last executing test programs: 2m18.993152368s ago: executing program 0 (id=280): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) pread64(r0, 0x0, 0x0, 0x7ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x20, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0x2, 0xd}, {0xffe0, 0xfff2}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) unshare(0x60000600) sync() sync() sync() sync() r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x50, 0x10, 0x4, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x6}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1a}, {0x4, 0x1b}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x48}}, 0x40000) sync() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2a020400) 2m16.253870881s ago: executing program 0 (id=286): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x4, 0x9, 0xfff}) 2m15.984322555s ago: executing program 0 (id=288): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x0, 0x5003) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000555000/0x400000)=nil) process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 2m12.723990436s ago: executing program 0 (id=292): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x49, 0x0, 0x0, 0x0, 0x10, 0x2, 0x0, 0x88, 0x9, 0x0, 0x0, 0x3, 0x31, 0x83, 0x0, 0x2, 0x0, '\x00', 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) 2m12.147619766s ago: executing program 0 (id=296): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local}}}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r6, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r6}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$sock(r3, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000480)="5e1f42bffb7e5d8eb063b63850a4fb6b43730c5fb77c5ab6cb5883e29135c5cf5f0ae7a6e9b6cda9d5c5fabfb4aa4d68f3035ba24917aa827167e93d65f36d96b3ff6478e6e14837fda7143601a1fc5386984f2afa0ccea3343927ae2443d7391b92db4861ccf2fe4b4380c7af7a0768c6d4b59cf66cb38ca856da9f521da057d212e1a6eb74178a12a338b606b6109dfc8aa5fb65e1c9dc78dd6ebca7fd5e3f60e77efb36b3a18a54b29d7e3afcb2be014ca208a2680523ee470dab5aa8dec5ab8ac0d9e32e87ecf60d88bf8e783634055d", 0xd2}, {&(0x7f0000000bc0)="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", 0x800}, {&(0x7f0000001c40)}, {&(0x7f0000001cc0)}, {&(0x7f0000001d00)="4e8ac7bee79f2c570b50b3f723e479ecaf", 0x11}, {&(0x7f0000001d40)="1f530f5cd5972ff2dae0dcfe4b06ae82acffe597549e25e067d3e00b768b39eeb978f1402a3e96423b6a5b1447c84ccd5e27d188c396ec522bef368216ce527086692f1d5dd8a8590f9b0c7c165c2f15a4562f846312", 0x56}, {&(0x7f0000001dc0)}, {0x0}], 0x8}, 0x40000) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x50c, &(0x7f0000000600)="$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") sendmsg$key(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x80, @local, 0x5597bac7}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="8000372409c910ce", 0x8, 0x40004800, &(0x7f0000000040)={0xa, 0x4e24, 0xf, @loopback, 0x9}, 0x1c) 2m4.446480187s ago: executing program 0 (id=308): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) read$FUSE(0xffffffffffffffff, &(0x7f0000004a80)={0x2020}, 0x2020) getpeername$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000ac0)=0x14) 1m50.957305751s ago: executing program 1 (id=338): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101e42, 0x33) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) symlink(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') umount2(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) 1m49.495647497s ago: executing program 1 (id=342): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) pread64(r0, 0x0, 0x0, 0x7ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x50) sched_setscheduler(r1, 0x2, 0x0) unshare(0x60000600) sync() sync() sync() sync() r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x50, 0x10, 0x4, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x6}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1a}, {0x4, 0x1b}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x48}}, 0x40000) sync() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2a020400) 1m47.902969991s ago: executing program 32 (id=308): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) read$FUSE(0xffffffffffffffff, &(0x7f0000004a80)={0x2020}, 0x2020) getpeername$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000ac0)=0x14) 1m47.844507844s ago: executing program 1 (id=346): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="500000000906010200000000c9a0fd516d46671f0900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414190c000280080001406401010124d5644523512c69c6afa09c4aa1f3d8b08eed186f536e2118bf1d7c3d70b1c01c4d6712310b4b432ecc736070cd6d0bfc5de4b1"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5758661d46}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108000000000000000000005f0005000100"], 0x1c}}, 0x0) 1m47.423876175s ago: executing program 1 (id=349): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0xe10482, &(0x7f0000000040)={[{@lazytime}]}, 0x12, 0x522, &(0x7f0000000980)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1m46.704381983s ago: executing program 1 (id=350): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x62040200) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x82) r5 = openat$cgroup_procs(r4, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) pread64(r5, &(0x7f0000000240)=""/91, 0x5b, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) mlockall(0x7) 1m45.097241067s ago: executing program 1 (id=354): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f0000001440)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x6e}}}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x8, 0x111, 0x0, 0x1, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x48004}, 0x24000080) 1m44.473830239s ago: executing program 33 (id=354): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f0000001440)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x6e}}}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x8, 0x111, 0x0, 0x1, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x48004}, 0x24000080) 1m3.24115445s ago: executing program 2 (id=433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x62040200) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x82) openat$cgroup_procs(r4, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000480)=ANY=[@ANYBLOB='dots,fmask=00000000000000000006675,usefree,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',dots,nodots,gid=', @ANYRESHEX=0xee00, @ANYBLOB="2c6e6f646f74732c6e6f646f74732c646f74732c6e88646f74732c6e6ff2ffffffffffffff6f74732c636865636b3d72656c617865642c6e6f646f74732c6e5bb4b9d56f646f74732c73686f77657865632c66837573682c756d61736b3d3f303030303030303030303030303030303030303030372c6ef48e1e9637f66f646f74732c646f74682c00"], 0x1, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4") mlockall(0x7) syz_clone(0x2187e00, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) 1m0.265131646s ago: executing program 2 (id=440): r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7) 59.680236786s ago: executing program 2 (id=442): socketpair(0x1d, 0x80000, 0x1, &(0x7f00000036c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) unshare(0x20000400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000001500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x1c, r3, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4061}, 0x20000000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000001300)={0x1, 0x1, 0x9, 0x8001, 0xfffffe01, 0x9}) ioctl$KDSETMODE(r5, 0x4b45, 0x1) syz_open_dev$vcsu(&(0x7f0000000200), 0x2, 0x105000) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000004300)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x18, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[@routing={0x84, 0x2, 0x0, 0x0, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}]}]}}}}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000001340), 0x30002, 0x0) ioctl$TCSETS(r7, 0x5402, &(0x7f0000001380)={0x200, 0x7ff, 0x1000, 0xd, 0x18, "41eee7d07ac66f80a8f1d19a59f96832eafbd7"}) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0xc840) 58.627767711s ago: executing program 2 (id=444): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x40c, &(0x7f00000001c0)={[{@init_itable}, {@dioread_nolock}, {@abort}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@lazytime}, {@auto_da_alloc}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x100}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7a}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0xfd, 0x501, &(0x7f0000000e80)="$eJzs3c9vY0cdAPCvndhxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZE/gHNP3LkguHEpByR+RKAGiYPRe37OehN7E20SO8Sfj/T0Zt54/Z2J982sv1l7AhhbtyPiICKKEfF+RMxl13PZEe90juRxnx0+Wj06fLSai3b7vX/k0vbkWvT8mcSt7DlLEfGD70T8OHc6bnNvf3OlVqvuZPWFVn17obm3f2+jvrJeXa9uVSrLS8uLb91/s3JpY32lXsxKX/709wff+GnSrdnsSu84LlNn6IXjOInJiPjeVQQbgYlsPMVRd4Rnko+IFyPi1fT+n4uJ9NUEAG6ydnsu2nO9dQDgpos0B5bLl7NcwGzk8+VyJ4f3Uszka41m6+7Dxu7WWidXNh+F/MONWnUxyxXORyGX1JfS8uN65UT9fkS8EBE/n5pO6+XVRm1thP/uAYBxduvE+v/vqc76DwDccKVRdwAAGDrrPwCMH+s/AIwf6z8AjJ/O+j896m4AAEPk/T8AjB/rPwCMle+/+25ytI+y779e+2Bvd7Pxwb21anOzXN9dLa82drbL643GevqdPfWznq/WaGwvvRG7H85/c7vZWmju7T+oN3a3Wg/S7/V+UC2kjzoYwsgAgEFeeOWTP+WSFfnt6fSInr0cCiPtGXDV8qPuADAyE6PuADAydvuC8XWB9/jSA3BD9Nmi9wmlfh8Q6m4gAvxfuvMF+X8YVz35f/8LGMaM/D+ML/l/GF/tdu68e/7HeR8IAFxvcvzAgN//v5idf5P9cuBHaycf8fFV9goAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACut+7+v+VsL/DZyOfL5YjnImI+CrmHG7XqYkQ8HxF/nCpMJfWlEfcZALio/F9z2f5fd+Zen32i6eVbx8ViRPzkl+/94sOVVmvnDxHF3D+nutdbH2fXK8PvPQBwtu46nZ573sh/dvhotXsMsz9/+3ZElDrxjw6LcXQcfzIm03MpChEx869cVu/I9eQuLuLgo4j4fL/x52I2zYF0dj49GT+J/dxQ4+efiJ9P2zrn5GfxuUvoC4ybT5L5551+918+bqfn/vd/KZ2hLi6b/5KnWj1K58DH8bvz38SA+e/2eWO88bvvdkrTp9s+ivjiZEQ39lHP/NONnxsQ//Vzxv/zl15+dVBb+1cRd6J//N5YC6369kJzb//eRn1lvbpe3apUlpeWF9+6/2ZlIc1RLwxeDf7+9t3nB7Ul458ZEL90xvi/es7x//q/7//wK0+J//XX+sXPx0tPiZ+siV87Z/yVmd+WBrUl8dcGjP+s1//uOeN/+pf9U9uGAwCj09zb31yp1ao7Cte5UMxeruvSn0GF0hX3MPkZXI+Rni58a1ixitG/6Wev9f1L0m4/U6xBM8ZlZN2A6+D4po+I/4y6MwAAAAAAAAAAAAAAQF/D+MTSqMcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAzfW/AAAA//+Y9srv") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) r0 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 58.109533499s ago: executing program 2 (id=445): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x208205, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@errors_remount}, {@dioread_nolock}, {@grpid}, {@nodioread_nolock}, {@nogrpid}, {@data_ordered}, {@init_itable}]}, 0x82, 0x63d, &(0x7f0000001280)="$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") 55.290718586s ago: executing program 2 (id=452): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x8800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES64, @ANYRES16], 0x1, 0x37b, &(0x7f0000000380)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x100000f, 0x9, 0x0, 0x1, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x1, 0x3], 0x0, 0x8340}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) r3 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r6, 0x1, 0x703d28, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000040}, 0x40440c4) sendmsg$TIPC_NL_BEARER_DISABLE(r5, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000700)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="000228bd7000fedbdf25020000001c0003800800020005000000080001000800000008000200010000801c01018038000400200001000a004e2100000ca4fc000000000000000000000000000000070000001400020002004e210a0101000000000000000000150001006574683a76657468315f746f5f6873720000000038000400200001000a004e227c18c480fe880000000000000000000000000001000000001400020002004e23e000000100000000000000000c000280080002000100000044000400200001000a004e2100000002fe8000000000000000000000000000bb03000000200002000a004e2100000006fc0100000000000000000000000000010100000014000280080002000500000008000300090000000d0001007564703a73797a3100000000140002800800030000000000080002000000000008000300010000005400028004000400040004000800020001000000080001000c000000080002000a00000008000100fb0300000c000380080001000400000004000400140003800800010001000080080001006a010000040004001400068008000100000001000400020004000500740002800800020008000000080002000f00000008000100020000000800020001000000080001000000000034000380080002000300000008000100ffff0000080001004e67000008000200fbffffff0800010005000000080002001000000008000100080000000400040008000200070000001c00038008000100ff000000080002000700000008000200d10c00002800048024000780080001001b000000080001000e00000008000100140000000800030007000000a80004803c000780080001000200000008000400030000000800010018000000080003000600000008000400080000000800020008000000080001000b0000001300010062726f6164636173742d6c696e6b00000900010073797a300000000014000780080002000100000008000100020000003400078008000300010000000800010006000000080002000700000008000200860c0000080001001b0000000800040004000000"], 0x314}, 0x1, 0x0, 0x0, 0x20000010}, 0x48000) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r7, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x1000) preadv2(r3, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7) 54.874789307s ago: executing program 34 (id=452): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x8800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES64, @ANYRES16], 0x1, 0x37b, &(0x7f0000000380)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x100000f, 0x9, 0x0, 0x1, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x1, 0x3], 0x0, 0x8340}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) r3 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r6, 0x1, 0x703d28, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000040}, 0x40440c4) sendmsg$TIPC_NL_BEARER_DISABLE(r5, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000700)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="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"], 0x314}, 0x1, 0x0, 0x0, 0x20000010}, 0x48000) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r7, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x1000) preadv2(r3, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7) 9.045683069s ago: executing program 6 (id=550): r0 = io_uring_setup(0x307e, &(0x7f0000000240)={0x0, 0x54ac, 0x8, 0x3, 0xc2}) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x650080, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r1], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_matches\x00') read$FUSE(r5, &(0x7f00000027c0)={0x2020}, 0x2038) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 8.129203477s ago: executing program 3 (id=553): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101e42, 0x33) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) symlink(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') umount2(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) 7.879875729s ago: executing program 6 (id=555): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x636) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug}, {@block_validity}, {@errors_remount}, {@debug}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r4, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) 6.767072647s ago: executing program 6 (id=557): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf72}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.285856654s ago: executing program 5 (id=564): r0 = io_uring_setup(0x307e, &(0x7f0000000240)={0x0, 0x54ac, 0x8, 0x3, 0xc2}) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x650080, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r1], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_matches\x00') read$FUSE(r5, &(0x7f00000027c0)={0x2020}, 0x2038) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 5.076664965s ago: executing program 6 (id=566): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x148, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@replay_val={0x10}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x148}}, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r4, 0x4000000, 0xe, 0x0, &(0x7f0000000040)="976d9023d56482cd284a63da5397", 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)='P', 0x0, 0x8000}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r4}, 0x8) 4.167678893s ago: executing program 5 (id=568): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x200800c, &(0x7f0000000340)=ANY=[], 0x0, 0x24a, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) 3.985523223s ago: executing program 7 (id=454): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x4) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 3.895043787s ago: executing program 6 (id=569): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101e42, 0x33) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) symlink(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.476908369s ago: executing program 3 (id=570): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x1) read(r0, 0x0, 0x0) 3.45161s ago: executing program 5 (id=571): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) capget(0x0, 0x0) capget(0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() ptrace$ARCH_SHSTK_LOCK(0x1e, r2, 0x0, 0x5003) sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) prlimit64(r2, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = syz_clone(0x2080, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000555000/0x400000)=nil) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80), 0x0, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) sendmsg$unix(r1, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0xcc040}, 0x64004084) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd8, &(0x7f0000001b00)="$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") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) 2.903197669s ago: executing program 3 (id=575): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000140)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x1e, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r2, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x10, 0x3e8, 0x400, 0x70bd2d, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000090}, 0x20000000) 2.752501007s ago: executing program 7 (id=576): r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r0, 0x0, 0x63, &(0x7f00000003c0)=""/30, &(0x7f0000d23000)=0x1e) 2.534819598s ago: executing program 4 (id=577): r0 = io_uring_setup(0x307e, &(0x7f0000000240)={0x0, 0x54ac, 0x8, 0x3, 0xc2}) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x650080, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r1], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_matches\x00') read$FUSE(r5, &(0x7f00000027c0)={0x2020}, 0x2038) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 2.437636204s ago: executing program 7 (id=578): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000440)={'comedi_parport\x00', [0x0, 0x1dba, 0x3, 0x80000001, 0x1000e7, 0x80000008, 0x1, 0xa82, 0xff46, 0x101, 0xcf3, 0xb, 0x1d8, 0x2, 0x6, 0x8000101, 0x1, 0x1008b, 0x3, 0x2, 0x6, 0x80000001, 0x8, 0x2000007, 0x2, 0x5, 0x3c, 0x5, 0x7fffffff, 0xffef, 0xfffffff6]}) 2.218098385s ago: executing program 5 (id=579): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000200)={{0x50000, 0x1, 0x9, 0x1, 0xcd, 0x9, 0x6, 0x1, 0x0, 0x3, 0x5, 0xeb}, {0x3000, 0x80a0000, 0xd, 0xe, 0x5, 0x7, 0x4, 0x14, 0x4, 0x5, 0x0, 0x1}, {0x8000000, 0x102f8000, 0x1e, 0x5, 0x6, 0x7, 0x81, 0x3, 0x80, 0x1, 0xe, 0x78}, {0xeeef0000, 0x6000, 0x0, 0x3, 0x6, 0x9, 0xc3, 0x0, 0x0, 0x0, 0x80, 0x2e}, {0x2, 0x2000, 0xa, 0xff, 0x8, 0x8, 0x6, 0x7, 0x8, 0x6, 0x4, 0xfc}, {0x10d000, 0x0, 0x9, 0xb9, 0x6, 0x5, 0x42, 0x6, 0x5, 0x1, 0xd, 0x9}, {0xdddd1000, 0x0, 0x0, 0x1, 0xa, 0x8, 0x4, 0x63, 0x1c, 0x5, 0x1, 0xd}, {0xdddd1000, 0x4000, 0xa, 0x23, 0xc, 0x3, 0x9, 0x4a, 0x7, 0x8, 0x43, 0x3}, {0xeeee0000, 0x5}, {0xffff1000}, 0x0, 0x0, 0xdddd0000, 0x150690, 0x3, 0x4000, 0xeeee0c00, [0x1, 0x1004, 0x4, 0x1000]}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000340)={0x2, 0x0, @ioapic={0x0, 0xfffffffe, 0x7ffffffd, 0xfffffff5, 0x0, [{0x86, 0x40, 0x7, '\x00', 0x2}, {0x2a, 0xff, 0xad, '\x00', 0x10}, {0x35, 0x23, 0xb, '\x00', 0xfe}, {0x0, 0x1, 0x82, '\x00', 0x72}, {0x6, 0x1, 0x27, '\x00', 0x9}, {0x0, 0x8, 0xfd, '\x00', 0x7}, {0xcf, 0x20, 0xc5, '\x00', 0xe6}, {0x6, 0xce, 0x5, '\x00', 0xe}, {0x5, 0x7f, 0x7, '\x00', 0x4d}, {0xc, 0xd, 0x0, '\x00', 0x3b}, {0x0, 0x8, 0x0, '\x00', 0x8}, {0x7, 0x6}, {0x2, 0xc0, 0xa, '\x00', 0x4}, {0x6, 0x7, 0x7, '\x00', 0xfe}, {0x8, 0x5, 0x9, '\x00', 0xa9}, {0x6, 0x7, 0x8}, {0xff, 0x5, 0x6}, {0x5, 0xfd, 0x6, '\x00', 0x8}, {0x45, 0x4, 0xff, '\x00', 0x6}, {0x9, 0x9, 0x7a, '\x00', 0x36}, {0x2, 0xa, 0x4, '\x00', 0x5}, {0x2, 0x9, 0x8, '\x00', 0xc4}, {0x3, 0xff, 0x12, '\x00', 0x6}, {0x7, 0xa9, 0x1c, '\x00', 0xa}]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.016372365s ago: executing program 7 (id=580): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101e42, 0x33) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) symlink(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') umount2(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) 1.840557254s ago: executing program 3 (id=581): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x148, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@replay_val={0x10}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x148}}, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r4, 0x4000000, 0xe, 0x0, &(0x7f0000000040)="976d9023d56482cd284a63da5397", 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)='P', 0x0, 0x8000}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r4}, 0x8) 1.445467285s ago: executing program 4 (id=582): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x200800c, &(0x7f0000000340)=ANY=[], 0x0, 0x24a, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) 964.21176ms ago: executing program 5 (id=583): socketpair(0x1d, 0x80000, 0x1, &(0x7f00000036c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) unshare(0x20000400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000001500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x1c, r3, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4061}, 0x20000000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000001300)={0x1, 0x1, 0x9, 0x8001, 0xfffffe01, 0x9}) ioctl$KDSETMODE(r5, 0x4b45, 0x1) syz_open_dev$vcsu(&(0x7f0000000200), 0x2, 0x105000) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000004300)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x18, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[@routing={0x84, 0x2, 0x0, 0x0, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}]}]}}}}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000001340), 0x30002, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000001380)={0x200, 0x7ff, 0x1000, 0xd, 0x18, "41eee7d07ac66f80a8f1d19a59f96832eafbd7"}) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0xc840) 902.778003ms ago: executing program 4 (id=584): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x8400040, 0x20, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, 0x50) link(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00') syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x8, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x5, 0xc000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x90, 0x0, 0x40100000000, {0x3, 0x0, 0x716, 0x81, 0x2, 0x2c7, {0x1, 0x38000, 0x8, 0x4, 0x1a20, 0xb, 0x5e7, 0x80, 0x9, 0x8000, 0x7, 0x0, r2, 0x8, 0x10000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 780.6082ms ago: executing program 3 (id=585): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000340)={&(0x7f00000001c0)=[r1], &(0x7f0000000280)=[0x8a], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000400)={r1, r1, 0x8, 0xa}) 620.802008ms ago: executing program 4 (id=586): syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000001c0)={0x7f, 0x0, 0x0, 0xbf1, 0x0, 0xffff7ffffffffffa, 0x8}, 0x0, 0x0, 0x0, 0x0) 571.351371ms ago: executing program 5 (id=587): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) socket$unix(0x1, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2d, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000045, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 557.053611ms ago: executing program 6 (id=588): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt/bmd33vjPv7b6Z15kA2tZA+ieJ2BYRv0dEX5a9fYWB7Gl+bmbs5tzMWBILC2//nVTWuzE3M1asWrxva545VIoofZbE8WRpuVMXL50ZLZcnzuf5oemzHw5NXbz03Omzo6cmTk2cGzl27OiR4RdfGHl+TeJM47qx9+PJfXtef/fqm2Mnrr7307dptXbvz5ZXx3FHN+sEVMdAutX+WaioXfZkE3W/F2yvSiedLawITemIiHR3dVX6f190xOLO64vXPm1p5YB1lf42bWm8eHYB2MSSaHUNgNYofujT49/isUFDj/+F6y9HdOfp+bmZsflb8XdGKX+9ax3LH4iIE7P/fpU+otnzEAAAq1AZ2zxbb/xXit2V52yuY0c+h9IfEfdHxM6IeCAidkXEgxGVdR+KiIezNy/0rbD8gZr80vFP6VrdOq+RdPz3UtXYb74q/vypvyPPba/E35WcPF2eOJxvk0PRtSXNDy9Txvev/vZFo2XV47/0kZZfjAXzClzrrDlBNz46PbpWG+H65Yi9nfXiT27NBKQtYE9E7G3uo3cUidNPf7Ov0Up3jn8ZazDPtPB1xFPZ/p+NmvgLyfLzk0M9UZ44PFS0iqV+/vXKW43Kv6v418D1A49kicX9X7NGVUMrlyfOTzVfxpU/Pm94TLPa9t+dvFOZs/7l/ey1C6PT0+eHI7qTNyr54piu8vrI4nsvjE73pvli/bT9HzpYv//vzN+T7v90K6WNeH9EPBoRj+V1fzwiDkTEwWXi//GVJz5YJv4kkmjd/r8cMV73++9W++9PqufrV5HoOPPDd41mzFe2/4/GbOW7NlP5/ruDlVbwLjcfAAAA3BNKEbEtktJglh7YFqXS4GD2P/y74r5SeXJq+pmTkx+dG8+uEeiPrlJxpquv6nzocDKbf2KWH8nPFRfLj+Tnjb/s6K3kB8cmy+Mtjh3a3dbb+38U/T/1V0erawesO9drQfuq7f+lFtUD2Hgr+f13LACb0+39vyf909uqugAby/E/tK96/f+TmrzxP2xOS/v/n3VuWQdsRsb/0L70f2hf+j+0pWYu54/jjRb1REQztwUoLhZY/V0FelZ8hX+7JIo7XqxnWb1x6Ux3/kqUWhRpR5ONbVMk0h6zsYUu3kMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgXvZfAAAA//8hId5P") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000100), 0x65, 0x101282) ioctl$int_in(r3, 0x5452, &(0x7f0000000140)=0x8001) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x2, 0x0, 0x80fd}) 436.033928ms ago: executing program 4 (id=589): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f0000002600)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020) 383.62164ms ago: executing program 3 (id=590): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) capget(0x0, 0x0) capget(0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() ptrace$ARCH_SHSTK_LOCK(0x1e, r2, 0x0, 0x5003) sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) prlimit64(r2, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = syz_clone(0x2080, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000555000/0x400000)=nil) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80), 0x0, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) sendmsg$unix(r1, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0xcc040}, 0x64004084) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd8, &(0x7f0000001b00)="$eJzs3M1rHOcZAPBnRqu1bKteuZRS91KVUmwoXUsuMrUp1C4uvfRQaK8FC3llhNYfSCquZB1W7T9Q2p4DuQSSmIQc4rMvCck1l8S+JuQQMEGxEgghUZj9kGTvh5R4VyPs3w9ezfvOu9rneXbYnXlhZwN4bo1nf9KIExFxOYkoNfenEVGs90Yiao3HbayvznyxvjqTxObmXz9NIomIR+urM63nSprbo83BSES894ckfvjv9riLyyvz09VqZaE5Pr107ebpxeWVX89dm75auVq5Pnn2t1Nnps5OnJvqW61ffnjh7uc//9PHta9e+frOZ/97KYkLMdqc21lHv4zH+NZrslMhIqb7HSwnQ816dtaZFHb5p3TASQEA0FW64xrux1GKodi+eCvFW+/nmhwAAADQF5tDEZsAAADAMy6x/gcAAIBnXOt7AI/WV2daLd9vJOyvhxcjYqxR/0azNWYKUatvR2I4Io48SmLnba1J49+e2nhEfPTg3OtZiwHdh9xLbS0iftLp+Cf1+sfqd3G3159GxEQf4o8/MX68/ra7p4f6EPIxT1P/hT7E710/AAzGvYuNE1n7+S/duv6JDue/Qodz1/fR4fzX93N8L63rv42267/t+oe6XP/9ZY8xbr/8wq1uc1n9v7v7x9daLYufbbO54V5PuuuPrOzNw7WInxY61Z9s1Z90qf/yHmOUvrlV6TbXq/79sPlixMnoXH9L0vv3iU7PzlUrE42/HWOsvTv1arf4edefHf8jXepv/f5Tt+N/c48x/n7p0httOx9sd3vXn35STP5W7xWbe/45vbS0MBlRTP7cvv9M71xaj2k9R1b/qV/0fv93qj/7TKg1X4dsLbDW3Gbjfz0R8/d3br/ZLZ/W+i/P43+ly/HfWf87hfbj/589xvjl2/891W1u5/o3a1n81loYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrSiBiNJC1v9dO0XI44GhE/iiNp9cbi0q9mb/zj+pVsLmIshtPZuWplIiJKjXGSjSfr/e3xmSfGv4mI4xHx/9Lh+rg8c6N6Je/iAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2HI0IkYjScsRkUbERilNy+W8swIAAAD67ljeCQAAAAADN5Z3AgAAAMDAWf8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwYMd/du9+EhG184frLVNszg3nmhkwaGneCQC5Gco7ASA3hbwTAHLzHdf4LhfgGZTsMj/SdeZQ33MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OA6eeLe/SQiaucP11um2JwbzjUzYNDSvBMAcjPUbWIkIgr7mwuwv7zF4flljQ8ku8yPbD+m9vjMoYHlBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDBM1pvSVqOiGJzX7kc8YOIGIvhZHauWpmIiGMR8UFp+FA2nsw5ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPpvcXllfrparSxknTSana09OtudpPGK1Q5KPjpP2SnGgUjjgHby/mQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPi8sr89PVamVhMe9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLwtLq/MT1erlYUBdvKuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/HwbAAD//6i9Cig=") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) 0s ago: executing program 4 (id=591): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000140)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x1e, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r2, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x10, 0x3e8, 0x400, 0x70bd2d, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000090}, 0x20000000) kernel console output (not intermixed with test programs): rectory bread(block 70) failed [ 98.940262][ T4550] FAT-fs (loop4): Directory bread(block 71) failed [ 98.951766][ T4550] FAT-fs (loop4): Directory bread(block 72) failed [ 98.958975][ T4536] EXT4-fs (loop3): Total free blocks count 0 [ 98.966519][ T4550] FAT-fs (loop4): Directory bread(block 73) failed [ 98.976477][ T4536] EXT4-fs (loop3): Free/Dirty block details [ 99.000328][ T4536] EXT4-fs (loop3): free_blocks=0 [ 99.024798][ T4558] loop2: detected capacity change from 0 to 16 [ 99.038722][ T4536] EXT4-fs (loop3): dirty_blocks=316 [ 99.064158][ T4558] erofs: (device loop2): mounted with root inode @ nid 36. [ 99.081637][ T4536] EXT4-fs (loop3): Block reservation details [ 99.137450][ T4536] EXT4-fs (loop3): i_reserved_data_blocks=316 [ 99.483980][ T4562] syz.2.51: attempt to access beyond end of device [ 99.483980][ T4562] loop2: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 99.498621][ T4562] syz.2.51: attempt to access beyond end of device [ 99.498621][ T4562] loop2: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 100.002083][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 100.264364][ T4566] loop4: detected capacity change from 0 to 8192 [ 100.282260][ T4570] loop3: detected capacity change from 0 to 256 [ 100.312619][ T4566] FAT-fs (loop4): bogus sectors per cluster 254 [ 100.330881][ T4570] exfat: Deprecated parameter 'namecase' [ 100.333753][ T4566] FAT-fs (loop4): Can't find a valid FAT filesystem [ 100.373612][ T4570] exfat: Deprecated parameter 'namecase' [ 100.379437][ T4570] exfat: Deprecated parameter 'namecase' [ 100.441611][ T4570] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 100.573686][ T26] audit: type=1804 audit(1777112260.737:2): pid=4570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.55" name=2F6E6577726F6F742F372FE91F7189591E9233614B2F627573 dev="loop3" ino=1048601 res=1 errno=0 [ 100.896133][ T4585] loop3: detected capacity change from 0 to 128 [ 100.943372][ T4585] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 101.020325][ T4585] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 101.957948][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 102.514474][ T4611] Zero length message leads to an empty skb [ 102.871302][ T4622] loop4: detected capacity change from 0 to 128 [ 107.646143][ T4684] loop3: detected capacity change from 0 to 128 [ 107.952448][ T4692] loop2: detected capacity change from 0 to 512 [ 108.251332][ T4684] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 108.287203][ T4692] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 108.333550][ T4275] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 108.353737][ T4692] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.389564][ T4684] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 108.704604][ T4522] Set syz1 is full, maxelem 65536 reached [ 108.815058][ T4275] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.841464][ T4275] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.102998][ T4275] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 109.236080][ T4275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 109.302107][ T4275] usb 1-1: SerialNumber: syz [ 109.395701][ T4724] loop1: detected capacity change from 0 to 512 [ 109.536125][ T4724] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.550405][ T4275] usb 1-1: 0:2 : does not exist [ 109.564569][ T4725] loop4: detected capacity change from 0 to 256 [ 109.572354][ T4725] exfat: Deprecated parameter 'utf8' [ 109.582418][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 109.593991][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 109.657291][ T4724] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.81: iget: bad i_size value: 38620345925642 [ 109.703056][ T4725] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 109.715619][ T4275] usb 1-1: USB disconnect, device number 3 [ 109.738227][ T4724] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.81: couldn't read orphan inode 15 (err -117) [ 109.794901][ T4733] input: syz0 as /devices/virtual/input/input6 [ 109.801669][ T4724] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 110.018667][ T4735] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.81: bg 0: block 5: invalid block bitmap [ 110.064681][ T4659] udevd[4659]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.124361][ T4735] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 204 with error 28 [ 110.208001][ T4735] EXT4-fs (loop1): This should not happen!! Data will be lost [ 110.208001][ T4735] [ 110.382162][ T4735] EXT4-fs (loop1): Total free blocks count 0 [ 110.555301][ T4735] EXT4-fs (loop1): Free/Dirty block details [ 110.685187][ T4735] EXT4-fs (loop1): free_blocks=0 [ 110.801883][ T4735] EXT4-fs (loop1): dirty_blocks=204 [ 110.953807][ T4735] EXT4-fs (loop1): Block reservation details [ 110.959948][ T4735] EXT4-fs (loop1): i_reserved_data_blocks=204 [ 111.201673][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 111.980274][ T4755] loop2: detected capacity change from 0 to 128 [ 112.173420][ T4768] loop3: detected capacity change from 0 to 16 [ 112.199101][ T4768] erofs: (device loop3): mounted with root inode @ nid 36. [ 112.369296][ T4774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.92'. [ 112.502940][ T4775] syz.3.91: attempt to access beyond end of device [ 112.502940][ T4775] loop3: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 112.517606][ T4775] syz.3.91: attempt to access beyond end of device [ 112.517606][ T4775] loop3: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 113.048131][ T4783] loop0: detected capacity change from 0 to 256 [ 113.229930][ T4787] loop4: detected capacity change from 0 to 16 [ 113.277901][ T4787] erofs: (device loop4): mounted with root inode @ nid 36. [ 114.103498][ T4790] loop4: detected capacity change from 0 to 256 [ 116.533691][ T4315] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 116.725823][ T4858] loop3: detected capacity change from 0 to 16 [ 116.745260][ T4858] erofs: (device loop3): mounted with root inode @ nid 36. [ 117.433758][ T4315] usb 5-1: Using ep0 maxpacket: 32 [ 117.544407][ T4315] usb 5-1: unable to get BOS descriptor or descriptor too short [ 117.577420][ T4315] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 117.613419][ T4315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.621829][ T4315] usb 5-1: Product: syz [ 117.635456][ T4315] usb 5-1: Manufacturer: syz [ 117.653850][ T4315] usb 5-1: SerialNumber: syz [ 118.059139][ T4316] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 118.363647][ T4316] usb 1-1: Using ep0 maxpacket: 16 [ 118.392226][ T4316] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 118.415252][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 118.531119][ T4316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.619420][ T4316] usb 1-1: Product: syz [ 118.644093][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 118.658683][ T27] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.664386][ T4315] usb 5-1: unit 0 not found! [ 118.696282][ T4316] usb 1-1: Manufacturer: syz [ 118.700973][ T4316] usb 1-1: SerialNumber: syz [ 118.713741][ T27] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 118.763209][ T27] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 118.837134][ T27] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.873680][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.885931][ T27] usb 4-1: Product: syz [ 118.890193][ T27] usb 4-1: Manufacturer: syz [ 118.899363][ T4315] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 118.913933][ T27] usb 4-1: SerialNumber: syz [ 118.955294][ T4315] usb 5-1: unit 0 not found! [ 118.983581][ T4315] snd-usb-audio: probe of 5-1:1.1 failed with error -22 [ 119.023609][ T4315] usb 5-1: unit 0 not found! [ 119.196433][ T4315] snd-usb-audio: probe of 5-1:1.2 failed with error -22 [ 119.208807][ T4315] usb 5-1: USB disconnect, device number 2 [ 119.227830][ T4729] udevd[4729]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.522608][ T4876] loop1: detected capacity change from 0 to 2048 [ 119.597539][ T4876] loop1: p3 < > p4 < > [ 119.603150][ T4876] loop1: partition table partially beyond EOD, truncated [ 119.633769][ T4876] loop1: p3 start 4284289 is beyond EOD, truncated [ 119.681544][ T3637] loop1: p3 < > p4 < > [ 119.687530][ T3637] loop1: partition table partially beyond EOD, truncated [ 119.696946][ T3637] loop1: p3 start 4284289 is beyond EOD, truncated [ 119.948415][ T4729] udevd[4729]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 119.975274][ T4882] loop1: detected capacity change from 0 to 128 [ 120.013421][ T4882] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 120.032686][ T4882] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 120.289206][ T4888] loop4: detected capacity change from 0 to 512 [ 120.344555][ T4888] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 120.512830][ T4888] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 120.521650][ T4888] System zones: 1-12 [ 120.638147][ T4888] EXT4-fs (loop4): 1 truncate cleaned up [ 120.644146][ T4888] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 120.741229][ T4316] usb 1-1: MIDIStreaming interface descriptor not found [ 120.918311][ T4885] tap0: tun_chr_ioctl cmd 21731 [ 121.549078][ T27] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 121.574553][ T27] cdc_ncm 4-1:1.0: bind() failure [ 121.655677][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 121.688126][ T4316] usb 1-1: USB disconnect, device number 4 [ 121.713213][ T27] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 121.758913][ T27] cdc_ncm 4-1:1.1: bind() failure [ 121.803941][ T27] usb 4-1: USB disconnect, device number 2 [ 121.966667][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 122.072473][ T4730] udevd[4730]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.102203][ T4903] loop0: detected capacity change from 0 to 256 [ 122.201879][ T4772] Set syz1 is full, maxelem 65536 reached [ 122.404616][ T4912] loop2: detected capacity change from 0 to 128 [ 122.470507][ T4912] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 122.524607][ T4912] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 123.565883][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 126.467637][ T4939] loop2: detected capacity change from 0 to 256 [ 126.543467][ C0] sched: RT throttling activated [ 126.593374][ T4939] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf3da6b1f, utbl_chksum : 0xe619d30d) [ 127.079590][ T4944] loop4: detected capacity change from 0 to 128 [ 127.092290][ T4948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.131'. [ 127.202682][ T4944] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 127.371434][ T4944] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 128.558739][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 128.715714][ T4966] loop0: detected capacity change from 0 to 512 [ 128.788196][ T4966] EXT4-fs (loop0): 1 truncate cleaned up [ 128.807784][ T4966] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 129.389458][ T4986] loop2: detected capacity change from 0 to 256 [ 129.531976][ T4991] loop1: detected capacity change from 0 to 16 [ 129.555864][ T4991] erofs: (device loop1): mounted with root inode @ nid 36. [ 130.257176][ T4966] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.0.137: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 130.408972][ T4997] loop3: detected capacity change from 0 to 128 [ 130.453528][ T4999] loop1: detected capacity change from 0 to 128 [ 130.509694][ T4997] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 130.553241][ T4997] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 130.873854][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 131.006792][ T5004] loop3: detected capacity change from 0 to 128 [ 131.180090][ T5004] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 131.245680][ T5004] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 131.511316][ T4951] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 132.850676][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 132.935876][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 133.161322][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.168016][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.924033][ T5018] loop3: detected capacity change from 0 to 40427 [ 133.983231][ T5018] F2FS-fs (loop3): Invalid log blocks per segment (83886089) [ 134.004222][ T5018] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 134.065776][ T5018] F2FS-fs (loop3): invalid crc value [ 134.101982][ T5035] loop1: detected capacity change from 0 to 16 [ 134.115282][ T5035] erofs: (device loop1): mounted with root inode @ nid 36. [ 134.838257][ T5038] loop0: detected capacity change from 0 to 16 [ 134.883762][ T5038] erofs: (device loop0): mounted with root inode @ nid 36. [ 134.929656][ T5018] F2FS-fs (loop3): Found nat_bits in checkpoint [ 134.997450][ T5038] syz.0.157: attempt to access beyond end of device [ 134.997450][ T5038] loop0: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 135.012256][ T5038] syz.0.157: attempt to access beyond end of device [ 135.012256][ T5038] loop0: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 135.054787][ T5041] loop1: detected capacity change from 0 to 256 [ 135.159885][ T5041] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xdbae3f17, utbl_chksum : 0xe619d30d) [ 135.186534][ T5018] F2FS-fs (loop3): Start checkpoint disabled! [ 135.472347][ T5018] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 135.494067][ T5018] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 135.620080][ T5048] loop0: detected capacity change from 0 to 512 [ 135.725083][ T5048] EXT4-fs (loop0): Test dummy encryption mode enabled [ 135.732239][ T5048] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 135.900502][ T5048] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.160: bad orphan inode 131083 [ 135.916410][ T5048] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 136.364726][ T5052] loop2: detected capacity change from 0 to 128 [ 136.389855][ T5018] process 'syz.3.151' launched './file0' with NULL argv: empty string added [ 136.423114][ T5018] Invalid argument reading file caps for ./file0 [ 136.432888][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 136.517965][ T5052] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 136.585336][ T5052] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 136.992986][ T4333] kworker/u4:7: attempt to access beyond end of device [ 136.992986][ T4333] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 137.512961][ T5064] loop0: detected capacity change from 0 to 256 [ 137.553119][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 137.564639][ T5064] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 137.576729][ T5064] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 137.665148][ T5064] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 137.826578][ T26] audit: type=1804 audit(1777112297.182:3): pid=5063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.166" name="/newroot/37/file0/bus" dev="loop0" ino=1048613 res=1 errno=0 [ 137.852399][ T5070] xt_hashlimit: size too large, truncated to 1048576 [ 137.972526][ T5064] exFAT-fs (loop0): hint_cluster is invalid (17) [ 137.997054][ T5064] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff) [ 137.997144][ T5064] exFAT-fs (loop0): Filesystem has been set read-only [ 138.525956][ T5082] loop1: detected capacity change from 0 to 16 [ 138.562465][ T5082] erofs: (device loop1): mounted with root inode @ nid 36. [ 140.646304][ T5095] netlink: 830 bytes leftover after parsing attributes in process `syz.3.172'. [ 141.099977][ T5100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.174'. [ 141.742702][ T5103] loop3: detected capacity change from 0 to 16 [ 141.789313][ T5103] erofs: (device loop3): mounted with root inode @ nid 36. [ 141.886867][ T5103] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 141.980068][ T5107] capability: warning: `syz.0.177' uses deprecated v2 capabilities in a way that may be insecure [ 142.263660][ T4288] Bluetooth: hci5: command 0x1003 tx timeout [ 142.271419][ T4284] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 142.305436][ T5092] syz.1.171 (5092) used greatest stack depth: 17680 bytes left [ 142.781047][ T5122] loop0: detected capacity change from 0 to 16 [ 142.797338][ T5122] erofs: (device loop0): mounted with root inode @ nid 36. [ 143.440825][ T4989] Set syz1 is full, maxelem 65536 reached [ 144.190862][ T5134] loop3: detected capacity change from 0 to 128 [ 144.331882][ T5134] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 144.391486][ T5134] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 144.479529][ T26] audit: type=1800 audit(1777112303.317:4): pid=5134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.183" name="file1" dev="loop3" ino=1048614 res=0 errno=0 [ 145.286507][ T5117] loop1: detected capacity change from 0 to 40427 [ 145.405151][ T5117] F2FS-fs (loop1): invalid crc value [ 145.485020][ T5117] F2FS-fs (loop1): Found nat_bits in checkpoint [ 145.852496][ T5117] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 145.932468][ T5117] F2FS-fs (loop1): Start checkpoint disabled! [ 145.992287][ T5117] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 146.016281][ T5136] ieee802154 phy0 wpan0: encryption failed: -22 [ 146.037468][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 146.162356][ T5136] loop4: detected capacity change from 0 to 256 [ 146.283294][ T5133] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 146.324071][ T4325] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 146.529886][ T5136] FAT-fs (loop4): Directory bread(block 64) failed [ 146.585060][ T5136] FAT-fs (loop4): Directory bread(block 65) failed [ 146.653628][ T5136] FAT-fs (loop4): Directory bread(block 66) failed [ 146.716507][ T5136] FAT-fs (loop4): Directory bread(block 67) failed [ 146.812269][ T5136] FAT-fs (loop4): Directory bread(block 68) failed [ 146.844929][ T5136] FAT-fs (loop4): Directory bread(block 69) failed [ 146.918839][ T5136] FAT-fs (loop4): Directory bread(block 70) failed [ 146.948855][ T5136] FAT-fs (loop4): Directory bread(block 71) failed [ 146.955601][ T5136] FAT-fs (loop4): Directory bread(block 72) failed [ 147.031830][ T5136] FAT-fs (loop4): Directory bread(block 73) failed [ 147.212270][ T5136] FAT-fs (loop4): Filesystem has been set read-only [ 147.251122][ T5136] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 147.664488][ T5163] loop1: detected capacity change from 0 to 128 [ 147.791914][ T5163] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 147.901626][ T5163] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 148.438295][ T5155] loop2: detected capacity change from 0 to 40427 [ 148.719193][ T5155] F2FS-fs (loop2): invalid crc value [ 148.846354][ T5155] F2FS-fs (loop2): Found nat_bits in checkpoint [ 149.016692][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 149.101010][ T5155] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 149.469334][ T5186] loop4: detected capacity change from 0 to 16 [ 149.481904][ T5186] erofs: (device loop4): mounted with root inode @ nid 36. [ 150.731693][ T4267] syz-executor: attempt to access beyond end of device [ 150.731693][ T4267] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 151.028256][ T5198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'. [ 151.090322][ T5202] overlayfs: './file0' not a directory [ 153.204639][ T5206] loop1: detected capacity change from 0 to 40427 [ 153.237173][ T5206] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(514) root(3) [ 153.245170][ T5206] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 153.259305][ T5206] F2FS-fs (loop1): invalid crc value [ 153.530439][ T5206] F2FS-fs (loop1): Mismatch valid blocks 4 vs. 18 [ 153.541815][ T5206] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 154.707137][ T5216] loop2: detected capacity change from 0 to 128 [ 154.778944][ T5216] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 154.845794][ T5216] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 155.227340][ T22] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 155.574251][ T22] usb 2-1: Using ep0 maxpacket: 32 [ 155.695292][ T22] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.755337][ T22] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.811629][ T22] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 155.922459][ T22] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 155.952851][ T22] usb 2-1: Product: syz [ 155.974695][ T22] usb 2-1: Manufacturer: syz [ 155.994090][ T22] hub 2-1:4.0: USB hub found [ 156.025822][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 156.214673][ T22] hub 2-1:4.0: 2 ports detected [ 156.440806][ T5227] loop2: detected capacity change from 0 to 4096 [ 156.448185][ T5227] EXT4-fs: Ignoring removed bh option [ 156.843975][ T5227] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 157.171824][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 157.280258][ T5214] loop4: detected capacity change from 0 to 40427 [ 157.443388][ T5214] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 157.460821][ T5233] Illegal XDP return value 463175580 on prog (id 8) dev syz_tun, expect packet loss! [ 157.544451][ T5214] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 157.698254][ T5236] xt_TCPMSS: Only works on TCP SYN packets [ 157.752366][ T22] hub 2-1:4.0: activate --> -90 [ 157.989787][ T22] hub 2-1:4.0: hub_ext_port_status failed (err = -71) [ 157.998498][ T27] usb 2-1: USB disconnect, device number 3 [ 158.929583][ T5214] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-12) [ 160.467370][ T5259] loop2: detected capacity change from 0 to 128 [ 160.510178][ T5259] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 160.567544][ T5259] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 160.807404][ T5266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.213'. [ 161.675220][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 163.075136][ T5272] device bridge1 entered promiscuous mode [ 163.258046][ T5283] loop0: detected capacity change from 0 to 512 [ 163.287766][ T5285] netlink: 'syz.2.219': attribute type 4 has an invalid length. [ 163.305340][ T5283] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.218: missing EA_INODE flag [ 163.335304][ T4284] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 163.338306][ T5283] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.218: error while reading EA inode 12 err=-117 [ 163.363926][ T4438] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 163.424199][ T5283] EXT4-fs (loop0): 1 orphan inode deleted [ 163.484710][ T5283] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 163.576644][ T4438] usb 2-1: Using ep0 maxpacket: 32 [ 163.586405][ T4438] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 163.616406][ T4438] usb 2-1: config 0 has no interface number 0 [ 163.792023][ T4438] usb 2-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 163.806187][ T4438] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 163.815384][ T4438] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.824047][ T4438] usb 2-1: Product: syz [ 163.828296][ T4438] usb 2-1: Manufacturer: syz [ 163.832971][ T4438] usb 2-1: SerialNumber: syz [ 163.840481][ T4438] usb 2-1: config 0 descriptor?? [ 163.849399][ T4438] smsc95xx v2.0.0 [ 163.853146][ T4438] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 163.863447][ T4438] smsc95xx: probe of 2-1:0.67 failed with error -22 [ 164.780895][ T5195] Set syz1 is full, maxelem 65536 reached [ 164.801809][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 164.852685][ T7] usb 2-1: USB disconnect, device number 4 [ 164.860688][ T5301] netlink: 'syz.4.224': attribute type 4 has an invalid length. [ 164.982347][ T5304] netlink: 830 bytes leftover after parsing attributes in process `syz.0.223'. [ 167.593826][ T5337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.235'. [ 168.713104][ T5348] netlink: 830 bytes leftover after parsing attributes in process `syz.2.237'. [ 169.368655][ T5361] loop4: detected capacity change from 0 to 512 [ 169.413744][ T5361] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 169.491246][ T5365] netlink: 'syz.3.243': attribute type 1 has an invalid length. [ 169.864952][ T5361] EXT4-fs (loop4): failed to open journal device unknown-block(0,3) -6 [ 172.151399][ T5387] loop4: detected capacity change from 0 to 128 [ 172.158753][ T5387] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 172.171549][ T5387] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 172.191370][ T26] audit: type=1326 audit(1777112328.882:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752c19cdd9 code=0x7ffc0000 [ 172.348651][ T5389] loop0: detected capacity change from 0 to 512 [ 172.418302][ T26] audit: type=1326 audit(1777112328.882:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752c19cdd9 code=0x7ffc0000 [ 172.449579][ T5389] EXT4-fs: Ignoring removed bh option [ 172.484945][ T26] audit: type=1326 audit(1777112328.882:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f752c19cdd9 code=0x7ffc0000 [ 172.534989][ T5389] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 172.565374][ T5389] EXT4-fs (loop0): 1 truncate cleaned up [ 172.598186][ T26] audit: type=1326 audit(1777112328.882:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752c19cdd9 code=0x7ffc0000 [ 172.628130][ T5389] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 172.767440][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 172.776454][ T26] audit: type=1326 audit(1777112328.882:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752c19cdd9 code=0x7ffc0000 [ 172.893879][ T26] audit: type=1326 audit(1777112328.882:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f752c19cdd9 code=0x7ffc0000 [ 172.952867][ T5408] loop3: detected capacity change from 0 to 256 [ 172.984281][ T26] audit: type=1326 audit(1777112328.882:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752c19cdd9 code=0x7ffc0000 [ 173.045800][ T5408] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 173.099847][ T26] audit: type=1326 audit(1777112328.882:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752c19cdd9 code=0x7ffc0000 [ 173.188203][ T26] audit: type=1326 audit(1777112328.882:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f752c15d60e code=0x7ffc0000 [ 173.285551][ T26] audit: type=1326 audit(1777112328.882:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752c19cdd9 code=0x7ffc0000 [ 173.345847][ T5417] loop2: detected capacity change from 0 to 16 [ 173.410627][ T5417] erofs: (device loop2): mounted with root inode @ nid 36. [ 173.630747][ T5417] syz.2.258: attempt to access beyond end of device [ 173.630747][ T5417] loop2: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 173.722390][ T5417] syz.2.258: attempt to access beyond end of device [ 173.722390][ T5417] loop2: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 174.573165][ T5407] kvm: pic: non byte write [ 175.037819][ T5415] loop4: detected capacity change from 0 to 40427 [ 175.374875][ T5435] loop0: detected capacity change from 0 to 40427 [ 175.448436][ T5435] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 175.456423][ T5435] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 175.485249][ T5435] F2FS-fs (loop0): invalid crc value [ 175.746013][ T5435] F2FS-fs (loop0): Found nat_bits in checkpoint [ 175.921980][ T5435] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 175.929193][ T5435] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 176.297239][ T5415] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 176.397476][ T5415] F2FS-fs (loop4): invalid crc value [ 176.410538][ T5415] F2FS-fs (loop4): Found nat_bits in checkpoint [ 177.680379][ T56] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 177.733492][ T56] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 177.805239][ T4337] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 178.011163][ T4337] usb 4-1: Using ep0 maxpacket: 32 [ 178.019683][ T4337] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 178.054212][ T4337] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 178.093304][ T4337] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 178.132960][ T4337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.154222][ T4337] usb 4-1: Product: syz [ 178.158456][ T4337] usb 4-1: Manufacturer: syz [ 178.186233][ T4337] usb 4-1: SerialNumber: syz [ 178.481676][ T5464] loop4: detected capacity change from 0 to 512 [ 178.508845][ T5464] EXT4-fs (loop4): Test dummy encryption mode enabled [ 178.515841][ T5464] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 178.593010][ T5464] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.270: bad orphan inode 131083 [ 178.607542][ T5464] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 179.210685][ T4337] usb 4-1: Unsupported UAC3 BADD profile [ 179.219134][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 179.243894][ T4337] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 179.276659][ T4337] usb 4-1: USB disconnect, device number 3 [ 179.309968][ T4734] udevd[4734]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.487955][ T5475] loop4: detected capacity change from 0 to 1024 [ 179.555639][ T5475] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 179.584692][ T5475] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (65323!=35945) [ 179.596961][ T5475] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 179.607377][ T5475] EXT4-fs (loop4): orphan cleanup on readonly fs [ 179.614645][ T5475] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #3: comm syz.4.271: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 2, max 1(4), depth 0(0) [ 179.638488][ T5475] EXT4-fs (loop4): Remounting filesystem read-only [ 179.645195][ T5475] EXT4-fs error (device loop4): ext4_quota_enable:7052: comm syz.4.271: Bad quota inode: 3, type: 0 [ 179.677773][ T5480] loop1: detected capacity change from 0 to 128 [ 179.689117][ T5479] loop0: detected capacity change from 0 to 1024 [ 179.762314][ T5479] journal_path: Lookup failure for './file0' [ 179.798509][ T5475] EXT4-fs (loop4): Remounting filesystem read-only [ 179.810595][ T5479] EXT4-fs: error: could not find journal device path [ 179.839321][ T5475] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 179.897202][ T5475] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 179.904045][ T5475] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 180.096839][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 180.144898][ T5480] syz.1.273: attempt to access beyond end of device [ 180.144898][ T5480] loop1: rw=0, sector=121, nr_sectors = 920 limit=128 [ 181.744021][ T5497] loop4: detected capacity change from 0 to 512 [ 181.782374][ T5497] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.276: missing EA_INODE flag [ 181.891085][ T5497] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.276: error while reading EA inode 12 err=-117 [ 182.005396][ T5497] EXT4-fs (loop4): 1 orphan inode deleted [ 182.018310][ T5497] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 182.738244][ T5506] loop1: detected capacity change from 0 to 128 [ 183.963882][ T5514] loop2: detected capacity change from 0 to 128 [ 183.995730][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 184.026796][ T5506] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 184.050965][ T5506] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 184.104145][ T5514] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 184.133943][ T5514] ext4 filesystem being mounted at /54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 184.165854][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.250424][ T5520] loop4: detected capacity change from 0 to 256 [ 184.262525][ T5520] exfat: Deprecated parameter 'utf8' [ 184.274220][ T5520] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 185.085347][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 185.134729][ T5527] fuse: Bad value for 'fd' [ 185.143917][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 185.316842][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 185.324547][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 185.352830][ T5532] loop1: detected capacity change from 0 to 256 [ 185.368899][ T7] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 185.397614][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.429689][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 185.457077][ T7] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 185.485495][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.502889][ T7] usb 4-1: Product: syz [ 185.525554][ T7] usb 4-1: Manufacturer: syz [ 185.552924][ T7] usb 4-1: SerialNumber: syz [ 188.598523][ T7] usb 4-1: 0:2 : does not exist [ 188.646234][ T7] usb 4-1: USB disconnect, device number 4 [ 188.700212][ T5545] loop4: detected capacity change from 0 to 256 [ 188.732271][ T5545] exfat: Deprecated parameter 'utf8' [ 188.815634][ T5545] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf8a64500, utbl_chksum : 0xe619d30d) [ 188.927598][ T4734] udevd[4734]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.973738][ T5555] loop1: detected capacity change from 0 to 256 [ 189.041854][ T5555] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 189.093081][ T5555] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 189.143402][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 189.158077][ T5555] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 192.273558][ T5563] loop4: detected capacity change from 0 to 40427 [ 192.476026][ T5563] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 192.483927][ T5563] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 192.519309][ T5563] F2FS-fs (loop4): invalid crc value [ 192.524876][ T5563] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-12) [ 192.624613][ T5571] loop2: detected capacity change from 0 to 128 [ 192.663947][ T5571] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 192.717699][ T5567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.296'. [ 192.790662][ T5571] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 192.827335][ T5576] fuse: Bad value for 'fd' [ 192.887702][ T5567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.941351][ T5572] loop0: detected capacity change from 0 to 512 [ 193.364186][ T5572] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 193.654998][ T5583] loop1: detected capacity change from 0 to 256 [ 194.851465][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 194.891317][ T5567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.180349][ T5598] loop4: detected capacity change from 0 to 128 [ 196.580920][ T5598] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 196.789976][ T5598] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 197.135356][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 197.271144][ T5611] fuse: Bad value for 'fd' [ 197.403097][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 197.571185][ T5620] loop4: detected capacity change from 0 to 128 [ 197.629334][ T5620] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 197.646323][ T5620] ext4 filesystem being mounted at /65/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 198.828114][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 199.083872][ T5630] loop1: detected capacity change from 0 to 512 [ 199.095498][ T5630] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 199.118040][ T5630] EXT4-fs (loop1): 1 truncate cleaned up [ 199.123739][ T5630] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 199.138501][ T5632] loop2: detected capacity change from 0 to 512 [ 199.695356][ T5632] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 199.757167][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.763568][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.975420][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 200.031077][ T5632] EXT4-fs (loop2): orphan cleanup on readonly fs [ 200.068968][ T7] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 200.241127][ T5632] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3861: comm syz.2.315: Allocating blocks 41-42 which overlap fs metadata [ 200.757207][ T5632] __quota_error: 22 callbacks suppressed [ 200.757458][ T5632] Quota error (device loop2): write_blk: dquota write failed [ 200.780542][ T5632] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 200.792225][ T5645] overlayfs: overlapping lowerdir path [ 200.803753][ T5632] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.315: Failed to acquire dquot type 0 [ 200.827600][ T5632] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 200.864596][ T5632] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.315: corrupted inode contents [ 201.496554][ T5632] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #12: comm syz.2.315: mark_inode_dirty error [ 201.640383][ T5632] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.315: corrupted inode contents [ 201.654697][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 201.663363][ T5632] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #12: comm syz.2.315: mark_inode_dirty error [ 201.688415][ T7] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 201.715325][ T5632] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.315: corrupted inode contents [ 201.746290][ T7] usb 5-1: can't read configurations, error -71 [ 201.859926][ T5632] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 201.897204][ T5632] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.315: corrupted inode contents [ 201.927405][ T5632] EXT4-fs error (device loop2): ext4_truncate:4325: inode #12: comm syz.2.315: mark_inode_dirty error [ 202.006945][ T5632] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 202.159138][ T5632] EXT4-fs (loop2): 1 truncate cleaned up [ 202.180894][ T5632] EXT4-fs (loop2): pa ffff888073faa700: logic 1, phys. 41, len 23 [ 202.189097][ T5632] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4894: group 0, free 22, pa_free 23 [ 202.708036][ T5632] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 202.766997][ T5632] EXT4-fs (loop2): unmounting filesystem. [ 203.690043][ T5669] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 203.698333][ T5669] overlayfs: overlapping lowerdir path [ 204.781653][ T5676] loop3: detected capacity change from 0 to 128 [ 204.815806][ T5674] loop1: detected capacity change from 0 to 8192 [ 204.879010][ T5676] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 204.938954][ T5676] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 206.161644][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 208.146328][ T4287] Bluetooth: hci1: command 0x0406 tx timeout [ 208.152395][ T4287] Bluetooth: hci2: command 0x0406 tx timeout [ 208.158925][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 208.164983][ T4287] Bluetooth: hci0: command 0x0406 tx timeout [ 208.166858][ T4284] Bluetooth: hci4: command 0x0406 tx timeout [ 208.721215][ T5701] loop2: detected capacity change from 0 to 512 [ 208.721226][ T5703] loop1: detected capacity change from 0 to 128 [ 208.868964][ T5701] EXT4-fs (loop2): Test dummy encryption mode enabled [ 208.875887][ T5701] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 209.391777][ T5701] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.327: bad orphan inode 131083 [ 209.471959][ T5701] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 209.650945][ T5713] loop3: detected capacity change from 0 to 512 [ 209.683676][ T5713] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 209.695441][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 209.744620][ T5713] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.335: iget: bad i_size value: 38620345925642 [ 209.754206][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.770491][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.837867][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 209.846802][ T5713] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.335: couldn't read orphan inode 15 (err -117) [ 209.860506][ T5713] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 209.872070][ T5720] loop4: detected capacity change from 0 to 512 [ 209.942810][ T5720] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.336: missing EA_INODE flag [ 209.978536][ T5718] netlink: 830 bytes leftover after parsing attributes in process `syz.1.334'. [ 210.030890][ T5713] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.335: bg 0: block 5: invalid block bitmap [ 210.046256][ T5720] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.336: error while reading EA inode 12 err=-117 [ 210.086447][ T5713] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 420 with error 28 [ 210.129827][ T5720] EXT4-fs (loop4): 1 orphan inode deleted [ 210.135940][ T5713] EXT4-fs (loop3): This should not happen!! Data will be lost [ 210.135940][ T5713] [ 210.150397][ T5720] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 210.181315][ T5713] EXT4-fs (loop3): Total free blocks count 0 [ 210.192246][ T5713] EXT4-fs (loop3): Free/Dirty block details [ 210.203199][ T5713] EXT4-fs (loop3): free_blocks=0 [ 210.222979][ T5713] EXT4-fs (loop3): dirty_blocks=424 [ 210.246932][ T5713] EXT4-fs (loop3): Block reservation details [ 210.268774][ T5713] EXT4-fs (loop3): i_reserved_data_blocks=424 [ 210.277683][ T5725] loop2: detected capacity change from 0 to 512 [ 210.427635][ T5725] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 210.935865][ T5730] loop1: detected capacity change from 0 to 128 [ 210.952963][ T5725] EXT4-fs (loop2): orphan cleanup on readonly fs [ 211.011595][ T5725] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3861: comm syz.2.337: Allocating blocks 41-42 which overlap fs metadata [ 211.066542][ T5730] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 211.127816][ T5725] Quota error (device loop2): write_blk: dquota write failed [ 211.135612][ T5725] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 211.145580][ T5725] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.337: Failed to acquire dquot type 0 [ 211.154619][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 211.160936][ T5730] ext4 filesystem being mounted at /68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 211.208939][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 211.216292][ T5725] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 211.266040][ T5725] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.337: corrupted inode contents [ 211.346981][ T5725] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #12: comm syz.2.337: mark_inode_dirty error [ 211.377595][ T5725] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.337: corrupted inode contents [ 211.422459][ T5725] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #12: comm syz.2.337: mark_inode_dirty error [ 211.456926][ T5725] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.337: corrupted inode contents [ 211.523845][ T5725] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 211.591370][ T5725] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.337: corrupted inode contents [ 211.659072][ T5725] EXT4-fs error (device loop2): ext4_truncate:4325: inode #12: comm syz.2.337: mark_inode_dirty error [ 211.679253][ T5725] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 211.715447][ T5725] EXT4-fs (loop2): 1 truncate cleaned up [ 211.735044][ T5725] EXT4-fs (loop2): pa ffff888073faa380: logic 1, phys. 41, len 23 [ 211.743021][ T5725] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4894: group 0, free 22, pa_free 23 [ 211.786207][ T5725] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 211.796541][ T5725] EXT4-fs (loop2): unmounting filesystem. [ 211.951126][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 214.006416][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 214.059435][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.072797][ T5763] loop1: detected capacity change from 0 to 512 [ 214.124986][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.151921][ T5760] device bridge_slave_0 left promiscuous mode [ 214.195533][ T5763] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 214.219708][ T5763] ext4 filesystem being mounted at /71/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.230659][ T5760] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.286296][ T5760] device bridge_slave_1 left promiscuous mode [ 214.335365][ T5760] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.394545][ T5760] bond0: (slave bond_slave_0): Releasing backup interface [ 214.472472][ T5760] bond0: (slave bond_slave_1): Releasing backup interface [ 214.526156][ T4287] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 214.535901][ T4287] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 214.554750][ T5763] overlayfs: failed to resolve './file1/file0': -2 [ 214.561953][ T4287] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 214.571994][ T4287] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 214.583151][ T4287] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 214.615267][ T4287] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 214.682347][ T5760] team0: Port device team_slave_0 removed [ 214.719178][ T4271] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 214.789885][ T5760] team0: Port device team_slave_1 removed [ 214.796529][ T5760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.808341][ T4271] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 214.832392][ T4271] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz-executor: Failed to acquire dquot type 0 [ 214.864430][ T5760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.898170][ T5760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.905662][ T5760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.130138][ T5762] netlink: 830 bytes leftover after parsing attributes in process `syz.3.348'. [ 215.365769][ T5775] loop3: detected capacity change from 0 to 128 [ 215.735596][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 215.899022][ T5775] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 216.195318][ T5775] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 216.867773][ T4281] Bluetooth: hci5: command 0x0409 tx timeout [ 216.877825][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 216.887447][ T4699] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.958115][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 217.012289][ T4699] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.276712][ T5792] loop2: detected capacity change from 0 to 4096 [ 218.664760][ T5792] EXT4-fs: Ignoring removed bh option [ 219.031682][ T5792] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 219.092125][ T4281] Bluetooth: hci5: command 0x041b tx timeout [ 219.329817][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 219.336173][ T4699] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.124662][ T4699] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.196829][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.215695][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.238755][ T5769] device bridge_slave_0 entered promiscuous mode [ 220.272496][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.280209][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.294497][ T5769] device bridge_slave_1 entered promiscuous mode [ 220.312518][ T4284] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 220.322288][ T4284] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 220.330483][ T4284] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 220.339057][ T4284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 220.346943][ T4284] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 220.354219][ T4284] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 220.392681][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.411405][ T5811] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 220.421050][ T5811] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.428928][ T5811] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.438075][ T5811] device bridge_slave_0 left promiscuous mode [ 220.444401][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.455043][ T5811] device bridge_slave_1 left promiscuous mode [ 220.461731][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.474420][ T5811] bond0: (slave bond_slave_0): Releasing backup interface [ 220.488103][ T5811] bond0: (slave bond_slave_1): Releasing backup interface [ 220.518412][ T5811] team0: Port device team_slave_0 removed [ 220.543540][ T5811] team0: Port device team_slave_1 removed [ 220.550310][ T5811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.559559][ T5811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.575626][ T5811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.583226][ T5811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.602369][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.643290][ T5812] netlink: 830 bytes leftover after parsing attributes in process `syz.4.361'. [ 220.753623][ T5769] team0: Port device team_slave_0 added [ 220.779604][ T5769] team0: Port device team_slave_1 added [ 220.826310][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.833416][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.866103][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.878794][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.892954][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.928634][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.053228][ T4699] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.346589][ T4281] Bluetooth: hci5: command 0x040f tx timeout [ 221.780320][ T4284] Bluetooth: hci3: command 0x1003 tx timeout [ 221.788272][ T4287] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 221.967521][ T5769] device hsr_slave_0 entered promiscuous mode [ 222.023626][ T5769] device hsr_slave_1 entered promiscuous mode [ 222.026781][ T5827] loop4: detected capacity change from 0 to 128 [ 222.048515][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.048576][ T5769] Cannot create hsr debugfs directory [ 222.060912][ T5827] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 222.069132][ T5827] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 222.131590][ T4699] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.479503][ T4699] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.490464][ T5833] loop2: detected capacity change from 0 to 256 [ 222.512769][ T5833] exfat: Deprecated parameter 'namecase' [ 222.525150][ T5833] exfat: Deprecated parameter 'namecase' [ 222.531587][ T5833] exfat: Deprecated parameter 'namecase' [ 222.557988][ T5833] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 222.570421][ T4287] Bluetooth: hci4: command 0x0409 tx timeout [ 222.601095][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 222.778405][ T4699] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.404204][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 223.578498][ T5847] loop2: detected capacity change from 0 to 512 [ 223.601253][ T4287] Bluetooth: hci5: command 0x0419 tx timeout [ 223.671992][ T5847] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 223.705083][ T5847] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 223.750684][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.767464][ T5847] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #2: comm syz.2.369: corrupted inode contents [ 223.786046][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.795117][ T5808] device bridge_slave_0 entered promiscuous mode [ 223.801664][ T5847] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #2: comm syz.2.369: mark_inode_dirty error [ 223.816658][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.824141][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.832274][ T5847] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #2: comm syz.2.369: corrupted inode contents [ 223.845339][ T5808] device bridge_slave_1 entered promiscuous mode [ 223.859839][ T5847] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.369: mark_inode_dirty error [ 223.935091][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.964404][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.982603][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 224.143136][ T5808] team0: Port device team_slave_0 added [ 224.193219][ T5808] team0: Port device team_slave_1 added [ 224.228248][ T5861] loop3: detected capacity change from 0 to 512 [ 224.297038][ T5769] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 224.304794][ T5861] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 224.324597][ T5861] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 224.551452][ T5861] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 224.816168][ T4284] Bluetooth: hci4: command 0x041b tx timeout [ 224.957066][ T5861] System zones: 1-12 [ 225.041963][ T5861] EXT4-fs (loop3): orphan cleanup on readonly fs [ 225.084281][ T4448] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 225.098466][ T5861] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.372: invalid indirect mapped block 2 (level 2) [ 225.269946][ T5861] EXT4-fs (loop3): Remounting filesystem read-only [ 225.279042][ T5861] EXT4-fs (loop3): 1 truncate cleaned up [ 225.309476][ T5861] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 225.344145][ T5769] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 225.400569][ T5861] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #2: block 5: comm syz.3.372: lblock 0 mapped to illegal pblock 5 (length 1) [ 225.414604][ T5769] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 225.426231][ T5769] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 225.437949][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.446328][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.483263][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.494823][ T5861] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.372: error -117 reading directory block [ 225.518976][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.530111][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.565573][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.577356][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 225.806015][ T5883] loop2: detected capacity change from 0 to 512 [ 225.828598][ T5808] device hsr_slave_0 entered promiscuous mode [ 225.837251][ T5883] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 225.848473][ T5808] device hsr_slave_1 entered promiscuous mode [ 225.872308][ T5808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.882251][ T5883] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.377: bad orphan inode 131083 [ 225.903050][ T5808] Cannot create hsr debugfs directory [ 225.919596][ T5883] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 226.079152][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 226.102552][ T14] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 226.216564][ T5890] loop2: detected capacity change from 0 to 512 [ 226.291775][ T5890] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 226.310673][ T5890] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 226.331191][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.342179][ C1] vkms_vblank_simulate: vblank timer overrun [ 226.448130][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.489527][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.506461][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 226.514994][ T14] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 226.532092][ T14] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 226.542683][ T14] usb 4-1: Manufacturer: syz [ 226.556324][ T14] usb 4-1: config 0 descriptor?? [ 226.672259][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.707307][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 226.725411][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 226.812615][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 226.823881][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.837921][ T4412] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.845193][ T4412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.896009][ T4287] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 226.906488][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 226.922007][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 226.931445][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 226.940235][ T4412] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.948008][ T4412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.065536][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 227.070042][ T4284] Bluetooth: hci4: command 0x040f tx timeout [ 227.082365][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 227.107750][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 227.156552][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 227.180159][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 227.208601][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 227.232149][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 227.258012][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 227.291100][ T26] audit: type=1326 audit(1777112379.725:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5906 comm="syz.4.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752c19cdd9 code=0x7ffc0000 [ 227.332510][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.351046][ T26] audit: type=1326 audit(1777112379.744:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5906 comm="syz.4.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f752c19cdd9 code=0x7ffc0000 [ 227.374051][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 227.395515][ T7] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 227.416210][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 227.427171][ T7] usb 3-1: SerialNumber: syz [ 227.437958][ T26] audit: type=1326 audit(1777112379.753:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5906 comm="syz.4.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752c19cdd9 code=0x7ffc0000 [ 227.479060][ T26] audit: type=1326 audit(1777112379.753:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5906 comm="syz.4.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f752c19cdd9 code=0x7ffc0000 [ 227.501799][ T26] audit: type=1326 audit(1777112379.753:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5906 comm="syz.4.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752c19cdd9 code=0x7ffc0000 [ 227.576556][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 227.597855][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 227.643549][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 227.652559][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 227.666812][ T5769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 227.686064][ T14] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #100: -71 [ 227.711636][ T7] usb 3-1: 0:2 : does not exist [ 227.727375][ T14] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 227.761398][ T7] usb 3-1: USB disconnect, device number 2 [ 227.768575][ T14] uclogic 0003:256C:006D.0002: failed probing pen v1 parameters: -71 [ 227.795035][ T14] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 227.819363][ T14] uclogic: probe of 0003:256C:006D.0002 failed with error -71 [ 227.834761][ T14] usb 4-1: USB disconnect, device number 5 [ 227.894364][ T5808] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 227.927186][ T5808] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 227.986986][ T5808] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 228.122814][ T5808] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 228.456286][ T4699] device hsr_slave_0 left promiscuous mode [ 228.481804][ T4699] device hsr_slave_1 left promiscuous mode [ 228.502249][ T4699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.526590][ T4699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.550215][ T4699] device bridge_slave_1 left promiscuous mode [ 228.599993][ T4699] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.640633][ T4699] device bridge_slave_0 left promiscuous mode [ 228.662287][ T4699] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.679333][ T5931] fuse: Bad value for 'fd' [ 228.689003][ T5929] loop3: detected capacity change from 0 to 16 [ 228.718784][ T4699] device hsr_slave_0 left promiscuous mode [ 228.747192][ T5929] erofs: (device loop3): mounted with root inode @ nid 36. [ 228.774892][ T4699] device hsr_slave_1 left promiscuous mode [ 228.940218][ T4699] device veth1_macvtap left promiscuous mode [ 228.961212][ T4699] device veth0_macvtap left promiscuous mode [ 229.046909][ T4699] device veth1_macvtap left promiscuous mode [ 229.104416][ T4699] device veth0_macvtap left promiscuous mode [ 229.124933][ T4699] device veth1_vlan left promiscuous mode [ 229.147443][ T4699] device veth0_vlan left promiscuous mode [ 229.345418][ T4284] Bluetooth: hci4: command 0x0419 tx timeout [ 229.595388][ T4696] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 229.745577][ T4696] Bluetooth: hci3: Frame reassembly failed (-84) [ 231.445068][ T4699] team0 (unregistering): Port device team_slave_1 removed [ 231.501676][ T4699] team0 (unregistering): Port device team_slave_0 removed [ 231.555242][ T4699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.617768][ T4699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.784559][ T4284] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 232.696482][ T5963] loop2: detected capacity change from 0 to 512 [ 232.766946][ T5963] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.391: missing EA_INODE flag [ 232.780763][ T5963] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.391: error while reading EA inode 12 err=-117 [ 232.804360][ T5963] EXT4-fs (loop2): 1 orphan inode deleted [ 232.810226][ T5963] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 233.103846][ T4699] bond0 (unregistering): Released all slaves [ 233.712364][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 235.215664][ T5973] loop2: detected capacity change from 0 to 40427 [ 235.231818][ T5973] F2FS-fs (loop2): invalid crc value [ 235.239054][ T5973] F2FS-fs (loop2): Found nat_bits in checkpoint [ 235.291077][ T5973] F2FS-fs (loop2): Start checkpoint disabled! [ 235.306449][ T5973] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 235.482307][ T4412] kworker/u4:10: attempt to access beyond end of device [ 235.482307][ T4412] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 236.019077][ T4699] bond0 (unregistering): Released all slaves [ 236.888851][ T5981] fuse: Bad value for 'fd' [ 236.963507][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.971006][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 236.980215][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 237.000133][ T5950] netlink: 24 bytes leftover after parsing attributes in process `syz.4.389'. [ 237.009287][ T5951] netlink: 24 bytes leftover after parsing attributes in process `syz.4.389'. [ 237.019687][ T5952] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 237.029414][ T5952] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 237.039029][ T5952] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 237.130692][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.257496][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.283449][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.345071][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.397099][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.432276][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.471568][ T4448] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.478783][ T4448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.566182][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 237.603306][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 237.661094][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.719122][ T4448] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.726375][ T4448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.815747][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 238.020239][ T4503] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 238.213529][ T4503] Bluetooth: hci3: Frame reassembly failed (-84) [ 238.507412][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 238.581511][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 238.624637][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 238.655709][ T5808] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 238.766872][ T5808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.780576][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 238.789779][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 238.799598][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 238.808743][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 238.828616][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 238.852172][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 238.895280][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 238.921188][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 238.932487][ T6011] loop2: detected capacity change from 0 to 256 [ 239.325721][ T5987] loop3: detected capacity change from 0 to 40427 [ 239.380848][ T5987] F2FS-fs (loop3): invalid crc value [ 239.432685][ T5987] F2FS-fs (loop3): Found nat_bits in checkpoint [ 239.483066][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 239.515457][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 239.580506][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 239.632415][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 239.634467][ T5987] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 239.675225][ T5987] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 239.678816][ T5769] device veth0_vlan entered promiscuous mode [ 239.713587][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 239.732797][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 239.791380][ T5769] device veth1_vlan entered promiscuous mode [ 239.813536][ T26] audit: type=1800 audit(1777112391.276:42): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.398" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 239.941611][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 239.958242][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 239.999297][ T4268] syz-executor: attempt to access beyond end of device [ 239.999297][ T4268] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 240.014638][ T5769] device veth0_macvtap entered promiscuous mode [ 240.037364][ T5769] device veth1_macvtap entered promiscuous mode [ 240.116473][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.154945][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.165452][ T4284] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 240.311802][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.336389][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 240.345634][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 240.359772][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 240.382525][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 240.416724][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 240.445522][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 240.531244][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.672867][ T6037] loop4: detected capacity change from 0 to 512 [ 240.750690][ T6037] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 240.943957][ T6037] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 240.952367][ T6037] System zones: 1-12 [ 241.017453][ T6037] EXT4-fs (loop4): 1 truncate cleaned up [ 241.023430][ T6037] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 241.149684][ T6037] tap1: tun_chr_ioctl cmd 21731 [ 241.408274][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.518872][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.582890][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.626636][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 241.668195][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 241.714153][ T5769] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.722948][ T5769] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.741624][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 241.767253][ T5769] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.776010][ T5769] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.022715][ T4503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.043559][ T4503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.099326][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 242.199981][ T4503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.473071][ T4503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.715356][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 243.169581][ T6057] fuse: Bad value for 'fd' [ 244.721959][ T6066] loop3: detected capacity change from 0 to 4096 [ 244.753450][ T6066] EXT4-fs: inline encryption not supported [ 244.769938][ T6066] EXT4-fs: Ignoring removed bh option [ 244.825215][ T6066] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 244.876301][ T6066] EXT4-fs (loop3): Test dummy encryption mode enabled [ 244.938171][ T6066] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 244.992600][ T6066] System zones: 0-5 [ 245.092245][ T6066] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 245.333809][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 245.344448][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 245.476511][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 245.507363][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 245.553499][ T5808] device veth0_vlan entered promiscuous mode [ 245.561950][ T6080] device syzkaller0 entered promiscuous mode [ 245.729217][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 245.748480][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 245.795688][ T5808] device veth1_vlan entered promiscuous mode [ 245.902623][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 245.928946][ T6068] loop2: detected capacity change from 0 to 40427 [ 245.954498][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 245.964876][ T6068] F2FS-fs (loop2): invalid crc value [ 245.982213][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 246.000800][ T6068] F2FS-fs (loop2): Found nat_bits in checkpoint [ 246.007359][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 246.101310][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 246.140193][ T6068] F2FS-fs (loop2): Start checkpoint disabled! [ 246.253519][ T5808] device veth0_macvtap entered promiscuous mode [ 246.266002][ T5808] device veth1_macvtap entered promiscuous mode [ 246.274284][ T6068] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 246.289731][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.300487][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.318114][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.491983][ T4701] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 246.653644][ T4701] Bluetooth: hci3: Frame reassembly failed (-84) [ 246.804635][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.005109][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.012799][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 247.059658][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 247.082787][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 247.138213][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 247.286115][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.333027][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.349431][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.426071][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.613275][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.153119][ T5808] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.194739][ T5808] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.264718][ T5808] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.280261][ T5808] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.291393][ T4701] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 248.318769][ T4701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 248.354506][ T4710] kworker/u4:31: attempt to access beyond end of device [ 248.354506][ T4710] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 248.410381][ T4710] kworker/u4:31: attempt to access beyond end of device [ 248.410381][ T4710] loop2: rw=2049, sector=41000, nr_sectors = 8 limit=40427 [ 248.660900][ T4284] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 249.001905][ T4710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.055385][ T4710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.228640][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 249.869017][ T4380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.885286][ T4380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.929053][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 250.466566][ T6130] loop6: detected capacity change from 0 to 512 [ 250.485742][ T6130] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 250.730136][ T6130] EXT4-fs (loop6): 1 truncate cleaned up [ 250.736092][ T6130] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 251.199516][ T6134] loop4: detected capacity change from 0 to 256 [ 251.320743][ T5808] EXT4-fs (loop6): unmounting filesystem. [ 251.338092][ T3653] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 251.583324][ T3653] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 251.616621][ T3653] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 251.683269][ T3653] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 251.757097][ T3653] usb 3-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 251.780782][ T3653] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.685224][ T3653] usb 3-1: config 0 descriptor?? [ 252.693143][ T6127] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 252.811444][ T6145] loop5: detected capacity change from 0 to 512 [ 252.902508][ T6145] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 253.008093][ T6145] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 253.131504][ T6155] device syzkaller0 entered promiscuous mode [ 253.168400][ T3653] wacom 0003:056A:0043.0003: unknown main item tag 0x7 [ 253.189816][ T3653] wacom 0003:056A:0043.0003: unknown main item tag 0x0 [ 253.213447][ T3653] wacom 0003:056A:0043.0003: unknown main item tag 0x0 [ 253.220483][ T3653] wacom 0003:056A:0043.0003: unknown main item tag 0x0 [ 253.232106][ T3653] wacom 0003:056A:0043.0003: unknown main item tag 0x0 [ 253.241516][ T3653] wacom 0003:056A:0043.0003: unknown main item tag 0x0 [ 253.270011][ T3653] wacom 0003:056A:0043.0003: unknown main item tag 0x0 [ 253.296185][ T3653] wacom 0003:056A:0043.0003: unknown main item tag 0x0 [ 253.317684][ T3653] wacom 0003:056A:0043.0003: unknown main item tag 0x0 [ 253.354810][ T3653] wacom 0003:056A:0043.0003: unknown main item tag 0x0 [ 253.374959][ T3653] wacom 0003:056A:0043.0003: unknown main item tag 0x0 [ 253.407514][ T3653] wacom 0003:056A:0043.0003: unknown main item tag 0x0 [ 253.428437][ T3653] wacom 0003:056A:0043.0003: unknown main item tag 0x0 [ 253.450445][ T3653] wacom 0003:056A:0043.0003: unknown main item tag 0x0 [ 253.470763][ T3653] wacom 0003:056A:0043.0003: unknown main item tag 0x0 [ 253.490029][ T3653] wacom 0003:056A:0043.0003: unknown main item tag 0x0 [ 253.504225][ T3653] wacom 0003:056A:0043.0003: unknown main item tag 0x0 [ 253.521190][ T3653] wacom 0003:056A:0043.0003: unknown main item tag 0x0 [ 253.537080][ T3653] wacom 0003:056A:0043.0003: unknown main item tag 0x0 [ 253.545703][ T3653] wacom 0003:056A:0043.0003: unknown main item tag 0x0 [ 253.560370][ T3653] wacom 0003:056A:0043.0003: unknown main item tag 0x0 [ 253.572286][ T3653] wacom 0003:056A:0043.0003: Unknown device_type for 'HID 056a:0043'. Assuming pen. [ 253.595007][ T3653] wacom 0003:056A:0043.0003: hidraw0: USB HID vff.ff Device [HID 056a:0043] on usb-dummy_hcd.2-1/input0 [ 253.616417][ T6164] device bridge_slave_0 left promiscuous mode [ 253.625682][ T3653] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0043.0003/input/input16 [ 253.638299][ T6164] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.703969][ T6165] loop6: detected capacity change from 0 to 512 [ 253.781134][ T3653] usb 3-1: USB disconnect, device number 3 [ 253.835230][ T6165] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 253.853284][ T6165] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.013029][ T5769] EXT4-fs (loop5): unmounting filesystem. [ 254.193364][ T6167] fido_id[6167]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 254.215598][ T5808] EXT4-fs (loop6): unmounting filesystem. [ 254.953582][ T4448] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 255.100500][ T4503] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 255.412817][ T6185] loop5: detected capacity change from 0 to 256 [ 255.792302][ T6185] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 256.898631][ T4287] Bluetooth: hci3: command 0x1003 tx timeout [ 256.906793][ T4284] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 257.843711][ T6214] device syzkaller0 entered promiscuous mode [ 258.949244][ T6232] loop2: detected capacity change from 0 to 256 [ 261.395008][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.439'. [ 262.086368][ T6237] loop5: detected capacity change from 0 to 40427 [ 262.132451][ T6237] F2FS-fs (loop5): invalid crc value [ 262.158721][ T6237] F2FS-fs (loop5): Found nat_bits in checkpoint [ 262.332739][ T6237] F2FS-fs (loop5): Start checkpoint disabled! [ 262.391443][ T6237] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 262.730156][ T27] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 262.837091][ T6286] loop2: detected capacity change from 0 to 512 [ 262.885373][ T6286] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 262.938210][ T27] usb 6-1: config 0 has no interfaces? [ 262.956177][ T27] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 262.965901][ T6286] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 262.979583][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.984126][ T6286] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 263.004020][ T27] usb 6-1: Product: syz [ 263.008912][ T27] usb 6-1: Manufacturer: syz [ 263.022690][ T27] usb 6-1: SerialNumber: syz [ 263.037574][ T27] usb 6-1: config 0 descriptor?? [ 263.274427][ T27] usb 6-1: USB disconnect, device number 2 [ 263.281758][ T4267] EXT4-fs error (device loop2): ext4_lookup:1858: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 263.312675][ T4267] EXT4-fs error (device loop2): ext4_lookup:1858: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 263.958581][ T4689] kworker/u4:23: attempt to access beyond end of device [ 263.958581][ T4689] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 264.206822][ T6251] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.216415][ T6251] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.225501][ T6251] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.234453][ T6251] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.458350][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 264.894398][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 265.080512][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 265.165757][ T6256] device bridge_slave_1 left promiscuous mode [ 265.184317][ T6256] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.207520][ T6256] bond0: (slave bond_slave_0): Releasing backup interface [ 265.233032][ T6256] bond0: (slave bond_slave_1): Releasing backup interface [ 265.233640][ T6297] loop4: detected capacity change from 0 to 512 [ 265.281052][ T6297] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 265.300454][ T6256] team0: Port device team_slave_0 removed [ 265.319557][ T6297] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 265.333368][ T6256] team0: Port device team_slave_1 removed [ 265.345940][ T6256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.351709][ T6297] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 265.358795][ T6256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.362383][ T6297] System zones: [ 265.370692][ T6256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.380042][ T6297] 1-12 [ 265.384013][ T6256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.387341][ T6297] EXT4-fs (loop4): orphan cleanup on readonly fs [ 265.404493][ T6297] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 33619980: comm syz.4.447: invalid block [ 265.420106][ T6297] EXT4-fs (loop4): Remounting filesystem read-only [ 265.426747][ T6297] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.447: invalid indirect mapped block 2 (level 2) [ 265.441536][ T6297] EXT4-fs (loop4): Remounting filesystem read-only [ 265.448528][ T6297] EXT4-fs (loop4): 1 truncate cleaned up [ 265.454383][ T6297] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 265.539558][ T6273] device syzkaller0 entered promiscuous mode [ 265.676260][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 265.832454][ T6305] loop4: detected capacity change from 0 to 256 [ 265.880256][ T6305] FAT-fs (loop4): Directory bread(block 64) failed [ 265.894144][ T6305] FAT-fs (loop4): Directory bread(block 65) failed [ 265.920948][ T6305] FAT-fs (loop4): Directory bread(block 66) failed [ 265.942356][ T6305] FAT-fs (loop4): Directory bread(block 67) failed [ 265.949052][ T6305] FAT-fs (loop4): Directory bread(block 68) failed [ 265.972624][ T6305] FAT-fs (loop4): Directory bread(block 69) failed [ 265.997123][ T6305] FAT-fs (loop4): Directory bread(block 70) failed [ 266.015654][ T6291] EXT4-fs (loop2): unmounting filesystem. [ 266.022868][ T6305] FAT-fs (loop4): Directory bread(block 71) failed [ 266.081989][ T6305] FAT-fs (loop4): Directory bread(block 72) failed [ 266.088590][ T6305] FAT-fs (loop4): Directory bread(block 73) failed [ 266.353146][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.359547][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.816333][ T6316] loop4: detected capacity change from 0 to 512 [ 266.872036][ T6316] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 267.123907][ T6316] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 267.132470][ T6316] System zones: 1-12 [ 267.143973][ T6316] EXT4-fs (loop4): 1 truncate cleaned up [ 267.149741][ T6316] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 267.671833][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 267.686968][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 267.710483][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 267.721296][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 267.734415][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 267.741967][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 268.297752][ T6303] loop6: detected capacity change from 0 to 131072 [ 268.322388][ T6303] F2FS-fs (loop6): invalid crc value [ 268.365676][ T6303] F2FS-fs (loop6): Found nat_bits in checkpoint [ 268.451240][ T6303] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 268.494331][ T6303] F2FS-fs (loop6): Corrupted max_depth of 3: 16842753 [ 269.993866][ T4284] Bluetooth: hci1: command 0x0409 tx timeout [ 270.462132][ T6335] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 270.476840][ T6335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 270.485534][ T6335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 270.494690][ T6335] device bridge_slave_0 left promiscuous mode [ 270.527620][ T6335] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.552042][ T6335] device bridge_slave_1 left promiscuous mode [ 270.575414][ T6335] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.637900][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 270.645669][ T6335] bond0: (slave bond_slave_0): Releasing backup interface [ 270.735789][ T6342] loop6: detected capacity change from 0 to 256 [ 270.903446][ T6335] bond0: (slave bond_slave_1): Releasing backup interface [ 272.902010][ T4284] Bluetooth: hci1: command 0x041b tx timeout [ 273.034830][ T6335] team0: Port device team_slave_0 removed [ 273.150477][ T6335] team0: Port device team_slave_1 removed [ 273.156966][ T6335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.212044][ T6335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.220712][ T6335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.228658][ T6335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.330319][ T6355] loop6: detected capacity change from 0 to 256 [ 273.521463][ T6355] exfat: Deprecated parameter 'utf8' [ 273.540768][ T6359] loop4: detected capacity change from 0 to 16 [ 273.561364][ T6359] erofs: (device loop4): mounted with root inode @ nid 36. [ 273.767310][ T6355] exfat: Deprecated parameter 'namecase' [ 274.008748][ T6355] exfat: Deprecated parameter 'namecase' [ 274.292914][ T6355] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc3758327, utbl_chksum : 0xe619d30d) [ 274.434134][ T6365] loop4: detected capacity change from 0 to 256 [ 274.781243][ T6365] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 275.108926][ T4284] Bluetooth: hci1: command 0x040f tx timeout [ 275.544376][ T4417] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.620987][ T6319] chnl_net:caif_netlink_parms(): no params data found [ 275.723098][ T4417] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.902285][ T6375] device syzkaller0 entered promiscuous mode [ 275.986666][ T4417] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.533424][ T6405] loop4: detected capacity change from 0 to 256 [ 277.487517][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 279.287155][ T6418] loop4: detected capacity change from 0 to 40427 [ 279.545209][ T6418] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 279.553221][ T6418] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 279.566774][ T6418] F2FS-fs (loop4): invalid crc value [ 279.820433][ T6418] F2FS-fs (loop4): Found nat_bits in checkpoint [ 280.098332][ T6418] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 280.105619][ T6418] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 282.276639][ T6426] loop3: detected capacity change from 0 to 16 [ 282.289118][ T6426] erofs: (device loop3): mounted with root inode @ nid 36. [ 282.315182][ T6426] overlayfs: failed to resolve './file1': -2 [ 282.959650][ T4417] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.997231][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 283.021103][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 283.028963][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 283.091966][ T6418] netlink: 'syz.4.475': attribute type 4 has an invalid length. [ 283.479096][ T6319] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.495157][ T6319] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.559551][ T6319] device bridge_slave_0 entered promiscuous mode [ 283.582656][ T6319] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.693329][ T6319] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.701732][ T6319] device bridge_slave_1 entered promiscuous mode [ 283.817842][ T6319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.995297][ T6457] loop3: detected capacity change from 0 to 512 [ 284.060082][ T6457] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 284.212137][ T6457] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 284.220729][ T6457] System zones: 1-12 [ 284.271667][ T6457] EXT4-fs (loop3): 1 truncate cleaned up [ 284.277444][ T6457] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 284.519076][ T6319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.906788][ T6319] team0: Port device team_slave_0 added [ 284.932949][ T6319] team0: Port device team_slave_1 added [ 284.962716][ T6469] loop4: detected capacity change from 0 to 16 [ 284.981616][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 284.986931][ T6469] erofs: (device loop4): mounted with root inode @ nid 36. [ 284.991336][ T6470] loop6: detected capacity change from 0 to 256 [ 285.046984][ T6469] overlayfs: failed to resolve './file1': -2 [ 286.396278][ T6472] loop5: detected capacity change from 0 to 40427 [ 286.468620][ T6472] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 286.476568][ T6472] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 286.498152][ T6472] F2FS-fs (loop5): invalid crc value [ 286.702822][ T6472] F2FS-fs (loop5): Found nat_bits in checkpoint [ 286.844980][ T6472] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 286.852433][ T6472] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 288.521182][ T6319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.608928][ T6319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.777828][ T6319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.878793][ T6319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.906525][ T6319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.010060][ T4706] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 289.044533][ T4706] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 289.108419][ T6319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.379427][ T6319] device hsr_slave_0 entered promiscuous mode [ 289.404574][ T6319] device hsr_slave_1 entered promiscuous mode [ 289.639133][ T6480] loop3: detected capacity change from 0 to 40427 [ 289.652028][ T6505] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 289.693580][ T6480] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 289.729322][ T6505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 289.737053][ T6480] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 289.767498][ T6505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 289.775470][ T6480] F2FS-fs (loop3): invalid crc value [ 289.808765][ T6480] F2FS-fs (loop3): Found nat_bits in checkpoint [ 289.987545][ T6502] netlink: 76 bytes leftover after parsing attributes in process `syz.4.491'. [ 290.070161][ T6480] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 290.080252][ T6480] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 290.451056][ T4268] syz-executor: attempt to access beyond end of device [ 290.451056][ T4268] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 290.945138][ T6529] loop6: detected capacity change from 0 to 16 [ 290.952862][ T6529] erofs: (device loop6): mounted with root inode @ nid 36. [ 291.007689][ T6529] overlayfs: failed to resolve './file1': -2 [ 291.037578][ T6319] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 291.061507][ T6319] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 291.260744][ T6319] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 291.292498][ T6319] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 292.094196][ T6541] loop6: detected capacity change from 0 to 4096 [ 292.104195][ T6541] EXT4-fs: Ignoring removed bh option [ 292.252693][ T6541] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 293.472584][ T6556] loop3: detected capacity change from 0 to 256 [ 294.317040][ T6551] loop4: detected capacity change from 0 to 40427 [ 294.895362][ T6551] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 294.903295][ T6551] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 294.920064][ T6551] F2FS-fs (loop4): invalid crc value [ 295.198194][ T5808] EXT4-fs (loop6): unmounting filesystem. [ 295.274302][ T6551] F2FS-fs (loop4): Found nat_bits in checkpoint [ 295.428709][ T6551] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 295.435919][ T6551] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 296.414200][ T4706] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 296.795361][ T4706] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 297.228031][ T4417] device hsr_slave_0 left promiscuous mode [ 297.294334][ T4417] device hsr_slave_1 left promiscuous mode [ 297.307413][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.339123][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.348100][ T6573] syz.6.504 uses obsolete (PF_INET,SOCK_PACKET) [ 297.585019][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.596352][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.623889][ T4417] device bridge_slave_1 left promiscuous mode [ 297.638458][ T4417] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.667183][ T4417] device bridge_slave_0 left promiscuous mode [ 297.680896][ T4417] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.763951][ T4417] device veth1_macvtap left promiscuous mode [ 297.783075][ T4417] device veth0_macvtap left promiscuous mode [ 297.798204][ T4417] device veth1_vlan left promiscuous mode [ 297.815495][ T4417] device veth0_vlan left promiscuous mode [ 298.548937][ T6595] loop5: detected capacity change from 0 to 16 [ 298.594870][ T6595] erofs: (device loop5): mounted with root inode @ nid 36. [ 298.667902][ T6595] syz.5.507: attempt to access beyond end of device [ 298.667902][ T6595] loop5: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 298.719285][ T6595] syz.5.507: attempt to access beyond end of device [ 298.719285][ T6595] loop5: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 299.429886][ T4417] team0 (unregistering): Port device team_slave_1 removed [ 299.492151][ T4417] team0 (unregistering): Port device team_slave_0 removed [ 299.548345][ T4417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.624495][ T4417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.290701][ T4417] bond0 (unregistering): Released all slaves [ 300.576039][ T6319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.655228][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 300.671432][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 300.701855][ T6319] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.752357][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 300.769350][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 300.805921][ T4448] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.813210][ T4448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.875137][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 300.916661][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 300.937509][ T6636] loop6: detected capacity change from 0 to 16 [ 300.952515][ T4448] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.959739][ T4448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.003263][ T6636] erofs: (device loop6): mounted with root inode @ nid 36. [ 301.032030][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 301.051795][ T6636] syz.6.519: attempt to access beyond end of device [ 301.051795][ T6636] loop6: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 301.075722][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 301.114920][ T6636] syz.6.519: attempt to access beyond end of device [ 301.114920][ T6636] loop6: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 301.211928][ T6618] device syzkaller0 entered promiscuous mode [ 302.745872][ T4281] Bluetooth: hci4: Malformed LE Event: 0x0d [ 306.000531][ T6686] loop6: detected capacity change from 0 to 16 [ 306.025525][ T6686] erofs: (device loop6): mounted with root inode @ nid 36. [ 306.430462][ T6686] syz.6.531: attempt to access beyond end of device [ 306.430462][ T6686] loop6: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 306.565779][ T6686] syz.6.531: attempt to access beyond end of device [ 306.565779][ T6686] loop6: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 308.070891][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 308.080084][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 308.090575][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 308.349923][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 308.385561][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 308.437127][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 308.470232][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 308.480790][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 308.513145][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 308.524149][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 308.538920][ T6319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 308.823004][ T6715] loop4: detected capacity change from 0 to 128 [ 308.856387][ T6714] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 308.903628][ T6714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 308.937077][ T6715] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 308.946620][ T6714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 309.002747][ T6715] ext4 filesystem being mounted at /123/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 309.862713][ T6734] loop6: detected capacity change from 0 to 512 [ 311.230398][ T6731] loop5: detected capacity change from 0 to 16 [ 311.240271][ T6734] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 311.253947][ T6731] erofs: (device loop5): mounted with root inode @ nid 36. [ 311.289934][ T6734] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 311.297973][ T6734] System zones: 1-12 [ 311.303704][ T6734] EXT4-fs (loop6): 1 truncate cleaned up [ 311.309372][ T6734] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 311.336504][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 311.411557][ T6740] syz.5.542: attempt to access beyond end of device [ 311.411557][ T6740] loop5: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 311.442169][ T6740] syz.5.542: attempt to access beyond end of device [ 311.442169][ T6740] loop5: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 311.527502][ T6746] loop4: detected capacity change from 0 to 128 [ 311.628125][ T6746] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 311.629269][ T5808] EXT4-fs (loop6): unmounting filesystem. [ 311.658108][ T6746] ext4 filesystem being mounted at /124/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 311.992725][ T6755] device syzkaller0 entered promiscuous mode [ 312.105373][ T26] audit: type=1804 audit(1777112457.978:43): pid=6757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.547" name="/newroot/33/bus/file0" dev="overlay" ino=213 res=1 errno=0 [ 312.179661][ T6319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.187636][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 312.200108][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 312.954592][ T6777] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 313.033286][ T6777] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 313.061474][ T6777] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 313.362575][ T6788] loop3: detected capacity change from 0 to 128 [ 313.512474][ T6788] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 313.522597][ T6788] ext4 filesystem being mounted at /106/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 313.902071][ T6799] loop6: detected capacity change from 0 to 512 [ 313.969437][ T6799] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 314.084738][ T6799] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 314.093197][ T6799] System zones: 1-12 [ 314.106457][ T6799] EXT4-fs (loop6): 1 truncate cleaned up [ 314.112285][ T6799] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 314.371509][ T6800] loop5: detected capacity change from 0 to 16 [ 314.428319][ T6800] erofs: (device loop5): mounted with root inode @ nid 36. [ 314.467807][ T6800] syz.5.556: attempt to access beyond end of device [ 314.467807][ T6800] loop5: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 314.539943][ T6800] syz.5.556: attempt to access beyond end of device [ 314.539943][ T6800] loop5: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 314.612225][ T5808] EXT4-fs (loop6): unmounting filesystem. [ 314.639050][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 314.657854][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 314.703797][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 314.738291][ T6319] device veth0_vlan entered promiscuous mode [ 314.827984][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 314.924333][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 314.945274][ T6319] device veth1_vlan entered promiscuous mode [ 314.967047][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 314.983948][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 315.063148][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 315.113750][ T6818] device syzkaller0 entered promiscuous mode [ 315.195788][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 315.217718][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 315.262715][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 315.339878][ T6319] device veth0_macvtap entered promiscuous mode [ 315.397327][ T6319] device veth1_macvtap entered promiscuous mode [ 315.508371][ T6319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.555389][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 315.576680][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 315.634051][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 315.692995][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 315.781125][ T6319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.811845][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 315.832918][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 315.880401][ T6319] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.906283][ T6319] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.936785][ T6319] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.026818][ T6319] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.329151][ T4380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.351009][ T4380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.517124][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 316.844300][ T4676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.221894][ T4676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.239883][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 317.300961][ T6845] loop5: detected capacity change from 0 to 16 [ 317.329995][ T6845] erofs: (device loop5): mounted with root inode @ nid 36. [ 317.492649][ T6845] syz.5.568: attempt to access beyond end of device [ 317.492649][ T6845] loop5: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 317.542032][ T6845] syz.5.568: attempt to access beyond end of device [ 317.542032][ T6845] loop5: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 317.558814][ T6849] loop6: detected capacity change from 0 to 128 [ 317.725272][ T6849] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 317.745522][ T6849] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 317.778834][ T6854] overlayfs: overlapping lowerdir path [ 317.890139][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 318.411390][ T6869] loop5: detected capacity change from 0 to 4096 [ 318.418779][ T6869] EXT4-fs: Ignoring removed bh option [ 318.437305][ T6869] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 319.132955][ T6885] comedi comedi3: comedi_parport: a I/O base address must be specified [ 319.148510][ T5769] EXT4-fs (loop5): unmounting filesystem. [ 319.597682][ T6894] loop7: detected capacity change from 0 to 128 [ 319.953604][ T6894] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 320.008778][ T6894] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 320.174655][ T6905] loop4: detected capacity change from 0 to 16 [ 320.224148][ T6905] erofs: (device loop4): mounted with root inode @ nid 36. [ 320.816528][ T5808] EXT4-fs (loop6): unmounting filesystem. [ 321.062344][ T6924] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 321.081290][ T6928] loop6: detected capacity change from 0 to 512 [ 321.107944][ T6924] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 321.168088][ T6928] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #12: comm syz.6.588: missing EA_INODE flag [ 321.206410][ T6924] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 321.276525][ T6932] loop3: detected capacity change from 0 to 4096 [ 321.284029][ T6932] EXT4-fs: Ignoring removed bh option [ 321.304911][ T6928] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.588: error while reading EA inode 12 err=-117 [ 321.367360][ T6932] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 321.379097][ T6928] EXT4-fs (loop6): 1 orphan inode deleted [ 321.392637][ T6932] [ 321.394995][ T6932] ====================================================== [ 321.402050][ T6932] WARNING: possible circular locking dependency detected [ 321.409088][ T6932] syzkaller #0 Not tainted [ 321.413546][ T6932] ------------------------------------------------------ [ 321.420597][ T6932] syz.3.590/6932 is trying to acquire lock: [ 321.426491][ T6932] ffff888070a60ce8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 321.435404][ T6932] [ 321.435404][ T6932] but task is already holding lock: [ 321.442788][ T6932] ffff888053e55cd0 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x910/0x1b70 [ 321.452291][ T6932] [ 321.452291][ T6932] which lock already depends on the new lock. [ 321.452291][ T6932] [ 321.462701][ T6932] [ 321.462701][ T6932] the existing dependency chain (in reverse order) is: [ 321.471719][ T6932] [ 321.471719][ T6932] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 321.479546][ T6932] down_write+0x36/0x60 [ 321.484239][ T6932] ext4_map_blocks+0x910/0x1b70 [ 321.489630][ T6932] ext4_getblk+0x1cc/0x6f0 [ 321.494581][ T6932] ext4_bread+0x26/0x170 [ 321.499358][ T6932] ext4_quota_write+0x236/0x580 [ 321.504767][ T6932] find_free_dqentry+0x673/0xc20 [ 321.510234][ T6932] do_insert_tree+0x70d/0x1040 [ 321.515542][ T6932] do_insert_tree+0x9eb/0x1040 [ 321.520829][ T6932] do_insert_tree+0x9eb/0x1040 [ 321.526146][ T6932] do_insert_tree+0x9eb/0x1040 [ 321.531440][ T6932] qtree_write_dquot+0x49d/0x5d0 [ 321.536915][ T6932] v2_write_dquot+0x108/0x190 [ 321.542124][ T6932] dquot_acquire+0x2d5/0x520 [ 321.547253][ T6932] ext4_acquire_dquot+0x2d9/0x4a0 [ 321.552854][ T6932] dqget+0x778/0xeb0 [ 321.557290][ T6932] __dquot_initialize+0x3c3/0xcd0 [ 321.562866][ T6932] ext4_process_orphan+0x54/0x300 [ 321.568426][ T6932] ext4_orphan_cleanup+0xbeb/0x1420 [ 321.574165][ T6932] ext4_fill_super+0x6ee3/0x78c0 [ 321.579634][ T6932] get_tree_bdev+0x3f1/0x610 [ 321.584761][ T6932] vfs_get_tree+0x88/0x270 [ 321.589730][ T6932] do_new_mount+0x24a/0xa40 [ 321.594789][ T6932] __se_sys_mount+0x2e3/0x3d0 [ 321.600011][ T6932] do_syscall_64+0x4c/0xa0 [ 321.604975][ T6932] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.611413][ T6932] [ 321.611413][ T6932] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 321.619522][ T6932] down_read+0x42/0x2d0 [ 321.624243][ T6932] v2_read_dquot+0x4a/0x110 [ 321.629302][ T6932] dquot_acquire+0x152/0x520 [ 321.634468][ T6932] ext4_acquire_dquot+0x2d9/0x4a0 [ 321.640038][ T6932] dqget+0x778/0xeb0 [ 321.644488][ T6932] __dquot_initialize+0x3c3/0xcd0 [ 321.650042][ T6932] ext4_process_orphan+0x54/0x300 [ 321.655606][ T6932] ext4_orphan_cleanup+0xbeb/0x1420 [ 321.661343][ T6932] ext4_fill_super+0x6ee3/0x78c0 [ 321.666811][ T6932] get_tree_bdev+0x3f1/0x610 [ 321.671937][ T6932] vfs_get_tree+0x88/0x270 [ 321.676910][ T6932] do_new_mount+0x24a/0xa40 [ 321.681941][ T6932] __se_sys_mount+0x2e3/0x3d0 [ 321.687154][ T6932] do_syscall_64+0x4c/0xa0 [ 321.692105][ T6932] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.698533][ T6932] [ 321.698533][ T6932] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 321.706205][ T6932] __lock_acquire+0x2d07/0x7d10 [ 321.711599][ T6932] lock_acquire+0x1bb/0x4a0 [ 321.716648][ T6932] __mutex_lock+0x12d/0xaf0 [ 321.721701][ T6932] dquot_commit+0x5a/0x410 [ 321.726650][ T6932] ext4_write_dquot+0x1f0/0x360 [ 321.732046][ T6932] mark_all_dquot_dirty+0xf9/0x400 [ 321.737749][ T6932] __dquot_alloc_space+0x5fc/0xe60 [ 321.743450][ T6932] ext4_mb_new_blocks+0xfc4/0x4610 [ 321.749109][ T6932] ext4_ext_map_blocks+0x195b/0x6810 [ 321.754959][ T6932] ext4_map_blocks+0x9de/0x1b70 [ 321.760361][ T6932] ext4_getblk+0x1cc/0x6f0 [ 321.765339][ T6932] ext4_bread+0x26/0x170 [ 321.770115][ T6932] ext4_append+0x2be/0x560 [ 321.775070][ T6932] ext4_init_new_dir+0x2b8/0x570 [ 321.780546][ T6932] ext4_mkdir+0x4fb/0xce0 [ 321.785443][ T6932] vfs_mkdir+0x387/0x570 [ 321.790218][ T6932] do_mkdirat+0x1d8/0x440 [ 321.795081][ T6932] __x64_sys_mkdir+0x6a/0x80 [ 321.800216][ T6932] do_syscall_64+0x4c/0xa0 [ 321.805223][ T6932] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.811657][ T6932] [ 321.811657][ T6932] other info that might help us debug this: [ 321.811657][ T6932] [ 321.821920][ T6932] Chain exists of: [ 321.821920][ T6932] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 321.821920][ T6932] [ 321.835613][ T6932] Possible unsafe locking scenario: [ 321.835613][ T6932] [ 321.843085][ T6932] CPU0 CPU1 [ 321.848456][ T6932] ---- ---- [ 321.853825][ T6932] lock(&ei->i_data_sem/2); [ 321.858463][ T6932] lock(&s->s_dquot.dqio_sem); [ 321.865844][ T6932] lock(&ei->i_data_sem/2); [ 321.872989][ T6932] lock(&dquot->dq_lock); [ 321.877412][ T6932] [ 321.877412][ T6932] *** DEADLOCK *** [ 321.877412][ T6932] [ 321.885558][ T6932] 4 locks held by syz.3.590/6932: [ 321.890594][ T6932] #0: ffff888050688460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 321.899756][ T6932] #1: ffff888070943628 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x208/0x470 [ 321.910390][ T6932] #2: ffff888053e55cd0 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x910/0x1b70 [ 321.920361][ T6932] #3: ffffffff8cc74a48 (dquot_srcu){....}-{0:0}, at: __dquot_alloc_space+0x173/0xe60 [ 321.929957][ T6932] [ 321.929957][ T6932] stack backtrace: [ 321.935876][ T6932] CPU: 0 PID: 6932 Comm: syz.3.590 Not tainted syzkaller #0 [ 321.943180][ T6932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 321.953289][ T6932] Call Trace: [ 321.956580][ T6932] [ 321.959528][ T6932] dump_stack_lvl+0x188/0x24e [ 321.964249][ T6932] ? load_image+0x400/0x400 [ 321.968775][ T6932] ? show_regs_print_info+0x12/0x12 [ 321.974011][ T6932] ? print_circular_bug+0x12b/0x1a0 [ 321.979243][ T6932] check_noncircular+0x296/0x330 [ 321.984223][ T6932] ? add_chain_block+0x940/0x940 [ 321.989175][ T6932] ? lockdep_lock+0xf1/0x1f0 [ 321.993796][ T6932] ? _find_first_zero_bit+0xcf/0x100 [ 321.999128][ T6932] __lock_acquire+0x2d07/0x7d10 [ 322.004066][ T6932] ? check_path+0x40/0x40 [ 322.008437][ T6932] ? check_noncircular+0x189/0x330 [ 322.013588][ T6932] ? add_chain_block+0x940/0x940 [ 322.018556][ T6932] ? lockdep_unlock+0x142/0x2e0 [ 322.023438][ T6932] ? verify_lock_unused+0x140/0x140 [ 322.028679][ T6932] ? mark_lock+0x94/0x320 [ 322.033044][ T6932] ? __lock_acquire+0x13cf/0x7d10 [ 322.038103][ T6932] lock_acquire+0x1bb/0x4a0 [ 322.042650][ T6932] ? dquot_commit+0x5a/0x410 [ 322.047273][ T6932] ? __might_sleep+0xd0/0xd0 [ 322.051885][ T6932] ? read_lock_is_recursive+0x10/0x10 [ 322.057293][ T6932] __mutex_lock+0x12d/0xaf0 [ 322.061826][ T6932] ? dquot_commit+0x5a/0x410 [ 322.066437][ T6932] ? __might_sleep+0xd0/0xd0 [ 322.071071][ T6932] ? dquot_commit+0x5a/0x410 [ 322.075683][ T6932] ? mutex_lock_nested+0x10/0x10 [ 322.080650][ T6932] ? ext4_journal_check_start+0x17e/0x240 [ 322.086400][ T6932] dquot_commit+0x5a/0x410 [ 322.090842][ T6932] ext4_write_dquot+0x1f0/0x360 [ 322.095722][ T6932] mark_all_dquot_dirty+0xf9/0x400 [ 322.100861][ T6932] __dquot_alloc_space+0x5fc/0xe60 [ 322.106004][ T6932] ? __dquot_alloc_space+0x173/0xe60 [ 322.111308][ T6932] ext4_mb_new_blocks+0xfc4/0x4610 [ 322.116454][ T6932] ? ext4_find_extent+0x367/0xe00 [ 322.121535][ T6932] ? rcu_is_watching+0x11/0xa0 [ 322.126320][ T6932] ? memset+0x1e/0x40 [ 322.130316][ T6932] ? ext4_mb_pa_callback+0xd0/0xd0 [ 322.135496][ T6932] ? ext4_ext_check_overlap+0x15f/0x560 [ 322.141069][ T6932] ? ext4_inode_to_goal_block+0x313/0x450 [ 322.146810][ T6932] ext4_ext_map_blocks+0x195b/0x6810 [ 322.152122][ T6932] ? ext4_ext_release+0x10/0x10 [ 322.156994][ T6932] ? rwsem_write_trylock+0x135/0x1c0 [ 322.162300][ T6932] ? ext4_es_lookup_extent+0x645/0xb10 [ 322.167776][ T6932] ext4_map_blocks+0x9de/0x1b70 [ 322.172646][ T6932] ? ext4_issue_zeroout+0x250/0x250 [ 322.177869][ T6932] ext4_getblk+0x1cc/0x6f0 [ 322.182306][ T6932] ? ext4_get_block_unwritten+0x100/0x100 [ 322.188042][ T6932] ? __ext4_new_inode+0x31ba/0x3ad0 [ 322.193274][ T6932] ext4_bread+0x26/0x170 [ 322.197524][ T6932] ext4_append+0x2be/0x560 [ 322.201960][ T6932] ? ext4_init_new_dir+0x570/0x570 [ 322.207094][ T6932] ? dquot_initialize+0x20/0x20 [ 322.211952][ T6932] ext4_init_new_dir+0x2b8/0x570 [ 322.216910][ T6932] ext4_mkdir+0x4fb/0xce0 [ 322.221268][ T6932] ? ext4_symlink+0x970/0x970 [ 322.225978][ T6932] ? inode_permission+0xef/0x480 [ 322.230936][ T6932] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 322.235990][ T6932] ? security_inode_mkdir+0xb3/0x100 [ 322.241299][ T6932] vfs_mkdir+0x387/0x570 [ 322.245560][ T6932] do_mkdirat+0x1d8/0x440 [ 322.249902][ T6932] ? vfs_mkdir+0x570/0x570 [ 322.254338][ T6932] ? getname_flags+0x206/0x500 [ 322.259109][ T6932] __x64_sys_mkdir+0x6a/0x80 [ 322.263715][ T6932] do_syscall_64+0x4c/0xa0 [ 322.268157][ T6932] ? clear_bhb_loop+0x60/0xb0 [ 322.272858][ T6932] ? clear_bhb_loop+0x60/0xb0 [ 322.277547][ T6932] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.283471][ T6932] RIP: 0033:0x7faed159cdd9 [ 322.287938][ T6932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.307555][ T6932] RSP: 002b:00007faed2440028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 322.315986][ T6932] RAX: ffffffffffffffda RBX: 00007faed1816090 RCX: 00007faed159cdd9 [ 322.323969][ T6932] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 322.331954][ T6932] RBP: 00007faed1632d69 R08: 0000000000000000 R09: 0000000000000000 [ 322.339929][ T6932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.347906][ T6932] R13: 00007faed1816128 R14: 00007faed1816090 R15: 00007ffd339176d8 [ 322.355894][ T6932] [ 322.374222][ T6928] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 322.415394][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 323.167902][ T5808] EXT4-fs (loop6): unmounting filesystem. [ 323.592706][ T6319] EXT4-fs (loop7): unmounting filesystem.