last executing test programs: 6m34.891683461s ago: executing program 0 (id=1): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, 0xffffffffffffffff, 0x38) io_uring_setup(0xc5e, &(0x7f00000000c0)={0x0, 0x64c6, 0x8, 0x1, 0x252}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x2) prctl$PR_MCE_KILL(0x43, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x8205, &(0x7f00000027c0), 0x81, 0x63e, &(0x7f0000000c40)="$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") r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) listen(r4, 0x0) 6m31.50729933s ago: executing program 0 (id=14): r0 = socket$netlink(0x10, 0x3, 0x0) gettid() mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='sys_mnt\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = fcntl$dupfd(r4, 0x0, r4) write$tun(r5, 0x0, 0x4d) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) listen(r6, 0xa1) mremap(&(0x7f00006f6000/0x3000)=nil, 0x3000, 0x4000, 0x6, &(0x7f0000721000/0x4000)=nil) syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)={0x24, 0x12, 0x1, 0x70bd26, 0x25dfdbfe, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0xce, 0x0, 0x0, @u64}]}, @nested={0x4, 0x2e}]}, 0x24}], 0x1, 0x0, 0x0, 0x4000}, 0x4000800) 6m30.345346407s ago: executing program 0 (id=21): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000340), 0x3, 0x28e, &(0x7f0000000640)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fdatasync(r0) 6m29.191774874s ago: executing program 0 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x600c085}, 0x8000) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 6m28.347375043s ago: executing program 0 (id=28): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) mount(&(0x7f0000000540), &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x2008001, 0x0) 6m27.542312342s ago: executing program 0 (id=34): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/mtdblock0\x00', 0x42, 0x1ff) sendmmsg$inet6(r0, &(0x7f0000002bc0)=[{{&(0x7f0000002900)={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe255}, 0x1c, &(0x7f0000002a00)=[{&(0x7f0000002940)='B', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x30}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000000140)="b5", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e20, 0xffffffff, @local, 0x4}, 0x1c, &(0x7f00000006c0)=[{&(0x7f00000001c0)="d7", 0x1}], 0x1}}], 0x3, 0x20044040) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e20590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 6m25.453831661s ago: executing program 32 (id=34): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/mtdblock0\x00', 0x42, 0x1ff) sendmmsg$inet6(r0, &(0x7f0000002bc0)=[{{&(0x7f0000002900)={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe255}, 0x1c, &(0x7f0000002a00)=[{&(0x7f0000002940)='B', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x30}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000000140)="b5", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e20, 0xffffffff, @local, 0x4}, 0x1c, &(0x7f00000006c0)=[{&(0x7f00000001c0)="d7", 0x1}], 0x1}}], 0x3, 0x20044040) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e20590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 17.63236805s ago: executing program 3 (id=1101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x103482) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x591) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180)='netdevsim0\x00', 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x1, 0x2, 0x1ff, 0xb06}, 0x27, [0x1000, 0x10001, 0x80, 0x10, 0xc, 0x827, 0x0, 0x1, 0xcf1, 0x2, 0x0, 0x8, 0x6, 0x100, 0xc776, 0x7, 0x7, 0xc, 0x9, 0x7, 0xfffffffd, 0x4, 0x2, 0xa, 0xe, 0x1, 0x80000000, 0x4, 0x8, 0xb, 0x4, 0xa9, 0x956, 0x1, 0x88, 0x4, 0x7dfe, 0x7, 0xa, 0x0, 0x9de, 0x1, 0xf82d, 0x80000000, 0x7, 0x2, 0x7fff, 0x80, 0x40000000, 0x6, 0xb05, 0xc, 0x5, 0x5, 0x6, 0x4, 0x0, 0x3, 0x4, 0x9, 0x5, 0x6252, 0x2, 0x3fcc], [0x800, 0x96, 0x2fd1d58, 0x0, 0x401, 0xfff, 0x1, 0x8, 0x7, 0x80, 0xfff, 0x2f, 0x9, 0x4, 0x10001, 0x0, 0xfffffbff, 0x6, 0x100, 0x4, 0x7fffffff, 0x1, 0x8001, 0x800, 0xd, 0x5, 0x1000, 0x8, 0x1, 0x9, 0x80000000, 0xc, 0x1, 0xfffffa93, 0xfa, 0x7, 0x9f9, 0x4, 0x1f, 0xb342, 0x2, 0x451f, 0x1, 0x605f, 0xb2, 0xd4e5, 0x3, 0x80000001, 0x1, 0x2, 0x5, 0x0, 0x6c, 0x7, 0x101, 0xca8, 0x0, 0x7fffffff, 0xfffffffe, 0xffffff81, 0x5, 0x9, 0x5, 0xff], [0xfffffff5, 0x4, 0x0, 0xdd, 0x6, 0x3, 0x80000349, 0x10000000, 0x89ef, 0xcb4, 0x4, 0x587a, 0x0, 0xf, 0x100, 0xa0000000, 0x0, 0x5, 0x4, 0x9, 0x6, 0x5, 0xcc, 0x7, 0x200, 0x8, 0x4, 0x6, 0x3, 0x10001, 0x7fff, 0x1, 0xfb, 0x2, 0x5, 0x1, 0x0, 0x1fd, 0x6, 0xf, 0x4, 0x2, 0x1000, 0xfa, 0x5, 0x2, 0x6, 0x0, 0x2, 0x3, 0x9, 0x5, 0x741, 0x3, 0x8, 0x5, 0xff, 0x0, 0x6, 0x7ff, 0xd, 0x7, 0x3], [0x2e, 0x9, 0x1, 0x1d43, 0x5, 0x4f84, 0x7ff, 0x0, 0x4, 0x2b, 0x6, 0x81, 0x8, 0x5, 0xa, 0x1, 0x7fff, 0x7, 0x4, 0x1, 0x2acd684b, 0x102, 0x0, 0x80000000, 0x9, 0x4, 0x41, 0x7, 0x2, 0x4, 0x80, 0x6, 0xda, 0x200, 0x0, 0x6, 0x2, 0xa0000, 0x6a, 0x6, 0x8, 0x8, 0x5, 0xffffff2d, 0x4, 0xbe9f, 0x6, 0x2, 0x8cb3, 0x7, 0x400, 0x7, 0x10001, 0x1c0000, 0x8, 0xaa4, 0x38e4, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x4]}, 0x45c) unshare(0x40000200) 16.904321627s ago: executing program 2 (id=1103): mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000000c00)="$eJzs3c1rXFUbAPDnTpKmb9r3TV4QbF0FBA2UTkyNrYKLigsRLBR0bTtMpqFmkimZSWlCoBYR3AhaXAi66dqPunPrx1b/Bd2ISEvVtFhxISN3PjqTZiadtvloze8Htz3n3jM595l77zln5h7mBrBjjab/ZCL2R8R7ScRwY30SEQO1VH/E0Xq5myvL+XRJolp99bekVubGynI+2l6T2tPI7IuIb96OOJBZW295cWkmVywW5hv58crsmfHy4tLB07O56cJ0Ye7wxOTkoSPPHBncuFj/+H5p79X3X3ry86N/vfXo5Xe/TeJo7G1sa49jo4zGaOM9GUjfwlVe3OjKtlmy3TvAPUkvzb76VR77Yzj6aqne9F4SAHiQnI+IKgCwwyT6fwDYYZrfA9xYWc6nS/X89n4fsdWuvRARu+vxN+9v1rf0N+7Z7a7dBx26kay635FExMgG1D8aER9/+fqn6RKbdB8SoJM3L0TEyZHRZvvfan+SNXMW6nqfkPFUD2VGb8tr/2DrfJWOf55tjf9a11/m1vgnOox/Bjtcu/diNGJXe37t9Z+5sgHVdJWO/54faM1tu9kWf8NIXyP339qYbyA5dbpYSNu2/0XEWAwMpvmJdeoYu/739VUr+lrJ9vHf7xff+CStP/2/VSJzpf+2JncqV8ndb9xN1y5EPNbfKf7k1vFPuox/j/dYx8vPvfNRt21p/Gm8zWV1/Js/q6x6KeKJ6Bx/U7Le/MTD47XTYbx5UnTwxU8fDnWrv/34p0taf/OzwFZIj//Q+vGPJO3zNct3X8d3l4a/7rbtzvF3Pv93Ja/V0s3G41yuUpmfiNiVvLJ2/aHWa5v5Zvk0/rHHO1//653/6WfCkz3G33/118/uPf7NlcY/dVfH/+4Tl2/O9HWrv7fjP1lLjTXW9NL+9bqD9/PeAQAAAAAAAAAAAAAAAAAAAAAAAECvMhGxN5JM9lY6k8lm68/wfiSGMsVSuXLgVGlhbipqz8oeiYFM86cuh9t+D3Wi8Xv4zfyh2/JPR8T/I+KDwf/U8tl8qTi13cEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMOeLs//T/0yuN17BwBsmt13LHG9sCU7AgBsmTv3/wDAv43+HwB2Hv0/AOw8+n8A2Hn0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGyy48eOpUv1z5XlfJqfOru4MFM6e3CqUJ7Jzi7ks/nS/JnsdKk0XSxk86XZtpf+0OnvFUulM5Mxt3BuvFIoV8bLi0snZksLc5UTp2dz04UThYEtiwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeldeXJrJFYuFeYmHJVEdrh+6B2V/Nj/x88Ef961X5qLTeOMT290yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwc/gkAAP//skMoxA==") r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r2, 0x8080583a, &(0x7f0000000280)={0x2, 0x2, 0x0, 0x4000000, 0x8, 0x0, 0x3}) 16.693133381s ago: executing program 4 (id=1104): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 15.286865634s ago: executing program 3 (id=1105): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r8, r7, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) 15.194381867s ago: executing program 4 (id=1107): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') ioprio_set$uid(0x3, 0x0, 0x4007) sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 14.258870418s ago: executing program 4 (id=1108): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x78b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x2, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1007fff}}]}, 0x38}}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 13.981503575s ago: executing program 2 (id=1109): getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010060000904000001020d0000052406000105240040000d240f01fffffffd000000000006241a82ad120905810300028000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x30, 0x13, 0x10, 0x10, 0x10, 0x7, 0x0, 0x10, 0x12, 0x1a69, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) 13.794098939s ago: executing program 5 (id=1110): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000002c0)=[{0x20, 0x0, 0x0, 0xfffff014}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) 13.614913013s ago: executing program 5 (id=1111): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000000201010200000000000000000a0000073c0002800c00028005000100210000002c000180050003"], 0x50}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) 13.378796609s ago: executing program 5 (id=1112): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$eJzs3T9oJFUcB/DvzO565m7RUxtB/AMiooFwdoLN2SgcyHGICCqciNgod8J5h11iZWOhtUoqmyB2RktJE2wUwSpqitgIGiwMFlqs7M4G8mc1ZnfdkcznA5OZybyZ3xt2vm+3ebsBGutskvNJWknmk3SSFHsb3FctZ4e7y3Prl5Ne7+lfi0G7ar+ye96ZJEtJHk2yVhZ5tZ3cWH1+6/eNJx9853rngY9Wn5ub6U0ObW9tPrXz4cW3P73wyI2vv/35YpHz6e67r+krRvyvXSS3/xfF/ieKdt094N+49OYn3/Vzf0eS+wf576RM9eK9e+2mtU4e/uDvzn3vl2/ummVfgenr9Tr998ClHtA4ZZJuinIhSbVdlgsL1Wf471uny9euXntj/pWr16+8XPdIBUxLN9l84vNTn505kP+fWlX+gZOrn/9nLq380N/eadXdG2Am7q5W/fzPv7j4UOQfGkf+obnkH5pL/qG55B+aS/6hueQfTrDOPx+Wf2gu+Yfmkn9orr35BwCapXdqnFnDt05/IjIwc3WPPwAAAAAAAAAAAAAAAAAAwGHLc+uXd5dxr1Ecs/2X7yfbjydpj6rfGvwecXLz4O/p34p+s3212uN2dOiFeye8wIQ+rnn29S0/1lv/q3vqrb94JVl6K8m5dvvw81cMn7/x3XbE8c5LExY4poP5fOzZ2dY/6M+Veutf2Ei+6I8/50aNP2XuHKxHjz/do79i+Uiv/zHhBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJiZvwIAAP//1rxsXQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TIOCMSET(r2, 0x5418, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001980)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 10.579488814s ago: executing program 3 (id=1115): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000002c0)=[{0x20, 0x0, 0x0, 0xfffff014}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) unshare(0x6020400) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r5}, 0x10) r6 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsmount(r6, 0x0, 0x8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) fcntl$dupfd(r0, 0x406, r0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, &(0x7f0000000480), &(0x7f0000000000)=""/6, 0x2}, 0x20) 10.512396705s ago: executing program 4 (id=1116): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, 0x0, 0x20000000) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000240)=@mmap={0x7, 0x2, 0x4, 0x0, 0x9, {}, {0x3, 0x2, 0x4, 0xc0, 0xff, 0xf0, "18a6fc23"}, 0xff, 0x1, {}, 0x1}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000027c0)={0x2020}, 0x2020) 9.423749661s ago: executing program 4 (id=1118): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') ioprio_set$uid(0x3, 0x0, 0x4007) sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 9.329420303s ago: executing program 5 (id=1120): unshare(0x26020480) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, 0x0) 8.422801534s ago: executing program 4 (id=1121): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000380)={[{@prjquota}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@sysvgroups}]}, 0x1, 0x47a, &(0x7f00000009c0)="$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") 8.362879985s ago: executing program 2 (id=1122): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') read$FUSE(r3, &(0x7f00000009c0)={0x2020}, 0x2020) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000005c0)) pwrite64(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) 6.635931135s ago: executing program 1 (id=1123): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f00000004c0)={{0x0, 0x0, 0xe05e, 0x5, 'syz0\x00', 0x6}, 0x0, [0x105, 0xdf, 0x3, 0x2, 0x8001, 0x2, 0x10000, 0x3, 0x8, 0xc, 0x7, 0x81, 0x7, 0x5, 0x9, 0xffffffff80000000, 0xc025, 0x8000, 0xffffffffffffff80, 0x2, 0x2, 0x6, 0x7, 0x1, 0x6, 0x0, 0x2, 0x3, 0x7, 0xbee0, 0x8000000000000000, 0x7, 0x5, 0xb, 0x5, 0x6, 0x3, 0x100, 0x126, 0x3, 0x80000000, 0x1, 0xfffffffffffffffa, 0x9, 0x1, 0x9, 0xb2, 0x4, 0xc833, 0xfb2f, 0x4, 0xcdde, 0x5bd8, 0xd4, 0x2, 0x9, 0x4a, 0xe, 0x6, 0x76b3, 0x6, 0x7, 0x81, 0x7, 0x1, 0x9, 0x7, 0x6a, 0xa2, 0x0, 0x2, 0x7, 0x9, 0x6, 0x7, 0x6f486b79, 0xffffffffffffffac, 0xff, 0x4, 0xfffffffffffffffc, 0x8000000000000000, 0x2, 0x5, 0xb, 0x101, 0x6, 0x10001, 0x9, 0xffffffffffff8001, 0x8, 0x8, 0x5, 0x1, 0x5, 0x61d000000000000, 0x6, 0x3e2f, 0x9, 0x2, 0x8, 0x0, 0xc, 0x7f, 0xffffffffffff92df, 0xb1f6, 0x5, 0x0, 0x7, 0xbb, 0xfffffffffffffffe, 0x4, 0x9, 0x9, 0x101, 0x1, 0x81, 0x5, 0x7, 0xa, 0x3, 0xff, 0x4, 0xa, 0xb53, 0x8d24, 0x3, 0x400, 0xffff]}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) r5 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000240)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r5) 6.271451414s ago: executing program 3 (id=1124): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffde, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x9, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) 6.00808767s ago: executing program 5 (id=1125): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r8, r7, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) 5.391536984s ago: executing program 1 (id=1126): sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x810) 3.116108087s ago: executing program 2 (id=1127): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) 3.026833709s ago: executing program 1 (id=1128): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, 0x0, 0x20000000) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000240)=@mmap={0x7, 0x2, 0x4, 0x0, 0x9, {}, {0x3, 0x2, 0x4, 0xc0, 0xff, 0xf0, "18a6fc23"}, 0xff, 0x1, {}, 0x1}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000027c0)={0x2020}, 0x2020) 2.823512414s ago: executing program 2 (id=1129): r0 = socket$kcm(0xa, 0x2, 0x0) close(0x4) r1 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x3, 'lblc\x00', 0x8, 0x42, 0x6f}, 0x2c) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800801, &(0x7f0000000240)={[{@data_journal}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x400000}}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x448}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.020427713s ago: executing program 1 (id=1130): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000180), 0x0) 1.978880994s ago: executing program 5 (id=1131): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') ioprio_set$uid(0x3, 0x0, 0x4007) sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 1.830794627s ago: executing program 1 (id=1132): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0xa0) write$UHID_CREATE2(r1, &(0x7f0000000040)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x401, 0xf, 0x0, 0xd}}, 0x118) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r8, 0x0, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf", @ANYRES32=r3, @ANYBLOB="0008000007500500580012800b000100627269646765000048000280050019000200000005"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x9, 0xa1ffffff, 0x0, 0xa9e7d3e3779f8165}, 0x800) 1.827970267s ago: executing program 2 (id=1133): socket$inet6_udp(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 247.241484ms ago: executing program 1 (id=1134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x103482) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x591) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180)='netdevsim0\x00', 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x1, 0x2, 0x1ff, 0xb06}, 0x27, [0x1000, 0x10001, 0x80, 0x10, 0xc, 0x827, 0x0, 0x1, 0xcf1, 0x2, 0x0, 0x8, 0x6, 0x100, 0xc776, 0x7, 0x7, 0xc, 0x9, 0x7, 0xfffffffd, 0x4, 0x2, 0xa, 0xe, 0x1, 0x80000000, 0x4, 0x8, 0xb, 0x4, 0xa9, 0x956, 0x1, 0x88, 0x4, 0x7dfe, 0x7, 0xa, 0x0, 0x9de, 0x1, 0xf82d, 0x80000000, 0x7, 0x2, 0x7fff, 0x80, 0x40000000, 0x6, 0xb05, 0xc, 0x5, 0x5, 0x6, 0x4, 0x0, 0x3, 0x4, 0x9, 0x5, 0x6252, 0x2, 0x3fcc], [0x800, 0x96, 0x2fd1d58, 0x0, 0x401, 0xfff, 0x1, 0x8, 0x7, 0x80, 0xfff, 0x2f, 0x9, 0x4, 0x10001, 0x0, 0xfffffbff, 0x6, 0x100, 0x4, 0x7fffffff, 0x1, 0x8001, 0x800, 0xd, 0x5, 0x1000, 0x8, 0x1, 0x9, 0x80000000, 0xc, 0x1, 0xfffffa93, 0xfa, 0x7, 0x9f9, 0x4, 0x1f, 0xb342, 0x2, 0x451f, 0x1, 0x605f, 0xb2, 0xd4e5, 0x3, 0x80000001, 0x1, 0x2, 0x5, 0x0, 0x6c, 0x7, 0x101, 0xca8, 0x0, 0x7fffffff, 0xfffffffe, 0xffffff81, 0x5, 0x9, 0x5, 0xff], [0xfffffff5, 0x4, 0x0, 0xdd, 0x6, 0x3, 0x80000349, 0x10000000, 0x89ef, 0xcb4, 0x4, 0x587a, 0x0, 0xf, 0x100, 0xa0000000, 0x0, 0x5, 0x4, 0x9, 0x6, 0x5, 0xcc, 0x7, 0x200, 0x8, 0x4, 0x6, 0x3, 0x10001, 0x7fff, 0x1, 0xfb, 0x2, 0x5, 0x1, 0x0, 0x1fd, 0x6, 0xf, 0x4, 0x2, 0x1000, 0xfa, 0x5, 0x2, 0x6, 0x0, 0x2, 0x3, 0x9, 0x5, 0x741, 0x3, 0x8, 0x5, 0xff, 0x0, 0x6, 0x7ff, 0xd, 0x7, 0x3], [0x2e, 0x9, 0x1, 0x1d43, 0x5, 0x4f84, 0x7ff, 0x0, 0x4, 0x2b, 0x6, 0x81, 0x8, 0x5, 0xa, 0x1, 0x7fff, 0x7, 0x4, 0x1, 0x2acd684b, 0x102, 0x0, 0x80000000, 0x9, 0x4, 0x41, 0x7, 0x2, 0x4, 0x80, 0x6, 0xda, 0x200, 0x0, 0x6, 0x2, 0xa0000, 0x6a, 0x6, 0x8, 0x8, 0x5, 0xffffff2d, 0x4, 0xbe9f, 0x6, 0x2, 0x8cb3, 0x7, 0x400, 0x7, 0x10001, 0x1c0000, 0x8, 0xaa4, 0x38e4, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x4]}, 0x45c) unshare(0x40000200) 78.893128ms ago: executing program 3 (id=1135): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000480), &(0x7f0000000000)=""/6, 0x2}, 0x20) 0s ago: executing program 3 (id=1136): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, &(0x7f0000000580)=0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) unshare(0x0) execveat(r0, &(0x7f0000000040)='./proc\x00', 0x0, &(0x7f0000000500), 0x800) kernel console output (not intermixed with test programs): #11: block 2: comm syz.5.404: invalid block [ 214.070847][ T6073] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.404: couldn't read orphan inode 11 (err -117) [ 214.083430][ T6073] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,resuid=0x0000000000000000,journal_dev=0x0000000000000002,user_xattr,,errors=continue. Quota mode: writeback. [ 214.084696][ T6092] loop1: detected capacity change from 0 to 512 [ 214.327332][ T6092] EXT4-fs (loop1): Ignoring removed nobh option [ 214.333660][ T6092] EXT4-fs (loop1): Ignoring removed orlov option [ 214.341404][ T6090] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 214.354365][ T6090] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.410157][ T6092] EXT4-fs (loop1): 1 truncate cleaned up [ 214.424484][ T6092] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,sysvgroups,orlov,noauto_da_alloc,init_itable,resgid=0x0000000000000000,journal_ioprio=0x0000000000000004,usrjquota=,nodiscard,,errors=continue. Quota mode: none. [ 214.584066][ T6103] loop4: detected capacity change from 0 to 512 [ 214.751848][ T6103] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 215.104230][ T26] audit: type=1800 audit(1788995961.636:13): pid=6110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.409" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 215.158758][ T6103] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 215.192143][ T6103] System zones: 1-12 [ 215.207468][ T6103] EXT4-fs (loop4): 1 truncate cleaned up [ 215.264196][ T6103] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,stripe=0x00000000000000b9,,errors=continue. Quota mode: none. [ 215.893406][ T6114] syz.3.413 (6114): drop_caches: 2 [ 217.573671][ T6131] tipc: Enabled bearer , priority 0 [ 217.625324][ T6134] device syzkaller0 entered promiscuous mode [ 217.656439][ T6131] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 217.687985][ T6131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.417'. [ 217.735039][ T6131] tipc: Resetting bearer [ 217.755999][ T6130] tipc: Resetting bearer [ 217.782770][ T6130] tipc: Disabling bearer [ 219.070170][ T6157] syz.4.424 (6157): drop_caches: 2 [ 219.188706][ T6163] loop5: detected capacity change from 0 to 512 [ 219.201542][ T6164] loop4: detected capacity change from 0 to 8 [ 219.254398][ T6163] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 219.314666][ T6163] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 219.444401][ T6163] System zones: 1-12 [ 219.485618][ T6163] EXT4-fs (loop5): 1 truncate cleaned up [ 219.492073][ T6163] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,stripe=0x00000000000000b9,,errors=continue. Quota mode: none. [ 219.523199][ T6168] loop3: detected capacity change from 0 to 512 [ 219.623854][ T6168] EXT4-fs (loop3): Ignoring removed nobh option [ 219.640817][ T6168] EXT4-fs (loop3): Ignoring removed orlov option [ 219.787330][ T6168] EXT4-fs (loop3): 1 truncate cleaned up [ 219.814278][ T6168] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,sysvgroups,orlov,noauto_da_alloc,init_itable,resgid=0x0000000000000000,journal_ioprio=0x0000000000000004,usrjquota=,nodiscard,,errors=continue. Quota mode: none. [ 220.038294][ T6179] tipc: Enabled bearer , priority 0 [ 220.067255][ T6179] device syzkaller0 entered promiscuous mode [ 220.192338][ T6179] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 220.275357][ T6179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.429'. [ 220.286891][ T6184] loop5: detected capacity change from 0 to 512 [ 220.425451][ T6187] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.427: invalid indirect mapped block 234881024 (level 0) [ 220.690063][ T6180] tipc: Resetting bearer [ 220.713424][ T6184] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 220.746355][ T6178] tipc: Resetting bearer [ 220.756627][ T6189] loop4: detected capacity change from 0 to 512 [ 220.797568][ T6178] tipc: Disabling bearer [ 220.812657][ T6184] EXT4-fs error (device loop5): __ext4_iget:4919: inode #11: block 2: comm syz.5.430: invalid block [ 220.902081][ T6184] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.430: couldn't read orphan inode 11 (err -117) [ 220.926675][ T6189] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 220.985513][ T6189] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.064848][ T6184] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,resuid=0x0000000000000000,journal_dev=0x0000000000000002,user_xattr,,errors=continue. Quota mode: writeback. [ 223.023692][ T6209] device syzkaller0 entered promiscuous mode [ 223.317488][ T6214] syz.3.436 (6214): drop_caches: 2 [ 223.372741][ T6218] loop3: detected capacity change from 0 to 8 [ 223.397602][ T6217] loop5: detected capacity change from 0 to 512 [ 223.592362][ T6217] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 223.657568][ T6217] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 223.700845][ T6217] System zones: 1-12 [ 223.733252][ T6217] EXT4-fs (loop5): 1 truncate cleaned up [ 223.914945][ T6217] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,stripe=0x00000000000000b9,,errors=continue. Quota mode: none. [ 224.343522][ T6233] tipc: Enabling of bearer rejected, failed to enable media [ 224.363212][ T6232] loop2: detected capacity change from 0 to 512 [ 224.489072][ T6232] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 224.554709][ T6232] EXT4-fs error (device loop2): __ext4_iget:4919: inode #11: block 2: comm syz.2.446: invalid block [ 224.719381][ T6248] loop5: detected capacity change from 0 to 512 [ 224.764568][ T6232] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.446: couldn't read orphan inode 11 (err -117) [ 224.809300][ T6248] EXT4-fs (loop5): Ignoring removed nobh option [ 224.934050][ T6248] EXT4-fs (loop5): Ignoring removed orlov option [ 225.129906][ T6232] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,resuid=0x0000000000000000,journal_dev=0x0000000000000002,user_xattr,,errors=continue. Quota mode: writeback. [ 225.692938][ T6248] EXT4-fs (loop5): 1 truncate cleaned up [ 225.698795][ T6248] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,sysvgroups,orlov,noauto_da_alloc,init_itable,resgid=0x0000000000000000,journal_ioprio=0x0000000000000004,usrjquota=,nodiscard,,errors=continue. Quota mode: none. [ 226.124240][ T6267] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.447: invalid indirect mapped block 234881024 (level 0) [ 226.511223][ T6268] device syzkaller0 entered promiscuous mode [ 227.923305][ T6286] syz.4.451 (6286): drop_caches: 2 [ 228.388560][ T6299] loop3: detected capacity change from 0 to 8 [ 228.399926][ T6296] loop5: detected capacity change from 0 to 512 [ 229.199818][ T6314] loop4: detected capacity change from 0 to 512 [ 229.226205][ T6296] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 229.299340][ T6296] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.553623][ T6314] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 229.976536][ T6314] EXT4-fs error (device loop4): __ext4_iget:4919: inode #11: block 2: comm syz.4.459: invalid block [ 230.202696][ T6314] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.459: couldn't read orphan inode 11 (err -117) [ 230.256391][ T6314] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,resuid=0x0000000000000000,journal_dev=0x0000000000000002,user_xattr,,errors=continue. Quota mode: writeback. [ 230.292848][ T6328] tipc: Enabled bearer , priority 0 [ 230.336036][ T6324] device syzkaller0 entered promiscuous mode [ 230.428039][ T6331] loop2: detected capacity change from 0 to 512 [ 230.436744][ T6326] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 230.567227][ T6324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.460'. [ 230.615703][ T6326] tipc: Resetting bearer [ 230.632055][ T6331] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 230.677891][ T6338] loop1: detected capacity change from 0 to 512 [ 230.689725][ T6331] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 230.698753][ T6331] System zones: 1-12 [ 230.707405][ T6331] EXT4-fs (loop2): 1 truncate cleaned up [ 230.713536][ T6331] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,stripe=0x00000000000000b9,,errors=continue. Quota mode: none. [ 230.740779][ T6323] tipc: Resetting bearer [ 230.770232][ T6323] tipc: Disabling bearer [ 230.777562][ T6338] EXT4-fs (loop1): Ignoring removed nobh option [ 230.860466][ T6338] EXT4-fs (loop1): Ignoring removed orlov option [ 230.897245][ T6346] device syzkaller0 entered promiscuous mode [ 230.940021][ T6338] EXT4-fs (loop1): 1 truncate cleaned up [ 230.973915][ T6338] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,sysvgroups,orlov,noauto_da_alloc,init_itable,resgid=0x0000000000000000,journal_ioprio=0x0000000000000004,usrjquota=,nodiscard,,errors=continue. Quota mode: none. [ 231.443172][ T6361] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.463: invalid indirect mapped block 234881024 (level 0) [ 234.416491][ T6379] loop4: detected capacity change from 0 to 512 [ 234.565537][ T6379] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 234.632131][ T6384] syz.1.470 (6384): drop_caches: 2 [ 234.727361][ T6379] EXT4-fs error (device loop4): __ext4_iget:4919: inode #11: block 2: comm syz.4.472: invalid block [ 234.811207][ T6379] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.472: couldn't read orphan inode 11 (err -117) [ 234.898175][ T6379] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,resuid=0x0000000000000000,journal_dev=0x0000000000000002,user_xattr,,errors=continue. Quota mode: writeback. [ 235.816592][ T6408] loop4: detected capacity change from 0 to 8 [ 235.845413][ T6407] tipc: Enabled bearer , priority 0 [ 235.881274][ T6407] device syzkaller0 entered promiscuous mode [ 235.915420][ T6407] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 235.981783][ T6410] loop3: detected capacity change from 0 to 512 [ 236.186270][ T6410] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 236.247261][ T6410] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 236.256933][ T6407] tipc: Resetting bearer [ 236.285135][ T6410] System zones: 1-12 [ 236.296574][ T6407] tipc: Disabling bearer [ 236.335184][ T6410] EXT4-fs (loop3): 1 truncate cleaned up [ 236.340881][ T6410] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,stripe=0x00000000000000b9,,errors=continue. Quota mode: none. [ 236.409996][ T6434] loop1: detected capacity change from 0 to 512 [ 236.601674][ T6434] EXT4-fs (loop1): Ignoring removed nobh option [ 236.613084][ T6434] EXT4-fs (loop1): Ignoring removed orlov option [ 236.622967][ T6434] EXT4-fs (loop1): 1 truncate cleaned up [ 237.072441][ T6442] syz.5.484 (6442): drop_caches: 2 [ 237.090137][ T6434] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,sysvgroups,orlov,noauto_da_alloc,init_itable,resgid=0x0000000000000000,journal_ioprio=0x0000000000000004,usrjquota=,nodiscard,,errors=continue. Quota mode: none. [ 237.196378][ T4232] Bluetooth: hci3: command 0x0406 tx timeout [ 237.376074][ T6448] loop4: detected capacity change from 0 to 512 [ 238.476852][ T26] audit: type=1800 audit(1788995985.026:14): pid=6455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.480" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 238.519359][ T6448] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 238.623539][ T6463] loop5: detected capacity change from 0 to 512 [ 238.639724][ T6448] EXT4-fs error (device loop4): __ext4_iget:4919: inode #11: block 2: comm syz.4.485: invalid block [ 238.837004][ T6448] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.485: couldn't read orphan inode 11 (err -117) [ 238.948764][ T6448] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,resuid=0x0000000000000000,journal_dev=0x0000000000000002,user_xattr,,errors=continue. Quota mode: writeback. [ 239.011531][ T6463] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 239.104571][ T6463] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.118169][ T6487] tipc: Enabled bearer , priority 0 [ 240.182209][ T6490] device syzkaller0 entered promiscuous mode [ 240.212016][ T6485] device syzkaller0 entered promiscuous mode [ 240.242207][ T6487] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 240.289980][ T6492] loop2: detected capacity change from 0 to 512 [ 240.336991][ T6492] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 240.352741][ T6490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.490'. [ 240.388357][ T6487] tipc: Resetting bearer [ 240.401764][ T6492] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 240.422021][ T6486] tipc: Resetting bearer [ 240.449895][ T6492] System zones: 1-12 [ 240.456723][ T6492] EXT4-fs (loop2): 1 truncate cleaned up [ 240.458021][ T6486] tipc: Disabling bearer [ 240.462480][ T6492] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,stripe=0x00000000000000b9,,errors=continue. Quota mode: none. [ 240.905641][ T6502] loop2: detected capacity change from 0 to 8 [ 241.139530][ T6506] syz.1.498 (6506): drop_caches: 2 [ 242.028861][ T6511] loop4: detected capacity change from 0 to 512 [ 242.247495][ T6511] EXT4-fs (loop4): Ignoring removed nobh option [ 242.260032][ T6511] EXT4-fs (loop4): Ignoring removed orlov option [ 242.578108][ T6511] EXT4-fs (loop4): 1 truncate cleaned up [ 242.615661][ T6511] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,sysvgroups,orlov,noauto_da_alloc,init_itable,resgid=0x0000000000000000,journal_ioprio=0x0000000000000004,usrjquota=,nodiscard,,errors=continue. Quota mode: none. [ 243.148019][ T6523] loop3: detected capacity change from 0 to 512 [ 243.340841][ T6523] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 243.474479][ T6531] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.500: invalid indirect mapped block 234881024 (level 0) [ 243.594591][ T6523] EXT4-fs error (device loop3): __ext4_iget:4919: inode #11: block 2: comm syz.3.503: invalid block [ 243.832701][ T6523] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.503: couldn't read orphan inode 11 (err -117) [ 243.902470][ T6534] loop5: detected capacity change from 0 to 512 [ 243.915936][ T6523] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,resuid=0x0000000000000000,journal_dev=0x0000000000000002,user_xattr,,errors=continue. Quota mode: writeback. [ 244.005977][ T6534] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 244.304351][ T6534] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 244.413388][ T6534] System zones: 1-12 [ 244.880836][ T6534] EXT4-fs (loop5): 1 truncate cleaned up [ 244.903749][ T6534] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,stripe=0x00000000000000b9,,errors=continue. Quota mode: none. [ 245.116072][ T6547] syz.1.509 (6547): drop_caches: 2 [ 245.271685][ T6551] loop4: detected capacity change from 0 to 8 [ 245.441199][ T6554] tipc: Enabled bearer , priority 0 [ 245.449799][ T6554] device syzkaller0 entered promiscuous mode [ 245.677709][ T6554] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 245.835465][ T6557] Zero length message leads to an empty skb [ 246.068603][ T6554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.508'. [ 246.086581][ T6554] tipc: Resetting bearer [ 246.206097][ T6552] tipc: Resetting bearer [ 246.309315][ T6552] tipc: Disabling bearer [ 246.447600][ T6569] loop5: detected capacity change from 0 to 512 [ 246.927429][ T6569] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 247.119803][ T6569] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.568965][ T6579] loop4: detected capacity change from 0 to 512 [ 247.633679][ T6579] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 247.832979][ T6579] EXT4-fs error (device loop4): __ext4_iget:4919: inode #11: block 2: comm syz.4.519: invalid block [ 247.879928][ T6579] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.519: couldn't read orphan inode 11 (err -117) [ 247.899326][ T6584] loop3: detected capacity change from 0 to 512 [ 247.934411][ T6579] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,resuid=0x0000000000000000,journal_dev=0x0000000000000002,user_xattr,,errors=continue. Quota mode: writeback. [ 248.026540][ T6588] loop2: detected capacity change from 0 to 512 [ 248.041392][ T6584] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 248.126828][ T6588] EXT4-fs (loop2): Ignoring removed nobh option [ 248.180181][ T6588] EXT4-fs (loop2): Ignoring removed orlov option [ 248.244612][ T6584] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 248.253251][ T6584] System zones: 1-12 [ 248.297698][ T6588] EXT4-fs (loop2): 1 truncate cleaned up [ 248.310768][ T6584] EXT4-fs (loop3): 1 truncate cleaned up [ 248.316857][ T6588] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,sysvgroups,orlov,noauto_da_alloc,init_itable,resgid=0x0000000000000000,journal_ioprio=0x0000000000000004,usrjquota=,nodiscard,,errors=continue. Quota mode: none. [ 248.404865][ T6584] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,stripe=0x00000000000000b9,,errors=continue. Quota mode: none. [ 248.938460][ T6597] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.522: invalid indirect mapped block 234881024 (level 0) [ 249.290667][ T6599] device syzkaller0 entered promiscuous mode [ 249.413208][ T6602] tipc: Enabled bearer , priority 0 [ 249.420796][ T6602] device syzkaller0 entered promiscuous mode [ 249.437403][ T6602] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 249.451686][ T6602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.527'. [ 249.475957][ T6602] tipc: Resetting bearer [ 249.496470][ T6600] tipc: Resetting bearer [ 249.564982][ T6600] tipc: Disabling bearer [ 251.080866][ T6616] syz.5.524 (6616): drop_caches: 2 [ 251.158461][ T6619] loop3: detected capacity change from 0 to 8 [ 251.318159][ T6626] loop1: detected capacity change from 0 to 512 [ 251.360715][ T6628] loop2: detected capacity change from 0 to 512 [ 251.372348][ T6626] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 251.428874][ T6626] EXT4-fs error (device loop1): __ext4_iget:4919: inode #11: block 2: comm syz.1.533: invalid block [ 251.460016][ T6628] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 251.468318][ T6626] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.533: couldn't read orphan inode 11 (err -117) [ 251.483330][ T6628] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.558591][ T6626] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,resuid=0x0000000000000000,journal_dev=0x0000000000000002,user_xattr,,errors=continue. Quota mode: writeback. [ 252.240247][ T6641] loop5: detected capacity change from 0 to 512 [ 252.342948][ T6641] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 252.449038][ T6641] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 252.457390][ T6641] System zones: 1-12 [ 252.476658][ T6647] device syzkaller0 entered promiscuous mode [ 252.501145][ T6641] EXT4-fs (loop5): 1 truncate cleaned up [ 252.552373][ T6641] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,stripe=0x00000000000000b9,,errors=continue. Quota mode: none. [ 252.830033][ T6651] tipc: Enabled bearer , priority 0 [ 252.844445][ T6651] device syzkaller0 entered promiscuous mode [ 252.856790][ T6651] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 252.881621][ T6651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.540'. [ 252.922529][ T6653] loop3: detected capacity change from 0 to 512 [ 252.959785][ T6654] tipc: Resetting bearer [ 252.984207][ T6653] EXT4-fs (loop3): Ignoring removed nobh option [ 253.064199][ T6653] EXT4-fs (loop3): Ignoring removed orlov option [ 253.093109][ T6650] tipc: Resetting bearer [ 253.135363][ T6650] tipc: Disabling bearer [ 253.169947][ T6653] EXT4-fs (loop3): 1 truncate cleaned up [ 253.184203][ T6653] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,sysvgroups,orlov,noauto_da_alloc,init_itable,resgid=0x0000000000000000,journal_ioprio=0x0000000000000004,usrjquota=,nodiscard,,errors=continue. Quota mode: none. [ 254.178460][ T6667] syz.1.545 (6667): drop_caches: 2 [ 254.430435][ T6660] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.542: invalid indirect mapped block 234881024 (level 0) [ 254.682567][ T6674] loop2: detected capacity change from 0 to 8 [ 254.716501][ T6673] loop4: detected capacity change from 0 to 512 [ 254.794757][ T6673] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 255.039229][ T6673] EXT4-fs error (device loop4): __ext4_iget:4919: inode #11: block 2: comm syz.4.548: invalid block [ 255.180297][ T6673] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.548: couldn't read orphan inode 11 (err -117) [ 255.203551][ T6680] device syzkaller0 entered promiscuous mode [ 255.215280][ T6673] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,resuid=0x0000000000000000,journal_dev=0x0000000000000002,user_xattr,,errors=continue. Quota mode: writeback. [ 255.499783][ T6682] loop5: detected capacity change from 0 to 512 [ 255.613108][ T6682] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 255.706670][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.712998][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.795214][ T6682] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 255.869851][ T6682] System zones: 1-12 [ 255.913015][ T6682] EXT4-fs (loop5): 1 truncate cleaned up [ 255.953417][ T6682] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,stripe=0x00000000000000b9,,errors=continue. Quota mode: none. [ 256.030582][ T6693] tipc: Enabled bearer , priority 0 [ 256.037828][ T6693] device syzkaller0 entered promiscuous mode [ 256.046906][ T6693] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 256.062007][ T6693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.554'. [ 256.116760][ T6693] tipc: Resetting bearer [ 256.195541][ T6692] tipc: Resetting bearer [ 256.245874][ T6692] tipc: Disabling bearer [ 256.723156][ T6705] loop5: detected capacity change from 0 to 512 [ 257.185131][ T6705] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 257.319039][ T6705] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.697103][ T6718] loop3: detected capacity change from 0 to 8 [ 257.856926][ T6724] loop1: detected capacity change from 0 to 512 [ 257.918865][ T6724] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 257.968709][ T6729] loop2: detected capacity change from 0 to 512 [ 257.983633][ T6724] EXT4-fs error (device loop1): __ext4_iget:4919: inode #11: block 2: comm syz.1.563: invalid block [ 258.021179][ T6724] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.563: couldn't read orphan inode 11 (err -117) [ 258.034651][ T6729] EXT4-fs (loop2): Ignoring removed nobh option [ 258.062981][ T6729] EXT4-fs (loop2): Ignoring removed orlov option [ 258.072179][ T6724] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,resuid=0x0000000000000000,journal_dev=0x0000000000000002,user_xattr,,errors=continue. Quota mode: writeback. [ 258.079700][ T6733] syz.4.566 (6733): drop_caches: 2 [ 258.128371][ T6729] EXT4-fs (loop2): 1 truncate cleaned up [ 258.152273][ T6729] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,sysvgroups,orlov,noauto_da_alloc,init_itable,resgid=0x0000000000000000,journal_ioprio=0x0000000000000004,usrjquota=,nodiscard,,errors=continue. Quota mode: none. [ 258.566547][ T6737] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.565: invalid indirect mapped block 234881024 (level 0) [ 259.111137][ T6741] loop3: detected capacity change from 0 to 512 [ 259.410698][ T6741] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 259.583712][ T6741] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 259.609447][ T6741] System zones: 1-12 [ 259.643376][ T6750] tipc: Started in network mode [ 259.661414][ T6741] EXT4-fs (loop3): 1 truncate cleaned up [ 259.688593][ T6750] tipc: Node identity 5e236ce565f5, cluster identity 4711 [ 259.705705][ T6741] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,stripe=0x00000000000000b9,,errors=continue. Quota mode: none. [ 259.753757][ T6750] tipc: Enabled bearer , priority 0 [ 259.796820][ T6751] device syzkaller0 entered promiscuous mode [ 259.845440][ T6750] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 259.937295][ T6751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.571'. [ 260.014342][ T6752] tipc: Resetting bearer [ 260.068348][ T6748] tipc: Resetting bearer [ 260.345291][ T6748] tipc: Disabling bearer [ 262.041519][ T6782] loop2: detected capacity change from 0 to 512 [ 262.115611][ T6786] syz.5.579 (6786): drop_caches: 2 [ 262.123810][ T6782] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 262.196866][ T6782] EXT4-fs error (device loop2): __ext4_iget:4919: inode #11: block 2: comm syz.2.578: invalid block [ 262.228751][ T6782] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.578: couldn't read orphan inode 11 (err -117) [ 262.267924][ T6792] loop3: detected capacity change from 0 to 8 [ 262.285231][ T6790] loop4: detected capacity change from 0 to 512 [ 262.359238][ T6790] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 262.374806][ T6782] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,resuid=0x0000000000000000,journal_dev=0x0000000000000002,user_xattr,,errors=continue. Quota mode: writeback. [ 262.600861][ T6790] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 262.614433][ T6790] System zones: 1-12 [ 262.623922][ T6795] loop1: detected capacity change from 0 to 512 [ 262.639097][ T6790] EXT4-fs (loop4): 1 truncate cleaned up [ 262.645642][ T6790] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,stripe=0x00000000000000b9,,errors=continue. Quota mode: none. [ 262.756099][ T6795] EXT4-fs (loop1): Ignoring removed nobh option [ 262.797075][ T6795] EXT4-fs (loop1): Ignoring removed orlov option [ 262.917328][ T6800] loop5: detected capacity change from 0 to 512 [ 262.957779][ T6795] EXT4-fs (loop1): 1 truncate cleaned up [ 262.970705][ T6795] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,sysvgroups,orlov,noauto_da_alloc,init_itable,resgid=0x0000000000000000,journal_ioprio=0x0000000000000004,usrjquota=,nodiscard,,errors=continue. Quota mode: none. [ 263.202006][ T6800] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 263.391892][ T6800] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.429127][ T6811] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.584: invalid indirect mapped block 234881024 (level 0) [ 264.287784][ T6808] tipc: Enabled bearer , priority 0 [ 264.321083][ T6808] device syzkaller0 entered promiscuous mode [ 264.374447][ T6813] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 264.430997][ T6808] netlink: 12 bytes leftover after parsing attributes in process `syz.2.586'. [ 265.063101][ T6819] tipc: Resetting bearer [ 265.131886][ T6804] tipc: Resetting bearer [ 265.188111][ T6804] tipc: Disabling bearer [ 267.158113][ T6841] syz.1.595 (6841): drop_caches: 2 [ 267.264380][ T6844] loop3: detected capacity change from 0 to 512 [ 267.530264][ T6850] loop1: detected capacity change from 0 to 512 [ 267.573084][ T6850] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 267.652182][ T6844] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 267.709150][ T6850] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 267.732565][ T6850] System zones: 1-12 [ 267.783304][ T6850] EXT4-fs (loop1): 1 truncate cleaned up [ 267.809484][ T6844] EXT4-fs error (device loop3): __ext4_iget:4919: inode #11: block 2: comm syz.3.596: invalid block [ 267.835441][ T6850] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,stripe=0x00000000000000b9,,errors=continue. Quota mode: none. [ 267.883447][ T6844] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.596: couldn't read orphan inode 11 (err -117) [ 267.964907][ T6844] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,resuid=0x0000000000000000,journal_dev=0x0000000000000002,user_xattr,,errors=continue. Quota mode: writeback. [ 268.327855][ T6860] tipc: Enabled bearer , priority 0 [ 268.335572][ T6860] device syzkaller0 entered promiscuous mode [ 268.344059][ T6860] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 268.398932][ T6862] loop2: detected capacity change from 0 to 512 [ 268.469339][ T6860] tipc: Resetting bearer [ 268.477416][ T6862] EXT4-fs (loop2): Ignoring removed nobh option [ 268.483723][ T6862] EXT4-fs (loop2): Ignoring removed orlov option [ 268.581936][ T6859] tipc: Resetting bearer [ 268.598726][ T6862] EXT4-fs (loop2): 1 truncate cleaned up [ 268.605777][ T6862] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,sysvgroups,orlov,noauto_da_alloc,init_itable,resgid=0x0000000000000000,journal_ioprio=0x0000000000000004,usrjquota=,nodiscard,,errors=continue. Quota mode: none. [ 268.663202][ T6859] tipc: Disabling bearer [ 269.000169][ T6876] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.602: invalid indirect mapped block 234881024 (level 0) [ 269.475709][ T6879] loop3: detected capacity change from 0 to 8 [ 270.454950][ T6884] syz.1.608 (6884): drop_caches: 2 [ 271.455691][ T6897] loop4: detected capacity change from 0 to 512 [ 271.513562][ T6897] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 271.601272][ T6897] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 271.620445][ T6897] System zones: 1-12 [ 271.627200][ T6897] EXT4-fs (loop4): 1 truncate cleaned up [ 271.632888][ T6897] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,stripe=0x00000000000000b9,,errors=continue. Quota mode: none. [ 272.023292][ T6903] loop4: detected capacity change from 0 to 512 [ 272.163877][ T6907] loop1: detected capacity change from 0 to 512 [ 272.173067][ T6903] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 272.314344][ T6903] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.393228][ T6907] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 272.483739][ T6907] EXT4-fs error (device loop1): __ext4_iget:4919: inode #11: block 2: comm syz.1.614: invalid block [ 272.617086][ T6907] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.614: couldn't read orphan inode 11 (err -117) [ 272.665317][ T6907] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,resuid=0x0000000000000000,journal_dev=0x0000000000000002,user_xattr,,errors=continue. Quota mode: writeback. [ 273.561247][ T6921] tipc: Enabled bearer , priority 0 [ 273.630792][ T6921] device syzkaller0 entered promiscuous mode [ 273.646559][ T6921] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 273.687179][ T6921] tipc: Resetting bearer [ 273.745193][ T6920] tipc: Resetting bearer [ 273.778013][ T6920] tipc: Disabling bearer [ 273.872895][ T6927] loop3: detected capacity change from 0 to 512 [ 273.932489][ T6927] EXT4-fs (loop3): Ignoring removed nobh option [ 273.961766][ T6927] EXT4-fs (loop3): Ignoring removed orlov option [ 274.009856][ T6927] EXT4-fs (loop3): 1 truncate cleaned up [ 274.072154][ T6927] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,sysvgroups,orlov,noauto_da_alloc,init_itable,resgid=0x0000000000000000,journal_ioprio=0x0000000000000004,usrjquota=,nodiscard,,errors=continue. Quota mode: none. [ 274.133042][ T6936] syz.5.620 (6936): drop_caches: 2 [ 275.127146][ T6940] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.619: invalid indirect mapped block 234881024 (level 0) [ 275.378702][ T6939] loop5: detected capacity change from 0 to 512 [ 275.483777][ T6944] device syzkaller0 entered promiscuous mode [ 275.519344][ T6939] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 275.605566][ T6939] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 275.674634][ T6939] System zones: 1-12 [ 275.726841][ T6939] EXT4-fs (loop5): 1 truncate cleaned up [ 275.732533][ T6939] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,stripe=0x00000000000000b9,,errors=continue. Quota mode: none. [ 276.545755][ T6966] loop1: detected capacity change from 0 to 512 [ 276.578284][ T6966] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 276.627885][ T6966] EXT4-fs error (device loop1): __ext4_iget:4919: inode #11: block 2: comm syz.1.627: invalid block [ 276.646843][ T6966] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.627: couldn't read orphan inode 11 (err -117) [ 276.664345][ T6966] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,resuid=0x0000000000000000,journal_dev=0x0000000000000002,user_xattr,,errors=continue. Quota mode: writeback. [ 277.534389][ T6972] loop4: detected capacity change from 0 to 8 [ 277.583112][ T6974] tipc: Enabled bearer , priority 0 [ 277.755836][ T6974] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 277.808783][ T6978] device syzkaller0 entered promiscuous mode [ 277.838043][ T6974] tipc: Resetting bearer [ 277.874457][ T6971] tipc: Resetting bearer [ 277.925851][ T6971] tipc: Disabling bearer [ 279.540193][ T7005] loop5: detected capacity change from 0 to 512 [ 279.672447][ T7005] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 279.734353][ T7005] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.343889][ T7017] loop1: detected capacity change from 0 to 512 [ 280.375320][ T7017] EXT4-fs (loop1): Ignoring removed nobh option [ 280.413790][ T7017] EXT4-fs (loop1): Ignoring removed orlov option [ 280.475453][ T7017] EXT4-fs (loop1): 1 truncate cleaned up [ 280.491526][ T7017] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,sysvgroups,orlov,noauto_da_alloc,init_itable,resgid=0x0000000000000000,journal_ioprio=0x0000000000000004,usrjquota=,nodiscard,,errors=continue. Quota mode: none. [ 280.651514][ T7025] loop2: detected capacity change from 0 to 512 [ 280.870017][ T7025] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 280.974434][ T7027] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.640: invalid indirect mapped block 234881024 (level 0) [ 281.131536][ T7025] EXT4-fs error (device loop2): __ext4_iget:4919: inode #11: block 2: comm syz.2.642: invalid block [ 281.255314][ T7025] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.642: couldn't read orphan inode 11 (err -117) [ 281.350409][ T7025] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,resuid=0x0000000000000000,journal_dev=0x0000000000000002,user_xattr,,errors=continue. Quota mode: writeback. [ 282.389624][ T7031] loop4: detected capacity change from 0 to 512 [ 282.520938][ T7031] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 283.120716][ T7031] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 283.208760][ T7031] System zones: 1-12 [ 283.554347][ T7031] EXT4-fs (loop4): 1 truncate cleaned up [ 283.577057][ T7031] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,stripe=0x00000000000000b9,,errors=continue. Quota mode: none. [ 283.660318][ T7043] tipc: Enabled bearer , priority 0 [ 283.743693][ T7043] device syzkaller0 entered promiscuous mode [ 283.752673][ T7043] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 283.781040][ T7043] tipc: Resetting bearer [ 283.812761][ T7045] device syzkaller0 entered promiscuous mode [ 283.835512][ T7042] tipc: Resetting bearer [ 283.880060][ T7042] tipc: Disabling bearer [ 283.980921][ T7056] loop4: detected capacity change from 0 to 8 [ 284.768904][ T7080] loop1: detected capacity change from 0 to 512 [ 284.830619][ T7080] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 285.185180][ T7080] EXT4-fs error (device loop1): __ext4_iget:4919: inode #11: block 2: comm syz.1.655: invalid block [ 285.217083][ T7080] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.655: couldn't read orphan inode 11 (err -117) [ 285.284715][ T7080] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,resuid=0x0000000000000000,journal_dev=0x0000000000000002,user_xattr,,errors=continue. Quota mode: writeback. [ 285.773139][ T7088] loop3: detected capacity change from 0 to 512 [ 286.632932][ T7088] EXT4-fs (loop3): Ignoring removed nobh option [ 286.777533][ T7088] EXT4-fs (loop3): Ignoring removed orlov option [ 287.093892][ T7088] EXT4-fs (loop3): 1 truncate cleaned up [ 287.252504][ T7088] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,sysvgroups,orlov,noauto_da_alloc,init_itable,resgid=0x0000000000000000,journal_ioprio=0x0000000000000004,usrjquota=,nodiscard,,errors=continue. Quota mode: none. [ 287.410604][ T7101] loop2: detected capacity change from 0 to 512 [ 287.458718][ T7102] loop1: detected capacity change from 0 to 512 [ 287.579017][ T7102] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 287.914293][ T26] audit: type=1800 audit(1788996034.466:15): pid=7110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.657" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 287.946672][ T7102] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 287.966537][ T7102] System zones: 1-12 [ 287.988508][ T7102] EXT4-fs (loop1): 1 truncate cleaned up [ 288.039605][ T7101] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 288.064569][ T7102] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,stripe=0x00000000000000b9,,errors=continue. Quota mode: none. [ 288.126824][ T7101] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.663035][ T7122] tipc: Enabled bearer , priority 0 [ 289.762784][ T7122] device syzkaller0 entered promiscuous mode [ 289.854246][ T7133] loop1: detected capacity change from 0 to 1024 [ 289.881161][ T7122] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 290.140971][ T7133] EXT4-fs (loop1): can't mount with both data=journal and delalloc [ 290.164351][ T7138] tipc: Resetting bearer [ 290.189794][ T7119] tipc: Resetting bearer [ 290.241235][ T7119] tipc: Disabling bearer [ 290.401450][ T7143] loop5: detected capacity change from 0 to 512 [ 290.471182][ T7143] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 290.532011][ T7143] EXT4-fs error (device loop5): __ext4_iget:4919: inode #11: block 2: comm syz.5.669: invalid block [ 290.559178][ T7143] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.669: couldn't read orphan inode 11 (err -117) [ 290.562175][ T7145] tipc: Enabled bearer , priority 0 [ 290.776928][ T7145] tipc: Resetting bearer [ 290.847253][ T7144] tipc: Disabling bearer [ 291.363255][ T7143] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,resuid=0x0000000000000000,journal_dev=0x0000000000000002,user_xattr,,errors=continue. Quota mode: writeback. [ 291.427109][ T7157] loop2: detected capacity change from 0 to 8 [ 291.738961][ T7163] loop4: detected capacity change from 0 to 512 [ 291.755904][ T7165] loop1: detected capacity change from 0 to 8 [ 292.038330][ T7163] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 292.052110][ T7164] loop3: detected capacity change from 0 to 512 [ 292.127776][ T7164] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 292.141247][ T7163] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.212129][ T7164] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 292.431544][ T7164] System zones: 1-12 [ 292.452133][ T7164] EXT4-fs (loop3): 1 truncate cleaned up [ 292.512109][ T7164] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,stripe=0x00000000000000b9,,errors=continue. Quota mode: none. [ 292.723892][ T7177] loop5: detected capacity change from 0 to 512 [ 292.788894][ T7177] EXT4-fs (loop5): Ignoring removed nobh option [ 292.864032][ T7177] EXT4-fs (loop5): Ignoring removed orlov option [ 292.943553][ T7177] EXT4-fs (loop5): 1 truncate cleaned up [ 292.982435][ T7177] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,sysvgroups,orlov,noauto_da_alloc,init_itable,resgid=0x0000000000000000,journal_ioprio=0x0000000000000004,usrjquota=,nodiscard,,errors=continue. Quota mode: none. [ 293.590784][ T26] audit: type=1800 audit(1788996040.146:16): pid=7184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.677" name="file0" dev="loop5" ino=13 res=0 errno=0 [ 294.837900][ T7192] tipc: Enabled bearer , priority 0 [ 294.845235][ T7192] device syzkaller0 entered promiscuous mode [ 294.854487][ T7192] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 294.873699][ T7192] tipc: Resetting bearer [ 295.000417][ T7191] tipc: Resetting bearer [ 295.049541][ T7191] tipc: Disabling bearer [ 295.716517][ T7205] tipc: Enabled bearer , priority 0 [ 295.774214][ T7209] loop3: detected capacity change from 0 to 8 [ 295.776388][ T7205] tipc: Resetting bearer [ 296.028843][ T7204] tipc: Disabling bearer [ 296.039764][ T7214] loop2: detected capacity change from 0 to 1024 [ 296.051988][ T7216] loop5: detected capacity change from 0 to 512 [ 296.101517][ T7214] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 296.159910][ T7216] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 296.164372][ T7220] loop3: detected capacity change from 0 to 512 [ 296.196704][ T7214] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 296.208240][ T7214] EXT4-fs (loop2): orphan cleanup on readonly fs [ 296.216892][ T7214] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.687: Inode bitmap for bg 0 marked uninitialized [ 296.235667][ T7214] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 296.322860][ T7220] EXT4-fs (loop3): Ignoring removed nobh option [ 296.338659][ T7216] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 296.372265][ T7220] EXT4-fs (loop3): orphan cleanup on readonly fs [ 296.386730][ T7220] EXT4-fs warning (device loop3): ext4_xattr_inode_get:492: inode #11: comm syz.3.691: ea_inode file size=1535 entry size=6 [ 296.400321][ T7220] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 296.414664][ T7220] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #15: comm syz.3.691: corrupted inode contents [ 296.421245][ T7216] System zones: [ 296.431218][ T7220] EXT4-fs (loop3): Remounting filesystem read-only [ 296.441446][ T7220] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #15: comm syz.3.691: mark_inode_dirty error [ 296.444579][ T7216] 1-12 [ 296.455990][ T7220] EXT4-fs (loop3): Remounting filesystem read-only [ 296.465434][ T7220] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #15: comm syz.3.691: corrupted inode contents [ 296.474482][ T7216] [ 296.481447][ T7220] EXT4-fs (loop3): Remounting filesystem read-only [ 296.488120][ T7220] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2957: inode #15: comm syz.3.691: mark_inode_dirty error [ 296.501105][ T7220] EXT4-fs (loop3): Remounting filesystem read-only [ 296.507827][ T7220] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2960: inode #15: comm syz.3.691: mark inode dirty (error -117) [ 296.522563][ T7220] EXT4-fs (loop3): Remounting filesystem read-only [ 296.530457][ T7220] EXT4-fs warning (device loop3): ext4_evict_inode:304: xattr delete (err -117) [ 296.540130][ T7220] EXT4-fs (loop3): 1 orphan inode deleted [ 296.545970][ T7220] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x000000000000005c,barrier,nobh,errors=remount-ro,block_validity,. Quota mode: none. [ 296.584305][ T7226] loop4: detected capacity change from 0 to 8 [ 296.600567][ T7216] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 296.615239][ T7216] EXT4-fs (loop5): 1 truncate cleaned up [ 296.625131][ T7216] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,stripe=0x00000000000000b9,,errors=continue. Quota mode: none. [ 296.944343][ T7228] loop1: detected capacity change from 0 to 512 [ 297.073617][ T7228] EXT4-fs (loop1): Ignoring removed nobh option [ 297.093385][ T7228] EXT4-fs (loop1): Ignoring removed orlov option [ 297.115311][ T7233] tipc: Enabled bearer , priority 0 [ 297.129946][ T7233] device syzkaller0 entered promiscuous mode [ 297.143239][ T7233] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 297.219395][ T7228] EXT4-fs (loop1): 1 truncate cleaned up [ 297.230463][ T7228] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,sysvgroups,orlov,noauto_da_alloc,init_itable,resgid=0x0000000000000000,journal_ioprio=0x0000000000000004,usrjquota=,nodiscard,,errors=continue. Quota mode: none. [ 297.316631][ T7238] tipc: Resetting bearer [ 298.431524][ T7232] tipc: Resetting bearer [ 298.794965][ T7232] tipc: Disabling bearer [ 299.124880][ T4233] tipc: Node number set to 2266295817 [ 299.197002][ T7251] zram: Cannot change disksize for initialized device [ 299.928054][ T7251] netlink: 'syz.5.696': attribute type 46 has an invalid length. [ 300.582023][ T7270] tipc: Enabled bearer , priority 0 [ 300.615976][ T7270] tipc: Resetting bearer [ 300.666002][ T7269] tipc: Disabling bearer [ 300.675702][ T7279] loop2: detected capacity change from 0 to 8 [ 300.917076][ T7283] loop5: detected capacity change from 0 to 512 [ 300.981871][ T7283] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 301.077165][ T7284] loop2: detected capacity change from 0 to 1024 [ 301.118827][ T7284] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 301.135448][ T7283] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 301.150467][ T7284] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 301.159518][ T7284] EXT4-fs (loop2): orphan cleanup on readonly fs [ 301.174258][ T7284] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.705: Inode bitmap for bg 0 marked uninitialized [ 301.203809][ T7284] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 301.223065][ T7283] System zones: 1-12 [ 301.277030][ T7283] EXT4-fs (loop5): 1 truncate cleaned up [ 301.287064][ T7283] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,stripe=0x00000000000000b9,,errors=continue. Quota mode: none. [ 301.590982][ T7294] loop4: detected capacity change from 0 to 512 [ 302.136064][ T7294] EXT4-fs error (device loop4): ext4_get_journal_inode:5187: comm syz.4.708: inode #196608: comm syz.4.708: iget: illegal inode # [ 302.225258][ T7294] EXT4-fs (loop4): Remounting filesystem read-only [ 302.234024][ T7299] loop2: detected capacity change from 0 to 512 [ 302.261893][ T7294] EXT4-fs (loop4): no journal found [ 302.341326][ T7299] EXT4-fs (loop2): Ignoring removed nobh option [ 302.354011][ T7294] EXT4-fs (loop4): can't get journal size [ 302.367428][ T7299] EXT4-fs (loop2): Ignoring removed orlov option [ 302.407692][ T7294] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 302.447375][ T7294] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 302.455159][ T7294] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,usrjquota="oldalloc,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 302.478049][ T7299] EXT4-fs (loop2): 1 truncate cleaned up [ 302.483739][ T7299] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,sysvgroups,orlov,noauto_da_alloc,init_itable,resgid=0x0000000000000000,journal_ioprio=0x0000000000000004,usrjquota=,nodiscard,,errors=continue. Quota mode: none. [ 302.577988][ T7306] tipc: Enabled bearer , priority 0 [ 302.629215][ T7309] device syzkaller0 entered promiscuous mode [ 302.692155][ T7306] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 302.795523][ T7306] tipc: Resetting bearer [ 303.581877][ T7321] zram: Cannot change disksize for initialized device [ 304.430727][ T7305] tipc: Resetting bearer [ 304.452731][ T7305] tipc: Disabling bearer [ 304.467874][ T7321] netlink: 'syz.4.713': attribute type 46 has an invalid length. [ 304.565060][ T4228] tipc: Node number set to 1544089426 [ 304.733364][ T7324] loop4: detected capacity change from 0 to 8 [ 305.000187][ T7328] tipc: Enabled bearer , priority 0 [ 305.154484][ T7331] sctp: failed to load transform for md5: -2 [ 305.178337][ T7337] loop3: detected capacity change from 0 to 8 [ 305.187519][ T7328] tipc: Resetting bearer [ 305.326557][ T7327] tipc: Disabling bearer [ 305.579835][ T7342] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 306.081250][ T7348] loop2: detected capacity change from 0 to 1024 [ 307.518427][ T7348] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 307.703836][ T7348] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 307.717659][ T7348] EXT4-fs (loop2): orphan cleanup on readonly fs [ 307.726923][ T7348] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.719: Inode bitmap for bg 0 marked uninitialized [ 307.744106][ T7348] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 308.017794][ T7355] loop4: detected capacity change from 0 to 512 [ 308.170846][ T7355] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 308.290939][ T7355] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 308.360474][ T7355] System zones: 1-12 [ 308.589125][ T7355] EXT4-fs (loop4): 1 truncate cleaned up [ 308.679249][ T7372] zram: Cannot change disksize for initialized device [ 308.687066][ T7372] netlink: 'syz.3.725': attribute type 46 has an invalid length. [ 309.250592][ T7355] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,stripe=0x00000000000000b9,,errors=continue. Quota mode: none. [ 309.517499][ T7378] tipc: Enabled bearer , priority 0 [ 309.558635][ T7378] device syzkaller0 entered promiscuous mode [ 309.634275][ T7378] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 309.648939][ T7386] loop5: detected capacity change from 0 to 512 [ 309.690715][ T7378] tipc: Resetting bearer [ 309.734301][ T7386] EXT4-fs (loop5): Ignoring removed nobh option [ 309.740641][ T7386] EXT4-fs (loop5): Ignoring removed orlov option [ 309.758855][ T7377] tipc: Resetting bearer [ 309.767911][ T7389] loop2: detected capacity change from 0 to 8 [ 309.843851][ T7386] EXT4-fs (loop5): 1 truncate cleaned up [ 309.868159][ T7377] tipc: Disabling bearer [ 309.894552][ T7386] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,sysvgroups,orlov,noauto_da_alloc,init_itable,resgid=0x0000000000000000,journal_ioprio=0x0000000000000004,usrjquota=,nodiscard,,errors=continue. Quota mode: none. [ 310.700992][ T7396] loop3: detected capacity change from 0 to 8 [ 310.753468][ T7398] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 312.176690][ T7412] loop3: detected capacity change from 0 to 1024 [ 312.195232][ T7412] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 312.376727][ T7412] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 312.390099][ T7412] EXT4-fs (loop3): orphan cleanup on readonly fs [ 312.400057][ T7412] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.737: Inode bitmap for bg 0 marked uninitialized [ 312.416472][ T7412] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 312.768471][ T7418] loop2: detected capacity change from 0 to 512 [ 312.855853][ T7418] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 312.963796][ T7418] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 312.986073][ T7418] System zones: 1-12 [ 313.035895][ T7418] EXT4-fs (loop2): 1 truncate cleaned up [ 313.077284][ T7418] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,stripe=0x00000000000000b9,,errors=continue. Quota mode: none. [ 314.007717][ T7431] tipc: Enabled bearer , priority 0 [ 314.064594][ T7433] device syzkaller0 entered promiscuous mode [ 314.082201][ T7431] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 314.151485][ T7433] tipc: Resetting bearer [ 314.194551][ T7429] tipc: Resetting bearer [ 314.235249][ T7429] tipc: Disabling bearer [ 314.662528][ T7443] loop2: detected capacity change from 0 to 8 [ 314.847184][ T7448] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 315.129149][ T7451] loop4: detected capacity change from 0 to 256 [ 315.281157][ T7451] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 315.524502][ T7456] loop5: detected capacity change from 0 to 512 [ 315.533170][ T7454] exFAT-fs (loop4): error, invalid size(size(0) > aligned(9223372036854777344) [ 315.533170][ T7454] [ 315.551374][ T7454] exFAT-fs (loop4): Filesystem has been set read-only [ 315.569881][ T7456] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 315.617757][ T7456] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 315.808122][ T7456] System zones: 1-12 [ 315.894028][ T7456] EXT4-fs (loop5): 1 truncate cleaned up [ 315.900168][ T7456] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,stripe=0x00000000000000b9,,errors=continue. Quota mode: none. [ 316.256722][ T7466] zram: Cannot change disksize for initialized device [ 316.642065][ T7466] netlink: 'syz.1.754': attribute type 46 has an invalid length. [ 316.663906][ T7468] tipc: Enabled bearer , priority 0 [ 316.675080][ T7468] device syzkaller0 entered promiscuous mode [ 316.691136][ T7468] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 316.711324][ T7468] tipc: Resetting bearer [ 316.742394][ T7467] tipc: Resetting bearer [ 316.775608][ T7467] tipc: Disabling bearer [ 317.100083][ T7476] loop4: detected capacity change from 0 to 1024 [ 317.107265][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.113567][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.625456][ T7476] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 318.655361][ T7476] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 318.665048][ T7476] EXT4-fs (loop4): orphan cleanup on readonly fs [ 318.674100][ T7476] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.757: Inode bitmap for bg 0 marked uninitialized [ 318.688161][ T7476] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 318.992633][ T7497] loop1: detected capacity change from 0 to 8 [ 319.202514][ T7500] loop5: detected capacity change from 0 to 512 [ 319.375760][ T7500] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 319.635867][ T7500] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 319.659049][ T7500] System zones: 1-12 [ 319.703126][ T7500] EXT4-fs (loop5): 1 truncate cleaned up [ 319.733227][ T7500] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,stripe=0x00000000000000b9,,errors=continue. Quota mode: none. [ 320.113146][ T7518] zram: Cannot change disksize for initialized device [ 320.120495][ T7518] netlink: 'syz.3.769': attribute type 46 has an invalid length. [ 321.439860][ T7537] loop3: detected capacity change from 0 to 128 [ 321.776164][ T7537] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 321.787573][ T7537] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.995523][ T7541] tipc: Enabled bearer , priority 0 [ 322.022164][ T7541] device syzkaller0 entered promiscuous mode [ 322.069509][ T7541] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 322.133385][ T7541] tipc: Resetting bearer [ 322.191635][ T7539] tipc: Resetting bearer [ 322.239466][ T7539] tipc: Disabling bearer [ 322.755263][ T7545] loop2: detected capacity change from 0 to 1024 [ 323.465484][ T7545] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 323.519492][ T7545] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 323.529114][ T7545] EXT4-fs (loop2): orphan cleanup on readonly fs [ 323.536708][ T7545] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.776: Inode bitmap for bg 0 marked uninitialized [ 323.549848][ T7545] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 324.357035][ T7548] loop4: detected capacity change from 0 to 512 [ 324.459388][ T7548] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 324.523255][ T7548] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 324.555506][ T7548] System zones: 1-12 [ 324.590318][ T7548] EXT4-fs (loop4): 1 truncate cleaned up [ 324.643860][ T7548] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,stripe=0x00000000000000b9,,errors=continue. Quota mode: none. [ 324.846185][ T7566] zram: Cannot change disksize for initialized device [ 324.853559][ T7566] netlink: 'syz.1.784': attribute type 46 has an invalid length. [ 324.874786][ T4229] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 325.895696][ T7578] netlink: 'syz.5.787': attribute type 46 has an invalid length. [ 326.484303][ T4229] usb 3-1: unable to get BOS descriptor or descriptor too short [ 327.386859][ T7585] loop5: detected capacity change from 0 to 8 [ 327.454426][ T4229] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 327.484414][ T4229] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 328.474190][ T4229] usb 3-1: string descriptor 0 read error: -71 [ 328.480718][ T4229] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 328.495413][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.536011][ T4229] usb 3-1: can't set config #1, error -71 [ 328.558918][ T4229] usb 3-1: USB disconnect, device number 3 [ 328.759658][ T7601] loop4: detected capacity change from 0 to 512 [ 328.785303][ T7604] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 329.462941][ T7613] netlink: 'syz.1.798': attribute type 46 has an invalid length. [ 329.581327][ T7601] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 329.648117][ T7601] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 331.081664][ T7601] System zones: 1-12 [ 331.127103][ T7601] EXT4-fs (loop4): 1 truncate cleaned up [ 331.132797][ T7601] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,stripe=0x00000000000000b9,,errors=continue. Quota mode: none. [ 331.273953][ T7623] loop1: detected capacity change from 0 to 128 [ 331.534368][ T7623] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 331.545309][ T7623] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.053578][ T7628] loop4: detected capacity change from 0 to 1024 [ 333.768794][ T7642] loop2: detected capacity change from 0 to 1024 [ 333.854324][ T7642] EXT4-fs (loop2): can't mount with both data=journal and delalloc [ 334.649841][ T7654] netlink: 'syz.2.810': attribute type 46 has an invalid length. [ 334.837088][ T7657] loop2: detected capacity change from 0 to 512 [ 334.959042][ T7660] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 335.058545][ T7657] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 335.106960][ T7657] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 335.164171][ T7657] System zones: 1-12 [ 335.219087][ T7657] EXT4-fs (loop2): 1 truncate cleaned up [ 335.229141][ T7657] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,stripe=0x00000000000000b9,,errors=continue. Quota mode: none. [ 335.556182][ T7669] loop5: detected capacity change from 0 to 8 [ 336.355628][ T7684] loop2: detected capacity change from 0 to 1024 [ 336.464213][ T4265] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 337.355423][ T4265] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.385055][ T4265] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 337.404204][ T4265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.440143][ T4265] usb 2-1: config 0 descriptor?? [ 337.544575][ T7698] loop3: detected capacity change from 0 to 128 [ 337.560526][ T4265] usb 2-1: bad CDC descriptors [ 338.688951][ T4265] usb 2-1: USB disconnect, device number 3 [ 338.759555][ T7698] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 338.770783][ T7698] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.373691][ T7726] loop3: detected capacity change from 0 to 1024 [ 342.464536][ T7730] zram: Cannot change disksize for initialized device [ 342.471677][ T7730] netlink: 'syz.1.827': attribute type 46 has an invalid length. [ 342.831409][ T7736] tipc: Enabled bearer , priority 0 [ 342.851544][ T7736] device syzkaller0 entered promiscuous mode [ 342.879367][ T7736] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 342.975838][ T7736] netlink: 12 bytes leftover after parsing attributes in process `syz.5.822'. [ 343.031022][ T7740] loop2: detected capacity change from 0 to 8 [ 343.067300][ T7731] tipc: Resetting bearer [ 343.265589][ T7746] loop1: detected capacity change from 0 to 1024 [ 343.643577][ T7731] tipc: Disabling bearer [ 343.680832][ T7740] SQUASHFS error: zlib decompression failed, data probably corrupt [ 343.716604][ T7740] SQUASHFS error: Failed to read block 0x4de: -5 [ 343.755891][ T7740] SQUASHFS error: Failed to read block 0x4e2: -5 [ 343.796775][ T7740] SQUASHFS error: Failed to read block 0x9ca: -5 [ 343.809243][ T7740] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 343.866606][ T7740] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 343.914351][ T7740] SQUASHFS error: Failed to read block 0x535f2: -5 [ 344.004978][ T26] audit: type=1800 audit(1788996090.566:17): pid=7740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.831" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 345.492893][ T7766] loop2: detected capacity change from 0 to 1024 [ 345.541242][ T7766] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 345.578725][ T7766] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 345.587927][ T7766] EXT4-fs (loop2): orphan cleanup on readonly fs [ 345.596241][ T7766] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.838: Inode bitmap for bg 0 marked uninitialized [ 345.610141][ T7766] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 346.334285][ T7776] zram: Cannot change disksize for initialized device [ 346.341574][ T7776] netlink: 'syz.2.840': attribute type 46 has an invalid length. [ 348.813003][ T7785] loop5: detected capacity change from 0 to 1024 [ 348.921687][ T7787] loop1: detected capacity change from 0 to 256 [ 348.987101][ T7789] loop4: detected capacity change from 0 to 512 [ 349.045652][ T7787] exfat: Unknown parameter 'keep_last_dots' [ 349.055681][ T7789] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 349.172811][ T7789] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #2: block 3: comm syz.4.845: lblock 0 mapped to illegal pblock 3 (length 1) [ 349.311951][ T7795] loop1: detected capacity change from 0 to 256 [ 349.334758][ T7789] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.845: error -117 reading directory block [ 349.530614][ T7795] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 349.534580][ T7789] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 349.712154][ T7789] EXT4-fs (loop4): mounted filesystem without journal. Opts: noquota,mblk_io_submit,data_err=ignore,discard,auto_da_alloc,grpjquota=.journal_dev=0x00000000000001ff,barrier=0x0000000000000008,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 350.281308][ T7795] exFAT-fs (loop1): error, invalid size(size(4096) > aligned(9223372036854777344) [ 350.281308][ T7795] [ 350.294636][ T7795] exFAT-fs (loop1): Filesystem has been set read-only [ 350.302110][ T7795] exFAT-fs (loop1): error, invalid size(size(4096) > aligned(9223372036854777344) [ 350.302110][ T7795] [ 350.359565][ T7789] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #2: block 3: comm syz.4.845: lblock 0 mapped to illegal pblock 3 (length 1) [ 350.402082][ T7789] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #2: block 2: comm syz.4.845: lblock 4 mapped to illegal pblock 2 (length 1) [ 350.568642][ T7803] loop3: detected capacity change from 0 to 2048 [ 350.781042][ T7807] zram: Cannot change disksize for initialized device [ 350.931897][ T7807] netlink: 'syz.1.851': attribute type 46 has an invalid length. [ 351.007762][ T7803] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 351.663901][ T7817] loop5: detected capacity change from 0 to 8 [ 352.152519][ T7829] loop3: detected capacity change from 0 to 8 [ 352.225175][ T7830] loop1: detected capacity change from 0 to 1024 [ 353.426841][ T7841] zram: Cannot change disksize for initialized device [ 353.434191][ T7841] netlink: 'syz.4.863': attribute type 46 has an invalid length. [ 355.721045][ T7859] loop3: detected capacity change from 0 to 128 [ 356.045044][ T7859] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 356.064307][ T7859] ext4 filesystem being mounted at /175/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 356.273593][ T7868] loop2: detected capacity change from 0 to 4096 [ 356.577546][ T7868] EXT4-fs (loop2): Test dummy encryption mode enabled [ 356.584579][ T7868] EXT4-fs (loop2): inline encryption not supported [ 356.591572][ T7868] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 356.599070][ T7868] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 356.879655][ T7868] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2842c198, mo2=0003] [ 356.888134][ T7868] System zones: 0-5 [ 356.896240][ T7868] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,resgid=0x0000000000000000,minixdf,stripe=0x0000000000000005,nomblk_io_submit,jqfmt=vfsv0,noload,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 356.936213][ T7859] fscrypt (loop3, inode 12): Direct key flag not allowed with different contents and filenames modes [ 359.100700][ T7881] zram: Cannot change disksize for initialized device [ 359.108035][ T7881] netlink: 'syz.2.876': attribute type 46 has an invalid length. [ 359.410089][ T7889] loop2: detected capacity change from 0 to 128 [ 359.532064][ T7889] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 359.543171][ T7889] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.091971][ T7900] loop3: detected capacity change from 0 to 128 [ 360.407639][ T7900] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 360.418778][ T7900] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.114863][ T7906] FAULT_INJECTION: forcing a failure. [ 361.114863][ T7906] name failslab, interval 1, probability 0, space 0, times 0 [ 361.171964][ T7906] CPU: 1 PID: 7906 Comm: syz.5.882 Not tainted syzkaller #0 [ 361.179321][ T7906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 361.189480][ T7906] Call Trace: [ 361.192790][ T7906] [ 361.195740][ T7906] dump_stack_lvl+0x188/0x250 [ 361.200554][ T7906] ? show_regs_print_info+0x20/0x20 [ 361.205787][ T7906] ? load_image+0x410/0x410 [ 361.210406][ T7906] ? __lock_acquire+0x7b50/0x7b50 [ 361.215585][ T7906] ? do_futex+0xdc2/0x12b0 [ 361.220149][ T7906] should_fail+0x383/0x4b0 [ 361.224669][ T7906] should_failslab+0x5/0x20 [ 361.229262][ T7906] slab_pre_alloc_hook+0x51/0xc0 [ 361.234279][ T7906] ? getname_flags+0xb7/0x4f0 [ 361.239135][ T7906] kmem_cache_alloc+0x3d/0x280 [ 361.243932][ T7906] getname_flags+0xb7/0x4f0 [ 361.248472][ T7906] do_sys_openat2+0xdd/0x500 [ 361.253101][ T7906] ? __lock_acquire+0x7b50/0x7b50 [ 361.258167][ T7906] ? do_sys_open+0xe0/0xe0 [ 361.262619][ T7906] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 361.268648][ T7906] ? lock_chain_count+0x20/0x20 [ 361.273536][ T7906] __x64_sys_openat+0x135/0x160 [ 361.278429][ T7906] do_syscall_64+0x4c/0xa0 [ 361.282911][ T7906] ? clear_bhb_loop+0x30/0x80 [ 361.287720][ T7906] ? clear_bhb_loop+0x30/0x80 [ 361.292427][ T7906] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 361.298369][ T7906] RIP: 0033:0x7f26346f7159 [ 361.302822][ T7906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.322469][ T7906] RSP: 002b:00007f263294f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 361.330924][ T7906] RAX: ffffffffffffffda RBX: 00007f263497efa0 RCX: 00007f26346f7159 [ 361.338924][ T7906] RDX: 0000000000000482 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 361.346925][ T7906] RBP: 00007f263478e03b R08: 0000000000000000 R09: 0000000000000000 [ 361.354923][ T7906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.362915][ T7906] R13: 00007f263497f038 R14: 00007f263497efa0 R15: 00007ffe1f7836c8 [ 361.370950][ T7906] [ 361.507794][ T7910] loop1: detected capacity change from 0 to 512 [ 362.049599][ T7910] EXT4-fs (loop1): Ignoring removed bh option [ 362.079866][ T7910] EXT4-fs (loop1): Ignoring removed orlov option [ 362.129499][ T7910] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 362.376441][ T7910] EXT4-fs (loop1): 1 truncate cleaned up [ 362.576897][ T7917] loop5: detected capacity change from 0 to 4096 [ 362.644454][ T7910] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,bsddf,bh,orlov,sysvgroups,data_err=ignore,,errors=continue. Quota mode: none. [ 362.733437][ T7917] EXT4-fs (loop5): Test dummy encryption mode enabled [ 362.740464][ T7917] EXT4-fs (loop5): inline encryption not supported [ 362.747545][ T7917] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 362.754985][ T7917] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 362.925163][ T7917] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2842c198, mo2=0003] [ 362.933742][ T7917] System zones: 0-5 [ 362.950150][ T7917] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,resgid=0x0000000000000000,minixdf,stripe=0x0000000000000005,nomblk_io_submit,jqfmt=vfsv0,noload,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 364.169914][ T7938] netlink: 'syz.1.887': attribute type 46 has an invalid length. [ 365.960744][ T7963] loop2: detected capacity change from 0 to 128 [ 366.723047][ T7967] loop1: detected capacity change from 0 to 4096 [ 367.315055][ T7967] EXT4-fs (loop1): Test dummy encryption mode enabled [ 367.321905][ T7967] EXT4-fs (loop1): inline encryption not supported [ 367.328640][ T7967] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 367.336051][ T7967] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 368.168389][ T7963] EXT4-fs: error -4 creating inode table initialization thread [ 368.177178][ T7963] EXT4-fs (loop2): mount failed [ 368.254508][ T7967] EXT4-fs: failed to create workqueue [ 368.259942][ T7967] EXT4-fs (loop1): mount failed [ 369.496794][ T7981] zram: Cannot change disksize for initialized device [ 369.504235][ T7981] netlink: 'syz.2.900': attribute type 46 has an invalid length. [ 372.483342][ T8005] loop2: detected capacity change from 0 to 1024 [ 373.417019][ T8022] loop5: detected capacity change from 0 to 512 [ 373.873915][ T8027] zram: Cannot change disksize for initialized device [ 374.062257][ T8028] loop3: detected capacity change from 0 to 512 [ 374.174525][ T8022] EXT4-fs (loop5): Ignoring removed nobh option [ 374.174761][ T8028] EXT4-fs (loop3): Ignoring removed nobh option [ 374.233465][ T8022] EXT4-fs (loop5): orphan cleanup on readonly fs [ 374.244305][ T8022] EXT4-fs warning (device loop5): ext4_xattr_inode_get:492: inode #11: comm syz.5.912: ea_inode file size=1535 entry size=6 [ 374.257542][ T8022] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 374.271360][ T8022] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #15: comm syz.5.912: corrupted inode contents [ 374.292740][ T8022] EXT4-fs (loop5): Remounting filesystem read-only [ 374.299435][ T8022] EXT4-fs error (device loop5): ext4_dirty_inode:6077: inode #15: comm syz.5.912: mark_inode_dirty error [ 374.312686][ T8022] EXT4-fs (loop5): Remounting filesystem read-only [ 374.320411][ T8022] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #15: comm syz.5.912: corrupted inode contents [ 374.338010][ T8022] EXT4-fs (loop5): Remounting filesystem read-only [ 374.344819][ T8022] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2957: inode #15: comm syz.5.912: mark_inode_dirty error [ 374.359857][ T8022] EXT4-fs (loop5): Remounting filesystem read-only [ 374.366689][ T8022] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2960: inode #15: comm syz.5.912: mark inode dirty (error -117) [ 374.387273][ T8022] EXT4-fs (loop5): Remounting filesystem read-only [ 374.393953][ T8022] EXT4-fs warning (device loop5): ext4_evict_inode:304: xattr delete (err -117) [ 374.403395][ T8022] EXT4-fs (loop5): 1 orphan inode deleted [ 374.409355][ T8022] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x000000000000005c,barrier,nobh,errors=remount-ro,block_validity,. Quota mode: none. [ 374.658492][ T8038] input: syz1 as /devices/virtual/input/input8 [ 374.701469][ T8028] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback. [ 375.016246][ T8028] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.168949][ T8028] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.914: corrupted inode contents [ 375.212917][ T8028] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #2: comm syz.3.914: mark_inode_dirty error [ 375.251971][ T8028] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.914: corrupted inode contents [ 375.302504][ T8039] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.914: corrupted inode contents [ 375.350472][ T8039] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #2: comm syz.3.914: mark_inode_dirty error [ 375.382884][ T8039] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.914: corrupted inode contents [ 375.420551][ T8039] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.914: mark_inode_dirty error [ 375.452939][ T8039] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.914: corrupted inode contents [ 375.491616][ T8039] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #2: comm syz.3.914: mark_inode_dirty error [ 375.597822][ T8028] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.914: corrupted inode contents [ 376.322138][ T8053] loop4: detected capacity change from 0 to 1024 [ 376.496163][ T8056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.561486][ T8070] loop3: detected capacity change from 0 to 512 [ 377.594174][ T8074] loop2: detected capacity change from 0 to 128 [ 378.131469][ T8077] loop4: detected capacity change from 0 to 4096 [ 378.464820][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.471175][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.513182][ T8079] loop5: detected capacity change from 0 to 256 [ 378.524716][ T8074] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 378.536670][ T8077] EXT4-fs (loop4): Test dummy encryption mode enabled [ 378.543505][ T8077] EXT4-fs (loop4): inline encryption not supported [ 378.546408][ T8079] exfat: Deprecated parameter 'namecase' [ 378.550700][ T8077] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 378.563301][ T8077] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 378.566882][ T8079] exfat: Deprecated parameter 'namecase' [ 378.587533][ T8070] EXT4-fs (loop3): Ignoring removed bh option [ 378.611864][ T26] audit: type=1800 audit(1788996125.166:18): pid=8074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.929" name="file1" dev="loop2" ino=94 res=0 errno=0 [ 378.636155][ T8082] zram: Cannot change disksize for initialized device [ 378.643380][ T8082] netlink: 'syz.1.928': attribute type 46 has an invalid length. [ 378.653077][ T8070] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 378.674909][ T8077] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2842c198, mo2=0003] [ 378.683175][ T8077] System zones: 0-5 [ 378.690257][ T8079] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 378.702570][ T26] audit: type=1800 audit(1788996125.206:19): pid=8083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.929" name="file1" dev="loop2" ino=94 res=0 errno=0 [ 378.702614][ T26] audit: type=1800 audit(1788996125.216:20): pid=8074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.929" name="file1" dev="loop2" ino=94 res=0 errno=0 [ 378.763431][ T8077] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,resgid=0x0000000000000000,minixdf,stripe=0x0000000000000005,nomblk_io_submit,jqfmt=vfsv0,noload,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 378.793996][ T8070] EXT4-fs (loop3): 1 truncate cleaned up [ 378.820656][ T8070] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,mb_optimize_scan=0x0000000000000000,bh,noload,data_err=ignore,usrjquota=,min_batch_time=0x000000000000ccff,,errors=continue. Quota mode: none. [ 378.856941][ T8083] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 378.886308][ T8079] attempt to access beyond end of device [ 378.886308][ T8079] loop5: rw=524288, want=34225520825, limit=256 [ 379.000444][ T26] audit: type=1804 audit(1788996125.556:21): pid=8087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.930" name="/newroot/143/file0/file1" dev="loop5" ino=1048682 res=1 errno=0 [ 379.074325][ T8079] attempt to access beyond end of device [ 379.074325][ T8079] loop5: rw=0, want=34225520825, limit=256 [ 379.210683][ T26] audit: type=1800 audit(1788996125.766:22): pid=8079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.930" name="file1" dev="loop5" ino=1048682 res=0 errno=0 [ 379.234305][ T8087] attempt to access beyond end of device [ 379.234305][ T8087] loop5: rw=0, want=34225520825, limit=256 [ 379.443533][ T26] audit: type=1800 audit(1788996125.996:23): pid=8087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.930" name="file1" dev="loop5" ino=1048682 res=0 errno=0 [ 379.604457][ T4265] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 379.884138][ T4265] usb 5-1: Using ep0 maxpacket: 8 [ 380.014366][ T4265] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.037811][ T4265] usb 5-1: config 0 interface 0 has no altsetting 0 [ 380.060737][ T4265] usb 5-1: New USB device found, idVendor=056a, idProduct=0021, bcdDevice= 0.00 [ 380.089396][ T4265] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.122626][ T4265] usb 5-1: config 0 descriptor?? [ 380.799257][ T4265] wacom 0003:056A:0021.0003: Unknown device_type for 'HID 056a:0021'. Assuming pen. [ 380.822089][ T4265] wacom 0003:056A:0021.0003: hidraw0: USB HID v0.00 Keyboard [HID 056a:0021] on usb-dummy_hcd.4-1/input0 [ 380.836544][ T4265] input: Wacom Intuos 6x8 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0021.0003/input/input9 [ 381.324276][ T4265] usb 5-1: USB disconnect, device number 3 [ 381.397805][ T8120] 9pnet: Insufficient options for proto=fd [ 381.643157][ T8128] loop1: detected capacity change from 0 to 4096 [ 381.819248][ T8128] EXT4-fs (loop1): Test dummy encryption mode enabled [ 381.826171][ T8128] EXT4-fs (loop1): inline encryption not supported [ 381.832861][ T8128] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 381.840269][ T8128] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 382.048269][ T8128] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2842c198, mo2=0003] [ 382.056633][ T8128] System zones: 0-5 [ 382.142188][ T8128] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,resgid=0x0000000000000000,minixdf,stripe=0x0000000000000005,nomblk_io_submit,jqfmt=vfsv0,noload,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 382.322781][ T8127] fido_id[8127]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 383.065614][ T8144] loop5: detected capacity change from 0 to 512 [ 384.582613][ T8144] EXT4-fs (loop5): Ignoring removed nobh option [ 384.609962][ T8144] EXT4-fs (loop5): orphan cleanup on readonly fs [ 384.619266][ T8144] EXT4-fs warning (device loop5): ext4_xattr_inode_get:492: inode #11: comm syz.5.947: ea_inode file size=1535 entry size=6 [ 384.632809][ T8144] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #15: comm syz.5.947: corrupted inode contents [ 384.645811][ T8144] EXT4-fs (loop5): Remounting filesystem read-only [ 384.652365][ T8144] EXT4-fs error (device loop5): ext4_dirty_inode:6077: inode #15: comm syz.5.947: mark_inode_dirty error [ 384.664630][ T8144] EXT4-fs (loop5): Remounting filesystem read-only [ 384.671200][ T8144] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #15: comm syz.5.947: corrupted inode contents [ 384.683866][ T8144] EXT4-fs (loop5): Remounting filesystem read-only [ 384.690722][ T8144] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2957: inode #15: comm syz.5.947: mark_inode_dirty error [ 384.703471][ T8144] EXT4-fs (loop5): Remounting filesystem read-only [ 384.710133][ T8144] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2960: inode #15: comm syz.5.947: mark inode dirty (error -117) [ 384.723342][ T8144] EXT4-fs (loop5): Remounting filesystem read-only [ 384.729970][ T8144] EXT4-fs warning (device loop5): ext4_evict_inode:304: xattr delete (err -117) [ 384.739216][ T8144] EXT4-fs (loop5): 1 orphan inode deleted [ 384.745050][ T8144] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x000000000000005c,barrier,nobh,errors=remount-ro,block_validity,. Quota mode: none. [ 385.264185][ T8162] loop5: detected capacity change from 0 to 256 [ 385.337875][ T8162] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011bf5, chksum : 0x8604b368, utbl_chksum : 0xe619d30d) [ 385.403202][ T8162] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 385.852975][ T8173] loop2: detected capacity change from 0 to 4096 [ 386.398130][ T8174] loop1: detected capacity change from 0 to 128 [ 386.448556][ T8176] loop5: detected capacity change from 0 to 1024 [ 388.426516][ T8173] EXT4-fs (loop2): Test dummy encryption mode enabled [ 388.433452][ T8173] EXT4-fs (loop2): inline encryption not supported [ 388.440163][ T8173] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 388.448031][ T8173] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 388.695019][ T8174] EXT4-fs: failed to create workqueue [ 388.700508][ T8174] EXT4-fs (loop1): mount failed [ 388.725623][ T8173] EXT4-fs: failed to create workqueue [ 388.731060][ T8173] EXT4-fs (loop2): mount failed [ 388.881231][ T8185] loop3: detected capacity change from 0 to 1024 [ 390.111505][ T8220] capability: warning: `syz.5.973' uses deprecated v2 capabilities in a way that may be insecure [ 390.440902][ T8225] loop1: detected capacity change from 0 to 1024 [ 390.542382][ T8218] vhci_hcd vhci_hcd.0: failed to lookup sock [ 390.810794][ T8225] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 390.916675][ T8225] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 390.930810][ T8225] EXT4-fs (loop1): orphan cleanup on readonly fs [ 390.941502][ T8225] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.970: Inode bitmap for bg 0 marked uninitialized [ 390.959994][ T8225] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 391.240333][ T8228] zram: Cannot change disksize for initialized device [ 391.248499][ T8228] netlink: 'syz.2.971': attribute type 46 has an invalid length. [ 391.754073][ T8237] loop5: detected capacity change from 0 to 4096 [ 392.471118][ T8237] EXT4-fs (loop5): Test dummy encryption mode enabled [ 392.478081][ T8237] EXT4-fs (loop5): inline encryption not supported [ 392.484838][ T8237] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 392.492547][ T8237] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 392.610405][ T8237] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2842c198, mo2=0003] [ 392.618866][ T8237] System zones: 0-5 [ 393.149521][ T8245] loop3: detected capacity change from 0 to 128 [ 393.232320][ T8237] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,resgid=0x0000000000000000,minixdf,stripe=0x0000000000000005,nomblk_io_submit,jqfmt=vfsv0,noload,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 393.425917][ T8242] loop4: detected capacity change from 0 to 1024 [ 393.750361][ T8245] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 393.761653][ T8245] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.068895][ T8262] loop1: detected capacity change from 0 to 512 [ 395.116255][ T4364] hfsplus: b-tree write err: -5, ino 3 [ 395.150960][ T8262] EXT4-fs (loop1): Ignoring removed nobh option [ 395.190384][ T8262] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 395.316370][ T8262] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 395.410687][ T8262] EXT4-fs (loop1): 1 truncate cleaned up [ 395.428977][ T8262] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,data=journal,. Quota mode: none. [ 395.486410][ T8270] loop4: detected capacity change from 0 to 2048 [ 396.984122][ T1110] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 397.037739][ T4177] loop4: p1 < > p4 [ 397.037739][ T4177] p4: [ 397.066275][ T4177] loop4: p4 size 722688 extends beyond EOD, truncated [ 397.137752][ T8270] loop4: p1 < > p4 [ 397.137752][ T8270] p4: [ 397.166144][ T8270] loop4: p4 size 722688 extends beyond EOD, truncated [ 397.460949][ T4456] udevd[4456]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 397.473537][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 397.483544][ T1110] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 397.513881][ T1110] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 397.607264][ T8280] loop1: detected capacity change from 0 to 1024 [ 397.963306][ T8280] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 398.163079][ T1110] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 398.204105][ T1110] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 398.244574][ T8282] loop4: detected capacity change from 0 to 4096 [ 398.255160][ T8280] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 398.269049][ T8280] EXT4-fs (loop1): orphan cleanup on readonly fs [ 398.278507][ T8280] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.989: Inode bitmap for bg 0 marked uninitialized [ 398.296733][ T8280] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 398.529556][ T8282] EXT4-fs (loop4): Test dummy encryption mode enabled [ 398.536501][ T8282] EXT4-fs (loop4): inline encryption not supported [ 398.543140][ T8282] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 398.550553][ T8282] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 398.603910][ T8282] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2842c198, mo2=0003] [ 398.612482][ T8282] System zones: 0-5 [ 398.732745][ T8282] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,resgid=0x0000000000000000,minixdf,stripe=0x0000000000000005,nomblk_io_submit,jqfmt=vfsv0,noload,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 398.764589][ T1110] usb 6-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 398.773801][ T1110] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.174839][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 399.187994][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 399.844264][ T1110] usb 6-1: can't set config #1, error -71 [ 399.851411][ T1110] usb 6-1: USB disconnect, device number 3 [ 400.080743][ T8303] loop5: detected capacity change from 0 to 128 [ 400.771028][ T8303] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 400.782352][ T8303] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.413412][ T8292] loop2: detected capacity change from 0 to 8192 [ 402.765228][ T8292] attempt to access beyond end of device [ 402.765228][ T8292] loop2: rw=0, want=57848, limit=8192 [ 402.804099][ T8292] Buffer I/O error on dev loop2, logical block 57847, async page read [ 402.853003][ T8292] attempt to access beyond end of device [ 402.853003][ T8292] loop2: rw=0, want=57848, limit=8192 [ 402.942590][ T8292] Buffer I/O error on dev loop2, logical block 57847, async page read [ 402.953069][ T8325] loop1: detected capacity change from 0 to 512 [ 403.214253][ T26] audit: type=1800 audit(1788996149.746:24): pid=8292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.993" name="file2" dev="loop2" ino=1048684 res=0 errno=0 [ 403.378475][ T8325] EXT4-fs (loop1): Ignoring removed nobh option [ 403.397188][ T8325] EXT4-fs (loop1): orphan cleanup on readonly fs [ 403.408057][ T8325] EXT4-fs warning (device loop1): ext4_xattr_inode_get:492: inode #11: comm syz.1.1000: ea_inode file size=1535 entry size=6 [ 403.421668][ T8325] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 403.438158][ T8325] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.1000: corrupted inode contents [ 403.451260][ T8292] syz.2.993 (8292) used greatest stack depth: 20432 bytes left [ 403.483720][ T8328] loop5: detected capacity change from 0 to 4096 [ 403.504466][ T8325] EXT4-fs (loop1): Remounting filesystem read-only [ 403.511079][ T8325] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #15: comm syz.1.1000: mark_inode_dirty error [ 403.525300][ T8325] EXT4-fs (loop1): Remounting filesystem read-only [ 403.531869][ T8328] EXT4-fs (loop5): Test dummy encryption mode enabled [ 403.531884][ T8325] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.1000: corrupted inode contents [ 403.538733][ T8328] EXT4-fs (loop5): inline encryption not supported [ 403.538962][ T8328] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 403.564574][ T8328] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 403.575422][ T8325] EXT4-fs (loop1): Remounting filesystem read-only [ 403.582006][ T8325] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2957: inode #15: comm syz.1.1000: mark_inode_dirty error [ 403.601769][ T8325] EXT4-fs (loop1): Remounting filesystem read-only [ 403.608713][ T8325] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2960: inode #15: comm syz.1.1000: mark inode dirty (error -117) [ 403.623558][ T8325] EXT4-fs (loop1): Remounting filesystem read-only [ 403.630182][ T8325] EXT4-fs warning (device loop1): ext4_evict_inode:304: xattr delete (err -117) [ 403.639397][ T8325] EXT4-fs (loop1): 1 orphan inode deleted [ 403.643930][ T8328] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2842c198, mo2=0003] [ 403.645211][ T8325] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x000000000000005c,barrier,nobh,errors=remount-ro,block_validity,. Quota mode: none. [ 403.671775][ T8328] System zones: 0-5 [ 403.692814][ T8328] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,resgid=0x0000000000000000,minixdf,stripe=0x0000000000000005,nomblk_io_submit,jqfmt=vfsv0,noload,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 404.540879][ T8341] FAULT_INJECTION: forcing a failure. [ 404.540879][ T8341] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 404.672129][ T8341] CPU: 1 PID: 8341 Comm: syz.1.1006 Not tainted syzkaller #0 [ 404.679581][ T8341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 404.689773][ T8341] Call Trace: [ 404.693084][ T8341] [ 404.696044][ T8341] dump_stack_lvl+0x188/0x250 [ 404.700779][ T8341] ? show_regs_print_info+0x20/0x20 [ 404.706026][ T8341] ? load_image+0x410/0x410 [ 404.710577][ T8341] ? __lock_acquire+0x7b50/0x7b50 [ 404.715659][ T8341] should_fail+0x383/0x4b0 [ 404.720128][ T8341] prepare_alloc_pages+0x1e3/0x5b0 [ 404.725401][ T8341] __alloc_pages+0x11b/0x480 [ 404.730043][ T8341] ? zone_statistics+0x170/0x170 [ 404.735016][ T8341] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 404.741048][ T8341] pcpu_populate_chunk+0x15d/0xc80 [ 404.746278][ T8341] ? _find_next_bit+0x1a9/0x200 [ 404.751225][ T8341] pcpu_alloc+0xcb6/0x16d0 [ 404.755717][ T8341] bpf_map_alloc_percpu+0xc5/0x150 [ 404.760971][ T8341] htab_map_alloc+0xce5/0x1670 [ 404.765866][ T8341] map_create+0x481/0x2330 [ 404.770350][ T8341] ? bpf_lsm_bpf+0x5/0x10 [ 404.774819][ T8341] __sys_bpf+0x30a/0x6f0 [ 404.779116][ T8341] ? bpf_link_show_fdinfo+0x380/0x380 [ 404.784575][ T8341] __x64_sys_bpf+0x78/0x90 [ 404.789044][ T8341] do_syscall_64+0x4c/0xa0 [ 404.793504][ T8341] ? clear_bhb_loop+0x30/0x80 [ 404.798228][ T8341] ? clear_bhb_loop+0x30/0x80 [ 404.802951][ T8341] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 404.808877][ T8341] RIP: 0033:0x7f986380a159 [ 404.813323][ T8341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.832977][ T8341] RSP: 002b:00007f9861a62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 404.841437][ T8341] RAX: ffffffffffffffda RBX: 00007f9863a91fa0 RCX: 00007f986380a159 [ 404.849455][ T8341] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 0000000000000000 [ 404.857460][ T8341] RBP: 00007f98638a103b R08: 0000000000000000 R09: 0000000000000000 [ 404.865474][ T8341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.873483][ T8341] R13: 00007f9863a92038 R14: 00007f9863a91fa0 R15: 00007ffc70ef46d8 [ 404.881506][ T8341] [ 406.262773][ T8356] loop1: detected capacity change from 0 to 1024 [ 407.256379][ T8356] hfsplus: xattr searching failed [ 407.289070][ T8359] hfsplus: xattr searching failed [ 407.384376][ T8359] hfsplus: xattr searching failed [ 407.501031][ T8361] loop6: detected capacity change from 0 to 7 [ 407.551607][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 407.583490][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 407.594608][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 407.654441][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 407.665411][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 407.681994][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 407.692965][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 407.704984][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 407.715907][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 408.407444][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.418454][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 408.474648][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 408.683460][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.694431][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 409.044207][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 409.220271][ T13] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 409.227849][ T8372] loop1: detected capacity change from 0 to 128 [ 409.458900][ T8372] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 409.470155][ T8372] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.405246][ T13] usb 4-1: config 0 has no interface number 0 [ 410.412156][ T13] usb 4-1: config 0 interface 184 has no altsetting 0 [ 410.624421][ T13] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 410.650558][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.706051][ T13] usb 4-1: Product: syz [ 410.930361][ T13] usb 4-1: config 0 descriptor?? [ 410.989089][ T8381] loop3: detected capacity change from 0 to 4096 [ 411.106999][ T13] usb 4-1: can't set config #0, error -71 [ 411.182076][ T8381] EXT4-fs (loop3): Test dummy encryption mode enabled [ 411.189067][ T8381] EXT4-fs (loop3): inline encryption not supported [ 411.195749][ T8381] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 411.203076][ T8381] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 411.303268][ T8381] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2842c198, mo2=0003] [ 411.311632][ T8381] System zones: 0-5 [ 411.441168][ T13] usb 4-1: USB disconnect, device number 2 [ 411.448492][ T8381] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,resgid=0x0000000000000000,minixdf,stripe=0x0000000000000005,nomblk_io_submit,jqfmt=vfsv0,noload,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 411.901675][ T8387] loop5: detected capacity change from 0 to 4096 [ 411.926575][ T8394] loop1: detected capacity change from 0 to 128 [ 412.212469][ T8399] loop3: detected capacity change from 0 to 1024 [ 413.038309][ T8387] EXT4-fs (loop5): Test dummy encryption mode enabled [ 413.116878][ T8399] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 413.153116][ T8387] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 413.284257][ T8399] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 413.298090][ T8399] EXT4-fs (loop3): orphan cleanup on readonly fs [ 413.308440][ T8399] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.1018: Inode bitmap for bg 0 marked uninitialized [ 413.327142][ T8399] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 413.412916][ T8387] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=680ec1a8, mo2=0003] [ 413.424643][ T8387] System zones: 0-5 [ 413.811378][ T8387] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,discard,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000004,. Quota mode: writeback. [ 414.679643][ T4337] attempt to access beyond end of device [ 414.679643][ T4337] loop1: rw=1, want=1041, limit=128 [ 414.996807][ T8406] loop4: detected capacity change from 0 to 2048 [ 415.738693][ T8413] binder: 8412:8413 ioctl 4018620d 0 returned -22 [ 415.807288][ T8413] binder: 8412:8413 ioctl c0306201 0 returned -14 [ 415.921289][ T8417] loop1: detected capacity change from 0 to 1024 [ 416.189864][ T8419] binder: 8412:8419 unknown command 0 [ 416.196097][ T8419] binder: 8412:8419 ioctl c0306201 2000000004c0 returned -22 [ 416.848315][ T8426] tipc: Enabling of bearer rejected, failed to enable media [ 417.733197][ T8450] loop2: detected capacity change from 0 to 4096 [ 419.543204][ T8447] zram: Cannot change disksize for initialized device [ 419.634604][ T8447] netlink: 'syz.3.1030': attribute type 46 has an invalid length. [ 419.820062][ T8450] EXT4-fs (loop2): Test dummy encryption mode enabled [ 419.827000][ T8450] EXT4-fs (loop2): inline encryption not supported [ 419.833673][ T8450] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 419.841048][ T8450] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 420.127249][ T8450] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2842c198, mo2=0003] [ 420.135481][ T8450] System zones: 0-5 [ 420.158099][ T8450] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,resgid=0x0000000000000000,minixdf,stripe=0x0000000000000005,nomblk_io_submit,jqfmt=vfsv0,noload,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 420.639024][ T8463] loop4: detected capacity change from 0 to 1024 [ 420.736008][ T8468] loop5: detected capacity change from 0 to 1024 [ 421.381086][ T8468] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 421.411859][ T8469] loop2: detected capacity change from 0 to 512 [ 421.452228][ T8463] EXT4-fs (loop4): Ignoring removed bh option [ 421.520166][ T8468] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 421.534445][ T8468] EXT4-fs (loop5): orphan cleanup on readonly fs [ 421.544849][ T8468] EXT4-fs error (device loop5): ext4_read_inode_bitmap:168: comm syz.5.1035: Inode bitmap for bg 0 marked uninitialized [ 421.561478][ T8468] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 421.872532][ T8469] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 421.902324][ T8463] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 421.997578][ T8469] EXT4-fs (loop2): Ignoring removed orlov option [ 422.113714][ T8469] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 422.271979][ T8463] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 422.326593][ T8469] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 422.414199][ T8469] System zones: 1-12 [ 422.479907][ T8469] EXT4-fs (loop2): 1 truncate cleaned up [ 422.540456][ T8469] EXT4-fs (loop2): mounted filesystem without journal. Opts: nomblk_io_submit,max_batch_time=0x0000000000000002,orlov,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 422.756032][ T8469] EXT4-fs warning (device loop2): verify_group_input:165: Last group not full [ 424.537223][ T8483] loop2: detected capacity change from 0 to 512 [ 424.687493][ T8484] netlink: 'syz.5.1039': attribute type 3 has an invalid length. [ 424.787446][ T8487] x_tables: ip6_tables: CT target: only valid in raw table, not  [ 424.985335][ T8493] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 427.214936][ T8507] loop5: detected capacity change from 0 to 512 [ 427.370147][ T8507] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.1048: bg 0: block 5: invalid block bitmap [ 427.768419][ T8519] loop4: detected capacity change from 0 to 1024 [ 429.434559][ T8519] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 429.554350][ T8507] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 429.593091][ T8519] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 429.606832][ T8519] EXT4-fs (loop4): orphan cleanup on readonly fs [ 429.799867][ T8519] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.1050: Inode bitmap for bg 0 marked uninitialized [ 429.820549][ T8519] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 429.853286][ T8507] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1048: invalid indirect mapped block 3 (level 2) [ 430.635141][ T8507] EXT4-fs (loop5): 1 orphan inode deleted [ 430.641189][ T8507] EXT4-fs (loop5): 1 truncate cleaned up [ 430.674449][ T8507] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: writeback. [ 431.501087][ T8544] loop3: detected capacity change from 0 to 512 [ 433.653316][ T8544] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,max_batch_time=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 433.726635][ T8564] loop1: detected capacity change from 0 to 1024 [ 433.824348][ T8564] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 433.929685][ T8564] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 433.943338][ T8564] EXT4-fs (loop1): orphan cleanup on readonly fs [ 433.952711][ T8564] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.1061: Inode bitmap for bg 0 marked uninitialized [ 433.969731][ T8564] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 434.059361][ T8544] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.370393][ T8571] loop4: detected capacity change from 0 to 128 [ 435.597996][ T8574] loop1: detected capacity change from 0 to 512 [ 436.067619][ T8574] EXT4-fs (loop1): Ignoring removed nobh option [ 436.105580][ T8574] EXT4-fs (loop1): orphan cleanup on readonly fs [ 436.112724][ T8574] EXT4-fs warning (device loop1): ext4_xattr_inode_get:492: inode #11: comm syz.1.1065: ea_inode file size=1535 entry size=6 [ 436.126281][ T8574] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 436.140478][ T8574] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.1065: corrupted inode contents [ 436.158207][ T8574] EXT4-fs (loop1): Remounting filesystem read-only [ 436.164845][ T8574] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #15: comm syz.1.1065: mark_inode_dirty error [ 436.176769][ T8574] EXT4-fs (loop1): Remounting filesystem read-only [ 436.183327][ T8574] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.1065: corrupted inode contents [ 436.195645][ T8574] EXT4-fs (loop1): Remounting filesystem read-only [ 436.202224][ T8574] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2957: inode #15: comm syz.1.1065: mark_inode_dirty error [ 436.214815][ T8574] EXT4-fs (loop1): Remounting filesystem read-only [ 436.221375][ T8574] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2960: inode #15: comm syz.1.1065: mark inode dirty (error -117) [ 436.234467][ T8574] EXT4-fs (loop1): Remounting filesystem read-only [ 436.241009][ T8574] EXT4-fs warning (device loop1): ext4_evict_inode:304: xattr delete (err -117) [ 436.250273][ T8574] EXT4-fs (loop1): 1 orphan inode deleted [ 436.256133][ T8574] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x000000000000005c,barrier,nobh,errors=remount-ro,block_validity,. Quota mode: none. [ 436.402439][ T8583] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.409673][ T8583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.896207][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.902649][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.519202][ T8611] loop5: detected capacity change from 0 to 1024 [ 440.560886][ T8611] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 440.627044][ T8611] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 440.639950][ T8611] EXT4-fs (loop5): orphan cleanup on readonly fs [ 440.741520][ T8611] EXT4-fs error (device loop5): ext4_read_inode_bitmap:168: comm syz.5.1076: Inode bitmap for bg 0 marked uninitialized [ 440.755095][ T8611] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 444.328160][ T8632] loop5: detected capacity change from 0 to 256 [ 444.944314][ T8638] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1072'. [ 445.912682][ T26] audit: type=1800 audit(1788996192.466:25): pid=8632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1082" name="file1" dev="loop5" ino=1048687 res=0 errno=0 [ 446.926462][ T21] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 446.988265][ T8654] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 446.999597][ T8654] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 447.058419][ T8654] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 447.114653][ T8654] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 447.122919][ T8654] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 447.142340][ T8654] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 447.155631][ T8654] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 447.190235][ T8654] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 447.223144][ T8654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 447.251367][ T8654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 447.288694][ T8660] loop1: detected capacity change from 0 to 4096 [ 447.329884][ T8657] team0: Mode changed to "activebackup" [ 447.354535][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.380634][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.414955][ T8660] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 447.424905][ T21] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 447.459395][ T21] usb 3-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 447.474082][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.505590][ T21] usb 3-1: config 0 descriptor?? [ 447.583456][ T8671] device syzkaller0 entered promiscuous mode [ 447.650068][ T8672] tipc: Enabled bearer , priority 0 [ 447.721001][ T8671] tipc: Resetting bearer [ 447.819135][ T8670] tipc: Resetting bearer [ 447.946928][ T8683] loop4: detected capacity change from 0 to 512 [ 447.995355][ T8670] tipc: Disabling bearer [ 448.000967][ T21] uclogic 0003:28BD:0075.0004: unknown main item tag 0x0 [ 448.011310][ T21] uclogic 0003:28BD:0075.0004: unknown main item tag 0x0 [ 448.069582][ T21] uclogic 0003:28BD:0075.0004: unknown main item tag 0x0 [ 448.137557][ T21] uclogic 0003:28BD:0075.0004: unknown main item tag 0x0 [ 448.206875][ T21] uclogic 0003:28BD:0075.0004: unknown main item tag 0x0 [ 448.274066][ T21] uclogic 0003:28BD:0075.0004: unknown main item tag 0x0 [ 448.332494][ T21] uclogic 0003:28BD:0075.0004: unknown main item tag 0x0 [ 448.340683][ T21] uclogic 0003:28BD:0075.0004: No inputs registered, leaving [ 448.355967][ T8683] EXT4-fs (loop4): Ignoring removed nobh option [ 448.363456][ T21] uclogic 0003:28BD:0075.0004: hidraw0: USB HID v0.00 Device [HID 28bd:0075] on usb-dummy_hcd.2-1/input0 [ 448.393926][ T21] usb 3-1: USB disconnect, device number 4 [ 448.416370][ T8683] EXT4-fs (loop4): orphan cleanup on readonly fs [ 448.424278][ T8683] EXT4-fs warning (device loop4): ext4_xattr_inode_get:492: inode #11: comm syz.4.1093: ea_inode file size=1535 entry size=6 [ 448.437705][ T8683] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.1093: corrupted inode contents [ 448.450513][ T8683] EXT4-fs (loop4): Remounting filesystem read-only [ 448.457333][ T8683] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #15: comm syz.4.1093: mark_inode_dirty error [ 448.473991][ T8683] EXT4-fs (loop4): Remounting filesystem read-only [ 448.480677][ T8683] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.1093: corrupted inode contents [ 448.493023][ T8683] EXT4-fs (loop4): Remounting filesystem read-only [ 448.499629][ T8683] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2957: inode #15: comm syz.4.1093: mark_inode_dirty error [ 448.512084][ T8683] EXT4-fs (loop4): Remounting filesystem read-only [ 448.518747][ T8683] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2960: inode #15: comm syz.4.1093: mark inode dirty (error -117) [ 448.531966][ T8683] EXT4-fs (loop4): Remounting filesystem read-only [ 448.538614][ T8683] EXT4-fs warning (device loop4): ext4_evict_inode:304: xattr delete (err -117) [ 448.547848][ T8683] EXT4-fs (loop4): 1 orphan inode deleted [ 448.553615][ T8683] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x000000000000005c,barrier,nobh,errors=remount-ro,block_validity,. Quota mode: none. [ 450.252441][ T8720] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1097'. [ 450.389277][ T8694] fido_id[8694]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 453.736491][ T8737] loop2: detected capacity change from 0 to 2048 [ 454.005722][ T8737] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 454.483270][ T8759] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1111'. [ 454.574212][ T1110] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 454.870076][ T8762] loop5: detected capacity change from 0 to 128 [ 454.995714][ T1110] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 455.111866][ T1110] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 455.359347][ T8762] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 455.394390][ T1110] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 455.431307][ T8762] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.454311][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.462373][ T1110] usb 3-1: Product: syz [ 455.547898][ T1110] usb 3-1: Manufacturer: syz [ 455.552594][ T1110] usb 3-1: SerialNumber: syz [ 455.580487][ T8766] device syzkaller0 entered promiscuous mode [ 455.606773][ T8767] rtc_cmos 00:00: Alarms can be up to one day in the future [ 455.655524][ T8766] tipc: Enabled bearer , priority 0 [ 455.707392][ T8766] tipc: Resetting bearer [ 456.991776][ T4280] rtc_cmos 00:00: Alarms can be up to one day in the future [ 457.014610][ T4280] rtc_cmos 00:00: Alarms can be up to one day in the future [ 457.022348][ T4280] rtc_cmos 00:00: Alarms can be up to one day in the future [ 457.044634][ T4280] rtc_cmos 00:00: Alarms can be up to one day in the future [ 457.082498][ T4280] rtc rtc0: __rtc_set_alarm: err=-22 [ 457.281366][ T8765] tipc: Resetting bearer [ 457.353964][ T8765] tipc: Disabling bearer [ 457.431120][ T4280] tipc: Node number set to 1003908325 [ 457.815014][ T1110] cdc_ncm 3-1:1.0: SET_CRC_MODE failed [ 457.834333][ T1110] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed [ 457.876007][ T1110] cdc_ncm 3-1:1.0: bind() failure [ 458.436592][ T1110] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 458.511517][ T1110] cdc_ncm 3-1:1.1: bind() failure [ 458.567378][ T1110] usb 3-1: USB disconnect, device number 5 [ 460.715087][ T8802] loop2: detected capacity change from 0 to 128 [ 462.838260][ T8802] EXT4-fs: failed to create workqueue [ 462.843746][ T8802] EXT4-fs (loop2): mount failed [ 466.066163][ T8826] loop2: detected capacity change from 0 to 1024 [ 466.145180][ T8826] EXT4-fs (loop2): can't mount with both data=journal and delalloc [ 468.038079][ T8844] loop4: detected capacity change from 0 to 512 [ 468.125855][ T8846] FAULT_INJECTION: forcing a failure. [ 468.125855][ T8846] name failslab, interval 1, probability 0, space 0, times 0 [ 468.182444][ T8844] ------------[ cut here ]------------ [ 468.184982][ T8846] CPU: 1 PID: 8846 Comm: syz.3.1136 Not tainted syzkaller #0 [ 468.188892][ T8844] WARNING: CPU: 0 PID: 8844 at mm/page_alloc.c:5476 __alloc_pages+0x39f/0x480 [ 468.195446][ T8846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 468.195463][ T8846] Call Trace: [ 468.195471][ T8846] [ 468.195481][ T8846] dump_stack_lvl+0x188/0x250 [ 468.195514][ T8846] ? show_regs_print_info+0x20/0x20 [ 468.204700][ T8844] Modules linked in: [ 468.214448][ T8846] ? load_image+0x410/0x410 [ 468.214488][ T8846] ? __might_sleep+0xf0/0xf0 [ 468.218100][ T8844] [ 468.220763][ T8846] ? __lock_acquire+0x7b50/0x7b50 [ 468.220801][ T8846] should_fail+0x383/0x4b0 [ 468.220829][ T8846] should_failslab+0x5/0x20 [ 468.220850][ T8846] slab_pre_alloc_hook+0x51/0xc0 [ 468.220874][ T8846] kmem_cache_alloc_trace+0x47/0x290 [ 468.220895][ T8846] ? alloc_bprm+0x56/0x690 [ 468.220923][ T8846] alloc_bprm+0x56/0x690 [ 468.220947][ T8846] ? strncpy_from_user+0x1f4/0x350 [ 468.220972][ T8846] do_execveat_common+0x18d/0x6b0 [ 468.221000][ T8846] __x64_sys_execveat+0xc0/0xe0 [ 468.225774][ T8844] CPU: 0 PID: 8844 Comm: syz.4.1121 Not tainted syzkaller #0 [ 468.230981][ T8846] do_syscall_64+0x4c/0xa0 [ 468.231010][ T8846] ? clear_bhb_loop+0x30/0x80 [ 468.240083][ T8844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 468.244059][ T8846] ? clear_bhb_loop+0x30/0x80 [ 468.244093][ T8846] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 468.244118][ T8846] RIP: 0033:0x7f77e7e7f159 [ 468.246712][ T8844] RIP: 0010:__alloc_pages+0x39f/0x480 [ 468.251542][ T8846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.251569][ T8846] RSP: 002b:00007f77e60d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 468.251594][ T8846] RAX: ffffffffffffffda RBX: 00007f77e8106fa0 RCX: 00007f77e7e7f159 [ 468.256488][ T8844] Code: 31 ff e9 b1 fe ff ff e8 df 0a 0c 08 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 4f fd ff ff 4c 89 e7 e8 06 d4 09 00 e9 42 fd ff ff <0f> 0b 45 31 ff e9 ee fe ff ff 65 44 8b 2d e7 ab 4d 7e 41 83 fd 08 [ 468.260563][ T8846] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 468.260579][ T8846] RBP: 00007f77e7f1603b R08: 0000000000000800 R09: 0000000000000000 [ 468.260593][ T8846] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000 [ 468.265826][ T8844] RSP: 0018:ffffc900033ef3a0 EFLAGS: 00010246 [ 468.270930][ T8846] R13: 00007f77e8107038 R14: 00007f77e8106fa0 R15: 00007ffe389e05e8 [ 468.270963][ T8846] [ 468.774753][ T8844] [ 468.777169][ T8844] RAX: ffffc900033ef3e0 RBX: 1ffff9200067de78 RCX: 0000000000000000 [ 468.798813][ T8844] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc900033ef408 [ 468.823951][ T8844] RBP: ffffc900033ef498 R08: ffffc900033ef407 R09: ffffc900033ef3e0 [ 468.844219][ T8844] R10: dffffc0000000000 R11: fffff5200067de81 R12: dffffc0000000000 [ 468.884766][ T8844] R13: 0000000000000000 R14: 0000000000040c40 R15: 000000000000000c [ 468.892825][ T8844] FS: 00007f23973b06c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 468.935285][ T8844] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 468.942276][ T8844] CR2: 000000110c2f36d2 CR3: 000000001e7ba000 CR4: 00000000003506f0 [ 468.976851][ T8844] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 469.004331][ T8844] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 469.012402][ T8844] Call Trace: [ 469.034391][ T8844] [ 469.054086][ T8844] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 469.060242][ T8844] ? zone_statistics+0x170/0x170 [ 469.115757][ T8844] kmalloc_large_node+0x7d/0x1a0 [ 469.120793][ T8844] __kmalloc_node+0x21e/0x3a0 [ 469.134107][ T8844] ext4_expand_extra_isize_ea+0xce2/0x18c0 [ 469.140187][ T8844] __ext4_expand_extra_isize+0x301/0x3e0 [ 469.154144][ T8844] __ext4_mark_inode_dirty+0x444/0x6c0 [ 469.159689][ T8844] ext4_evict_inode+0xa55/0x1050 [ 470.009037][ T8844] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 470.018805][ T8844] ? do_raw_spin_unlock+0x11d/0x230 [ 470.044222][ T8844] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 470.050199][ T8844] evict+0x4b6/0x8b0 [ 470.084119][ T8844] ? proc_nr_inodes+0x320/0x320 [ 470.089067][ T8844] ? do_raw_spin_unlock+0x11d/0x230 [ 470.129706][ T8844] ? _raw_spin_unlock+0x24/0x40 [ 470.135552][ T8844] ? iput+0x6ea/0x880 [ 470.139599][ T8844] ext4_orphan_cleanup+0xad8/0x1320 [ 470.179755][ T8844] ? ext4_orphan_del+0xc90/0xc90 [ 470.189860][ T8844] ? errseq_check_and_advance+0x62/0x120 [ 471.574065][ T8844] ext4_fill_super+0x8c65/0x93f0 [ 471.579183][ T8844] ? format_decode+0x8b1/0x1330 [ 471.615461][ T8844] ? ext4_mount+0x40/0x40 [ 471.624329][ T8844] ? set_blocksize+0x1f1/0x360 [ 471.629288][ T8844] ? sb_set_blocksize+0xa5/0xe0 [ 471.654084][ T8844] mount_bdev+0x28a/0x3c0 [ 471.658507][ T8844] ? ext4_mount+0x40/0x40 [ 471.662896][ T8844] legacy_get_tree+0xe6/0x180 [ 471.714071][ T8844] ? ext4_errno_to_code+0x160/0x160 [ 471.719358][ T8844] vfs_get_tree+0x88/0x270 [ 471.723826][ T8844] do_new_mount+0x247/0xa40 [ 471.781781][ T8844] __se_sys_mount+0x2e3/0x3d0 [ 471.789933][ T8844] ? __x64_sys_mount+0xc0/0xc0 [ 471.800663][ T8844] ? lockdep_hardirqs_on+0x94/0x140 [ 471.812100][ T8844] ? __x64_sys_mount+0x1c/0xc0 [ 471.822867][ T8844] do_syscall_64+0x4c/0xa0 [ 471.833252][ T8844] ? clear_bhb_loop+0x30/0x80 [ 471.845442][ T8844] ? clear_bhb_loop+0x30/0x80 [ 471.852668][ T8844] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 471.867008][ T8844] RIP: 0033:0x7f23991593ca [ 471.877268][ T8844] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.916868][ T8844] RSP: 002b:00007f23973afe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 471.928066][ T8844] RAX: ffffffffffffffda RBX: 00007f23973afee0 RCX: 00007f23991593ca [ 471.939593][ T8844] RDX: 0000200000000000 RSI: 00002000000001c0 RDI: 00007f23973afea0 [ 471.950454][ T8844] RBP: 0000200000000000 R08: 00007f23973afee0 R09: 0000000000000500 [ 471.962272][ T8844] R10: 0000000000000500 R11: 0000000000000246 R12: 00002000000001c0 [ 471.972783][ T8844] R13: 00007f23973afea0 R14: 000000000000047a R15: 0000200000000380 [ 471.986643][ T8844] [ 471.989829][ T8844] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 471.997131][ T8844] CPU: 1 PID: 8844 Comm: syz.4.1121 Not tainted syzkaller #0 [ 472.004554][ T8844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 472.014641][ T8844] Call Trace: [ 472.017948][ T8844] [ 472.020941][ T8844] dump_stack_lvl+0x188/0x250 [ 472.025673][ T8844] ? show_regs_print_info+0x20/0x20 [ 472.031003][ T8844] ? load_image+0x410/0x410 [ 472.035564][ T8844] panic+0x2f8/0x850 [ 472.039506][ T8844] ? bpf_jit_dump+0xd0/0xd0 [ 472.044056][ T8844] ? __alloc_pages+0x39f/0x480 [ 472.048857][ T8844] __warn+0x248/0x2b0 [ 472.052874][ T8844] ? __alloc_pages+0x39f/0x480 [ 472.057665][ T8844] report_bug+0x1b9/0x2e0 [ 472.062031][ T8844] handle_bug+0x3a/0x70 [ 472.066233][ T8844] exc_invalid_op+0x16/0x40 [ 472.070773][ T8844] asm_exc_invalid_op+0x16/0x20 [ 472.075680][ T8844] RIP: 0010:__alloc_pages+0x39f/0x480 [ 472.081126][ T8844] Code: 31 ff e9 b1 fe ff ff e8 df 0a 0c 08 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 4f fd ff ff 4c 89 e7 e8 06 d4 09 00 e9 42 fd ff ff <0f> 0b 45 31 ff e9 ee fe ff ff 65 44 8b 2d e7 ab 4d 7e 41 83 fd 08 [ 472.100768][ T8844] RSP: 0018:ffffc900033ef3a0 EFLAGS: 00010246 [ 472.106874][ T8844] RAX: ffffc900033ef3e0 RBX: 1ffff9200067de78 RCX: 0000000000000000 [ 472.114882][ T8844] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc900033ef408 [ 472.122886][ T8844] RBP: ffffc900033ef498 R08: ffffc900033ef407 R09: ffffc900033ef3e0 [ 472.130889][ T8844] R10: dffffc0000000000 R11: fffff5200067de81 R12: dffffc0000000000 [ 472.138918][ T8844] R13: 0000000000000000 R14: 0000000000040c40 R15: 000000000000000c [ 472.147054][ T8844] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 472.153169][ T8844] ? zone_statistics+0x170/0x170 [ 472.158322][ T8844] kmalloc_large_node+0x7d/0x1a0 [ 472.163327][ T8844] __kmalloc_node+0x21e/0x3a0 [ 472.168050][ T8844] ext4_expand_extra_isize_ea+0xce2/0x18c0 [ 472.173940][ T8844] __ext4_expand_extra_isize+0x301/0x3e0 [ 472.179624][ T8844] __ext4_mark_inode_dirty+0x444/0x6c0 [ 472.185143][ T8844] ext4_evict_inode+0xa55/0x1050 [ 472.190132][ T8844] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 472.196064][ T8844] ? do_raw_spin_unlock+0x11d/0x230 [ 472.201314][ T8844] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 472.207258][ T8844] evict+0x4b6/0x8b0 [ 472.211199][ T8844] ? proc_nr_inodes+0x320/0x320 [ 472.216092][ T8844] ? do_raw_spin_unlock+0x11d/0x230 [ 472.221359][ T8844] ? _raw_spin_unlock+0x24/0x40 [ 472.226249][ T8844] ? iput+0x6ea/0x880 [ 472.230275][ T8844] ext4_orphan_cleanup+0xad8/0x1320 [ 472.235521][ T8844] ? ext4_orphan_del+0xc90/0xc90 [ 472.240990][ T8844] ? errseq_check_and_advance+0x62/0x120 [ 472.246765][ T8844] ext4_fill_super+0x8c65/0x93f0 [ 472.251761][ T8844] ? format_decode+0x8b1/0x1330 [ 472.256696][ T8844] ? ext4_mount+0x40/0x40 [ 472.261074][ T8844] ? set_blocksize+0x1f1/0x360 [ 472.265882][ T8844] ? sb_set_blocksize+0xa5/0xe0 [ 472.270780][ T8844] mount_bdev+0x28a/0x3c0 [ 472.275148][ T8844] ? ext4_mount+0x40/0x40 [ 472.279538][ T8844] legacy_get_tree+0xe6/0x180 [ 472.284375][ T8844] ? ext4_errno_to_code+0x160/0x160 [ 472.289623][ T8844] vfs_get_tree+0x88/0x270 [ 472.294092][ T8844] do_new_mount+0x247/0xa40 [ 472.298645][ T8844] __se_sys_mount+0x2e3/0x3d0 [ 472.303383][ T8844] ? __x64_sys_mount+0xc0/0xc0 [ 472.308186][ T8844] ? lockdep_hardirqs_on+0x94/0x140 [ 472.313418][ T8844] ? __x64_sys_mount+0x1c/0xc0 [ 472.318329][ T8844] do_syscall_64+0x4c/0xa0 [ 472.322794][ T8844] ? clear_bhb_loop+0x30/0x80 [ 472.327514][ T8844] ? clear_bhb_loop+0x30/0x80 [ 472.332231][ T8844] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 472.338158][ T8844] RIP: 0033:0x7f23991593ca [ 472.342600][ T8844] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.362240][ T8844] RSP: 002b:00007f23973afe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 472.370725][ T8844] RAX: ffffffffffffffda RBX: 00007f23973afee0 RCX: 00007f23991593ca [ 472.378727][ T8844] RDX: 0000200000000000 RSI: 00002000000001c0 RDI: 00007f23973afea0 [ 472.386824][ T8844] RBP: 0000200000000000 R08: 00007f23973afee0 R09: 0000000000000500 [ 472.394824][ T8844] R10: 0000000000000500 R11: 0000000000000246 R12: 00002000000001c0 [ 472.402840][ T8844] R13: 00007f23973afea0 R14: 000000000000047a R15: 0000200000000380 [ 472.410857][ T8844] [ 472.414225][ T8844] Kernel Offset: disabled [ 472.418966][ T8844] Rebooting in 86400 seconds..