7, 0x9, 0xfffffff7, 0x5, 0x8000, 0x1, 0x8000, 0xc829, 0x7, 0x5, 0x23d8, 0x6, 0x8a0, 0x7, 0x55, 0x1000, 0x7, 0x80000000, 0x10, 0xb, 0x80000001, 0x5, 0x0, 0x5, 0x1, 0x2, 0x5, 0x7fffffff, 0x7, 0x200, 0x48, 0x5, 0x1, 0x100, 0xe, 0xed2, 0x3b, 0x1, 0x10000, 0x9, 0x9, 0x4, 0x40, 0x6, 0x5, 0x0, 0x7ff, 0x1, 0x822, 0x0, 0x5, 0x200, 0x891f, 0x2, 0x4, 0x2, 0x1, 0x10001, 0x0, 0xfffffff9, 0x100, 0xe, 0x4, 0xd, 0x1, 0x0, 0x5, 0x2, 0x7, 0x2, 0xffff, 0x76, 0x7, 0x8, 0x9, 0x6, 0x1000, 0x5, 0x141, 0x10, 0x43de, 0x2e3880, 0x1, 0x7fffffff, 0x4, 0x3, 0x2, 0x3, 0x6, 0xff00000, 0x3, 0x5, 0x5, 0xfff, 0x2, 0x20a, 0x2, 0x0, 0x7, 0x400, 0x2, 0x0, 0x705, 0x0, 0x9, 0x1, 0xd, 0x2, 0x8, 0x656a, 0x4, 0x7ff, 0x6, 0xfffffff9, 0x3, 0xffffffff, 0x7fff, 0x5, 0x629c, 0x6, 0x490, 0x7, 0xfffffff5, 0x10000, 0x66e, 0xa, 0x7, 0x80000001, 0x9, 0xbe, 0x8, 0x8, 0x5, 0x8, 0xd1c1, 0x5, 0x6, 0x2, 0x8001, 0x7ff, 0x9, 0x4, 0xffff080c, 0x555c, 0x4b, 0x9, 0x33716a0e, 0xfffffff8, 0x3, 0x3, 0x5, 0x6, 0x5, 0x0, 0x4, 0x95, 0x7, 0x78f0c9c6, 0x2, 0x6, 0x67d2ae15, 0xfffffff9, 0x61, 0x3, 0x9, 0x1, 0xf0, 0x8, 0x10000, 0x478, 0x6, 0xc0000000, 0xfffffffe, 0x8, 0x10000, 0xa0307df, 0x7, 0x1, 0x867, 0x5, 0xffff, 0x9, 0x10, 0xfffffbed, 0xade, 0x2, 0x3, 0x6, 0x9, 0x2, 0x3974, 0x0, 0x3, 0x10001, 0xa8b9, 0x2, 0x3, 0xfffffffb, 0x2, 0x7f, 0x8, 0xec, 0xa, 0x80000000, 0x2, 0x33f1, 0xf2, 0x1ff, 0x1000, 0x66f6, 0x40, 0x0, 0x8, 0x585, 0x3ff, 0x2, 0x1, 0x8000000, 0x0, 0x9, 0x1000, 0x7, 0x10000000, 0x200, 0x1, 0x1, 0x7, 0x0, 0x8001, 0x6, 0x3, 0x2, 0x6, 0x9, 0x7ff, 0x8, 0x8, 0x40, 0x1, 0x101, 0xfffffffb, 0xfffffff7, 0xc3b, 0x1, 0x9, 0x9, 0xffff, 0x8, 0x7, 0x3, 0x41, 0x3, 0x5, 0xffffb600, 0x5, 0x0, 0x3, 0x3, 0x2e, 0x10, 0x8000, 0xfffffffa, 0x5, 0x6, 0x1ed6, 0x5, 0x3ff, 0x3ff, 0x9, 0x2, 0x6, 0xffff, 0x800, 0xffff, 0x805, 0xf689, 0xe, 0x0, 0x81, 0x7, 0x6, 0x8, 0x2469, 0xceb9, 0x80, 0x2d7, 0x7, 0x3, 0x9, 0x5, 0x1, 0x3, 0x4, 0x4, 0x3, 0x3, 0x7, 0x292, 0x3, 0x101, 0x2, 0x8, 0x2, 0x7, 0x2, 0xfffffff8, 0x4, 0x3, 0x9, 0x5, 0xe627, 0x4, 0xffffff00, 0x10001, 0x2, 0xf, 0x5, 0xc, 0x4, 0x200, 0xd, 0x6, 0xffffffff, 0x3ff, 0x4, 0x1, 0x2400, 0xe9f1, 0x10000, 0x81, 0x4421, 0x0, 0x59c, 0x8, 0x6, 0x4, 0x2, 0x62, 0x3, 0x4, 0xfffffffe, 0x8, 0x4e, 0x7, 0x1, 0x6, 0xffff3829, 0x0, 0x87a4, 0x3, 0x6, 0x100, 0x7f, 0x100, 0xb4, 0x1133, 0x20, 0x7, 0x4, 0x7, 0xfffffff0, 0x1000, 0xe, 0x4, 0x0, 0x0, 0xf, 0x7, 0x4, 0x7, 0x2, 0x1, 0x560, 0x8, 0x8000, 0x0, 0xddab, 0xe1f, 0x8, 0xa, 0xb5dd, 0x39, 0xd8c69d2, 0x8, 0x4, 0x80000000, 0x8000, 0x5d9, 0x9, 0x1, 0x8, 0x9, 0x6, 0x74460464, 0xfffffffa, 0x1ff, 0x6, 0x4, 0x1, 0x7, 0xffffff88, 0x4, 0x1ff, 0x7, 0x1, 0x22, 0x882, 0xffff, 0x1, 0x2, 0x3, 0x4, 0x401, 0x8001, 0xfffffbff, 0x6, 0x9, 0x45d, 0x409, 0x0, 0x7, 0x7f, 0x2, 0xa0, 0x1, 0x8, 0xffffff00, 0x9, 0x38e, 0x4, 0xc0d, 0x96, 0x0, 0x8, 0x98, 0x1, 0xc1, 0x9, 0x2, 0x4, 0x7fffffff, 0x1, 0x800, 0x400, 0x7fff, 0xc2, 0x22, 0x2, 0x7, 0xfffffeff, 0x10000, 0x5, 0x7f, 0x8, 0x4, 0x5, 0x8, 0x3, 0x3, 0x4d53, 0x101000, 0x2, 0x5, 0x9, 0xd3, 0x36, 0xd48, 0xf, 0x1, 0xffff, 0x8, 0x10, 0x9, 0x0, 0x9, 0x10000, 0x5, 0x6, 0x4, 0x4, 0x0, 0x6f86f9c3, 0x3, 0x400, 0x7ff, 0x100, 0x6, 0x9, 0x9, 0xd, 0x8a, 0x9, 0x0, 0xebd2, 0x8, 0x1000, 0x0, 0x8, 0x0, 0x0, 0x4, 0x7, 0xf826, 0x0, 0x2, 0x9, 0x11, 0x0, 0x9, 0x1, 0x4, 0x8, 0x6, 0x6, 0x4, 0x1000, 0x9, 0x0, 0x5, 0x0, 0x8, 0x8, 0x0, 0xa, 0x7f, 0xffffffff, 0x1, 0xdb18, 0x2, 0x5, 0x1, 0xe1e1, 0x7f, 0x101, 0x6, 0xe3, 0x1000, 0xe570, 0x0, 0x10, 0x9, 0xe, 0x3, 0xf, 0xc, 0x4, 0x3, 0x0, 0xc, 0x0, 0x1957, 0x800, 0x3d1, 0x96, 0xfffffffe, 0x9, 0xffffe433, 0x6, 0x6, 0x3, 0x6, 0x6, 0x9, 0x7b3, 0x7db, 0x8001, 0x3, 0x24aef43c, 0x7, 0x2, 0x8, 0x7, 0x43, 0x101, 0x100, 0x2, 0x7, 0x3, 0x10000, 0x6, 0x2, 0x200, 0xfffffffd, 0x0, 0x1, 0x8001, 0x7, 0x4, 0x3, 0x1000, 0x2, 0x4, 0x3, 0x7, 0x224, 0x9, 0x3, 0x6a6035e3, 0xc, 0xda, 0x6, 0x6, 0xfffffff3, 0x7fc5, 0x0, 0x0, 0x5, 0x3, 0xe, 0x7, 0x4, 0xa, 0x10, 0x7, 0x9, 0xd236, 0x0, 0x4, 0x0, 0x6, 0xa78, 0xea, 0xfe8, 0x5, 0xffffffff, 0xfffffff8, 0x2, 0x101, 0xe4f, 0x1, 0x3, 0x4, 0x5, 0x5, 0xdde, 0xa, 0x3, 0xd, 0x92f, 0x5de, 0x22a8000, 0x6, 0x101, 0x5, 0x4, 0x1, 0x1, 0x8cd, 0xbf4, 0x7abe, 0x800, 0x2d7, 0x0, 0xffff, 0x9, 0x4, 0xd79, 0x8, 0x8, 0x8, 0x4, 0x2, 0x1, 0x0, 0x3, 0x0, 0x10, 0x7ff, 0x4, 0x6, 0x7, 0x8, 0x5, 0x10, 0x0, 0x5028, 0x6, 0x7, 0x9, 0xb, 0xabdf, 0x9, 0x5, 0xfffff170, 0x6, 0x5, 0x7, 0x4, 0x7, 0x4, 0x8, 0x23680, 0x3, 0x8, 0x800, 0x5, 0x6, 0x5, 0x4, 0xc440, 0xb, 0x8, 0x3, 0x9, 0x1, 0x6, 0x3c, 0x1, 0x2, 0x9, 0x4, 0x8, 0x1000, 0xdcc, 0x44f, 0x81, 0xfa86, 0x0, 0x0, 0x1ff, 0x80000000, 0x4, 0x2, 0x7, 0x5, 0x9ff, 0x1, 0x4, 0x100, 0xfffff56f, 0x11eecf5b, 0x0, 0x2, 0x4, 0x6, 0x6, 0x28000000, 0x4, 0x3, 0xe, 0x6, 0x5, 0xe705, 0xfffffffe, 0x9, 0x6, 0xa, 0x8, 0x2, 0x7, 0x5, 0x800, 0x5, 0x3, 0x1e, 0x5, 0xffff, 0x1, 0x3, 0xb5, 0x0, 0x3ff, 0x3, 0x4, 0xffffff01, 0x7, 0x1, 0xf, 0x2, 0x10001, 0x12, 0x2, 0x80000001, 0x6, 0x6, 0x380f, 0x7800000, 0xffff, 0x7f, 0x2, 0x5, 0x5, 0x5d4ff57e, 0x81a6, 0x5, 0xc, 0x8, 0x9, 0x5, 0x7, 0xfe0, 0x7, 0x1, 0x60000000, 0x80000000, 0x400, 0x9, 0x0, 0x4, 0x1, 0xc, 0x3, 0x400, 0x3, 0x4, 0x80000000, 0xfffffff8, 0x3e, 0x9, 0x3, 0x8, 0x5, 0x3ff, 0x3, 0x81, 0xd44, 0x3ff, 0x1, 0xe2cd, 0xf8b, 0xfd0e, 0x3, 0x7, 0x9, 0x2, 0x29, 0xfffff800, 0x4, 0x90, 0x3, 0x2, 0xb, 0x5, 0x4, 0x80, 0x7, 0xfffffff8, 0xe, 0x2, 0x8, 0x8000, 0x0, 0x2, 0x3, 0x4cd5, 0x3000, 0x100000, 0xffc0, 0x6, 0x800, 0x81, 0xc, 0x2, 0xfffffff0, 0x7, 0x9, 0x8, 0x8, 0x39b0, 0x7, 0x9, 0x8, 0x380000, 0x3, 0xa, 0x1, 0x5, 0x70000000, 0x3, 0x1, 0x3, 0x1, 0x8001, 0x6, 0x80000000, 0xfffffff6, 0x2, 0x6f8, 0x10001, 0xbe, 0x2, 0x3, 0x10, 0xd98, 0x400, 0x8, 0x10, 0x3, 0x5, 0x0, 0x800, 0x2, 0x9284, 0x8001, 0x8, 0x9, 0x61, 0x0, 0x5, 0x9, 0x2b9, 0x24, 0x0, 0xffffffff, 0x2, 0x7fff, 0x9, 0xa, 0xfff, 0x1, 0xffff, 0x8, 0x9, 0x7, 0x24, 0xffff2192, 0x1, 0x5, 0x9, 0x6, 0x9, 0x8, 0x9, 0x2, 0x9, 0xd, 0x52, 0x9, 0x4, 0x4, 0x4, 0x0, 0x80, 0x101, 0x8, 0x4, 0xe8e6, 0x2, 0x6, 0xa0b, 0x1, 0xfffff001, 0x4, 0xffffd377, 0x0, 0x9, 0x3, 0x2, 0x101, 0xf, 0x0, 0x0, 0x6, 0x1, 0x1, 0x10001, 0x59fa, 0x6, 0x99, 0x8001]}) read(r4, &(0x7f0000000080)=""/58, 0x3a) creat(&(0x7f0000000140)='./file1\x00', 0x128) ioctl$KVM_GET_SREGS2(r0, 0x8140aecc, &(0x7f0000001600)) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) write$P9_RLERROR(r0, &(0x7f0000000100)={0x12, 0x7, 0x2, {0x9, '/dev/kvm\x00'}}, 0x12) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r10, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r9, 0x0, 0x0, 0x1}]) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r8, 0x89f5, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000200)={@multicast2, 0x0, 0x0, 0x90, 0x0, [{@dev}, {@dev}, {@empty}, {@dev}, {@broadcast}, {}, {}, {@multicast1}, {@dev}]}}) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000500)={0x3000000000000000, 0xeeee8000, 0x100000000, 0x0, 0x1a}) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) 2.776627617s ago: executing program 1 (id=270): prctl$PR_GET_SECCOMP(0x15) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) r1 = socket$inet(0x2, 0x8080b, 0x7) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0xa, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fsopen(&(0x7f0000000040)='debugfs\x00', 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) readv(r1, &(0x7f0000000480)=[{&(0x7f0000001940)=""/4104, 0x1008}], 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x204000, 0x0) fcntl$getflags(r6, 0x403) splice(r2, 0x0, r4, 0x0, 0x7151, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r7) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000940)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fcdbdf250f00000014000780080001000a"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0xc) 1.945603509s ago: executing program 3 (id=275): r0 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r1 = syz_open_procfs(0x0, &(0x7f00000191c0)='net/route\x00') pread64(r1, &(0x7f0000019200)=""/102356, 0x18fd4, 0x1021f) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) ioctl$XFS_IOC_FREE_EOFBLOCKS(r2, 0x8080583a, &(0x7f0000000180)={0x3, 0x81, 0x5, 0x1, 0xcf62, 0x0, 0x6}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27) ftruncate(r2, 0x10) symlinkat(&(0x7f0000000380)='./file2\x00', r0, &(0x7f00000003c0)='./file2\x00') 1.92093885s ago: executing program 1 (id=276): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0x3, &(0x7f0000000180)={0xfffffffffffffff3, 0x4}, &(0x7f00000001c0)) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000005c, &(0x7f0000000100)=ANY=[], 0xc, 0x1537, &(0x7f0000001ec0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file7\x00', 0x1c0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000e80)=@generic) socket$inet6(0xa, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) ftruncate(r4, 0x4a8e) r5 = socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, &(0x7f0000000300)=0x7fff, 0x4) 1.337434245s ago: executing program 4 (id=277): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x844) 896.969567ms ago: executing program 1 (id=279): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe800000000000f5ff000000000000aaff020000000000000000000000000001"], 0xffe) 841.428868ms ago: executing program 3 (id=280): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r1 = accept(r0, &(0x7f0000000040)=@phonet, &(0x7f00000000c0)=0x80) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x5, 0x0, 0x1, 0x8}]}) sendto$inet6(r1, &(0x7f00000001c0)="54799f9738c6544c67903ef136f76085426e996e2ce2b84226155d22be7b1ce982bd9c2072f0eb22d3e0fa2d3a87539130", 0x31, 0x4, &(0x7f0000000200)={0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fffffff}, 0x1c) setpriority(0x2, 0xffffffffffffffff, 0x10001) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) read$FUSE(r0, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) stat(&(0x7f0000002280)='./file0\x00', &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r2, r3, r5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x11) accept(r1, &(0x7f0000002340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f00000023c0)=0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002400)={0xffffffffffffffff}) ptrace$ARCH_SET_CPUID(0x1e, r4, 0x0, 0x1012) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002440)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x7fff, '\x00', 0x0, r0, 0x5, 0x5, 0x5}, 0x50) pipe2(&(0x7f00000024c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002500)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x80, '\x00', 0x0, r8, 0x3, 0x4, 0x2}, 0x50) ioctl$KDFONTOP_SET_DEF(r9, 0x4b72, &(0x7f0000002980)={0x2, 0x1, 0x3, 0x14, 0x140, &(0x7f0000002580)="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"}) ioctl$PPPIOCDISCONN(r0, 0x7439) r10 = signalfd4(r6, &(0x7f00000029c0)={[0x40]}, 0x8, 0x80000) dup(r10) rt_sigprocmask(0x1, &(0x7f0000002a00)={[0x5]}, &(0x7f0000002a40), 0x8) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000002b40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x34, 0x2, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x8}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}]}, 0x34}}, 0x24040050) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000002b80)='netbios-ns\x00', &(0x7f0000002bc0)='./file0\x00', 0xffffffffffffffff) syz_emit_ethernet(0x1b1, &(0x7f0000002c00)={@multicast, @remote, @val={@val={0x88a8, 0x3, 0x1}, {0x8100, 0x1, 0x0, 0x1}}, {@mpls_uc={0x8847, {[{0x1, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x872c, 0x0, 0x1}, {0x3}, {0x6}, {0x7bf}, {0x5}, {0x8d}, {0x8000, 0x0, 0x1}, {0x8}], @ipv6=@gre_packet={0x4, 0x6, '>Ne', 0x14b, 0x2f, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @mcast2, {[@fragment={0x2e, 0x0, 0x10, 0x0, 0x0, 0x17, 0x64}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x7c, 0x0, [], "b967f9e99b7e4002ddc990c0bbf59cbc63f6b73964cef78f9224923e7861cf9765833e02aa6b8455051816390473504815e0d326b18640a309b963c0f24e1680f84d8261ace0388e12dfa91bdf95b86c6e59d9711381452b43444e5138dff9a9561f3b12fde87bbd8f82624a6c7af25328a27c8e7358f1576f48250c"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x7fff, 0xfffa, 0x0], "d40b2228286c17198644826b58cb3a9bb37fd267e74e697c6d5fd35e6c4263740e0eb19c90a5fe7f1629e9913b0e41f26e2a07b23bd06f042d03ae7753dae56d3c1440bae0"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [], "57a6250331f5ae96bbe245f7be3eb014ab1e5f4cf325b426c6fc92aa90443239e99417f8"}, {0x8, 0x88be, 0x3, {{0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0xff}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x0, {{0xc, 0x2, 0xff, 0x2, 0x0, 0x1, 0x1, 0x2}, 0x2, {0x3, 0x9, 0x1, 0x18, 0x1, 0x0, 0x2, 0x1}}}, {0x8, 0x6558, 0x0, "48b8d132f87ed79565feccae9e4bb58150821084"}}}}}}}}, &(0x7f0000002dc0)={0x0, 0x2, [0x20, 0xde9, 0xe66, 0x3a0]}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r8, 0x40106614, &(0x7f0000002e00)) ioctl$RTC_VL_READ(r10, 0x80047013, &(0x7f0000002e40)) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000002e80)='netbios-ns\x00', &(0x7f0000002ec0)='./file0\x00', 0xffffffffffffff9c) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000002f40)={0x4, &(0x7f0000002f00)=[{0x0, 0x5, 0x5, 0x1}, {0x2de9, 0xd2, 0xf8, 0x7}, {0x8, 0x81, 0x4, 0x3d}, {0xe, 0x4, 0x81, 0x5}]}, 0x10) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000003140)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003100)={&(0x7f0000002fc0)={0x140, 0x12, 0x400, 0x70bd27, 0x25dfdbfd, {0x0, 0x10, 0x3, 0x4, {0x4e21, 0x4e21, [0x6, 0x7, 0x1ff, 0x80], [0x2, 0x7, 0x7, 0x33c5], 0x0, [0x9, 0x9b]}, 0xa9db, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xf4, 0x1, "7211cc1ffe2153899ea80d355808dea25d65c937cfd0e604afd9c032a06416c210a6c95be336bdce0565b827f0ba67a041e22b5527c6057f6f76bd49a8ae7b6d2f27cc84989fe73af4f7d5a80ad776714783fe5123384655a93ec7a50543e9b306bc5dbf1212af4a30f670f3aacf945e955c8d786c68c679b4e963db4f32d68b126a60f4b5edad82dd20a7fb0aebaceb469f48ed5cf6740b2ecd42ee17a79ef522effa6691a750dadca09a80c9b422f63dfd2ba8ed697305cad9e8bc478f226f03f4349b57135b9f1814f9b8723cafe552c44f8de66385c99e89950a59dba5e5b0c413f11fdf19305e23b0e60932093b"}]}, 0x140}, 0x1, 0x0, 0x0, 0x10800}, 0x8884) 718.196451ms ago: executing program 4 (id=281): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe", @ANYRES64=0x0, @ANYRES64=0x0], 0x20000600}}, 0x0) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x82, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000010) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x80, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xee01, 0x1000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f00000003c0)={{r2}, "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"}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa10852, &(0x7f00000013c0)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,iocharset=cp874,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYBLOB, @ANYBLOB="d9b2de1a2f0751da7120c88a88f0955139afd5c85d409cd57977db7b7c40ade28a33a618636ff400fb97e6caf4db25c1ccd8fee922c9ca87d19e19bed2941af9fc3561a936e805795a9965b5eb669fb143b894f24dbf2cd930f3967172749732bead8f13f18ad0a6d2451810d29d7c5e9dbda0be77473bb0431e71cfa02a873d927ec49990e8ac2bb9469d53e0420e67beaa46cb9850de015b11ed84f357d67ae57d156d5a089f321ec719835c6eeb76ad4a79ca0a80f230d9110b57272d24eb8d5effb24faddf3ffcb309d9a27c57181780f56a1b34", @ANYRES32=0x0, @ANYBLOB="244429c78d4c7fbf49cd097e5022f1ae39f9db8339d3a6220188fa3516964b0fba8fa9e3451db52ce83e8e1e6f01107b778dbabc4ce54357ddcf1caa911b9f15153097456c221a20f6d322f59731e3362ef30cbeb63e1b78d1da50b6da22ea1c48b06ab73e772fd4d66f8d456d645ccac92786f37d589f10c34d3ef442d25b4a", @ANYBLOB="f48e3d507a7138", @ANYRESHEX=r1, @ANYRES16, @ANYRES8, @ANYRES8, @ANYRES16=0x0, @ANYRES16=0x0, @ANYRES32], 0xfe, 0x1508, &(0x7f0000002b00)="$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") getdents64(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000100)=0x6) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001800010005007000fedbdf2502003008000300010051000008400700ac1e020108000f0001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0xc8c4) 687.703642ms ago: executing program 1 (id=282): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000100)=0xd0e, 0x4) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000300)=""/73, 0x49}, {&(0x7f0000000fc0)=""/4096, 0xfdea}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000280)=""/73, 0x49}, {&(0x7f0000000080)=""/89, 0x59}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000240)=""/17, 0x11}], 0x8, &(0x7f0000000880)=""/207, 0xcf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 652.506213ms ago: executing program 3 (id=283): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) fsopen(&(0x7f0000000000)='pipefs\x00', 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)={0x0, 0xfffffffc, 0x100, 0x8000, 0x0, "7a58beca3900000000000000000000000200"}) 582.224255ms ago: executing program 1 (id=284): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4) syz_emit_ethernet(0xc90, &(0x7f0000000b40)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0xc5a, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x8, '\x00', @dev={0xfe, 0x80, '\x00', 0x2a}, [{0x19, 0x10, "e4b4c204950e048c79f3dccb64ecda646f351f5a1dce505e2b76366bd4c148d90147c30fbd32a7a87fcbe0882eac6e653d3408db4e9189a7e95c367f5805dabf463f92fc8bd45a079672091af6078b1f28e10daa3969edce30ba7383b4cdfabb2bcad41ff13b5384067f653ed8d3e2693e24c1f8147b01648bb0cec3218705b8f7274c6a"}, {0xe, 0x177, "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"}]}}}}}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket(0x10, 0x803, 0x2) socket(0x10, 0x803, 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) memfd_create(&(0x7f0000000180)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd', 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) 581.985495ms ago: executing program 2 (id=285): openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf0}, 0x80) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0xf00) 471.996738ms ago: executing program 2 (id=286): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x401a, &(0x7f00000008c0)={[{@rodir}, {@numtail}, {@fat=@flush}, {@fat=@usefree}, {@numtail}, {@utf8}, {@numtail}, {@utf8no}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '874'}}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp936'}}]}, 0x3, 0x27b, &(0x7f0000000640)="$eJzs3cFqK1UYAOB/mqRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE/gEPo8b8QV8AC93d7u43LmkM0nTyyQlvWlT7v2+TQ//+f85/5kZ2tWc/vBB//jw5Ozo4tf/otFIYm0nduIyiXasxdjvUerfJ+VxAOCRu8yyeJrl6nno/GZGbUZlde3emwMA7sX03/9V9wIAPIyvv/n2i939/b2v0rQR0f9j0Eki/5nP7x7FT9GLbmxFK55HZBP5+LPP9/eimo6046P+cNAZVfa//7u4/u7/EVf129GKdnn9dpqbqh8OOrV4p1h/pxfdL/+KVrxXXv9JSX101uPjD6f634xW/PNjnEQvDovexvW/bafpp9mfz375bhQd1SfDQac+ySuyKw/6YAAAAAAAAAAAAAAAAAAAAAAAeKNtphPtm+fvjA/+nzM/53yg4dT5PFtpmmZJnn9dX433q1Fd5d4BAAAAAAAAAAAAAAAAAADgsTg7//n4oNfrni51MP6sv2QqXtyM1CPi7mttLFoVlaK1XhKx2Fq1qF9V3p5cWXAXzVE/3dOkGst7BMkk0pye2oh8rVGkmQ+mIq+9eiOuBuO36/ggue3hNspekiUMspLXrzKzav3VSLPYQUlyc87q6+/eqeesNWMqiYja5GbOv05tuffw4X4HAQAAAAAAAAAAAAAAAAAAueuPfksmL1bQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACswPX//19gMCyKZ+VkldGgGkVkxVsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLfAyAAD//0MUZ+o=") r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f00000058c0)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f00000058c0)={0x2020}, 0x2020) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xfe, '\x00', 0x5, 0xffff9463, 0x4, 0x6}}}}]}, 0x48}}, 0x0) 191.901365ms ago: executing program 5 (id=287): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r1, 0x8010aebc, &(0x7f0000000080)={0x7000, 0x11000}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f0000000140)=[{r1, 0x2001}, {r1, 0x400}], 0x2, &(0x7f00000001c0)={r3, r4+10000000}, &(0x7f0000000200)={[0x4]}, 0x8) listen(r2, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r6}, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000bc0)={r6, 0x0}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r1, 0x10, 0x0, 0x7ff, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0]}, 0x40) shutdown(r5, 0x0) 142.272926ms ago: executing program 3 (id=288): add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x2, 0x0, 0x10, 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x82, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = openat$incfs(r0, &(0x7f0000019080)='.pending_reads\x00', 0x80080, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40106726, &(0x7f00000000c0)) 141.814666ms ago: executing program 2 (id=289): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xe, 0x4, 0x8, 0x40008}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x10, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) syz_emit_ethernet(0x7c, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60f2a40000462f00fe880000000000000000000000000001fe8000000000000000000000000000aa"], 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000001c0)={0x7, {{0xa, 0x4e22, 0x87, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xc9}}}, 0x88) r4 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x112) getdents(r4, 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0x8c5, 0x5, 0xb, 0x6, 0x0, 0x4]}, &(0x7f00000000c0)=0x78) 140.615476ms ago: executing program 3 (id=290): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x2, 0x0, 0x10, 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x82, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0xd) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2400104}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0xe0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2040880}, 0x4001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b8000005000000a0", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = openat$incfs(r2, &(0x7f0000019080)='.pending_reads\x00', 0x80080, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0x80106725, &(0x7f00000000c0)) 125.241387ms ago: executing program 3 (id=291): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x0, &(0x7f0000000100)={[{@errors_remount}, {@usrquota}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@nombcache}]}, 0x1, 0x526, &(0x7f0000000580)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$f2fs(&(0x7f0000001080), &(0x7f0000000280)='./file0/file0\x00', 0x2800000, &(0x7f0000000300)=ANY=[], 0x2, 0x5515, &(0x7f0000001300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0xfffffffffffffffd) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000014c0)={0x28, 0x0, 0x2711, @local}, 0x10) socket(0x10, 0x3, 0x0) timerfd_create(0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000002c0)={0x2, 0x0, 0x1000, 0x1000, &(0x7f00007fa000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000140)={0x2, 0x1, 0xfec00000, 0x2000, &(0x7f0000ff2000/0x2000)=nil}) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f0000000080)={0xc000, 0x10b000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) 110.827997ms ago: executing program 2 (id=292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000700000000aaff020000000000000000000000000001"], 0xffe) 66.363738ms ago: executing program 5 (id=293): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000002000011f27bd70e3bab081000a0104000000000000000000140003000000"], 0x30}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008040) 66.204178ms ago: executing program 5 (id=294): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x2810080, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x8, 0x1da, &(0x7f0000000cc0)="$eJzsmD/v0kAYx793tBSMCa66aCIJOFjaokYGE5kdNNFoHExspBK0iCkdChvxRTjrG3AmLrwPHdRFE/9sTg41d73CoaJIWhefz3D3/V2fe+7pc/19B0AQxH/Lu7df37xoNQ2hj6IJS61/qGxiuBa/bHw782p09eVT58vr5epK78d8DECa7nt6DeLgVb+CWK2k6fbupppvgOfa1J/fAoOt9F1w3FQ6AMNtpR9oeiLibfv+KAzse5NwIIQjBlcMnhi6ee7582z+vGAYaPUxyLIl09n8oR+GQVSi+F0Hq6K+PsclrT79vvLeOJv+wQWHq3QXDNeVvggr703WEmQvKu70hLHJr30a+75/rewerYWJfYOTOwWebu18dLzxh+0m/vIsEwW3jheX0EA0nZko9ZarRSe8XOS/MZPN/FRHuU34N6IOHPptZP4gbCN9xtDS/MnQ/KMTjx93prP52dHYHwbD4JHndS845xznvNeRRpSNKppJL2Lr3f5HA3Xpz0e0/OYur2RVJH7MIzfx4zhy1d9x5CUW4sj7leNKf11wtE8bqgKsa9EmC8fYKSHaFeCJEO8bO6ogCIIgCIIgCIIgCIIgCII4lJNg8lfQLXo/LXnXZPT3AAAA//8dC2uQ") (async) syz_pidfd_open(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) (async) openat$vcsu(0xffffffffffffff9c, 0x0, 0x400, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000280)={@link_local, @random="000067ea7d1e", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}}}, 0x0) (async) setpriority(0x0, 0x0, 0x2a14b58) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 65.983848ms ago: executing program 5 (id=295): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2800000, &(0x7f0000003ec0)={[{@debug}, {@bsdgroups}, {@bsdgroups}, {@test_dummy_encryption}, {@errors_continue}, {}, {@noauto_da_alloc}, {@resuid}]}, 0x1, 0xbd5, &(0x7f0000002080)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000019, 0x0, 0x1, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)={0x2c, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd}, @nested={0xc, 0x1a, 0x0, 0x1, [@nested={0x6, 0x0, 0x0, 0x1, [@generic="b057"]}]}]}, 0x2c}], 0x1}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000cc0)={'ip6gre0\x00', &(0x7f0000000c40)={'syztnl2\x00', 0x0, 0x2b, 0x0, 0x4d, 0x9, 0x60, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x700, 0x4, 0x102}}) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3286dd65d15cdc00442ffffc0286dd000000000000000000000001fe8000000000000000000000000000aa"], 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x20045a, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000080)='./file0\x00') mkdir(&(0x7f0000000140)='./control\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000380)='./control\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000001000000000000000400020000000000100004000000000020"], 0x24, 0x1) rmdir(&(0x7f0000000100)='./control\x00') 18.06415ms ago: executing program 2 (id=296): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@ipv4_newrule={0x2c, 0x20, 0xf4db158ec847dc81, 0x70bd2a, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10007}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x337}, @FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x44004) 0s ago: executing program 2 (id=297): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) io_setup(0x80000000, &(0x7f0000001140)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) timer_create(0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r4, 0xfffffffffffffc01, 0x0) tee(r1, r4, 0x60000000000, 0x0) read$FUSE(r3, &(0x7f0000002f80)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): device number 2 [ 22.671708][ T301] usb 1-1: unable to get BOS descriptor or descriptor too short [ 22.751722][ T301] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1023 [ 22.921928][ T301] usb 1-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 22.931270][ T301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 22.939597][ T301] usb 1-1: Product: syz [ 22.944065][ T301] usb 1-1: Manufacturer: syz [ 22.949157][ T301] usb 1-1: SerialNumber: syz [ 22.971644][ T343] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 23.323046][ T379] ====================================================== [ 23.323046][ T379] WARNING: the mand mount option is being deprecated and [ 23.323046][ T379] will be removed in v5.15! [ 23.323046][ T379] ====================================================== [ 23.361726][ T301] usb 1-1: MIDIStreaming interface descriptor not found [ 23.375372][ T381] netlink: 712 bytes leftover after parsing attributes in process `syz.3.23'. [ 23.375849][ T301] usb 1-1: USB disconnect, device number 2 [ 23.404312][ T381] netlink: 'syz.3.23': attribute type 1 has an invalid length. [ 23.411920][ T381] netlink: 'syz.3.23': attribute type 1 has an invalid length. [ 23.612439][ T302] udevd[302]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 23.641603][ T287] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 23.867337][ T24] kauditd_printk_skb: 142 callbacks suppressed [ 23.867347][ T24] audit: type=1400 audit(1777721844.829:216): avc: denied { create } for pid=390 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 24.001676][ T287] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 24.028065][ T397] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.29: Invalid block bitmap block 0 in block_group 0 [ 24.041490][ T287] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 24.043980][ T397] Quota error (device loop4): write_blk: dquota write failed [ 24.051798][ T287] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 24.059155][ T397] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 24.067891][ T287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.079394][ T397] EXT4-fs error (device loop4): ext4_acquire_dquot:6225: comm syz.4.29: Failed to acquire dquot type 0 [ 24.097107][ T397] EXT4-fs error (device loop4): ext4_free_blocks:5690: comm syz.4.29: Freeing blocks not in datazone - block = 0, count = 4096 [ 24.110443][ T397] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.29: Invalid inode bitmap blk 0 in block_group 0 [ 24.122947][ T300] Quota error (device loop4): remove_tree: Getting block too big (0 >= 8) [ 24.131447][ T300] EXT4-fs error (device loop4): ext4_release_dquot:6261: comm kworker/u4:3: Failed to release dquot type 0 [ 24.131751][ T397] EXT4-fs error (device loop4) in ext4_free_inode:360: Corrupt filesystem [ 24.151458][ T397] EXT4-fs (loop4): 1 orphan inode deleted [ 24.157323][ T397] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; ,errors=continue [ 24.193576][ T397] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 16: comm syz.4.29: path /3/file0: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 24.204330][ T24] audit: type=1400 audit(1777721845.159:217): avc: denied { create } for pid=407 comm="syz.0.33" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 24.238662][ T24] audit: type=1400 audit(1777721845.159:218): avc: denied { read write } for pid=407 comm="syz.0.33" name="file0" dev="tmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 24.265996][ T24] audit: type=1400 audit(1777721845.159:219): avc: denied { open } for pid=407 comm="syz.0.33" path="/8/file0" dev="tmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 24.292277][ T24] audit: type=1400 audit(1777721845.159:220): avc: denied { ioctl } for pid=407 comm="syz.0.33" path="/8/file0" dev="tmpfs" ino=58 ioctlcmd=0x1263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 24.316371][ T24] audit: type=1400 audit(1777721845.159:221): avc: denied { unlink } for pid=281 comm="syz-executor" name="file0" dev="tmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 24.339112][ T24] audit: type=1400 audit(1777721845.169:222): avc: denied { mounton } for pid=412 comm="syz.0.34" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 24.339141][ T301] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 24.482030][ T421] process 'syz.4.29' launched '/dev/fd/9' with NULL argv: empty string added [ 24.661749][ T368] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 24.738658][ T425] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 25.002111][ T301] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 25.032721][ T301] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 25.097945][ T301] usb 4-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 25.143523][ T301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.152108][ T368] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.179590][ T368] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 25.225643][ T368] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 25.247663][ T301] usb 4-1: config 0 descriptor?? [ 25.327648][ T301] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 25.533368][ T301] usb 4-1: USB disconnect, device number 2 [ 25.651673][ T368] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 25.660856][ T368] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.669068][ T368] usb 1-1: Product: syz [ 25.673686][ T368] usb 1-1: Manufacturer: syz [ 25.678307][ T368] usb 1-1: SerialNumber: syz [ 25.723236][ T368] cdc_ncm 1-1:1.0: bind() failure [ 25.876038][ T54] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.894030][ T431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.39'. [ 25.904487][ T431] bridge0: port 3(vlan2) entered blocking state [ 25.910723][ T431] bridge0: port 3(vlan2) entered disabled state [ 25.923001][ T301] usb 1-1: USB disconnect, device number 3 [ 25.961847][ T433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pid=433 comm=syz.4.40 [ 26.022858][ T438] EXT4-fs (loop4): error: journal path ./bus is not a block device [ 26.061283][ T441] capability: warning: `syz.3.42' uses deprecated v2 capabilities in a way that may be insecure [ 26.061699][ T287] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 26.079345][ T287] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input4 [ 26.088650][ T287] input: failed to attach handler kbd to device input4, error: -5 [ 26.106210][ T287] usb 3-1: USB disconnect, device number 3 [ 26.131671][ T54] usb 2-1: Using ep0 maxpacket: 8 [ 26.261704][ T54] usb 2-1: config 13 has an invalid interface number: 245 but max is 0 [ 26.269975][ T54] usb 2-1: config 13 has no interface number 0 [ 26.276216][ T54] usb 2-1: config 13 interface 245 has no altsetting 0 [ 26.441692][ T54] usb 2-1: New USB device found, idVendor=0ace, idProduct=2011, bcdDevice=27.04 [ 26.450806][ T54] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.458831][ T54] usb 2-1: Product: syz [ 26.463108][ T54] usb 2-1: Manufacturer: syz [ 26.467703][ T54] usb 2-1: SerialNumber: syz [ 26.501636][ T301] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 26.621646][ T368] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 26.862346][ T301] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 26.873847][ T54] usb 2-1: USB disconnect, device number 2 [ 26.883548][ T301] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 26.894630][ T301] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.904473][ T301] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 26.913624][ T301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.924099][ T301] usb 5-1: config 0 descriptor?? [ 27.031730][ T368] usb 3-1: unable to get BOS descriptor or descriptor too short [ 27.111837][ T368] usb 3-1: config 189 has an invalid descriptor of length 0, skipping remainder of the config [ 27.281925][ T368] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.b6 [ 27.291128][ T368] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.299610][ T368] usb 3-1: Product: syz [ 27.303941][ T368] usb 3-1: Manufacturer: syz [ 27.308767][ T368] usb 3-1: SerialNumber: syz [ 27.343772][ T466] FAT-fs (loop1): Directory bread(block 64) failed [ 27.351132][ T466] FAT-fs (loop1): Directory bread(block 65) failed [ 27.357846][ T466] FAT-fs (loop1): Directory bread(block 66) failed [ 27.358204][ T368] usbserial_generic 3-1:189.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 27.364752][ T466] FAT-fs (loop1): Directory bread(block 67) failed [ 27.376212][ T368] usbserial_generic 3-1:189.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 27.382942][ T466] FAT-fs (loop1): Directory bread(block 68) failed [ 27.393543][ T368] usbserial_generic 3-1:189.0: device has no bulk endpoints [ 27.400273][ T466] FAT-fs (loop1): Directory bread(block 69) failed [ 27.408285][ T301] hid-picolcd 0003:04D8:F002.0001: item fetching failed at offset 2/5 [ 27.414221][ T466] FAT-fs (loop1): Directory bread(block 70) failed [ 27.426589][ T301] hid-picolcd 0003:04D8:F002.0001: device report parse failed [ 27.428787][ T466] FAT-fs (loop1): Directory bread(block 71) failed [ 27.436025][ T301] hid-picolcd: probe of 0003:04D8:F002.0001 failed with error -22 [ 27.442861][ T466] FAT-fs (loop1): Directory bread(block 72) failed [ 27.456928][ T466] FAT-fs (loop1): Directory bread(block 73) failed [ 27.613199][ T474] EXT4-fs (loop0): Ignoring removed bh option [ 27.626283][ T474] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 27.636727][ T448] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #3: comm syz.2.45: pblk 67 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 27.645927][ T303] usb 5-1: USB disconnect, device number 2 [ 27.662398][ T448] EXT4-fs error (device loop2): ext4_quota_enable:6449: comm syz.2.45: Bad quota inode: 3, type: 0 [ 27.681538][ T474] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c028, mo2=0002] [ 27.690407][ T474] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,dioread_nolock,inlinecrypt,errors=remount-ro,grpjquota=,bh,noblock_validity,jqfmt=vfsv0, [ 27.717840][ T448] EXT4-fs warning (device loop2): ext4_enable_quotas:6490: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 27.733456][ T448] EXT4-fs (loop2): mount failed [ 27.744262][ T474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.54'. [ 27.821618][ T287] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 27.906662][ T368] usb 3-1: USB disconnect, device number 4 [ 27.962826][ T489] EXT4-fs (loop0): Ignoring removed bh option [ 27.969670][ T489] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 27.980632][ T489] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 27.988643][ T489] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e098, mo2=0002] [ 27.999231][ T489] EXT4-fs (loop0): orphan cleanup on readonly fs [ 28.005918][ T489] EXT4-fs warning (device loop0): ext4_enable_quotas:6490: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 28.020574][ T489] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 28.027644][ T489] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.58: bg 0: block 40: padding at end of block bitmap is not set [ 28.041845][ T489] EXT4-fs error (device loop0) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 28.050681][ T489] EXT4-fs (loop0): 1 truncate cleaned up [ 28.056423][ T489] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000001,bh,noblock_validity,grpjquota=,nouid32,nomblk_io_submit,minixdf,,errors=continue [ 28.075970][ T489] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 28.084071][ T287] usb 2-1: Using ep0 maxpacket: 32 [ 28.144326][ T495] netlink: 'syz.0.60': attribute type 4 has an invalid length. [ 28.155340][ T495] netlink: 'syz.0.60': attribute type 4 has an invalid length. [ 28.165724][ T495] netlink: 36 bytes leftover after parsing attributes in process `syz.0.60'. [ 28.201652][ T287] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 28.209806][ T287] usb 2-1: config 0 has no interface number 0 [ 28.215948][ T287] usb 2-1: config 0 interface 184 has no altsetting 0 [ 28.236439][ T497] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,usrjquota=,min_batch_time=0x00000000000c0000,inode_readahead_blks=0x0000000000000001,bsdgroups,noblock_validity,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,delalloc,resuid=0x00000000 [ 28.334914][ T504] EXT4-fs error (device loop4): ext4_orphan_get:1421: comm syz.4.64: bad orphan inode 134217728 [ 28.345879][ T504] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 28.381686][ T287] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 28.390812][ T287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.399612][ T287] usb 2-1: Product: syz [ 28.403873][ T287] usb 2-1: Manufacturer: syz [ 28.409296][ T287] usb 2-1: SerialNumber: syz [ 28.418335][ T287] usb 2-1: config 0 descriptor?? [ 28.472483][ T287] smsc75xx v1.0.0 [ 28.478991][ T520] FAT-fs (loop4): Unrecognized mount option "shortnamocharset=cp775" or missing value [ 28.556141][ T526] netlink: 712 bytes leftover after parsing attributes in process `syz.3.70'. [ 28.565161][ T526] netlink: 'syz.3.70': attribute type 1 has an invalid length. [ 28.572913][ T526] netlink: 'syz.3.70': attribute type 1 has an invalid length. [ 28.793076][ T533] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #3: block 2: comm syz.4.72: lblock 2 mapped to illegal pblock 2 (length 1) [ 28.807187][ T533] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #3: block 48: comm syz.4.72: lblock 0 mapped to illegal pblock 48 (length 1) [ 28.823040][ T533] EXT4-fs error (device loop4): ext4_acquire_dquot:6225: comm syz.4.72: Failed to acquire dquot type 0 [ 28.834720][ T533] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 28.844589][ T533] EXT4-fs error (device loop4): ext4_evict_inode:283: inode #11: comm syz.4.72: mark_inode_dirty error [ 28.856203][ T533] EXT4-fs warning (device loop4): ext4_evict_inode:286: couldn't mark inode dirty (err -117) [ 28.866667][ T533] EXT4-fs (loop4): 1 orphan inode deleted [ 28.872474][ T533] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,noblock_validity,quota,max_batch_time=0x0000000000000009,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue [ 28.976185][ T300] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 28.996028][ T300] __quota_error: 74 callbacks suppressed [ 28.996037][ T300] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 29.011131][ T300] EXT4-fs error (device loop4): ext4_release_dquot:6261: comm kworker/u4:3: Failed to release dquot type 0 [ 29.215895][ T24] audit: type=1400 audit(1777721850.179:294): avc: denied { setopt } for pid=549 comm="syz.2.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 29.215899][ T550] x_tables: duplicate underflow at hook 3 [ 29.222669][ T550] cgroup: syz.2.76 (550) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 29.235173][ T24] audit: type=1400 audit(1777721850.179:295): avc: denied { mounton } for pid=549 comm="syz.2.76" path="/9/file0" dev="tmpfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 29.251901][ T550] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 29.288603][ T24] audit: type=1400 audit(1777721850.259:296): avc: denied { ioctl } for pid=549 comm="syz.2.76" path="socket:[16023]" dev="sockfs" ino=16023 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.325504][ T547] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 29.362277][ T547] EXT4-fs (loop0): orphan cleanup on readonly fs [ 29.375609][ T556] udc-core: couldn't find an available UDC or it's busy [ 29.382989][ T556] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 29.390553][ T547] EXT4-fs (loop0): 1 truncate cleaned up [ 29.396526][ T547] EXT4-fs (loop0): mounted filesystem without journal. Opts: inlinecrypt,stripe=0x00000000000000a7,,errors=continue [ 29.488776][ T286] EXT4-fs error (device loop4): __ext4_get_inode_loc:4444: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 29.510466][ T286] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 29.521467][ T559] EXT4-fs (loop0): shut down requested (2) [ 29.527494][ T286] EXT4-fs error (device loop4): ext4_quota_off:6544: inode #3: comm syz-executor: mark_inode_dirty error [ 29.539448][ T24] audit: type=1400 audit(1777721850.499:297): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 29.581634][ T24] audit: type=1400 audit(1777721850.499:298): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 29.618587][ T24] audit: type=1400 audit(1777721850.499:299): avc: denied { write } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 29.642312][ T303] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 29.675540][ T24] audit: type=1400 audit(1777721850.499:300): avc: denied { add_name } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 29.718730][ T24] audit: type=1400 audit(1777721850.499:301): avc: denied { create } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 29.763725][ T24] audit: type=1400 audit(1777721850.499:302): avc: denied { append open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 29.841694][ T287] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 29.921669][ T303] usb 3-1: device descriptor read/64, error -71 [ 30.051648][ T287] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 30.075758][ T287] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 30.103072][ T287] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 30.124739][ T287] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 30.144069][ T287] smsc75xx: probe of 2-1:0.184 failed with error -32 [ 30.332121][ T303] usb 3-1: device descriptor read/64, error -71 [ 30.424303][ T590] F2FS-fs (loop4): invalid crc value [ 30.431090][ T590] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 30.465729][ T586] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 30.471771][ T590] F2FS-fs (loop4): Start checkpoint disabled! [ 30.478129][ T586] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 30.483431][ T590] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 30.513728][ T586] F2FS-fs (loop0): invalid crc value [ 30.554746][ T586] F2FS-fs (loop0): Found nat_bits in checkpoint [ 30.601669][ T303] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 30.648376][ T586] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 30.658557][ T586] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 30.736658][ T590] attempt to access beyond end of device [ 30.736658][ T590] loop4: rw=10241, want=45104, limit=40427 [ 30.748225][ T590] attempt to access beyond end of device [ 30.748225][ T590] loop4: rw=2049, want=45104, limit=40427 [ 30.769500][ T590] 9pnet: Insufficient options for proto=fd [ 30.788767][ T315] attempt to access beyond end of device [ 30.788767][ T315] loop4: rw=2049, want=40976, limit=40427 [ 30.871888][ T303] usb 3-1: device descriptor read/64, error -71 [ 31.025129][ T608] 9pnet: Insufficient options for proto=fd [ 31.032337][ T608] netlink: 12 bytes leftover after parsing attributes in process `syz.4.90'. [ 31.187264][ T604] EXT4-fs error (device loop0): ext4_map_blocks:630: inode #3: block 2: comm syz.0.89: lblock 2 mapped to illegal pblock 2 (length 1) [ 31.202717][ T604] EXT4-fs error (device loop0): ext4_map_blocks:630: inode #3: block 48: comm syz.0.89: lblock 0 mapped to illegal pblock 48 (length 1) [ 31.217238][ T604] EXT4-fs error (device loop0): ext4_acquire_dquot:6225: comm syz.0.89: Failed to acquire dquot type 0 [ 31.228778][ T604] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 31.234143][ T287] usb 2-1: USB disconnect, device number 3 [ 31.238272][ T604] EXT4-fs error (device loop0): ext4_evict_inode:283: inode #11: comm syz.0.89: mark_inode_dirty error [ 31.262796][ T604] EXT4-fs warning (device loop0): ext4_evict_inode:286: couldn't mark inode dirty (err -117) [ 31.273016][ T604] EXT4-fs (loop0): 1 orphan inode deleted [ 31.278832][ T604] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,noblock_validity,quota,max_batch_time=0x0000000000000009,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue [ 31.303531][ T300] EXT4-fs error (device loop0): ext4_map_blocks:630: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 31.318481][ T300] EXT4-fs error (device loop0): ext4_release_dquot:6261: comm kworker/u4:3: Failed to release dquot type 0 [ 31.481628][ T303] usb 3-1: device descriptor read/64, error -71 [ 31.601645][ T303] usb usb3-port1: attempt power cycle [ 31.611624][ T5] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 31.681600][ T480] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 31.724577][ T281] EXT4-fs error (device loop0): __ext4_get_inode_loc:4444: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 31.737522][ T287] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 31.737627][ T281] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 31.754608][ T281] EXT4-fs error (device loop0): ext4_quota_off:6544: inode #3: comm syz-executor: mark_inode_dirty error [ 31.861653][ T5] usb 5-1: Using ep0 maxpacket: 32 [ 31.921624][ T480] usb 4-1: Using ep0 maxpacket: 16 [ 32.011611][ T287] usb 2-1: device descriptor read/64, error -71 [ 32.017899][ T303] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 32.061698][ T626] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 32.081687][ T480] usb 4-1: unable to get BOS descriptor or descriptor too short [ 32.141663][ T5] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice= 0.40 [ 32.150740][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.158853][ T5] usb 5-1: Product: ю [ 32.163056][ T5] usb 5-1: Manufacturer: Р [ 32.167541][ T5] usb 5-1: SerialNumber: ﷗㕽浻澊틙鑮ꦹ뺚䃂㣨쎚俋앂ာ攎塨꒡䶡체ᗶ͡除燙旹虑㠑짟␦忾齺᫧驋ꈂ뜒郋튨ꅐ잧怋폄㓛 [ 32.201715][ T303] usb 3-1: device descriptor read/8, error -71 [ 32.301688][ T626] usb 1-1: Using ep0 maxpacket: 32 [ 32.321704][ T480] usb 4-1: New USB device found, idVendor=0582, idProduct=002f, bcdDevice= 0.40 [ 32.330748][ T480] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.338765][ T480] usb 4-1: Product: syz [ 32.343068][ T480] usb 4-1: Manufacturer: syz [ 32.347638][ T480] usb 4-1: SerialNumber: syz [ 32.411654][ T287] usb 2-1: device descriptor read/64, error -71 [ 32.419425][ T630] erofs: (device loop2): mounted with root inode @ nid 36. [ 32.421650][ T303] usb 3-1: device descriptor read/8, error -71 [ 32.429069][ T630] attempt to access beyond end of device [ 32.429069][ T630] loop2: rw=524288, want=34359738368, limit=16 [ 32.432875][ T626] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.454621][ T42] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -4082 in[4096, 0] out[9000] [ 32.459425][ T626] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.476179][ T626] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 32.485205][ T626] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.490620][ T626] usb 1-1: config 0 descriptor?? [ 32.504020][ T629] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -4082 in[4096, 0] out[8192] [ 32.522969][ T629] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -4082 in[4096, 0] out[8192] [ 32.532170][ T626] hub 1-1:0.0: USB hub found [ 32.546364][ T629] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -4082 in[4096, 0] out[8192] [ 32.565606][ T629] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -4082 in[4096, 0] out[8192] [ 32.585086][ T629] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -4082 in[4096, 0] out[8192] [ 32.606668][ T629] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -4082 in[4096, 0] out[8192] [ 32.626700][ T630] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -4082 in[4096, 0] out[8192] [ 32.672649][ T630] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -4082 in[4096, 0] out[8192] [ 32.691532][ T287] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 32.699469][ T5] snd-usb-audio: probe of 5-1:1.2 failed with error -2 [ 32.706576][ T480] snd-usb-audio: probe of 4-1:1.0 failed with error -2 [ 32.719633][ T5] usb 5-1: USB disconnect, device number 3 [ 32.726377][ T480] usb 4-1: USB disconnect, device number 3 [ 32.740366][ T630] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -4082 in[4096, 0] out[8192] [ 32.761010][ T630] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -4082 in[4096, 0] out[8192] [ 32.812338][ T638] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 32.829335][ T638] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 32.943458][ T645] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 32.956873][ T645] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 32.966330][ T645] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 32.966330][ T645] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 32.966330][ T645] [ 32.981626][ T287] usb 2-1: device descriptor read/64, error -71 [ 32.991688][ T626] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 32.992891][ T645] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=./bus,nouser_xattr,nodioread_nolock,,errors=continue [ 33.013710][ T645] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.091660][ T626] usbhid 1-1:0.0: can't add hid device: -71 [ 33.097723][ T626] usbhid: probe of 1-1:0.0 failed with error -71 [ 33.130288][ T668] device bridge0 entered promiscuous mode [ 33.136129][ T668] device macsec1 entered promiscuous mode [ 33.137714][ T626] usb 1-1: USB disconnect, device number 4 [ 33.142578][ T668] bridge0: port 3(macsec1) entered blocking state [ 33.154325][ T668] bridge0: port 3(macsec1) entered disabled state [ 33.161470][ T668] device bridge0 left promiscuous mode [ 33.381612][ T287] usb 2-1: device descriptor read/64, error -71 [ 33.501674][ T287] usb usb2-port1: attempt power cycle [ 33.531800][ T54] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 33.651470][ T676] EXT4-fs error (device loop0): ext4_map_blocks:630: inode #3: block 2: comm syz.0.107: lblock 2 mapped to illegal pblock 2 (length 1) [ 33.665630][ T676] EXT4-fs error (device loop0): ext4_map_blocks:630: inode #3: block 48: comm syz.0.107: lblock 0 mapped to illegal pblock 48 (length 1) [ 33.679968][ T676] EXT4-fs error (device loop0): ext4_acquire_dquot:6225: comm syz.0.107: Failed to acquire dquot type 0 [ 33.691297][ T676] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 33.700762][ T676] EXT4-fs error (device loop0): ext4_evict_inode:283: inode #11: comm syz.0.107: mark_inode_dirty error [ 33.712021][ T676] EXT4-fs warning (device loop0): ext4_evict_inode:286: couldn't mark inode dirty (err -117) [ 33.722334][ T676] EXT4-fs (loop0): 1 orphan inode deleted [ 33.728048][ T676] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,noblock_validity,quota,max_batch_time=0x0000000000000009,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue [ 33.749942][ T300] EXT4-fs error (device loop0): ext4_map_blocks:630: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 33.777529][ T300] EXT4-fs error (device loop0): ext4_release_dquot:6261: comm kworker/u4:3: Failed to release dquot type 0 [ 33.962431][ T54] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 64 [ 33.982784][ T54] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 34.005310][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.041674][ T672] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 34.074272][ T684] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 34.081524][ T684] IPv6: NLM_F_CREATE should be set when creating new route [ 34.088748][ T684] IPv6: NLM_F_CREATE should be set when creating new route [ 34.167492][ T24] kauditd_printk_skb: 31 callbacks suppressed [ 34.167502][ T24] audit: type=1400 audit(1777721855.129:328): avc: denied { create } for pid=700 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 34.193632][ T24] audit: type=1400 audit(1777721855.129:329): avc: denied { write } for pid=700 comm="syz.2.114" name="uinput" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 34.216745][ T24] audit: type=1400 audit(1777721855.129:330): avc: denied { accept } for pid=700 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 34.236850][ T24] audit: type=1400 audit(1777721855.129:331): avc: denied { ioctl } for pid=700 comm="syz.2.114" path="/dev/uinput" dev="devtmpfs" ino=257 ioctlcmd=0x5568 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 34.328960][ T281] EXT4-fs error (device loop0): __ext4_get_inode_loc:4444: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 34.342091][ T281] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 34.351590][ T281] EXT4-fs error (device loop0): ext4_quota_off:6544: inode #3: comm syz-executor: mark_inode_dirty error [ 34.411628][ T706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.116'. [ 34.411638][ T643] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 34.501626][ T54] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 34.509463][ T54] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input5 [ 34.513230][ T703] EXT4-fs (loop2): Test dummy encryption mode enabled [ 34.525923][ T24] audit: type=1400 audit(1777721855.489:332): avc: denied { ioctl } for pid=80 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=577 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.528892][ T54] usb 5-1: USB disconnect, device number 4 [ 34.550564][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 34.558842][ T703] EXT4-fs error (device loop2): ext4_orphan_get:1395: inode #15: comm syz.2.115: inode has both inline data and extents flags [ 34.580159][ T703] EXT4-fs error (device loop2): ext4_orphan_get:1400: comm syz.2.115: couldn't read orphan inode 15 (err -117) [ 34.592009][ T703] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 34.613986][ T24] audit: type=1400 audit(1777721855.579:333): avc: denied { read } for pid=702 comm="syz.2.115" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16794 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.691652][ T303] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 34.781621][ T643] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.791751][ T643] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 34.871741][ T643] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 34.880852][ T643] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 34.889227][ T643] usb 4-1: SerialNumber: syz [ 34.893858][ T287] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 34.931608][ T303] usb 1-1: Using ep0 maxpacket: 32 [ 34.981711][ T287] usb 2-1: Using ep0 maxpacket: 16 [ 35.051711][ T303] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.062854][ T303] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.072719][ T303] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 35.086697][ T303] usb 1-1: config 0 interface 0 has no altsetting 0 [ 35.093534][ T303] usb 1-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 35.102823][ T287] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 35.102848][ T287] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 35.102859][ T287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.103208][ T303] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.103479][ T287] usb 2-1: config 0 descriptor?? [ 35.104372][ T303] usb 1-1: config 0 descriptor?? [ 35.162539][ T696] FAT-fs (loop3): Unrecognized mount option "shortname=winn" or missing value [ 35.202288][ T643] usb 4-1: 0:2 : does not exist [ 35.209640][ T643] usb 4-1: USB disconnect, device number 4 [ 35.412578][ T640] udevd[640]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.563285][ T24] audit: type=1400 audit(1777721856.529:334): avc: denied { write } for pid=704 comm="syz.1.117" name="mcfilter6" dev="proc" ino=4026532330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 35.586205][ T707] netlink: 'syz.1.117': attribute type 4 has an invalid length. [ 35.599803][ T707] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.117'. [ 35.622509][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 35.630194][ T303] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 35.637762][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 35.644753][ T303] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 35.652014][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 35.658836][ T303] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 35.673484][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 35.680292][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 35.687312][ T303] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 35.694878][ T303] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 35.714315][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 35.721188][ T303] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 35.729532][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 35.737178][ T303] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 35.744458][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 35.751276][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 35.759204][ T303] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 35.766842][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 35.773958][ T303] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 35.781061][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 35.788381][ T303] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 35.795823][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 35.804248][ T303] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 35.811352][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 35.818413][ T303] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 35.825737][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 35.839903][ T303] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 35.847244][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 35.854809][ T303] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 35.862260][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 35.869201][ T303] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 35.886905][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 35.904925][ T303] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 35.912534][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 35.920354][ T724] FAULT_INJECTION: forcing a failure. [ 35.920354][ T724] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 35.934087][ T303] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 35.941806][ T724] CPU: 1 PID: 724 Comm: syz.4.121 Not tainted syzkaller #0 [ 35.946717][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 35.949029][ T724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 35.957702][ T303] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 35.965802][ T724] Call Trace: [ 35.965827][ T724] __dump_stack+0x21/0x24 [ 35.965850][ T724] dump_stack_lvl+0x1a7/0x208 [ 35.973278][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 35.976111][ T724] ? show_regs_print_info+0x18/0x18 [ 35.976129][ T724] ? vfs_write+0xb27/0xdc0 [ 35.980526][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 35.985080][ T724] dump_stack+0x15/0x1c [ 35.985089][ T724] should_fail+0x3c1/0x510 [ 35.985098][ T724] should_fail_usercopy+0x1a/0x20 [ 35.985108][ T724] _copy_from_user+0x20/0xd0 [ 35.985117][ T724] __se_sys_bpf+0x1bb/0x740 [ 35.985131][ T724] ? __x64_sys_bpf+0x90/0x90 [ 35.992419][ T303] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 35.997045][ T724] ? debug_smp_processor_id+0x17/0x20 [ 35.997060][ T724] __x64_sys_bpf+0x7b/0x90 [ 36.001530][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 36.008187][ T724] do_syscall_64+0x31/0x40 [ 36.008199][ T724] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 36.008207][ T724] RIP: 0033:0x7fdc0936add9 [ 36.008218][ T724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.008224][ T724] RSP: 002b:00007fdc07dc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 36.008235][ T724] RAX: ffffffffffffffda RBX: 00007fdc095e3fa0 RCX: 00007fdc0936add9 [ 36.008249][ T724] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 36.014236][ T303] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 36.016779][ T724] RBP: 00007fdc07dc5090 R08: 0000000000000000 R09: 0000000000000000 [ 36.024596][ T303] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 36.026332][ T724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.026339][ T724] R13: 00007fdc095e4038 R14: 00007fdc095e3fa0 R15: 00007ffed1899c98 [ 36.156623][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 36.163440][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 36.170257][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 36.177152][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 36.183993][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 36.190759][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 36.197617][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 36.204415][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 36.211317][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 36.218141][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 36.224960][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 36.231744][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 36.238559][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 36.245359][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 36.252274][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 36.259040][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 36.265877][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 36.272673][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 36.279503][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 36.286344][ T303] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 36.293456][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 36.300234][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 36.307231][ T303] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 36.314495][ T287] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 36.321331][ T303] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 36.329166][ T287] kone 0003:1E7D:2CED.0002: hidraw0: USB HID v0.09 Device [HID 1e7d:2ced] on usb-dummy_hcd.1-1/input0 [ 36.344065][ T303] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 36.351384][ T303] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 36.373733][ T287] usb 2-1: USB disconnect, device number 6 [ 36.379640][ T303] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 36.399288][ T731] fido_id[731]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 36.415751][ T303] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 36.428141][ T303] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 36.435270][ T303] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 36.445358][ T303] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 36.454607][ T303] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 36.463469][ T303] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 36.470982][ T303] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 36.478603][ T303] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 36.485993][ T303] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 36.493657][ T303] chicony 0003:04F2:1123.0003: unknown main item tag 0x0 [ 36.613533][ T738] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #3: block 2: comm syz.3.126: lblock 2 mapped to illegal pblock 2 (length 1) [ 36.627608][ T738] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 36.635898][ T738] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #3: block 48: comm syz.3.126: lblock 0 mapped to illegal pblock 48 (length 1) [ 36.650272][ T738] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 36.659081][ T738] EXT4-fs error (device loop3): ext4_acquire_dquot:6225: comm syz.3.126: Failed to acquire dquot type 0 [ 36.671015][ T738] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 36.680523][ T738] EXT4-fs error (device loop3): ext4_evict_inode:283: inode #11: comm syz.3.126: mark_inode_dirty error [ 36.692148][ T738] EXT4-fs warning (device loop3): ext4_evict_inode:286: couldn't mark inode dirty (err -117) [ 36.702447][ T738] EXT4-fs (loop3): 1 orphan inode deleted [ 36.708161][ T738] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,noblock_validity,quota,max_batch_time=0x0000000000000009,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue [ 36.729984][ T49] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 36.751045][ T49] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 36.760011][ T49] EXT4-fs error (device loop3): ext4_release_dquot:6261: comm kworker/u4:2: Failed to release dquot type 0 [ 36.811614][ T301] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 36.940536][ T303] chicony 0003:04F2:1123.0003: hidraw0: USB HID v0.04 Device [HID 04f2:1123] on usb-dummy_hcd.0-1/input0 [ 36.957105][ T370] usb 1-1: USB disconnect, device number 5 [ 36.977605][ T742] fido_id[742]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 37.152714][ T749] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,usrjquota=,min_batch_time=0x00000000000c0000,inode_readahead_blks=0x0000000000000001,bsdgroups,noblock_validity,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,delalloc,resuid=0x00000000 [ 37.221626][ T287] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 37.278470][ T280] EXT4-fs error (device loop3): __ext4_get_inode_loc:4444: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 37.281679][ T301] usb 3-1: config 1 interface 0 altsetting 86 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 37.302004][ T280] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 37.304426][ T301] usb 3-1: config 1 interface 0 has no altsetting 0 [ 37.313926][ T280] EXT4-fs error (device loop3): ext4_quota_off:6544: inode #3: comm syz-executor: mark_inode_dirty error [ 37.427424][ T758] loop4: p1 p2 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p [ 37.427537][ T758] loop4: p1 start 152961024 is beyond EOD, [ 37.471637][ T287] usb 2-1: Using ep0 maxpacket: 8 [ 37.515093][ T758] truncated [ 37.530651][ T758] loop4: p2 start 251660064 is beyond EOD, truncated [ 37.537520][ T758] loop4: p3 size 14568 extends beyond EOD, truncated [ 37.547211][ T758] loop4: p5 start 152961024 is beyond EOD, truncated [ 37.556503][ T758] loop4: p6 start 251660064 is beyond EOD, truncated [ 37.561685][ T301] usb 3-1: New USB device found, idVendor=056a, idProduct=00c2, bcdDevice= 0.40 [ 37.578224][ T758] loop4: p7 size 14568 extends beyond EOD, truncated [ 37.582568][ T301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.593525][ T758] loop4: p8 start 152961024 is beyond EOD, truncated [ 37.601613][ T301] usb 3-1: Product: 뼵埠룄흊ᘿ̰鉷嗎Ļꀾ簖ርṧ譠諗䭰贄꟢샣ឍध坄␕뾜幾 鉐멳ᛢ㯟襖䃔镽ㄞ惥팘⹡Ѳ욾䗥灠啐췋↻㵱ﭥ⛑쭿怾帼闉螢╚梺᷄㚩귘Ꟙ砠ລ〸➸痀ꭅᴡ笗㧥뗫 [ 37.603845][ T768] capability: warning: `syz.3.134' uses 32-bit capabilities (legacy support in use) [ 37.635016][ T758] loop4: p9 start 251660064 is beyond EOD, truncated [ 37.642300][ T758] loop4: p10 size 14568 extends beyond EOD, truncated [ 37.648472][ T301] usb 3-1: Manufacturer: 䃵㬄᥏綧㇮͘快搤溒푰о磅猋믇 쪫⬿漤໗ㅢ悄툀潩縊ɮ゙ꎖ쁪ࠬ덦狔䯫矤䡛럽ℸ䦚▂ﰌ䄵鶆㗚꛸⽥ꥱ粏䥂Ⲹ睔ꪟ鞵閚领☶ᇔ뜦努꒢烌蝙휆往犑‡氀福꿗੐蹯目⹇㔂᳄砘춼ઠ࿠惬획㩌惞淸 [ 37.649775][ T758] loop4: p11 start 152961024 is beyond EOD, truncated [ 37.686710][ T758] loop4: p12 start 251660064 is beyond EOD, truncated [ 37.693650][ T287] usb 2-1: unable to get BOS descriptor or descriptor too short [ 37.701643][ T301] usb 3-1: SerialNumber: 阅Ⱃ䔶坤砄ح딓᩻ᭈ㹄칾఼䰷贌숥ڃ뤁⧧矎ۊεꖲᖮ龏싿ᜰ푻ଏ굅㜷䈉崑ᬪ롊䗟、篌䶻ച寃䁣׏矬朧膓抓銃䓞砘䬉၈똌ണ팒鶊 [ 37.708031][ T758] loop4: p13 size 14568 extends beyond EOD, truncated [ 37.731801][ T758] loop4: p14 start 152961024 is beyond EOD, truncated [ 37.734729][ T301] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 37.738652][ T758] loop4: p15 start 251660064 is beyond EOD, truncated [ 37.754993][ T758] loop4: p16 size 14568 extends beyond EOD, truncated [ 37.758642][ T301] usb 3-1: no configuration chosen from 1 choice [ 37.766362][ T758] loop4: p17 start 152961024 is beyond EOD, truncated [ 37.781268][ T758] loop4: p18 start 251660064 is beyond EOD, truncated [ 37.781699][ T287] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 37.788295][ T758] loop4: p19 size 14568 extends beyond EOD, truncated [ 37.799777][ T287] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 176, changing to 7 [ 37.817497][ T758] loop4: p20 start 152961024 is beyond EOD, truncated [ 37.824528][ T758] loop4: p21 start 251660064 is beyond EOD, truncated [ 37.831417][ T758] loop4: p22 size 14568 extends beyond EOD, truncated [ 37.838911][ T758] loop4: p23 start 152961024 is beyond EOD, truncated [ 37.845844][ T758] loop4: p24 start 251660064 is beyond EOD, truncated [ 37.853143][ T758] loop4: p25 size 14568 extends beyond EOD, truncated [ 37.860449][ T758] loop4: p26 start 152961024 is beyond EOD, truncated [ 37.867285][ T758] loop4: p27 start 251660064 is beyond EOD, truncated [ 37.874232][ T758] loop4: p28 size 14568 extends beyond EOD, truncated [ 37.881463][ T758] loop4: p29 start 152961024 is beyond EOD, truncated [ 37.888365][ T758] loop4: p30 start 251660064 is beyond EOD, truncated [ 37.895382][ T758] loop4: p31 size 14568 extends beyond EOD, truncated [ 37.902788][ T758] loop4: p32 start 152961024 is beyond EOD, truncated [ 37.909599][ T758] loop4: p33 start 251660064 is beyond EOD, truncated [ 37.916553][ T758] loop4: p34 size 14568 extends beyond EOD, truncated [ 37.923791][ T758] loop4: p35 start 152961024 is beyond EOD, truncated [ 37.930737][ T758] loop4: p36 start 251660064 is beyond EOD, truncated [ 37.937675][ T758] loop4: p37 size 14568 extends beyond EOD, truncated [ 37.945049][ T758] loop4: p38 start 152961024 is beyond EOD, truncated [ 37.952130][ T758] loop4: p39 start 251660064 is beyond EOD, truncated [ 37.959052][ T758] loop4: p40 size 14568 extends beyond EOD, truncated [ 37.967197][ T758] loop4: p41 start 152961024 is beyond EOD, truncated [ 37.974290][ T287] usb 2-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 37.983537][ T287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.992038][ T758] loop4: p42 start 251660064 is beyond EOD, truncated [ 37.998937][ T758] loop4: p43 size 14568 extends beyond EOD, truncated [ 38.005774][ T287] usb 2-1: Product: syz [ 38.009930][ T287] usb 2-1: Manufacturer: syz [ 38.016056][ T758] loop4: p44 start 152961024 is beyond EOD, truncated [ 38.023043][ T287] usb 2-1: SerialNumber: syz [ 38.027764][ T758] loop4: p45 start 251660064 is beyond EOD, truncated [ 38.036568][ T758] loop4: p46 size 14568 extends beyond EOD, truncated [ 38.044299][ T758] loop4: p47 start 152961024 is beyond EOD, truncated [ 38.051077][ T758] loop4: p48 start 251660064 is beyond EOD, truncated [ 38.058142][ T758] loop4: p49 size 14568 extends beyond EOD, truncated [ 38.066317][ T758] loop4: p50 start 152961024 is beyond EOD, truncated [ 38.073340][ T758] loop4: p51 start 251660064 is beyond EOD, truncated [ 38.080116][ T758] loop4: p52 size 14568 extends beyond EOD, truncated [ 38.087375][ T758] loop4: p53 start 152961024 is beyond EOD, truncated [ 38.094212][ T758] loop4: p54 start 251660064 is beyond EOD, truncated [ 38.100993][ T758] loop4: p55 size 14568 extends beyond EOD, truncated [ 38.108243][ T758] loop4: p56 start 152961024 is beyond EOD, truncated [ 38.115080][ T758] loop4: p57 start 251660064 is beyond EOD, truncated [ 38.121869][ T758] loop4: p58 size 14568 extends beyond EOD, truncated [ 38.129072][ T758] loop4: p59 start 152961024 is beyond EOD, truncated [ 38.135908][ T758] loop4: p60 start 251660064 is beyond EOD, truncated [ 38.142700][ T758] loop4: p61 size 14568 extends beyond EOD, truncated [ 38.149914][ T758] loop4: p62 start 152961024 is beyond EOD, truncated [ 38.156762][ T758] loop4: p63 start 251660064 is beyond EOD, truncated [ 38.163561][ T758] loop4: p64 size 14568 extends beyond EOD, truncated [ 38.170754][ T758] loop4: p65 start 152961024 is beyond EOD, truncated [ 38.177586][ T758] loop4: p66 start 251660064 is beyond EOD, truncated [ 38.184478][ T758] loop4: p67 size 14568 extends beyond EOD, truncated [ 38.191845][ T758] loop4: p68 start 152961024 is beyond EOD, truncated [ 38.198621][ T758] loop4: p69 start 251660064 is beyond EOD, truncated [ 38.205715][ T758] loop4: p70 size 14568 extends beyond EOD, truncated [ 38.218497][ T758] loop4: p71 start 152961024 is beyond EOD, truncated [ 38.225478][ T758] loop4: p72 start 251660064 is beyond EOD, truncated [ 38.232456][ T758] loop4: p73 size 14568 extends beyond EOD, truncated [ 38.239759][ T758] loop4: p74 start 152961024 is beyond EOD, truncated [ 38.246572][ T758] loop4: p75 start 251660064 is beyond EOD, truncated [ 38.253608][ T758] loop4: p76 size 14568 extends beyond EOD, truncated [ 38.260898][ T758] loop4: p77 start 152961024 is beyond EOD, truncated [ 38.267719][ T758] loop4: p78 start 251660064 is beyond EOD, truncated [ 38.277217][ T758] loop4: p79 size 14568 extends beyond EOD, truncated [ 38.285032][ T758] loop4: p80 start 152961024 is beyond EOD, truncated [ 38.292034][ T758] loop4: p81 start 251660064 is beyond EOD, truncated [ 38.298906][ T758] loop4: p82 size 14568 extends beyond EOD, truncated [ 38.306240][ T758] loop4: p83 start 152961024 is beyond EOD, truncated [ 38.313190][ T758] loop4: p84 start 251660064 is beyond EOD, truncated [ 38.320036][ T758] loop4: p85 size 14568 extends beyond EOD, truncated [ 38.328226][ T758] loop4: p86 start 152961024 is beyond EOD, truncated [ 38.335324][ T758] loop4: p87 start 251660064 is beyond EOD, truncated [ 38.342351][ T758] loop4: p88 size 14568 extends beyond EOD, truncated [ 38.349737][ T758] loop4: p89 start 152961024 is beyond EOD, truncated [ 38.356835][ T758] loop4: p90 start 251660064 is beyond EOD, truncated [ 38.364234][ T758] loop4: p91 size 14568 extends beyond EOD, truncated [ 38.371513][ T758] loop4: p92 start 152961024 is beyond EOD, truncated [ 38.378596][ T758] loop4: p93 start 251660064 is beyond EOD, truncated [ 38.387179][ T758] loop4: p94 size 14568 extends beyond EOD, truncated [ 38.394827][ T758] loop4: p95 start 152961024 is beyond EOD, truncated [ 38.401886][ T758] loop4: p96 start 251660064 is beyond EOD, truncated [ 38.409089][ T758] loop4: p97 size 14568 extends beyond EOD, truncated [ 38.416914][ T758] loop4: p98 start 152961024 is beyond EOD, truncated [ 38.423967][ T758] loop4: p99 start 251660064 is beyond EOD, truncated [ 38.430818][ T758] loop4: p100 size 14568 extends beyond EOD, truncated [ 38.441856][ T758] loop4: p101 start 152961024 is beyond EOD, truncated [ 38.448878][ T758] loop4: p102 start 251660064 is beyond EOD, truncated [ 38.460503][ T758] loop4: p103 size 14568 extends beyond EOD, truncated [ 38.468348][ T758] loop4: p104 start 152961024 is beyond EOD, truncated [ 38.475757][ T758] loop4: p105 start 251660064 is beyond EOD, truncated [ 38.482704][ T758] loop4: p106 size 14568 extends beyond EOD, truncated [ 38.490191][ T758] loop4: p107 start 152961024 is beyond EOD, truncated [ 38.497119][ T758] loop4: p108 start 251660064 is beyond EOD, truncated [ 38.504052][ T758] loop4: p109 size 14568 extends beyond EOD, truncated [ 38.512370][ T758] loop4: p110 start 152961024 is beyond EOD, truncated [ 38.519398][ T758] loop4: p111 start 251660064 is beyond EOD, truncated [ 38.526621][ T758] loop4: p112 size 14568 extends beyond EOD, truncated [ 38.537306][ T758] loop4: p113 start 152961024 is beyond EOD, truncated [ 38.544425][ T758] loop4: p114 start 251660064 is beyond EOD, truncated [ 38.551394][ T758] loop4: p115 size 14568 extends beyond EOD, truncated [ 38.560015][ T758] loop4: p116 start 152961024 is beyond EOD, truncated [ 38.567108][ T758] loop4: p117 start 251660064 is beyond EOD, truncated [ 38.574189][ T758] loop4: p118 size 14568 extends beyond EOD, truncated [ 38.581865][ T758] loop4: p119 start 152961024 is beyond EOD, truncated [ 38.588900][ T758] loop4: p120 start 251660064 is beyond EOD, truncated [ 38.596009][ T758] loop4: p121 size 14568 extends beyond EOD, truncated [ 38.604252][ T758] loop4: p122 start 152961024 is beyond EOD, truncated [ 38.612252][ T758] loop4: p123 start 251660064 is beyond EOD, truncated [ 38.619210][ T758] loop4: p124 size 14568 extends beyond EOD, truncated [ 38.627331][ T758] loop4: p125 start 152961024 is beyond EOD, truncated [ 38.634466][ T758] loop4: p126 start 251660064 is beyond EOD, truncated [ 38.643990][ T758] loop4: p127 size 14568 extends beyond EOD, truncated [ 38.653761][ T758] loop4: p128 start 152961024 is beyond EOD, truncated [ 38.662792][ T758] loop4: p129 start 251660064 is beyond EOD, truncated [ 38.669747][ T758] loop4: p130 size 14568 extends beyond EOD, truncated [ 38.677856][ T758] loop4: p131 start 152961024 is beyond EOD, truncated [ 38.685009][ T758] loop4: p132 start 251660064 is beyond EOD, truncated [ 38.692211][ T758] loop4: p133 size 14568 extends beyond EOD, truncated [ 38.700083][ T758] loop4: p134 start 152961024 is beyond EOD, truncated [ 38.707289][ T758] loop4: p135 start 251660064 is beyond EOD, truncated [ 38.714409][ T758] loop4: p136 size 14568 extends beyond EOD, truncated [ 38.725829][ T758] loop4: p137 start 152961024 is beyond EOD, truncated [ 38.732916][ T758] loop4: p138 start 251660064 is beyond EOD, truncated [ 38.739939][ T758] loop4: p139 size 14568 extends beyond EOD, truncated [ 38.749834][ T758] loop4: p140 start 152961024 is beyond EOD, truncated [ 38.758795][ T758] loop4: p141 start 251660064 is beyond EOD, truncated [ 38.765947][ T758] loop4: p142 size 14568 extends beyond EOD, truncated [ 38.775840][ T758] loop4: p143 start 152961024 is beyond EOD, truncated [ 38.782951][ T758] loop4: p144 start 251660064 is beyond EOD, truncated [ 38.790275][ T758] loop4: p145 size 14568 extends beyond EOD, truncated [ 38.799698][ T758] loop4: p146 start 152961024 is beyond EOD, truncated [ 38.808190][ T758] loop4: p147 start 251660064 is beyond EOD, truncated [ 38.815208][ T758] loop4: p148 size 14568 extends beyond EOD, truncated [ 38.832541][ T758] loop4: p149 start 152961024 is beyond EOD, truncated [ 38.840133][ T758] loop4: p150 start 251660064 is beyond EOD, truncated [ 38.847337][ T758] loop4: p151 size 14568 extends beyond EOD, truncated [ 38.855654][ T758] loop4: p152 start 152961024 is beyond EOD, truncated [ 38.862869][ T758] loop4: p153 start 251660064 is beyond EOD, truncated [ 38.869820][ T758] loop4: p154 size 14568 extends beyond EOD, truncated [ 38.878018][ T758] loop4: p155 start 152961024 is beyond EOD, truncated [ 38.885271][ T758] loop4: p156 start 251660064 is beyond EOD, truncated [ 38.892429][ T758] loop4: p157 size 14568 extends beyond EOD, truncated [ 38.900181][ T758] loop4: p158 start 152961024 is beyond EOD, truncated [ 38.907515][ T758] loop4: p159 start 251660064 is beyond EOD, truncated [ 38.914470][ T758] loop4: p160 size 14568 extends beyond EOD, truncated [ 38.923268][ T758] loop4: p161 start 152961024 is beyond EOD, truncated [ 38.930137][ T758] loop4: p162 start 251660064 is beyond EOD, truncated [ 38.937087][ T758] loop4: p163 size 14568 extends beyond EOD, truncated [ 38.944641][ T758] loop4: p164 start 152961024 is beyond EOD, truncated [ 38.952032][ T758] loop4: p165 start 251660064 is beyond EOD, truncated [ 38.958877][ T758] loop4: p166 size 14568 extends beyond EOD, truncated [ 38.966228][ T758] loop4: p167 start 152961024 is beyond EOD, truncated [ 38.973335][ T758] loop4: p168 start 251660064 is beyond EOD, truncated [ 39.131745][ T758] loop4: p169 size 14568 extends beyond EOD, truncated [ 39.145999][ T758] loop4: p170 start 152961024 is beyond EOD, truncated [ 39.170765][ T782] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 39.251869][ T24] kauditd_printk_skb: 1 callbacks suppressed [ 39.251889][ T24] audit: type=1400 audit(1777721860.199:336): avc: denied { append } for pid=779 comm="syz.0.138" path="/29/file0/memory.events.local" dev="loop0" ino=1048611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.375748][ T758] loop4: p171 start 251660064 is beyond EOD, truncated [ 39.445210][ T758] loop4: p172 size 14568 extends beyond EOD, truncated [ 39.491221][ T758] loop4: p173 start 152961024 is beyond EOD, truncated [ 39.603010][ T370] usb 3-1: USB disconnect, device number 9 [ 39.622032][ T758] loop4: p174 start 251660064 is beyond EOD, truncated [ 39.836781][ T758] loop4: p175 size 14568 extends beyond EOD, truncated [ 39.888914][ T758] loop4: p176 start 152961024 is beyond EOD, truncated [ 39.901788][ T758] loop4: p177 start 251660064 is beyond EOD, truncated [ 39.909164][ T758] loop4: p178 size 14568 extends beyond EOD, truncated [ 39.916686][ T758] loop4: p179 start 152961024 is beyond EOD, truncated [ 39.923745][ T758] loop4: p180 start 251660064 is beyond EOD, truncated [ 39.930614][ T758] loop4: p181 size 14568 extends beyond EOD, truncated [ 39.938240][ T758] loop4: p182 start 152961024 is beyond EOD, truncated [ 39.946573][ T758] loop4: p183 start 251660064 is beyond EOD, truncated [ 39.951694][ T287] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 39.953639][ T758] loop4: p184 size 14568 extends beyond EOD, truncated [ 39.966218][ T786] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.139: Invalid block bitmap block 0 in block_group 0 [ 39.967659][ T758] loop4: p185 start 152961024 is beyond EOD, [ 39.980475][ T786] Quota error (device loop1): write_blk: dquota write failed [ 39.994273][ T287] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 40.001853][ T758] truncated [ 40.004971][ T758] loop4: p186 start 251660064 is beyond EOD, truncated [ 40.012476][ T758] loop4: p187 size 14568 extends beyond EOD, truncated [ 40.019943][ T786] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 40.029891][ T758] loop4: p188 start 152961024 is beyond EOD, truncated [ 40.029902][ T758] loop4: p189 start 251660064 is beyond EOD, truncated [ 40.029911][ T758] loop4: p190 size 14568 extends beyond EOD, truncated [ 40.046148][ T287] usb 2-1: USB disconnect, device number 7 [ 40.057075][ T786] EXT4-fs error (device loop1): ext4_acquire_dquot:6225: comm syz.1.139: Failed to acquire dquot type 0 [ 40.060974][ T758] loop4: p191 start 152961024 is beyond EOD, truncated [ 40.076502][ T758] loop4: p192 start 251660064 is beyond EOD, truncated [ 40.082917][ T786] EXT4-fs error (device loop1): ext4_free_blocks:5690: comm syz.1.139: Freeing blocks not in datazone - block = 0, count = 4096 [ 40.087905][ T758] loop4: p193 size 14568 extends beyond EOD, [ 40.096997][ T786] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.139: Invalid inode bitmap blk 0 in block_group 0 [ 40.097304][ T758] truncated [ 40.103560][ T786] EXT4-fs error (device loop1) in ext4_free_inode:360: Corrupt filesystem [ 40.116616][ T49] Quota error (device loop1): remove_tree: Getting block too big (0 >= 8) [ 40.119767][ T786] EXT4-fs (loop1): 1 orphan inode deleted [ 40.144291][ T758] loop4: p194 start 152961024 is beyond EOD, truncated [ 40.151224][ T758] loop4: p195 start 251660064 is beyond EOD, truncated [ 40.162977][ T758] loop4: p196 size 14568 extends beyond EOD, truncated [ 40.170234][ T49] EXT4-fs error (device loop1): ext4_release_dquot:6261: comm kworker/u4:2: Failed to release dquot type 0 [ 40.197290][ T758] loop4: p197 start 152961024 is beyond EOD, truncated [ 40.205150][ T758] loop4: p198 start 251660064 is beyond EOD, truncated [ 40.230752][ T786] EXT4-fs (loop1): mounted filesystem without journal. Opts: ; ,errors=continue [ 40.261109][ T758] loop4: p199 size 14568 extends beyond EOD, truncated [ 40.271322][ T758] loop4: p200 start 152961024 is beyond EOD, truncated [ 40.278214][ T758] loop4: p201 start 251660064 is beyond EOD, truncated [ 40.285090][ T758] loop4: p202 size 14568 extends beyond EOD, truncated [ 40.292456][ T758] loop4: p203 start 152961024 is beyond EOD, truncated [ 40.299406][ T758] loop4: p204 start 251660064 is beyond EOD, truncated [ 40.306300][ T758] loop4: p205 size 14568 extends beyond EOD, truncated [ 40.316257][ T758] loop4: p206 start 152961024 is beyond EOD, truncated [ 40.323328][ T802] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 40.329587][ T758] loop4: p207 start 251660064 is beyond EOD, truncated [ 40.336464][ T758] loop4: p208 size 14568 extends beyond EOD, truncated [ 40.341624][ T370] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 40.352028][ T758] loop4: p209 start 152961024 is beyond EOD, truncated [ 40.359145][ T758] loop4: p210 start 251660064 is beyond EOD, truncated [ 40.370377][ T758] loop4: p211 size 14568 extends beyond EOD, truncated [ 40.377956][ T758] loop4: p212 start 152961024 is beyond EOD, truncated [ 40.385287][ T758] loop4: p213 start 251660064 is beyond EOD, truncated [ 40.392219][ T758] loop4: p214 size 14568 extends beyond EOD, truncated [ 40.399348][ T758] loop4: p215 start 152961024 is beyond EOD, truncated [ 40.406242][ T758] loop4: p216 start 251660064 is beyond EOD, truncated [ 40.413720][ T758] loop4: p217 size 14568 extends beyond EOD, truncated [ 40.414013][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.436533][ T758] loop4: p218 start 152961024 is beyond EOD, truncated [ 40.443853][ T758] loop4: p219 start 251660064 is beyond EOD, truncated [ 40.450753][ T758] loop4: p220 size 14568 extends beyond EOD, truncated [ 40.458065][ T758] loop4: p221 start 152961024 is beyond EOD, truncated [ 40.465179][ T758] loop4: p222 start 251660064 is beyond EOD, truncated [ 40.472076][ T758] loop4: p223 size 14568 extends beyond EOD, truncated [ 40.479461][ T758] loop4: p224 start 152961024 is beyond EOD, truncated [ 40.486387][ T758] loop4: p225 start 251660064 is beyond EOD, truncated [ 40.493385][ T758] loop4: p226 size 14568 extends beyond EOD, truncated [ 40.505054][ T758] loop4: p227 start 152961024 is beyond EOD, truncated [ 40.513232][ T758] loop4: p228 start 251660064 is beyond EOD, truncated [ 40.520268][ T758] loop4: p229 size 14568 extends beyond EOD, truncated [ 40.530491][ T758] loop4: p230 start 152961024 is beyond EOD, truncated [ 40.539501][ T758] loop4: p231 start 251660064 is beyond EOD, truncated [ 40.546520][ T758] loop4: p232 size 14568 extends beyond EOD, truncated [ 40.554217][ T758] loop4: p233 start 152961024 is beyond EOD, truncated [ 40.561162][ T758] loop4: p234 start 251660064 is beyond EOD, truncated [ 40.568260][ T758] loop4: p235 size 14568 extends beyond EOD, truncated [ 40.577019][ T758] loop4: p236 start 152961024 is beyond EOD, truncated [ 40.584075][ T758] loop4: p237 start 251660064 is beyond EOD, truncated [ 40.591173][ T758] loop4: p238 size 14568 extends beyond EOD, truncated [ 40.598621][ T758] loop4: p239 start 152961024 is beyond EOD, truncated [ 40.605608][ T370] usb 3-1: Using ep0 maxpacket: 8 [ 40.611087][ T758] loop4: p240 start 251660064 is beyond EOD, truncated [ 40.619696][ T758] loop4: p241 size 14568 extends beyond EOD, truncated [ 40.623423][ T815] input: syz1 as /devices/virtual/input/input7 [ 40.636417][ T758] loop4: p242 start 152961024 is beyond EOD, truncated [ 40.644693][ T758] loop4: p243 start 251660064 is beyond EOD, truncated [ 40.651753][ T758] loop4: p244 size 14568 extends beyond EOD, truncated [ 40.659124][ T758] loop4: p245 start 152961024 is beyond EOD, truncated [ 40.666439][ T758] loop4: p246 start 251660064 is beyond EOD, truncated [ 40.673612][ T758] loop4: p247 size 14568 extends beyond EOD, truncated [ 40.680889][ T823] FAULT_INJECTION: forcing a failure. [ 40.680889][ T823] name failslab, interval 1, probability 0, space 0, times 1 [ 40.680940][ T758] loop4: p248 start 152961024 is beyond EOD, [ 40.693831][ T823] CPU: 0 PID: 823 Comm: syz.1.150 Not tainted syzkaller #0 [ 40.694011][ T758] truncated [ 40.699970][ T823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 40.699974][ T823] Call Trace: [ 40.699999][ T823] __dump_stack+0x21/0x24 [ 40.707491][ T758] loop4: p249 start 251660064 is beyond EOD, [ 40.710251][ T823] dump_stack_lvl+0x1a7/0x208 [ 40.710266][ T823] ? thaw_kernel_threads+0x220/0x220 [ 40.720531][ T758] truncated [ 40.723576][ T823] ? show_regs_print_info+0x18/0x18 [ 40.723586][ T823] dump_stack+0x15/0x1c [ 40.723602][ T823] should_fail+0x3c1/0x510 [ 40.728089][ T758] loop4: p250 size 14568 extends beyond EOD, [ 40.733953][ T823] ? sk_prot_alloc+0xb2/0x340 [ 40.733964][ T823] __should_failslab+0xa4/0xe0 [ 40.733975][ T823] should_failslab+0x9/0x20 [ 40.733991][ T823] __kmalloc+0x60/0x330 [ 40.738898][ T758] truncated [ 40.743917][ T823] sk_prot_alloc+0xb2/0x340 [ 40.743926][ T823] sk_alloc+0x38/0x4e0 [ 40.743935][ T823] ? bpf_ctx_init+0x173/0x1b0 [ 40.743945][ T823] ? _copy_from_user+0x95/0xd0 [ 40.743953][ T823] bpf_prog_test_run_skb+0x2fd/0x10b0 [ 40.743964][ T823] ? __kasan_check_write+0x14/0x20 [ 40.743972][ T823] ? __bpf_prog_test_run_raw_tp+0x240/0x240 [ 40.743988][ T823] bpf_prog_test_run+0x350/0x3c0 [ 40.747983][ T758] loop4: p251 start 152961024 is beyond EOD, [ 40.752247][ T823] __se_sys_bpf+0x501/0x740 [ 40.752256][ T823] ? __x64_sys_bpf+0x90/0x90 [ 40.752269][ T823] ? debug_smp_processor_id+0x17/0x20 [ 40.752284][ T823] __x64_sys_bpf+0x7b/0x90 [ 40.756663][ T758] truncated [ 40.760797][ T823] do_syscall_64+0x31/0x40 [ 40.760816][ T823] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 40.767139][ T758] loop4: p252 start 251660064 is beyond EOD, [ 40.771579][ T823] RIP: 0033:0x7f33e8426dd9 [ 40.771590][ T823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.771597][ T823] RSP: 002b:00007f33e6e81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 40.776518][ T758] truncated [ 40.780815][ T823] RAX: ffffffffffffffda RBX: 00007f33e869ffa0 RCX: 00007f33e8426dd9 [ 40.780823][ T823] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 40.780829][ T823] RBP: 00007f33e6e81090 R08: 0000000000000000 R09: 0000000000000000 [ 40.780842][ T823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.789775][ T758] loop4: p253 size 14568 extends beyond EOD, [ 40.792530][ T823] R13: 00007f33e86a0038 R14: 00007f33e869ffa0 R15: 00007ffc7a6e49c8 [ 40.953670][ T758] truncated [ 40.957239][ T758] loop4: p254 start 152961024 is beyond EOD, truncated [ 40.964126][ T758] loop4: p255 start 251660064 is beyond EOD, truncated [ 40.991738][ T370] usb 3-1: unable to get BOS descriptor or descriptor too short [ 41.072135][ T370] usb 3-1: config 8 has an invalid interface number: 188 but max is 0 [ 41.093428][ T370] usb 3-1: config 8 has an invalid descriptor of length 11, skipping remainder of the config [ 41.127513][ T370] usb 3-1: config 8 has no interface number 0 [ 41.144003][ T312] udevd[312]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 41.151405][ T811] udevd[811]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 41.154578][ T632] udevd[632]: inotify_add_watch(7, /dev/loop4p10, 10) failed: No such file or directory [ 41.164238][ T302] udevd[302]: inotify_add_watch(7, /dev/loop4p13, 10) failed: No such file or directory [ 41.174037][ T331] udevd[331]: inotify_add_watch(7, /dev/loop4p16, 10) failed: No such file or directory [ 41.183984][ T640] udevd[640]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 41.227747][ T832] udevd[832]: inotify_add_watch(7, /dev/loop4p22, 10) failed: No such file or directory [ 41.230307][ T831] udevd[831]: inotify_add_watch(7, /dev/loop4p19, 10) failed: No such file or directory [ 41.237642][ T370] usb 3-1: config 8 interface 188 altsetting 255 endpoint 0x8F has an invalid bInterval 212, changing to 11 [ 41.263055][ T312] udevd[312]: inotify_add_watch(7, /dev/loop4p37, 10) failed: No such file or directory [ 41.268199][ T811] udevd[811]: inotify_add_watch(7, /dev/loop4p40, 10) failed: No such file or directory [ 41.361343][ T370] usb 3-1: config 8 interface 188 altsetting 255 endpoint 0x8F has invalid maxpacket 1452, setting to 1024 [ 41.373149][ T370] usb 3-1: config 8 interface 188 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 41.388350][ T840] exfat: Deprecated parameter 'utf8' [ 41.397945][ T370] usb 3-1: config 8 interface 188 has no altsetting 0 [ 41.413899][ T840] exfat: Deprecated parameter 'utf8' [ 41.419327][ T840] exfat: Deprecated parameter 'utf8' [ 41.425048][ T840] exfat: Deprecated parameter 'utf8' [ 41.430545][ T840] exfat: Deprecated parameter 'utf8' [ 41.435903][ T840] exfat: Deprecated parameter 'namecase' [ 41.461131][ T24] audit: type=1400 audit(1777721862.419:337): avc: denied { setopt } for pid=843 comm="syz.0.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.571652][ T370] usb 3-1: New USB device found, idVendor=1b3d, idProduct=019a, bcdDevice= 2.2c [ 41.576444][ T846] EXT4-fs (loop1): Ignoring removed nobh option [ 41.589555][ T370] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.597988][ T370] usb 3-1: Product: syz [ 41.605832][ T840] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x100df960, utbl_chksum : 0xe619d30d) [ 41.637543][ T846] EXT4-fs error (device loop1): ext4_iget_extra_inode:4685: inode #15: comm syz.1.157: corrupted in-inode xattr [ 41.649826][ T846] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.157: couldn't read orphan inode 15 (err -117) [ 41.652781][ T370] usb 3-1: Manufacturer: syz [ 41.661841][ T846] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,nombcache,debug_want_extra_isize=0x000000000000005a,usrjquota=,barrier,acl,init_itable=0x0000000000008d55,,errors=continue [ 41.699135][ T24] audit: type=1400 audit(1777721862.659:338): avc: denied { setattr } for pid=845 comm="syz.1.157" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.723901][ T370] usb 3-1: SerialNumber: syz [ 41.751697][ T788] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 41.833131][ T847] F2FS-fs (loop0): invalid crc value [ 41.840979][ T847] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 41.866026][ T24] audit: type=1400 audit(1777721862.829:339): avc: denied { append } for pid=861 comm="syz.3.160" name="001" dev="devtmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 41.880135][ T847] F2FS-fs (loop0): Start checkpoint disabled! [ 41.896514][ T847] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 41.913997][ T862] usb usb7: usbfs: process 862 (syz.3.160) did not claim interface 0 before use [ 41.923875][ T864] FAULT_INJECTION: forcing a failure. [ 41.923875][ T864] name failslab, interval 1, probability 0, space 0, times 0 [ 41.949360][ T24] audit: type=1400 audit(1777721862.909:340): avc: denied { write } for pid=843 comm="syz.0.156" name="file1" dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 41.964130][ T864] CPU: 1 PID: 864 Comm: syz.1.161 Not tainted syzkaller #0 [ 41.973392][ T24] audit: type=1400 audit(1777721862.909:341): avc: denied { add_name } for pid=843 comm="syz.0.156" name="file3" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 41.977972][ T864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 41.977977][ T864] Call Trace: [ 41.978000][ T864] __dump_stack+0x21/0x24 [ 42.015615][ T864] dump_stack_lvl+0x1a7/0x208 [ 42.015624][ T864] ? thaw_kernel_threads+0x220/0x220 [ 42.015632][ T864] ? show_regs_print_info+0x18/0x18 [ 42.015640][ T864] dump_stack+0x15/0x1c [ 42.015648][ T864] should_fail+0x3c1/0x510 [ 42.015657][ T864] ? selinux_sk_alloc_security+0x63/0x140 [ 42.015666][ T864] __should_failslab+0xa4/0xe0 [ 42.015674][ T864] should_failslab+0x9/0x20 [ 42.015683][ T864] kmem_cache_alloc_trace+0x3a/0x2e0 [ 42.015691][ T864] selinux_sk_alloc_security+0x63/0x140 [ 42.015698][ T864] security_sk_alloc+0x72/0xa0 [ 42.015707][ T864] sk_prot_alloc+0x138/0x340 [ 42.015714][ T864] sk_alloc+0x38/0x4e0 [ 42.015721][ T864] ? bpf_ctx_init+0x173/0x1b0 [ 42.015730][ T864] ? _copy_from_user+0x95/0xd0 [ 42.015737][ T864] bpf_prog_test_run_skb+0x2fd/0x10b0 [ 42.015745][ T864] ? __kasan_check_write+0x14/0x20 [ 42.015753][ T864] ? __bpf_prog_test_run_raw_tp+0x240/0x240 [ 42.015760][ T864] bpf_prog_test_run+0x350/0x3c0 [ 42.015767][ T864] __se_sys_bpf+0x501/0x740 [ 42.015774][ T864] ? __x64_sys_bpf+0x90/0x90 [ 42.015784][ T864] ? debug_smp_processor_id+0x17/0x20 [ 42.015791][ T864] __x64_sys_bpf+0x7b/0x90 [ 42.015798][ T864] do_syscall_64+0x31/0x40 [ 42.015808][ T864] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 42.015815][ T864] RIP: 0033:0x7f33e8426dd9 [ 42.015824][ T864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.015829][ T864] RSP: 002b:00007f33e6e81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 42.015839][ T864] RAX: ffffffffffffffda RBX: 00007f33e869ffa0 RCX: 00007f33e8426dd9 [ 42.015845][ T864] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 42.015850][ T864] RBP: 00007f33e6e81090 R08: 0000000000000000 R09: 0000000000000000 [ 42.015855][ T864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.015860][ T864] R13: 00007f33e86a0038 R14: 00007f33e869ffa0 R15: 00007ffc7a6e49c8 [ 42.039014][ T868] fuse: Unknown parameter '000000000000000000050x0000000000000006' [ 42.098968][ T24] audit: type=1400 audit(1777721863.059:342): avc: denied { ioctl } for pid=867 comm="syz.1.163" path="socket:[17892]" dev="sockfs" ino=17892 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.121941][ T370] ftdi_sio 3-1:8.188: FTDI USB Serial Device converter detected [ 42.256559][ T370] usb 3-1: Detected FT8U232AM [ 42.261741][ T370] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 42.272073][ T370] usb 3-1: USB disconnect, device number 10 [ 42.278807][ T370] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 42.293137][ T370] ftdi_sio 3-1:8.188: device disconnected [ 42.301301][ T872] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=102 sclass=netlink_tcpdiag_socket pid=872 comm=syz.4.164 [ 42.314931][ T49] attempt to access beyond end of device [ 42.314931][ T49] loop0: rw=2049, want=45112, limit=40427 [ 42.326940][ T287] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 42.539701][ T890] netlink: 56 bytes leftover after parsing attributes in process `syz.0.165'. [ 42.541419][ T881] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 42.556487][ T881] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 42.583714][ T881] F2FS-fs (loop4): Found nat_bits in checkpoint [ 42.601662][ T287] usb 4-1: Using ep0 maxpacket: 16 [ 42.609576][ T890] EXT4-fs (loop0): Ignoring removed nobh option [ 42.620614][ T881] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 42.621161][ T890] EXT4-fs error (device loop0): ext4_iget_extra_inode:4685: inode #15: comm syz.0.165: corrupted in-inode xattr [ 42.627903][ T881] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 42.640013][ T890] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.165: couldn't read orphan inode 15 (err -117) [ 42.649527][ T900] FAT-fs (loop2): Unrecognized mount option "iochrset=cp65" or missing value [ 42.660817][ T890] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,nombcache,debug_want_extra_isize=0x000000000000005a,usrjquota=,barrier,acl,resgid=0x0000000000000000,,errors=continue [ 42.713195][ T286] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 42.713207][ T286] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 42.720824][ T286] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 42.728689][ T286] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 42.736325][ T286] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 42.744196][ T286] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 42.751700][ T287] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.751789][ T286] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 42.759267][ T287] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 42.911665][ T287] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 42.920727][ T287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.928880][ T909] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 42.946798][ T287] usb 4-1: Product: syz [ 42.950984][ T287] usb 4-1: Manufacturer: syz [ 42.956085][ T287] usb 4-1: SerialNumber: syz [ 42.971213][ T909] EXT4-fs (loop0): invalid inodes per group: 524320 [ 42.971213][ T909] [ 43.018033][ T900] F2FS-fs (loop2): Found nat_bits in checkpoint [ 43.054978][ T900] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 43.099307][ T909] binder: 908:909 ioctl c0502100 200000000b40 returned -22 [ 43.248884][ T931] attempt to access beyond end of device [ 43.248884][ T931] loop2: rw=2049, want=81920, limit=40427 [ 43.269862][ T931] attempt to access beyond end of device [ 43.269862][ T931] loop2: rw=2049, want=50608, limit=40427 [ 43.281407][ T287] usb 4-1: 0:2 : does not exist [ 43.291995][ T287] usb 4-1: USB disconnect, device number 5 [ 43.387776][ T927] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 43.404175][ T927] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 43.413403][ T927] F2FS-fs (loop0): invalid crc value [ 43.419902][ T927] F2FS-fs (loop0): Found nat_bits in checkpoint [ 43.431225][ T283] attempt to access beyond end of device [ 43.431225][ T283] loop2: rw=2049, want=45104, limit=40427 [ 43.432504][ T934] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 43.450203][ T934] EXT4-fs (loop1): Ignoring removed bh option [ 43.456679][ T934] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 43.468916][ T934] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 16387)! [ 43.479668][ T934] EXT4-fs (loop1): group descriptors corrupted! [ 43.494503][ T934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'. [ 43.502140][ T927] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 43.510455][ T927] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 43.691818][ T946] exfat: Deprecated parameter 'namecase' [ 43.701531][ T946] exfat: Deprecated parameter 'namecase' [ 43.707913][ T927] attempt to access beyond end of device [ 43.707913][ T927] loop0: rw=10241, want=45104, limit=40427 [ 43.711631][ T946] exfat: Deprecated parameter 'namecase' [ 43.719411][ T927] attempt to access beyond end of device [ 43.719411][ T927] loop0: rw=2049, want=45104, limit=40427 [ 43.738846][ T946] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 43.766419][ T946] xt_l2tp: unknown flags: 17 [ 43.813771][ T281] attempt to access beyond end of device [ 43.813771][ T281] loop0: rw=2051, want=45104, limit=40427 [ 43.837231][ T281] F2FS-fs (loop0): Issue discard(5637, 5637, 1) failed, ret: -5 [ 43.966174][ T953] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 43.991701][ T953] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 44.050682][ T957] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 44.386554][ T962] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 44.395197][ T966] F2FS-fs (loop4): invalid crc value [ 44.413548][ T370] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 44.417662][ T962] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 44.428626][ T966] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 44.429386][ T962] F2FS-fs (loop0): Not support 2048, larger than 256 [ 44.452685][ T966] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 44.470653][ T957] F2FS-fs (loop1): Invalid segment/section count (31, 24 x 150994945) [ 44.483358][ T957] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 44.492144][ T957] F2FS-fs (loop1): invalid crc value [ 44.499038][ T957] F2FS-fs (loop1): Found nat_bits in checkpoint [ 44.520948][ T957] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 44.528135][ T957] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 44.598208][ T962] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 44.624755][ T962] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.636027][ T286] attempt to access beyond end of device [ 44.636027][ T286] loop4: rw=2049, want=45112, limit=40427 [ 44.652223][ T957] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 44.672248][ T370] usb 3-1: Using ep0 maxpacket: 16 [ 44.689071][ T957] F2FS-fs (loop1): Can't enable fs-verity on inode 4: the verity feature is not enabled on this filesystem [ 44.795554][ T370] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 44.811155][ T370] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 44.831392][ T370] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 1024 [ 44.848908][ T370] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 44.872172][ T24] kauditd_printk_skb: 18 callbacks suppressed [ 44.872181][ T24] audit: type=1400 audit(1777721864.815:361): avc: denied { map } for pid=961 comm="syz.0.183" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 44.950395][ T370] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 44.959660][ T370] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 44.967687][ T370] usb 3-1: SerialNumber: syz [ 44.991677][ T967] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 45.012669][ T370] cdc_acm 3-1:1.0: skipping garbage [ 45.018296][ T370] cdc_acm: probe of 3-1:1.0 failed with error -12 [ 45.057438][ T982] F2FS-fs (loop4): Found nat_bits in checkpoint [ 45.119382][ T982] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 45.119470][ T992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.190'. [ 45.153519][ T24] audit: type=1400 audit(1777721865.086:362): avc: denied { append } for pid=981 comm="syz.4.187" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 45.177519][ T993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.190'. [ 45.187449][ T24] audit: type=1400 audit(1777721865.115:363): avc: denied { map } for pid=981 comm="syz.4.187" path="/dev/loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 45.283347][ T24] audit: type=1400 audit(1777721865.212:364): avc: denied { setattr } for pid=981 comm="syz.4.187" name=".pending_reads" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.320890][ T24] audit: type=1326 audit(1777721865.241:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1007 comm="syz.1.193" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e8426dd9 code=0x7ffc0000 [ 45.346086][ T24] audit: type=1326 audit(1777721865.270:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1007 comm="syz.1.193" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e8426dd9 code=0x7ffc0000 [ 45.371611][ T286] attempt to access beyond end of device [ 45.371611][ T286] loop4: rw=2049, want=45104, limit=40427 [ 45.371732][ T24] audit: type=1326 audit(1777721865.270:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1007 comm="syz.1.193" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f33e8426dd9 code=0x7ffc0000 [ 45.407817][ T24] audit: type=1326 audit(1777721865.270:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1007 comm="syz.1.193" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e8426dd9 code=0x7ffc0000 [ 45.432845][ T24] audit: type=1326 audit(1777721865.270:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1007 comm="syz.1.193" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f33e8426dd9 code=0x7ffc0000 [ 45.458093][ T24] audit: type=1326 audit(1777721865.270:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1007 comm="syz.1.193" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e8426dd9 code=0x7ffc0000 [ 45.497086][ T1010] SELinux: Context system_u:object_r:var_run_t:s0 is not valid (left unmapped). [ 45.785053][ T287] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 45.980737][ T643] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 46.155826][ T287] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.166152][ T287] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 46.238046][ T643] usb 5-1: Using ep0 maxpacket: 16 [ 46.239709][ T1022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.197'. [ 46.248482][ T287] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 46.261545][ T287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 46.269591][ T287] usb 2-1: SerialNumber: syz [ 46.276413][ T1023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.197'. [ 46.285407][ T643] usb 5-1: too many configurations: 55, using maximum allowed: 8 [ 46.470172][ T1036] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.201: Invalid block bitmap block 0 in block_group 0 [ 46.483766][ T1036] EXT4-fs error (device loop0): ext4_acquire_dquot:6225: comm syz.0.201: Failed to acquire dquot type 0 [ 46.495195][ T1036] EXT4-fs error (device loop0): ext4_free_blocks:5690: comm syz.0.201: Freeing blocks not in datazone - block = 0, count = 4096 [ 46.508657][ T1036] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.201: Invalid inode bitmap blk 0 in block_group 0 [ 46.515714][ T49] EXT4-fs error (device loop0): ext4_release_dquot:6261: comm kworker/u4:2: Failed to release dquot type 0 [ 46.521889][ T1036] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 46.541368][ T1036] EXT4-fs (loop0): 1 orphan inode deleted [ 46.547504][ T1036] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; ,errors=continue [ 46.567617][ T1036] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 16: comm syz.0.201: path /49/file0: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 46.567724][ T287] usb 2-1: 0:2 : does not exist [ 46.599070][ T287] usb 2-1: USB disconnect, device number 8 [ 46.664959][ T1042] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.203: Invalid block bitmap block 0 in block_group 0 [ 46.679120][ T1042] EXT4-fs error (device loop0): ext4_acquire_dquot:6225: comm syz.0.203: Failed to acquire dquot type 0 [ 46.690531][ T1042] EXT4-fs error (device loop0): ext4_free_blocks:5690: comm syz.0.203: Freeing blocks not in datazone - block = 0, count = 4096 [ 46.704266][ T1042] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.203: Invalid inode bitmap blk 0 in block_group 0 [ 46.717015][ T49] EXT4-fs error (device loop0): ext4_release_dquot:6261: comm kworker/u4:2: Failed to release dquot type 0 [ 46.717057][ T1042] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 46.737235][ T1042] EXT4-fs (loop0): 1 orphan inode deleted [ 46.743024][ T1042] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; ,errors=continue [ 46.877595][ T1048] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 46.898493][ T1055] netlink: 'syz.3.207': attribute type 4 has an invalid length. [ 46.919489][ T54] usb 3-1: USB disconnect, device number 11 [ 47.035733][ T643] usb 5-1: string descriptor 0 read error: -71 [ 47.042000][ T643] usb 5-1: New USB device found, idVendor=2304, idProduct=a1a0, bcdDevice=7f.58 [ 47.061412][ T643] usb 5-1: New USB device strings: Mfr=220, Product=245, SerialNumber=158 [ 47.093250][ T643] usb 5-1: rejected 8 configurations due to insufficient available bus power [ 47.112087][ T643] usb 5-1: no configuration chosen from 8 choices [ 47.124047][ T643] usb 5-1: USB disconnect, device number 5 [ 47.160402][ T1072] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.214: Invalid block bitmap block 0 in block_group 0 [ 47.173970][ T1072] EXT4-fs error (device loop1): ext4_acquire_dquot:6225: comm syz.1.214: Failed to acquire dquot type 0 [ 47.185938][ T1072] EXT4-fs error (device loop1): ext4_free_blocks:5690: comm syz.1.214: Freeing blocks not in datazone - block = 0, count = 4096 [ 47.205468][ T370] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 47.213287][ T1072] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.214: Invalid inode bitmap blk 0 in block_group 0 [ 47.226022][ T315] EXT4-fs error (device loop1): ext4_release_dquot:6261: comm kworker/u4:4: Failed to release dquot type 0 [ 47.250718][ T1072] EXT4-fs error (device loop1) in ext4_free_inode:360: Corrupt filesystem [ 47.269045][ T1072] EXT4-fs (loop1): 1 orphan inode deleted [ 47.274925][ T1072] EXT4-fs (loop1): mounted filesystem without journal. Opts: ; ,errors=continue [ 47.284648][ T1062] F2FS-fs (loop2): Found nat_bits in checkpoint [ 47.300399][ T1072] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 16: comm syz.1.214: path /32/file0: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 47.359949][ T1062] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 47.445486][ T370] usb 4-1: Using ep0 maxpacket: 8 [ 47.463461][ T1062] attempt to access beyond end of device [ 47.463461][ T1062] loop2: rw=2049, want=79920, limit=40427 [ 47.506645][ T1062] attempt to access beyond end of device [ 47.506645][ T1062] loop2: rw=2049, want=81920, limit=40427 [ 47.594271][ T1064] attempt to access beyond end of device [ 47.594271][ T1064] loop2: rw=524288, want=78080, limit=40427 [ 47.605524][ T370] usb 4-1: unable to get BOS descriptor or descriptor too short [ 47.606414][ T1064] attempt to access beyond end of device [ 47.606414][ T1064] loop2: rw=0, want=77832, limit=40427 [ 47.622998][ T1062] attempt to access beyond end of device [ 47.622998][ T1062] loop2: rw=2049, want=53248, limit=40427 [ 47.624670][ T1064] attempt to access beyond end of device [ 47.624670][ T1064] loop2: rw=0, want=77832, limit=40427 [ 47.655129][ T1084] attempt to access beyond end of device [ 47.655129][ T1084] loop2: rw=0, want=77832, limit=40427 [ 47.665708][ T1062] attempt to access beyond end of device [ 47.665708][ T1062] loop2: rw=2049, want=66072, limit=40427 [ 47.685516][ T370] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.695743][ T370] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 47.704893][ T283] attempt to access beyond end of device [ 47.704893][ T283] loop2: rw=2049, want=45104, limit=40427 [ 47.785446][ T54] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 47.855543][ T370] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 47.874783][ T370] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.894448][ T370] usb 4-1: Product: syz [ 47.900099][ T370] usb 4-1: Manufacturer: syz [ 47.904728][ T370] usb 4-1: SerialNumber: syz [ 48.080087][ T1094] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2051 sclass=netlink_tcpdiag_socket pid=1094 comm=syz.0.219 [ 48.165521][ T626] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 48.175493][ T370] usb 4-1: failed waiting for Axe-Fx III to boot: -71 [ 48.182304][ T370] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 48.189404][ T54] usb 2-1: not running at top speed; connect to a high speed hub [ 48.199629][ T370] usb 4-1: USB disconnect, device number 6 [ 48.238798][ T1110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.225'. [ 48.248278][ T1110] netlink: 60 bytes leftover after parsing attributes in process `syz.4.225'. [ 48.257300][ T1110] netlink: 16 bytes leftover after parsing attributes in process `syz.4.225'. [ 48.275480][ T54] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.285659][ T54] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 48.294627][ T54] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 48.315576][ T54] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 48.485503][ T54] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 48.494596][ T54] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.503039][ T54] usb 2-1: Product: syz [ 48.507246][ T54] usb 2-1: Manufacturer: syz [ 48.511838][ T54] usb 2-1: SerialNumber: syz [ 48.565503][ T626] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.576452][ T626] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.586200][ T626] usb 3-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 48.595268][ T626] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.603736][ T626] usb 3-1: config 0 descriptor?? [ 48.675494][ T643] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 48.778181][ T1086] udc-core: couldn't find an available UDC or it's busy [ 48.785259][ T1086] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 48.900429][ T1137] netlink: 44 bytes leftover after parsing attributes in process `syz.3.234'. [ 48.909573][ T1137] netlink: 43 bytes leftover after parsing attributes in process `syz.3.234'. [ 48.918893][ T1137] netlink: 'syz.3.234': attribute type 5 has an invalid length. [ 48.925501][ T54] usb 2-1: 0:2 : does not exist [ 48.927023][ T1137] netlink: 43 bytes leftover after parsing attributes in process `syz.3.234'. [ 48.934061][ T54] usb 2-1: USB disconnect, device number 9 [ 48.955539][ T626] usbhid 3-1:0.0: can't add hid device: -71 [ 48.961775][ T626] usbhid: probe of 3-1:0.0 failed with error -71 [ 48.991717][ T626] usb 3-1: USB disconnect, device number 12 [ 49.075603][ T643] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 49.095587][ T643] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 43040, setting to 64 [ 49.185492][ T643] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 49.196653][ T643] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 49.204715][ T643] usb 5-1: SerialNumber: syz [ 49.265919][ T643] cdc_acm 5-1:1.0: skipping garbage [ 49.405607][ T626] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 49.423449][ T1153] F2FS-fs (loop0): Invalid log_blocksize (64), supports only 12 [ 49.435506][ T1153] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 49.444542][ T1153] F2FS-fs (loop0): invalid crc value [ 49.454883][ T1153] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 49.470200][ T54] usb 5-1: USB disconnect, device number 6 [ 49.496304][ T1153] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 49.510540][ T1153] F2FS-fs (loop0): Start checkpoint disabled! [ 49.518027][ T1167] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 49.527080][ T1167] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 49.545382][ T1153] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 49.552959][ T1153] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 49.606155][ T281] attempt to access beyond end of device [ 49.606155][ T281] loop0: rw=524288, want=45072, limit=40427 [ 49.766063][ T626] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.783561][ T626] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.794646][ T626] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 49.825449][ T626] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 49.844685][ T626] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.865502][ T626] usb 3-1: config 0 descriptor?? [ 49.873485][ T1194] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 49.938458][ T1197] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.946059][ T1197] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.953651][ T1197] device bridge_slave_0 entered promiscuous mode [ 49.962246][ T1197] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.969487][ T1197] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.982939][ T1197] device bridge_slave_1 entered promiscuous mode [ 50.008774][ T1211] tipc: Started in network mode [ 50.013719][ T1211] tipc: Own node identity fe800000000000000000000000000014, cluster identity 4711 [ 50.023901][ T1211] tipc: Enabling of bearer rejected, failed to enable media [ 50.067194][ T1197] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.074261][ T1197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.081566][ T1197] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.088620][ T1197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.114036][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.122491][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.130757][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.138248][ T1212] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 50.150201][ T1212] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 50.158180][ T1212] System zones: 1-12 [ 50.162625][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.170989][ T1212] EXT4-fs (loop4): 1 truncate cleaned up [ 50.171096][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.176792][ T1212] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug,block_validity,errors=remount-ro,debug, [ 50.183677][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.212398][ T303] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 50.220479][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.229183][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.236323][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.254742][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.263809][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.272069][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.281191][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.297156][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.314866][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.322397][ T24] kauditd_printk_skb: 111 callbacks suppressed [ 50.322409][ T24] audit: type=1400 audit(1777721884.204:473): avc: denied { ioctl } for pid=1139 comm="syz.2.235" path="socket:[18599]" dev="sockfs" ino=18599 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.354102][ T1197] device veth0_vlan entered promiscuous mode [ 50.356086][ T626] steelseries_srws1 0003:1038:1410.0004: unknown main item tag 0x1 [ 50.370180][ T626] steelseries_srws1 0003:1038:1410.0004: not enough fields in HID_OUTPUT_REPORT 0 [ 50.374507][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.396233][ T1197] device veth1_macvtap entered promiscuous mode [ 50.407817][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.432622][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.444123][ T24] audit: type=1400 audit(1777721884.324:474): avc: denied { mounton } for pid=1197 comm="syz-executor" path="/root/syzkaller.jVbKaS/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 50.495740][ T303] usb 4-1: Using ep0 maxpacket: 8 [ 50.625484][ T303] usb 4-1: config 0 has an invalid interface number: 207 but max is 1 [ 50.634729][ T303] usb 4-1: config 0 has an invalid interface number: 7 but max is 1 [ 50.643592][ T303] usb 4-1: config 0 has no interface number 0 [ 50.649807][ T303] usb 4-1: config 0 has no interface number 1 [ 50.656031][ T303] usb 4-1: config 0 interface 7 altsetting 1 endpoint 0xE has invalid maxpacket 64914, setting to 64 [ 50.667099][ T303] usb 4-1: config 0 interface 7 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 50.677730][ T303] usb 4-1: config 0 interface 207 has no altsetting 0 [ 50.684518][ T303] usb 4-1: config 0 interface 7 has no altsetting 0 [ 50.855634][ T303] usb 4-1: New USB device found, idVendor=05da, idProduct=0094, bcdDevice=c3.32 [ 50.864822][ T303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.872986][ T303] usb 4-1: Product: syz [ 50.883940][ T303] usb 4-1: Manufacturer: syz [ 50.888919][ T303] usb 4-1: SerialNumber: syz [ 50.896992][ T303] usb 4-1: config 0 descriptor?? [ 50.942056][ T300] device bridge_slave_1 left promiscuous mode [ 50.948529][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.956770][ T300] device bridge_slave_0 left promiscuous mode [ 50.963108][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.974339][ T24] audit: type=1400 audit(1777721884.844:475): avc: denied { shutdown } for pid=1224 comm="syz.4.259" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.995797][ T300] device veth1_macvtap left promiscuous mode [ 51.002845][ T300] device veth0_vlan left promiscuous mode [ 51.047908][ T1233] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 51.213455][ T1233] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 51.296919][ T1237] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 51.310699][ T1233] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0002] [ 51.480845][ T1233] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 51.635981][ T1233] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 51.837264][ T1233] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,abort,nomblk_io_submit,noblock_validity,nolazytime,noblock_validity,auto_da_alloc,nobarrier,jqfmt=vfsold,,errors=continue [ 51.906124][ T1243] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.264: Invalid block bitmap block 0 in block_group 0 [ 51.932101][ T1243] Quota error (device loop3): write_blk: dquota write failed [ 51.939716][ T1243] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 51.949842][ T1243] EXT4-fs error (device loop3): ext4_acquire_dquot:6225: comm syz.3.264: Failed to acquire dquot type 0 [ 51.961620][ T1243] EXT4-fs error (device loop3): ext4_free_blocks:5690: comm syz.3.264: Freeing blocks not in datazone - block = 0, count = 4096 [ 51.974688][ T1233] xt_socket: unknown flags 0x40 [ 51.979802][ T54] usb 3-1: USB disconnect, device number 13 [ 51.987904][ T1243] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.264: Invalid inode bitmap blk 0 in block_group 0 [ 51.991985][ T1233] EXT4-fs warning (device loop4): dx_probe:860: inode #2: comm syz.4.262: dx entry: limit 65535 != root limit 120 [ 52.012590][ T1243] EXT4-fs error (device loop3) in ext4_free_inode:360: Corrupt filesystem [ 52.012660][ T1243] EXT4-fs (loop3): 1 orphan inode deleted [ 52.021651][ T1233] EXT4-fs warning (device loop4): dx_probe:946: inode #2: comm syz.4.262: Corrupt directory, running e2fsck is recommended [ 52.027483][ T1243] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; ,errors=continue [ 52.040208][ T303] rndis_host 4-1:0.7: skipping garbage [ 52.068443][ T24] audit: type=1400 audit(1777721885.954:476): avc: denied { bind } for pid=1253 comm="syz.5.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.089385][ T1243] FAULT_INJECTION: forcing a failure. [ 52.089385][ T1243] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 52.103504][ T1255] netlink: 24 bytes leftover after parsing attributes in process `syz.2.267'. [ 52.113318][ T303] usb 4-1: bad CDC descriptors [ 52.118339][ T1243] CPU: 0 PID: 1243 Comm: syz.3.264 Not tainted syzkaller #0 [ 52.125616][ T1243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 52.135665][ T1243] Call Trace: [ 52.138960][ T1243] __dump_stack+0x21/0x24 [ 52.143280][ T1243] dump_stack_lvl+0x1a7/0x208 [ 52.147947][ T1243] ? show_regs_print_info+0x18/0x18 [ 52.153136][ T1243] dump_stack+0x15/0x1c [ 52.157284][ T1243] should_fail+0x3c1/0x510 [ 52.161796][ T1243] should_fail_alloc_page+0x4f/0x60 [ 52.162133][ T24] audit: type=1400 audit(1777721885.994:477): avc: denied { listen } for pid=1253 comm="syz.5.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.166982][ T1243] __alloc_pages_nodemask+0x119/0x620 [ 52.166990][ T1243] ? arch_stack_walk+0xee/0x140 [ 52.167000][ T1243] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 52.167010][ T1243] ? stack_trace_snprint+0xf0/0xf0 [ 52.167027][ T1243] handle_pte_fault+0x1719/0x3750 [ 52.187354][ T24] audit: type=1400 audit(1777721885.994:478): avc: denied { connect } for pid=1253 comm="syz.5.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.191803][ T1243] handle_mm_fault+0xf81/0x1710 [ 52.191818][ T1243] ? can_reuse_spf_vma+0xe0/0xe0 [ 52.241377][ T1243] ? memset+0x35/0x40 [ 52.245345][ T1243] ? vmacache_update+0xb7/0x120 [ 52.250167][ T1243] ? find_vma+0x13b/0x150 [ 52.254469][ T1243] do_user_addr_fault+0x5a8/0xc90 [ 52.259467][ T1243] ? do_kern_addr_fault+0x80/0x80 [ 52.264470][ T1243] ? __getblk_gfp+0x6da/0x780 [ 52.269120][ T1243] exc_page_fault+0x5a/0xc0 [ 52.273594][ T1243] asm_exc_page_fault+0x1e/0x30 [ 52.278416][ T1243] RIP: 0010:filldir+0x2bd/0x690 [ 52.283250][ T1243] Code: c7 0f 87 50 02 00 00 0f 01 cb 0f ae e8 48 8b 85 70 ff ff ff 48 89 43 08 48 8b 4d b8 48 8b 45 a0 48 89 01 48 8b 45 d0 8b 55 9c <66> 89 41 10 89 c0 88 54 01 ff 48 89 45 a0 4d 63 f4 42 c6 44 31 12 [ 52.302850][ T1243] RSP: 0018:ffffc90000b37a80 EFLAGS: 00050283 [ 52.308907][ T1243] RAX: 0000000000000020 RBX: 0000200000001fd8 RCX: 0000200000001ff0 [ 52.316857][ T1243] RDX: 0000000000000004 RSI: 0000200000002010 RDI: 00007ffffffff000 [ 52.324813][ T1243] RBP: ffffc90000b37b10 R08: ffff88811085bb47 R09: 1ffff1102210b768 [ 52.332767][ T1243] R10: dffffc0000000000 R11: ffffed102210b769 R12: 000000000000000a [ 52.340717][ T1243] R13: ffff888131322020 R14: 0000200000002010 R15: 0000200000002010 [ 52.348678][ T1243] ? fillonedir+0x450/0x450 [ 52.353155][ T1243] ext4_readdir+0x1688/0x3ab0 [ 52.357807][ T1243] ? ext4_dir_llseek+0x470/0x470 [ 52.362718][ T1243] ? rw_verify_area+0x1c0/0x360 [ 52.367541][ T1243] ? vfs_write+0xb27/0xdc0 [ 52.371934][ T1243] ? fsnotify_perm+0x31b/0x4b0 [ 52.376671][ T1243] ? __kasan_check_write+0x14/0x20 [ 52.381759][ T1243] iterate_dir+0x260/0x570 [ 52.386158][ T1243] ? ext4_dir_llseek+0x470/0x470 [ 52.391066][ T1243] __se_sys_getdents+0xf2/0x250 [ 52.395890][ T1243] ? __x64_sys_getdents+0x90/0x90 [ 52.400888][ T1243] ? ksys_write+0x1f4/0x250 [ 52.405377][ T1243] ? fillonedir+0x450/0x450 [ 52.409876][ T1243] ? __ia32_sys_read+0x90/0x90 [ 52.414624][ T1243] ? ____fput+0x15/0x20 [ 52.418768][ T1243] ? debug_smp_processor_id+0x17/0x20 [ 52.424122][ T1243] __x64_sys_getdents+0x7b/0x90 [ 52.428953][ T1243] do_syscall_64+0x31/0x40 [ 52.433355][ T1243] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 52.439222][ T1243] RIP: 0033:0x7f5ae92cbdd9 [ 52.443612][ T1243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.463188][ T1243] RSP: 002b:00007f5ae7d26028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 52.471575][ T1243] RAX: ffffffffffffffda RBX: 00007f5ae9544fa0 RCX: 00007f5ae92cbdd9 [ 52.479632][ T1243] RDX: 0000000020002078 RSI: 0000200000001fc0 RDI: 0000000000000004 [ 52.487590][ T1243] RBP: 00007f5ae7d26090 R08: 0000000000000000 R09: 0000000000000000 [ 52.495544][ T1243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.503497][ T1243] R13: 00007f5ae9545038 R14: 00007f5ae9544fa0 R15: 00007fff7ad0d7e8 [ 52.513168][ T24] audit: type=1400 audit(1777721886.394:479): avc: denied { accept } for pid=1253 comm="syz.5.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.522958][ T1264] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #3: comm syz.2.271: pblk 67 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 52.535193][ T303] usb 4-1: USB disconnect, device number 7 [ 52.550688][ T1264] EXT4-fs error (device loop2): ext4_quota_enable:6449: comm syz.2.271: Bad quota inode: 3, type: 0 [ 52.568757][ T1264] EXT4-fs warning (device loop2): ext4_enable_quotas:6490: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 52.570368][ T1245] Quota error (device loop3): remove_tree: Getting block too big (0 >= 8) [ 52.592622][ T1264] EXT4-fs (loop2): mount failed [ 52.595931][ T1245] EXT4-fs error (device loop3): ext4_release_dquot:6261: comm kworker/u4:5: Failed to release dquot type 0 [ 52.800803][ T1270] EXT4-fs (loop4): Ignoring removed orlov option [ 52.826307][ T1270] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.269: missing EA_INODE flag [ 52.855449][ T626] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 52.873752][ T1270] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.269: error while reading EA inode 12 err=-117 [ 52.901315][ T1270] EXT4-fs (loop4): 1 orphan inode deleted [ 52.912657][ T1270] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,orlov,,errors=continue [ 53.033517][ T1281] handle_bad_sector: 2 callbacks suppressed [ 53.033538][ T1281] attempt to access beyond end of device [ 53.033538][ T1281] loop3: rw=2049, want=250, limit=128 [ 53.054232][ T1281] attempt to access beyond end of device [ 53.054232][ T1281] loop3: rw=0, want=140, limit=128 [ 53.065462][ T1280] attempt to access beyond end of device [ 53.065462][ T1280] loop3: rw=0, want=140, limit=128 [ 53.077416][ T1280] Buffer I/O error on dev loop3, logical block 69, async page read [ 53.091820][ T1280] attempt to access beyond end of device [ 53.091820][ T1280] loop3: rw=0, want=142, limit=128 [ 53.106342][ T1280] Buffer I/O error on dev loop3, logical block 70, async page read [ 53.114417][ T1280] attempt to access beyond end of device [ 53.114417][ T1280] loop3: rw=0, want=144, limit=128 [ 53.126302][ T1280] Buffer I/O error on dev loop3, logical block 71, async page read [ 53.134255][ T1280] attempt to access beyond end of device [ 53.134255][ T1280] loop3: rw=0, want=146, limit=128 [ 53.166166][ T1280] Buffer I/O error on dev loop3, logical block 72, async page read [ 53.228082][ T1277] F2FS-fs (loop2): fault_injection options not supported [ 53.287333][ T1289] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 53.406515][ T1277] F2FS-fs (loop2): fault_type options not supported [ 53.436152][ T1280] attempt to access beyond end of device [ 53.436152][ T1280] loop3: rw=0, want=140, limit=128 [ 53.479257][ T1277] F2FS-fs (loop2): invalid crc value [ 53.515902][ T1280] Buffer I/O error on dev loop3, logical block 69, async page read [ 53.564346][ T1277] F2FS-fs (loop2): Found nat_bits in checkpoint [ 53.571207][ T1280] attempt to access beyond end of device [ 53.571207][ T1280] loop3: rw=0, want=142, limit=128 [ 53.639746][ T1280] Buffer I/O error on dev loop3, logical block 70, async page read [ 53.648821][ T1277] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 53.723306][ T1280] attempt to access beyond end of device [ 53.723306][ T1280] loop3: rw=0, want=144, limit=128 [ 53.748244][ T1280] Buffer I/O error on dev loop3, logical block 71, async page read [ 53.757056][ T1280] attempt to access beyond end of device [ 53.757056][ T1280] loop3: rw=0, want=146, limit=128 [ 53.768666][ T1280] Buffer I/O error on dev loop3, logical block 72, async page read [ 53.777358][ T1280] Buffer I/O error on dev loop3, logical block 69, async page read [ 53.786180][ T1280] Buffer I/O error on dev loop3, logical block 70, async page read [ 54.075536][ T626] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 54.086458][ T626] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 54.255532][ T626] usb 6-1: New USB device found, idVendor=0499, idProduct=105c, bcdDevice= 0.40 [ 54.264736][ T626] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.272867][ T626] usb 6-1: Product: syz [ 54.277161][ T626] usb 6-1: Manufacturer: syz [ 54.281819][ T626] usb 6-1: SerialNumber: syz [ 54.303034][ T1302] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 54.312187][ T1302] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.328440][ T1302] EXT4-fs error (device loop4) in ext4_do_update_inode:5355: error 27 [ 54.336887][ T1302] EXT4-fs error (device loop4): ext4_dirty_inode:6162: inode #2: comm syz.4.281: mark_inode_dirty error [ 54.348786][ T1302] EXT4-fs error (device loop4) in ext4_do_update_inode:5355: error 27 [ 54.357138][ T1302] EXT4-fs error (device loop4): __ext4_ext_dirty:182: inode #2: comm syz.4.281: mark_inode_dirty error [ 54.607856][ T1324] netlink: 16 bytes leftover after parsing attributes in process `syz.4.281'. [ 54.618634][ T54] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 54.738622][ T1331] tpacket_rcv: packet too big, clamped from 124 to 4294967286. macoff=82 [ 54.745620][ T626] snd-usb-audio: probe of 6-1:1.0 failed with error -2 [ 54.786734][ T626] snd-usb-audio: probe of 6-1:1.1 failed with error -2 [ 54.797059][ T1336] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 54.804231][ T1336] EXT4-fs (loop3): mount failed [ 54.835661][ T626] snd-usb-audio: probe of 6-1:1.2 failed with error -2 [ 54.848388][ T626] usb 6-1: USB disconnect, device number 2 [ 54.875464][ T54] usb 2-1: Using ep0 maxpacket: 16 [ 54.897218][ T1349] EXT4-fs (loop5): Test dummy encryption mode enabled [ 54.907912][ T1349] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a843c01c, mo2=0002] [ 54.916137][ T1349] System zones: 0-5 [ 54.920382][ T1349] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,bsdgroups,bsdgroups,test_dummy_encryption,errors=continue,bsddf,noauto_da_alloc,resuid=0x0000000000000000,,errors=continue [ 54.995485][ T54] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.013941][ T54] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 55.025397][ T1336] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.291: missing EA_INODE flag [ 55.046900][ T1336] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.291: error while reading EA inode 12 err=-117 [ 55.059598][ T1336] EXT4-fs (loop3): 1 orphan inode deleted [ 55.099508][ T1336] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue [ 55.118840][ T879] ------------[ cut here ]------------ [ 55.124309][ T879] kernel BUG at fs/namei.c:2794! [ 55.129748][ T1349] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 55.142564][ T1361] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 55.143484][ T879] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 55.155909][ T879] CPU: 0 PID: 879 Comm: syz.4.167 Not tainted syzkaller #0 [ 55.163079][ T879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 55.173117][ T879] RIP: 0010:may_delete+0x7b1/0x7c0 [ 55.178200][ T879] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd ff ff 48 89 df e8 f0 01 f5 ff e9 d0 fd ff ff e8 46 80 ba ff 0f 0b e8 3f 80 ba ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 55.197782][ T879] RSP: 0018:ffffc90000dd77f8 EFLAGS: 00010293 [ 55.203822][ T879] RAX: ffffffff81aa36b1 RBX: ffff88811c2de440 RCX: ffff88810c06a780 [ 55.211862][ T879] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 55.220071][ T879] RBP: ffffc90000dd7878 R08: 0000000000000003 R09: 0000000000000004 [ 55.228022][ T879] R10: dffffc0000000000 R11: fffff520001baee4 R12: ffff88811c3e8780 [ 55.235968][ T879] R13: 1ffff1102385bc88 R14: ffff88811c2de458 R15: ffff88811c2e8cf0 [ 55.243928][ T879] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 55.252839][ T879] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.259520][ T879] CR2: 0000000000000000 CR3: 0000000115a18000 CR4: 00000000003506b0 [ 55.267479][ T879] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.275430][ T879] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.283382][ T879] Call Trace: [ 55.286659][ T879] ? __kasan_check_write+0x14/0x20 [ 55.291765][ T879] vfs_rmdir+0x2c/0x3e0 [ 55.295902][ T879] incfs_kill_sb+0xfe/0x210 [ 55.300387][ T879] deactivate_locked_super+0xa0/0x100 [ 55.305924][ T879] deactivate_super+0xaf/0xe0 [ 55.310682][ T879] cleanup_mnt+0x45b/0x510 [ 55.315081][ T879] __cleanup_mnt+0x19/0x20 [ 55.319476][ T879] task_work_run+0x127/0x190 [ 55.324155][ T879] do_exit+0xa90/0x2500 [ 55.328305][ T879] ? put_task_struct+0x90/0x90 [ 55.333044][ T879] ? __kasan_check_write+0x14/0x20 [ 55.338143][ T879] ? _raw_spin_lock_irq+0x95/0xf0 [ 55.343157][ T879] ? __kasan_check_read+0x11/0x20 [ 55.348158][ T879] ? cgroup_update_frozen+0x15c/0x970 [ 55.353505][ T879] do_group_exit+0x141/0x310 [ 55.358073][ T879] get_signal+0xf7d/0x12e0 [ 55.362470][ T879] arch_do_signal_or_restart+0xe2/0x11d0 [ 55.368076][ T879] ? __kasan_check_read+0x11/0x20 [ 55.373076][ T879] ? __this_cpu_preempt_check+0x13/0x20 [ 55.378598][ T879] ? rcu_gp_kthread_wake+0x90/0x90 [ 55.383682][ T879] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 55.389314][ T879] ? refcount_inc+0x80/0x80 [ 55.393792][ T879] ? __kasan_check_write+0x14/0x20 [ 55.398873][ T879] ? recalc_sigpending+0x1c4/0x230 [ 55.403955][ T879] exit_to_user_mode_loop+0xa2/0xe0 [ 55.409124][ T879] exit_to_user_mode_prepare+0x76/0xa0 [ 55.414554][ T879] syscall_exit_to_user_mode+0x1d/0x40 [ 55.420002][ T879] ret_from_fork+0x15/0x30 [ 55.424404][ T879] RIP: 0033:0x7fdc0936add9 [ 55.428793][ T879] Code: Unable to access opcode bytes at RIP 0x7fdc0936adaf. [ 55.436230][ T879] RSP: 002b:00007fdc07dc4fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 55.444621][ T879] RAX: 0000000000000000 RBX: 00007fdc095e3fa0 RCX: 00007fdc0936add9 [ 55.452578][ T879] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 55.460528][ T879] RBP: 00007fdc09400d69 R08: 0000000000000000 R09: 0000000000000000 [ 55.468475][ T879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.476430][ T879] R13: 00007fdc095e4038 R14: 00007fdc095e3fa0 R15: 00007ffed1899c98 [ 55.484385][ T879] Modules linked in: [ 55.488845][ T879] ---[ end trace de92e4e17f5fd207 ]--- [ 55.494315][ T879] RIP: 0010:may_delete+0x7b1/0x7c0 [ 55.499459][ T879] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd ff ff 48 89 df e8 f0 01 f5 ff e9 d0 fd ff ff e8 46 80 ba ff 0f 0b e8 3f 80 ba ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 55.534993][ T879] RSP: 0018:ffffc90000dd77f8 EFLAGS: 00010293 [ 55.541447][ T54] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 55.550606][ T879] RAX: ffffffff81aa36b1 RBX: ffff88811c2de440 RCX: ffff88810c06a780 [ 55.558811][ T54] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.566919][ T879] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 55.574885][ T879] RBP: ffffc90000dd7878 R08: 0000000000000003 R09: 0000000000000004 [ 55.585312][ T54] usb 2-1: Product: syz [ 55.591590][ T54] usb 2-1: Manufacturer: syz [ 55.596652][ T54] usb 2-1: SerialNumber: syz [ 55.604959][ T879] R10: dffffc0000000000 R11: fffff520001baee4 R12: ffff88811c3e8780 [ 55.613150][ T879] R13: 1ffff1102385bc88 R14: ffff88811c2de458 R15: ffff88811c2e8cf0 [ 55.621547][ T879] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 55.630839][ T879] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.639097][ T879] CR2: 00007f5ae036c000 CR3: 000000010d488000 CR4: 00000000003506a0 [ 55.649355][ T879] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.658270][ T879] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.666454][ T879] Kernel panic - not syncing: Fatal exception [ 55.673073][ T879] Kernel Offset: disabled [ 55.677387][ T879] Rebooting in 86400 seconds..