last executing test programs: 6.527995556s ago: executing program 1 (id=428): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x10001, 0x9}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup3(r5, r3, 0x80000) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire={0x40046305, 0x3}], 0x0, 0x0, 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x1, 0x1, 0x1}, 0x48) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x5, 0x0, 0xfc}]}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r7, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000200)='%pi6 \x00'}, 0x20) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x2}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4804) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r9}, &(0x7f00000002c0), &(0x7f0000000300)='%pS \x00'}, 0x20) close(0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000440), 0x9, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) io_uring_setup(0x0, 0x0) r10 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10) sendmsg$tipc(r10, &(0x7f0000000580)={&(0x7f0000000280)=@nameseq={0x1e, 0x0}, 0x10, 0x0}, 0xea) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000400)) close(0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x1, 0x83, &(0x7f0000000380)=ANY=[@ANYBLOB="12010102020000082505a1a4400001020301090271000201fd0f050904000001020d00000a24060001bd9f7f255105240009000d240f0109000000ffff01008006241abd00200c241b0010010000a50800ff042402010905810300041f01300904010000020d00000904010102020d00000905820208"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 4.312038319s ago: executing program 0 (id=443): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff004}, {0x6, 0x0, 0x6}]}, 0x10) dup3(r2, r3, 0x0) write$cgroup_devices(r2, &(0x7f0000000080)={'b', ' *:* ', 'rm\x00'}, 0x9) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f00000002c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r4, 0x107, 0xc, &(0x7f00000001c0), 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) socket$packet(0x11, 0x3, 0x300) writev(0xffffffffffffffff, &(0x7f0000000080), 0x0) 4.311669889s ago: executing program 1 (id=444): unshare(0x20000400) capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000000080)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r0, &(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x1000}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) inotify_init1(0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x108) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) r9 = openat$cgroup_ro(r7, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x8001) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\b\b\x00', 0x14, 0x2f, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {{0x0, 0x8906, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 4.239309701s ago: executing program 0 (id=446): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b00000000000000001804", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x2c00, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x400, '\x00', 0x0, r4, 0x3, 0x3, 0x3}, 0x48) ioctl$USBDEVFS_REAPURBNDELAY(r4, 0x4008550d, &(0x7f0000000300)) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000580)=ANY=[@ANYBLOB="3c10020000000000fe8000000000000000000000000000aaff010000000000000000000000000001fc000000000000000000000000000001fc020000000000000000000000000000fc010000000000000000000020000001fe8000000000000000000000000000aa00000000000000000000000000000040ff010000000000000000000000000001"], 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) preadv(r8, &(0x7f0000000540)=[{&(0x7f00000020c0)=""/4096, 0x1000}], 0x1, 0x20, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mkdir(&(0x7f0000000000)='./file2\x00', 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000740)=0x54) 3.424051192s ago: executing program 1 (id=450): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x181) r1 = openat$cgroup_procs(r0, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f00000005c0)={0x1f, 0x3, 0x5}) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0/file0\x00'}, 0x6e) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x5, 0x1}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)}, {&(0x7f0000000340)="cc732d7aee81d0d3df9f3d11dc7ba45cf74176c4e977c0b67d8700271c382acae3a2352240462fd404b45c45f0cc9d3832d61d64320419cc60c72aa2986dc897c10d0d9ece7a60644745ad2c115ecad7a28276a9beaf20705d84bd4c61f8c0fdf4b1b9ff07c66c686ef0b423bbb6838e4534339987cea29f3c", 0x79}], 0x2, &(0x7f0000000680)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r4, r0, r3, r4, r4, r6, r5]}}, @rights={{0x20, 0x1, 0x1, [r5, r1, r1, r4]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r3, r3, r6, r1, r6, r0, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r6, 0xffffffffffffffff, r0, r4, 0xffffffffffffffff, r0]}}], 0x100, 0x800}}], 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) preadv(r8, &(0x7f0000000080)=[{&(0x7f0000000280)=""/138, 0x8a}], 0x1, 0x0, 0x0) sendfile(r8, r8, 0x0, 0x7) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffffe2) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000100)='THAWED\x00', 0x7) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_getnexthop={0x20, 0x6a, 0x3be47489cda3194f, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x2}]}, 0x20}}, 0x0) ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, 0xb) 3.325739276s ago: executing program 0 (id=452): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$BINDER_SET_MAX_THREADS(r4, 0x400452c9, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/16, @ANYRES32=r5], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000004880)=[{{&(0x7f0000000380)={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, '\x00', 0xa}, 0x9}, 0x1c, &(0x7f0000000540)=[{0x0}], 0x1}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8c}, [@ldst={0x5, 0x3, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x2f) mount$cgroup(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x1, &(0x7f0000000300)={[{@clone_children}, {@xattr}, {}], [{@fowner_gt={'fowner>', 0xee01}}, {@fsname={'fsname', 0x3d, 'GPL\x00'}}, {@hash}]}) 3.274966028s ago: executing program 4 (id=453): sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = open$dir(0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x5452, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TUNATTACHFILTER(r3, 0x800454d3, &(0x7f00000000c0)={0x0, 0x0}) socket$xdp(0x2c, 0x3, 0x0) 2.779566496s ago: executing program 3 (id=455): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f00000001c0)=0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x2, 0x378, 0xffffffff, 0x2f8, 0x0, 0x2f8, 0xffffffff, 0xffffffff, 0x410, 0x410, 0x410, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0x2f8}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@mcast1, @empty, [], [], 'vlan1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3a69199fb8f4af703fe193000f3e34e1c27647d8cd16b804edb9654cf89d"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f00000002c0)=""/232, &(0x7f0000000180)=0xe8) read(r3, &(0x7f0000000240)=""/123, 0x7b) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000000)={0x8, 0x1000, 0x1, 0xffffffff, 0x40}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="0f20c06635010000000f22c0bad004b022eef4ba410066ed0fc7aeaadaf30fc7713bbaf80c66b834861d8e66efbafc0cb8501aefb8df000f00d8b88a008ec82f", 0x40}], 0x1, 0x0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, 0x200, 0x2, 0x0, 0x0, 0x0, 0x81, 0x200000038, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000000, 0x40000000000000, 0x0, 0x18}) 2.718668698s ago: executing program 3 (id=456): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff004}, {0x6, 0x0, 0x6}]}, 0x10) dup3(r2, r3, 0x0) write$cgroup_devices(r2, &(0x7f0000000080)={'b', ' *:* ', 'rm\x00'}, 0x9) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f00000002c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r4, 0x107, 0xc, &(0x7f00000001c0), 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) socket$packet(0x11, 0x3, 0x300) writev(0xffffffffffffffff, &(0x7f0000000080), 0x0) 2.65913102s ago: executing program 3 (id=457): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x7, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES8, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES8, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000840)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) (async) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000840)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0x2}}) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() fsetxattr$trusted_overlay_nlink(r0, 0x0, 0x0, 0x0, 0x0) (async) fsetxattr$trusted_overlay_nlink(r0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r3, 0x5, &(0x7f0000000240)=0x40000005) (async) sched_setscheduler(r3, 0x5, &(0x7f0000000240)=0x40000005) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) nanosleep(&(0x7f0000000080), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000000000000000020000000000000008000600020000000c000880080003007f00000100000000000000"], 0x2c}}, 0x0) mkdir(0x0, 0x0) (async) mkdir(0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r7 = syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r7, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) ptrace$ARCH_GET_FS(0x1e, r3, &(0x7f0000000600), 0x1003) 2.622015662s ago: executing program 1 (id=458): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$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") r0 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfd14) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) ftruncate(r0, 0x4) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x200000a, &(0x7f0000001040)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0xfc, 0x2b5, &(0x7f00000001c0)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x8, 0x7fe2, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) rt_sigsuspend(&(0x7f0000000480)={[0x10]}, 0x8) r7 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) close(r7) syz_fuse_handle_req(r5, &(0x7f0000004200)="2b9b2cc57ddf6d926249b7fd2bd2a4d90361d7088ccbdb57a223340c8d596ab3f9731da6097bdac5e7b9c1c490a5ce3f6bd3966582fbfb87548fa2073b3f1d60a2b6930cea234b26b27c46ea9cbb8f27cfa3d8191080d8e7f990d65304639edb4c57cddd038d8547ebbf044aa8d8667088aa66494f18cef58277ef9c9b63ef228c7bc51209453cb3e2ba4b9544acd880c6cf0e5f784182f22c4cc8bec8fbeeb1ef64ff3a74849df8952df06834462fe68898ee10146a7d5f9a555c4e05137465bdef7a8376d9ae9e725fc9f560e5ff9f5e74fb654207a872d1f142570a44ca3c598215221082a75c1713a0c02e55a605fb410e2ef625431caee6bb3d50c91bd91a8ca9ace7769b2e559c6214ba742b6b45ed046804a3b5f30ae83758e6af8b3a57a36e8d93fbd2a6ebfbf6983098209f47271cee2ec4a84299fa2b5df2d0b303dcf59bef22b66bd2b49008ea45ec6e68cc57da772fbe2aeadea88ca3a09c4224c9a0f1ea471afd908688f55e2cf1060406231df78e08ed950137f516ae46c5761dd57daedae5e795eb627717a90e6b1120325d4dac1ec5d55f33aa961ba655d8d18c4c57873f95ffd194fe6a3564ae5ce2c4d9a41a70ec882d5ec3e48a5554fdbbe32458e607ff1fcabf5279adb7fdd6f52c7d3661cb869e73bbda191ae62d50b132f3f4ef736f19a0f2ea54c618107d322a238477a3da7973dbba97ffed6a379c04000fb59b99f7bdc9f0b7fc5addb03d18e4b950281adf3c8fdf330a0a2f95385a8ce77c29209f72a3befc68ba258b959e279d874f948f7344c4d50d661158f81a0a3a8c880c86e1419a752071d5e329158325d9d75a189c3882b78b931f9904f81d57579d518c34966480000000000000a87eb52372a0b4ba9582b796a5ff7724c9277368ced44fc3fc86bb7c86304ab43bffaad66d3c258d69b257c66e0ec8b33f4870f7457851a61e4752abcd247baaa65cd75f268f8fa77e03cdd43ffab3b0a2dd31a0b8d74831a86cbdf0c5dca8212d7471b5fc8197ba5ceddd9dda8a51ba3f877c9d7f6958bf511ec6f367f41fc0916c3571669b6569b0b250b5caffe131659709149c70a76344efde2fd3f3cf8b15157a33fb344d1a18f6cb70bf9ba0b89b5a92fec78c3f05853f1809a98e0a34c0ceef259bf191b4fbc84133f67e0eaac037202facaba21404f32bb46b0c9907490160d0a5bb6c9d7fea3e3c4aef70d2c16a9c7405b0b5fe4d3d2cb7ff6587086121fb0d915b746bef8d67017fcdeaf52d3c7a88ca5d9baa53c51ad735ec279412f7ec1bab67cf7b21ee566f806325e5a45db616a821cc2d77ae9fc62f3a65a22b6f069ae22421de4abee394d097c46d94ee77d5efad178505aaf5d4d8461dd1a730e51e36b90f3e4857b28267e3b125d00859594ae7e30ed105fc48affabdaf08eca54173df9d03566cc41bcb39816c1718accb70372f64d4e517ff11adc4bbd67f07f69dc9ce6b48ce45322c8fd6f3e4fc1c7953c5f49f93c6aec947b4c81deefd26199d3b471a1fa026455a5bc0fe29af425e3e3ce37b09c1e151b029a9312f38dbfaa91f875dab04e096eb08119a17ff9cfac763845d557c441cec8808548c1193b654413f943257485c4d37c014f0de4a1cac03fe326858478c8d146b1193b58c0e173ea15f80612b2c2f2e0732ce9f80f8a18da969f0415f2c53a978a80a7d34112f455a4fe40342bf5f333382fa820d572716bbc796c00359db56386deb4a12e975a367ac08bd419ad4506ae7f91a99b3f2867d0bc404d339b3b197ec257adec6956f754dc029cb6b5677aefdf779e3ebbac585bb4aa818924047e427c9ef77d35b00deae67a2b956f9c55d66980720bfcde6fb77d705bf0a0ed4b0046755b119faea7f508d71638953986f08a46a9aa582f5fa9938e5938d3a791b526b5f21a8faa4a6932e5a76ab51925b0ec8384d776b5083cb4d8933b489bb9327af9132972e147d9d5320ec04b78d40a4af1f105b439347c4d44a61f2ea576c80e3e004e60d3eb8fafba98b3e0b9bbf2c49b3e438baba52a553ac159638c93650332e6f26b40e2b28532e7daa1cc37c3a13a7f13ac1e444a78d11bb4124e73c95a4f58f9eb29c82ab54fdc18327c54c66aa66d2dd46104ebb7123957787fce47ddfe636441ac1019ef91b73549cd9963b4adb9187e7629dedfb60effba6bc19da6cfd14c60fdca3d0792e3de82a05b4791541c566807285e4595c77929d179705967e255779dd2444ce8a8826eec0f9810cc1aefc01def851568ab91283114778f44aac0e841ff95106fd005fc6bbe6336b172b92df2a097a7945598858154e318ed02eeb4139bbcb9a92bc5f4360ae7723cb0a855c22b4116302ea33b87faa2ea1d538ad968bad6665fa90bb4dab559630253e4223f1b9c1bbdcfb3c68b4ccef6524ad8d584118fea93342019f49634d4fcf293789386b80a4984a6a322518084ca75e457c017976fed56d0879e5fb2d73ef113ba2b1ceea039c894e9793d7df1b3774e91be870ce1c9c4fc4a68e2eb31c5fdfd8d2c32bf1e05948c6fd1481a1b97eecc0cc42b282f03e1f4f2ed93f145c7a543bddcba339907c88183f62739fc3272b3a0ae81e8ea29bf74be207fe90202f3118ddf7e8e948a2c33cd785ac1ffceb87446c762bb97a22f51089320e3ef1d83567d30adb43f91e9040a6abe2af23e2ea8692bed8701d339c524eb67ce739af8ffcd13cb193d1599dca33f46516cdd5e5056fdc734182c78b3ecc28874e983c7abba39124e64cf987ca3568fec0f551ce39e7c985e71b32874ccec4c39428b29b19dedc0d6588dce8ccbc337113de8266574c07d6bfa0919c02f772c9c7285c02a1d9c4c64dc060c75860e665de0d77d61f7a5aabca948fdb95ea57c0209200702fa36d8dc37a3233878edcdf62e28c8593e6fdec7e205d03658a794e9548aab9aea411e93f93ac7f44366b6ee30aeb1907d75f76f83651ffb0de8bc81d059505724b58a390b137127e47c685dd7756744bdade96e205bbf75f156ec1f7fa8d726fa7096427196a1d9bcda30c7b3c059e444376da54723706ba465a24f8f0e8496af818a332cd94c5396ae5bb13655e0609daf680801e5a808b8a2d7571d87cd2e6e3682dc9cc3cd90f4f14a07c98454affdb9ce22be44c584e851b9c69d821e3ae63f043fe2d74bbe0621cf55165579ddc529aa7a7f8443c2c2d6baa95dfe908c37a001839c18bc55582a2a06b9c610a992c872b2b47501b1503b67c95044cbaf911331b67a690cb4449b7462544408ec971bb6c37f7bd33d3d1f2292f310bc30fcb517d90166bc8358aa2829b3da7f035af1d87e81500b4f9293299e2d31c27bbb8a64a7995c0a09743b56be4557a7e205abc27c02d00fcb80c767aa23d562f470f05d0763b4d82f474970f7b76e74d3fb1598c556539b94c750cb869f591417b10e7b06bd1fa4f461cb9fae7201b23545317a645cdc5dfa8416876dc439677e301c2dfc923e1965711374c715c5fc13e5d0e21a8ebc14d63425d539254ceac1e0ab6e0dc49748dfff967cbbf4cc3a8766c3c616132c9c70996de032e00f4536f19042d7901950e70209282786ac4ee78a0ed429b014dc9927d0af039a8171dae2a516e7724cf1b507e027772e7d285a2c2961b37992edd9a080d4c6fd8e0596ca57e21f414e08aef06430508b198620f16a2101e22b36ec0a85469abf84048cafa756a4848dc5815df8f10a75aa93ca1166370df0971558bef03d5fde4c5aa228ee880a2f260888a94ecd85c2ec3e91544fb84f1d43fb20d6ec32c58262f96f2509b981f01e57df0b7e4efc2550e9818db86e0e7bcd1ab2ed1e5d7007c258e6facf6a7587ce043276fc645ed32b7e251c297a5e4851a41abc6d32e47fecfcf6848c1353b13095d1a074ed88f97f313ef95e50b5313502fd45a1d60bca8962da08e106e2ff5f70231ef52f1688d07fe2e659a844bd38121999e96045af43caad1e0cdb70ed8da5c19a61e86897ef317f84b0c7c52c37d1da06c1a6c4f93ca80e992069548ac550e3fb6fe5eb1c675bdac074d261938500cb85bb1d8e5f1b95cdc102fdbd2a9e708f06249bf060c02d9755225a0b29963f25ccb5c2514f314a24dd532ca176fd4b59f4236291a3e728e1bdefa1f776026345a7dbe1b0a67f2d2b567c28c9a5d9c743caff15e6aff1765450fd883ad1fb6dea72250c6c3de7dc950bf25ff75a75d69eee33cc92c7bfb45e82bd4b6d4597898509de968824362fef257930de132080eb543d54ea52f4c0e81c1d4169b74cc55d226bfb8ce20d86e23d64550dd4e63964b8d550580d8cbea80b835553cf4d4a0439a662e34ff04eb00f04564a72d6ad933d0ea0761bab57b08e00276a2cf263e9e77f9b0db572b1121af2ce8c6c7517c170838dab8123b40ed25f467c712735ea51dba2c5fa61ae5d7b035c627af47c02d4bdd2942a9e031fcca52cbdd1f737a86fb5382671d29b103c7c09cc581b4b4705e42ce0ce779b665e3f16964454d6ebead8ea501fb97df339affee3358ea163a9d83c7cca2ca02e95777e0af4ecb5d1c90199c56aa48e15fbb7a21cb8a78cbbe3633f8216c1a1ee0b4300508e7fde859f2b93aadf1251ed4d0ab76a935e1032d3c764597452d7743eddb84e120e4157d78702e74d4c53e5f1c59f41780f2bd0cb716810ddcb9f14aa9b62d0daef9916831645581a5663a97775f8ed21c38fc0f0adf5461ece156ad97962ae9c26e169f06ff320630891dc3c9163d89ac2d4045ed4f8948ce6a1aa607ba7ffc16f625d73568f4824e40dccffd93245cbf14a54ef80f23ba67a5484a7135819aa9d0e05fc34f371e7f54b212ca8161a3b77b8c20a481dd015a3522fc10441360429f54218aca9262d76862496b783a15b9548c25bc0b3f6c77b844e680c019278464a371eb7568b986fea71219334a8a9756bcbf65501fa95984be33845b2dba2f7cd4971a5c48ec350f68f4127e4875dd9d9d2a8f1bd378207f40fcceef23d6cf693c80ec5780ad8918e2df057a76e27e9421c46ed7da2e8b3a0a4d38a00714cd5f9ae05d7ed9608aa609b16fa82cd56a18e774a5fa91d17deb4e656b2e34e74ab48899f8726297c3ebd3ad41a4775cf1d024597555a461523f0bde98e0b1b25601ff6704a51eaa213d8df1ec5798cd5fad42b32c3ae8cc4e38c1950553d018315f583fb4264422bf52a53990d5ddae058204b14acbb1f1d3fa5c9214402431caf61a031a555d342c6c56d129f90adab2bfb65c596483a59e1756883ed33f4c8918faaadfe96be5865c90f41b47e8c86e4591ee4e15b81199b7fa7165e41069fd11dcb713e8b73dd20b8785f42121ae6fe3ed33dae9683065ec744be57be38dc24c5b4ab9351ccf10ffb3dbfcbd237bc1e5a4da04b32422788b023957e629c4addbb1b2de0a2d85776d99c6c85a6b928c991dd113569f467ba986bde175b114d25271da2ddfa882f69bbf1f11e2d76ac94ee2c50f3e09a8c53b2ec189c6869740064d9cc9a4ca7927909f28388cf731a5130eb67e86b3fa63128737a8196546c6f015731882bc8e3388d038f59325ec512d6e621f0888300415003ccfbabf9f1d1b220ab17cd1e27bf1be26a852cad05e0a3b0753a39e2b2c7568db87b03f6ad0d896ecc54ee7d1e57be7541c6230fe612e66f2b902a3d28acea7022a9ce192994ea4553e863337664bc9c5f3c688c8e48a318139f0ea1272f50798ca0781634dc40577fe6c4b3f98c836e0c31f919ce24e711756f8a1948854e6349b15e4a8df64578f4f6c6caa211f9d1b6ca170c11a6a9b1702feb3870935a11e22f5149b0f6030382d5c42d455e39e983c29ea8fb1707d01f50158c90237988d0f34b9a7d305cfce1c90ec93c1a71a343cffa8042c62cbbc73a3d256b332ded8c840a0c5913ff46c3458e73ea06cc3f6dfd4eecf5fae65ba6ea9533a7981ee3b67297b70a1d9c767d582a04c1bd8c341e14716b06f4174976055de242287d057065a0521d15d7240ad714dbf682d38ffb6257655ce128bc227ae1a350aa710eca7ec7b615db96e1b19fd256224300837d7074be7149d00ee20ef770632c2dede0518f752beff8d4bd79725177ec9c73191d4e2342204215fdc8112ea57ee5075b4036c1ab5ddf95000c2de27f01849017b84dd52ed7152a5a5087e05621c9102ff7d0a6ed2f722afffba3b869291bb954043a4847ffc940b21968ca7c1ca2f84141fb7acdb0cbb363612d069c9b612944b33af7a8c78dfd38140b2641ec3e0711a65c456e0de14a9c6a12849c34df8a73234d32d5fae1007c2d39e63e8262aa56b91e9c122d089929a172c4ad539a0001d3e9344be839ed7a6df2b65874a994c0767de57b7bdde3e3b2acf05b4c1af08e4fe8caa34df14f1c7616cb0d2ef64e0191b6b3c45e386a344e33c4dbedae00580cdd8cc8ecc1c8e24a22e2978246cd7f197a6680237a7b16bf1d1f3f8f1e98630d0e8555df906e1ef75c2c45e912754d987f5b20cb9f0e6adc453f8653e426cd7e402cd491cd0b253a49469f6981a739e5d1676a192c6912cd840e4512ce184c98845eff804795c9feaccae7b9a29859dc2a6f148847492786dd62570f8abf2a3a5bc9afb4c24112fd8a758beafeaaea92fdb8fdfe4072f3fedebd383bcde4d128b26dfc07cf516a77a28327e646b1a9c47cfe28e90e63e6404a8f44686bf66cf56209a32a0d27f94f3e02f816dc6b034d7e5674a8d51bb679272ec0da17ed54caf6c0bb9827951e20e808238939a784985c41dea284c4949ae9f0c1d96e644b507eacbebaa9ef44c971db6cfad16472ffb3d79a65633f210c4ee49013c664e1f074816aa77cf08074915f37ac848efe135f1bab3cf3ab4523d352bf19790de794fdcc3c5977b1794c7fa5e9f752bea5853455f87b838eab07807b999fecff27bea442b13a281e780a4df73a72f0ae79cc1da03ee855050f3c4014b7843cbbb5a7ff6c9f569e351148a572d13c16d5ff610c07177f49d25d30e00977007b166338682c9003289ad38bdf34df015bfdeca1df9f9d6e32bf5d1e300bbc33afaab5d41cb4fdf229b08d4f1ac6abf760ad3868602fba7edd70891645ca9e5940212e3e45172df2a60d3fc1af790afed13993b10054de9ce2c40f30a5744cf303accad1cb223ccfb300e1de8118733483b52d59fc90d9b743d390c79e1f3ef70ad3486c340fcfc452dd9d23b2a75949b896db6fe5effd488b50b32d64fcab52ad12cee6de0269ac8c10115beee071a5678aaf9e58c22a74b3bc0fbd015b9397f7bacb73120d42ca4465c8cdfa180de06d6c08922534762bb53ecd85297d76490b63bb7851637fdf5673fc6b6895fdda097a5434f310282e64f90156882bc6c562e4543f8dd0a8e48a7f1ca6877f72f8b7b4fc349fd245cc7c3b68578a14579d19a88660f0cf1fd5040cadf9d927c55ecbf976d043214d353b51375aa161c626a69ae794220fd48cbff06e139bd1b58d043ab41be733156e75aa0c1e8ed7a4c8e3b2501ffffffc9dee4d4bb1c3dd6a93b4bd7147dff40b4b3399512c6dc580df2ae0aa8f639fbad6df3d12ceca86361b520e20b6c2b8b8a4e01956c442837171370d51d220918824eda9719b259875d50a21ab1b28aca4fe6110ab0b4cb0b9d019a2eb1e4b078cd464088581986e5664fc7aaa8f5aac72a5f9656217b28a3bc4454f5c8d138fdbe31c35a36ee46129fac809771a93fca0737a9b97cfbe17af76e7e10f41f13f79afefee45810c6213298408798895865c2c6325869d12110f5ff7df73a087511c6ddae445a64eb497484b836494113fb774da0338fe0e90ac020a8191763ce287db7a5c99dccd82adecfca5fbe3ab498f2e6f1d314e1d02e220a367732c4887463e094925db435dd900b6c06431e5bc6aaf5d3b6b7bcd70011a3e6a918e0ccde634fbb0d86be309ccf18c63491abf2e0e88576853689968ef863c803c65dde0ab5ea21fdaf63d5d8252aacace62370f2e6af8fcda271f728b8971d503763d656c580f42ff2c23cfe53d95470cd7af14cec0a7f4c013a0c755514834d6ee8f1a70d583968924bf0bd3e45b20af327d10d85743df63085b9fc3c70d86e0451cfda93c939be786a03fcd06f1877f68142bb42d5bef9b46ec9ffa1ae44f8b8b95e84090922be370b51ff17ccc007198d4fd7cd19c98796f23b4fd92abf6fbc607910f0de8d67e91840c6aa57c5eb694866500fcd47bb311f8945810c150e589c4442e099d7bb3b8cd800b99e5afac030e9e43b27971a0bfffaafaf2a94d3164f105916eac0b2534a392cedd13b54ad4bf49f32186230b89ddb930638c64077b2a93bace88b58bef3a4ef5f3c0e09c2398e35f2108be2e59dde22666150d10fd5ea3ad1cb834ae9df48a063036f31cd36a48a09ff1507f5cf1b49f102e4fc6606769fbae0dcac39aa9d6d2b76f78fb999747bf60eeda6adba8308d0af1bcf2dfd3f545b5f0b56a9890d164cdf8b8a218e1c1ec0a4d3ea734376a0fd6b9dc95ba6f90f01825d16133b53304f6859eded638189e4a05f433960af0e446bc288d9528a0d099174ff76dd05dbfc5ac13018fc2b81489a980962ca9337342968ba0b7d3f004e0db1a0cbf841bcddc293ae97b001070812f1418c5d9cce00379594023641afc1ea6bf17ef6486e336761dd14294b87a6b71e4f933d54f94d95ea52b87b737156d7e200fd90c8b963d197857a2b4a9b219dbba0398f21c7f995b341ce4aaef21687a2e8971b7b6e2ed36793ef6b9c942fa5813b06c1df59434aac8711991407dac50c9cc6266bea61b83775a859e75f2431661235cf3996d1f37abeec98a42966180c9c098292a9337c5b01f39df02603eb5c05d232b63639462fc2edf7e5e29fb5d4c6acaf42ca7a51db6b444df3e61980cf5e501fb1a944d3b6c7d5de0b8ee11d08f28f2a1ded53f675b5afaa5f10824687a5852fd9414cd5c8c682e8d6be4a8258117465c664a74ca05f3b4d3882d50d07660e94f8e36a22ba4c67f6350a102ad1294dde5db49bc03eaf21520d0fc98a7202e4ba462298f3d71d3e8e3a3c66331e0767d303ff511381549b1ecc823e9e92132087d549c678dfef21bf6d2b34f859f72c1290db6653907471b72eea19ada1ade891cb2a98c2a77ee3ffc4b27fef58d5853fedcd2a7e9e5ad20638461f3df6c539a1b9722228f8ae2751949447b0892505dabf98d2dffd3cf87ace963af1faf239e7a4f90a834e6bd7ddd8c1f18635178d104016ca1d9afcf89282efe1b4bcc996c8f934cd5e4e4272bbedadc6f52d0809ee8ddd203c626f604a5a019ccfc4b6ac1333ed9d6ec6a3b2efffbb708d9d312f93452521d85fea559e0797631e6ccc55eb06c4cf4516fc06355c3a0533231aa162c4474cc30fa7afe87f19aa706d0b89fceca11f5d481701ab5f17a13d8ae8dfe996437c5a23ef19690f83d6ff3d81d2fa0a3828bacd8cd2db1f1b90f03f5d0c6243b30b5a2677a022c6753e2639e655c9e19112fce892aab367efd4859f20a43000ff91f9a0bca72e876b6a9d3feb12d9383b6215d157d646788fbd013df355015b1c43baad72da72ecb6320350c3b527a2b92e8621cc87a66de41edcda920db456d2cc72173dd67372076773c23bd86d69846177a5ac950d995cb4ee5183ef02b25aec05d4f69c591a12de2d0862d842845ed19afa4e080574c019a86ccd383ebc666af870b941a21502a69d3c65d1e159f48f519a4de23a81a64c37e4197b97b68115aab05a4af91b76bbd491733a530b091a028be586ba766137b362fd36a6ea40979513f8c260bce25e28e20f17b82be3184520a6d8ef2759052f10b2e7995eb184c91909da0a5df42898564ef10445aed5c5a68d6dd52dd79f0f4f87c4b27d7c5151ab09e4b8c2307a468883dbeb5399f26817de4ae26bee9f88a5a6be16d98a4ee46a6c75a2c9b72eb1155e7b2b4b229422aace31479e21af8bfa7cd54502080dbefa9283b5908792bf8ac224d8deef9573f0fb3d9a26f1f7bf48477ac63b9303ffd178b3ce53b999aab38a24a874d583e4b3fc4731ee61c268520d3d98da573ecfd7f2c8d69baeb2149aa5b5dd37c7eab863479719640689dbb5ca7512f82312294e93df642a635b09007be274cc83df64ed221637a6e26ce8dd9b61c8312c457c72eb2fe1bb1330fb690e10699487af5e38c5e7c11c2c6ffb5a11a25dde4cbb772f7645df868a7772fb659eed5e2ef69ac61f3e364563274bb2f8b0b64b9271e56d5576eceed8470d1bd983b1539cda9a68acb544cf636d052e676c712ed0f316583048596541eddd0a78a1c94e01441b703c4794be59a76d0e21c0bede567cba994af1f8bddc48e9714f45b7d61504f551a445eaa5650c32e02ff325d870e9352f9829c506908f36aa5a21b3019ea9d457a8be2b5e72bbd79e098c80c5b88f30568e6f34e72064132b0735df5109dd5f9b5e9836bbba8a8ca7a85a0cb0043901f63abb0921cb794b178d37de96599ab8d6e4a079c1de51ac8cf07d94cfb888b45a897c304a850f744ab6dde62602c63fca7af0a3a2d5bc9dc9a24dcccfff8020187968fcc3c2caab612bf3fc516d9e55c412b1c685d3c25c8c77fd546e74d9a7f5101859ac0038b9bfed4bbcbf6694fccbf410ed4e268ba90b517f6df2eb31ed922b0d71262e8c501446209754471514bc301f70b36b71fe8ff112007bd2ca5d254a47a589e6f2fdbb0026066cb41c224807201ecf5cec98703602c2342866b0fe365c081b20ac95b5bb1b47becad80014797b95b4a51934dd6971fa3d4f821340cc4b88e28d23d1351935d7a25ada3aff88d50d5696ac5f8f014d38e85ec8d7f11f1429bd4e79154fcc8139fb45782afc34d5e1fb188bc2929254737299596c3089b3f4325b890537b199f26a529d3cb0a2ba6b910ced6282884eb83d65d19d3293508c5154e957437e7f8594bab8e367af93cd034d9e7f75d63deb1f6497ece9a477db29e1ddc2d76eebc9d84ed8c6c90b48bf3c19e8155521b57ce804e206e8fad5cc017f21f5b81bbb14f4a24a6ab37aec299e962ae662b7a3fee410be458b010fa6fb2add6c642edf702e726d917d63818c08b131a4f56cb67298de9a8a77bff40ef6166a0771f3e8555f0ec2cf5db47b2c6c8925dbfc222d4a17b2e031305cd3e0d6a28324ac7e33bffc816bf34f886109e289fa31f3f6d8142e1e147484f18093e99e7f1eafd5b8244ded53197c370ab98eca805a4443f159aae47ba7c326fadb728a4e361db44555111c6db014efb51166ee32280ec4325eaafa83f3cb1fd6a18bf620186ab768a0c21bc56dfbcac90c46dce190ff9d8a2f8acdbcaf1e22b9b4997d98b50dadb5d444ba1c6ed0891d38ba7b8e69b25503bb8261023250463b92454c8d33cc3207dc7fae44ad80d99e78a1bd1cea9706e88b1374c262e41b77b0ec68428b1256b3f56c826683573cc8957abd8769e362824de4071963a196bd2e8c406bf192412876d82cdb657e88ac423482c07659f161db4191fb54fb6a26a25af9da3a211dba82912cc79d6150cc864b47a01315be7fae92c6df903d972debefd486b63219fd45", 0x2000, &(0x7f00000004c0)={&(0x7f0000000bc0)={0x50, 0xffffffffffffffda}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x2e) 2.567912664s ago: executing program 2 (id=459): r0 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x1000, &(0x7f0000000140)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@default_permissions}, {@allow_other}, {@default_permissions}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@obj_role={'obj_role', 0x3d, '\xc5]'}}, {@obj_role={'obj_role', 0x3d, ':.%'}}, {@smackfstransmute}]}}, 0x1, 0x0, &(0x7f0000000240)="bbfadf7d99dce6d32a726fb0d66cdda9c13e25717994454e26e16d853d033f57d011c801dbf75a0c9dfb628c4186eec7a37f67cc93632de8a656a49d5d60d7a50d5936995e67ae556c56c8b0b1ce4c4a178c0896431b64ae89e3ed5fd13c2ddd0b9f4607d37acb096aee7f15d9221c20da1a06ef5bdb4d5a12c64b833fd9a6219d8a8d4bc1650ed271174f77fe76d3c2cfd3411dc2c8c81a597d7f6f473e7120b3dd4263712bee9fc5b39831ca9820926e2aa79928f2e0fedaee101732147163b1f493e9cdd9db4adc56d380bf9ad1c1") fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='{)\x00', &(0x7f0000000080)='./file0\x00', r1) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000340)=0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0xfffffffa}}]}, {0x0, [0x30]}}, &(0x7f0000000700)=""/237, 0x33, 0xed, 0x1}, 0x20) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x4, &(0x7f0000000880)=@raw=[@map_idx_val={0x18, 0x2c06f072f4e4ae39, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1b}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}], &(0x7f00000008c0)='syzkaller\x00', 0x3, 0x2c, &(0x7f0000000900)=""/44, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x3, 0x100, 0x4}, 0x10, 0x1c9b6, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x5305}, 0x90) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)={0x1b, 0x0, 0x0, 0x101, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x48) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/profiling', 0x40, 0x81) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0xb, 0xe, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, [@generic={0x40, 0xa, 0xa, 0x8, 0x7f}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x703}, @map_fd={0x18, 0x3, 0x1, 0x0, r2}, @alu={0x7, 0x1, 0x7, 0x3, 0x9, 0xfffffffffffffffe, 0xf}, @exit, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @jmp={0x5, 0x1, 0xb722ee5c496c065b, 0x7, 0xb, 0x30, 0xffffffffffffffff}, @ldst={0x0, 0x3, 0x6, 0x5, 0x7, 0xfffffffffffffffc, 0xfffffffffffffff0}]}, &(0x7f0000000580)='syzkaller\x00', 0x7, 0xd9, &(0x7f00000005c0)=""/217, 0x41100, 0x8, '\x00', 0x0, 0x1f, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x3, 0xa, 0x40, 0x3}, 0x10, 0x0, r5, 0x7, &(0x7f0000000c00)=[r6, r7, r8, r9, 0xffffffffffffffff], &(0x7f0000000c40)=[{0x5, 0x2, 0x3, 0xc}, {0x3, 0x1, 0x9, 0x1}, {0x1, 0x1, 0x3, 0x2}, {0x2, 0x4, 0xf, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x5, 0x4, 0x9, 0x4}, {0x3, 0x5, 0x5, 0x6}], 0x10, 0xfa5b}, 0x90) getdents64(r9, &(0x7f0000000d80)=""/88, 0x58) splice(r4, &(0x7f0000000e00)=0x9, r1, &(0x7f0000000e40)=0x4, 0x5c, 0x1) setsockopt$inet_buf(r9, 0x0, 0x2f, &(0x7f0000000e80)="62642337b7e07748ecdd590fa6c52b12bde3ce89e5548e1517ee0136465d1f3feb0230325d6a3e858b75dadf51114874491d543a77b808849a04ea3b9c0110d186e429a0d95f7d1aa6eb3cbbcaabbac3a10f9bc2b1fc5028e9a41e960f", 0x5d) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{r9, 0xffffffffffffffff}, &(0x7f0000000f00), &(0x7f0000000f40)=r5}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000001200)={'ip6tnl0\x00', &(0x7f0000001180)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0xe0, 0x0, 0x2, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x2, 0x7}}) r12 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000001280)='bpf_lsm_inode_getattr\x00') r13 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001300)=@o_path={&(0x7f00000012c0)='./file0\x00', 0x0, 0x4010, r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x13, 0x18, &(0x7f0000000fc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func, @generic={0x40, 0x2, 0xf, 0x1, 0x381}, @generic={0x2, 0x2, 0x1, 0xfff, 0x1000}, @tail_call, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7484}]}, &(0x7f0000001080)='syzkaller\x00', 0x3dc3, 0x82, &(0x7f00000010c0)=""/130, 0x41100, 0x14, '\x00', r11, 0x12, r4, 0x8, &(0x7f0000001240)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, r12, r13, 0x7, 0x0, &(0x7f0000001340)=[{0x3, 0x4, 0xe, 0xb}, {0x2, 0x3, 0x4, 0x2}, {0x0, 0x5, 0xd, 0xb}, {0x5, 0x1, 0xc, 0xa}, {0x0, 0x2, 0x6, 0xa}, {0x5, 0x2, 0x1, 0xb}, {0x4, 0x2, 0x5, 0x807eec03abe481ff}], 0x10, 0x3}, 0x90) io_setup(0x7, &(0x7f0000001480)) setxattr(&(0x7f00000014c0)='./file0\x00', &(0x7f0000001500)=@known='trusted.overlay.metacopy\x00', &(0x7f0000001540)='%@\x00', 0x3, 0x1) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000001580)={'macvlan1\x00'}) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000015c0)={0x0, 0x6, 0x8}, 0xc) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc400941d, &(0x7f0000001600)={0x0, 0x7, 0x5, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r14, 0xd000941e, &(0x7f0000001a00)={r15, "b79b7c8f197a4c7b73b0b9f27313c14a"}) sendmsg$AUDIT_USER(r9, &(0x7f0000002ac0)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a40)={0x20, 0x3ed, 0x4, 0x70bd2d, 0x25dfdbff, "15a5037842bbf4410ea947cd46", [""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$nl_xfrm(r7, &(0x7f0000002c00)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x1c2a189cc3205559}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b40)=@newspdinfo={0x5c, 0x24, 0x2, 0x70bd2d, 0x25dfdbff, 0x2, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r8, 0x80489439, &(0x7f0000002c40)) 2.352140462s ago: executing program 4 (id=460): bpf$MAP_CREATE(0x2000000, &(0x7f0000000840)=@base={0x1, 0x0, 0x0, 0x0, 0x3c80}, 0x48) 2.351821362s ago: executing program 4 (id=461): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='devices.list\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x90) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa) mlock(&(0x7f0000ff8000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0xa) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x444, &(0x7f0000000980)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x275a, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x280000, 0x0) unshare(0x20000600) r4 = fcntl$dupfd(r3, 0x0, r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x6, &(0x7f00000001c0)={&(0x7f0000000140)='net_dev_xmit\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='ext4_request_blocks\x00', r5}, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) 2.270850165s ago: executing program 3 (id=462): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b00000000000000001804", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x2c00, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x400, '\x00', 0x0, r4, 0x3, 0x3, 0x3}, 0x48) ioctl$USBDEVFS_REAPURBNDELAY(r4, 0x4008550d, &(0x7f0000000300)) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000580)=ANY=[@ANYBLOB="3c10020000000000fe8000000000000000000000000000aaff010000000000000000000000000001fc000000000000000000000000000001fc020000000000000000000000000000fc010000000000000000000020000001fe8000000000000000000000000000aa00000000000000000000000000000040ff010000000000000000000000000001"], 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) preadv(r8, &(0x7f0000000540)=[{&(0x7f00000020c0)=""/4096, 0x1000}], 0x1, 0x20, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mkdir(&(0x7f0000000000)='./file2\x00', 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000740)=0x54) 2.1489924s ago: executing program 0 (id=463): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) 2.100105502s ago: executing program 4 (id=464): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x5000000, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 1.355002579s ago: executing program 2 (id=465): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8932, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000900)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast2}}}}) 1.33933855s ago: executing program 2 (id=466): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f00000001c0)=0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x2, 0x378, 0xffffffff, 0x2f8, 0x0, 0x2f8, 0xffffffff, 0xffffffff, 0x410, 0x410, 0x410, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0x2f8}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@mcast1, @empty, [], [], 'vlan1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3a69199fb8f4af703fe193000f3e34e1c27647d8cd16b804edb9654cf89d"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f00000002c0)=""/232, &(0x7f0000000180)=0xe8) read(r3, &(0x7f0000000240)=""/123, 0x7b) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="0f20c06635010000000f22c0bad004b022eef4ba410066ed0fc7aeaadaf30fc7713bbaf80c66b834861d8e66efbafc0cb8501aefb8df000f00d8b88a008ec82f", 0x40}], 0x1, 0x0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, 0x200, 0x2, 0x0, 0x0, 0x0, 0x81, 0x200000038, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000000, 0x40000000000000, 0x0, 0x18}) 1.311667291s ago: executing program 3 (id=467): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff004}, {0x6, 0x0, 0x6}]}, 0x10) dup3(r2, r3, 0x0) write$cgroup_devices(r2, &(0x7f0000000080)={'b', ' *:* ', 'rm\x00'}, 0x9) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f00000002c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r4, 0x107, 0xc, &(0x7f00000001c0), 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) socket$packet(0x11, 0x3, 0x300) writev(0xffffffffffffffff, &(0x7f0000000080), 0x0) 1.310007391s ago: executing program 1 (id=468): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000680), 0x5, 0x519, &(0x7f0000001d40)="$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") 1.235962274s ago: executing program 2 (id=469): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000480, &(0x7f0000000380), 0x45, 0x7a5, &(0x7f0000001740)="$eJzs3c9rG1ceAPDvyPLPZNdeWNjNngwLu4YQeZ31Jlso1KWHUmgg0J6bGFkxqWUrWHKIjWkTSqGXQlt6ay859+el9Nofh17a/6MkpK0TmtJDcRn9sJVYcuTElpLm84Gx3pt50nvfeaOZJ81YE8Bjazz9k4k4EhFvJRGj9flJRPRXU9mImVq52xvr+XRKYnPzhR+TaplbG+v5aHpO6lA98/eI+Or1iKOZnfWWV9cWZovFwnI9P1lZvDBZXl07dn5xdr4wX1g6MTU9ffzk/06e2L9Yf/5u7fD1t5/998czv772t0/e/DqJmThcX9Ycx34Zj/H6OulPV+Edntnvynrms1c6KNS0BWQPsjHsUdoxffVeORKj0bdb/wx3s2UAwEF5NSI22+lruwQAeKQlteP/U71uBwDQLY3vAW5trOcbU2+/keiuG09HxFAt/sb5zdqSbP2c3VD1POjIreSOMyNJRIztQ/3jEfH+5y99mE5xQOchAVq5fCUizo6N79z/JzuuWdir/3RQZvyuvP0fdM8X6fjn/63Gf5mt8U+0GP8Mtnjv3o97v/8z1/ahmrbS8d+TTde23W6Kv26sr577U3XM15+cO18spPu2P0fERPQPpvmpXeqYuPnbzXbLmsd/P73z8gdp/enjdonMtezgnc+Zm63MPkjMzW5cifhHtlX8yVb/J23Gv6c7rOO5J954r92yNP403sa0M/6DtXk14l8t+z/ZKpPsen3iZHVzmGxsFC18OhMj7eofz273fzql9Tc+C3RD2v8ju8c/ljRfr1nu+KW3rhb79urol+0KNW//reNvvf0PJC9W0wP1eZdmK5XlqYiB5Pmd849vP7eRb5RP45/4Z+v3/27bf/qZ8GyHKyJ7/YeP7j/+g5XGP7en/t9zIoZuL/S1q7+z/p+upibqczrZ/3XawAdZdwAAAAAAAAAAAAAAAAAAAAAAAADQqUxEHI4kk9tKZzK5XO0e3n+NkUyxVK4cPVdaWZqL6r2yx6I/0/ipy9Gm30Odqv8efiN//K78fyPiLxHx7uBwNZ/Ll4pzvQ4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOoOtbn/f+r7wV63DgA4MEN9vW4BANBlSTbb6yYAAN02tKfSwwfWDgCge/Z2/AcA/ggc/wHg8XOP479/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBBnT51Kp02f9lYz6f5uYurKwuli8fmCuWF3OJKPpcvLV/IzZdK88VCLl9abPtCl2sPxVLpwnQsrVyarBTKlcny6tqZxdLKUuXM+cXZ+cKZQn/XIgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzpVX1xZmi8XCskRPEgvf1PrhYWmPxN4ScbnWfw9Le/YvEQPbe4nh3uycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4BvwcAAP//JJMi3A==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) 1.167953146s ago: executing program 4 (id=470): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x65e, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=""/4, 0x4}}], 0x1, 0x45833af92e4b39ff, 0x0) syz_mount_image$fuse(0x0, 0x0, 0xaa0088, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1a) syz_emit_ethernet(0xc6, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300"], &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x2f8, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}]}, @unspec=@CT0={0x48}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0xd, &(0x7f0000000a00)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESHEX, @ANYBLOB='A\x00'], 0x1, 0x193, &(0x7f0000000b00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) 1.097709439s ago: executing program 0 (id=471): bpf$MAP_CREATE(0xf, &(0x7f0000000180)=@base={0xb, 0x7, 0x10000, 0xe516, 0x1}, 0x48) 1.06763362s ago: executing program 0 (id=472): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000100)={[{@abort}, {@errors_remount}, {@nomblk_io_submit}, {@stripe}, {@sb={'sb', 0x3d, 0x4}}, {@minixdf}, {@grpjquota}]}, 0xfe, 0x7ab, &(0x7f0000001100)="$eJzs3c1rHOUfAPDvbF6b9vdrBMHWS3PSQummrbFVEBpPIlgo6Nk2bLYhZpMt2U1pQg4WEQQRtHgQ9OLZl3rzJqJn/wYvItJSNS1WPMjK7Euy7SbpNk2ybfL5wCTPM/PsPPOd2Xnm2Z2HnQB2raH0TybiYER8mETsr89PIqKnmuqOGK2Vu7O0mEunJCqV1/9IqmVuLy3mouk1qb31zIGI+OHdiCOZ1npL8wtTY4VCfraeHy5PXxwuzS8cnZwem8hP5GdOHh8ZOXHq+VMnNy/Wv35a2Hfjo1ee/Xr0n3eeuvbBj0mMxr76suY4NstQDNX3SU+6C2u+2+xaHg1JpzeADUlPza7aWR4HY390VVMAwE6WXv8rAMAuk6x1/e/WNQCAnanxPcDtpcVcY+rsNxLb6+bLEdFfi79xf7O2pLt+z66/eh904HZy152RJCIGN6H+AxHx2bdvfplOsUX3IQFW8/aViDg/ONTa/icrYxY26FgbZYbuyWv/YPt8n/Z/Xlit/5dZ7v/EKv2fvlXO3Y0Yiuitr66q9fzPXF9O7mmafXoTKq/3/16qjW1LA23q/y0PWhvsquf+l2YORcRkIZ+2bf+PiMPR03dhspA/vk4dh2/9e2utZUNN/b8/r771RVp/+n+lROZ6d9/drxkfK489TMzNbl6JeLp7ZWzfnZb2v3HUW/u/Z9db8aGV5KsvvvfpWsXS+NN4G1Nr/Fur8nnEM7F6/A3JuuMTh9PDf6z2d/U6vvnlk4G16m8+/umU1t/4LLAd0uM/sH78g0nzeM3S5tZ///iX3//LG5S+/3uTN6rp3vq8y2Pl8uzxiN7ktdb5J1bW1sg3yqfx11a82Bt3xb/S/iWrtH/pZ8LzbcbYfeP3rzYe/9ZK4x9/oOP/4Ilrd6a61qq/veM/Uk0drs9pp/1rdwMfZt8BAAAAAAAAAAAAAAAAAAAAAAAAQLsyEbEvkkx2OZ3JZLO1Z3g/GQOZQrFUPnKhODczHtVnZQ9GT6bxU5f7a/mk8fung035E/fkn4uIJyLi47491Xw2VyyMdzp4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjbu8bz/1O/9XV66wCALdPfMqdSqVSa87fy6y4GAB47Tdf/0U5uBwCwfVo//wMAO53rPwDsPq7/ALD7uP4DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwxc6eOZNOlb+XFnNpfvzS/NxU8dLR8XxpKjs9l8vmirMXsxPF4kQhn80Vp++3vkKxeHEkZuYuD5fzpfJwaX7h3HRxbqZ8bnJ67HScy/dsS1QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GBK8wtTY4VCfnZHJN6PiM5vRrpfH4W9sWMSvx79+cB6Za7e52082kZd/fUT4hEJufOJzrZLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+L/wIAAP//ZtQfTw==") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000400000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000430000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffbb, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="580000000102020100000000000000000a00000006000740000000003c0001800c00026800008633e9755389e3398976e0646c96d6f80100000000002c58018014000300fc01000000000000000000e0623efef3d14cc544b000000000001400041300000000000000000006ffffac1af89e59bae374d986bf4ccb3bb27f9995471ce9a67596e67747605c7b67c342af38efd2b5fb517731c61e592921be2a8b01853fa6daaa201fd9056cf58d98ad9b7a51bfc47685d0e639bcc8f62c5bd2b4116f4af1e2d1ce5fd7a8b943b8405298d635d62a3ef138fbd9ab0535e85f7468faaf0384ffcf87317bb164daa8b3e066bdedcff8"], 0x58}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957eff13d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46eee7bc145ff0a2779c025553298812978ea53a8c60f254f23344a80a0aac7b141787bad6b0ba090000005f2f3158f0d200000000000070000000000000000701000040000000afbb30c2946e41ef3167d1f6ed47aa1f52bad114a89dbed741f74a23cd8d915e2dcc74a4932646b90f90a9d3956d5cadb642ac79fcb0aae3654482188263abd27e9d57cc28032453dc75f333e1f367ab38b7e7719805a454e79802d07ec60c00b0000000000000000100000001"], 0x208}, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000001e00)=[{0x0}, {0x0}, {&(0x7f0000003480)=""/172, 0xac}], 0x3}}], 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/108, 0x6c}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/99, 0x63}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=""/148, 0x94}}, {{0x0, 0x0, &(0x7f0000001e40)=[{0x0}, {0x0}, {&(0x7f0000001d00)=""/172, 0xac}], 0x3, &(0x7f0000001e80)=""/4096, 0x1000}}], 0x4, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) close(r3) fcntl$dupfd(r4, 0x0, r4) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000080)=@v2={0x2000000, [{0x0, 0x8}, {0x800, 0x1}]}, 0x14, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0xb) 1.06284231s ago: executing program 3 (id=473): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000000540)={[{@sysvgroups}, {@usrjquota}, {@errors_remount}, {@norecovery}, {}, {@nomblk_io_submit}, {@grpquota}, {@barrier_val={'barrier', 0x3d, 0xfffffffffffffffe}}, {@user_xattr}, {@jqfmt_vfsold}]}, 0x45, 0x7bb, &(0x7f0000000c80)="$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") r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000002c0)={[{0xfff, 0x20, 0x3f, 0x81, 0x3f, 0x8, 0x8, 0x9, 0x4, 0x5f, 0x7, 0x5, 0x1}, {0x401, 0x4, 0x6, 0x0, 0x4, 0x6, 0x6, 0xff, 0x0, 0x5, 0x4a, 0x0, 0x100000000}, {0x100, 0x0, 0xba, 0x81, 0x4, 0x5, 0x11, 0x39, 0xff, 0x1, 0x0, 0x7, 0xf57}], 0x2}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x23, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x81}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xcf70}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = getpid() ppoll(&(0x7f0000000380)=[{r0, 0x1282}], 0x1, &(0x7f00000003c0), &(0x7f0000000400)={[0x96b5]}, 0x8) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0x288, 0x34, 0x20, 0x70bd28, 0x25dfdbfb, {0xf}, [@generic="5818e7a32fff0e53fadb8c8f1a6ef40d665a609b4e29d2ff9a5fc4723ddd0ca913ebf076c0f664324f236da011eae786089c54936812da059d7aed1aa32ab6bd5f08ec31c76f1b882af90591d2f9f41e14df4dc1c8b6bceac7fae97f279c2c8f25e629d5ee4a095e6d0ff7f231cc828f2d0efec0ce24ceac39f240d0fdd217ee751ec92a92b7e2bf9f9bcdf6a32d7b7548e17852d07127cdf3db49c956655591c73bf68a325d5d4e1141d007fbb1abf55822bf8bbd0ec7edce05b535af4c4240f41b93f6893109da882e408b34dc5a4711f1d33f92f2518fc671", @nested={0x196, 0x11f, 0x0, 0x1, [@typed={0x25, 0x66, 0x0, 0x0, @binary="f065187c4158a2aa52f007834048926ddf8487f594542688d24d7e162647ff02b7"}, @typed={0x41, 0x5a, 0x0, 0x0, @binary="426fccec7a6b1bba52ebeff3ad7b678c77e1dd5a9d7df6c3711f3954796a072ae3ed3c6db8045bfe240b4f6116e78df186150ff8a1db7d846fba49e61a"}, @typed={0x8, 0x51, 0x0, 0x0, @pid=r3}, @typed={0x1f, 0x9d, 0x0, 0x0, @binary="18f50cc05f3b5df6d5518a5cf6dcb36a297006dec8ae33449c106c"}, @generic="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"]}]}, 0x288}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r2}, 0x10) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x0, "f7940ef7"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @global=@item_012={0x2, 0x1, 0x1, "b8ef"}, @local=@item_012={0x2, 0x2, 0x0, "1a70"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000000)='B') r4 = open(&(0x7f0000000000)='./file1\x00', 0x6c302, 0x0) ftruncate(r4, 0x2007ffc) r5 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x2}}, 0x1c}}, 0x0) pwritev2(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x300, 0xfffff, 0x0, 0x0) sendfile(r4, r4, 0x0, 0x800000009) 852.153458ms ago: executing program 1 (id=474): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYRES8=0x0], 0x0) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x3}, 0x10) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x7, 0x8b, {0x8b, 0xb, "3a3a0b34530119d69718f663e213e973b99003ed865be139434bfdebc23cde656550f611c4ccf1449a2210102fe439785a56774cab228e9e3ead66c65c91dfb33917ffc67ac0b5b95d26d60b3d1a2f92db53ca05c1c395442ee75799bf67e333aba55db09f9f0a7448bcd1142ebdb9acee6bfe26ef8052d840d9b6df17e7af86abdd60a972c6899ac9"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x40, 0xa, 0xb7, "ac55d6ba245cb57471e0aab43eba92a71ec12b244380ef21877df9cb766437007d2811fafd77479db87d406df31ec38d8292b51ca5b276d4a4d3513fcb15b70dc8e242e4d8470e29709ebbbfae718d00926c6e6dcd03c9d93b5eb1bb725b1dccf26cdd00ff52f91f7ff7e8dbc65550a1f4b1ea1a71f91be2e8cdf1a19be9c1de8b051935ae157590dfe3cc75f57f616359946cab06df7e4f12705360e4d54659a503472b8b7211f5f667ab2c52e9bca1dc50c81704b27f"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xe8}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x232d, 0x6, 0x8, 0x7f, 0x76fd, 0x4, 0x3f, 0x26d, 0x6, 0x2, 0x81, 0x4}}, &(0x7f00000002c0)={0x20, 0x85, 0x4}, &(0x7f0000000300)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000340)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000000380)={0x20, 0x89, 0x2}}) (async) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) 319.047668ms ago: executing program 2 (id=475): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{0x0, 0xf5, &(0x7f0000001540)=[{0x0}, {&(0x7f0000000340)='#V', 0x2}], 0x2}}], 0x1, 0x6400c000) 316.156068ms ago: executing program 4 (id=476): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x0, 0x0, 0x0, 0x4}, 0x48) r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) write(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = dup2(r2, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x800, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) tkill(0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r3, 0x58, &(0x7f0000000340)}, 0x3b) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) socket$netlink(0x10, 0x3, 0xc) write$P9_RGETLOCK(r5, &(0x7f0000000040)={0x21, 0x37, 0x11, {0x0, 0x0, 0x0, 0x0, 0x3, '%+('}}, 0xe6da) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="cfd54aeb8cd3a285194a7dab9abdef489dafe6170000000000000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) 0s ago: executing program 2 (id=477): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b00000000000000001804", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x2c00, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x400, '\x00', 0x0, r4, 0x3, 0x3, 0x3}, 0x48) ioctl$USBDEVFS_REAPURBNDELAY(r4, 0x4008550d, &(0x7f0000000300)) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000580)=ANY=[@ANYBLOB="3c10020000000000fe8000000000000000000000000000aaff010000000000000000000000000001fc000000000000000000000000000001fc020000000000000000000000000000fc010000000000000000000020000001fe8000000000000000000000000000aa00000000000000000000000000000040ff010000000000000000000000000001"], 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) preadv(r8, &(0x7f0000000540)=[{&(0x7f00000020c0)=""/4096, 0x1000}], 0x1, 0x20, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000740)=0x54) kernel console output (not intermixed with test programs): nging to 7 [ 21.897855][ T124] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 21.912839][ T124] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 21.914128][ T405] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 21.922918][ T124] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 21.940680][ T124] usb 5-1: config 0 descriptor?? [ 21.950733][ T405] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 21.959348][ T405] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 21.967795][ T405] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 21.975967][ T405] EXT4-fs error (device loop1) in ext4_orphan_del:3211: error 27 [ 21.983513][ T376] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 21.984636][ T74] usb 4-1: USB disconnect, device number 2 [ 21.997090][ T405] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 22.005327][ T405] EXT4-fs error (device loop1) in ext4_orphan_cleanup:2816: error 27 [ 22.013965][ T405] EXT4-fs (loop1): 1 truncate cleaned up [ 22.019505][ T405] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 22.029440][ T405] ext4 filesystem being mounted at /root/syzkaller.l83D7w/2/file1 supports timestamps until 2038 (0x7fffffff) [ 22.058302][ T405] syz.1.11 (405) used greatest stack depth: 21752 bytes left [ 22.096968][ T429] 9pnet: p9_fd_create_tcp (429): problem connecting socket to 127.0.0.1 [ 22.126748][ T369] usb 1-1: Using ep0 maxpacket: 16 [ 22.211799][ T437] EXT4-fs (loop1): Ignoring removed orlov option [ 22.238496][ T437] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,,errors=continue [ 22.248201][ T437] ext4 filesystem being mounted at /root/syzkaller.l83D7w/5/bus supports timestamps until 2038 (0x7fffffff) [ 22.252488][ T441] EXT4-fs (loop2): Unrecognized mount option "rw" or missing value [ 22.267284][ T369] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 22.282467][ T369] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 22.291643][ T369] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 22.300546][ T369] usb 1-1: config 0 descriptor?? [ 22.392106][ T441] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.17' sets config #0 [ 22.407958][ T124] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 22.415792][ T124] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 22.425539][ T124] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 22.725516][ T388] input: syz0 as /devices/virtual/input/input5 [ 22.740567][ T388] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 22.749831][ T124] usb 5-1: USB disconnect, device number 2 [ 22.896963][ T397] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 22.929418][ T369] hid-generic 0003:0158:0100.0002: unknown main item tag 0x1 [ 22.936754][ T369] hid-generic 0003:0158:0100.0002: unexpected long global item [ 22.944275][ T369] hid-generic: probe of 0003:0158:0100.0002 failed with error -22 [ 23.140429][ T124] usb 1-1: USB disconnect, device number 2 [ 23.146299][ T454] syz.3.19 (454) used greatest stack depth: 21112 bytes left [ 23.699050][ T23] kauditd_printk_skb: 58 callbacks suppressed [ 23.699058][ T23] audit: type=1400 audit(1719906775.509:134): avc: denied { create } for pid=468 comm="syz.4.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 23.724420][ T23] audit: type=1400 audit(1719906775.529:135): avc: denied { create } for pid=461 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 23.745107][ T23] audit: type=1400 audit(1719906775.549:136): avc: denied { ioctl } for pid=472 comm="syz.4.24" path="socket:[11789]" dev="sockfs" ino=11789 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 23.770965][ T23] audit: type=1400 audit(1719906775.549:137): avc: denied { write } for pid=472 comm="syz.4.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 23.790833][ T23] audit: type=1400 audit(1719906775.549:138): avc: denied { read } for pid=461 comm="syz.2.22" name="msr" dev="devtmpfs" ino=9169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 23.815895][ T23] audit: type=1400 audit(1719906775.549:139): avc: denied { open } for pid=461 comm="syz.2.22" path="/dev/cpu/0/msr" dev="devtmpfs" ino=9169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 23.842087][ T23] audit: type=1400 audit(1719906775.569:140): avc: denied { read } for pid=472 comm="syz.4.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 23.867445][ T23] audit: type=1400 audit(1719906775.569:141): avc: denied { map_read map_write } for pid=472 comm="syz.4.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 24.046263][ T23] audit: type=1400 audit(1719906775.629:142): avc: denied { view } for pid=461 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 24.068494][ T23] audit: type=1400 audit(1719906775.629:143): avc: denied { create } for pid=461 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 24.207451][ T491] capability: warning: `syz.0.29' uses deprecated v2 capabilities in a way that may be insecure [ 24.242431][ T493] debugfs: Directory 'vcpu0' with parent '493-12' already present! [ 24.507140][ T369] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.756674][ T369] usb 2-1: Using ep0 maxpacket: 16 [ 24.786746][ T13] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.876682][ T369] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 24.887726][ T369] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 24.896487][ T369] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.905113][ T369] usb 2-1: config 0 descriptor?? [ 25.067008][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 25.507245][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 25.572103][ T13] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 25.581476][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.590651][ T13] usb 3-1: config 0 descriptor?? [ 25.610572][ T525] EXT4-fs (loop3): Ignoring removed orlov option [ 25.628306][ T525] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8002c118, mo2=0002] [ 25.638065][ T525] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,nodelalloc,debug,nogrpid,debug_want_extra_isize=0x0000000000000080,max_dir_size_kb=0x0000000000006dfe,norecovery,orlov,lazytime,,errors=continue [ 25.678933][ T519] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 25.686546][ T519] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 25.696965][ T519] F2FS-fs (loop4): invalid crc value [ 25.703711][ T519] F2FS-fs (loop4): Found nat_bits in checkpoint [ 25.728666][ T519] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 25.735498][ T519] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 25.816691][ T369] usbhid 2-1:0.0: can't add hid device: -71 [ 25.867794][ T369] usbhid: probe of 2-1:0.0 failed with error -71 [ 25.887661][ T369] usb 2-1: USB disconnect, device number 2 [ 25.936623][ T13] usbhid 3-1:0.0: can't add hid device: -71 [ 25.942398][ T13] usbhid: probe of 3-1:0.0 failed with error -71 [ 25.960093][ T13] usb 3-1: USB disconnect, device number 2 [ 25.960575][ T74] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 26.008950][ T334] attempt to access beyond end of device [ 26.008950][ T334] loop4: rw=2049, want=45104, limit=40427 [ 26.178094][ T541] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 26.187520][ T541] F2FS-fs (loop2): extra_attr or flexible_inline_xattr feature is off [ 26.231076][ T74] usb 4-1: Using ep0 maxpacket: 8 [ 26.346776][ T74] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 26.355800][ T74] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.377093][ T74] usb 4-1: config 0 descriptor?? [ 26.385148][ T553] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 26.398380][ T553] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,grpquota,barrier=0x0000000000000000,grpjquota=,bsddf, [ 26.636698][ T74] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 26.856774][ T74] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 26.871357][ T74] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffb9 [ 26.896752][ T74] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 26.936668][ T74] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 26.953793][ T74] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 26.986799][ T74] asix: probe of 4-1:0.0 failed with error -71 [ 26.996051][ T74] usb 4-1: USB disconnect, device number 3 [ 27.033112][ T589] netlink: 'syz.4.52': attribute type 5 has an invalid length. [ 27.041323][ T589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=589 comm=syz.4.52 [ 27.053383][ T589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.52'. [ 27.057595][ T581] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 27.074661][ T589] syz.4.52 (589) used greatest stack depth: 19512 bytes left [ 27.263881][ T598] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 27.361857][ T605] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 27.375818][ T605] EXT4-fs error (device loop0): ext4_orphan_get:1236: inode #15: comm syz.0.55: iget: bad i_size value: -67835469387268086 [ 27.753778][ T605] EXT4-fs error (device loop0): ext4_orphan_get:1240: comm syz.0.55: couldn't read orphan inode 15 (err -117) [ 27.767059][ T605] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,,errors=continue [ 27.777176][ T605] ext2 filesystem being mounted at /root/syzkaller.Bl11qv/7/file0 supports timestamps until 2038 (0x7fffffff) [ 28.019120][ T179] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm kworker/u4:2: bg 0: block 234: padding at end of block bitmap is not set [ 28.049431][ T179] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 28.076492][ T179] EXT4-fs (loop2): This should not happen!! Data will be lost [ 28.076492][ T179] [ 28.122719][ T179] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 28.135283][ T179] EXT4-fs (loop2): This should not happen!! Data will be lost [ 28.135283][ T179] [ 28.145412][ T179] EXT4-fs (loop2): Total free blocks count 0 [ 28.145437][ T619] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 28.151431][ T179] EXT4-fs (loop2): Free/Dirty block details [ 28.166301][ T619] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 28.167047][ T179] EXT4-fs (loop2): free_blocks=0 [ 28.188592][ T179] EXT4-fs (loop2): dirty_blocks=6144 [ 28.194043][ T179] EXT4-fs (loop2): Block reservation details [ 28.207083][ T179] EXT4-fs (loop2): i_reserved_data_blocks=384 [ 28.391266][ T619] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 28.400626][ T619] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 28.492198][ T637] netlink: 'syz.1.63': attribute type 5 has an invalid length. [ 28.526980][ T637] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=637 comm=syz.1.63 [ 28.549356][ T637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.63'. [ 28.692148][ T648] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 28.931362][ T648] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,grpquota,barrier=0x0000000000000000,grpjquota=,bsddf, [ 29.017652][ T648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=648 comm=syz.4.66 [ 29.147864][ T664] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 29.158141][ T664] EXT4-fs error (device loop4): ext4_orphan_get:1236: inode #15: comm syz.4.69: iget: bad i_size value: -67835469387268086 [ 29.170979][ T664] EXT4-fs error (device loop4): ext4_orphan_get:1240: comm syz.4.69: couldn't read orphan inode 15 (err -117) [ 29.182781][ T664] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,,errors=continue [ 29.192886][ T664] ext2 filesystem being mounted at /root/syzkaller.mnNyDn/17/file0 supports timestamps until 2038 (0x7fffffff) [ 29.308440][ T668] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 29.916927][ T675] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 29.955247][ T675] EXT4-fs error (device loop0): ext4_orphan_get:1236: inode #15: comm syz.0.72: iget: bad i_size value: -67835469387268086 [ 29.977257][ T675] EXT4-fs error (device loop0): ext4_orphan_get:1240: comm syz.0.72: couldn't read orphan inode 15 (err -117) [ 29.998267][ T675] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,,errors=continue [ 30.008070][ T675] ext2 filesystem being mounted at /root/syzkaller.Bl11qv/10/file0 supports timestamps until 2038 (0x7fffffff) [ 30.060785][ T685] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 30.149709][ T179] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm kworker/u4:2: bg 0: block 234: padding at end of block bitmap is not set [ 30.164263][ T179] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 30.176633][ T179] EXT4-fs (loop4): This should not happen!! Data will be lost [ 30.176633][ T179] [ 30.579226][ T23] kauditd_printk_skb: 51 callbacks suppressed [ 30.579242][ T23] audit: type=1400 audit(1719906782.389:195): avc: denied { getattr } for pid=691 comm="syz.0.75" name="/" dev="incremental-fs" ino=1967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 30.612546][ T23] audit: type=1400 audit(1719906782.419:196): avc: denied { write } for pid=691 comm="syz.0.75" name="/" dev="incremental-fs" ino=1967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.644884][ T23] audit: type=1400 audit(1719906782.419:197): avc: denied { add_name } for pid=691 comm="syz.0.75" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.668000][ T179] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 30.680586][ T179] EXT4-fs (loop4): This should not happen!! Data will be lost [ 30.680586][ T179] [ 30.685245][ T23] audit: type=1400 audit(1719906782.419:198): avc: denied { associate } for pid=691 comm="syz.0.75" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 30.690225][ T179] EXT4-fs (loop4): Total free blocks count 0 [ 30.716993][ T179] EXT4-fs (loop4): Free/Dirty block details [ 30.722716][ T179] EXT4-fs (loop4): free_blocks=0 [ 30.727737][ T179] EXT4-fs (loop4): dirty_blocks=6144 [ 30.732851][ T179] EXT4-fs (loop4): Block reservation details [ 30.738896][ T179] EXT4-fs (loop4): i_reserved_data_blocks=384 [ 30.936394][ T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 30.973022][ T179] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm kworker/u4:2: bg 0: block 234: padding at end of block bitmap is not set [ 30.974875][ T337] attempt to access beyond end of device [ 30.974875][ T337] loop3: rw=2049, want=45104, limit=40427 [ 31.008305][ T179] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 31.036464][ T179] EXT4-fs (loop1): This should not happen!! Data will be lost [ 31.036464][ T179] [ 31.054882][ T699] netlink: 'syz.4.76': attribute type 5 has an invalid length. [ 31.080191][ T699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=699 comm=syz.4.76 [ 31.096838][ T179] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 31.110830][ T179] EXT4-fs (loop1): This should not happen!! Data will be lost [ 31.110830][ T179] [ 31.111076][ T699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.76'. [ 31.130969][ T179] EXT4-fs (loop1): Total free blocks count 0 [ 31.148699][ T179] EXT4-fs (loop1): Free/Dirty block details [ 31.154408][ T179] EXT4-fs (loop1): free_blocks=0 [ 31.159699][ T179] EXT4-fs (loop1): dirty_blocks=6144 [ 31.164803][ T179] EXT4-fs (loop1): Block reservation details [ 31.193126][ T179] EXT4-fs (loop1): i_reserved_data_blocks=384 [ 31.246557][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 31.277904][ T703] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 31.288045][ T703] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,grpquota,barrier=0x0000000000000000,grpjquota=,bsddf, [ 31.309373][ T706] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 31.318876][ T706] EXT4-fs error (device loop2): ext4_orphan_get:1236: inode #15: comm syz.2.81: iget: bad i_size value: -67835469387268086 [ 31.331684][ T706] EXT4-fs error (device loop2): ext4_orphan_get:1240: comm syz.2.81: couldn't read orphan inode 15 (err -117) [ 31.343259][ T706] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,,errors=continue [ 31.352724][ T706] ext2 filesystem being mounted at /root/syzkaller.X05w21/18/file0 supports timestamps until 2038 (0x7fffffff) [ 31.424545][ T23] audit: type=1400 audit(1719906783.229:199): avc: denied { create } for pid=723 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.448049][ T23] audit: type=1400 audit(1719906783.259:200): avc: denied { write } for pid=723 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.473069][ T13] usb 1-1: config 1 interface 0 altsetting 63 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 31.493006][ T13] usb 1-1: config 1 interface 0 has no altsetting 0 [ 31.592083][ T729] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 31.598014][ T732] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 31.610445][ T729] EXT4-fs error (device loop3): ext4_orphan_get:1236: inode #15: comm syz.3.85: iget: bad i_size value: -67835469387268086 [ 31.623299][ T729] EXT4-fs error (device loop3): ext4_orphan_get:1240: comm syz.3.85: couldn't read orphan inode 15 (err -117) [ 31.635368][ T729] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,,errors=continue [ 31.650675][ T729] ext2 filesystem being mounted at /root/syzkaller.3GZUOf/10/file0 supports timestamps until 2038 (0x7fffffff) [ 31.710700][ T13] usb 1-1: New USB device found, idVendor=046d, idProduct=005c, bcdDevice= 0.40 [ 31.719859][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.727692][ T13] usb 1-1: Product: 㩍ꀰ﷗簡쿕䵜믏諄বč᧔ꨌ㕒앒泳ổ​⑀诬๦攢㺖쯿ꤿ庈齂槢 [ 31.745765][ T13] usb 1-1: Manufacturer: ࠐ [ 31.750352][ T13] usb 1-1: SerialNumber: 뾱兛ۊ骒镂柳 骾꺀ꪭಜꓐ泿揽ቑ❧蜯篱㟁Ø硌备ﻄ㔬쬮ﳚ맥淵Fຌ얽⢁ꑏ妍㠍匇꣧檈툅瘴埌 [ 32.387263][ T179] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm kworker/u4:2: bg 0: block 234: padding at end of block bitmap is not set [ 32.402106][ T179] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 32.414613][ T179] EXT4-fs (loop2): This should not happen!! Data will be lost [ 32.414613][ T179] [ 32.590425][ T179] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 32.626621][ T13] usbhid 1-1:1.0: can't add hid device: -71 [ 32.632386][ T13] usbhid: probe of 1-1:1.0 failed with error -71 [ 32.633331][ T179] EXT4-fs (loop2): This should not happen!! Data will be lost [ 32.633331][ T179] [ 32.649305][ T13] usb 1-1: USB disconnect, device number 3 [ 32.649339][ T179] EXT4-fs (loop2): Total free blocks count 0 [ 32.661117][ T179] EXT4-fs (loop2): Free/Dirty block details [ 32.676181][ T179] EXT4-fs (loop2): free_blocks=0 [ 32.686980][ T179] EXT4-fs (loop2): dirty_blocks=6144 [ 32.693013][ T179] EXT4-fs (loop2): Block reservation details [ 32.693986][ T757] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 32.698839][ T179] EXT4-fs (loop2): i_reserved_data_blocks=384 [ 32.776580][ T752] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 32.782731][ T752] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 32.997092][ T768] netlink: 'syz.2.90': attribute type 5 has an invalid length. [ 33.013056][ T768] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=768 comm=syz.2.90 [ 33.488106][ T774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.90'. [ 33.563232][ T179] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm kworker/u4:2: bg 0: block 234: padding at end of block bitmap is not set [ 33.566237][ T752] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 33.577909][ T179] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 33.584467][ T752] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 33.597099][ T179] EXT4-fs (loop3): This should not happen!! Data will be lost [ 33.597099][ T179] [ 33.655074][ T179] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 33.667810][ T179] EXT4-fs (loop3): This should not happen!! Data will be lost [ 33.667810][ T179] [ 33.677278][ T23] audit: type=1400 audit(1719906785.479:201): avc: denied { unmount } for pid=333 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 33.695073][ T179] EXT4-fs (loop3): Total free blocks count 0 [ 33.703130][ T179] EXT4-fs (loop3): Free/Dirty block details [ 33.711496][ T179] EXT4-fs (loop3): free_blocks=0 [ 33.719903][ T179] EXT4-fs (loop3): dirty_blocks=6144 [ 33.724996][ T179] EXT4-fs (loop3): Block reservation details [ 33.729188][ T777] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 33.731604][ T179] EXT4-fs (loop3): i_reserved_data_blocks=384 [ 33.834081][ T782] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 33.878333][ T782] EXT4-fs error (device loop0): ext4_orphan_get:1236: inode #15: comm syz.0.93: iget: bad i_size value: -67835469387268086 [ 33.891174][ T782] EXT4-fs error (device loop0): ext4_orphan_get:1240: comm syz.0.93: couldn't read orphan inode 15 (err -117) [ 33.925784][ T782] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,,errors=continue [ 34.137052][ T782] ext2 filesystem being mounted at /root/syzkaller.Bl11qv/12/file0 supports timestamps until 2038 (0x7fffffff) [ 34.180149][ T796] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 34.217547][ T796] EXT4-fs error (device loop3): ext4_orphan_get:1236: inode #15: comm syz.3.98: iget: bad i_size value: -67835469387268086 [ 34.231441][ T796] EXT4-fs error (device loop3): ext4_orphan_get:1240: comm syz.3.98: couldn't read orphan inode 15 (err -117) [ 34.244059][ T796] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,,errors=continue [ 34.254145][ T796] ext2 filesystem being mounted at /root/syzkaller.3GZUOf/14/file0 supports timestamps until 2038 (0x7fffffff) [ 34.437641][ T788] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 34.446022][ T788] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 34.457542][ T788] F2FS-fs (loop4): invalid crc value [ 34.492316][ T802] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 34.515813][ T788] F2FS-fs (loop4): Found nat_bits in checkpoint [ 34.561660][ T788] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 34.571225][ T788] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 35.062100][ T816] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 35.107553][ T816] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,grpquota,barrier=0x0000000000000000,grpjquota=,bsddf, [ 35.171027][ T23] audit: type=1400 audit(1719906786.969:202): avc: denied { watch } for pid=787 comm="syz.4.97" path="/root/syzkaller.mnNyDn/24/bus/file0" dev="loop4" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 35.197874][ T179] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm kworker/u4:2: bg 0: block 234: padding at end of block bitmap is not set [ 35.213756][ T179] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 35.214428][ T788] ====================================================== [ 35.214428][ T788] WARNING: the mand mount option is being deprecated and [ 35.214428][ T788] will be removed in v5.15! [ 35.214428][ T788] ====================================================== [ 35.226444][ T179] EXT4-fs (loop3): This should not happen!! Data will be lost [ 35.226444][ T179] [ 35.261298][ T23] audit: type=1400 audit(1719906787.019:203): avc: denied { mounton } for pid=787 comm="syz.4.97" path="/root/syzkaller.mnNyDn/24/bus/bus" dev="loop4" ino=457 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 35.277708][ T179] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 35.297734][ T179] EXT4-fs (loop3): This should not happen!! Data will be lost [ 35.297734][ T179] [ 35.307534][ T336] attempt to access beyond end of device [ 35.307534][ T336] loop1: rw=2049, want=45104, limit=40427 [ 35.318807][ T179] EXT4-fs (loop3): Total free blocks count 0 [ 35.324667][ T179] EXT4-fs (loop3): Free/Dirty block details [ 35.331094][ T179] EXT4-fs (loop3): free_blocks=0 [ 35.335875][ T179] EXT4-fs (loop3): dirty_blocks=6144 [ 35.341177][ T179] EXT4-fs (loop3): Block reservation details [ 35.364196][ T179] EXT4-fs (loop3): i_reserved_data_blocks=384 [ 35.373718][ T826] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 35.384453][ T826] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 35.437219][ T828] netlink: 'syz.2.105': attribute type 5 has an invalid length. [ 35.445472][ T828] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=828 comm=syz.2.105 [ 35.458644][ T828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.105'. [ 35.678281][ T836] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 35.700607][ T843] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 35.813645][ T843] EXT4-fs error (device loop2): ext4_orphan_get:1236: inode #15: comm syz.2.109: iget: bad i_size value: -67835469387268086 [ 35.827079][ T843] EXT4-fs error (device loop2): ext4_orphan_get:1240: comm syz.2.109: couldn't read orphan inode 15 (err -117) [ 35.839054][ T843] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,,errors=continue [ 35.848079][ T849] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 36.516300][ T843] ext2 filesystem being mounted at /root/syzkaller.X05w21/27/file0 supports timestamps until 2038 (0x7fffffff) [ 36.675796][ T179] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm kworker/u4:2: bg 0: block 234: padding at end of block bitmap is not set [ 36.705224][ T179] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 36.717964][ T179] EXT4-fs (loop1): This should not happen!! Data will be lost [ 36.717964][ T179] [ 37.218898][ T179] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 37.231420][ T179] EXT4-fs (loop1): This should not happen!! Data will be lost [ 37.231420][ T179] [ 37.281089][ T179] EXT4-fs (loop1): Total free blocks count 0 [ 37.287121][ T179] EXT4-fs (loop1): Free/Dirty block details [ 37.306536][ T179] EXT4-fs (loop1): free_blocks=0 [ 37.311275][ T179] EXT4-fs (loop1): dirty_blocks=6144 [ 37.316396][ T179] EXT4-fs (loop1): Block reservation details [ 37.322509][ T179] EXT4-fs (loop1): i_reserved_data_blocks=384 [ 37.330409][ T400] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm kworker/u4:3: bg 0: block 234: padding at end of block bitmap is not set [ 37.356252][ T400] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 37.375999][ T400] EXT4-fs (loop4): This should not happen!! Data will be lost [ 37.375999][ T400] [ 37.401722][ T864] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 37.419123][ T400] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 37.432254][ T400] EXT4-fs (loop4): This should not happen!! Data will be lost [ 37.432254][ T400] [ 37.442024][ T400] EXT4-fs (loop4): Total free blocks count 0 [ 37.462121][ T400] EXT4-fs (loop4): Free/Dirty block details [ 37.467986][ T400] EXT4-fs (loop4): free_blocks=0 [ 37.472746][ T400] EXT4-fs (loop4): dirty_blocks=6144 [ 37.481954][ T400] EXT4-fs (loop4): Block reservation details [ 37.508760][ T400] EXT4-fs (loop4): i_reserved_data_blocks=384 [ 38.149004][ T179] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm kworker/u4:2: bg 0: block 234: padding at end of block bitmap is not set [ 38.164389][ T179] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 38.177624][ T179] EXT4-fs (loop2): This should not happen!! Data will be lost [ 38.177624][ T179] [ 38.203968][ T179] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 38.216474][ T179] EXT4-fs (loop2): This should not happen!! Data will be lost [ 38.216474][ T179] [ 38.225912][ T179] EXT4-fs (loop2): Total free blocks count 0 [ 38.231751][ T179] EXT4-fs (loop2): Free/Dirty block details [ 38.237456][ T179] EXT4-fs (loop2): free_blocks=0 [ 38.242231][ T179] EXT4-fs (loop2): dirty_blocks=6144 [ 38.247346][ T179] EXT4-fs (loop2): Block reservation details [ 38.253142][ T179] EXT4-fs (loop2): i_reserved_data_blocks=384 [ 38.344414][ T23] audit: type=1400 audit(1719906790.149:204): avc: denied { setopt } for pid=886 comm="syz.3.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.365131][ T882] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 38.367457][ T23] audit: type=1400 audit(1719906790.149:205): avc: denied { ioctl } for pid=886 comm="syz.3.117" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 38.408301][ T880] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 38.433889][ T878] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 38.545733][ T878] EXT4-fs error (device loop1): ext4_orphan_get:1236: inode #15: comm syz.1.110: iget: bad i_size value: -67835469387268086 [ 38.551130][ T897] netlink: 'syz.3.118': attribute type 5 has an invalid length. [ 39.126233][ T878] EXT4-fs error (device loop1): ext4_orphan_get:1240: comm syz.1.110: couldn't read orphan inode 15 (err -117) [ 39.142842][ T878] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,,errors=continue [ 39.152587][ T878] ext2 filesystem being mounted at /root/syzkaller.l83D7w/23/file0 supports timestamps until 2038 (0x7fffffff) [ 39.180025][ T899] netlink: 24 bytes leftover after parsing attributes in process `syz.2.116'. [ 39.191878][ T913] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=913 comm=syz.3.118 [ 39.207806][ T897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.118'. [ 39.287244][ T400] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm kworker/u4:3: bg 0: block 234: padding at end of block bitmap is not set [ 39.302072][ T400] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 39.315211][ T400] EXT4-fs (loop0): This should not happen!! Data will be lost [ 39.315211][ T400] [ 39.353043][ T400] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 39.365843][ T400] EXT4-fs (loop0): This should not happen!! Data will be lost [ 39.365843][ T400] [ 39.375881][ T400] EXT4-fs (loop0): Total free blocks count 0 [ 39.381807][ T400] EXT4-fs (loop0): Free/Dirty block details [ 39.390598][ T400] EXT4-fs (loop0): free_blocks=0 [ 39.395495][ T400] EXT4-fs (loop0): dirty_blocks=6144 [ 39.400775][ T400] EXT4-fs (loop0): Block reservation details [ 39.418362][ T400] EXT4-fs (loop0): i_reserved_data_blocks=384 [ 39.434108][ T920] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 39.525273][ T932] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 40.250298][ T400] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm kworker/u4:3: bg 0: block 234: padding at end of block bitmap is not set [ 40.265739][ T400] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 40.278639][ T400] EXT4-fs (loop2): This should not happen!! Data will be lost [ 40.278639][ T400] [ 40.320758][ T400] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 40.333362][ T400] EXT4-fs (loop2): This should not happen!! Data will be lost [ 40.333362][ T400] [ 40.344215][ T400] EXT4-fs (loop2): Total free blocks count 0 [ 40.359887][ T952] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 40.373888][ T400] EXT4-fs (loop2): Free/Dirty block details [ 40.374692][ T950] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 40.379650][ T400] EXT4-fs (loop2): free_blocks=0 [ 40.393673][ T400] EXT4-fs (loop2): dirty_blocks=6144 [ 40.398974][ T400] EXT4-fs (loop2): Block reservation details [ 40.404776][ T400] EXT4-fs (loop2): i_reserved_data_blocks=384 [ 40.417648][ T952] EXT4-fs error (device loop1): ext4_orphan_get:1236: inode #15: comm syz.1.130: iget: bad i_size value: -67835469387268086 [ 40.430760][ T952] EXT4-fs error (device loop1): ext4_orphan_get:1240: comm syz.1.130: couldn't read orphan inode 15 (err -117) [ 40.443081][ T952] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,,errors=continue [ 40.452747][ T952] ext2 filesystem being mounted at /root/syzkaller.l83D7w/26/file0 supports timestamps until 2038 (0x7fffffff) [ 40.506604][ T13] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 41.097834][ T965] EXT4-fs (loop1): Unrecognized mount option " [ 41.097834][ T965] " or missing value [ 41.141014][ T400] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm kworker/u4:3: bg 0: block 234: padding at end of block bitmap is not set [ 41.155973][ T400] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 41.175484][ T400] EXT4-fs (loop3): This should not happen!! Data will be lost [ 41.175484][ T400] [ 41.210667][ T826] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 41.223730][ T826] EXT4-fs (loop3): This should not happen!! Data will be lost [ 41.223730][ T826] [ 41.226552][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 41.236864][ T826] EXT4-fs (loop3): Total free blocks count 0 [ 41.243969][ T826] EXT4-fs (loop3): Free/Dirty block details [ 41.250262][ T826] EXT4-fs (loop3): free_blocks=0 [ 41.258868][ T826] EXT4-fs (loop3): dirty_blocks=6144 [ 41.259077][ T971] netlink: 'syz.1.133': attribute type 5 has an invalid length. [ 41.263966][ T826] EXT4-fs (loop3): Block reservation details [ 41.276934][ T971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=971 comm=syz.1.133 [ 41.282790][ T968] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 41.290188][ T971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.133'. [ 41.298674][ T826] EXT4-fs (loop3): i_reserved_data_blocks=384 [ 41.910676][ T13] usb 1-1: config 0 has no interfaces? [ 41.917112][ T983] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 41.979484][ T992] FAT-fs (loop3): Directory bread(block 64) failed [ 41.985877][ T992] FAT-fs (loop3): Directory bread(block 65) failed [ 41.992471][ T992] FAT-fs (loop3): Directory bread(block 66) failed [ 41.999076][ T992] FAT-fs (loop3): Directory bread(block 67) failed [ 42.024349][ T13] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 42.033620][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 42.041463][ T13] usb 1-1: SerialNumber: syz [ 42.046394][ T992] FAT-fs (loop3): Directory bread(block 68) failed [ 42.053404][ T13] usb 1-1: config 0 descriptor?? [ 42.054580][ T400] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm kworker/u4:3: bg 0: block 234: padding at end of block bitmap is not set [ 42.058418][ T992] FAT-fs (loop3): Directory bread(block 69) failed [ 42.074975][ T400] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 42.079407][ T992] FAT-fs (loop3): Directory bread(block 70) failed [ 42.100846][ T992] FAT-fs (loop3): Directory bread(block 71) failed [ 42.108388][ T992] FAT-fs (loop3): Directory bread(block 72) failed [ 42.114806][ T992] FAT-fs (loop3): Directory bread(block 73) failed [ 42.140867][ T400] EXT4-fs (loop2): This should not happen!! Data will be lost [ 42.140867][ T400] [ 42.470426][ T23] audit: type=1400 audit(1719906794.279:206): avc: denied { mount } for pid=991 comm="syz.3.132" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 42.518745][ T943] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 42.537075][ T826] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 42.566687][ T826] EXT4-fs (loop2): This should not happen!! Data will be lost [ 42.566687][ T826] [ 42.588276][ T377] usb 1-1: USB disconnect, device number 4 [ 42.606896][ T826] EXT4-fs (loop2): Total free blocks count 0 [ 42.612683][ T826] EXT4-fs (loop2): Free/Dirty block details [ 42.624928][ T826] EXT4-fs (loop2): free_blocks=0 [ 42.629738][ T826] EXT4-fs (loop2): dirty_blocks=6144 [ 42.642727][ T826] EXT4-fs (loop2): Block reservation details [ 42.644457][ T400] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm kworker/u4:3: bg 0: block 234: padding at end of block bitmap is not set [ 42.649046][ T826] EXT4-fs (loop2): i_reserved_data_blocks=384 [ 42.664178][ T400] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 42.693017][ T400] EXT4-fs (loop4): This should not happen!! Data will be lost [ 42.693017][ T400] [ 42.719423][ T400] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 42.732071][ T400] EXT4-fs (loop4): This should not happen!! Data will be lost [ 42.732071][ T400] [ 42.742294][ T400] EXT4-fs (loop4): Total free blocks count 0 [ 42.748108][ T400] EXT4-fs (loop4): Free/Dirty block details [ 42.753873][ T400] EXT4-fs (loop4): free_blocks=0 [ 42.758613][ T400] EXT4-fs (loop4): dirty_blocks=6144 [ 42.763736][ T400] EXT4-fs (loop4): Block reservation details [ 42.769552][ T400] EXT4-fs (loop4): i_reserved_data_blocks=384 [ 42.835184][ T23] audit: type=1400 audit(1719906794.639:207): avc: denied { read } for pid=1001 comm="syz.2.138" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 42.846649][ T875] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 42.857663][ T23] audit: type=1400 audit(1719906794.639:208): avc: denied { open } for pid=1001 comm="syz.2.138" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 42.931257][ T23] audit: type=1400 audit(1719906794.739:209): avc: denied { unmount } for pid=336 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 42.999385][ T1007] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 43.010096][ T1007] EXT4-fs error (device loop1): ext4_orphan_get:1236: inode #15: comm syz.1.141: iget: bad i_size value: -67835469387268086 [ 43.023129][ T1007] EXT4-fs error (device loop1): ext4_orphan_get:1240: comm syz.1.141: couldn't read orphan inode 15 (err -117) [ 43.035267][ T1007] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,,errors=continue [ 43.044728][ T1007] ext2 filesystem being mounted at /root/syzkaller.l83D7w/31/file0 supports timestamps until 2038 (0x7fffffff) [ 43.106563][ T875] usb 4-1: Using ep0 maxpacket: 8 [ 43.156565][ T377] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 43.192919][ T1013] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 43.226636][ T875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.242678][ T875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.252474][ T875] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 43.278590][ T875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.283729][ T1016] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 43.289444][ T875] usb 4-1: config 0 descriptor?? [ 43.379891][ T875] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 43.389678][ T875] usb 4-1: Detected SIO [ 43.393714][ T875] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 1 [ 43.404168][ T875] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 44.114845][ T826] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm kworker/u4:4: bg 0: block 234: padding at end of block bitmap is not set [ 44.177249][ T826] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 44.210791][ T377] usb 3-1: device descriptor read/64, error 18 [ 44.217392][ T826] EXT4-fs (loop1): This should not happen!! Data will be lost [ 44.217392][ T826] [ 44.244867][ T826] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 44.290834][ T826] EXT4-fs (loop1): This should not happen!! Data will be lost [ 44.290834][ T826] [ 44.303926][ T875] usb 4-1: USB disconnect, device number 4 [ 44.306771][ T826] EXT4-fs (loop1): Total free blocks count 0 [ 44.310752][ T875] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 44.318446][ T826] EXT4-fs (loop1): Free/Dirty block details [ 44.325654][ T875] ftdi_sio 4-1:0.0: device disconnected [ 44.331853][ T826] EXT4-fs (loop1): free_blocks=0 [ 44.422651][ T826] EXT4-fs (loop1): dirty_blocks=6144 [ 44.427899][ T826] EXT4-fs (loop1): Block reservation details [ 44.433725][ T826] EXT4-fs (loop1): i_reserved_data_blocks=384 [ 44.440417][ T1034] netlink: 'syz.4.148': attribute type 5 has an invalid length. [ 44.448452][ T1034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1034 comm=syz.4.148 [ 44.461010][ T1034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.148'. [ 44.539342][ T1043] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 44.646576][ T377] usb 3-1: device descriptor read/64, error 18 [ 44.936614][ T377] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 45.039980][ T1055] FAT-fs (loop1): Directory bread(block 64) failed [ 45.046326][ T1055] FAT-fs (loop1): Directory bread(block 65) failed [ 45.052842][ T1055] FAT-fs (loop1): Directory bread(block 66) failed [ 45.059226][ T1055] FAT-fs (loop1): Directory bread(block 67) failed [ 45.065502][ T1055] FAT-fs (loop1): Directory bread(block 68) failed [ 45.071843][ T1055] FAT-fs (loop1): Directory bread(block 69) failed [ 45.078188][ T1055] FAT-fs (loop1): Directory bread(block 70) failed [ 45.084483][ T1055] FAT-fs (loop1): Directory bread(block 71) failed [ 45.090897][ T1055] FAT-fs (loop1): Directory bread(block 72) failed [ 45.097171][ T1055] FAT-fs (loop1): Directory bread(block 73) failed [ 45.206574][ T377] usb 3-1: device descriptor read/64, error 18 [ 45.239032][ T1059] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 45.276733][ T1059] EXT4-fs error (device loop0): ext4_orphan_get:1236: inode #15: comm syz.0.152: iget: bad i_size value: -67835469387268086 [ 45.289648][ T1059] EXT4-fs error (device loop0): ext4_orphan_get:1240: comm syz.0.152: couldn't read orphan inode 15 (err -117) [ 45.301614][ T1059] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,,errors=continue [ 45.311287][ T1059] ext2 filesystem being mounted at /root/syzkaller.Bl11qv/20/file0 supports timestamps until 2038 (0x7fffffff) [ 45.380778][ T400] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm kworker/u4:3: bg 0: block 234: padding at end of block bitmap is not set [ 45.395926][ T400] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 45.408704][ T400] EXT4-fs (loop4): This should not happen!! Data will be lost [ 45.408704][ T400] [ 45.492897][ T400] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 45.505742][ T400] EXT4-fs (loop4): This should not happen!! Data will be lost [ 45.505742][ T400] [ 45.517098][ T400] EXT4-fs (loop4): Total free blocks count 0 [ 45.523007][ T400] EXT4-fs (loop4): Free/Dirty block details [ 45.529810][ T400] EXT4-fs (loop4): free_blocks=0 [ 45.534629][ T400] EXT4-fs (loop4): dirty_blocks=6144 [ 45.540817][ T400] EXT4-fs (loop4): Block reservation details [ 45.547070][ T400] EXT4-fs (loop4): i_reserved_data_blocks=384 [ 45.616571][ T377] usb 3-1: device descriptor read/64, error 18 [ 45.732537][ T1080] netlink: 'syz.1.160': attribute type 5 has an invalid length. [ 45.736636][ T377] usb usb3-port1: attempt power cycle [ 45.741893][ T1080] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1080 comm=syz.1.160 [ 45.764431][ T1080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.160'. [ 45.901952][ T1094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.163'. [ 45.911143][ T1094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1094 comm=syz.2.163 [ 45.948195][ T23] audit: type=1400 audit(1719906797.759:210): avc: denied { bind } for pid=1085 comm="syz.4.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.598033][ T1106] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 46.623706][ T1106] EXT4-fs error (device loop0): ext4_orphan_get:1236: inode #15: comm syz.0.166: iget: bad i_size value: -67835469387268086 [ 46.637104][ T1106] EXT4-fs error (device loop0): ext4_orphan_get:1240: comm syz.0.166: couldn't read orphan inode 15 (err -117) [ 46.649312][ T1106] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,,errors=continue [ 46.658949][ T1106] ext2 filesystem being mounted at /root/syzkaller.Bl11qv/24/file0 supports timestamps until 2038 (0x7fffffff) [ 46.682369][ T1112] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 47.091798][ T1130] netlink: 'syz.3.173': attribute type 5 has an invalid length. [ 47.119901][ T1130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1130 comm=syz.3.173 [ 47.146397][ T1130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.173'. [ 47.364259][ T1147] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 47.378766][ T1147] EXT4-fs error (device loop3): ext4_orphan_get:1236: inode #15: comm syz.3.179: iget: bad i_size value: -67835469387268086 [ 47.391602][ T1147] EXT4-fs error (device loop3): ext4_orphan_get:1240: comm syz.3.179: couldn't read orphan inode 15 (err -117) [ 47.403272][ T1147] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,,errors=continue [ 47.413939][ T1147] ext2 filesystem being mounted at /root/syzkaller.3GZUOf/28/file0 supports timestamps until 2038 (0x7fffffff) [ 47.458904][ T1151] EXT4-fs error (device loop0): ext4_orphan_get:1236: inode #16: comm syz.0.180: casefold flag without casefold feature [ 47.472126][ T1151] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 47.492483][ T1151] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 47.513265][ T1151] Quota error (device loop0): write_blk: dquota write failed [ 47.603614][ T1151] Quota error (device loop0): qtree_write_dquot: Error -27 occurred while creating quota [ 47.618485][ T826] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm kworker/u4:4: bg 0: block 234: padding at end of block bitmap is not set [ 47.634282][ T826] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 47.636133][ T1151] EXT4-fs (loop0): 1 orphan inode deleted [ 47.646795][ T826] EXT4-fs (loop4): This should not happen!! Data will be lost [ 47.646795][ T826] [ 47.661498][ T826] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 47.663523][ T1151] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 47.674360][ T826] EXT4-fs (loop4): This should not happen!! Data will be lost [ 47.674360][ T826] [ 47.683730][ T1151] ext4 filesystem being mounted at /root/syzkaller.Bl11qv/29/file1 supports timestamps until 2038 (0x7fffffff) [ 47.751662][ T826] EXT4-fs (loop4): Total free blocks count 0 [ 47.757678][ T826] EXT4-fs (loop4): Free/Dirty block details [ 47.759008][ T1165] EXT4-fs (loop1): 1 orphan inode deleted [ 47.763511][ T826] EXT4-fs (loop4): free_blocks=0 [ 47.769415][ T1165] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 47.774703][ T826] EXT4-fs (loop4): dirty_blocks=6144 [ 47.782791][ T1165] ext4 filesystem being mounted at /root/syzkaller.l83D7w/42/file1 supports timestamps until 2038 (0x7fffffff) [ 47.788440][ T826] EXT4-fs (loop4): Block reservation details [ 47.805857][ T826] EXT4-fs (loop4): i_reserved_data_blocks=384 [ 47.855472][ T1176] netlink: 'syz.0.187': attribute type 5 has an invalid length. [ 47.863499][ T1176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1176 comm=syz.0.187 [ 47.876383][ T1176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.187'. [ 48.027831][ T23] audit: type=1400 audit(1719906799.839:211): avc: denied { unlink } for pid=333 comm="syz-executor" name="file0" dev="sda1" ino=1978 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 48.067012][ T23] audit: type=1400 audit(1719906799.879:212): avc: denied { create } for pid=1188 comm="syz.0.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.099718][ T23] audit: type=1400 audit(1719906799.899:213): avc: denied { setattr } for pid=1188 comm="syz.0.191" path="socket:[15808]" dev="sockfs" ino=15808 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.146567][ T23] audit: type=1400 audit(1719906799.949:214): avc: denied { write } for pid=1190 comm="syz.0.192" name="kvm" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 48.251104][ T1181] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (67108865, 24) [ 48.268605][ T1181] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 48.279338][ T1181] F2FS-fs (loop4): invalid crc value [ 48.285691][ T1181] F2FS-fs (loop4): Found nat_bits in checkpoint [ 48.318354][ T1196] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 48.331410][ T1181] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 48.339444][ T1196] EXT4-fs error (device loop0): ext4_orphan_get:1236: inode #15: comm syz.0.193: iget: bad i_size value: -67835469387268086 [ 48.342417][ T1181] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 48.353448][ T1196] EXT4-fs error (device loop0): ext4_orphan_get:1240: comm syz.0.193: couldn't read orphan inode 15 (err -117) [ 48.416422][ T1196] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,,errors=continue [ 48.425901][ T1196] ext2 filesystem being mounted at /root/syzkaller.Bl11qv/35/file0 supports timestamps until 2038 (0x7fffffff) [ 48.528214][ T334] attempt to access beyond end of device [ 48.528214][ T334] loop4: rw=2049, want=45104, limit=40427 [ 48.550606][ T1220] netlink: 'syz.2.199': attribute type 5 has an invalid length. [ 48.563547][ T1220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1220 comm=syz.2.199 [ 48.576359][ T1220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.199'. [ 48.587648][ T1210] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 48.634007][ T1216] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 48.747988][ T1241] process 'syz.2.203' launched './file0' with NULL argv: empty string added [ 48.781199][ T23] audit: type=1400 audit(1719906800.589:215): avc: denied { create } for pid=1243 comm="syz.4.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 49.084065][ T23] audit: type=1400 audit(1719906800.889:216): avc: denied { block_suspend } for pid=1251 comm="syz.2.206" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 49.315965][ T1263] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 49.324163][ T23] audit: type=1400 audit(1719906801.129:217): avc: denied { connect } for pid=1259 comm="syz.2.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 49.344606][ T1260] Zero length message leads to an empty skb [ 49.358542][ T1263] EXT4-fs error (device loop0): ext4_orphan_get:1236: inode #15: comm syz.0.209: iget: bad i_size value: -67835469387268086 [ 49.378904][ T1263] EXT4-fs error (device loop0): ext4_orphan_get:1240: comm syz.0.209: couldn't read orphan inode 15 (err -117) [ 49.401092][ T1263] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,,errors=continue [ 49.467420][ T1263] ext2 filesystem being mounted at /root/syzkaller.Bl11qv/40/file0 supports timestamps until 2038 (0x7fffffff) [ 49.481079][ T826] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm kworker/u4:4: bg 0: block 234: padding at end of block bitmap is not set [ 49.495882][ T826] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 49.508662][ T826] EXT4-fs (loop3): This should not happen!! Data will be lost [ 49.508662][ T826] [ 49.535437][ T826] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 49.547999][ T826] EXT4-fs (loop3): This should not happen!! Data will be lost [ 49.547999][ T826] [ 49.557942][ T826] EXT4-fs (loop3): Total free blocks count 0 [ 49.563786][ T826] EXT4-fs (loop3): Free/Dirty block details [ 49.571442][ T826] EXT4-fs (loop3): free_blocks=0 [ 49.576332][ T826] EXT4-fs (loop3): dirty_blocks=2384 [ 49.581697][ T826] EXT4-fs (loop3): Block reservation details [ 49.587712][ T826] EXT4-fs (loop3): i_reserved_data_blocks=149 [ 49.615125][ T826] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm kworker/u4:4: bg 0: block 234: padding at end of block bitmap is not set [ 49.629623][ T826] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 49.642227][ T826] EXT4-fs (loop1): This should not happen!! Data will be lost [ 49.642227][ T826] [ 49.715579][ T826] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 49.745420][ T826] EXT4-fs (loop1): This should not happen!! Data will be lost [ 49.745420][ T826] [ 49.777424][ T826] EXT4-fs (loop1): Total free blocks count 0 [ 49.789945][ T826] EXT4-fs (loop1): Free/Dirty block details [ 49.795815][ T826] EXT4-fs (loop1): free_blocks=0 [ 49.800637][ T826] EXT4-fs (loop1): dirty_blocks=2592 [ 49.803475][ T1289] netlink: 'syz.4.213': attribute type 5 has an invalid length. [ 49.805714][ T826] EXT4-fs (loop1): Block reservation details [ 49.805720][ T826] EXT4-fs (loop1): i_reserved_data_blocks=162 [ 49.890143][ T1289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1289 comm=syz.4.213 [ 49.902488][ T1289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.213'. [ 50.262161][ T1320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1320 comm=syz.4.222 [ 50.539187][ T1326] netlink: 'syz.1.225': attribute type 5 has an invalid length. [ 50.547083][ T1326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1326 comm=syz.1.225 [ 50.559876][ T1326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.225'. [ 50.649707][ T1331] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 50.666722][ T1331] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 50.678262][ T1331] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 50.699949][ T1331] journal_init_common: Cannot get buffer for journal superblock [ 50.707733][ T1331] EXT4-fs (loop1): Could not load journal inode [ 50.831522][ T1352] kvm [1351]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x2 [ 51.078861][ T1360] EXT4-fs (loop2): Test dummy encryption mode enabled [ 51.085489][ T1360] EXT4-fs (loop2): Ignoring removed orlov option [ 51.091761][ T1360] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 51.102074][ T1364] netlink: 'syz.0.236': attribute type 5 has an invalid length. [ 51.110077][ T1360] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 51.110279][ T1364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1364 comm=syz.0.236 [ 51.132029][ T1364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.236'. [ 51.191069][ T23] kauditd_printk_skb: 14 callbacks suppressed [ 51.191079][ T23] audit: type=1400 audit(1719906802.999:232): avc: denied { lock } for pid=1374 comm="syz.0.239" path="socket:[16207]" dev="sockfs" ino=16207 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 51.228153][ T1370] EXT4-fs (loop4): Ignoring removed oldalloc option [ 51.256283][ T1370] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 51.267341][ T1370] EXT4-fs (loop4): orphan cleanup on readonly fs [ 51.274511][ T1370] EXT4-fs error (device loop4): __ext4_get_inode_loc:4710: comm syz.4.238: Invalid inode table block 0 in block_group 0 [ 51.287412][ T1370] EXT4-fs (loop4): Remounting filesystem read-only [ 51.296587][ T1370] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 51.311261][ T1370] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:455: comm syz.4.238: Invalid block bitmap block 0 in block_group 0 [ 51.324586][ T1370] Quota error (device loop4): write_blk: dquota write failed [ 51.331892][ T1370] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 51.343873][ T1370] EXT4-fs (loop4): 1 truncate cleaned up [ 51.350026][ T1370] EXT4-fs (loop4): mounted filesystem without journal. Opts: oldalloc,stripe=0x0000000000000000,grpid,errors=remount-ro,noblock_validity,block_validity,journal_ioprio=0x0000000000000000,lazytime, [ 51.369182][ T23] audit: type=1400 audit(1719906803.179:233): avc: denied { mount } for pid=1368 comm="syz.4.238" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 51.436097][ T1382] EXT4-fs (loop3): Unrecognized mount option "uid=00000000000000000000" or missing value [ 51.440286][ T1370] netlink: 12 bytes leftover after parsing attributes in process `syz.4.238'. [ 51.470788][ T23] audit: type=1400 audit(1719906803.279:234): avc: denied { getopt } for pid=1368 comm="syz.4.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.490864][ T23] audit: type=1400 audit(1719906803.279:235): avc: denied { ioctl } for pid=1368 comm="syz.4.238" path="socket:[17455]" dev="sockfs" ino=17455 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.515262][ T23] audit: type=1400 audit(1719906803.279:236): avc: denied { getopt } for pid=1368 comm="syz.4.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.534536][ T23] audit: type=1400 audit(1719906803.299:237): avc: denied { unmount } for pid=334 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 51.554289][ T23] audit: type=1400 audit(1719906803.319:238): avc: denied { write } for pid=1381 comm="syz.3.242" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 51.577216][ T23] audit: type=1400 audit(1719906803.319:239): avc: denied { ioctl } for pid=1381 comm="syz.3.242" path="/dev/binderfs/binder-control" dev="binder" ino=2 ioctlcmd=0x942b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 51.758478][ T1396] overlayfs: invalid origin (790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 51.759157][ T1400] netlink: 'syz.4.247': attribute type 5 has an invalid length. [ 51.782469][ T1400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1400 comm=syz.4.247 [ 51.796379][ T1400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.247'. [ 52.670978][ T1441] netlink: 'syz.1.260': attribute type 5 has an invalid length. [ 52.687499][ T1441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1441 comm=syz.1.260 [ 52.700022][ T1441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.260'. [ 52.795062][ T875] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 53.067845][ T1452] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 53.206617][ T875] usb 1-1: config 255 has an invalid descriptor of length 160, skipping remainder of the config [ 53.303001][ T875] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 53.318087][ T875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 53.326230][ T875] usb 1-1: SerialNumber: syz [ 53.400504][ T1457] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 53.566560][ T377] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 53.620298][ T1439] [ 53.622448][ T1439] ********************************************************** [ 53.630702][ T1439] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 53.638184][ T1439] ** ** [ 53.645471][ T1439] ** trace_printk() being used. Allocating extra memory. ** [ 53.652960][ T1439] ** ** [ 53.660760][ T1439] ** This means that this is a DEBUG kernel and it is ** [ 53.673656][ T1439] ** unsafe for production use. ** [ 53.682439][ T1439] ** ** [ 53.689856][ T1439] ** If you see this message and you are not debugging ** [ 53.701415][ T1439] ** the kernel, report this immediately to your vendor! ** [ 53.709294][ T1439] ** ** [ 53.716804][ T1439] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 53.724060][ T1439] ********************************************************** [ 54.026670][ T377] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.055585][ T826] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm kworker/u4:4: bg 0: block 234: padding at end of block bitmap is not set [ 54.070348][ T826] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 54.082662][ T826] EXT4-fs (loop4): This should not happen!! Data will be lost [ 54.082662][ T826] [ 54.102107][ T826] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 54.114694][ T826] EXT4-fs (loop4): This should not happen!! Data will be lost [ 54.114694][ T826] [ 54.124170][ T826] EXT4-fs (loop4): Total free blocks count 0 [ 54.130084][ T826] EXT4-fs (loop4): Free/Dirty block details [ 54.135763][ T826] EXT4-fs (loop4): free_blocks=0 [ 54.140559][ T826] EXT4-fs (loop4): dirty_blocks=6144 [ 54.145666][ T826] EXT4-fs (loop4): Block reservation details [ 54.151585][ T826] EXT4-fs (loop4): i_reserved_data_blocks=384 [ 54.206678][ T377] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 54.215570][ T377] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.223365][ T377] usb 4-1: Product: syz [ 54.227477][ T377] usb 4-1: Manufacturer: syz [ 54.231856][ T377] usb 4-1: SerialNumber: syz [ 54.450728][ T1483] hub 6-0:1.0: USB hub found [ 54.456075][ T1483] hub 6-0:1.0: 1 port detected [ 54.670180][ T1487] netlink: 'syz.0.272': attribute type 5 has an invalid length. [ 54.683628][ T1487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1487 comm=syz.0.272 [ 54.696844][ T1487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.272'. [ 55.161388][ T1494] F2FS-fs (loop4): invalid crc value [ 55.175183][ T1494] F2FS-fs (loop4): Found nat_bits in checkpoint [ 55.235275][ T1494] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 55.275599][ T334] F2FS-fs (loop4): invalid namelen(0), ino:83886088, run fsck to fix. [ 55.369512][ T1510] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 55.396825][ T1510] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm syz.1.277: bg 0: block 234: padding at end of block bitmap is not set [ 55.636186][ T1522] fscrypt (sda1, inode 1972): Can't use IV_INO_LBLK_64 policy on filesystem 'sda1' because it doesn't have stable inode numbers [ 55.746580][ T371] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 55.827907][ T1528] hub 6-0:1.0: USB hub found [ 55.833165][ T1528] hub 6-0:1.0: 1 port detected [ 56.116567][ T371] usb 2-1: Using ep0 maxpacket: 8 [ 56.166671][ T377] cdc_ncm 4-1:1.0: bind() failure [ 56.186979][ T377] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 56.206659][ T377] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 56.214066][ T377] usb 4-1: USB disconnect, device number 5 [ 56.255951][ T1537] netlink: 'syz.2.285': attribute type 5 has an invalid length. [ 56.263789][ T1537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1537 comm=syz.2.285 [ 56.276269][ T371] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 56.286729][ T1537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.285'. [ 56.286989][ T371] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.306178][ T371] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.318278][ T371] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 56.331330][ T371] usb 2-1: New USB device found, idVendor=056a, idProduct=00fb, bcdDevice= 0.00 [ 56.340425][ T371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.348973][ T371] usb 2-1: config 0 descriptor?? [ 56.606611][ T372] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 56.939693][ T1561] FAT-fs (loop0): Unrecognized mount option "uid=" or missing value [ 56.966696][ T372] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.976676][ T372] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 56.985514][ T372] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.997839][ T372] usb 3-1: config 0 descriptor?? [ 57.023546][ T23] kauditd_printk_skb: 13 callbacks suppressed [ 57.023555][ T23] audit: type=1400 audit(1719906808.829:253): avc: denied { read } for pid=1564 comm="syz.4.292" name="file0" dev="incremental-fs" ino=1978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.052594][ T23] audit: type=1400 audit(1719906808.829:254): avc: denied { open } for pid=1564 comm="syz.4.292" path="/root/syzkaller.mnNyDn/65/bus/file0" dev="incremental-fs" ino=1978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.057219][ T372] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 57.096638][ T371] usbhid 2-1:0.0: can't add hid device: -71 [ 57.102383][ T371] usbhid: probe of 2-1:0.0 failed with error -71 [ 57.111130][ T371] usb 2-1: USB disconnect, device number 3 [ 57.181895][ T1563] 9pnet: Insufficient options for proto=fd [ 57.218902][ T1568] EXT4-fs (loop4): 1 orphan inode deleted [ 57.224439][ T1568] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 57.234535][ T1568] ext4 filesystem being mounted at /root/syzkaller.mnNyDn/66/file1 supports timestamps until 2038 (0x7fffffff) [ 57.278028][ T377] usb 3-1: USB disconnect, device number 6 [ 57.657514][ T1578] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.664359][ T1578] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.671713][ T1578] device bridge_slave_0 entered promiscuous mode [ 57.679077][ T1578] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.685912][ T1578] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.693336][ T1578] device bridge_slave_1 entered promiscuous mode [ 57.746673][ T371] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 57.760572][ T1584] netlink: 'syz.1.296': attribute type 5 has an invalid length. [ 57.768611][ T1584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1584 comm=syz.1.296 [ 57.780933][ T1584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.296'. [ 57.820661][ T1578] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.827542][ T1578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.834687][ T1578] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.841525][ T1578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.891607][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.899089][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.906044][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.927212][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.927244][ T1598] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,quota,,errors=continue [ 57.935435][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.967481][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.989438][ T23] audit: type=1400 audit(1719906809.799:255): avc: denied { execute } for pid=1597 comm="syz.2.300" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=19041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.997111][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.036805][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.043640][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.051245][ T23] audit: type=1400 audit(1719906809.859:256): avc: denied { getopt } for pid=1597 comm="syz.2.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 58.078295][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.086939][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.107992][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.116136][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.124770][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.143381][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.157220][ T371] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.168672][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.187373][ T23] audit: type=1400 audit(1719906809.999:257): avc: denied { mounton } for pid=1578 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=11471 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 58.327631][ T179] device bridge_slave_1 left promiscuous mode [ 58.342737][ T179] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.351935][ T179] device bridge_slave_0 left promiscuous mode [ 58.358610][ T371] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.376310][ T179] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.383480][ T371] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.442945][ T23] audit: type=1400 audit(1719906810.219:258): avc: denied { mounton } for pid=1615 comm="syz.3.304" path="/root/syzkaller.euQvwn/1/file1/bus" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 58.465652][ T371] usb 5-1: Product: syz [ 58.470066][ T23] audit: type=1400 audit(1719906810.229:259): avc: denied { append } for pid=1615 comm="syz.3.304" path="/root/syzkaller.euQvwn/1/file1/cgroup.controllers" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 58.471795][ T371] usb 5-1: Manufacturer: syz [ 58.501314][ T371] usb 5-1: SerialNumber: syz [ 58.559787][ T875] cdc_ether: probe of 1-1:255.0 failed with error -22 [ 58.716683][ T23] audit: type=1400 audit(1719906810.429:260): avc: denied { read } for pid=1618 comm="syz.2.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.837381][ T1621] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 58.850828][ T1621] FAT-fs (loop3): Filesystem has been set read-only [ 58.970981][ T23] audit: type=1400 audit(1719906810.779:261): avc: denied { read } for pid=1635 comm="syz-executor" dev="nsfs" ino=4026531999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 59.016556][ T23] audit: type=1400 audit(1719906810.779:262): avc: denied { open } for pid=1635 comm="syz-executor" path="net:[4026531999]" dev="nsfs" ino=4026531999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 59.056579][ T377] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 59.063921][ T74] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 59.075495][ T1635] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.082884][ T1635] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.090345][ T1635] device bridge_slave_0 entered promiscuous mode [ 59.098209][ T1635] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.105030][ T1635] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.112465][ T1635] device bridge_slave_1 entered promiscuous mode [ 59.181180][ T1635] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.188042][ T1635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.195142][ T1635] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.201933][ T1635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.234613][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.243633][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.251198][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.268715][ T1626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.277053][ T1626] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.283872][ T1626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.291473][ T1626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.299755][ T1626] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.306594][ T1626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.324830][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.332393][ T74] usb 3-1: Using ep0 maxpacket: 8 [ 59.337758][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.356774][ T1633] F2FS-fs (loop0): Test dummy encryption mode enabled [ 59.359150][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.381773][ T1633] F2FS-fs (loop0): Found nat_bits in checkpoint [ 59.383845][ T1626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.407252][ T1626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.416735][ T377] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.426638][ T1633] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 59.427724][ T377] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.445114][ T377] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 59.459216][ T377] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 59.468151][ T377] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.477716][ T74] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 59.486834][ T377] usb 2-1: config 0 descriptor?? [ 59.493565][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.501490][ T74] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.501871][ T1633] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 59.509708][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.525577][ T74] usb 3-1: config 0 descriptor?? [ 59.531159][ T1647] netlink: 'syz.3.321': attribute type 5 has an invalid length. [ 59.542975][ T1647] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1647 comm=syz.3.321 [ 59.556311][ T1647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.321'. [ 59.706894][ T179] device bridge_slave_1 left promiscuous mode [ 59.713279][ T179] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.722773][ T179] device bridge_slave_0 left promiscuous mode [ 59.729195][ T179] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.990890][ T1629] syz.2.308 (pid 1629) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 60.006651][ T74] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 60.016430][ T74] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffb9 [ 60.046624][ T74] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 60.068015][ T377] prodikeys 0003:041E:2801.0003: item fetching failed at offset 0/5 [ 60.075852][ T74] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 60.093095][ T377] prodikeys 0003:041E:2801.0003: hid parse failed [ 60.099448][ T377] prodikeys: probe of 0003:041E:2801.0003 failed with error -22 [ 60.107059][ T74] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 60.146805][ T74] asix: probe of 3-1:0.0 failed with error -71 [ 60.153648][ T74] usb 3-1: USB disconnect, device number 7 [ 60.268693][ T369] usb 2-1: USB disconnect, device number 4 [ 60.356618][ T371] cdc_ncm 5-1:1.0: bind() failure [ 60.376612][ T371] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 60.396603][ T371] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 60.404304][ T371] usb 5-1: USB disconnect, device number 3 [ 60.486246][ T1671] netlink: 'syz.3.318': attribute type 4 has an invalid length. [ 60.493933][ T1671] netlink: 17 bytes leftover after parsing attributes in process `syz.3.318'. [ 61.018596][ T1692] netlink: 'syz.4.323': attribute type 5 has an invalid length. [ 61.028088][ T1687] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 61.037352][ T1692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1692 comm=syz.4.323 [ 61.064406][ T1692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.323'. [ 61.583941][ T377] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 61.786271][ T1728] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 61.805608][ T1728] ext4 filesystem being mounted at /root/syzkaller.mnNyDn/76/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038 (0x7fffffff) [ 61.915952][ T179] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm kworker/u4:2: bg 0: block 234: padding at end of block bitmap is not set [ 61.930624][ T179] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 61.936577][ T371] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 61.943035][ T179] EXT4-fs (loop0): This should not happen!! Data will be lost [ 61.943035][ T179] [ 61.969377][ T179] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 61.981875][ T179] EXT4-fs (loop0): This should not happen!! Data will be lost [ 61.981875][ T179] [ 61.991510][ T179] EXT4-fs (loop0): Total free blocks count 0 [ 61.996626][ T377] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.997305][ T179] EXT4-fs (loop0): Free/Dirty block details [ 62.008440][ T377] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.013688][ T179] EXT4-fs (loop0): free_blocks=0 [ 62.013694][ T179] EXT4-fs (loop0): dirty_blocks=6144 [ 62.013698][ T179] EXT4-fs (loop0): Block reservation details [ 62.013709][ T179] EXT4-fs (loop0): i_reserved_data_blocks=384 [ 62.023705][ T377] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 62.054293][ T377] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.066302][ T377] usb 2-1: config 0 descriptor?? [ 62.168760][ T1736] netlink: 'syz.0.334': attribute type 5 has an invalid length. [ 62.177322][ T1736] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1736 comm=syz.0.334 [ 62.194370][ T1736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.334'. [ 62.326715][ T371] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 62.337542][ T371] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 62.348402][ T371] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 25 [ 62.436626][ T371] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 62.445522][ T371] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 62.453328][ T371] usb 4-1: SerialNumber: syz [ 62.476624][ T1724] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 62.496996][ T371] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 62.505341][ T371] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 62.548509][ T377] logitech-djreceiver 0003:046D:C71B.0004: unknown main item tag 0x0 [ 62.559355][ T377] logitech-djreceiver 0003:046D:C71B.0004: hidraw0: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.1-1/input0 [ 62.756993][ T371] usb 2-1: USB disconnect, device number 5 [ 62.961930][ T1761] hub 6-0:1.0: USB hub found [ 62.967007][ T1761] hub 6-0:1.0: 1 port detected [ 63.261131][ T1775] netlink: 'syz.4.346': attribute type 5 has an invalid length. [ 63.284506][ T1775] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1775 comm=syz.4.346 [ 63.297378][ T1775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.346'. [ 63.337753][ T23] kauditd_printk_skb: 4 callbacks suppressed [ 63.337762][ T23] audit: type=1400 audit(1719906815.149:267): avc: denied { connect } for pid=1781 comm="syz.4.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.389379][ T23] audit: type=1400 audit(1719906815.199:268): avc: denied { set_context_mgr } for pid=1785 comm="syz.4.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 63.438197][ T1786] EXT4-fs (loop4): Unrecognized mount option "" or missing value [ 63.633054][ T1795] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 63.727147][ T1811] netlink: 'syz.0.357': attribute type 5 has an invalid length. [ 63.735437][ T1811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1811 comm=syz.0.357 [ 63.748139][ T1811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.357'. [ 63.759611][ T1813] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 63.775715][ T1813] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 63.788947][ T1813] EXT4-fs (loop2): This should not happen!! Data will be lost [ 63.788947][ T1813] [ 63.798511][ T1813] EXT4-fs (loop2): Total free blocks count 0 [ 63.804350][ T1813] EXT4-fs (loop2): Free/Dirty block details [ 63.810354][ T1813] EXT4-fs (loop2): free_blocks=68451041280 [ 63.815966][ T1813] EXT4-fs (loop2): dirty_blocks=16 [ 63.822649][ T1813] EXT4-fs (loop2): Block reservation details [ 63.828907][ T1813] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 63.896590][ T23] audit: type=1400 audit(1719906815.699:269): avc: denied { write } for pid=1821 comm="syz.0.361" name="anycast6" dev="proc" ino=4026532331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 63.950711][ T1828] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 64.020708][ T1830] EXT4-fs (loop1): Ignoring removed bh option [ 64.026798][ T1830] EXT4-fs (loop1): Ignoring removed orlov option [ 64.040635][ T1830] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,noblock_validity,bh,errors=remount-ro,orlov,data_err=abort,delalloc,auto_da_alloc=0x0000000000000003,errors=remount-ro, [ 64.065898][ T23] audit: type=1400 audit(1719906815.869:270): avc: denied { unmount } for pid=336 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 64.659268][ T1841] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 64.667230][ T1841] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 64.678653][ T1841] F2FS-fs (loop2): Found nat_bits in checkpoint [ 64.709871][ T1841] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 64.716790][ T1841] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 64.737642][ T1841] attempt to access beyond end of device [ 64.737642][ T1841] loop2: rw=2049, want=45224, limit=40427 [ 65.095503][ T23] audit: type=1400 audit(1719906816.899:271): avc: denied { setattr } for pid=1864 comm="syz.2.373" name="msr" dev="devtmpfs" ino=9169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 65.130518][ T23] audit: type=1326 audit(1719906816.929:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1864 comm="syz.2.373" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0670c44b99 code=0x0 [ 65.140722][ T1870] device syzkaller0 entered promiscuous mode [ 65.324609][ T23] audit: type=1400 audit(1719906817.129:273): avc: denied { mounton } for pid=1873 comm="syz.0.376" path="/root/syzkaller.Bl11qv/79/file0/file0" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 65.526557][ T5] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 65.851602][ T1886] overlayfs: missing 'lowerdir' [ 65.857136][ T23] audit: type=1400 audit(1719906817.669:274): avc: denied { connect } for pid=1885 comm="syz.1.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 65.878132][ T23] audit: type=1400 audit(1719906817.669:275): avc: denied { read } for pid=1885 comm="syz.1.379" path="socket:[19890]" dev="sockfs" ino=19890 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 65.901653][ T5] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 65.910385][ T5] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.920973][ T5] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 66.006648][ T5] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 66.015566][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 66.023341][ T5] usb 3-1: SerialNumber: syz [ 66.216587][ T371] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 66.297285][ T5] usb 3-1: 0:2 : does not exist [ 66.302137][ T5] usb 3-1: unit 5: unexpected type 0x0b [ 66.310335][ T5] usb 3-1: USB disconnect, device number 8 [ 66.344750][ T1907] kernel profiling enabled (shift: 7) [ 66.384301][ T440] udevd[440]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 66.466562][ T371] usb 2-1: Using ep0 maxpacket: 8 [ 66.506864][ T121] cfg80211: failed to load regulatory.db [ 66.586649][ T371] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.597484][ T371] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.608701][ T371] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 66.613670][ T23] audit: type=1400 audit(1719906818.419:276): avc: denied { write } for pid=1912 comm="syz.4.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 66.636621][ T371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.645823][ T371] usb 2-1: config 0 descriptor?? [ 66.748072][ T1931] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 66.756877][ T1931] ext4 filesystem being mounted at /root/syzkaller.mnNyDn/99/bus supports timestamps until 2038 (0x7fffffff) [ 66.793446][ T1931] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 66.803772][ T1931] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 66.814854][ T1931] fuse: Unknown parameter '184467440737095516150xffffffffffffffff' [ 66.823128][ T1931] EXT4-fs error (device loop4): ext4_map_blocks:617: inode #2: block 3: comm syz.4.390: lblock 0 mapped to illegal pblock 3 (length 1) [ 66.845667][ T1930] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:455: comm syz.4.390: Invalid block bitmap block 0 in block_group 0 [ 66.859215][ T1930] EXT4-fs error (device loop4): ext4_discard_preallocations:4140: comm syz.4.390: Error -117 reading block bitmap for 0 [ 66.883994][ T334] EXT4-fs error (device loop4): ext4_map_blocks:617: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 66.902545][ T1097] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 66.912435][ T1097] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 67.117993][ T371] steelseries_srws1 0003:1038:1410.0005: unknown main item tag 0xd [ 67.125729][ T371] steelseries_srws1 0003:1038:1410.0005: item fetching failed at offset 6/7 [ 67.146807][ T371] steelseries_srws1 0003:1038:1410.0005: parse failed [ 67.153442][ T371] steelseries_srws1: probe of 0003:1038:1410.0005 failed with error -22 [ 67.192734][ T1945] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.199837][ T1945] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.207261][ T1945] device bridge_slave_0 entered promiscuous mode [ 67.214216][ T1945] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.221285][ T1945] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.228851][ T1945] device bridge_slave_1 entered promiscuous mode [ 67.280751][ T1945] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.287602][ T1945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.294670][ T1945] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.301495][ T1945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.319053][ T377] usb 2-1: USB disconnect, device number 6 [ 67.325879][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.335908][ T1943] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 67.346430][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.347178][ T1943] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 67.361425][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.364205][ T1943] F2FS-fs (loop0): invalid crc value [ 67.375734][ T1943] F2FS-fs (loop0): Found nat_bits in checkpoint [ 67.376853][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.390213][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.397054][ T371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.413700][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.421869][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.422403][ T1943] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 67.428709][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.436952][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.443687][ T1943] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 67.450676][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.475123][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.483659][ T333] attempt to access beyond end of device [ 67.483659][ T333] loop0: rw=2049, want=45104, limit=40427 [ 67.488288][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.511520][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.528009][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.542984][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.096573][ T74] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 68.101336][ T1969] EXT4-fs (loop0): Test dummy encryption mode enabled [ 68.119889][ T1969] EXT4-fs (loop0): Ignoring removed orlov option [ 68.126050][ T1969] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 68.136904][ T1969] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 68.277847][ T400] device bridge_slave_1 left promiscuous mode [ 68.283869][ T400] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.299429][ T400] device bridge_slave_0 left promiscuous mode [ 68.311914][ T400] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.386678][ T74] usb 3-1: device descriptor read/64, error 18 [ 68.776714][ T74] usb 3-1: device descriptor read/64, error 18 [ 68.848441][ T1985] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 68.927350][ T1994] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 68.942065][ T1994] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 68.955364][ T1994] EXT4-fs (loop1): This should not happen!! Data will be lost [ 68.955364][ T1994] [ 68.965065][ T1994] EXT4-fs (loop1): Total free blocks count 0 [ 68.971419][ T1994] EXT4-fs (loop1): Free/Dirty block details [ 68.977483][ T1994] EXT4-fs (loop1): free_blocks=68451041280 [ 68.983106][ T1994] EXT4-fs (loop1): dirty_blocks=16 [ 68.988281][ T1994] EXT4-fs (loop1): Block reservation details [ 68.994049][ T1994] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 68.997725][ T1996] FAT-fs (loop0): Unrecognized mount option "nonumtail=0PBni_xlate=1" or missing value [ 69.076580][ T74] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 69.154006][ T1996] FAT-fs (loop0): Directory bread(block 64) failed [ 69.160990][ T1996] FAT-fs (loop0): Directory bread(block 65) failed [ 69.167378][ T1996] FAT-fs (loop0): Directory bread(block 66) failed [ 69.173648][ T1996] FAT-fs (loop0): Directory bread(block 67) failed [ 69.180043][ T1996] FAT-fs (loop0): Directory bread(block 68) failed [ 69.186306][ T1996] FAT-fs (loop0): Directory bread(block 69) failed [ 69.192707][ T1996] FAT-fs (loop0): Directory bread(block 70) failed [ 69.199037][ T1996] FAT-fs (loop0): Directory bread(block 71) failed [ 69.205402][ T1996] FAT-fs (loop0): Directory bread(block 72) failed [ 69.211682][ T1996] FAT-fs (loop0): Directory bread(block 73) failed [ 69.242765][ T826] attempt to access beyond end of device [ 69.242765][ T826] loop0: rw=1, want=1236, limit=256 [ 69.356621][ T74] usb 3-1: device descriptor read/64, error 18 [ 69.367879][ T2000] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 69.746648][ T74] usb 3-1: device descriptor read/64, error 18 [ 69.909216][ T74] usb usb3-port1: attempt power cycle [ 70.262137][ T400] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm kworker/u4:3: bg 0: block 234: padding at end of block bitmap is not set [ 70.277293][ T400] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 70.289657][ T400] EXT4-fs (loop0): This should not happen!! Data will be lost [ 70.289657][ T400] [ 70.316580][ T74] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 70.324711][ T400] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 70.338436][ T400] EXT4-fs (loop0): This should not happen!! Data will be lost [ 70.338436][ T400] [ 70.348208][ T400] EXT4-fs (loop0): Total free blocks count 0 [ 70.354009][ T400] EXT4-fs (loop0): Free/Dirty block details [ 70.359974][ T400] EXT4-fs (loop0): free_blocks=0 [ 70.364727][ T400] EXT4-fs (loop0): dirty_blocks=6144 [ 70.370066][ T400] EXT4-fs (loop0): Block reservation details [ 70.375859][ T400] EXT4-fs (loop0): i_reserved_data_blocks=384 [ 70.486283][ T1945] ------------[ cut here ]------------ [ 70.491585][ T1945] WARNING: CPU: 1 PID: 1945 at fs/overlayfs/util.c:450 ovl_dir_modified+0x45c/0x570 [ 70.500757][ T1945] Modules linked in: [ 70.504507][ T1945] CPU: 1 PID: 1945 Comm: syz-executor Not tainted 5.4.276-syzkaller-00021-g58de09405d1e #0 [ 70.514307][ T1945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 70.524211][ T1945] RIP: 0010:ovl_dir_modified+0x45c/0x570 [ 70.529671][ T1945] Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 4c 3b ae ff 49 ff 45 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 14 56 7e ff <0f> 0b e9 91 fd ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 30 fc ff [ 70.549108][ T1945] RSP: 0018:ffff8881e8c77b48 EFLAGS: 00010293 [ 70.555004][ T1945] RAX: ffffffff81e5e2ec RBX: 0000000000000000 RCX: ffff8881dc723f00 [ 70.562815][ T1945] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 70.570625][ T1945] RBP: ffff8881e9118aa0 R08: ffffffff81e5e076 R09: ffffed103a6f38f3 [ 70.578435][ T1945] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 70.586244][ T1945] R13: ffff8881d379c6f0 R14: ffff8881d379c740 R15: ffff8881e9118ad0 [ 70.594059][ T1945] FS: 0000555555bd0500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 70.602824][ T1945] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.609245][ T1945] CR2: 00007fd23162966c CR3: 00000001e804a000 CR4: 00000000003426a0 [ 70.617056][ T1945] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.624873][ T1945] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.632674][ T1945] Call Trace: [ 70.635810][ T1945] ? __warn+0x162/0x250 [ 70.639808][ T1945] ? report_bug+0x3a1/0x4e0 [ 70.644136][ T1945] ? ovl_dir_modified+0x45c/0x570 [ 70.649015][ T1945] ? ovl_dir_modified+0x45c/0x570 [ 70.653864][ T1945] ? do_invalid_op+0x6e/0x110 [ 70.658370][ T1945] ? invalid_op+0x1e/0x30 [ 70.662536][ T1945] ? ovl_dir_modified+0x1e6/0x570 [ 70.667406][ T1945] ? ovl_dir_modified+0x45c/0x570 [ 70.672264][ T1945] ? ovl_dir_modified+0x45c/0x570 [ 70.677136][ T1945] ? ovl_dir_modified+0x45c/0x570 [ 70.681981][ T1945] ? ovl_path_type+0x18e/0x2f0 [ 70.686578][ T1945] ovl_do_remove+0x6f0/0xc80 [ 70.691009][ T1945] ? ovl_set_redirect+0x5f0/0x5f0 [ 70.695864][ T1945] ? security_inode_rmdir+0xca/0x110 [ 70.700984][ T1945] vfs_rmdir+0x285/0x3c0 [ 70.705065][ T1945] incfs_kill_sb+0x105/0x200 [ 70.709491][ T1945] deactivate_locked_super+0xa8/0x110 [ 70.714695][ T1945] deactivate_super+0x1e2/0x2a0 [ 70.719396][ T1945] ? vfs_submount+0xb0/0xb0 [ 70.723740][ T1945] ? deactivate_locked_super+0x110/0x110 [ 70.729199][ T1945] ? fast_dput+0x7a/0x280 [ 70.733376][ T1945] cleanup_mnt+0x44e/0x500 [ 70.737616][ T1945] task_work_run+0x140/0x170 [ 70.742039][ T1945] exit_to_usermode_loop+0x190/0x1a0 [ 70.747157][ T1945] prepare_exit_to_usermode+0x199/0x200 [ 70.752541][ T1945] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 70.758269][ T1945] RIP: 0033:0x7f1802367ec7 [ 70.762520][ T1945] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 70.781986][ T1945] RSP: 002b:00007ffdca96a1e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 70.790203][ T1945] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f1802367ec7 [ 70.798020][ T1945] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdca96a2a0 [ 70.805832][ T1945] RBP: 00007ffdca96a2a0 R08: 0000000000000000 R09: 0000000000000000 [ 70.813640][ T1945] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdca96b350 [ 70.821478][ T1945] R13: 00007f18023d464a R14: 0000000000010fc7 R15: 00007ffdca96b390 [ 70.829272][ T1945] ---[ end trace e68e2a2137800f23 ]--- [ 70.838816][ T1945] ------------[ cut here ]------------ [ 70.844098][ T1945] WARNING: CPU: 0 PID: 1945 at fs/overlayfs/util.c:450 ovl_dir_modified+0x45c/0x570 [ 70.853311][ T1945] Modules linked in: [ 70.857018][ T1945] CPU: 0 PID: 1945 Comm: syz-executor Tainted: G W 5.4.276-syzkaller-00021-g58de09405d1e #0 [ 70.868339][ T1945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 70.878238][ T1945] RIP: 0010:ovl_dir_modified+0x45c/0x570 [ 70.883698][ T1945] Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 4c 3b ae ff 49 ff 45 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 14 56 7e ff <0f> 0b e9 91 fd ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 30 fc ff [ 70.903137][ T1945] RSP: 0018:ffff8881e8c77b48 EFLAGS: 00010293 [ 70.909037][ T1945] RAX: ffffffff81e5e2ec RBX: 0000000000000000 RCX: ffff8881dc723f00 [ 70.916847][ T1945] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 70.924659][ T1945] RBP: ffff8881e9118aa0 R08: ffffffff81e5e076 R09: ffffed103a6f38f3 [ 70.932470][ T1945] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 70.940282][ T1945] R13: ffff8881d379c6f0 R14: ffff8881d379c740 R15: ffff8881e9118ad0 [ 70.948093][ T1945] FS: 0000555555bd0500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 70.956859][ T1945] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.963279][ T1945] CR2: 00007f38871b8d58 CR3: 00000001e804a000 CR4: 00000000003426b0 [ 70.971092][ T1945] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.978903][ T1945] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.986711][ T1945] Call Trace: [ 70.989852][ T1945] ? __warn+0x162/0x250 [ 70.993836][ T1945] ? report_bug+0x3a1/0x4e0 [ 70.998172][ T1945] ? ovl_dir_modified+0x45c/0x570 [ 71.003033][ T1945] ? ovl_dir_modified+0x45c/0x570 [ 71.007895][ T1945] ? do_invalid_op+0x6e/0x110 [ 71.012409][ T1945] ? invalid_op+0x1e/0x30 [ 71.016572][ T1945] ? ovl_dir_modified+0x1e6/0x570 [ 71.021440][ T1945] ? ovl_dir_modified+0x45c/0x570 [ 71.026293][ T1945] ? ovl_dir_modified+0x45c/0x570 [ 71.031153][ T1945] ? ovl_dir_modified+0x45c/0x570 [ 71.036014][ T1945] ? ovl_path_type+0x18e/0x2f0 [ 71.040615][ T1945] ovl_do_remove+0x6f0/0xc80 [ 71.045042][ T1945] ? ovl_set_redirect+0x5f0/0x5f0 [ 71.049900][ T1945] ? security_inode_rmdir+0xca/0x110 [ 71.055022][ T1945] vfs_rmdir+0x285/0x3c0 [ 71.059101][ T1945] incfs_kill_sb+0x18d/0x200 [ 71.063529][ T1945] deactivate_locked_super+0xa8/0x110 [ 71.068734][ T1945] deactivate_super+0x1e2/0x2a0 [ 71.073420][ T1945] ? vfs_submount+0xb0/0xb0 [ 71.077760][ T1945] ? deactivate_locked_super+0x110/0x110 [ 71.083252][ T1945] ? fast_dput+0x7a/0x280 [ 71.087400][ T1945] cleanup_mnt+0x44e/0x500 [ 71.091651][ T1945] task_work_run+0x140/0x170 [ 71.096077][ T1945] exit_to_usermode_loop+0x190/0x1a0 [ 71.101210][ T1945] prepare_exit_to_usermode+0x199/0x200 [ 71.106576][ T1945] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 71.112303][ T1945] RIP: 0033:0x7f1802367ec7 [ 71.116556][ T1945] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 71.135995][ T1945] RSP: 002b:00007ffdca96a1e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 71.144238][ T1945] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f1802367ec7 [ 71.152051][ T1945] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdca96a2a0 [ 71.159862][ T1945] RBP: 00007ffdca96a2a0 R08: 0000000000000000 R09: 0000000000000000 [ 71.167673][ T1945] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdca96b350 [ 71.175484][ T1945] R13: 00007f18023d464a R14: 0000000000010fc7 R15: 00007ffdca96b390 [ 71.183297][ T1945] ---[ end trace e68e2a2137800f24 ]--- [ 71.216623][ T74] usb 3-1: device descriptor read/8, error -71 [ 71.303197][ T2027] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 71.444744][ T23] kauditd_printk_skb: 1 callbacks suppressed [ 71.444753][ T23] audit: type=1400 audit(1719906823.229:278): avc: denied { create } for pid=2020 comm="syz.1.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.506928][ T74] usb 3-1: device descriptor read/8, error -71 [ 71.512952][ T23] audit: type=1400 audit(1719906823.309:279): avc: denied { getopt } for pid=2047 comm="syz.0.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.534352][ T23] audit: type=1400 audit(1719906823.339:280): avc: denied { read } for pid=2039 comm="syz.4.417" name="loop-control" dev="devtmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 71.558324][ T23] audit: type=1400 audit(1719906823.339:281): avc: denied { open } for pid=2039 comm="syz.4.417" path="/dev/loop-control" dev="devtmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 71.583179][ T23] audit: type=1400 audit(1719906823.389:282): avc: denied { ioctl } for pid=2039 comm="syz.4.417" path="/dev/loop-control" dev="devtmpfs" ino=152 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 71.725490][ T2060] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.732510][ T2060] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.740005][ T2060] device bridge_slave_0 entered promiscuous mode [ 71.747434][ T2060] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.754321][ T2060] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.761787][ T2060] device bridge_slave_1 entered promiscuous mode [ 71.788201][ T2065] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 71.832195][ T2060] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.839062][ T2060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.846166][ T2060] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.852957][ T2060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.879121][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.886285][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.894097][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.901940][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.911768][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.919812][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.926655][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.943470][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.952567][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.959441][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.126134][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.134522][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.143330][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.165844][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.169277][ T2073] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 72.179592][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.257209][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.265403][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.866483][ T23] audit: type=1400 audit(1719907336.517:283): avc: denied { ioctl } for pid=2071 comm="syz.1.424" path="socket:[22623]" dev="sockfs" ino=22623 ioctlcmd=0x52c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 73.900504][ T23] audit: type=1400 audit(1719907337.667:284): avc: denied { write } for pid=2072 comm="syz.3.422" name="vga_arbiter" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 73.925115][ T23] audit: type=1400 audit(1719907337.667:285): avc: denied { open } for pid=2072 comm="syz.3.422" path="/dev/vga_arbiter" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 73.935023][ T2083] erofs: (device loop2): mounted with opts: , root inode @ nid 36. [ 74.004870][ T826] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm kworker/u4:4: bg 0: block 234: padding at end of block bitmap is not set [ 74.034041][ T826] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 74.049947][ T826] EXT4-fs (loop0): This should not happen!! Data will be lost [ 74.049947][ T826] [ 74.103407][ T826] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 74.116190][ T826] EXT4-fs (loop0): This should not happen!! Data will be lost [ 74.116190][ T826] [ 74.126108][ T826] EXT4-fs (loop0): Total free blocks count 0 [ 74.132864][ T826] EXT4-fs (loop0): Free/Dirty block details [ 74.139191][ T826] EXT4-fs (loop0): free_blocks=0 [ 74.143924][ T826] EXT4-fs (loop0): dirty_blocks=6144 [ 74.149295][ T826] EXT4-fs (loop0): Block reservation details [ 74.155067][ T826] EXT4-fs (loop0): i_reserved_data_blocks=384 [ 74.286583][ T372] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 74.349551][ T23] audit: type=1400 audit(1719907850.159:286): avc: denied { create } for pid=2100 comm="syz.4.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 74.486553][ T74] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 74.686641][ T372] usb 2-1: unable to get BOS descriptor or descriptor too short [ 74.756564][ T74] usb 3-1: device descriptor read/64, error 18 [ 74.786655][ T372] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.796662][ T372] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 74.808119][ T372] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 74.818484][ T372] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 75.076628][ T372] usb 2-1: string descriptor 0 read error: -22 [ 75.082692][ T372] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 75.091561][ T372] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.116611][ T2087] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 75.146599][ T74] usb 3-1: device descriptor read/64, error 18 [ 75.209787][ T2111] netlink: 'syz.3.436': attribute type 5 has an invalid length. [ 75.218620][ T2111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2111 comm=syz.3.436 [ 75.231656][ T2111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.436'. [ 75.278485][ T2114] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 75.366610][ T372] cdc_ncm 2-1:1.0: bind() failure [ 75.799052][ T74] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 75.827627][ T23] audit: type=1400 audit(1719907851.629:287): avc: denied { setopt } for pid=2124 comm="syz.0.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.887038][ T372] cdc_ncm 2-1:1.1: bind() failure [ 75.893012][ T372] usb 2-1: USB disconnect, device number 7 [ 76.076609][ T74] usb 3-1: device descriptor read/64, error 18 [ 76.104774][ T400] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm kworker/u4:3: bg 0: block 234: padding at end of block bitmap is not set [ 76.127551][ T400] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 76.139988][ T400] EXT4-fs (loop4): This should not happen!! Data will be lost [ 76.139988][ T400] [ 76.162953][ T400] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 76.175468][ T400] EXT4-fs (loop4): This should not happen!! Data will be lost [ 76.175468][ T400] [ 76.184897][ T400] EXT4-fs (loop4): Total free blocks count 0 [ 76.191258][ T400] EXT4-fs (loop4): Free/Dirty block details [ 76.203019][ T400] EXT4-fs (loop4): free_blocks=0 [ 76.213588][ T400] EXT4-fs (loop4): dirty_blocks=6144 [ 76.218743][ T400] EXT4-fs (loop4): Block reservation details [ 76.224609][ T400] EXT4-fs (loop4): i_reserved_data_blocks=384 [ 76.338419][ T2143] cgroup: syz.1.444 (2143) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 76.354589][ T2143] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 76.366892][ T2141] EXT4-fs (loop3): Mount option "journal_ioprio=0x0000000000000000" incompatible with ext2 [ 76.476629][ T74] usb 3-1: device descriptor read/64, error 18 [ 76.607054][ T74] usb usb3-port1: attempt power cycle [ 76.844179][ T23] kauditd_printk_skb: 4 callbacks suppressed [ 76.844188][ T23] audit: type=1326 audit(1719908364.645:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2156 comm="syz.3.448" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee75109b99 code=0x0 [ 77.016564][ T74] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 77.146649][ T74] usb 3-1: device descriptor read/8, error -71 [ 77.168311][ T2165] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 77.409454][ T74] usb 3-1: device descriptor read/8, error -71 [ 77.767744][ T2182] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 77.774790][ T2182] IPv6: NLM_F_CREATE should be set when creating new route [ 77.781844][ T2182] IPv6: NLM_F_CREATE should be set when creating new route [ 78.004773][ T826] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm kworker/u4:4: bg 0: block 234: padding at end of block bitmap is not set [ 78.019354][ T826] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 78.033108][ T826] EXT4-fs (loop2): This should not happen!! Data will be lost [ 78.033108][ T826] [ 78.057979][ T2194] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 78.058793][ T826] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 78.086584][ T826] EXT4-fs (loop2): This should not happen!! Data will be lost [ 78.086584][ T826] [ 78.089904][ T2196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2196 comm=syz.3.457 [ 78.096028][ T826] EXT4-fs (loop2): Total free blocks count 0 [ 78.096032][ T826] EXT4-fs (loop2): Free/Dirty block details [ 78.096038][ T826] EXT4-fs (loop2): free_blocks=0 [ 78.096049][ T826] EXT4-fs (loop2): dirty_blocks=6144 [ 78.129832][ T826] EXT4-fs (loop2): Block reservation details [ 78.135611][ T826] EXT4-fs (loop2): i_reserved_data_blocks=384 [ 78.292620][ T2204] EXT4-fs (loop4): Ignoring removed bh option [ 78.303542][ T2204] EXT4-fs error (device loop4): __ext4_iget:5217: inode #15: block 1803188595: comm syz.4.461: invalid block [ 78.316064][ T2204] EXT4-fs error (device loop4): ext4_orphan_get:1240: comm syz.4.461: couldn't read orphan inode 15 (err -117) [ 78.340965][ T2204] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x000000000000ee00,bh,noload,data_err=ignore,usrjquota=,,errors=continue [ 78.803341][ T2193] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 79.006992][ T2193] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 79.033481][ T2193] EXT4-fs (loop1): This should not happen!! Data will be lost [ 79.033481][ T2193] [ 79.130653][ T2193] EXT4-fs (loop1): Total free blocks count 0 [ 79.150370][ T2193] EXT4-fs (loop1): Free/Dirty block details [ 79.169832][ T2193] EXT4-fs (loop1): free_blocks=68451041280 [ 79.224711][ T2193] EXT4-fs (loop1): dirty_blocks=16 [ 79.235006][ T2193] EXT4-fs (loop1): Block reservation details [ 79.248286][ T2193] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 79.394089][ T2229] EXT4-fs warning (device loop1): ext4_enable_quotas:6100: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 79.426751][ T2229] EXT4-fs (loop1): mount failed [ 79.492299][ T2238] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 79.757553][ T2248] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.949556][ T2253] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 80.002371][ T2251] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 80.024891][ T2253] EXT4-fs (loop0): mounted filesystem without journal. Opts: abort,errors=remount-ro,nomblk_io_submit,stripe=0x0000000000000000,sb=0x0000000000000004,minixdf,grpjquota=, [ 80.044435][ T2251] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,usrjquota=,errors=remount-ro,norecovery,bsddf,nomblk_io_submit,grpquota,barrier=0xfffffffffffffffe,user_xattr,jqfmt=vfsold, [ 80.067398][ T2251] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 80.077732][ T2251] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm syz.3.473: bg 0: block 234: padding at end of block bitmap is not set [ 80.091950][ T2251] EXT4-fs (loop3): Remounting filesystem read-only [ 80.101607][ T2251] EXT4-fs error (device loop3): ext4_map_blocks:617: inode #15: block 1803188595: comm syz.3.473: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 80.196578][ T369] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 80.255328][ T400] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm kworker/u4:3: bg 0: block 234: padding at end of block bitmap is not set [ 80.270421][ T400] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 80.285978][ T400] EXT4-fs (loop2): This should not happen!! Data will be lost [ 80.285978][ T400] [ 80.304745][ T400] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 80.317230][ T400] EXT4-fs (loop2): This should not happen!! Data will be lost [ 80.317230][ T400] [ 80.326695][ T400] EXT4-fs (loop2): Total free blocks count 0 [ 80.332476][ T400] EXT4-fs (loop2): Free/Dirty block details [ 80.338224][ T400] EXT4-fs (loop2): free_blocks=0 [ 80.342976][ T400] EXT4-fs (loop2): dirty_blocks=6144 [ 80.348115][ T400] EXT4-fs (loop2): Block reservation details [ 80.353911][ T400] EXT4-fs (loop2): i_reserved_data_blocks=384 [ 80.467960][ T2267] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 80.478039][ T2267] ext4 filesystem being mounted at /root/syzkaller.TSLNZL/20/file0 supports timestamps until 2038 (0x7fffffff) [ 80.516608][ T369] usb 2-1: device descriptor read/64, error 18 [ 80.546520][ C1] ================================================================== [ 80.554418][ C1] BUG: KASAN: stack-out-of-bounds in profile_pc+0xa4/0xe0 [ 80.561341][ C1] Read of size 8 at addr ffff8881ed70f680 by task syz.2.477/2274 [ 80.568889][ C1] [ 80.571070][ C1] CPU: 1 PID: 2274 Comm: syz.2.477 Tainted: G W 5.4.276-syzkaller-00021-g58de09405d1e #0 [ 80.581999][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 80.591891][ C1] Call Trace: [ 80.595014][ C1] [ 80.597717][ C1] dump_stack+0x1d8/0x241 [ 80.601878][ C1] ? debug_smp_processor_id+0x20/0x20 [ 80.607096][ C1] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 80.612726][ C1] ? printk+0xd1/0x111 [ 80.616629][ C1] ? profile_pc+0xa4/0xe0 [ 80.620794][ C1] ? wake_up_klogd+0xb2/0xf0 [ 80.625221][ C1] ? profile_pc+0xa4/0xe0 [ 80.629388][ C1] print_address_description+0x8c/0x600 [ 80.634765][ C1] ? panic+0x89d/0x89d [ 80.638675][ C1] ? profile_pc+0xa4/0xe0 [ 80.642836][ C1] __kasan_report+0xf3/0x120 [ 80.647263][ C1] ? profile_pc+0xa4/0xe0 [ 80.651442][ C1] ? _raw_spin_lock+0xc0/0x1b0 [ 80.656036][ C1] kasan_report+0x30/0x60 [ 80.660203][ C1] profile_pc+0xa4/0xe0 [ 80.664192][ C1] profile_tick+0xb9/0x100 [ 80.668444][ C1] tick_sched_timer+0x237/0x3c0 [ 80.673129][ C1] ? tick_setup_sched_timer+0x460/0x460 [ 80.678523][ C1] __hrtimer_run_queues+0x3e9/0xb90 [ 80.683545][ C1] ? hrtimer_interrupt+0x890/0x890 [ 80.688490][ C1] ? cpumask_next+0xc/0x20 [ 80.692742][ C1] ? ktime_get+0xf9/0x130 [ 80.696908][ C1] ? ktime_get_update_offsets_now+0x26c/0x280 [ 80.702818][ C1] hrtimer_interrupt+0x38a/0x890 [ 80.707588][ C1] smp_apic_timer_interrupt+0x110/0x460 [ 80.712965][ C1] apic_timer_interrupt+0xf/0x20 [ 80.717734][ C1] [ 80.720514][ C1] RIP: 0010:_raw_spin_lock+0xc0/0x1b0 [ 80.725733][ C1] Code: fd 4c 89 ff be 04 00 00 00 e8 2c dc 42 fd 43 0f b6 04 26 84 c0 0f 85 aa 00 00 00 8b 44 24 20 b9 01 00 00 00 f0 41 0f b1 4d 00 <75> 33 48 c7 04 24 0e 36 e0 45 49 c7 04 1c 00 00 00 00 65 48 8b 04 [ 80.745161][ C1] RSP: 0018:ffff8881ed70f680 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 80.753407][ C1] RAX: 0000000000000000 RBX: 1ffff1103dae1ed0 RCX: 0000000000000001 [ 80.761218][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff8881ed70f6a0 [ 80.769030][ C1] RBP: ffff8881ed70f718 R08: dffffc0000000000 R09: 0000000000000003 [ 80.776840][ C1] R10: ffffffffffffffff R11: dffffc0000000001 R12: dffffc0000000000 [ 80.784650][ C1] R13: ffffea00076553e8 R14: 1ffff1103dae1ed4 R15: ffff8881ed70f6a0 [ 80.792471][ C1] ? _raw_spin_trylock_bh+0x190/0x190 [ 80.797673][ C1] ? xas_load+0x4f8/0x560 [ 80.801840][ C1] alloc_set_pte+0xba2/0x1170 [ 80.806355][ C1] filemap_map_pages+0x9d8/0xdd0 [ 80.811128][ C1] ? maybe_unlock_mmap_for_io+0x120/0x120 [ 80.816680][ C1] ? __count_memcg_events+0x97/0x210 [ 80.821801][ C1] handle_mm_fault+0x25cd/0x4990 [ 80.826583][ C1] ? perf_event_mmap+0x3ab/0x1920 [ 80.831432][ C1] ? finish_fault+0x230/0x230 [ 80.835949][ C1] ? percpu_counter_add_batch+0x14d/0x170 [ 80.841505][ C1] ? _raw_spin_unlock+0x49/0x60 [ 80.846202][ C1] ? follow_page_pte+0x711/0xcc0 [ 80.850965][ C1] __get_user_pages+0xc0b/0x13b0 [ 80.855742][ C1] ? populate_vma_page_range+0xf0/0xf0 [ 80.861033][ C1] ? memset+0x1f/0x40 [ 80.864853][ C1] ? vmacache_update+0x9f/0xf0 [ 80.869452][ C1] __mm_populate+0x369/0x510 [ 80.873876][ C1] ? __get_user_pages+0x13b0/0x13b0 [ 80.878927][ C1] vm_mmap_pgoff+0x20d/0x260 [ 80.883337][ C1] ? account_locked_vm+0x1b0/0x1b0 [ 80.888282][ C1] ? fpu__clear+0x3c0/0x3c0 [ 80.892621][ C1] ? ksys_mmap_pgoff+0xd6/0x1e0 [ 80.897310][ C1] do_syscall_64+0xca/0x1c0 [ 80.901649][ C1] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 80.907376][ C1] RIP: 0033:0x7f0670c44b99 [ 80.911629][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.931067][ C1] RSP: 002b:00007f066fec6048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 80.939312][ C1] RAX: ffffffffffffffda RBX: 00007f0670dd2fa0 RCX: 00007f0670c44b99 [ 80.947125][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 [ 80.954934][ C1] RBP: 00007f0670cc577e R08: ffffffffffffffff R09: 0000000000000000 [ 80.962748][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 80.970555][ C1] R13: 000000000000000b R14: 00007f0670dd2fa0 R15: 00007ffdbc68d668 [ 80.978370][ C1] [ 80.980534][ C1] The buggy address belongs to the page: [ 80.986009][ C1] page:ffffea0007b5c3c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 [ 80.994946][ C1] flags: 0x8000000000000000() [ 80.999463][ C1] raw: 8000000000000000 0000000000000000 ffffea0007b5c3c8 0000000000000000 [ 81.007880][ C1] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 81.016293][ C1] page dumped because: kasan: bad access detected [ 81.022554][ C1] page_owner tracks the page as allocated [ 81.028102][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT) [ 81.039648][ C1] prep_new_page+0x18f/0x370 [ 81.044070][ C1] get_page_from_freelist+0x2d13/0x2d90 [ 81.049460][ C1] __alloc_pages_nodemask+0x393/0x840 [ 81.054659][ C1] dup_task_struct+0x85/0x600 [ 81.059189][ C1] copy_process+0x56d/0x3230 [ 81.063598][ C1] _do_fork+0x197/0x900 [ 81.067590][ C1] __x64_sys_clone3+0x2da/0x300 [ 81.072277][ C1] do_syscall_64+0xca/0x1c0 [ 81.076619][ C1] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 81.082340][ C1] page last free stack trace: [ 81.086859][ C1] __free_pages_ok+0x847/0x950 [ 81.091457][ C1] __free_pages+0x91/0x140 [ 81.095712][ C1] __free_slab+0x221/0x2e0 [ 81.099963][ C1] unfreeze_partials+0x14e/0x180 [ 81.104742][ C1] put_cpu_partial+0x44/0x180 [ 81.109249][ C1] __slab_free+0x297/0x360 [ 81.113503][ C1] qlist_free_all+0x43/0xb0 [ 81.117842][ C1] quarantine_reduce+0x1d9/0x210 [ 81.122615][ C1] __kasan_kmalloc+0x41/0x210 [ 81.127128][ C1] kmem_cache_alloc+0xd9/0x250 [ 81.131732][ C1] getname_flags+0xb8/0x4e0 [ 81.136076][ C1] do_sys_open+0x357/0x810 [ 81.140321][ C1] do_syscall_64+0xca/0x1c0 [ 81.144660][ C1] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 81.150385][ C1] [ 81.152557][ C1] addr ffff8881ed70f680 is located in stack of task syz.2.477/2274 at offset 0 in frame: [ 81.162192][ C1] _raw_spin_lock+0x0/0x1b0 [ 81.166537][ C1] [ 81.168708][ C1] this frame has 1 object: [ 81.172952][ C1] [32, 36) 'val.i.i.i' [ 81.172953][ C1] [ 81.179112][ C1] Memory state around the buggy address: [ 81.184583][ C1] ffff8881ed70f580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 81.192482][ C1] ffff8881ed70f600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 81.200380][ C1] >ffff8881ed70f680: f1 f1 f1 f1 04 f3 f3 f3 00 00 00 00 00 00 00 00 [ 81.208275][ C1] ^ [ 81.212182][ C1] ffff8881ed70f700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 81.220083][ C1] ffff8881ed70f780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 81.227977][ C1] ================================================================== [ 81.235873][ C1] Disabling lock debugging due to kernel taint [ 81.646573][ T369] usb 2-1: device descriptor read/64, error 18 [ 81.916585][ T369] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 82.186581][ T369] usb 2-1: device descriptor read/64, error 18 [ 82.576583][ T369] usb 2-1: device descriptor read/64, error 18 [ 82.696634][ T369] usb usb2-port1: attempt power cycle