last executing test programs: 2m37.547504141s ago: executing program 2 (id=180): prctl$PR_SET_SECUREBITS(0x1c, 0x4) setreuid(0x0, 0xee01) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x10000000) 2m37.266107134s ago: executing program 2 (id=182): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./f0\x00', 0x42, 0x180) ftruncate(r0, 0x8000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./f1\x00', 0x42, 0x180) ftruncate(r1, 0x8000000) r2 = syz_open_dev$loop(&(0x7f0000000280), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x1, 0x2) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='md0\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/md0\x00', 0x4002, 0x0) ioctl(r5, 0x40480923, &(0x7f0000000400)="000000000000000000000000000000000100000000000200020000000200000000000000010000000000000001000000000000000000") ioctl(r5, 0x40140921, &(0x7f0000000480)="0000000007000000000000000000000006000000") ioctl(r5, 0x40140921, &(0x7f00000004a0)="0100000007000000010000000100000006000000") ioctl(r5, 0x400c0930, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) write(r6, &(0x7f0000000540)='+8\n', 0x3) nanosleep(&(0x7f0000000700)={0x0, 0x1dcd6500}, 0x0) 2m36.314150058s ago: executing program 2 (id=185): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(r1) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x1, 0x100, 0x0, 0x0, 0x3b8000, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{r0}, &(0x7f0000000d80), &(0x7f0000000dc0)=r3}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 2m35.938004846s ago: executing program 2 (id=189): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0x2f, 0x4, 0x3}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r3, &(0x7f00000000c0)}, 0x20) 2m33.491219901s ago: executing program 2 (id=196): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) inotify_init() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0x53fc, 0x400, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2m31.373748911s ago: executing program 2 (id=205): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./f0\x00', 0x42, 0x180) ftruncate(r0, 0x8000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./f1\x00', 0x42, 0x180) ftruncate(r1, 0x8000000) r2 = syz_open_dev$loop(&(0x7f0000000280), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x1, 0x2) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='md0\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/md0\x00', 0x4002, 0x0) ioctl(r5, 0x40480923, &(0x7f0000000400)="00000000000000000000000000000000010000000000020002000000020000000000000001000000000000000100"/68) ioctl(r5, 0x40140921, &(0x7f0000000480)="0000000007000000000000000000000006000000") ioctl(r5, 0x40140921, &(0x7f00000004a0)="0100000007000000010000000100000006000000") r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) write(r6, &(0x7f0000000540)='+8\n', 0x3) ioctl(r5, 0x127f, &(0x7f0000000600)="00000000000000000000000500000000") nanosleep(&(0x7f0000000700)={0x0, 0x1dcd6500}, 0x0) 2m16.243169973s ago: executing program 32 (id=205): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./f0\x00', 0x42, 0x180) ftruncate(r0, 0x8000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./f1\x00', 0x42, 0x180) ftruncate(r1, 0x8000000) r2 = syz_open_dev$loop(&(0x7f0000000280), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x1, 0x2) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='md0\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/md0\x00', 0x4002, 0x0) ioctl(r5, 0x40480923, &(0x7f0000000400)="00000000000000000000000000000000010000000000020002000000020000000000000001000000000000000100"/68) ioctl(r5, 0x40140921, &(0x7f0000000480)="0000000007000000000000000000000006000000") ioctl(r5, 0x40140921, &(0x7f00000004a0)="0100000007000000010000000100000006000000") r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) write(r6, &(0x7f0000000540)='+8\n', 0x3) ioctl(r5, 0x127f, &(0x7f0000000600)="00000000000000000000000500000000") nanosleep(&(0x7f0000000700)={0x0, 0x1dcd6500}, 0x0) 1m20.806319015s ago: executing program 1 (id=424): io_setup(0xa, &(0x7f0000000280)) syz_clone3(&(0x7f0000000300)={0x23800400, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 1m19.827178151s ago: executing program 1 (id=429): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x81, 0x141200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000180)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80000003, 0x1, 0x0, 0x1, 0x6, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000350bc8b100", "c7db08b3551265406c7f306003d80700", [0x800000000000009, 0x3]}}) 1m19.489831796s ago: executing program 1 (id=433): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000140)={[{@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@noquota}]}, 0x1, 0x7d2, &(0x7f0000002140)="$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") symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00') 1m19.058002687s ago: executing program 1 (id=437): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) flock(0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) socket$inet6(0xa, 0x3, 0xff) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000008340)=ANY=[@ANYBLOB="3c0100002100010000000000fd5bbbe350a174dbdf25fc020000000000000000000000000005ac14142e00000000000000000000000000000001000000000a00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffff000000009c0011000a0101010000000000000000000000007f000001000000000000000000000000ac1e0101000000000000000000000000200100000000000000000000000000023c040000000000100a0002000a010101"], 0x13c}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x4020800) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close_range(r4, r4, 0x0) 1m17.869040243s ago: executing program 1 (id=444): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x4, 0x1}, 0x50) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x10}, 0x17, 0x7}, 0x0) 1m17.587662816s ago: executing program 1 (id=446): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x77}, {{0x0, 0x0, 0x0}, 0x4f5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000002600)}, 0x5}, {{0x0, 0x0, 0x0}, 0x7}], 0x5, 0x120, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000100)='./my_config\x00', 0x210000, &(0x7f0000000140)={[{@dioread_nolock}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r4, &(0x7f00000091c0)=""/16384, 0x4000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r5, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 1m7.083835341s ago: executing program 5 (id=463): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$eJzs3c1rHOUfAPDvbPPSX9qfjSBoPQUEDZRuTI2tgoeKBxEsFPRsGzbbULPJhuymNCGgRQQvgooHQS89W603r75c9Q/w7kFaqqbFiAeJzL6k22Y33aTZbMt+PjDJ88zM5jvfeWbmebIz7AbQs0bSH5mIwxHxURJxqDY/iYj+Sqkv4mR1vbXVlVw6JbG+/sYfSWWdW6sruWh4TepArfJERPzwfsSRzOa4paXlmclCIb9Qq4+VZ+fHSkvLR8/PTk7np/Nzx8cnJo6deP7E8d3L9a+flw9e//jVZ74++c97j1/98MckTsbB2rLGPHbLSIzU9kl/ugvv8Eq8s9vhuirp9gawI+mpua96lsfhJC33dXuTAIAOS0eh6wBAj0n0/wDQY+rvA9xaXcnVp+6+I7G3brwcEfur+dfvb1aX9NXu2e2v3AcdupXccWckiYjhXYg/EhFffPvWlXSKDt2HBGjm3UsRcXZ4ZPP1P9n0zMJ2PdvGOiN31Tfi/9J/n9GBe/kuHf+80Gz8l9kY/0ST8c9gk3N3J1qe/xsy13YhTEvp+O+lhmfb1hryrxneV6v9vzLm60/OnS/k02vbIxExGv2DaX18ixijN/+92WpZ4/jvz0/e/jKNn/6+vUbmWt/gna+ZmixP3k/OjW5ciniyr57/pYYlyUb7Jy3Gv6fbjPHaix983mpZmn+ab33anH9nrV+OeLpp+99+oi3Z8vnEscrhMFY/KJr45tfPhlrFb2z/dFpbXVlPIq7sfqbNpe0/tHX+w0nj85ql7cf46fKh71sta5J/rv6/UFXz438gebNSHqjNuzhZLi+MRwwkr2+ef+z2a+v1+vpp/qNPNT//tzr+09HJ2Tbz77v++1c7z7+z0vynttX+2y9cXZvZ1yp+e+0/USmN1uZsff2rXrfb3cD73X8AAAAAAAAAAAAAAAAAAAAAAAAA0I5MRByMJJPdKGcy2Wz1O7wfi6FMoVgqHzlXXJybisp3ZQ9Hf6b+UZeHGj4Pdbz2efj1+rG76s9FxKMR8eng/yr1bK5YmOp28gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQc6DF9/+nfhvs9tYBAB2zv9sbAADsOf0/APQe/T8A9B79PwD0Hv0/APQe/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAddvrUqXRa/3t1JZfWpy4sLc4ULxydypdmsrOLuWyuuDCfnS4Wpwv5bK44e6+/VygW5ydibvHiWDlfKo+VlpbPzBYX58pnzs9OTufP5Pv3JCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2J7S0vLMZKGQX1B4CAp9tVZ7ULZnR4VMPYm9CjrQxjrr8zdPbTuLB2Bndq7QxYsSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEPkvwAAAP//vI8fOA==") r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2800000010000104002aca566b20f48637001000", @ANYRES32=0x0, @ANYBLOB="01080000000000000500270006000000", @ANYRESHEX=r2, @ANYRES8=r0, @ANYRESOCT=r1, @ANYRESHEX=r3], 0x28}}, 0x40c4) write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) flock(0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000008340)=ANY=[@ANYBLOB="3c0100002100010000000000fd5bbbe350a174dbdf25fc020000000000000000000000000005ac14142e00000000000000000000000000000001000000000a00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffff000000009c0011000a0101010000000000000000000000007f000001000000000000000000000000ac1e0101000000000000000000000000200100000000000000000000000000023c040000000000100a0002000a010101"], 0x13c}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x4020800) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close_range(r6, r6, 0x0) 1m5.783818151s ago: executing program 5 (id=466): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="90000000000105040000000000000000020000003400018014000180080001007f000001080002007f0000011c00028005000100110000000600020006b700000600030006b700003400028014000180080001007f000001080002007f0000011c0002800500010011000000060002"], 0x90}}, 0x0) 1m5.295397745s ago: executing program 5 (id=467): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001b40)='./file1\x00', 0x208008de, &(0x7f0000000b40)=ANY=[], 0x80, 0x150a, &(0x7f0000002080)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f00000010c0)=ANY=[], 0x8, 0x303, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0xc453, &(0x7f00000000c0)={[{@stripe}, {@user_xattr}, {}, {@auto_da_alloc}]}, 0x4, 0x57f, &(0x7f0000000cc0)="$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") read$FUSE(r0, &(0x7f00000035c0)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x5) 1m4.476361343s ago: executing program 5 (id=468): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@dioread_nolock}, {@data_err_ignore}]}, 0xfe, 0x55b, &(0x7f0000000980)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1m3.417673683s ago: executing program 5 (id=472): mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 1m3.027522022s ago: executing program 33 (id=446): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x77}, {{0x0, 0x0, 0x0}, 0x4f5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000002600)}, 0x5}, {{0x0, 0x0, 0x0}, 0x7}], 0x5, 0x120, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000100)='./my_config\x00', 0x210000, &(0x7f0000000140)={[{@dioread_nolock}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r4, &(0x7f00000091c0)=""/16384, 0x4000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r5, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 59.769994045s ago: executing program 5 (id=481): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$eJzs3c1rHOUfAPDvbPPSX9qfjSBoPQUEDZRuTI2tgoeKBxEsFPRsGzbbULPJhuymNCGgRQQvgooHQS89W603r75c9Q/w7kFaqqbFiAeJzL6k22Y33aTZbMt+PjDJ88zM5jvfeWbmebIz7AbQs0bSH5mIwxHxURJxqDY/iYj+Sqkv4mR1vbXVlVw6JbG+/sYfSWWdW6sruWh4TepArfJERPzwfsSRzOa4paXlmclCIb9Qq4+VZ+fHSkvLR8/PTk7np/Nzx8cnJo6deP7E8d3L9a+flw9e//jVZ74++c97j1/98MckTsbB2rLGPHbLSIzU9kl/ugvv8Eq8s9vhuirp9gawI+mpua96lsfhJC33dXuTAIAOS0eh6wBAj0n0/wDQY+rvA9xaXcnVp+6+I7G3brwcEfur+dfvb1aX9NXu2e2v3AcdupXccWckiYjhXYg/EhFffPvWlXSKDt2HBGjm3UsRcXZ4ZPP1P9n0zMJ2PdvGOiN31Tfi/9J/n9GBe/kuHf+80Gz8l9kY/0ST8c9gk3N3J1qe/xsy13YhTEvp+O+lhmfb1hryrxneV6v9vzLm60/OnS/k02vbIxExGv2DaX18ixijN/+92WpZ4/jvz0/e/jKNn/6+vUbmWt/gna+ZmixP3k/OjW5ciniyr57/pYYlyUb7Jy3Gv6fbjPHaix983mpZmn+ab33anH9nrV+OeLpp+99+oi3Z8vnEscrhMFY/KJr45tfPhlrFb2z/dFpbXVlPIq7sfqbNpe0/tHX+w0nj85ql7cf46fKh71sta5J/rv6/UFXz438gebNSHqjNuzhZLi+MRwwkr2+ef+z2a+v1+vpp/qNPNT//tzr+09HJ2Tbz77v++1c7z7+z0vynttX+2y9cXZvZ1yp+e+0/USmN1uZsff2rXrfb3cD73X8AAAAAAAAAAAAAAAAAAAAAAAAA0I5MRByMJJPdKGcy2Wz1O7wfi6FMoVgqHzlXXJybisp3ZQ9Hf6b+UZeHGj4Pdbz2efj1+rG76s9FxKMR8eng/yr1bK5YmOp28gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQc6DF9/+nfhvs9tYBAB2zv9sbAADsOf0/APQe/T8A9B79PwD0Hv0/APQe/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAddvrUqXRa/3t1JZfWpy4sLc4ULxydypdmsrOLuWyuuDCfnS4Wpwv5bK44e6+/VygW5ydibvHiWDlfKo+VlpbPzBYX58pnzs9OTufP5Pv3JCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2J7S0vLMZKGQX1B4CAp9tVZ7ULZnR4VMPYm9CjrQxjrr8zdPbTuLB2Bndq7QxYsSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEPkvwAAAP//vI8fOA==") r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2800000010000104002aca566b20f48637001000", @ANYRES32=0x0, @ANYBLOB="01080000000000000500270006000000", @ANYRESHEX=r2, @ANYRES8=r0, @ANYRESOCT=r1, @ANYRESHEX=r3], 0x28}}, 0x40c4) write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) flock(0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) socket$inet6(0xa, 0x3, 0xff) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000008340)=ANY=[@ANYBLOB="3c0100002100010000000000fd5bbbe350a174dbdf25fc020000000000000000000000000005ac14142e00000000000000000000000000000001000000000a00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffff000000009c0011000a0101010000000000000000000000007f000001000000000000000000000000ac1e0101000000000000000000000000200100000000000000000000000000023c040000000000100a0002000a010101"], 0x13c}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x4020800) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close_range(r5, r5, 0x0) 59.194848982s ago: executing program 34 (id=481): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$eJzs3c1rHOUfAPDvbPPSX9qfjSBoPQUEDZRuTI2tgoeKBxEsFPRsGzbbULPJhuymNCGgRQQvgooHQS89W603r75c9Q/w7kFaqqbFiAeJzL6k22Y33aTZbMt+PjDJ88zM5jvfeWbmebIz7AbQs0bSH5mIwxHxURJxqDY/iYj+Sqkv4mR1vbXVlVw6JbG+/sYfSWWdW6sruWh4TepArfJERPzwfsSRzOa4paXlmclCIb9Qq4+VZ+fHSkvLR8/PTk7np/Nzx8cnJo6deP7E8d3L9a+flw9e//jVZ74++c97j1/98MckTsbB2rLGPHbLSIzU9kl/ugvv8Eq8s9vhuirp9gawI+mpua96lsfhJC33dXuTAIAOS0eh6wBAj0n0/wDQY+rvA9xaXcnVp+6+I7G3brwcEfur+dfvb1aX9NXu2e2v3AcdupXccWckiYjhXYg/EhFffPvWlXSKDt2HBGjm3UsRcXZ4ZPP1P9n0zMJ2PdvGOiN31Tfi/9J/n9GBe/kuHf+80Gz8l9kY/0ST8c9gk3N3J1qe/xsy13YhTEvp+O+lhmfb1hryrxneV6v9vzLm60/OnS/k02vbIxExGv2DaX18ixijN/+92WpZ4/jvz0/e/jKNn/6+vUbmWt/gna+ZmixP3k/OjW5ciniyr57/pYYlyUb7Jy3Gv6fbjPHaix983mpZmn+ab33anH9nrV+OeLpp+99+oi3Z8vnEscrhMFY/KJr45tfPhlrFb2z/dFpbXVlPIq7sfqbNpe0/tHX+w0nj85ql7cf46fKh71sta5J/rv6/UFXz438gebNSHqjNuzhZLi+MRwwkr2+ef+z2a+v1+vpp/qNPNT//tzr+09HJ2Tbz77v++1c7z7+z0vynttX+2y9cXZvZ1yp+e+0/USmN1uZsff2rXrfb3cD73X8AAAAAAAAAAAAAAAAAAAAAAAAA0I5MRByMJJPdKGcy2Wz1O7wfi6FMoVgqHzlXXJybisp3ZQ9Hf6b+UZeHGj4Pdbz2efj1+rG76s9FxKMR8eng/yr1bK5YmOp28gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQc6DF9/+nfhvs9tYBAB2zv9sbAADsOf0/APQe/T8A9B79PwD0Hv0/APQe/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAddvrUqXRa/3t1JZfWpy4sLc4ULxydypdmsrOLuWyuuDCfnS4Wpwv5bK44e6+/VygW5ydibvHiWDlfKo+VlpbPzBYX58pnzs9OTufP5Pv3JCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2J7S0vLMZKGQX1B4CAp9tVZ7ULZnR4VMPYm9CjrQxjrr8zdPbTuLB2Bndq7QxYsSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEPkvwAAAP//vI8fOA==") r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2800000010000104002aca566b20f48637001000", @ANYRES32=0x0, @ANYBLOB="01080000000000000500270006000000", @ANYRESHEX=r2, @ANYRES8=r0, @ANYRESOCT=r1, @ANYRESHEX=r3], 0x28}}, 0x40c4) write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) flock(0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) socket$inet6(0xa, 0x3, 0xff) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000008340)=ANY=[@ANYBLOB="3c0100002100010000000000fd5bbbe350a174dbdf25fc020000000000000000000000000005ac14142e00000000000000000000000000000001000000000a00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffff000000009c0011000a0101010000000000000000000000007f000001000000000000000000000000ac1e0101000000000000000000000000200100000000000000000000000000023c040000000000100a0002000a010101"], 0x13c}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x4020800) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close_range(r5, r5, 0x0) 13.991573491s ago: executing program 4 (id=592): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000008c0)={0xa, 0x4e22, 0xfffffffc, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r1 = dup(r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r1) 12.884110853s ago: executing program 7 (id=594): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x8040, &(0x7f0000000040)=ANY=[], 0x1, 0x2d1, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write(r1, &(0x7f0000000140)="1357bdc85d", 0x5) fallocate(r0, 0x1, 0x3, 0x8010004) 12.478019532s ago: executing program 4 (id=597): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0xa26}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in=@private=0xa010101, 0x0, 0x0, 0x4e24, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x4d6, 0x33}, 0x0, @in=@loopback, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 11.834022483s ago: executing program 7 (id=601): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x77}, {{0x0, 0x0, 0x0}, 0x4f5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000002600)}, 0x5}, {{0x0, 0x0, 0x0}, 0x7}], 0x5, 0x120, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000100)='./my_config\x00', 0x210000, &(0x7f0000000140)={[{@dioread_nolock}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000280)='./bus\x00', 0x8090, &(0x7f0000000100)={[{@dots}, {@fat=@flush}]}, 0x1, 0x267, &(0x7f00000007c0)="$eJzs3cFqE1EUANCbNk1jN3YniIsBN65E/YMgEcSAEJmFrhyobhoRppvRjfkMv8FP8jOy6m7ETnRMKqWUJJN0zoGQy7sZcl9eyMvivuT9g0+nJ5/PPpY/v0e/n0Q3YhrnEcexF/uxaC8iOtFbGJsGALBrxuNs0HQNrFDn8lCeD7KDiDi8lEl/bKYoAAAAAAAAAAAAVu06/f9/Wsr0/wPA7aD///bL80F2NP/+tkj/PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCc87K8W15xa7o+AGD17P8A0D72fwBoH/s/ALTPm7fvXg1Go+E4SfoRs2mRFml1X+VfvBwNnyQXjuurZkWRHszj0fBplU+W80fz65/9N9+LRw+r/O/c89ejpfxhnKx78gAAAAAAAAAAAAAAAAAAALAlHid/9erRWVGk+1W+fsDS+f8q+uf3AZbO73fjfndj0wAAAAAAAAAAAAAAAAAAAICddvbl62k2mXzItyXobGthVwexzqfobfrVuHPN6ZTfqsW6GOnH2urpbskq3zC4l+7c+zmbNPmpBAAAAAAAAAAAAAAAAAAA7VQf+m26EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoTv3//+sLmp4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0A6/AgAA//8/24lZ") 11.601114834s ago: executing program 0 (id=603): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, 0x0, 0x4c840) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@gettfilter={0x34, 0x2e, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0x0, 0xd}, {0x7, 0x3}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x2004004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x8, &(0x7f0000000380)=@raw=[@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10, &(0x7f0000000180)={0xa, 0x4e20, 0x7, @local, 0x8}, 0x18) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110c230000) ioctl$TUNGETVNETLE(r6, 0x4010744d, &(0x7f0000000180)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x150) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000040)='blacklist\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='ethtool\x00', r9) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0xfffffffc, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003cc0), 0x0, 0x4000000) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="44000000af73833a71a4456308421122f3077b3f848981f4aa378500fc2168664cd20f63b495bf9db3092baf7b4a894ba2f7c036937720dd3aaf07540e679945060f517806e34e372693df60daf5d35f68f26873adc7db9305fa775fb99122d85bd86a29ac5246495ad8516e6581f2d7dcb887020aaa1390874bf343701e958bd2a0a1d2b61405899575a5036f7cdf8199c8aa38aeb54997b0a4fc654ec442ed36b2f13c908da7aa6010e1a6b956b3db8184654783536430bb8407ba536566a6835ee8c401000000c6c364704b1be294e08378e59cd9dcf1a16181cc0d4f47829c89", @ANYRES16, @ANYBLOB="01002cbd7000ffdbdf250c000000180001801400020076657468315f746f5f68737200000000180003801400038010000180040003000500020000"], 0x44}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) 9.036731164s ago: executing program 7 (id=604): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, 0x0, 0x1, 0x170bd2b, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}, 0x1, 0x300}, 0x8000) 7.743690995s ago: executing program 6 (id=606): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./f0\x00', 0x42, 0x180) ftruncate(r0, 0x8000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./f1\x00', 0x42, 0x180) ftruncate(r1, 0x8000000) r2 = syz_open_dev$loop(&(0x7f0000000280), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x1, 0x2) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='md0\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/md0\x00', 0x4002, 0x0) ioctl(r5, 0x40480923, &(0x7f0000000400)="00000000000000000000000000000000010000000000020002000000020000000000000001000000000000000100"/63) ioctl(r5, 0x40140921, &(0x7f0000000480)="00000000070000000000000000000000060000") ioctl(r5, 0x40140921, &(0x7f00000004a0)="0100000007000000010000000100000006000000") ioctl(r5, 0x400c0930, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) write(r6, &(0x7f0000000540)='+8\n', 0x3) nanosleep(&(0x7f0000000700)={0x0, 0x1dcd6500}, 0x0) 7.594139962s ago: executing program 0 (id=607): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@nogrpid}]}, 0x0, 0x465, &(0x7f0000000bc0)="$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") ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000200)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 7.507792836s ago: executing program 7 (id=608): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="9101000000112233445500"/64) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r1 = socket(0x8, 0x2, 0x0) setsockopt(r1, 0x108, 0x42020054, &(0x7f0000000200)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) connect(r1, &(0x7f0000000600)=@generic={0x8}, 0xc) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 7.357355374s ago: executing program 0 (id=609): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x79, 0x1801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x40, 0x6, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x3f, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a10075089501093081"], 0x0}, 0x0) 6.834917388s ago: executing program 3 (id=612): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$eJzs3c1rHOUfAPDvbPPSX9qfjSBoPQUEDZRuTI2tgoeKBxEsFPRsGzbbULPJhuymNCGgRQQvgooHQS89W603r75c9Q/w7kFaqqbFiAeJzL6k22Y33aTZbMt+PjDJ88zM5jvfeWbmebIz7AbQs0bSH5mIwxHxURJxqDY/iYj+Sqkv4mR1vbXVlVw6JbG+/sYfSWWdW6sruWh4TepArfJERPzwfsSRzOa4paXlmclCIb9Qq4+VZ+fHSkvLR8/PTk7np/Nzx8cnJo6deP7E8d3L9a+flw9e//jVZ74++c97j1/98MckTsbB2rLGPHbLSIzU9kl/ugvv8Eq8s9vhuirp9gawI+mpua96lsfhJC33dXuTAIAOS0eh6wBAj0n0/wDQY+rvA9xaXcnVp+6+I7G3brwcEfur+dfvb1aX9NXu2e2v3AcdupXccWckiYjhXYg/EhFffPvWlXSKDt2HBGjm3UsRcXZ4ZPP1P9n0zMJ2PdvGOiN31Tfi/9J/n9GBe/kuHf+80Gz8l9kY/0ST8c9gk3N3J1qe/xsy13YhTEvp+O+lhmfb1hryrxneV6v9vzLm60/OnS/k02vbIxExGv2DaX18ixijN/+92WpZ4/jvz0/e/jKNn/6+vUbmWt/gna+ZmixP3k/OjW5ciniyr57/pYYlyUb7Jy3Gv6fbjPHaix983mpZmn+ab33anH9nrV+OeLpp+99+oi3Z8vnEscrhMFY/KJr45tfPhlrFb2z/dFpbXVlPIq7sfqbNpe0/tHX+w0nj85ql7cf46fKh71sta5J/rv6/UFXz438gebNSHqjNuzhZLi+MRwwkr2+ef+z2a+v1+vpp/qNPNT//tzr+09HJ2Tbz77v++1c7z7+z0vynttX+2y9cXZvZ1yp+e+0/USmN1uZsff2rXrfb3cD73X8AAAAAAAAAAAAAAAAAAAAAAAAA0I5MRByMJJPdKGcy2Wz1O7wfi6FMoVgqHzlXXJybisp3ZQ9Hf6b+UZeHGj4Pdbz2efj1+rG76s9FxKMR8eng/yr1bK5YmOp28gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQc6DF9/+nfhvs9tYBAB2zv9sbAADsOf0/APQe/T8A9B79PwD0Hv0/APQe/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAddvrUqXRa/3t1JZfWpy4sLc4ULxydypdmsrOLuWyuuDCfnS4Wpwv5bK44e6+/VygW5ydibvHiWDlfKo+VlpbPzBYX58pnzs9OTufP5Pv3JCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2J7S0vLMZKGQX1B4CAp9tVZ7ULZnR4VMPYm9CjrQxjrr8zdPbTuLB2Bndq7QxYsSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEPkvwAAAP//vI8fOA==") prctl$PR_SET_MM(0x35, 0x2, &(0x7f0000f77000/0x4000)=nil) openat(0xffffffffffffff9c, 0x0, 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r3, 0x0, 0x31, 0x0, &(0x7f00000002c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') pread64(r4, &(0x7f00000000c0)=""/169, 0xa9, 0x4fd9) 6.57364356s ago: executing program 6 (id=613): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 6.531554452s ago: executing program 3 (id=614): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x77}, {{0x0, 0x0, 0x0}, 0x4f5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000002600)}, 0x5}, {{0x0, 0x0, 0x0}, 0x7}], 0x5, 0x120, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000280)='./bus\x00', 0x8090, &(0x7f0000000100)={[{@dots}, {@fat=@flush}]}, 0x1, 0x267, &(0x7f00000007c0)="$eJzs3cFqE1EUANCbNk1jN3YniIsBN65E/YMgEcSAEJmFrhyobhoRppvRjfkMv8FP8jOy6m7ETnRMKqWUJJN0zoGQy7sZcl9eyMvivuT9g0+nJ5/PPpY/v0e/n0Q3YhrnEcexF/uxaC8iOtFbGJsGALBrxuNs0HQNrFDn8lCeD7KDiDi8lEl/bKYoAAAAAAAAAAAAVu06/f9/Wsr0/wPA7aD///bL80F2NP/+tkj/PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCc87K8W15xa7o+AGD17P8A0D72fwBoH/s/ALTPm7fvXg1Go+E4SfoRs2mRFml1X+VfvBwNnyQXjuurZkWRHszj0fBplU+W80fz65/9N9+LRw+r/O/c89ejpfxhnKx78gAAAAAAAAAAAAAAAAAAALAlHid/9erRWVGk+1W+fsDS+f8q+uf3AZbO73fjfndj0wAAAAAAAAAAAAAAAAAAAICddvbl62k2mXzItyXobGthVwexzqfobfrVuHPN6ZTfqsW6GOnH2urpbskq3zC4l+7c+zmbNPmpBAAAAAAAAAAAAAAAAAAA7VQf+m26EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoTv3//+sLmp4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0A6/AgAA//8/24lZ") 5.858313454s ago: executing program 6 (id=615): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0) 2.839274336s ago: executing program 7 (id=616): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x210080, &(0x7f0000000200)={[], [{@context={'context', 0x3d, 'user_u'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}]}, 0x3, 0x58c, &(0x7f0000000600)="$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") write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x4000, &(0x7f0000000a40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c0036b573262ed88dfec7618c03371693a5173bd0bf12d29c0180500a87e3789adea802a90933b243ca225dacfc27597d6e1ce3d9fdc12409748ba4fbde6f1d76e116fd437b79bbcea7fdc682fd0b90334eed137d03ce386950f5e50ff2516eb2b500a9b99e04f2a41864e44cb46101a23835877342485260d4510fa3240a2c9756d388e5861cdeaf4c88bca74fe3ce71eef72c", @ANYRESDEC=0x0, @ANYRESHEX=0x0, @ANYRESOCT, @ANYRES64], 0x1, 0x2b6, &(0x7f0000000c00)="$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") mount(0x0, 0x0, 0x0, 0x820000, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x8003, @any, 0x0, 0x1}, 0xe) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 2.838401506s ago: executing program 4 (id=617): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000001c0)=@ipv6_newrule={0x30, 0x20, 0x1, 0x70bd28, 0x35dfdbff, {0xa, 0x80, 0x0, 0xfd, 0xb5, 0x0, 0x0, 0x3, 0x17}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) 2.838190396s ago: executing program 6 (id=618): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r0, 0x1, 0x170bd2b, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}, 0x1, 0x300}, 0x8000) 2.837492596s ago: executing program 3 (id=619): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1001a, &(0x7f00000000c0)={[{@quota}, {@minixdf}, {@inlinecrypt}, {@resgid={'resgid', 0x3d, 0xee00}}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0x1, 0x442, &(0x7f00000008c0)="$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") mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x8, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file1\x00', 0x2) 2.837270466s ago: executing program 0 (id=620): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.836983796s ago: executing program 4 (id=621): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000020000085000000d0"], 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 2.836518306s ago: executing program 3 (id=622): mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0xc620, 0xb, @remote, 0x2}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="5aa950831bee", @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @local, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) 2.834588426s ago: executing program 6 (id=623): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', &(0x7f0000000180), 0x6000) 2.834064486s ago: executing program 3 (id=624): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./f0\x00', 0x42, 0x180) ftruncate(r0, 0x8000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./f1\x00', 0x42, 0x180) ftruncate(r1, 0x8000000) r2 = syz_open_dev$loop(&(0x7f0000000280), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x1, 0x2) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='md0\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/md0\x00', 0x4002, 0x0) ioctl(r5, 0x40480923, &(0x7f0000000400)="00000000000000000000000000000000010000000000020002000000020000000000000001000000000000000100"/63) ioctl(r5, 0x40140921, &(0x7f0000000480)="0000000007000000000000000000000006000000") ioctl(r5, 0x40140921, 0x0) ioctl(r5, 0x400c0930, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) write(r6, &(0x7f0000000540)='+8\n', 0x3) nanosleep(&(0x7f0000000700)={0x0, 0x1dcd6500}, 0x0) 2.798961998s ago: executing program 7 (id=625): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) pread64(0xffffffffffffffff, &(0x7f0000000440)=""/210, 0xd2, 0x57) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000880)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000010980)={[{@test_dummy_encryption}, {@nogrpid}], [{@permit_directio}, {@context={'context', 0x3d, 'user_u'}}, {@seclabel}, {@smackfsdef={'smackfsdef', 0x3d, '\'&&!*-}%[{['}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@flag='rw'}, {@uid_lt}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}, 0xfd, 0x4a4, &(0x7f0000000380)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) socketpair$unix(0x1, 0x2, 0x0, 0x0) mlockall(0x7) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x400, '\x00', 0x0, r0}, 0x50) r4 = open(0x0, 0x4827e, 0xdc) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000840)) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10200}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x1}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x80000001}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f00000006c0)={0x7, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e24, @private=0xa010101}}}, 0x108) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0x1) getsockopt$inet_buf(r5, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) fallocate(r4, 0x0, 0x1, 0x8800000) ioctl$NILFS_IOCTL_RESIZE(r5, 0x40086e8b, &(0x7f00000000c0)=0x8) 2.510164492s ago: executing program 0 (id=626): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) 2.509718662s ago: executing program 4 (id=627): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x7, 0xfffe, 0x0, 0xabe6, 0x0, 0x0, 0x10, 0x7ffe}}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f8000000160085"], 0xf8}}, 0x40000) sendmsg$nl_xfrm(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000002500)=@flushsa={0x14, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x32}}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x20000044) syz_clone3(0x0, 0x0) 2.486253672s ago: executing program 6 (id=628): mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000004c0)={[{@release_agent={'release_agent', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@release_agent={'release_agent', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}]}) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=macgreek,umask=00000000000000000000005,namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x153e, &(0x7f0000004a00)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) 1.404790244s ago: executing program 0 (id=629): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="9101000000112233445500"/64) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r1 = socket(0x8, 0x2, 0x0) setsockopt(r1, 0x108, 0x42020054, &(0x7f0000000200)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) connect(r1, &(0x7f0000000600)=@generic={0x8}, 0xc) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 141.626183ms ago: executing program 4 (id=630): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0xa26}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in=@private=0xa010101, 0x0, 0x0, 0x4e24, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x4d6, 0x33}, 0x0, @in=@loopback, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 0s ago: executing program 3 (id=631): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x79, 0x1801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x40, 0x6, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x3f, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a10075089501093081"], 0x0}, 0x0) kernel console output (not intermixed with test programs): V_CHANGE): veth0_macvtap: link becomes ready [ 86.882397][ T4289] Bluetooth: hci3: command 0x0419 tx timeout [ 86.893248][ T4276] Bluetooth: hci1: command 0x0419 tx timeout [ 86.902856][ T4290] Bluetooth: hci4: command 0x0419 tx timeout [ 86.905636][ T4289] Bluetooth: hci2: command 0x0419 tx timeout [ 86.925182][ T4378] loop0: detected capacity change from 0 to 2048 [ 86.952694][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.961335][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.963700][ T4289] Bluetooth: hci0: command 0x0419 tx timeout [ 87.025481][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.044881][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.073828][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.082535][ T4378] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 87.103344][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.139329][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.152795][ T4326] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.179947][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.200747][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.225082][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.235856][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.246544][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.257368][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.270806][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.300769][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.315504][ T4383] loop2: detected capacity change from 0 to 2048 [ 87.322537][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.361152][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.400554][ T4383] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 87.416700][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.458069][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.480796][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.540437][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.551447][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.569487][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.036229][ T4388] netlink: 80 bytes leftover after parsing attributes in process `syz.0.11'. [ 88.165638][ T4326] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.257986][ T4376] sched: RT throttling activated [ 88.377046][ T4326] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 88.639736][ T4326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.738811][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.758350][ T4326] usb 4-1: Product: syz [ 88.780136][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.825910][ T4326] usb 4-1: Manufacturer: syz [ 88.847658][ T4326] usb 4-1: SerialNumber: syz [ 88.857542][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.959909][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.095668][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.108214][ T4284] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.198410][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.228007][ T4326] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 89.238565][ T4284] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.251475][ T4284] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.260925][ T4284] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.261985][ T4326] cdc_wdm 4-1:1.0: Unknown control protocol [ 89.280164][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.355545][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 89.377291][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 89.521103][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.528134][ T4352] usb 4-1: USB disconnect, device number 2 [ 89.541938][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.576522][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.671059][ T4396] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.699903][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.718017][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.739678][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.776768][ T4397] device syzkaller0 entered promiscuous mode [ 89.832264][ T4397] tipc: Started in network mode [ 89.846511][ T4397] tipc: Node identity ba6cf220d467, cluster identity 4711 [ 89.893021][ T4397] tipc: Enabled bearer , priority 0 [ 89.920962][ T4394] tipc: Resetting bearer [ 89.949954][ T4404] loop4: detected capacity change from 0 to 2048 [ 89.976159][ T4404] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 89.981583][ T4404] loop4: partition table partially beyond EOD, truncated [ 89.989210][ T4404] loop4: p1 start 3405774849 is beyond EOD, truncated [ 89.996100][ T4404] loop4: p2 start 53543428 is beyond EOD, truncated [ 90.003458][ T4404] loop4: p3 start 4284289 is beyond EOD, truncated [ 90.013046][ T4404] loop4: p5 start 3405774849 is beyond EOD, truncated [ 90.019873][ T4404] loop4: p6 start 53543428 is beyond EOD, truncated [ 90.106655][ T4394] tipc: Disabling bearer [ 90.211695][ T4406] null_blk: disk nullb1 created [ 90.257991][ T4409] nvmet: adding nsid 1 to subsystem testsubsys [ 90.289478][ T4410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'. [ 90.342063][ T4412] loop4: detected capacity change from 0 to 512 [ 90.364269][ T4412] ======================================================= [ 90.364269][ T4412] WARNING: The mand mount option has been deprecated and [ 90.364269][ T4412] and is ignored by this kernel. Remove the mand [ 90.364269][ T4412] option from the mount to silence this warning. [ 90.364269][ T4412] ======================================================= [ 90.519824][ T4412] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.16: bad orphan inode 15 [ 90.536326][ T4412] ext4_test_bit(bit=14, block=5) = 0 [ 90.541702][ T4412] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 90.583581][ T4412] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 7996 vs 220 free clusters [ 90.836540][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 91.275828][ T4444] loop0: detected capacity change from 0 to 128 [ 91.343256][ T4444] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 91.347130][ T4436] mmap: syz.4.23 (4436): VmData 37666816 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 91.370838][ T4444] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.467007][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.577821][ T4447] loop3: detected capacity change from 0 to 256 [ 91.597282][ T4447] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe69f4e8a, utbl_chksum : 0x7319d30d) [ 91.630775][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 91.697011][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.759916][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.802995][ T7] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 91.835567][ T4453] nvmet: adding nsid 1 to subsystem test [ 91.843759][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.868966][ T7] usb 2-1: config 0 descriptor?? [ 91.973373][ T4455] syz.0.31 uses obsolete (PF_INET,SOCK_PACKET) [ 93.073889][ T7] hid-led 0003:1D34:000A.0001: item fetching failed at offset 0/3 [ 93.096468][ T7] hid-led: probe of 0003:1D34:000A.0001 failed with error -22 [ 93.143036][ T2186] nvmet: connect request for invalid subsystem test! [ 93.160525][ T4465] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "test" [ 93.278516][ T2186] usb 2-1: USB disconnect, device number 2 [ 93.302446][ T4326] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 93.501953][ T4326] usb 5-1: Using ep0 maxpacket: 32 [ 93.516562][ T4326] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 93.551954][ T4326] usb 5-1: config 0 has no interface number 0 [ 93.578212][ T4326] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 93.594492][ T4326] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 93.610644][ T4326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.622603][ T4326] usb 5-1: Product: syz [ 93.627274][ T4326] usb 5-1: Manufacturer: syz [ 93.632520][ T4326] usb 5-1: SerialNumber: syz [ 93.647106][ T4326] usb 5-1: config 0 descriptor?? [ 93.670518][ T4476] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 93.978733][ T4476] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 94.438550][ T4326] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 94.552472][ T4326] asix: probe of 5-1:0.188 failed with error -32 [ 95.039884][ T4498] loop2: detected capacity change from 0 to 2048 [ 95.125584][ T4498] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 95.579959][ T4508] netlink: 80 bytes leftover after parsing attributes in process `syz.2.44'. [ 95.922125][ T4509] loop3: detected capacity change from 0 to 512 [ 96.039940][ T4509] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 96.113591][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 96.132119][ T4509] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.163745][ T2186] usb 5-1: USB disconnect, device number 2 [ 96.334324][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 96.606171][ T4525] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 96.946947][ T4532] loop3: detected capacity change from 0 to 2048 [ 97.408723][ T4532] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 98.035290][ T2186] nvmet: creating nvm controller 1 for subsystem test for NQN nqn.2014-08.org.nvmexpress:uuid:4e5922da-8508-4c9f-841a-3951a3b78cfb. [ 99.358574][ T4525] nvme nvme0: creating 2 I/O queues. [ 99.375719][ T4525] nvme nvme0: new ctrl: "test" [ 99.413699][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 99.735971][ T4555] loop0: detected capacity change from 0 to 1024 [ 99.807815][ T4555] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8803e018, mo2=0000] [ 99.883804][ T4555] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 2: comm syz.0.60: lblock 2 mapped to illegal pblock 2 (length 1) [ 99.922176][ T2186] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 99.939293][ T4555] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 99.954045][ T4555] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 48: comm syz.0.60: lblock 0 mapped to illegal pblock 48 (length 1) [ 99.973015][ T4555] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 99.983004][ T4555] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.60: Failed to acquire dquot type 0 [ 100.014882][ T4555] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 100.035450][ T4555] EXT4-fs error (device loop0): ext4_evict_inode:281: inode #11: comm syz.0.60: mark_inode_dirty error [ 100.058933][ T4555] EXT4-fs warning (device loop0): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 100.077587][ T4555] EXT4-fs (loop0): 1 orphan inode deleted [ 100.105155][ T4555] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 100.115024][ T2186] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 100.142506][ T2186] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.171877][ T2186] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 100.204707][ T2186] usb 4-1: config 0 interface 0 has no altsetting 0 [ 100.211439][ T2186] usb 4-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 100.242215][ T2186] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.251539][ T4335] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 100.289562][ T2186] usb 4-1: config 0 descriptor?? [ 100.290574][ T4564] loop4: detected capacity change from 0 to 128 [ 100.302684][ T4553] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 100.314133][ T4335] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 100.328157][ T4335] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:6: Failed to release dquot type 0 [ 100.362113][ T4555] EXT4-fs (loop0): unmounting filesystem. [ 100.374035][ T4555] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz.0.60: Invalid inode table block 1 in block_group 0 [ 100.395004][ T4564] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 100.414745][ T4564] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.425603][ T4555] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 100.488211][ T4555] EXT4-fs error (device loop0): ext4_quota_off:7147: inode #3: comm syz.0.60: mark_inode_dirty error [ 101.347930][ T4580] raw_sendmsg: syz.4.61 forgot to set AF_INET. Fix it! [ 102.083809][ T2186] input: HID 0079:1801 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0079:1801.0002/input/input5 [ 102.246656][ T2186] hid_mf 0003:0079:1801.0002: input,hidraw0: USB HID v0.40 Joystick [HID 0079:1801] on usb-dummy_hcd.3-1/input0 [ 102.299318][ T2186] hid_mf 0003:0079:1801.0002: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 102.343840][ T4584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.68'. [ 102.394284][ T2186] usb 4-1: USB disconnect, device number 3 [ 103.349594][ T4584] bond0: (slave bond_slave_0): Releasing backup interface [ 103.369632][ T4587] fido_id[4587]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 103.551816][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 103.826045][ T4600] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 104.141959][ T2186] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 104.273435][ T11] nvme nvme0: rescanning namespaces. [ 104.560583][ T47] nvme nvme0: rescanning namespaces. [ 105.078728][ T4275] nvmet: creating nvm controller 2 for subsystem test for NQN nqn.2014-08.org.nvmexpress:uuid:4e5922da-8508-4c9f-841a-3951a3b78cfb. [ 105.098001][ T4600] nvme nvme1: creating 2 I/O queues. [ 105.105782][ T4600] nvme nvme1: new ctrl: "test" [ 105.124712][ T2186] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.141925][ T2186] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 105.162039][ T2186] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 105.184080][ T2186] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 105.193283][ T2186] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.324388][ T4625] loop1: detected capacity change from 0 to 512 [ 105.390110][ T4625] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 105.422084][ T4625] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.507550][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 106.157099][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 106.310929][ T2186] cxacru 5-1:1.0: send of cm 0x84 failed (-71) [ 106.328807][ T2186] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 106.341426][ T2186] cxacru 5-1:1.0: send of cm 0x88 failed (-71) [ 106.349740][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.372025][ T7] usb 4-1: New USB device found, idVendor=1ae7, idProduct=9001, bcdDevice= 0.00 [ 106.381366][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.389791][ T2186] ATM dev 0: poll status: error -71 [ 106.402005][ T2186] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 106.411158][ T2186] ATM dev 0: usbatm_submit_urb: urb 0xffff88802aa99e00 submission failed (-8)! [ 106.424789][ T7] usb 4-1: config 0 descriptor?? [ 106.433145][ T26] audit: type=1800 audit(1789687752.574:2): pid=4638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.84" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 106.482469][ T2186] ATM dev 0: usbatm_submit_urb: urb 0xffff88802aa99c00 submission failed (-8)! [ 106.491567][ T2186] ATM dev 0: usbatm_submit_urb: urb 0xffff88802aa99b00 submission failed (-8)! [ 106.520145][ T4642] loop0: detected capacity change from 0 to 256 [ 106.526993][ T2186] ATM dev 0: usbatm_submit_urb: urb 0xffff88802aa99700 submission failed (-8)! [ 106.541777][ T4641] device erspan1 entered promiscuous mode [ 106.554486][ T4642] FAT-fs (loop0): Unrecognized mount option "rø¶°" or missing value [ 106.569934][ T2186] usb 5-1: USB disconnect, device number 3 [ 106.616513][ T4641] loop2: detected capacity change from 0 to 512 [ 106.625349][ T4641] EXT4-fs: Ignoring removed i_version option [ 106.650635][ T4641] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 106.656057][ T4641] EXT4-fs (loop2): failed to open journal device unknown-block(8,0) -16 [ 106.914617][ T7] usbhid 4-1:0.0: can't add hid device: -71 [ 106.920677][ T7] usbhid: probe of 4-1:0.0 failed with error -71 [ 106.981349][ T7] usb 4-1: USB disconnect, device number 4 [ 107.068371][ T4653] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 107.158384][ T4658] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 108.163371][ T4653] syz.2.90 (4653) used greatest stack depth: 20688 bytes left [ 108.229795][ T4665] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 108.621633][ T4536] nvme nvme0: rescanning namespaces. [ 108.628118][ T4301] nvme nvme1: rescanning namespaces. [ 108.667290][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 108.675422][ T127] nvmet: creating nvm controller 3 for subsystem test for NQN nqn.2014-08.org.nvmexpress:uuid:4e5922da-8508-4c9f-841a-3951a3b78cfb. [ 108.718572][ T4665] nvme nvme2: creating 2 I/O queues. [ 108.720592][ T4301] nvme nvme1: rescanning namespaces. [ 108.729699][ T9] nvme nvme0: rescanning namespaces. [ 108.745556][ T4665] nvme nvme2: new ctrl: "test" [ 108.871942][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 108.878982][ T7] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 108.899425][ T7] usb 3-1: config 0 has no interface number 0 [ 108.921897][ T7] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 108.949051][ T7] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 108.981917][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.989968][ T7] usb 3-1: Product: syz [ 109.030772][ T7] usb 3-1: Manufacturer: syz [ 109.046002][ T7] usb 3-1: SerialNumber: syz [ 109.069038][ T7] usb 3-1: config 0 descriptor?? [ 109.095877][ T4673] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 109.325392][ T4673] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 109.772218][ T7] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 109.807150][ T7] asix: probe of 3-1:0.188 failed with error -32 [ 109.991914][ T4326] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 110.145505][ T4699] loop3: detected capacity change from 0 to 2048 [ 110.172098][ T127] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 110.212086][ T4326] usb 2-1: Using ep0 maxpacket: 16 [ 110.220339][ T4699] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 110.230492][ T4326] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.440731][ T4326] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.454173][ T4326] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 110.463296][ T4326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.471419][ T4326] usb 2-1: Product: syz [ 110.476539][ T4326] usb 2-1: Manufacturer: syz [ 110.481178][ T4326] usb 2-1: SerialNumber: syz [ 110.500678][ T4705] loop4: detected capacity change from 0 to 512 [ 110.558026][ T127] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.776250][ T4326] usb 2-1: 0:2 : does not exist [ 110.876540][ T127] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 110.934722][ T4705] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 111.064202][ T4326] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 111.078248][ T127] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 111.095418][ T4705] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.165014][ T127] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 111.209256][ T4326] usb 2-1: USB disconnect, device number 3 [ 111.220852][ T127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.281062][ T955] usb 3-1: USB disconnect, device number 2 [ 111.510547][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 111.516142][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 111.787339][ T4400] udevd[4400]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.493804][ T127] cxacru 1-1:1.0: send of cm 0x84 failed (-71) [ 112.503374][ T127] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 112.512708][ T127] cxacru 1-1:1.0: send of cm 0x88 failed (-71) [ 112.519050][ T127] ATM dev 0: poll status: error -71 [ 112.524340][ T127] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 112.533166][ T127] ATM dev 0: usbatm_submit_urb: urb 0xffff888079a5cb00 submission failed (-8)! [ 112.542190][ T127] ATM dev 0: usbatm_submit_urb: urb 0xffff888079a5cc00 submission failed (-8)! [ 112.551170][ T127] ATM dev 0: usbatm_submit_urb: urb 0xffff888079a5cd00 submission failed (-8)! [ 112.567158][ T127] ATM dev 0: usbatm_submit_urb: urb 0xffff888079a5ce00 submission failed (-8)! [ 112.604781][ T127] usb 1-1: USB disconnect, device number 2 [ 112.809690][ T26] audit: type=1326 audit(1789687758.884:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.2.108" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc939e159 code=0x7ffc0000 [ 113.724943][ T26] audit: type=1326 audit(1789687758.884:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.2.108" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc939e159 code=0x7ffc0000 [ 113.881899][ T4325] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 113.954340][ T26] audit: type=1326 audit(1789687758.884:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.2.108" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8dc939e159 code=0x7ffc0000 [ 114.070816][ T26] audit: type=1326 audit(1789687758.894:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.2.108" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc939e159 code=0x7ffc0000 [ 114.096998][ T4325] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.134197][ T4325] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 114.231911][ T4325] usb 5-1: config 0 interface 0 has no altsetting 0 [ 114.277738][ T4741] loop0: detected capacity change from 0 to 512 [ 114.294942][ T4325] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 114.360722][ T4325] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 114.433808][ T4325] usb 5-1: Manufacturer: syz [ 114.438472][ T4325] usb 5-1: SerialNumber: syz [ 114.536587][ T4325] usb 5-1: config 0 descriptor?? [ 114.572103][ T4729] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 114.908203][ T4729] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 114.969656][ T4325] plusb 5-1:0.0 usb0: register 'plusb' at usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, e6:f1:b7:39:f8:11 [ 114.971360][ T4743] loop1: detected capacity change from 0 to 128 [ 115.068369][ T4745] netlink: 20 bytes leftover after parsing attributes in process `syz.2.114'. [ 115.236779][ T4325] usb 5-1: USB disconnect, device number 4 [ 115.244314][ T4325] plusb 5-1:0.0 usb0: unregister 'plusb' usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 116.906135][ T4738] loop3: detected capacity change from 0 to 40427 [ 117.492978][ T4757] netlink: 'syz.4.115': attribute type 3 has an invalid length. [ 117.500741][ T4757] netlink: 32 bytes leftover after parsing attributes in process `syz.4.115'. [ 117.852540][ T127] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 118.102841][ T127] usb 5-1: device descriptor read/64, error -71 [ 118.427188][ T4768] loop2: detected capacity change from 0 to 256 [ 118.433764][ T127] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 118.502087][ T4275] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 118.544739][ T4768] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0x8604b368, utbl_chksum : 0xe619d30d) [ 118.598026][ T4768] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 118.612152][ T127] usb 5-1: device descriptor read/64, error -71 [ 118.652279][ T4768] exFAT-fs (loop2): failed to load alloc-bitmap [ 118.662252][ T4768] exFAT-fs (loop2): failed to recognize exfat type [ 118.701983][ T4275] usb 2-1: Using ep0 maxpacket: 32 [ 118.709912][ T4275] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 118.719809][ T4768] process 'syz.2.119' launched './file1' with NULL argv: empty string added [ 118.739959][ T127] usb usb5-port1: attempt power cycle [ 118.748163][ T4275] usb 2-1: config 0 has no interface number 0 [ 118.777515][ T4275] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 118.821560][ T4275] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 118.841942][ T7] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 118.871447][ T4275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.901973][ T4275] usb 2-1: Product: syz [ 118.906212][ T4275] usb 2-1: Manufacturer: syz [ 118.910840][ T4275] usb 2-1: SerialNumber: syz [ 118.955072][ T4275] usb 2-1: config 0 descriptor?? [ 118.971163][ T4761] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 119.023883][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 119.056118][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.111998][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 119.142652][ T7] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 119.161860][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.172038][ T127] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 119.194428][ T4761] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 119.216367][ T7] usb 4-1: config 0 descriptor?? [ 119.222596][ T127] usb 5-1: device descriptor read/8, error -71 [ 119.289878][ T4781] loop2: detected capacity change from 0 to 512 [ 119.420974][ T4781] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 119.450241][ T4781] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 119.689102][ T127] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 119.783487][ T127] usb 5-1: device descriptor read/8, error -71 [ 120.425240][ T4275] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 120.437409][ T4275] asix: probe of 2-1:0.188 failed with error -32 [ 120.447708][ T7] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 120.466257][ T7] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 120.512119][ T127] usb usb5-port1: unable to enumerate USB device [ 120.687349][ T4335] Bluetooth: hci5: Frame reassembly failed (-84) [ 121.545757][ T127] usb 2-1: USB disconnect, device number 4 [ 121.982423][ T7] usb 4-1: reset full-speed USB device number 5 using dummy_hcd [ 122.832952][ T4289] Bluetooth: hci5: command 0x1003 tx timeout [ 122.877287][ T4809] loop0: detected capacity change from 0 to 512 [ 122.889143][ T4276] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 122.976285][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 123.124381][ T4815] loop3: detected capacity change from 0 to 256 [ 123.135761][ T4814] loop1: detected capacity change from 0 to 512 [ 123.184973][ T4815] exfat: Deprecated parameter 'namecase' [ 123.188709][ T4814] ext4: Unknown parameter 'nouser_xattr' [ 123.211938][ T4815] exfat: Deprecated parameter 'namecase' [ 123.289859][ T4815] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 123.641289][ T4827] loop2: detected capacity change from 0 to 1024 [ 123.665812][ T14] usb 4-1: USB disconnect, device number 5 [ 123.675186][ T4827] EXT4-fs: Ignoring removed bh option [ 123.785051][ T4827] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 124.151893][ T14] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 124.231662][ T4847] loop4: detected capacity change from 0 to 256 [ 124.253941][ T4847] FAT-fs (loop4): Unrecognized mount option "rø¶°" or missing value [ 124.351928][ T14] usb 4-1: Using ep0 maxpacket: 32 [ 124.359204][ T14] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 124.412497][ T14] usb 4-1: config 0 has no interface number 0 [ 124.467265][ T14] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 124.598931][ T14] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 125.360521][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.368668][ T14] usb 4-1: Product: syz [ 125.474418][ T14] usb 4-1: Manufacturer: syz [ 125.479097][ T14] usb 4-1: SerialNumber: syz [ 125.517307][ T14] usb 4-1: config 0 descriptor?? [ 125.523441][ T4833] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 125.741803][ T4833] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 126.077630][ T4858] loop4: detected capacity change from 0 to 256 [ 126.085899][ T4858] FAT-fs (loop4): Unrecognized mount option "gid=;ŽË7C©;äž·Æ®ÇòP‹‡s¯bkÞ‘ÈvÒW0z@A×`m/ oWhÔ»Z" or missing value [ 126.103009][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 126.137523][ T4400] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 126.208443][ T14] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 126.262181][ T14] asix: probe of 4-1:0.188 failed with error -61 [ 126.348800][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 126.355139][ T7] usb 2-1: too many configurations: 55, using maximum allowed: 8 [ 126.408722][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.467533][ T7] usb 2-1: config 0 has no interfaces? [ 126.496278][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.526134][ T7] usb 2-1: config 0 has no interfaces? [ 126.560893][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.591526][ T7] usb 2-1: config 0 has no interfaces? [ 126.609367][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.632475][ T7] usb 2-1: config 0 has no interfaces? [ 126.645397][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 126.652433][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.662850][ T7] usb 2-1: config 0 has no interfaces? [ 126.669585][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.680412][ T7] usb 2-1: config 0 has no interfaces? [ 126.687973][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.698512][ T7] usb 2-1: config 0 has no interfaces? [ 126.706732][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.718107][ T7] usb 2-1: config 0 has no interfaces? [ 126.774879][ T4844] mmap: syz.1.138 (4844) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 126.841940][ T7] usb 2-1: string descriptor 0 read error: -71 [ 126.858520][ T7] usb 2-1: New USB device found, idVendor=2304, idProduct=a1a0, bcdDevice=7f.58 [ 126.878661][ T7] usb 2-1: New USB device strings: Mfr=220, Product=245, SerialNumber=158 [ 126.969221][ T7] usb 2-1: config 0 descriptor?? [ 126.976723][ T7] usb 2-1: can't set config #0, error -71 [ 127.014502][ T7] usb 2-1: USB disconnect, device number 5 [ 127.111711][ T4853] loop0: detected capacity change from 0 to 40427 [ 127.136913][ T4853] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 127.155078][ T4853] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 127.213618][ T4853] F2FS-fs (loop0): invalid crc value [ 127.519543][ T4853] F2FS-fs (loop0): Found nat_bits in checkpoint [ 127.558615][ T4872] syz.4.146 (4872): attempted to duplicate a private mapping with mremap. This is not supported. [ 128.024053][ T7] usb 4-1: USB disconnect, device number 6 [ 128.230586][ T4853] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 128.265242][ T4853] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 130.681636][ T4902] loop1: detected capacity change from 0 to 512 [ 130.903984][ T4902] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 130.946018][ T4902] System zones: 1-12 [ 131.009408][ T4902] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.157: missing EA_INODE flag [ 131.102178][ T4902] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.157: error while reading EA inode 12 err=-117 [ 131.177293][ T4902] EXT4-fs (loop1): 1 orphan inode deleted [ 131.423846][ T4902] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 133.145687][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.158727][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.771987][ T4921] loop2: detected capacity change from 0 to 1024 [ 133.795892][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 133.831200][ T4921] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.889801][ T4921] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 133.968950][ T4921] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 134.198514][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 134.593623][ T4931] loop0: detected capacity change from 0 to 262144 [ 134.654807][ T4931] loop1: detected capacity change from 0 to 262144 [ 134.917370][ T4933] block device autoloading is deprecated and will be removed. [ 135.162064][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 135.354039][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.369571][ T7] usb 3-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 135.475214][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.508262][ T7] usb 3-1: config 0 descriptor?? [ 135.645497][ T4954] loop0: detected capacity change from 0 to 128 [ 137.761289][ T7] wacom 0003:056A:0318.0004: ignoring exceeding usage max [ 137.815070][ T4971] device erspan1 entered promiscuous mode [ 137.854750][ T4971] loop3: detected capacity change from 0 to 512 [ 137.882007][ T4325] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 137.902903][ T4971] EXT4-fs: Ignoring removed i_version option [ 137.931539][ T4971] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 137.967185][ T4971] EXT4-fs (loop3): failed to open journal device unknown-block(8,0) -16 [ 138.001360][ T4975] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 138.022364][ T4352] usb 3-1: USB disconnect, device number 3 [ 138.108534][ T4325] usb 2-1: Using ep0 maxpacket: 16 [ 138.125670][ T4325] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.162276][ T4325] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 138.195607][ T4325] usb 2-1: config 0 interface 0 has no altsetting 0 [ 138.205750][ T4325] usb 2-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 138.236110][ T4325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.279148][ T4980] loop3: detected capacity change from 0 to 2048 [ 138.288410][ T4325] usb 2-1: config 0 descriptor?? [ 138.410107][ T59] nvme nvme1: rescanning namespaces. [ 138.410457][ T4919] nvme nvme2: rescanning namespaces. [ 138.416069][ T4547] nvme nvme0: rescanning namespaces. [ 138.427024][ T4980] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 138.442656][ T955] nvmet: creating nvm controller 4 for subsystem test for NQN nqn.2014-08.org.nvmexpress:uuid:4e5922da-8508-4c9f-841a-3951a3b78cfb. [ 138.490466][ T4727] nvme nvme2: rescanning namespaces. [ 138.506639][ T4975] nvme nvme3: creating 2 I/O queues. [ 138.512529][ T4919] nvme nvme1: rescanning namespaces. [ 138.664238][ T4975] nvme nvme3: new ctrl: "test" [ 138.675305][ T4969] loop4: detected capacity change from 0 to 40427 [ 138.694955][ T4969] F2FS-fs (loop4): invalid crc value [ 138.951195][ T4325] pantherlord 0003:0810:0001.0005: unexpected long global item [ 139.041283][ T4325] pantherlord 0003:0810:0001.0005: parse failed [ 139.173161][ T4325] pantherlord: probe of 0003:0810:0001.0005 failed with error -22 [ 139.230746][ T4325] usb 2-1: USB disconnect, device number 6 [ 139.395487][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 139.406156][ T4969] F2FS-fs (loop4): Found nat_bits in checkpoint [ 139.470831][ T4969] F2FS-fs (loop4): Start checkpoint disabled! [ 139.533477][ T4969] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 139.763018][ T4996] loop0: detected capacity change from 0 to 262144 [ 139.823731][ T4996] loop1: detected capacity change from 0 to 262144 [ 139.958135][ T34] kworker/u4:2: attempt to access beyond end of device [ 139.958135][ T34] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 140.162866][ T127] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 140.272194][ T4996] md/raid1:md0: active with 2 out of 2 mirrors [ 140.298097][ T4996] md0: detected capacity change from 0 to 262144 [ 140.384441][ T127] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.418768][ T127] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.443313][ T127] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 140.458495][ T5007] loop4: detected capacity change from 0 to 256 [ 140.476227][ T127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.527580][ T127] usb 1-1: config 0 descriptor?? [ 140.950309][ T5013] loop4: detected capacity change from 0 to 256 [ 140.968707][ T127] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 140.979397][ T5013] FAT-fs (loop4): Unrecognized mount option "rø¶°" or missing value [ 141.002466][ T127] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 141.217781][ T127] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 141.231858][ T127] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 141.238714][ T127] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 141.245654][ T127] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 141.252536][ T127] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 141.262738][ T127] arvo 0003:1E7D:30D4.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 142.079021][ T5025] xt_hashlimit: size too large, truncated to 1048576 [ 142.089874][ T5024] loop2: detected capacity change from 0 to 512 [ 142.131167][ T5024] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 142.140486][ T5024] System zones: 1-12 [ 142.182062][ T5024] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.189: missing EA_INODE flag [ 142.194023][ T127] arvo 0003:1E7D:30D4.0006: couldn't init struct arvo_device [ 142.201484][ T127] arvo 0003:1E7D:30D4.0006: couldn't install keyboard [ 142.208761][ T5024] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.189: error while reading EA inode 12 err=-117 [ 142.241479][ T127] arvo: probe of 0003:1E7D:30D4.0006 failed with error -71 [ 142.273211][ T127] usb 1-1: USB disconnect, device number 3 [ 142.309545][ T5024] EXT4-fs (loop2): 1 orphan inode deleted [ 142.348826][ T5024] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 142.614941][ T5036] loop4: detected capacity change from 0 to 256 [ 142.648801][ T5033] fido_id[5033]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 142.697013][ T5036] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d) [ 144.323234][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 145.154240][ T4275] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 145.346258][ T4275] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 145.372132][ T4275] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.412605][ T4275] usb 4-1: config 0 interface 0 has no altsetting 0 [ 145.428498][ T4275] usb 4-1: New USB device found, idVendor=056a, idProduct=00df, bcdDevice= 0.00 [ 145.459126][ T4275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.505785][ T4275] usb 4-1: config 0 descriptor?? [ 145.676891][ T5060] loop4: detected capacity change from 0 to 40427 [ 145.728796][ T5060] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 145.747520][ T5060] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 145.779030][ T5060] F2FS-fs (loop4): invalid crc value [ 145.793223][ T5060] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 145.812144][ T5065] md: couldn't update array info. -22 [ 145.823229][ T5065] md: could not open device unknown-block(7,0). [ 145.829577][ T5065] md: md_import_device returned -16 [ 145.862241][ T5065] md: could not open device unknown-block(7,1). [ 145.891885][ T5065] md: md_import_device returned -16 [ 145.904376][ T5065] syz.2.205: attempt to access beyond end of device [ 145.904376][ T5065] loop1: rw=2048, sector=262152, nr_sectors = 1 limit=262144 [ 145.952165][ T5065] syz.2.205: attempt to access beyond end of device [ 145.952165][ T5065] loop0: rw=2048, sector=262152, nr_sectors = 1 limit=262144 [ 145.999585][ T4275] wacom 0003:056A:00DF.0007: Unknown device_type for 'HID 056a:00df'. Assuming pen. [ 146.017618][ T5060] F2FS-fs (loop4): Start checkpoint disabled! [ 146.044396][ T4275] wacom 0003:056A:00DF.0007: hidraw0: USB HID v0.02 Device [HID 056a:00df] on usb-dummy_hcd.3-1/input0 [ 146.050940][ T5060] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 146.071835][ T5060] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 146.107865][ T4275] input: Wacom Bamboo 16FG 6x8 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00DF.0007/input/input9 [ 146.249886][ T4275] usb 4-1: USB disconnect, device number 7 [ 146.565906][ T5070] fido_id[5070]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 146.751879][ T32] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 146.949218][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.011995][ T32] usb 1-1: New USB device found, idVendor=1ae7, idProduct=9001, bcdDevice= 0.00 [ 147.021148][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.076463][ T5079] binder: 5078:5079 ioctl c018620c 200000000180 returned -22 [ 147.090852][ T32] usb 1-1: config 0 descriptor?? [ 147.500051][ T32] usbhid 1-1:0.0: can't add hid device: -71 [ 147.510163][ T32] usbhid: probe of 1-1:0.0 failed with error -71 [ 147.538187][ T32] usb 1-1: USB disconnect, device number 4 [ 147.710342][ T5089] netlink: 56 bytes leftover after parsing attributes in process `syz.3.213'. [ 147.898336][ T5092] loop3: detected capacity change from 0 to 512 [ 147.977420][ T5092] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 148.031317][ T5092] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.293879][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 148.476141][ T4275] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 148.682996][ T4275] usb 1-1: Using ep0 maxpacket: 16 [ 148.690836][ T4275] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.746053][ T4275] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.773821][ T4275] usb 1-1: config 0 interface 0 has no altsetting 0 [ 148.780531][ T4275] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 148.845244][ T4275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.877629][ T4275] usb 1-1: config 0 descriptor?? [ 149.539753][ T7] usb 1-1: USB disconnect, device number 5 [ 149.618161][ T5105] loop3: detected capacity change from 0 to 40427 [ 149.646308][ T5105] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 149.653289][ T5105] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 149.691948][ T5105] F2FS-fs (loop3): invalid crc value [ 149.716763][ T5105] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 149.875427][ T5105] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 149.885187][ T5105] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 150.046133][ T4274] syz-executor: attempt to access beyond end of device [ 150.046133][ T4274] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 150.498801][ T5124] binder: Unknown parameter 'context' [ 151.582109][ T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 151.647507][ T5131] loop3: detected capacity change from 0 to 256 [ 151.761929][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 151.769139][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.780791][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.791034][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 151.804782][ T7] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 151.816386][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.857838][ T7] usb 2-1: config 0 descriptor?? [ 152.296489][ T7] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 152.306143][ T7] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 152.313753][ T7] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 152.331106][ T7] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 152.338684][ T7] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 152.351744][ T7] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 152.359290][ T7] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 152.372193][ T7] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 152.379467][ T7] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 152.391300][ T7] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 152.401512][ T7] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 152.411901][ T7] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 152.419183][ T7] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 152.427471][ T7] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 152.435216][ T7] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 152.455035][ T7] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0009/input/input12 [ 152.475691][ T5147] loop4: detected capacity change from 0 to 256 [ 152.488701][ T7] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 152.507148][ T5147] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 152.536172][ T7] usb 2-1: USB disconnect, device number 7 [ 152.572229][ T4326] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 152.716373][ T5149] fido_id[5149]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 152.783142][ T4326] usb 4-1: not running at top speed; connect to a high speed hub [ 152.792778][ T4326] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.803699][ T4326] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 152.813217][ T4326] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 152.822759][ T4326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.712406][ T4326] usb 4-1: Found UVC 0.00 device (046d:0825) [ 153.719372][ T4326] usb 4-1: No valid video chain found. [ 153.748589][ T4326] usb 4-1: USB disconnect, device number 8 [ 154.132631][ T5169] loop3: detected capacity change from 0 to 256 [ 154.244216][ T5169] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 154.268433][ T5176] Zero length message leads to an empty skb [ 158.507421][ T5229] overlayfs: failed to clone upperpath [ 160.806437][ T5247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'. [ 160.902246][ T5247] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.679507][ T5247] device bridge_slave_1 left promiscuous mode [ 161.686158][ T5247] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.060946][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 164.061012][ T26] audit: type=1326 audit(1789687810.164:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5261 comm="syz.4.277" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc099b9e159 code=0x0 [ 164.351871][ T955] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 164.657983][ T4282] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 164.667020][ T4282] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 164.675320][ T4282] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 164.683256][ T4282] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 164.691206][ T4282] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 164.698664][ T4282] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 164.763134][ T5270] HTB: quantum of class FFF10001 is small. Consider r2q change. [ 164.795269][ T5269] HTB: quantum of class FFF10001 is big. Consider r2q change. [ 165.586061][ T5265] chnl_net:caif_netlink_parms(): no params data found [ 166.722066][ T4289] Bluetooth: hci5: command 0x0409 tx timeout [ 168.370608][ T5295] tipc: Started in network mode [ 168.375652][ T5295] tipc: Node identity 4, cluster identity 4711 [ 168.398181][ T5295] tipc: Node number set to 4 [ 168.513198][ T5265] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.520399][ T5265] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.529274][ T5265] device bridge_slave_0 entered promiscuous mode [ 168.539419][ T5265] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.547261][ T5265] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.555708][ T5265] device bridge_slave_1 entered promiscuous mode [ 168.572512][ T5301] capability: warning: `syz.0.284' uses deprecated v2 capabilities in a way that may be insecure [ 168.592579][ T5265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.685517][ T5265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.853517][ T4289] Bluetooth: hci5: command 0x041b tx timeout [ 168.887008][ T5265] team0: Port device team_slave_0 added [ 169.656256][ T5314] overlayfs: failed to resolve './bus': -2 [ 170.528882][ T5265] team0: Port device team_slave_1 added [ 170.737413][ T5265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.805308][ T5265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.963329][ T5265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.056862][ T5265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.328053][ T5265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.355798][ T4282] Bluetooth: hci5: command 0x040f tx timeout [ 172.541957][ T5333] xt_hashlimit: size too large, truncated to 1048576 [ 172.549002][ T5333] xt_hashlimit: invalid interval [ 173.359600][ T5265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.531965][ T4282] Bluetooth: hci5: command 0x0419 tx timeout [ 173.672928][ T5265] device hsr_slave_0 entered promiscuous mode [ 173.799718][ T5265] device hsr_slave_1 entered promiscuous mode [ 173.885151][ T5265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.938008][ T5265] Cannot create hsr debugfs directory [ 176.231539][ T5265] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 176.247830][ T5265] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 176.325997][ T5265] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 176.370180][ T5265] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 176.472641][ T5366] loop9: detected capacity change from 0 to 16384 [ 176.622218][ T5369] loop9: detected capacity change from 16384 to 0 [ 176.726315][ T5265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.849010][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.880780][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.915996][ T5265] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.974937][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.032348][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.072293][ T4458] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.079461][ T4458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.129485][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.154966][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.192239][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.224360][ T4458] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.231568][ T4458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.301157][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.351186][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.367493][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.561254][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.651044][ T5265] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 178.172962][ T5265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.709267][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.724269][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.734006][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.759388][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.769264][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.778283][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.788485][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.878507][ T5392] loop3: detected capacity change from 0 to 512 [ 178.952981][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 178.977840][ T5392] EXT4-fs: Ignoring removed i_version option [ 179.036443][ T5392] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 179.075315][ T5392] EXT4-fs (loop3): failed to open journal device unknown-block(8,0) -16 [ 180.009253][ T5411] loop3: detected capacity change from 0 to 1024 [ 180.055420][ T5411] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 180.346854][ T5411] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 180.652145][ T26] audit: type=1400 audit(1789687826.584:19): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5405 comm="syz.3.316" [ 181.391555][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.405389][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.516086][ T5265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.125148][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 185.394591][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 185.434333][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 185.681948][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 185.719369][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 185.805300][ T5265] device veth0_vlan entered promiscuous mode [ 185.838299][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 185.859482][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 185.924436][ T5265] device veth1_vlan entered promiscuous mode [ 185.948394][ T5455] input: syz1 as /devices/virtual/input/input13 [ 186.073621][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 186.110316][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 186.145988][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 186.190563][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 186.237369][ T5265] device veth0_macvtap entered promiscuous mode [ 186.264140][ T5265] device veth1_macvtap entered promiscuous mode [ 186.366721][ T5265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.399031][ T5265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.431537][ T5265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.468587][ T5265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.501810][ T5265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.538272][ T5265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.558735][ T5265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.590527][ T5265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.617462][ T5265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.667085][ T5265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.699689][ T5265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.741770][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 186.750469][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 186.769166][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 186.791574][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 186.833989][ T5265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.864876][ T5265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.905216][ T5265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.936121][ T5265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.966720][ T5265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.018469][ T5265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.049016][ T5265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.090449][ T5265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.122839][ T5265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.171912][ T5265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.249289][ T5265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.287460][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 187.302825][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 187.334375][ T5265] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.358660][ T5265] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.371386][ T5463] loop3: detected capacity change from 0 to 256 [ 187.391939][ T5265] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.410966][ T5265] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.473690][ T5463] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 187.683540][ T4456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.691428][ T4456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.744777][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 187.840968][ T4456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.879687][ T4456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.910301][ T5443] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 188.070845][ T5469] loop3: detected capacity change from 0 to 512 [ 188.097616][ T5469] EXT4-fs: Ignoring removed orlov option [ 188.140503][ T5469] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 48900)! [ 188.178369][ T5469] EXT4-fs (loop3): group descriptors corrupted! [ 188.242606][ T5478] sch_tbf: burst 7 is lower than device lo mtu (65550) ! [ 188.501941][ T4325] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 188.571984][ T127] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 188.702515][ T4325] usb 4-1: Using ep0 maxpacket: 16 [ 188.704505][ T4325] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.704544][ T4325] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.704572][ T4325] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.704595][ T4325] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 188.704622][ T4325] usb 4-1: config 0 interface 0 has no altsetting 0 [ 188.704653][ T4325] usb 4-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 188.704677][ T4325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.706572][ T4325] usb 4-1: config 0 descriptor?? [ 188.929968][ T127] usb 6-1: device descriptor read/64, error -71 [ 189.242162][ T127] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 189.412117][ T127] usb 6-1: device descriptor read/64, error -71 [ 189.543043][ T127] usb usb6-port1: attempt power cycle [ 189.662362][ T4325] logitech-djreceiver 0003:046D:C53A.000A: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.3-1/input0 [ 189.748642][ T4325] usb 4-1: USB disconnect, device number 9 [ 190.051995][ T127] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 190.122649][ T127] usb 6-1: device descriptor read/8, error -71 [ 190.483677][ T5493] fido_id[5493]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 191.010157][ T127] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 191.431913][ T127] usb 6-1: device not accepting address 5, error -71 [ 191.440870][ T127] usb usb6-port1: unable to enumerate USB device [ 193.729861][ T5505] loop5: detected capacity change from 0 to 2048 [ 194.068496][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.074908][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.533046][ T5505] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 195.444749][ T7] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 195.475344][ T5265] EXT4-fs (loop5): unmounting filesystem. [ 195.643785][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.671557][ T5537] loop5: detected capacity change from 0 to 2048 [ 195.691858][ T7] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 195.743672][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.768724][ T5537] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 195.805822][ T7] usb 4-1: config 0 descriptor?? [ 196.216066][ T5543] netlink: 80 bytes leftover after parsing attributes in process `syz.5.355'. [ 196.802233][ T7] usbhid 4-1:0.0: can't add hid device: -71 [ 196.808296][ T7] usbhid: probe of 4-1:0.0 failed with error -71 [ 196.827055][ T5265] EXT4-fs (loop5): unmounting filesystem. [ 196.852097][ T7] usb 4-1: USB disconnect, device number 10 [ 197.230092][ T5553] netlink: 4 bytes leftover after parsing attributes in process `syz.5.358'. [ 198.009286][ T5553] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.049674][ T7] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 198.195080][ T5553] device bridge_slave_1 left promiscuous mode [ 198.201271][ T5553] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.392827][ T5572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.363'. [ 200.609725][ T5568] loop3: detected capacity change from 0 to 2048 [ 200.838977][ T5568] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 200.855853][ T5579] loop5: detected capacity change from 0 to 512 [ 200.962145][ T5579] EXT4-fs: Ignoring removed i_version option [ 201.053035][ T5579] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 201.100800][ T5579] EXT4-fs (loop5): failed to open journal device unknown-block(8,0) -16 [ 201.408255][ T4276] Bluetooth: hci3: command 0x0406 tx timeout [ 201.408296][ T4282] Bluetooth: hci4: command 0x0406 tx timeout [ 201.420805][ T4289] Bluetooth: hci2: command 0x0406 tx timeout [ 201.568562][ T5591] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 202.231017][ T4276] Bluetooth: hci1: command 0x0406 tx timeout [ 202.237131][ T4276] Bluetooth: hci0: command 0x0406 tx timeout [ 202.263233][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 202.301789][ T5596] netlink: 5412 bytes leftover after parsing attributes in process `syz.1.368'. [ 203.217745][ T5607] loop3: detected capacity change from 0 to 1024 [ 203.293046][ T5607] ext4: Unknown parameter 'nouser_xattr' [ 203.576794][ T5613] tipc: Cannot configure node identity twice [ 204.395186][ T5615] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 204.660940][ T5626] overlayfs: missing 'lowerdir' [ 207.156048][ T26] audit: type=1800 audit(1789688621.807:20): pid=5653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.385" name="syzkaller0" dev="sda1" ino=2050 res=0 errno=0 [ 207.477135][ T5664] binder: Unknown parameter 'contextÚ ' [ 207.597650][ T5662] loop5: detected capacity change from 0 to 2048 [ 208.311832][ T5662] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 209.434136][ T5265] EXT4-fs (loop5): unmounting filesystem. [ 210.545443][ T5696] loop5: detected capacity change from 0 to 512 [ 210.949672][ T26] audit: type=1326 audit(1789688625.786:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5702 comm="syz.4.401" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc099b9e159 code=0x0 [ 211.279073][ T2186] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 211.459874][ T2186] usb 2-1: Using ep0 maxpacket: 16 [ 211.541837][ T5714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.405'. [ 212.331673][ T2186] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.342083][ T2186] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.354487][ T2186] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 212.363639][ T2186] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.372262][ T2186] usb 2-1: Product: syz [ 212.376543][ T2186] usb 2-1: Manufacturer: syz [ 212.381186][ T2186] usb 2-1: SerialNumber: syz [ 212.521896][ T26] audit: type=1400 audit(1789688627.434:22): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5717 comm="syz.5.407" [ 212.617433][ T2186] usb 2-1: 0:2 : does not exist [ 212.635224][ T2186] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 212.795191][ T2186] usb 2-1: USB disconnect, device number 8 [ 214.545657][ T5741] loop3: detected capacity change from 0 to 512 [ 214.565384][ T4515] udevd[4515]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 214.664275][ T5741] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 214.694071][ T5741] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 214.744134][ T5741] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 214.794051][ T5741] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 214.938217][ T5751] netlink: 4 bytes leftover after parsing attributes in process `syz.5.417'. [ 215.950193][ T26] audit: type=1400 audit(1789688631.036:23): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5758 comm="syz.1.422" [ 216.265640][ T5766] netlink: 80 bytes leftover after parsing attributes in process `syz.0.420'. [ 217.187030][ T5784] loop3: detected capacity change from 0 to 16 [ 217.213146][ T5785] support for the xor transformation has been removed. [ 217.277391][ T5784] erofs: (device loop3): mounted with root inode @ nid 36. [ 217.357441][ T5784] erofs: (device loop3): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 217.406936][ T5784] syz.3.430: attempt to access beyond end of device [ 217.406936][ T5784] loop3: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 217.508696][ T5784] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 217.557982][ T5784] syz.3.430: attempt to access beyond end of device [ 217.557982][ T5784] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 217.615722][ T26] audit: type=1400 audit(1789688632.789:24): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5795 comm="syz.5.434" [ 217.659717][ T5784] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192] [ 217.745426][ T26] audit: type=1800 audit(1789688632.915:25): pid=5784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.430" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 217.884530][ T5784] syz.3.430 (5784) used greatest stack depth: 19520 bytes left [ 218.243936][ T5808] Illegal XDP return value 774544896 on prog (id 20) dev syz_tun, expect packet loss! [ 218.415624][ T5811] netlink: 80 bytes leftover after parsing attributes in process `syz.1.437'. [ 221.345514][ T4727] nvme nvme2: rescanning namespaces. [ 221.351024][ T4301] nvme nvme3: rescanning namespaces. [ 221.356757][ T4919] nvme nvme1: rescanning namespaces. [ 221.374058][ T4462] nvme nvme0: rescanning namespaces. [ 221.743467][ T2186] nvmet: creating nvm controller 5 for subsystem test for NQN nqn.2014-08.org.nvmexpress:uuid:4e5922da-8508-4c9f-841a-3951a3b78cfb. [ 221.777499][ T4919] nvme nvme1: rescanning namespaces. [ 221.783143][ T4462] nvme nvme3: rescanning namespaces. [ 221.792400][ T34] nvme nvme0: rescanning namespaces. [ 221.798144][ T4335] nvme nvme2: rescanning namespaces. [ 221.805972][ T5820] nvme nvme4: creating 2 I/O queues. [ 221.821477][ T5820] nvme nvme4: new ctrl: "test" [ 222.094308][ T5843] loop5: detected capacity change from 0 to 2048 [ 225.523007][ T5843] EXT4-fs: error -4 creating inode table initialization thread [ 225.555244][ T5843] EXT4-fs (loop5): mount failed [ 225.994795][ T32] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 226.168952][ T5856] loop5: detected capacity change from 0 to 512 [ 226.181718][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 226.189014][ T5856] EXT4-fs: Ignoring removed nobh option [ 226.201836][ T32] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 226.217524][ T5857] loop3: detected capacity change from 0 to 2048 [ 226.250212][ T5856] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 226.250326][ T32] usb 1-1: config 0 has no interface number 0 [ 226.259861][ T5856] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 226.273137][ T5856] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #13: comm syz.5.454: inode has both inline data and extents flags [ 226.289967][ T5856] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.454: couldn't read orphan inode 13 (err -117) [ 226.310786][ T5857] loop3: p4 < > [ 226.335518][ T3639] loop3: p4 < > [ 226.457935][ T5856] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 226.518562][ T5856] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 226.553255][ T32] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 226.587853][ T32] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 226.618276][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.635589][ T32] usb 1-1: Product: syz [ 226.642468][ T32] usb 1-1: Manufacturer: syz [ 226.647108][ T32] usb 1-1: SerialNumber: syz [ 226.669549][ T32] usb 1-1: config 0 descriptor?? [ 226.690805][ T5849] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 226.782220][ T5861] tipc: Started in network mode [ 226.787234][ T5861] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 226.840537][ T5861] tipc: Enabling of bearer rejected, failed to enable media [ 226.861049][ T5862] EXT4-fs (loop3p4): unable to read superblock [ 226.896147][ T5849] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 227.077365][ T5265] EXT4-fs (loop5): unmounting filesystem. [ 227.629008][ T32] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 227.843542][ T32] asix: probe of 1-1:0.188 failed with error -32 [ 228.063574][ T32] usb 1-1: USB disconnect, device number 7 [ 228.216640][ T5873] netlink: 8 bytes leftover after parsing attributes in process `syz.5.457'. [ 228.528487][ T127] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 228.748627][ T127] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 221, changing to 7 [ 228.801779][ T127] usb 6-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 228.853612][ T127] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.908002][ T127] usb 6-1: Product: syz [ 228.943106][ T127] usb 6-1: Manufacturer: syz [ 228.978353][ T127] usb 6-1: SerialNumber: syz [ 229.233252][ T127] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 229.401432][ T5881] binder: BINDER_SET_CONTEXT_MGR already set [ 229.449131][ T5881] binder: 5878:5881 ioctl 4018620d 200000000040 returned -16 [ 229.471455][ T127] usb 6-1: USB disconnect, device number 6 [ 229.540248][ T4515] udevd[4515]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 230.103174][ T5889] loop5: detected capacity change from 0 to 2048 [ 230.143127][ T5889] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 230.275783][ T5893] loop3: detected capacity change from 0 to 2048 [ 230.372929][ T5893] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 230.482419][ T5897] netlink: 80 bytes leftover after parsing attributes in process `syz.5.463'. [ 231.245000][ T5265] EXT4-fs (loop5): unmounting filesystem. [ 231.472025][ T5906] netlink: 20 bytes leftover after parsing attributes in process `syz.5.466'. [ 231.488651][ T5906] netlink: 8 bytes leftover after parsing attributes in process `syz.5.466'. [ 231.516882][ T5906] netlink: 8 bytes leftover after parsing attributes in process `syz.5.466'. [ 231.753437][ T5908] loop5: detected capacity change from 0 to 256 [ 231.811352][ T5908] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 231.887822][ T5908] syz.5.467: attempt to access beyond end of device [ 231.887822][ T5908] loop5: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 232.007575][ T5910] netlink: 80 bytes leftover after parsing attributes in process `syz.3.464'. [ 232.044590][ T5908] syz.5.467: attempt to access beyond end of device [ 232.044590][ T5908] loop5: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 232.261707][ T26] audit: type=1800 audit(1789688648.139:26): pid=5908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.467" name="file1" dev="loop5" ino=1048617 res=0 errno=0 [ 232.507300][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 232.630662][ T5913] loop5: detected capacity change from 0 to 1024 [ 232.674654][ T5913] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 232.782374][ T5913] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 233.042582][ T32] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 233.068071][ T5924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.469'. [ 233.328429][ T32] usb 4-1: Using ep0 maxpacket: 32 [ 233.342414][ T32] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 233.598443][ T32] usb 4-1: config 0 has no interface number 0 [ 233.804723][ T32] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 233.884748][ T32] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 233.908147][ T5265] EXT4-fs error (device loop5): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 233.974799][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.014954][ T5265] EXT4-fs error (device loop5): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 234.031137][ T32] usb 4-1: Product: syz [ 234.052164][ T32] usb 4-1: Manufacturer: syz [ 234.076842][ T32] usb 4-1: SerialNumber: syz [ 234.098343][ T5265] EXT4-fs error (device loop5): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 234.115324][ T32] usb 4-1: config 0 descriptor?? [ 234.138963][ T5265] EXT4-fs error (device loop5): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 234.151893][ T5915] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 234.200580][ T5265] EXT4-fs error (device loop5): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 234.296927][ T5934] netlink: 1 bytes leftover after parsing attributes in process `syz.0.476'. [ 234.312722][ T5265] EXT4-fs error (device loop5): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 234.382093][ T5265] EXT4-fs error (device loop5): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 234.399062][ T5915] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 234.446642][ T5265] EXT4-fs error (device loop5): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 234.552032][ T5265] EXT4-fs error (device loop5): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 234.570717][ T5265] EXT4-fs error (device loop5): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 235.540662][ T32] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 235.577557][ T32] asix: probe of 4-1:0.188 failed with error -61 [ 235.876623][ T32] usb 4-1: USB disconnect, device number 12 [ 236.292124][ T4276] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 236.357918][ T4289] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 236.367382][ T4276] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 236.375215][ T4276] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 236.389323][ T4289] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 236.405407][ T4276] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 236.550031][ T5940] loop3: detected capacity change from 0 to 512 [ 236.858878][ T5940] loop3: detected capacity change from 0 to 8192 [ 236.961899][ T5946] device veth0 entered promiscuous mode [ 237.019344][ T5265] EXT4-fs (loop5): unmounting filesystem. [ 237.066951][ T5945] device veth0 left promiscuous mode [ 237.444433][ T4335] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.619222][ T4335] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.829918][ T4335] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.869680][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 240.247953][ T4282] Bluetooth: hci6: command 0x0409 tx timeout [ 240.313411][ T5962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.484'. [ 240.355569][ T5962] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.559621][ T5962] device bridge_slave_1 left promiscuous mode [ 240.565831][ T5962] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.626210][ T4335] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.132692][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.174192][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.191750][ T4289] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 241.202932][ T4289] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 241.212967][ T5937] device bridge_slave_0 entered promiscuous mode [ 241.219700][ T4289] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 241.230166][ T4289] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 241.238318][ T4289] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 241.252187][ T4289] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 241.308604][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.332394][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.340918][ T5937] device bridge_slave_1 entered promiscuous mode [ 241.399615][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.522114][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.662901][ T5937] team0: Port device team_slave_0 added [ 242.245261][ T4289] Bluetooth: hci6: command 0x041b tx timeout [ 243.829385][ T4289] Bluetooth: hci3: command 0x0409 tx timeout [ 244.224643][ T4289] Bluetooth: hci6: command 0x040f tx timeout [ 244.620201][ T5937] team0: Port device team_slave_1 added [ 244.932558][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.947363][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.994692][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.117994][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.129121][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.209321][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.562788][ T5937] device hsr_slave_0 entered promiscuous mode [ 245.591390][ T5937] device hsr_slave_1 entered promiscuous mode [ 245.614402][ T5937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.641257][ T5937] Cannot create hsr debugfs directory [ 245.806514][ T6035] tipc: Enabling of bearer rejected, failed to enable media [ 245.832339][ T4289] Bluetooth: hci3: command 0x041b tx timeout [ 246.181974][ T5985] chnl_net:caif_netlink_parms(): no params data found [ 246.196258][ T4289] Bluetooth: hci6: command 0x0419 tx timeout [ 247.796284][ T4289] Bluetooth: hci3: command 0x040f tx timeout [ 248.789531][ T5985] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.831801][ T5985] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.870281][ T5985] device bridge_slave_0 entered promiscuous mode [ 249.966182][ T4289] Bluetooth: hci3: command 0x0419 tx timeout [ 250.283087][ T5985] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.290254][ T5985] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.350093][ T5985] device bridge_slave_1 entered promiscuous mode [ 250.483406][ T4335] device hsr_slave_0 left promiscuous mode [ 250.568705][ T4335] device hsr_slave_1 left promiscuous mode [ 250.605238][ T4335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.654188][ T4335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.896238][ T4335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.855047][ T4335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.109475][ T4335] device bridge_slave_0 left promiscuous mode [ 252.148041][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.226766][ T4335] device veth1_macvtap left promiscuous mode [ 252.233478][ T4335] device veth0_macvtap left promiscuous mode [ 252.239745][ T4335] device veth1_vlan left promiscuous mode [ 252.246085][ T4335] device veth0_vlan left promiscuous mode [ 252.598796][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 252.605239][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 253.715706][ T4335] team0 (unregistering): Port device team_slave_1 removed [ 253.846423][ T4335] team0 (unregistering): Port device team_slave_0 removed [ 253.956277][ T4335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.033283][ T4335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.103663][ T4335] bond0 (unregistering): Released all slaves [ 255.438671][ T5985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.475406][ T5985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.507369][ T5985] team0: Port device team_slave_0 added [ 255.521914][ T5937] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 255.602644][ T5985] team0: Port device team_slave_1 added [ 255.632518][ T5937] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 255.654598][ T5937] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 255.708626][ T5937] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 255.877083][ T14] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 255.888114][ T5985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.915792][ T5985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.054220][ T5985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.104498][ T5985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.130308][ T5985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.137147][ T14] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.220516][ T5985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.225728][ T14] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 256.283629][ T14] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 256.315397][ T6094] tipc: Started in network mode [ 256.320462][ T6094] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 256.322379][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.364919][ T6094] tipc: Enabling of bearer rejected, failed to enable media [ 256.383928][ T14] usb 4-1: Product: syz [ 256.388500][ T14] usb 4-1: Manufacturer: syz [ 256.393159][ T14] usb 4-1: SerialNumber: syz [ 256.439979][ T14] cdc_mbim 4-1:1.0: skipping garbage [ 256.611644][ T5985] device hsr_slave_0 entered promiscuous mode [ 256.628750][ T6090] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 256.668927][ T5985] device hsr_slave_1 entered promiscuous mode [ 256.694703][ T5985] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.710829][ T5985] Cannot create hsr debugfs directory [ 256.805227][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.938925][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.988775][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 257.035347][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.082429][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 257.115043][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 257.155254][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.162609][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.238770][ T6090] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 257.250829][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 257.263671][ T14] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 257.292356][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 257.300788][ T14] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 257.336945][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 257.365514][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.372848][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.410621][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 257.489460][ T14] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 3e:17:a7:54:b2:c3 [ 257.526587][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 257.543707][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 257.561250][ T14] usb 4-1: USB disconnect, device number 13 [ 257.574656][ T14] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 257.591022][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 257.626859][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 257.665570][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 257.724999][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 257.750228][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 257.788731][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 257.820235][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 257.874468][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 257.905765][ T5937] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 258.069670][ T4335] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.370706][ T4335] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.561041][ T4335] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.758563][ T4335] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.696826][ T5985] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 259.736340][ T5985] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 259.773245][ T26] audit: type=1800 audit(1789688677.043:27): pid=6125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.517" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 259.845468][ T5985] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 259.916176][ T5985] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 260.263812][ T4335] tipc: Left network mode [ 260.449595][ T5985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.412601][ T5985] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.454333][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 261.512613][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 261.534515][ T6145] overlayfs: failed to resolve './file0': -2 [ 261.549971][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 261.557531][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 261.708982][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.733411][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 261.754897][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 261.785727][ T4456] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.792932][ T4456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.830970][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 261.927090][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 262.181623][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 262.466735][ T4536] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.473926][ T4536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.739255][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 262.765377][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 262.879822][ T6163] FAULT_INJECTION: forcing a failure. [ 262.879822][ T6163] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 262.932497][ T6163] CPU: 0 PID: 6163 Comm: syz.0.527 Not tainted syzkaller #0 [ 262.939870][ T6163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 262.949972][ T6163] Call Trace: [ 262.953292][ T6163] [ 262.956252][ T6163] dump_stack_lvl+0x188/0x24e [ 262.961000][ T6163] ? show_regs_print_info+0x12/0x12 [ 262.966256][ T6163] ? load_image+0x410/0x410 [ 262.970816][ T6163] ? __lock_acquire+0x7c40/0x7c40 [ 262.975940][ T6163] ? __schedule+0x1087/0x4030 [ 262.980668][ T6163] should_fail_ex+0x390/0x4c0 [ 262.985405][ T6163] prepare_alloc_pages+0x1e1/0x5b0 [ 262.990582][ T6163] __alloc_pages+0x130/0x4f0 [ 262.995221][ T6163] ? zone_statistics+0x170/0x170 [ 263.000198][ T6163] ? __lock_acquire+0x7c40/0x7c40 [ 263.005270][ T6163] pte_alloc_one+0x7b/0x310 [ 263.009809][ T6163] ? pfn_modify_allowed+0x560/0x560 [ 263.015032][ T6163] ? count_memcg_event_mm+0x36b/0x3c0 [ 263.020427][ T6163] ? __lock_acquire+0x7c40/0x7c40 [ 263.025483][ T6163] ? count_memcg_event_mm+0x8a/0x3c0 [ 263.030786][ T6163] ? put_page+0x270/0x270 [ 263.035139][ T6163] __pte_alloc+0x21/0x150 [ 263.039501][ T6163] handle_mm_fault+0x34b1/0x3d40 [ 263.044453][ T6163] ? mt_find+0x157/0x830 [ 263.048739][ T6163] ? numa_migrate_prep+0x250/0x250 [ 263.053869][ T6163] ? lock_chain_count+0x20/0x20 [ 263.058757][ T6163] ? lock_mm_and_find_vma+0xae/0x2f0 [ 263.064073][ T6163] do_user_addr_fault+0x58e/0xb20 [ 263.069134][ T6163] exc_page_fault+0x60/0x100 [ 263.073735][ T6163] ? clear_bhb_loop+0x60/0xb0 [ 263.078423][ T6163] asm_exc_page_fault+0x22/0x30 [ 263.083294][ T6163] RIP: 0033:0x7fc0d40571b6 [ 263.087772][ T6163] Code: 24 50 4c 8b 4c 24 58 4c 8b 6c 24 50 48 89 4c 24 30 48 8d 0d dc da 1a 00 48 29 ca 44 89 4c 24 24 49 8d bd 00 10 00 00 4c 89 e9 <49> c7 45 10 ff 03 00 00 49 89 7d 08 45 89 fd 4d 89 e7 49 89 cc 48 [ 263.107394][ T6163] RSP: 002b:00007fc0d508bf60 EFLAGS: 00010206 [ 263.113482][ T6163] RAX: 0000000000000020 RBX: 0000000000000000 RCX: 0000200000c00000 [ 263.121481][ T6163] RDX: 00000000000025f5 RSI: 0000200000c00000 RDI: 0000200000c01000 [ 263.129482][ T6163] RBP: 00007fc0d4254740 R08: 0000000000000000 R09: 0000000000000003 [ 263.137467][ T6163] R10: 0000000000000003 R11: 0000000000000000 R12: 00000000003ff000 [ 263.145453][ T6163] R13: 0000200000c00000 R14: 00007fc0d4426090 R15: 0000000000000000 [ 263.153448][ T6163] [ 263.179423][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 263.198792][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 263.290212][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 263.323232][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 263.373489][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 263.423384][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 263.461364][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 263.602981][ T5985] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 263.662748][ T5985] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 263.694956][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 263.723480][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 266.225258][ T4325] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 266.438173][ T4325] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 266.462653][ T4325] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.526773][ T4325] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 266.561571][ T4325] usb 1-1: config 0 interface 0 has no altsetting 0 [ 266.585931][ T4325] usb 1-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 266.605094][ T4325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.638580][ T4325] usb 1-1: config 0 descriptor?? [ 266.722373][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 266.752667][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 266.984531][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 267.020265][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 267.059885][ T4325] hid_mf 0003:0079:1801.000B: unknown main item tag 0x0 [ 267.079554][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 267.094134][ T4325] hid_mf 0003:0079:1801.000B: unknown main item tag 0x0 [ 267.118335][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 267.148335][ T4325] hid_mf 0003:0079:1801.000B: unknown main item tag 0x0 [ 267.161213][ T5937] device veth0_vlan entered promiscuous mode [ 267.179664][ T4325] hid_mf 0003:0079:1801.000B: unknown main item tag 0x0 [ 267.205755][ T4325] hid_mf 0003:0079:1801.000B: unknown main item tag 0x0 [ 267.218728][ T5937] device veth1_vlan entered promiscuous mode [ 267.233480][ T4325] hid_mf 0003:0079:1801.000B: unknown main item tag 0x0 [ 267.246799][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 267.261260][ T4325] hid_mf 0003:0079:1801.000B: unknown main item tag 0x0 [ 267.271893][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 267.286002][ T4325] hid_mf 0003:0079:1801.000B: unknown main item tag 0x0 [ 267.294610][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.309236][ T4325] hid_mf 0003:0079:1801.000B: unknown main item tag 0x0 [ 267.325374][ T4325] hid_mf 0003:0079:1801.000B: unknown main item tag 0x0 [ 267.342390][ T4325] hid_mf 0003:0079:1801.000B: unknown main item tag 0x0 [ 267.357520][ T4325] hid_mf 0003:0079:1801.000B: unknown main item tag 0x0 [ 267.372910][ T4325] hid_mf 0003:0079:1801.000B: unknown main item tag 0x0 [ 267.389231][ T4325] hid_mf 0003:0079:1801.000B: unknown main item tag 0x0 [ 267.408681][ T4325] hid_mf 0003:0079:1801.000B: unbalanced collection at end of report description [ 267.428548][ T4325] hid_mf 0003:0079:1801.000B: HID parse failed. [ 267.442748][ T4325] hid_mf: probe of 0003:0079:1801.000B failed with error -22 [ 267.497004][ T4325] usb 1-1: USB disconnect, device number 8 [ 267.575847][ T5985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.674317][ T4335] device hsr_slave_0 left promiscuous mode [ 267.690451][ T4335] device hsr_slave_1 left promiscuous mode [ 267.730998][ T4335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.759307][ T4335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.884973][ T4335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.892477][ T4335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.018279][ T4335] device bridge_slave_1 left promiscuous mode [ 268.024573][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.227037][ T4335] device bridge_slave_0 left promiscuous mode [ 268.233462][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.716981][ T4335] device veth1_macvtap left promiscuous mode [ 268.730887][ T4335] device veth0_macvtap left promiscuous mode [ 268.777555][ T4335] device veth1_vlan left promiscuous mode [ 268.813508][ T4335] device veth0_vlan left promiscuous mode [ 271.394349][ T5443] nvme nvme3: long keepalive RTT (2580 ms) [ 271.407823][ T4536] nvme nvme4: long keepalive RTT (2600 ms) [ 271.415726][ T47] nvme nvme0: long keepalive RTT (2590 ms) [ 271.453937][ T59] nvme nvme2: long keepalive RTT (2620 ms) [ 272.977814][ T4335] team0 (unregistering): Port device team_slave_1 removed [ 273.045762][ T4335] team0 (unregistering): Port device team_slave_0 removed [ 273.121096][ T4335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.288222][ T6283] netlink: 24 bytes leftover after parsing attributes in process `syz.3.555'. [ 273.304276][ T4335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.020776][ T4335] bond0 (unregistering): Released all slaves [ 274.122924][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 274.134030][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 274.143145][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 274.152376][ T6248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.545'. [ 274.210357][ T5937] device veth0_macvtap entered promiscuous mode [ 274.225836][ T5937] device veth1_macvtap entered promiscuous mode [ 274.244045][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.255956][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.275726][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.312312][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.344897][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.409545][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.444348][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.457744][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.503457][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.550047][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 274.561269][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 274.665927][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 274.716600][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.760189][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.805906][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.853994][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.875182][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.912477][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.952593][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.994246][ T6308] using random self ethernet address [ 274.999427][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.019839][ T6308] using random host ethernet address [ 275.041591][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.081132][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 275.105749][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 275.168752][ T5937] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.209456][ T5937] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.249993][ T5937] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.288171][ T5937] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.666594][ T5298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.705649][ T5298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.741101][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 275.865915][ T4456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.901334][ T4456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.940526][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 275.987262][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 276.163285][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 276.429805][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 276.476817][ T4328] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 276.501214][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 276.616515][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 276.680950][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 276.763613][ T4328] usb 4-1: Using ep0 maxpacket: 16 [ 277.173381][ T5985] device veth0_vlan entered promiscuous mode [ 277.180997][ T4328] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.198332][ T4328] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 277.228747][ T5985] device veth1_vlan entered promiscuous mode [ 277.240874][ T4328] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 277.277740][ T4328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.332654][ T4328] usb 4-1: Product: syz [ 277.336910][ T4328] usb 4-1: Manufacturer: syz [ 277.366570][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 277.381894][ T4328] usb 4-1: SerialNumber: syz [ 277.444720][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 277.477120][ T6350] loop6: detected capacity change from 0 to 512 [ 277.500160][ T5985] device veth0_macvtap entered promiscuous mode [ 277.506565][ T6350] EXT4-fs: Ignoring removed i_version option [ 277.585393][ T5985] device veth1_macvtap entered promiscuous mode [ 277.595847][ T6350] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 277.610442][ T4328] usb 4-1: 0:2 : does not exist [ 277.691859][ T6350] EXT4-fs (loop6): failed to open journal device unknown-block(8,0) -16 [ 277.731247][ T4328] usb 4-1: USB disconnect, device number 14 [ 277.758216][ T5985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.777667][ T5985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.807851][ T5985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.833304][ T5985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.851165][ T5985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.863904][ T5985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.878145][ T4326] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 277.887920][ T5985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.907560][ T5985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.919698][ T5985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.932561][ T5985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.946297][ T5985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.958283][ T5985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.968950][ T5985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.987359][ T5985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.010372][ T5985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.020784][ T5985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.032624][ T5985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.042926][ T5985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.056913][ T5985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.067270][ T5985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.078130][ T5985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.099547][ T5985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.115330][ T4326] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 278.132269][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 278.155760][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 278.164114][ T4326] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.183422][ T4326] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.197105][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 278.207012][ T4326] usb 1-1: config 0 interface 0 has no altsetting 0 [ 278.228200][ T4326] usb 1-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 278.237699][ T4326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.244246][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 278.260613][ T4326] usb 1-1: config 0 descriptor?? [ 278.283894][ T5985] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.299955][ T5985] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.309480][ T5985] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.322083][ T5985] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.457299][ T4727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.504735][ T4727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.541578][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 278.673332][ T4326] hid_mf 0003:0079:1801.000C: unknown main item tag 0x0 [ 278.693893][ T4462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.704773][ T4462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.722272][ T4326] hid_mf 0003:0079:1801.000C: unknown main item tag 0x0 [ 278.737115][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 278.749961][ T4326] hid_mf 0003:0079:1801.000C: unknown main item tag 0x0 [ 278.781076][ T4326] hid_mf 0003:0079:1801.000C: unknown main item tag 0x0 [ 278.788368][ T4326] hid_mf 0003:0079:1801.000C: unknown main item tag 0x0 [ 278.817296][ T4326] hid_mf 0003:0079:1801.000C: unknown main item tag 0x0 [ 278.844849][ T4326] hid_mf 0003:0079:1801.000C: unbalanced collection at end of report description [ 278.863567][ T4326] hid_mf 0003:0079:1801.000C: HID parse failed. [ 278.894841][ T4326] hid_mf: probe of 0003:0079:1801.000C failed with error -22 [ 278.939060][ T6368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.575'. [ 278.948321][ T4326] usb 1-1: USB disconnect, device number 9 [ 279.251164][ T6383] loop7: detected capacity change from 0 to 256 [ 279.283460][ T6383] FAT-fs (loop7): Unrecognized mount option "audit" or missing value [ 281.551221][ T4326] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 281.800505][ T4326] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.840708][ T4326] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 281.914659][ T4326] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 282.248845][ T6416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.588'. [ 282.259881][ T4326] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 282.507869][ T4326] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.645315][ T4326] cxacru 7-1:1.0: send of cm 0x84 failed (-71) [ 283.734201][ T4326] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 284.152896][ T4326] cxacru 7-1:1.0: send of cm 0x88 failed (-71) [ 284.159191][ T4326] ATM dev 0: poll status: error -71 [ 284.164846][ T4326] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 284.220604][ T4326] ATM dev 0: usbatm_submit_urb: urb 0xffff888028a15f00 submission failed (-8)! [ 284.258686][ T4326] ATM dev 0: usbatm_submit_urb: urb 0xffff888028a15c00 submission failed (-8)! [ 284.285701][ T6446] loop7: detected capacity change from 0 to 256 [ 284.341055][ T4326] ATM dev 0: usbatm_submit_urb: urb 0xffff888028a12100 submission failed (-8)! [ 284.382920][ T4326] ATM dev 0: usbatm_submit_urb: urb 0xffff888147b56100 submission failed (-8)! [ 284.419224][ T6446] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 284.496236][ T6446] FAT-fs (loop7): Filesystem has been set read-only [ 284.503090][ T6446] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 284.548315][ T4326] usb 7-1: USB disconnect, device number 2 [ 284.571367][ T6446] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 284.589357][ C1] ATM dev 0: usbatm_submit_urb: urb 0xffff888147b56100 submission failed (-19)! [ 284.748337][ T6449] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 284.760263][ T26] audit: type=1800 audit(1789688703.260:28): pid=6446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.594" name="file1" dev="loop7" ino=1048625 res=0 errno=0 [ 284.891938][ T26] audit: type=1800 audit(1789688703.386:29): pid=6449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.594" name="file1" dev="loop7" ino=1048625 res=0 errno=0 [ 285.631208][ T6471] loop7: detected capacity change from 0 to 1024 [ 285.671161][ T6471] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 285.992547][ T6471] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 289.042592][ T5985] EXT4-fs (loop7): unmounting filesystem. [ 289.765093][ T14] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 289.932569][ T4275] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 289.953630][ T14] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.984054][ T14] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 290.016824][ T14] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 290.060136][ T14] usb 8-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 290.080202][ T14] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.125444][ T4275] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 290.181832][ T4275] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.249918][ T4275] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 290.339920][ T4275] usb 1-1: config 0 interface 0 has no altsetting 0 [ 290.418974][ T4275] usb 1-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 290.460686][ T4275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.504001][ T4275] usb 1-1: config 0 descriptor?? [ 291.880012][ T6528] loop7: detected capacity change from 0 to 1024 [ 291.919034][ T6528] ext4: Unknown parameter 'context' [ 294.091889][ T14] cxacru 8-1:1.0: send of cm 0x84 failed (-104) [ 294.098291][ T14] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -104 [ 294.110918][ T4275] usbhid 1-1:0.0: can't add hid device: -71 [ 294.117512][ T14] cxacru 8-1:1.0: send of cm 0x88 failed (-71) [ 294.124243][ T4275] usbhid: probe of 1-1:0.0 failed with error -71 [ 294.132780][ T14] ATM dev 0: poll status: error -71 [ 294.138119][ T14] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 294.148749][ T4275] usb 1-1: USB disconnect, device number 10 [ 294.192253][ T4353] udevd[4353]: setting owner of /dev/bus/usb/001/010 to uid=0, gid=0 failed: No such file or directory [ 294.229692][ T14] ATM dev 0: usbatm_submit_urb: urb 0xffff88804be34400 submission failed (-8)! [ 294.273687][ T14] ATM dev 0: usbatm_submit_urb: urb 0xffff88802516f400 submission failed (-8)! [ 294.313183][ T14] ATM dev 0: usbatm_submit_urb: urb 0xffff88804c34a100 submission failed (-8)! [ 294.352510][ T6554] loop7: detected capacity change from 0 to 128 [ 294.364365][ T14] ATM dev 0: usbatm_submit_urb: urb 0xffff88804bebda00 submission failed (-8)! [ 294.425568][ T14] usb 8-1: USB disconnect, device number 2 [ 294.541503][ T6554] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 294.559138][ T6554] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 294.598037][ T6564] cgroup: release_agent respecified [ 295.171188][ T6566] loop6: detected capacity change from 0 to 256 [ 295.544101][ T6566] exfat: Deprecated parameter 'namecase' [ 295.761580][ T6566] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 296.292664][ T26] audit: type=1326 audit(1789688715.040:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.7.625" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609359e159 code=0x7ffc0000 [ 297.034939][ T26] audit: type=1326 audit(1789688715.040:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.7.625" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609359e159 code=0x7ffc0000 [ 297.209522][ T4326] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 297.413874][ T4326] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.428270][ T26] audit: type=1326 audit(1789688715.040:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.7.625" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f609359e159 code=0x7ffc0000 [ 297.475905][ T4326] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 297.562020][ T127] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 297.580196][ T4326] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 297.844374][ T26] audit: type=1326 audit(1789688715.040:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.7.625" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609359e159 code=0x7ffc0000 [ 298.059198][ T127] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 298.145300][ T6589] loop6: detected capacity change from 0 to 512 [ 298.318833][ T4326] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 298.441815][ T127] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.593572][ T4326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.741559][ T127] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 298.924987][ T26] audit: type=1326 audit(1789688715.050:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.7.625" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609359e159 code=0x7ffc0000 [ 298.960282][ T27] INFO: task syz.2.205:5065 blocked for more than 146 seconds. [ 299.077922][ T27] Not tainted syzkaller #0 [ 299.236277][ T127] usb 4-1: config 0 interface 0 has no altsetting 0 [ 299.269941][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 299.534437][ T127] usb 4-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 299.637197][ T27] task:syz.2.205 state:D stack:23696 pid:5065 ppid:4281 flags:0x00004004 [ 299.819965][ T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.857903][ T4326] cxacru 1-1:1.0: send of cm 0x84 failed (-71) [ 299.938793][ T4326] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 299.957025][ T26] audit: type=1326 audit(1789688715.050:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.7.625" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f609359e159 code=0x7ffc0000 [ 300.019641][ T27] Call Trace: [ 300.124799][ T27] [ 300.194761][ T4326] cxacru 1-1:1.0: send of cm 0x88 failed (-71) [ 300.211900][ T27] __schedule+0x107f/0x4030 [ 300.294935][ T127] usb 4-1: config 0 descriptor?? [ 300.378040][ T27] ? __lock_acquire+0x7c40/0x7c40 [ 300.425567][ T4326] ATM dev 0: poll status: error -71 [ 300.468912][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 300.487740][ T4326] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 300.531966][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 300.566679][ T26] audit: type=1326 audit(1789688715.134:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.7.625" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609359e159 code=0x7ffc0000 [ 300.594911][ T127] usb 4-1: can't set config #0, error -71 [ 300.676441][ T4326] ATM dev 0: usbatm_submit_urb: urb 0xffff88802e0d0500 submission failed (-8)! [ 300.685485][ T4326] ATM dev 0: usbatm_submit_urb: urb 0xffff88802e0d0600 submission failed (-8)! [ 300.705052][ T27] ? release_firmware_map_entry+0x187/0x187 [ 300.711033][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 300.723318][ T26] audit: type=1326 audit(1789688715.134:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.7.625" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609359e159 code=0x7ffc0000 [ 300.747364][ T26] audit: type=1326 audit(1789688715.334:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.7.625" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f609359e159 code=0x7ffc0000 [ 300.771864][ T26] audit: type=1326 audit(1789688715.334:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.7.625" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609359e159 code=0x7ffc0000 [ 300.815190][ T27] ? _raw_spin_unlock+0x40/0x40 [ 300.832615][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 300.862514][ T27] ? prepare_to_wait_event+0x430/0x470 [ 300.876635][ T127] usb 4-1: USB disconnect, device number 15 [ 300.895272][ T4326] usb 1-1: USB disconnect, device number 11 [ 300.902238][ T27] schedule+0xb9/0x180 [ 300.922011][ T27] mddev_suspend+0x25a/0x570 [ 300.947404][ T4494] nvme nvme0: long keepalive RTT (3060 ms) [ 300.952087][ T27] ? mddev_create_serial_pool+0x470/0x470 [ 300.984559][ T27] ? wake_bit_function+0x200/0x200 [ 301.008817][ T27] location_store+0x695/0x7f0 [ 301.026352][ T27] ? location_show+0x140/0x140 [ 301.036564][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 301.048608][ T27] md_attr_store+0x183/0x220 [ 301.060264][ T27] ? sysfs_kf_read+0x350/0x350 [ 301.079643][ T27] kernfs_fop_write_iter+0x3a0/0x520 [ 301.117227][ T27] vfs_write+0x482/0x9a0 [ 301.136713][ T27] ? file_end_write+0x250/0x250 [ 301.160341][ T27] ? __fget_files+0x3fc/0x460 [ 301.178790][ T27] ? __fdget_pos+0x2ae/0x360 [ 301.203038][ T27] ? ksys_write+0x70/0x260 [ 301.227931][ T27] ksys_write+0x14d/0x260 [ 301.257161][ T27] ? __ia32_sys_read+0x80/0x80 [ 301.267484][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 301.272927][ T27] do_syscall_64+0x4c/0xa0 [ 301.277571][ T27] ? clear_bhb_loop+0x60/0xb0 [ 301.282392][ T27] ? clear_bhb_loop+0x60/0xb0 [ 301.287328][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 301.293904][ T27] RIP: 0033:0x7f8dc939e159 [ 301.298500][ T27] RSP: 002b:00007f8dca31c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 301.307623][ T27] RAX: ffffffffffffffda RBX: 00007f8dc9625fa0 RCX: 00007f8dc939e159 [ 301.315808][ T27] RDX: 0000000000000003 RSI: 0000200000000540 RDI: 0000000000000009 [ 301.323968][ T27] RBP: 00007f8dc943506b R08: 0000000000000000 R09: 0000000000000000 [ 301.332072][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.349072][ T27] R13: 00007f8dc9626038 R14: 00007f8dc9625fa0 R15: 00007ffdc89f66a8 [ 301.610033][ T27] [ 301.949854][ T6578] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 301.987331][ T5985] EXT4-fs (loop7): unmounting filesystem. [ 302.004496][ T27] INFO: task syz.2.205:5066 blocked for more than 149 seconds. [ 302.087080][ T27] Not tainted syzkaller #0 [ 302.148377][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 302.240455][ T27] task:syz.2.205 state:D stack:26880 pid:5066 ppid:4281 flags:0x00004004 [ 302.306910][ T27] Call Trace: [ 302.340515][ T27] [ 302.360477][ T27] __schedule+0x107f/0x4030 [ 302.389010][ T6601] loop7: detected capacity change from 0 to 512 [ 302.396151][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 302.450124][ T27] ? release_firmware_map_entry+0x187/0x187 [ 302.466341][ T6601] EXT4-fs: Ignoring removed orlov option [ 302.509571][ T27] ? blk_check_plugged+0x250/0x250 [ 302.516347][ T6601] EXT4-fs: Ignoring removed mblk_io_submit option [ 302.559062][ T27] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 302.595354][ T27] ? prepare_to_wait_event+0x430/0x470 [ 302.605772][ T6601] EXT4-fs error (device loop7): ext4_iget_extra_inode:4763: inode #15: comm syz.7.633: corrupted in-inode xattr [ 302.641700][ T27] schedule+0xb9/0x180 [ 302.663930][ T27] md_write_start+0x72b/0xa50 [ 302.686189][ T6601] EXT4-fs error (device loop7): ext4_orphan_get:1414: comm syz.7.633: couldn't read orphan inode 15 (err -117) [ 302.712038][ T27] ? md_write_start+0x230/0xa50 [ 302.734515][ T27] ? md_done_sync+0x140/0x140 [ 302.755319][ T6601] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 302.765210][ T27] ? wake_bit_function+0x200/0x200 [ 302.788451][ T27] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 302.836948][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 302.867172][ T27] raid1_make_request+0x1c6/0x2da0 [ 302.908004][ T27] ? verify_lock_unused+0x140/0x140 [ 302.937851][ T27] ? ktime_get+0x247/0x270 [ 302.969002][ T27] ? submit_bio_noacct_nocheck+0x261/0xaa0 [ 303.000086][ T27] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 303.031262][ T27] ? raid_exit+0x20/0x20 [ 303.041986][ T27] ? __lock_acquire+0x7c40/0x7c40 [ 303.069437][ T27] ? md_handle_request+0x4ef/0x970 [ 303.082675][ T27] md_handle_request+0x6de/0x970 [ 303.098844][ T27] ? md_new_event+0x40/0x40 [ 303.112659][ T27] ? bio_split_to_limits+0x1b0/0x270 [ 303.141966][ T27] ? md_submit_bio+0x16d/0x330 [ 303.154845][ T27] __submit_bio+0x217/0x290 [ 303.167406][ T27] ? trace_raw_output_block_rq_remap+0x240/0x240 [ 303.185091][ T27] submit_bio_noacct_nocheck+0x483/0xaa0 [ 303.209121][ T27] ? __lock_acquire+0x7c40/0x7c40 [ 303.224398][ T27] ? should_fail_request+0x70/0x70 [ 303.247227][ T27] ? submit_bio_noacct+0xf28/0x1990 [ 303.262956][ T27] blk_next_bio+0x110/0x150 [ 303.288913][ T27] __blkdev_issue_zero_pages+0x1bd/0x310 [ 303.306319][ T27] blkdev_issue_zeroout+0x238/0x470 [ 303.321455][ T27] ? truncate_bdev_range+0x20b/0x250 [ 303.339105][ T27] ? blkdev_issue_zeroout+0x60/0x470 [ 303.363767][ T27] ? __blkdev_issue_zero_pages+0x310/0x310 [ 303.380337][ T27] ? rwsem_write_trylock+0x135/0x1c0 [ 303.386130][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 303.391454][ T27] ? _raw_spin_unlock+0x24/0x40 [ 303.396370][ T27] ? truncate_bdev_range+0x20b/0x250 [ 303.401783][ T27] blkdev_common_ioctl+0x1c58/0x2090 [ 303.407141][ T27] ? blkdev_bszset+0x200/0x200 [ 303.412023][ T27] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 303.417584][ T27] blkdev_ioctl+0x2d8/0x740 [ 303.422263][ T27] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 303.427790][ T27] ? bpf_lsm_file_ioctl+0x5/0x10 [ 303.432855][ T27] ? security_file_ioctl+0x7c/0xa0 [ 303.438022][ T27] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 303.443647][ T27] __se_sys_ioctl+0xfa/0x170 [ 303.448336][ T27] do_syscall_64+0x4c/0xa0 [ 303.452798][ T27] ? clear_bhb_loop+0x60/0xb0 [ 303.457625][ T27] ? clear_bhb_loop+0x60/0xb0 [ 303.462351][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 303.468347][ T27] RIP: 0033:0x7f8dc939e159 [ 303.472803][ T27] RSP: 002b:00007f8dca2fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 303.481755][ T27] RAX: ffffffffffffffda RBX: 00007f8dc9626090 RCX: 00007f8dc939e159 [ 303.489840][ T27] RDX: 0000200000000600 RSI: 000000000000127f RDI: 0000000000000008 [ 303.498107][ T27] RBP: 00007f8dc943506b R08: 0000000000000000 R09: 0000000000000000 [ 303.506196][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.514219][ T27] R13: 00007f8dc9626128 R14: 00007f8dc9626090 R15: 00007ffdc89f66a8 [ 303.522375][ T27] [ 303.525564][ T27] [ 303.525564][ T27] Showing all locks held in the system: [ 303.533336][ T27] 1 lock held by rcu_tasks_kthre/12: [ 303.538776][ T27] #0: ffffffff8cb2e170 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 303.549370][ T27] 1 lock held by rcu_tasks_trace/13: [ 303.556423][ T5985] EXT4-fs (loop7): unmounting filesystem. [ 303.562254][ T27] #0: ffffffff8cb2e990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 303.590229][ T27] 3 locks held by ksoftirqd/1/21: [ 303.598581][ T27] #0: ffff8880b8f3acd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x25/0x130 [ 303.618110][ T27] #1: ffff8880b8f27888 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x400/0x740 [ 303.672882][ T27] #2: ffff88802dc0e418 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x5a/0x10b0 [ 303.693967][ T27] 1 lock held by khungtaskd/27: [ 303.703494][ T27] #0: ffffffff8cb2d7e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 303.724859][ T27] 2 locks held by getty/4027: [ 303.735325][ T27] #0: ffff88814d9ac098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 303.755333][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 303.776912][ T27] 3 locks held by kworker/1:4/4325: [ 303.787990][ T27] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 303.814240][ T27] #1: ffffc90004947d00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 303.840464][ T27] #2: ffffffff8cb334b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890 [ 303.861577][ T27] 2 locks held by kworker/1:5/4326: [ 303.866977][ T27] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 303.878024][ T27] #1: ffffc90004937d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 303.889835][ T27] 2 locks held by kworker/u4:13/4536: [ 303.895391][ T27] 5 locks held by syz.2.205/5065: [ 303.900529][ T27] #0: ffff888079e759e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 303.909975][ T27] #1: ffff8880184d8460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 303.920482][ T27] #2: ffff888058844888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1d8/0x520 [ 303.930449][ T27] #3: ffff888020700748 (kn->active#66){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x520 [ 303.941445][ T27] #4: ffff8880746a82d0 (&mddev->reconfig_mutex){+.+.}-{3:3}, at: location_store+0x86/0x7f0 [ 303.951779][ T27] 2 locks held by syz.2.205/5066: [ 303.956999][ T27] #0: ffff888148df3328 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: blkdev_common_ioctl+0x192d/0x2090 [ 303.971613][ T27] #1: ffff888148df34c8 (mapping.invalidate_lock){++++}-{3:3}, at: blkdev_common_ioctl+0x1967/0x2090 [ 303.989298][ T27] 1 lock held by rm/6612: [ 303.999189][ T27] [ 304.013437][ T27] ============================================= [ 304.013437][ T27] [ 304.030696][ T27] NMI backtrace for cpu 1 [ 304.035097][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 304.042339][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 304.052435][ T27] Call Trace: [ 304.055781][ T27] [ 304.058744][ T27] dump_stack_lvl+0x188/0x24e [ 304.063461][ T27] ? irq_work_queue+0xb8/0x140 [ 304.068321][ T27] ? show_regs_print_info+0x12/0x12 [ 304.073565][ T27] ? load_image+0x410/0x410 [ 304.078119][ T27] ? vprintk_emit+0x59f/0x6a0 [ 304.082850][ T27] ? printk_sprint+0x460/0x460 [ 304.087667][ T27] nmi_cpu_backtrace+0x3e6/0x460 [ 304.092668][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 304.098870][ T27] ? _printk+0xda/0x130 [ 304.103082][ T27] ? load_image+0x410/0x410 [ 304.107674][ T27] ? load_image+0x410/0x410 [ 304.112226][ T27] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 304.118336][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 304.124441][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 304.130477][ T27] watchdog+0xf0e/0xf50 [ 304.134683][ T27] ? watchdog+0x1ed/0xf50 [ 304.139054][ T27] kthread+0x29d/0x330 [ 304.143148][ T27] ? hungtask_pm_notify+0x40/0x40 [ 304.148197][ T27] ? kthread_blkcg+0xd0/0xd0 [ 304.152813][ T27] ret_from_fork+0x1f/0x30 [ 304.157292][ T27] [ 304.162555][ T27] Sending NMI from CPU 1 to CPUs 0: [ 304.168770][ C0] NMI backtrace for cpu 0 [ 304.168779][ C0] CPU: 0 PID: 6612 Comm: rm Not tainted syzkaller #0 [ 304.168795][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 304.168804][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x32/0x80 [ 304.168829][ C0] Code: 74 38 80 7e 65 8b 15 75 38 80 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 1c 16 00 00 00 74 4e 8b 91 f8 15 00 00 <83> fa 03 75 43 48 8b 91 00 16 00 00 44 8b 89 fc 15 00 00 49 c1 e1 [ 304.168843][ C0] RSP: 0018:ffffc9000582f7c8 EFLAGS: 00000246 [ 304.168858][ C0] RAX: ffffffff81bf2d0a RBX: 1ffffd40003aa3e9 RCX: ffff888056939e00 [ 304.168889][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 304.168899][ C0] RBP: ffffc9000582f910 R08: ffffea0001d51f47 R09: 1ffffd40003aa3e8 [ 304.168911][ C0] R10: dffffc0000000000 R11: fffff940003aa3e9 R12: 00fff58000020056 [ 304.168923][ C0] R13: ffffea0001d51f40 R14: 800000007547d025 R15: ffffea0001d51f48 [ 304.168936][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 304.168950][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 304.168961][ C0] CR2: 00007f669948ae9c CR3: 0000000056983000 CR4: 00000000003506f0 [ 304.168976][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 304.168986][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 304.168996][ C0] Call Trace: [ 304.169000][ C0] [ 304.169005][ C0] unmap_page_range+0x111a/0x25b0 [ 304.169048][ C0] unmap_vmas+0x260/0x390 [ 304.169072][ C0] ? unmap_vmas+0x1bd/0x390 [ 304.169098][ C0] ? unmap_page_range+0x25b0/0x25b0 [ 304.169125][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 304.169157][ C0] exit_mmap+0x20d/0x970 [ 304.169181][ C0] ? vm_brk+0x20/0x20 [ 304.169201][ C0] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 304.169228][ C0] ? exit_mm+0x23d/0x350 [ 304.169256][ C0] ? uprobe_clear_state+0x274/0x290 [ 304.169284][ C0] __mmput+0x118/0x3a0 [ 304.169301][ C0] exit_mm+0x24d/0x350 [ 304.169324][ C0] ? sysctl_delayacct+0x220/0x220 [ 304.169349][ C0] ? do_exit+0x2570/0x2570 [ 304.169375][ C0] ? tty_audit_exit+0x149/0x1f0 [ 304.169396][ C0] do_exit+0x958/0x2570 [ 304.169425][ C0] ? put_task_struct+0x80/0x80 [ 304.169447][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 304.169472][ C0] ? lock_chain_count+0x20/0x20 [ 304.169495][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 304.169529][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 304.169553][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 304.169575][ C0] do_group_exit+0x229/0x2e0 [ 304.169602][ C0] __x64_sys_exit_group+0x3b/0x40 [ 304.169626][ C0] do_syscall_64+0x4c/0xa0 [ 304.169642][ C0] ? clear_bhb_loop+0x60/0xb0 [ 304.169671][ C0] ? clear_bhb_loop+0x60/0xb0 [ 304.169687][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 304.169712][ C0] RIP: 0033:0x7f66995e96c5 [ 304.169724][ C0] Code: Unable to access opcode bytes at 0x7f66995e969b. [ 304.169731][ C0] RSP: 002b:00007ffe35548eb8 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 [ 304.169746][ C0] RAX: ffffffffffffffda RBX: 00007f66996eafe8 RCX: 00007f66995e96c5 [ 304.169757][ C0] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000 [ 304.169767][ C0] RBP: 0000000000000001 R08: 00007ffe35548e48 R09: 0000000000000000 [ 304.169777][ C0] R10: 00007ffe35548ce0 R11: 0000000000000206 R12: 0000000000000000 [ 304.169787][ C0] R13: 0000000000000000 R14: 00007f66996e9680 R15: 00007f66996eb000 [ 304.169805][ C0] [ 304.584675][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 304.591608][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 304.598856][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 304.608951][ T27] Call Trace: [ 304.612308][ T27] [ 304.615270][ T27] dump_stack_lvl+0x188/0x24e [ 304.620010][ T27] ? memcpy+0x3c/0x60 [ 304.624027][ T27] ? show_regs_print_info+0x12/0x12 [ 304.629272][ T27] ? load_image+0x410/0x410 [ 304.633830][ T27] panic+0x2d3/0x710 [ 304.637777][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 304.643461][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 304.648020][ T27] ? load_image+0x410/0x410 [ 304.652578][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 304.658784][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 304.665038][ T27] watchdog+0xf4d/0xf50 [ 304.669249][ T27] ? watchdog+0x1ed/0xf50 [ 304.673703][ T27] kthread+0x29d/0x330 [ 304.677815][ T27] ? hungtask_pm_notify+0x40/0x40 [ 304.682899][ T27] ? kthread_blkcg+0xd0/0xd0 [ 304.687532][ T27] ret_from_fork+0x1f/0x30 [ 304.692041][ T27] [ 304.695693][ T27] Kernel Offset: disabled [ 304.700037][ T27] Rebooting in 86400 seconds..