last executing test programs: 6m45.709135733s ago: executing program 1 (id=71): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$eventfd(r0, &(0x7f0000000080)=0x4, 0x8) 6m45.54687848s ago: executing program 1 (id=74): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x26, 0x6a, 0x46, 0x3, 0x0, 0x85, 0x6, 0x21, 0xe6, 0x0, 0x81, 0x4c, 0x2, 0x3}, 0xe) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) 6m45.397837054s ago: executing program 1 (id=75): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x3, &(0x7f0000000140)=[r1, r1, r1]) setregid(0x0, r1) socket$inet(0x2, 0x2, 0x1) 6m45.259390386s ago: executing program 1 (id=78): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000080)=0x6ff) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 6m44.719179309s ago: executing program 1 (id=82): openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x40000, 0x194) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) 6m44.165527086s ago: executing program 1 (id=88): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) close(0x3) recvmsg$unix(r0, &(0x7f0000003e40)={0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000000500)=""/117, 0x75}], 0x1}, 0x10060) 6m43.800678239s ago: executing program 32 (id=88): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) close(0x3) recvmsg$unix(r0, &(0x7f0000003e40)={0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000000500)=""/117, 0x75}], 0x1}, 0x10060) 6m26.829080443s ago: executing program 2 (id=223): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd", 0x2}], 0x1}}], 0x1, 0x20008000) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}, {0x0}, {&(0x7f0000003880)=""/191, 0xbf}], 0x3}, 0x1}], 0x1, 0x140, 0x0) 6m26.651203463s ago: executing program 2 (id=225): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x4000, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x10, 0x4, 0x3, 0x2, 0xf6c, 0x68, 0x2f, 0x5, 0x33, 0x1, @remote, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x2c, 0xaf, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@broadcast, 0x7ff}, {@empty}, {@private=0xa010101, 0x3}, {@private=0xa010102, 0x5}]}]}}}}}, 0xfdef) 6m26.293865395s ago: executing program 2 (id=227): syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x10040, &(0x7f00000000c0)=ANY=[@ANYBLOB='heartbeat=none,journal_async_commit,journal_async_commit,coherency=full,coherency=full\x00'], 0x1, 0x4445, &(0x7f00000044c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, r2, r3) 6m25.062549317s ago: executing program 2 (id=237): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000180)='./file0\x00', 0x200010, &(0x7f00000008c0)=ANY=[], 0x1, 0xf43, &(0x7f0000002140)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 6m24.062999276s ago: executing program 2 (id=245): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100)={[{@mb_optimize_scan}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@errors_remount}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x1000, 0x2, 0x11, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r1, 0xc004ae0a, 0x0) 6m23.497584405s ago: executing program 2 (id=251): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(r0, 0x1269, 0x0) 6m23.116451172s ago: executing program 33 (id=251): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(r0, 0x1269, 0x0) 6m2.932831231s ago: executing program 0 (id=365): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'bridge_slave_1\x00', 0x0}) sendto$packet(r1, &(0x7f00000001c0)="0509ad1195bb41dba3b1256fb86feb7088a8", 0x12, 0x2000c000, &(0x7f0000000140)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 6m2.866322326s ago: executing program 0 (id=366): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000240)=[{0x48, 0x9, 0x7, 0xffbffff2}, {0x6, 0x6, 0xef}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000540)=0xfff) write$ppp(r0, &(0x7f00000001c0)="43f1", 0x2) 6m2.67243672s ago: executing program 0 (id=368): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x200000, &(0x7f0000000100), 0x1, 0x50d, &(0x7f0000001bc0)="$eJzs3c9vI1cdAPDveGPHyaZNWnoABO3SFha0WifxtlHVA5QTQqgSokeQtiHxRlHsOIqd0oQ9pGckTkhU4gRH/gDOPSFx5ILgxqUckPgRgRokDkYzHqdO1t5NyQ+n8ecjzc5787z+vrfZeS/+JvYLYGzdioj9iChFxNsRMZtfT/Ij3uge6eM+Oni4cnjwcCWJTuetfyRZe3ot+v5O6mb+nOWI+N63In6YPBq3tbu3sVyv17bz+ny7sTXf2t27u95YXqut1Tar1aXFpYXX7r1aPbexvtAo5aUvfvj7/a/9OO3WTH6lfxznqTv04lGc1EREfOcigo3AjXw8pVF3hP9LISKejYgXs/t/Nm5kX00A4DrrdGajM9tfP5IcrwIA10Uhy4ElhUqeC5iJQqFS6ebwnovpQr3Zat950NzZXO3myuaiWHiwXq8t5LnCuSgmaX0xK39cr56o34uIZyLiZ5NTWb2y0qyvjvIbHwAYYzdPrP//nuyu/wDANVcedQcAgEtn/QeA8WP9B4DxY/0HgPHTXf+nRt0NAOASef0PAOPH+g8AY+W7b76ZHp3D/POvV9/Z3dlovnN3tdbaqDR2Viorze2tylqzuZZ9Zk/jSc9Xbza3Fl+JnXfnvr7Vas+3dvfuN5o7m+372ed6368Vs0ftX8LIAIBhnnnhgz8l6Yr8+lR2RN9eDsWR9gy4aIVRdwAYmRuj7gAwMnb7gvF1htf4xYifShHAp9rvsj8HbNF7THnQG4Q6nU7noroFXLjbn5P/h3HVl//3W8AwZuT/YXzJ/8P46nSS027yH6d9IABwtcnxA0N+/v9sfv51/sOBH6yefMT7F9krAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNp6+/9W8r3AZ6JQqFQinoqIuSgmD9brtYWIeDoi/jhZnEzriyPuMwBwVoW/Jvn+X7dnX5451vT8zaNiKSJ+9Iu3fv7ucru9/YeIUvLPyd719vv59eonClw6rxEAAI/XW6ezc98L+Y8OHq70jsvsz9++GRHlbvzDg1IcHsWfiInsXI5iREz/K8nrXUlf7uIs9t+LiM8OGn8SM1kOpLvz6cn4aeynLjV+4Vj8QtbWPaf/Fp85h77AuPkgnX/eGHT/FeJWdh58/5ezGers8vkvfaqVw2wO/Dh+b/67MWT+u3XaGK/89tvd0tSjbe9FfH4iohf7sG/+6cVPhsR/+ZTx//yF518c1tb5ZcTtGBy/P9Z8u7E139rdu7veWF6rrdU2q9WlxaWF1+69Wp3PctTzw1eDv79+5+lhben4p4fELz9h/F8+5fh/9d+3v/+lx8T/6kuD4hfiucfET9fEr5wy/vL0b8rD2tL4q0PG/6Sv/51Txv/wL3uPbBsOAIxOa3dvY7ler20rKFz9Qvpf9gp0Y2DhG5cVqxSDm37yUveePtHU+97/E8YaNmOcR9YNuAqObvqI+M+oOwMAAAAAAAAAAAAAAAx0Ge9YGvUYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuL7+FwAA//87osfs") lsetxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v3={0x3000000, [{0x7fffffdf, 0x310}, {0x3, 0x2}], 0xee00}, 0x18, 0x1) timer_settime(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xee40, 0x0) 6m2.310083833s ago: executing program 0 (id=370): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 6m2.024011719s ago: executing program 0 (id=373): r0 = socket(0x1e, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) sendmmsg$sock(r0, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) 6m1.920088893s ago: executing program 0 (id=374): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) read$FUSE(r1, &(0x7f0000002d80)={0x2020}, 0x2020) 6m1.564179124s ago: executing program 34 (id=374): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) read$FUSE(r1, &(0x7f0000002d80)={0x2020}, 0x2020) 30.924578191s ago: executing program 5 (id=3004): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f00000004c0)={r2, 0x0, 0x4, 0x0, 0x2, [], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000240)={r2, 0xc89, 0xa, 0xfffffffa, 0x3, [], [0x5, 0x5, 0xfffffffd, 0x2], [0xe, 0x7, 0xffffffff, 0x8000], [0xfffffffffffffff8, 0xa679, 0x1, 0x7f]}) 30.751177352s ago: executing program 5 (id=3007): syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 30.607161235s ago: executing program 5 (id=3009): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000050) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x4ca1, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fstatfs(0xffffffffffffffff, 0x0) 29.553123491s ago: executing program 5 (id=3014): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380), 0x64, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 28.991905132s ago: executing program 5 (id=3017): mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x200c01, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r0, &(0x7f0000012300)={0x2020}, 0x2020) 27.658490573s ago: executing program 5 (id=3021): r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000180)={0x0, 0xe, 0x2, "c59f"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="403105000000002000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080)=0x2, 0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) 27.343992506s ago: executing program 35 (id=3021): r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000180)={0x0, 0xe, 0x2, "c59f"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="403105000000002000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080)=0x2, 0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) 2.159845026s ago: executing program 3 (id=3154): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000010000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) 2.028105737s ago: executing program 4 (id=3156): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r0, &(0x7f0000001e80)='b', 0x1) 1.953216515s ago: executing program 6 (id=3158): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 1.830739063s ago: executing program 4 (id=3159): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000007000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r0, r0, 0x2f}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82d", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.704398182s ago: executing program 6 (id=3161): syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)) 1.569100894s ago: executing program 3 (id=3163): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x1000}) 1.496173851s ago: executing program 6 (id=3164): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/mapper/control\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./dev/mapper/control\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.494839301s ago: executing program 4 (id=3165): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000f00)=@updpolicy={0xc4, 0x19, 0x1, 0x4, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@broadcast, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x0, 0x33}, {0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x4, 0x200000000000000}, 0x4}, [@mark={0xc, 0x15, {0x35075d, 0x8000}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x2, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x6, 0x0, 0x0, 0xa, 0x10, 0x96f23147092a967e}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) 1.321680862s ago: executing program 3 (id=3166): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000080)='\x00', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x6, 0x7, 0x9, 0x1, 0x9, 0x5, 0x1, 0x1, 0x0, 0x6, 0xbe, 0x8b, 0x4, 0x2}, 0xe) recvmmsg(r0, &(0x7f0000005480)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/5, 0x5}], 0x1, &(0x7f0000000340)=""/61, 0x3d}, 0xd}], 0x1, 0x10140, 0x0) 1.311314474s ago: executing program 4 (id=3168): r0 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0xd) fchdir(r1) newfstatat(0xffffffffffffff9c, &(0x7f0000009f00)='./tracing\x00', &(0x7f0000009f40), 0x0) 1.220220815s ago: executing program 4 (id=3169): syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000540)='./file1\x00', 0x1810002, &(0x7f000000c680)=ANY=[], 0x1, 0x1e2, &(0x7f0000000180)="$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") rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./bus\x00') mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) stat(0x0, 0x0) 1.085646486s ago: executing program 4 (id=3171): mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff00000007058102400000070502024000000705830308"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000004580)={0x34, &(0x7f0000004340)={0x60, 0x0, 0x8, "690250d13d0b47ed"}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) 774.504729ms ago: executing program 7 (id=3173): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000001000000080000000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb7040000040f0000850000000200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) 704.446856ms ago: executing program 7 (id=3174): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x43e41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000080)="2e9b5b0007e008900000dfb6c575b43f86dd6067", 0x14}, {&(0x7f00000001c0)="0000ff00060000f814a781b5addda147fb682a6bf9d594503d1009f074c35b61e65c73dab11b65a5923005721bdb241e8d85776cd4e532d4543f", 0x3a}], 0x2) 539.221154ms ago: executing program 7 (id=3175): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000e80)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) 535.246235ms ago: executing program 6 (id=3176): r0 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ff9000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r1) 407.360585ms ago: executing program 3 (id=3177): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a4000000010201040000000000000000020000030800044000000001080004400000ffff8000018014000180"], 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x34, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001100050000000001feffffff07000000", @ANYRES32=r1, @ANYBLOB="402000000000000014001a80100005800c"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) 406.100925ms ago: executing program 7 (id=3178): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x44) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x480) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 295.750281ms ago: executing program 6 (id=3179): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 239.404724ms ago: executing program 3 (id=3180): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b56b36e6c5be956e7791334289cd58966289930fe24f617b6c", 0x8d}, {&(0x7f0000000640)="146d7d1fe23f2a38218e567b79d540f9855f11c272611653b571eabff1ae51d8da60a58cf2d3edc698914eaa6fb32bf9bab8b33a", 0x34}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8911, &(0x7f00000000c0)={'dummy0\x00', @ifru_names='gretap0\x00'}) 145.476626ms ago: executing program 7 (id=3181): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000280)={[{0x2b, 'cpuset'}]}, 0x8) 134.583648ms ago: executing program 6 (id=3182): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 53.618078ms ago: executing program 3 (id=3183): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) creat(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x70820a2, 0x0, 0x1, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 0s ago: executing program 7 (id=3184): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, 0x2, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x8880) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000280060001"], 0x24}}, 0x44004) kernel console output (not intermixed with test programs): bhb_loop+0x40/0x90 [ 389.746637][T13077] ? clear_bhb_loop+0x40/0x90 [ 389.751326][T13077] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 389.757315][T13077] RIP: 0033:0x7ff48a39e159 [ 389.761729][T13077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.781341][T13077] RSP: 002b:00007ff48b1dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 389.789845][T13077] RAX: ffffffffffffffda RBX: 00007ff48a625fa0 RCX: 00007ff48a39e159 [ 389.797819][T13077] RDX: 0000000000000000 RSI: 0000000040305828 RDI: 0000000000000003 [ 389.805791][T13077] RBP: 00007ff48a43506b R08: 0000000000000000 R09: 0000000000000000 [ 389.813759][T13077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.821738][T13077] R13: 00007ff48a626038 R14: 00007ff48a625fa0 R15: 00007ffd88adfa38 [ 389.829731][T13077] [ 389.893104][T13082] loop3: detected capacity change from 0 to 256 [ 390.044275][T13086] syzkaller1: entered promiscuous mode [ 390.050088][T13086] syzkaller1: entered allmulticast mode [ 390.055976][T13082] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0ab4ecf1, utbl_chksum : 0xe619d30d) [ 390.162707][T13077] ERROR: Out of memory at tomoyo_realpath_from_path. [ 390.374316][T13092] Invalid argument reading file caps for ./file0 [ 390.482637][T13098] loop5: detected capacity change from 0 to 256 [ 390.577505][T13094] loop4: detected capacity change from 0 to 4096 [ 390.646095][T13094] ntfs3: loop4: ino=3, mi_enum_attr [ 391.300000][T13115] loop4: detected capacity change from 0 to 8192 [ 391.337285][T13115] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 391.366525][T13115] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 391.386187][T13115] REISERFS (device loop4): using ordered data mode [ 391.413360][T13115] reiserfs: using flush barriers [ 391.438807][T13115] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 391.492421][T13115] REISERFS (device loop4): checking transaction log (loop4) [ 391.678643][T13115] REISERFS (device loop4): Using tea hash to sort names [ 391.692017][T13129] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2466'. [ 391.701374][T13115] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 391.893751][T13115] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 392.770758][T13155] netlink: 'syz.6.2478': attribute type 4 has an invalid length. [ 392.830069][ T5818] lo speed is unknown, defaulting to 1000 [ 393.446642][T13175] loop3: detected capacity change from 0 to 64 [ 393.750659][T13161] loop6: detected capacity change from 0 to 32768 [ 393.761589][T13181] loop5: detected capacity change from 0 to 128 [ 393.783434][T13161] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.2481 (13161) [ 393.801332][T13181] EXT4-fs: Ignoring removed nobh option [ 393.855547][T13181] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 393.868461][T13161] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 393.903494][T13161] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 393.912282][T13161] BTRFS info (device loop6): setting nodatasum [ 393.965439][T13161] BTRFS info (device loop6): disabling free space tree [ 393.972378][T13161] BTRFS info (device loop6): metadata ratio 1 [ 394.012972][T13188] tun0: tun_chr_ioctl cmd 2147767511 [ 394.018472][T13161] BTRFS error (device loop6): cannot disable free space tree [ 394.038742][T13188] tun0: tun_chr_ioctl cmd 35108 [ 394.072180][T13161] BTRFS error (device loop6): open_ctree failed: -22 [ 394.136245][T13191] can0: slcan on ttyp26. [ 394.307330][ T6488] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 394.654035][T13190] can0 (unregistered): slcan off ttyp26. [ 394.902835][ T789] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 395.165541][ T789] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.186087][ T789] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 395.242278][ T789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.304323][ T789] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 395.345023][ T789] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 395.355253][T13232] loop5: detected capacity change from 0 to 7 [ 395.402754][ T789] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 395.410664][T13232] Dev loop5: unable to read RDB block 7 [ 395.422730][T13232] loop5: unable to read partition table [ 395.435332][ T789] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 395.461270][T13232] loop5: partition table beyond EOD, truncated [ 395.472727][ T789] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 395.480537][T13232] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 395.535333][ T789] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 395.576604][ T789] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 395.621301][ T789] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 395.669684][T13231] loop6: detected capacity change from 0 to 8192 [ 395.680172][ T789] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 395.716843][ T789] usb 5-1: USB disconnect, device number 31 [ 395.738704][T13231] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 395.792967][ T789] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 395.833010][T13231] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 395.876325][ T789] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 395.896564][T13231] REISERFS (device loop6): using ordered data mode [ 395.917711][T13231] reiserfs: using flush barriers [ 395.935038][ T789] keyspan 5-1:1.0: device disconnected [ 395.965395][T13231] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 396.017332][T13231] REISERFS (device loop6): checking transaction log (loop6) [ 396.307247][T13231] REISERFS (device loop6): Using tea hash to sort names [ 396.328488][T13257] binder: 13255:13257 ioctl c0306201 200000000080 returned -14 [ 396.336598][T13231] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 396.500688][T13231] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 2) not found (pos 4) [ 396.979546][T13277] input: syz0 as /devices/virtual/input/input52 [ 397.071347][T13275] loop6: detected capacity change from 0 to 4096 [ 397.130235][T13275] ntfs: (device loop6): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 397.167876][T13275] ntfs: (device loop6): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 397.211517][T13275] ntfs: (device loop6): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 397.237658][T13275] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 397.281942][T13275] ntfs: (device loop6): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 397.325510][T13275] ntfs: volume version 3.1. [ 397.338087][T13275] ntfs: (device loop6): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 397.357066][T13285] FAULT_INJECTION: forcing a failure. [ 397.357066][T13285] name failslab, interval 1, probability 0, space 0, times 0 [ 397.376030][T13275] ntfs: (device loop6): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 397.389863][T13285] CPU: 0 PID: 13285 Comm: syz.4.2523 Not tainted syzkaller #0 [ 397.397354][T13285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 397.407404][T13285] Call Trace: [ 397.410672][T13285] [ 397.413613][T13285] dump_stack_lvl+0x18c/0x250 [ 397.418301][T13285] ? show_regs_print_info+0x20/0x20 [ 397.423522][T13285] ? load_image+0x420/0x420 [ 397.428017][T13285] ? __lock_acquire+0x7d80/0x7d80 [ 397.433034][T13285] should_fail_ex+0x394/0x4c0 [ 397.437705][T13285] should_failslab+0x9/0x20 [ 397.442194][T13285] slab_pre_alloc_hook+0x59/0x300 [ 397.447249][T13285] ? __asan_memset+0x22/0x40 [ 397.451894][T13285] ? nfs_init_fs_context+0x58/0xf60 [ 397.457118][T13285] __kmem_cache_alloc_node+0x53/0x250 [ 397.462519][T13285] ? nfs_init_fs_context+0x58/0xf60 [ 397.467725][T13285] kmalloc_trace+0x2a/0xe0 [ 397.472138][T13285] nfs_init_fs_context+0x58/0xf60 [ 397.477160][T13285] alloc_fs_context+0x618/0x7a0 [ 397.482015][T13285] __se_sys_fsopen+0xa0/0x2c0 [ 397.486708][T13285] do_syscall_64+0x55/0xb0 [ 397.491126][T13285] ? clear_bhb_loop+0x40/0x90 [ 397.495811][T13285] ? clear_bhb_loop+0x40/0x90 [ 397.500522][T13285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 397.506423][T13285] RIP: 0033:0x7ff48a39e159 [ 397.510851][T13285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.530469][T13285] RSP: 002b:00007ff48b1dc028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 397.538908][T13285] RAX: ffffffffffffffda RBX: 00007ff48a625fa0 RCX: 00007ff48a39e159 [ 397.546879][T13285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 397.554871][T13285] RBP: 00007ff48a43506b R08: 0000000000000000 R09: 0000000000000000 [ 397.562855][T13285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.570854][T13285] R13: 00007ff48a626038 R14: 00007ff48a625fa0 R15: 00007ffd88adfa38 [ 397.578842][T13285] [ 397.595400][T13275] ntfs: (device loop6): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 397.619416][T13275] ntfs: (device loop6): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 397.640491][T13275] ntfs: (device loop6): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 397.999728][T13292] loop3: detected capacity change from 0 to 8192 [ 398.051119][T13292] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 398.100646][T13292] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 398.157014][T13292] REISERFS (device loop3): using ordered data mode [ 398.192645][T13292] reiserfs: using flush barriers [ 398.225359][T13292] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 398.287858][T13292] REISERFS (device loop3): checking transaction log (loop3) [ 398.463564][T13292] REISERFS (device loop3): Using tea hash to sort names [ 398.488323][T13292] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 398.657891][T13292] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 2) not found (pos 4) [ 398.858163][T13317] CacheFiles: Failed to register: -95 [ 399.209880][T13302] loop6: detected capacity change from 0 to 40427 [ 399.234483][T13328] loop5: detected capacity change from 0 to 512 [ 399.277631][T13302] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 399.284259][T13302] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 399.326053][T13302] F2FS-fs (loop6): invalid crc value [ 399.413255][T13328] FAT-fs (loop5): error, corrupted file size (i_pos 51, 512) [ 399.457003][T13328] FAT-fs (loop5): error, invalid FAT chain (i_pos 51, last_block 64) [ 399.594295][T13302] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 399.601490][T13302] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 399.749223][ T6958] syz-executor: attempt to access beyond end of device [ 399.749223][ T6958] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 399.807518][ T6958] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 400.214671][T13353] loop4: detected capacity change from 0 to 128 [ 400.239783][T13353] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 400.303014][T13353] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 400.451490][T13356] jffs2: notice: (13356) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 400.676505][T13364] loop4: detected capacity change from 0 to 4096 [ 400.752084][T13364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.811716][T13372] loop5: detected capacity change from 0 to 256 [ 400.863624][T13372] exfat: Deprecated parameter 'utf8' [ 400.912787][T13372] exfat: Deprecated parameter 'utf8' [ 401.001785][ T789] IPVS: starting estimator thread 0... [ 401.034467][T13372] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 401.056947][ T6054] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.112952][T13377] IPVS: using max 23 ests per chain, 55200 per kthread [ 401.242901][ T5820] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 401.432587][ T5820] usb 4-1: Using ep0 maxpacket: 16 [ 401.445464][ T5820] usb 4-1: too many endpoints for config 0 interface 0 altsetting 6: 254, using maximum allowed: 30 [ 401.456649][ T789] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 401.473057][ T5820] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 401.494783][ T5820] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 401.522531][ T5820] usb 4-1: config 0 interface 0 has no altsetting 0 [ 401.537042][ T5820] usb 4-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 401.556160][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.568339][T13385] loop4: detected capacity change from 0 to 32768 [ 401.583011][T13385] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.2564 (13385) [ 401.596871][ T5820] usb 4-1: config 0 descriptor?? [ 401.622799][T13385] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 401.634032][T13385] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 401.644648][T13385] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 401.655299][T13385] BTRFS info (device loop4): use zstd compression, level 3 [ 401.662920][T13385] BTRFS info (device loop4): using free space tree [ 401.673329][ T789] usb 7-1: unable to get BOS descriptor or descriptor too short [ 401.687871][ T789] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.699184][ T789] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 401.713453][ T789] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 401.723325][ T789] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.732011][ T789] usb 7-1: Product: syz [ 401.738155][ T789] usb 7-1: Manufacturer: syz [ 401.743678][ T789] usb 7-1: SerialNumber: syz [ 401.760117][ T789] usb 7-1: selecting invalid altsetting 1 [ 401.767767][ T789] usb 7-1: unit 6 not found! [ 401.800228][T13385] BTRFS info (device loop4): enabling ssd optimizations [ 401.827172][T13385] BTRFS info (device loop4): auto enabling async discard [ 401.932734][ T6054] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 402.051229][ T5820] input: HID 0925:8866 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0925:8866.0028/input/input53 [ 402.142382][ T5820] smartjoyplus 0003:0925:8866.0028: input,hidraw0: USB HID vd.8b Joystick [HID 0925:8866] on usb-dummy_hcd.3-1/input0 [ 402.201787][ T5820] smartjoyplus 0003:0925:8866.0028: no output reports found [ 402.299086][ T5820] usb 4-1: USB disconnect, device number 36 [ 402.357659][ T5772] udevd[5772]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [ 402.371738][T13404] fido_id[13404]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 402.615880][ T789] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 402.652392][ T789] usb 7-1: USB disconnect, device number 31 [ 402.727277][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 402.785179][T13414] loop4: detected capacity change from 0 to 256 [ 402.838444][T13414] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 402.864369][T13412] loop5: detected capacity change from 0 to 4096 [ 402.921262][T13412] __ntfs_error: 5 callbacks suppressed [ 402.921277][T13412] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 403.000014][T13412] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 403.044644][T13412] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 403.071673][T13412] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 403.093561][T13412] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 403.107545][T13412] ntfs: volume version 3.1. [ 403.142869][T13412] ntfs: (device loop5): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 403.167333][T13412] ntfs: (device loop5): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 403.211394][T13412] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 403.240708][T13412] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 403.264850][T13412] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 403.353289][ T5820] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 403.380770][T13420] loop6: detected capacity change from 0 to 2048 [ 403.446466][T13420] loop6: p1 p3 < > p4 < p5 > [ 403.451370][T13420] loop6: partition table partially beyond EOD, truncated [ 403.461632][T13420] loop6: p1 size 196608 extends beyond EOD, truncated [ 403.479759][T13420] loop6: p3 start 614273 is beyond EOD, truncated [ 403.489869][T13422] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 403.502789][T13420] loop6: p5 size 196608 extends beyond EOD, truncated [ 403.510584][ T8] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 403.544951][ T5820] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.572536][ T5820] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 403.600706][ T5820] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 403.631880][ T5820] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 403.692884][ T5820] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 403.719477][ T8] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 403.735669][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.744799][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.763764][ T8] usb 5-1: Product: syz [ 403.766976][ T5769] udevd[5769]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 403.775700][ T8] usb 5-1: Manufacturer: syz [ 403.781921][ T6118] udevd[6118]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 403.792761][ T8] usb 5-1: SerialNumber: syz [ 403.798288][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 404.058540][T13432] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2578'. [ 404.067938][T13432] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2578'. [ 404.199373][ T5820] gud: probe of 4-1:1.0 failed with error -71 [ 404.431772][ T5820] usb 4-1: USB disconnect, device number 37 [ 404.573766][T13444] bridge1: entered promiscuous mode [ 404.589264][T13444] bridge1: entered allmulticast mode [ 404.608882][T13444] team0: Port device bridge1 added [ 404.632099][T13447] bridge0: port 3(team0) entered blocking state [ 404.640701][T13446] loop5: detected capacity change from 0 to 64 [ 404.647352][T13447] bridge0: port 3(team0) entered disabled state [ 404.655502][ T8] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 404.676568][T13447] team0: entered allmulticast mode [ 404.681902][ T8] usb 5-1: MIDIStreaming interface descriptor not found [ 404.711015][T13447] team_slave_0: entered allmulticast mode [ 404.759795][T13447] team_slave_1: entered allmulticast mode [ 404.800267][T13446] \: attempt to access beyond end of device [ 404.800267][T13446] loop5: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 404.820025][T13447] team0: entered promiscuous mode [ 404.828067][T13446] buffer_io_error: 138 callbacks suppressed [ 404.828083][T13446] Buffer I/O error on dev loop5, logical block 134217734, lost async page write [ 404.843644][T13447] team_slave_0: entered promiscuous mode [ 404.871248][T13447] team_slave_1: entered promiscuous mode [ 404.898188][T13447] bridge0: port 3(team0) entered blocking state [ 404.905140][T13447] bridge0: port 3(team0) entered forwarding state [ 404.947591][ T5820] usb 5-1: USB disconnect, device number 32 [ 405.148829][T13452] loop3: detected capacity change from 0 to 256 [ 405.185917][T13454] loop6: detected capacity change from 0 to 1024 [ 405.213565][T13454] EXT4-fs: Ignoring removed bh option [ 405.229582][T13454] EXT4-fs (loop6): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 405.312049][T13454] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.332407][T13458] macsec0: entered promiscuous mode [ 405.344100][T13458] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2589'. [ 405.375635][T13458] veth1_macvtap: left promiscuous mode [ 405.448535][ T6958] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.476583][T13458] macsec0 (unregistering): left promiscuous mode [ 406.022556][ T5820] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 406.072695][ T5818] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 406.100497][T13477] loop3: detected capacity change from 0 to 32768 [ 406.117579][T13477] JBD2: Ignoring recovery information on journal [ 406.151740][T13477] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 406.203411][T13477] (syz.3.2604,13477,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1 [ 406.223998][ T5820] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.237781][T13477] (syz.3.2604,13477,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1 [ 406.254917][ T5820] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.265044][ T5820] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 406.288373][ T5820] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 406.302825][ T5818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.322742][ T5820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.331376][ T5818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.367909][ T5820] usb 6-1: config 0 descriptor?? [ 406.373740][ T5818] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 406.403054][ T5779] ocfs2: Unmounting device (7,3) on (node local) [ 406.422636][ T5818] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 406.452125][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.501011][ T5818] usb 5-1: config 0 descriptor?? [ 406.545184][T13485] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 406.687145][T13487] loop6: detected capacity change from 0 to 164 [ 406.722692][T13487] rock: directory entry would overflow storage [ 406.749355][T13487] rock: sig=0x66, size=4, remaining=3 [ 406.810724][ T5820] plantronics 0003:047F:FFFF.0029: unknown main item tag 0xd [ 406.845331][ T5820] plantronics 0003:047F:FFFF.0029: No inputs registered, leaving [ 406.917302][ T5820] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 406.947417][ T5818] plantronics 0003:047F:FFFF.002A: No inputs registered, leaving [ 407.003138][ T5818] plantronics 0003:047F:FFFF.002A: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 407.210387][ T5818] usb 6-1: USB disconnect, device number 25 [ 407.292814][ T5820] usb 5-1: USB disconnect, device number 33 [ 407.413193][T13504] loop3: detected capacity change from 0 to 256 [ 407.428150][T13504] FAT-fs (loop3): Unrecognized mount option "non" or missing value [ 407.467573][T13504] device-mapper: ioctl: Invalid ioctl structure: uuid pr>wC"devtmpfs, name , dev f3 [ 407.985675][T13520] loop4: detected capacity change from 0 to 2048 [ 408.032583][T13520] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 408.055326][T13524] syzkaller1: entered promiscuous mode [ 408.067024][T13524] syzkaller1: entered allmulticast mode [ 408.084979][T13520] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 408.196624][ T8] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 408.394841][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.416228][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.445157][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 408.467714][T13532] loop6: detected capacity change from 0 to 1024 [ 408.485461][T13532] EXT4-fs: Ignoring removed mblk_io_submit option [ 408.492060][ T8] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 408.511712][T13532] EXT4-fs: inline encryption not supported [ 408.517765][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.536950][T13532] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 408.555421][ T8] usb 6-1: config 0 descriptor?? [ 408.618489][T13532] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 2: comm syz.6.2621: lblock 2 mapped to illegal pblock 2 (length 1) [ 408.643076][ T5818] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 408.673168][T13532] EXT4-fs (loop6): Remounting filesystem read-only [ 408.692639][T13532] __quota_error: 4 callbacks suppressed [ 408.692655][T13532] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 408.716914][T13532] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 408.742743][T13532] EXT4-fs (loop6): 1 orphan inode deleted [ 408.759447][T13532] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.832698][ T5818] usb 4-1: Using ep0 maxpacket: 8 [ 408.849929][ T5818] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 408.868620][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.897478][ T5818] usb 4-1: Product: syz [ 408.901679][ T5818] usb 4-1: Manufacturer: syz [ 408.921855][ T6958] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.931342][ T5818] usb 4-1: SerialNumber: syz [ 408.947439][ T5818] usb 4-1: config 0 descriptor?? [ 408.966649][ T5818] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 408.989511][ T8] plantronics 0003:047F:FFFF.002B: No inputs registered, leaving [ 409.038518][ T8] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 409.335293][ T8] usb 6-1: USB disconnect, device number 26 [ 409.401605][T13549] input: syz0 as /devices/virtual/input/input55 [ 409.615380][T13552] loop6: detected capacity change from 0 to 256 [ 409.633307][T13552] exfat: Deprecated parameter 'utf8' [ 409.638775][T13552] exfat: Deprecated parameter 'namecase' [ 409.672649][T13552] exfat: Deprecated parameter 'namecase' [ 409.678415][T13552] exfat: Deprecated parameter 'utf8' [ 409.738890][T13552] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 409.990301][ T5818] usb 4-1: USB disconnect, device number 38 [ 410.479993][T13576] maxtcpc: probe of 0-0022 failed with error -5 [ 410.500827][T13576] i2c i2c-0: new_device: Instantiated device maxtcpc at 0x22 [ 410.908926][T13570] loop6: detected capacity change from 0 to 32768 [ 410.935099][T13570] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 scanned by syz.6.2635 (13570) [ 411.020243][T13570] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 411.032620][ T5818] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 411.080070][T13570] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 411.095001][T13570] BTRFS info (device loop6): using free space tree [ 411.190813][T13593] loop3: detected capacity change from 0 to 4096 [ 411.242785][ T5818] usb 6-1: Using ep0 maxpacket: 32 [ 411.251047][ T5818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.272150][ T5818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.290658][ T5818] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 411.309221][ T5818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.328726][ T5818] usb 6-1: config 0 descriptor?? [ 411.340589][T13570] BTRFS info (device loop6): enabling ssd optimizations [ 411.349586][T13570] BTRFS info (device loop6): auto enabling async discard [ 411.384327][T13593] ntfs: volume version 3.1. [ 411.862995][ T5818] savu 0003:1E7D:2D5A.002C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 411.951174][T13613] overlayfs: conflicting lowerdir path [ 412.166337][ T8] usb 6-1: USB disconnect, device number 27 [ 412.249586][T13626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2641'. [ 412.298922][ T6958] BTRFS info (device loop6): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 412.522216][T13631] Line length is too long: Should be less than 4094 [ 413.252622][ T8] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 413.434691][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.458466][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.488787][ T8] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 413.530058][ T8] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 413.542389][T13643] loop4: detected capacity change from 0 to 40427 [ 413.561796][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.585740][ T8] usb 7-1: config 0 descriptor?? [ 413.593225][T13643] F2FS-fs (loop4): invalid crc value [ 413.621835][T13643] F2FS-fs (loop4): Found nat_bits in checkpoint [ 413.858281][T13643] F2FS-fs (loop4): Start checkpoint disabled! [ 413.940983][T13643] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 414.074593][ T8] plantronics 0003:047F:FFFF.002D: No inputs registered, leaving [ 414.090706][T13680] loop3: detected capacity change from 0 to 1024 [ 414.122015][ T8] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 414.147116][T13643] syz.4.2647: attempt to access beyond end of device [ 414.147116][T13643] loop4: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 414.270464][T13680] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 414.354678][T13680] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: comm syz.3.2655: lblock 0 mapped to illegal pblock 0 (length 1) [ 414.412050][T13680] EXT4-fs (loop3): Remounting filesystem read-only [ 414.435424][ T8] usb 7-1: USB disconnect, device number 32 [ 414.504388][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 414.522072][ T9762] kworker/u4:26: attempt to access beyond end of device [ 414.522072][ T9762] loop4: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 414.584145][ T9762] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 414.591108][ T9762] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 414.601434][ T9762] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 414.609629][ T9762] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 415.461193][T13726] loop4: detected capacity change from 0 to 2048 [ 415.530958][T13726] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 415.561284][T13726] UDF-fs: Scanning with blocksize 512 failed [ 415.616784][T13726] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 415.819614][T13739] loop6: detected capacity change from 0 to 1024 [ 416.062956][T13739] hfsplus: catalog searching failed [ 416.200287][T10440] hfsplus: b-tree write err: -5, ino 3 [ 416.360899][T13755] FAULT_INJECTION: forcing a failure. [ 416.360899][T13755] name failslab, interval 1, probability 0, space 0, times 0 [ 416.419701][T13755] CPU: 0 PID: 13755 Comm: syz.4.2673 Not tainted syzkaller #0 [ 416.427224][T13755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 416.437308][T13755] Call Trace: [ 416.440614][T13755] [ 416.443572][T13755] dump_stack_lvl+0x18c/0x250 [ 416.448295][T13755] ? show_regs_print_info+0x20/0x20 [ 416.453533][T13755] ? load_image+0x420/0x420 [ 416.458079][T13755] ? __might_sleep+0xe0/0xe0 [ 416.462704][T13755] ? __lock_acquire+0x7d80/0x7d80 [ 416.467825][T13755] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 416.473881][T13755] should_fail_ex+0x394/0x4c0 [ 416.478598][T13755] should_failslab+0x9/0x20 [ 416.483200][T13755] slab_pre_alloc_hook+0x59/0x300 [ 416.488273][T13755] kmem_cache_alloc_lru+0x4d/0x2b0 [ 416.493431][T13755] ? __d_alloc+0x31/0x710 [ 416.497804][T13755] __d_alloc+0x31/0x710 [ 416.501997][T13755] ? alloc_fd+0x590/0x640 [ 416.506383][T13755] d_alloc_pseudo+0x1d/0x70 [ 416.511013][T13755] alloc_file_pseudo+0xe4/0x210 [ 416.515933][T13755] ? fput+0x1a0/0x1a0 [ 416.519958][T13755] ? alloc_fd+0x590/0x640 [ 416.524332][T13755] sock_alloc_file+0xb7/0x280 [ 416.529112][T13755] __sys_socket+0x140/0x1b0 [ 416.533651][T13755] __x64_sys_socket+0x7a/0x90 [ 416.538365][T13755] do_syscall_64+0x55/0xb0 [ 416.542818][T13755] ? clear_bhb_loop+0x40/0x90 [ 416.547531][T13755] ? clear_bhb_loop+0x40/0x90 [ 416.552253][T13755] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 416.558228][T13755] RIP: 0033:0x7ff48a39e159 [ 416.562682][T13755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.582403][T13755] RSP: 002b:00007ff48b1dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 416.590847][T13755] RAX: ffffffffffffffda RBX: 00007ff48a625fa0 RCX: 00007ff48a39e159 [ 416.598851][T13755] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 000000000000001d [ 416.606855][T13755] RBP: 00007ff48a43506b R08: 0000000000000000 R09: 0000000000000000 [ 416.614853][T13755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.622869][T13755] R13: 00007ff48a626038 R14: 00007ff48a625fa0 R15: 00007ffd88adfa38 [ 416.630890][T13755] [ 416.689429][T13769] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2672'. [ 418.572567][ T5818] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 418.797133][ T5818] usb 6-1: Using ep0 maxpacket: 8 [ 418.828145][ T5818] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 418.852924][ T5818] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 418.882511][ T5818] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 418.904934][ T5818] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 418.922547][ T5818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.944778][ T5818] usb 6-1: Product: syz [ 418.948999][ T5818] usb 6-1: Manufacturer: syz [ 418.974865][ T5818] usb 6-1: SerialNumber: syz [ 419.106134][ T8] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 419.324939][ T8] usb 5-1: unable to get BOS descriptor or descriptor too short [ 419.354316][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 419.400450][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 419.452988][ T8] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 419.493494][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.501611][ T8] usb 5-1: Product: syz [ 419.522640][ T8] usb 5-1: Manufacturer: syz [ 419.537620][ T8] usb 5-1: SerialNumber: syz [ 419.602917][ T8] usb 5-1: selecting invalid altsetting 1 [ 419.619718][T13867] device-mapper: ioctl: Invalid target message parameters. [ 419.641796][ T5818] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 419.671020][ T5818] usb 6-1: clock source 0 is not valid, cannot use [ 419.700891][T13845] loop6: detected capacity change from 0 to 32768 [ 419.789493][T13845] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 419.893323][ T5818] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 419.955805][ T5818] usb 6-1: USB disconnect, device number 28 [ 419.986219][T13845] XFS (loop6): Ending clean mount [ 420.018231][ T8303] udevd[8303]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 420.058686][T13845] XFS (loop6): Quotacheck needed: Please wait. [ 420.078867][ T8] usb 5-1: unit 6 not found! [ 420.310267][T13845] XFS (loop6): Quotacheck: Done. [ 421.354253][T13895] loop3: detected capacity change from 0 to 131072 [ 421.382940][T13895] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 421.391112][T13895] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 421.404806][T13895] F2FS-fs (loop3): invalid crc value [ 421.430271][T13895] F2FS-fs (loop3): Found nat_bits in checkpoint [ 421.496642][ T8] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 421.511268][T13895] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 421.519064][T13895] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 421.549834][ T8] usb 5-1: USB disconnect, device number 34 [ 421.715758][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 421.766343][ T6958] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 422.873080][T13942] loop5: detected capacity change from 0 to 32768 [ 422.903639][T13942] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop5 scanned by syz.5.2709 (13942) [ 422.982822][T13942] BTRFS info (device loop5): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 423.038699][T13942] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 423.063102][T13942] BTRFS info (device loop5): using free space tree [ 423.412538][T13942] BTRFS info (device loop5): enabling ssd optimizations [ 423.419535][T13942] BTRFS info (device loop5): auto enabling async discard [ 423.535799][T13988] loop4: detected capacity change from 0 to 1024 [ 423.684814][T13988] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 423.857266][ T27] audit: type=1800 audit(35340218.582:237): pid=13988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2715" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 423.883388][T13999] bonding: no command found in bonding_masters - use +ifname or -ifname [ 423.900442][ T27] audit: type=1800 audit(35340218.602:238): pid=13988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2715" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 424.026959][ T9762] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #15: comm kworker/u4:26: lblock 0 mapped to illegal pblock 0 (length 1) [ 424.085726][ T6488] BTRFS info (device loop5): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 424.109496][ T9762] EXT4-fs (loop4): Remounting filesystem read-only [ 424.130564][ T6054] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 424.449161][T14019] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2718'. [ 424.503968][T14019] netlink: 1700 bytes leftover after parsing attributes in process `syz.4.2718'. [ 425.344712][T14025] loop3: detected capacity change from 0 to 131072 [ 425.363307][T14025] F2FS-fs (loop3): invalid crc value [ 425.375496][T14025] F2FS-fs (loop3): Found nat_bits in checkpoint [ 425.504089][T14025] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 425.624625][T14047] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 426.185651][T14066] loop6: detected capacity change from 0 to 128 [ 426.251055][T14069] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 426.757296][T14085] loop5: detected capacity change from 0 to 1024 [ 427.060026][ T12] hfsplus: b-tree write err: -5, ino 25 [ 427.090045][ T12] hfsplus: b-tree write err: -5, ino 4 [ 427.098894][ T12] hfsplus: b-tree write err: -5, ino 2 [ 427.111261][ T12] hfsplus: b-tree write err: -5, ino 26 [ 427.292565][ T5818] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 427.397447][T14104] FAULT_INJECTION: forcing a failure. [ 427.397447][T14104] name failslab, interval 1, probability 0, space 0, times 0 [ 427.463334][T14104] CPU: 0 PID: 14104 Comm: syz.5.2739 Not tainted syzkaller #0 [ 427.470860][T14104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 427.480952][T14104] Call Trace: [ 427.484262][T14104] [ 427.487247][T14104] dump_stack_lvl+0x18c/0x250 [ 427.492012][T14104] ? show_regs_print_info+0x20/0x20 [ 427.497258][T14104] ? load_image+0x420/0x420 [ 427.501809][T14104] ? __might_sleep+0xe0/0xe0 [ 427.506446][T14104] ? __lock_acquire+0x7d80/0x7d80 [ 427.511521][T14104] should_fail_ex+0x394/0x4c0 [ 427.516249][T14104] should_failslab+0x9/0x20 [ 427.520801][T14104] slab_pre_alloc_hook+0x59/0x300 [ 427.525867][T14104] ? call_usermodehelper_setup+0x8e/0x260 [ 427.531599][T14104] __kmem_cache_alloc_node+0x53/0x250 [ 427.537013][T14104] ? call_usermodehelper_setup+0x8e/0x260 [ 427.542734][T14104] kmalloc_trace+0x2a/0xe0 [ 427.547158][T14104] call_usermodehelper_setup+0x8e/0x260 [ 427.552706][T14104] ? __request_module+0x600/0x600 [ 427.557738][T14104] __request_module+0x3bb/0x600 [ 427.562594][T14104] ? module_enforce_rwx_sections+0x150/0x150 [ 427.568596][T14104] ? rcu_read_unlock+0x8c/0xa0 [ 427.573422][T14104] ? rcu_read_unlock+0x8c/0xa0 [ 427.578202][T14104] inet_create+0x411/0xfe0 [ 427.582619][T14104] ? inet_create+0x9d/0xfe0 [ 427.587123][T14104] __sock_create+0x49e/0x940 [ 427.591722][T14104] __sys_socket+0xd7/0x1b0 [ 427.596146][T14104] __x64_sys_socket+0x7a/0x90 [ 427.600860][T14104] do_syscall_64+0x55/0xb0 [ 427.605284][T14104] ? clear_bhb_loop+0x40/0x90 [ 427.609972][T14104] ? clear_bhb_loop+0x40/0x90 [ 427.614660][T14104] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 427.620577][T14104] RIP: 0033:0x7f080679e159 [ 427.625007][T14104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.644638][T14104] RSP: 002b:00007f08076cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 427.653060][T14104] RAX: ffffffffffffffda RBX: 00007f0806a25fa0 RCX: 00007f080679e159 [ 427.661031][T14104] RDX: 0000000000000008 RSI: 0000000000000004 RDI: 0000000000000002 [ 427.669024][T14104] RBP: 00007f080683506b R08: 0000000000000000 R09: 0000000000000000 [ 427.676995][T14104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.684965][T14104] R13: 00007f0806a26038 R14: 00007f0806a25fa0 R15: 00007ffdf7ad3ef8 [ 427.692953][T14104] [ 427.852759][ T5818] usb 7-1: Using ep0 maxpacket: 32 [ 427.953019][ T5818] usb 7-1: unable to get BOS descriptor or descriptor too short [ 427.976002][ T5818] usb 7-1: config 1 has an invalid interface number: 21 but max is 0 [ 427.984464][ T5818] usb 7-1: config 1 has no interface number 0 [ 427.990604][ T5818] usb 7-1: config 1 interface 21 altsetting 14 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 428.022215][ T5818] usb 7-1: config 1 interface 21 has no altsetting 0 [ 428.035754][ T5818] usb 7-1: New USB device found, idVendor=0424, idProduct=9905, bcdDevice=17.da [ 428.045246][ T5818] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.053459][ T5818] usb 7-1: Product: syz [ 428.062263][ T5818] usb 7-1: Manufacturer: syz [ 428.072745][ T5818] usb 7-1: SerialNumber: syz [ 428.344234][ T5818] smsc95xx v2.0.0 [ 428.361832][ T5818] smsc95xx 7-1:1.21 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 428.409738][T14114] loop3: detected capacity change from 0 to 32768 [ 428.416820][ T5818] smsc95xx: probe of 7-1:1.21 failed with error -22 [ 428.452959][ T5818] usb 7-1: USB disconnect, device number 33 [ 428.527894][T14114] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 428.711781][T14114] XFS (loop3): Ending clean mount [ 428.756641][T14114] XFS (loop3): Quotacheck needed: Please wait. [ 428.979439][T14155] loop5: detected capacity change from 0 to 1024 [ 429.007760][T14155] EXT4-fs: Ignoring removed oldalloc option [ 429.016857][T14114] XFS (loop3): Quotacheck: Done. [ 429.054649][T14155] EXT4-fs: Ignoring removed orlov option [ 429.112612][ T5818] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 429.134366][T14155] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 ro without journal. Quota mode: writeback. [ 429.258730][T14155] EXT4-fs error (device loop5): ext4_readdir:263: inode #12: block 80: comm syz.5.2745: path /: bad entry in directory: rec_len is smaller than minimal - offset=296, inode=0, rec_len=0, size=1024 fake=0 [ 429.342622][ T5818] usb 5-1: Using ep0 maxpacket: 8 [ 429.364456][ T5818] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 429.390902][ T5818] usb 5-1: config 179 has no interface number 0 [ 429.398205][ T5779] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 429.428476][ T5818] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 429.470191][ T5818] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 429.502111][ T5818] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 429.546592][ T5818] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 429.568989][ T6488] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /638/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 429.602272][ T5818] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 429.629651][T14174] loop6: detected capacity change from 0 to 512 [ 429.636110][ T5818] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 429.646886][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.657619][ T6488] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /638/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 429.682284][T14151] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 429.713643][T14174] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.894009][ T6488] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 430.076357][ T6958] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.112092][ T5818] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input56 [ 430.408467][ T8] usb 5-1: USB disconnect, device number 35 [ 430.408538][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 430.408583][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 430.659791][T14202] FAULT_INJECTION: forcing a failure. [ 430.659791][T14202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.693331][T14202] CPU: 0 PID: 14202 Comm: syz.5.2753 Not tainted syzkaller #0 [ 430.701335][T14202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 430.711432][T14202] Call Trace: [ 430.714740][T14202] [ 430.717700][T14202] dump_stack_lvl+0x18c/0x250 [ 430.722456][T14202] ? show_regs_print_info+0x20/0x20 [ 430.727712][T14202] ? load_image+0x420/0x420 [ 430.732262][T14202] ? __lock_acquire+0x7d80/0x7d80 [ 430.737326][T14202] ? do_futex+0x2ff/0x3e0 [ 430.741699][T14202] should_fail_ex+0x394/0x4c0 [ 430.746423][T14202] strncpy_from_user+0x36/0x2f0 [ 430.751317][T14202] __se_sys_add_key+0xdc/0x410 [ 430.756122][T14202] ? __x64_sys_add_key+0xc0/0xc0 [ 430.761105][T14202] ? lockdep_hardirqs_on+0x98/0x150 [ 430.766324][T14202] ? __x64_sys_add_key+0x20/0xc0 [ 430.771279][T14202] do_syscall_64+0x55/0xb0 [ 430.775708][T14202] ? clear_bhb_loop+0x40/0x90 [ 430.780392][T14202] ? clear_bhb_loop+0x40/0x90 [ 430.785090][T14202] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 430.790995][T14202] RIP: 0033:0x7f080679e159 [ 430.795413][T14202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.815048][T14202] RSP: 002b:00007f08076cc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 430.823478][T14202] RAX: ffffffffffffffda RBX: 00007f0806a25fa0 RCX: 00007f080679e159 [ 430.831479][T14202] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 430.839462][T14202] RBP: 00007f080683506b R08: ffffffffffffffff R09: 0000000000000000 [ 430.847455][T14202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.855438][T14202] R13: 00007f0806a26038 R14: 00007f0806a25fa0 R15: 00007ffdf7ad3ef8 [ 430.863428][T14202] [ 431.024211][T14197] loop6: detected capacity change from 0 to 32768 [ 431.198794][T14197] jfs_unlink: dtDelete returned -116 [ 431.244081][T14197] jfs_unlink: dtDelete returned -116 [ 431.378732][T14213] loop4: detected capacity change from 0 to 512 [ 431.507032][T14216] sctp: [Deprecated]: syz.3.2748 (pid 14216) Use of struct sctp_assoc_value in delayed_ack socket option. [ 431.507032][T14216] Use struct sctp_sack_info instead [ 431.622800][ T5820] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 431.839552][ T5820] usb 6-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 431.862629][ T5820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.996030][ T5818] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 432.165564][T14239] syzkaller1: entered promiscuous mode [ 432.171433][T14239] syzkaller1: entered allmulticast mode [ 432.214603][ T5818] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 432.245807][ T5818] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 432.256012][ T5818] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 432.271660][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.342600][ T8] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 432.523066][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 432.540689][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 432.572495][ T8] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 432.610832][ T5818] usb 4-1: USB disconnect, device number 39 [ 432.629962][ T8] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 432.651443][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.717031][ T8] usb 7-1: config 0 descriptor?? [ 432.890460][ T5820] usb 6-1: NFC: Unable to get FW version [ 432.902163][ T5820] pn533_usb: probe of 6-1:1.0 failed with error -71 [ 432.959172][ T5820] usb 6-1: USB disconnect, device number 29 [ 433.169876][ T8] lenovo 0003:17EF:6047.002E: unknown main item tag 0x0 [ 433.193263][ T8] lenovo 0003:17EF:6047.002E: unknown main item tag 0x0 [ 433.220803][ T8] lenovo 0003:17EF:6047.002E: unknown main item tag 0x0 [ 433.241066][ T8] lenovo 0003:17EF:6047.002E: unknown main item tag 0x0 [ 433.264083][ T8] lenovo 0003:17EF:6047.002E: unknown main item tag 0x0 [ 433.287413][ T8] lenovo 0003:17EF:6047.002E: unknown main item tag 0x0 [ 433.312580][ T8] lenovo 0003:17EF:6047.002E: unknown main item tag 0x0 [ 433.332749][ T8] lenovo 0003:17EF:6047.002E: unknown main item tag 0x0 [ 433.363022][ T8] lenovo 0003:17EF:6047.002E: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.6-1/input0 [ 433.401001][ T8] lenovo 0003:17EF:6047.002E: Failed to switch F7/9/11 mode: -71 [ 433.422825][ T8] lenovo 0003:17EF:6047.002E: Failed to switch middle button: -71 [ 433.471683][ T8] lenovo 0003:17EF:6047.002E: Fn-lock setting failed: -71 [ 433.493033][ T8] lenovo 0003:17EF:6047.002E: Sensitivity setting failed: -71 [ 433.528347][T14266] loop4: detected capacity change from 0 to 32768 [ 433.552379][ T8] usb 7-1: USB disconnect, device number 34 [ 433.630941][T14276] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2769'. [ 433.640544][T14266] JBD2: Ignoring recovery information on journal [ 433.727140][T14266] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 434.057267][ T27] audit: type=1800 audit(35340228.782:239): pid=14285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2772" name="addr_adrfam" dev="configfs" ino=36609 res=0 errno=0 [ 434.327327][ T6054] ocfs2: Unmounting device (7,4) on (node local) [ 434.837476][T14311] loop4: detected capacity change from 0 to 128 [ 434.867221][T14311] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 434.923612][T14311] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 435.226346][T14325] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 435.295644][ T6054] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 435.686423][T14338] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 435.950664][T14345] loop6: detected capacity change from 0 to 256 [ 435.983013][T14345] exfat: Deprecated parameter 'utf8' [ 436.053632][T14345] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 436.252376][T14332] loop4: detected capacity change from 0 to 32768 [ 436.280751][T14350] loop5: detected capacity change from 0 to 256 [ 436.299015][T14332] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.2791 (14332) [ 436.331884][T14332] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 436.366624][T14332] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 436.416344][T14332] BTRFS info (device loop4): using free space tree [ 436.686980][T14332] BTRFS info (device loop4): enabling ssd optimizations [ 436.722750][T14332] BTRFS info (device loop4): auto enabling async discard [ 437.297202][T14384] loop6: detected capacity change from 0 to 128 [ 437.325585][T14386] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 437.382259][T14384] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 437.461450][T14384] FAT-fs (loop6): Filesystem has been set read-only [ 437.469039][ T6054] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 437.492994][T14384] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 437.533524][T14384] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 437.568495][T14384] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 437.622387][T14384] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 437.652687][T14384] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 437.697875][T14384] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 437.753079][T14384] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 437.795737][T14384] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 437.826380][T14384] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 437.879960][ T27] audit: type=1800 audit(35340232.592:240): pid=14384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2807" name="file2" dev="loop6" ino=1048720 res=0 errno=0 [ 438.338826][T14399] loop6: detected capacity change from 0 to 512 [ 438.361007][T14388] loop5: detected capacity change from 0 to 40427 [ 438.429154][T14388] F2FS-fs (loop5): invalid crc value [ 438.490652][T14388] F2FS-fs (loop5): Found nat_bits in checkpoint [ 438.732101][T14388] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 438.915286][ T6488] syz-executor: attempt to access beyond end of device [ 438.915286][ T6488] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 438.982898][ T6488] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 439.262742][ T5820] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 439.474837][ T5820] usb 5-1: Using ep0 maxpacket: 16 [ 439.506399][ T5820] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.540634][ T5820] usb 5-1: config 0 interface 0 has no altsetting 0 [ 439.564294][ T5820] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 439.605070][ T5820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.654076][ T5820] usb 5-1: config 0 descriptor?? [ 439.703723][T14432] sctp: [Deprecated]: syz.6.2827 (pid 14432) Use of struct sctp_assoc_value in delayed_ack socket option. [ 439.703723][T14432] Use struct sctp_sack_info instead [ 440.064725][T14410] raw-gadget.0 gadget.4: fail, usb_ep_set_halt returned -11 [ 440.085441][ T5820] usbhid 5-1:0.0: can't add hid device: -71 [ 440.107668][ T5820] usbhid: probe of 5-1:0.0 failed with error -71 [ 440.132705][ T5820] usb 5-1: USB disconnect, device number 36 [ 440.237801][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.247894][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.322909][T14442] loop3: detected capacity change from 0 to 32768 [ 440.343020][T14442] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.2831 (14442) [ 440.378131][T14442] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 440.408839][T14442] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 440.428183][T14442] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 440.445365][T14442] BTRFS info (device loop3): use zstd compression, level 3 [ 440.471260][T14442] BTRFS info (device loop3): using free space tree [ 440.540614][T14442] BTRFS info (device loop3): enabling ssd optimizations [ 440.564807][T14442] BTRFS info (device loop3): auto enabling async discard [ 440.922038][ T5779] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 441.575772][T14482] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 441.605424][T14480] FAULT_INJECTION: forcing a failure. [ 441.605424][T14480] name failslab, interval 1, probability 0, space 0, times 0 [ 441.648012][T14480] CPU: 0 PID: 14480 Comm: syz.4.2840 Not tainted syzkaller #0 [ 441.655501][T14480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 441.665577][T14480] Call Trace: [ 441.668852][T14480] [ 441.671789][T14480] dump_stack_lvl+0x18c/0x250 [ 441.676466][T14480] ? show_regs_print_info+0x20/0x20 [ 441.681693][T14480] ? load_image+0x420/0x420 [ 441.686191][T14480] ? __might_sleep+0xe0/0xe0 [ 441.690778][T14480] ? __lock_acquire+0x7d80/0x7d80 [ 441.695801][T14480] ? file_end_write+0x159/0x250 [ 441.700648][T14480] should_fail_ex+0x394/0x4c0 [ 441.705343][T14480] should_failslab+0x9/0x20 [ 441.709890][T14480] slab_pre_alloc_hook+0x59/0x300 [ 441.714941][T14480] ? __se_sys_mount+0x15b/0x3d0 [ 441.719805][T14480] __kmem_cache_alloc_node+0x53/0x250 [ 441.725192][T14480] ? __se_sys_mount+0x15b/0x3d0 [ 441.730030][T14480] kmalloc_trace+0x2a/0xe0 [ 441.734548][T14480] __se_sys_mount+0x15b/0x3d0 [ 441.739266][T14480] ? __x64_sys_mount+0xc0/0xc0 [ 441.744055][T14480] ? lockdep_hardirqs_on+0x98/0x150 [ 441.749280][T14480] ? __x64_sys_mount+0x20/0xc0 [ 441.754051][T14480] do_syscall_64+0x55/0xb0 [ 441.758480][T14480] ? clear_bhb_loop+0x40/0x90 [ 441.763161][T14480] ? clear_bhb_loop+0x40/0x90 [ 441.767837][T14480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 441.773734][T14480] RIP: 0033:0x7ff48a39e159 [ 441.778145][T14480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.797754][T14480] RSP: 002b:00007ff48b1dc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 441.806174][T14480] RAX: ffffffffffffffda RBX: 00007ff48a625fa0 RCX: 00007ff48a39e159 [ 441.814149][T14480] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 441.822114][T14480] RBP: 00007ff48a43506b R08: 00002000000002c0 R09: 0000000000000000 [ 441.830083][T14480] R10: 0000000000400008 R11: 0000000000000246 R12: 0000000000000000 [ 441.838051][T14480] R13: 00007ff48a626038 R14: 00007ff48a625fa0 R15: 00007ffd88adfa38 [ 441.846031][T14480] [ 442.363465][ T5820] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 442.566801][ T5820] usb 6-1: too many configurations: 11, using maximum allowed: 8 [ 442.598848][ T5820] usb 6-1: string descriptor 0 read error: -71 [ 442.605396][ T5820] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 442.636052][ T5820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.672744][ T5820] usb 6-1: can't set config #1, error -71 [ 442.690252][ T5820] usb 6-1: USB disconnect, device number 30 [ 442.893254][ T5818] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 442.985589][T14515] loop3: detected capacity change from 0 to 4096 [ 443.088032][ T5818] usb 7-1: Using ep0 maxpacket: 32 [ 443.100096][ T5818] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.136264][ T5818] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.160406][ T5818] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 443.190221][ T5818] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.227597][ T5818] usb 7-1: config 0 descriptor?? [ 443.289207][T14520] loop5: detected capacity change from 0 to 256 [ 443.308307][T14520] exfat: Deprecated parameter 'namecase' [ 443.401273][T14520] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf168f48e, utbl_chksum : 0xe619d30d) [ 443.648065][T14529] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 443.692126][ T5818] savu 0003:1E7D:2D5A.002F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 443.789956][T14530] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.799125][T14530] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.996987][ T5818] usb 7-1: USB disconnect, device number 35 [ 444.162058][T14544] Invalid argument reading file caps for ./file0 [ 444.254454][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88804f92fc00: rx timeout, send abort [ 444.263667][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88804f92fc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 444.505368][T14555] loop3: detected capacity change from 0 to 256 [ 444.692141][T14562] loop2: detected capacity change from 0 to 7 [ 444.741047][T14562] Dev loop2: unable to read RDB block 7 [ 444.788214][T14562] loop2: AHDI p3 [ 444.802322][T14562] loop2: partition table partially beyond EOD, truncated [ 445.131775][T14574] loop6: detected capacity change from 0 to 2048 [ 445.244256][T14582] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 445.388606][T14582] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 445.438349][T14582] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4) [ 445.484438][T14582] Remounting filesystem read-only [ 445.489786][ T78] NILFS (loop6): discard dirty page: offset=65536, ino=3 [ 445.507061][ T78] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 445.570237][ T78] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 445.607212][ T78] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 445.626435][ T78] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 445.637438][ T78] NILFS (loop6): discard dirty page: offset=196608, ino=3 [ 445.638740][T14597] lo speed is unknown, defaulting to 1000 [ 445.651145][ T78] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 445.672567][ T78] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 445.681478][ T78] NILFS (loop6): discard dirty block: blocknr=49, size=1024 [ 445.718862][ T78] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 445.740596][ T78] NILFS (loop6): discard dirty page: offset=0, ino=6 [ 445.747494][ T78] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 445.768561][ T78] NILFS (loop6): discard dirty block: blocknr=36, size=1024 [ 445.776271][ T78] NILFS (loop6): discard dirty block: blocknr=37, size=1024 [ 445.783903][ T78] NILFS (loop6): discard dirty block: blocknr=38, size=1024 [ 445.791237][ T78] NILFS (loop6): discard dirty page: offset=4096, ino=6 [ 445.824833][ T78] NILFS (loop6): discard dirty block: blocknr=39, size=1024 [ 445.842203][ T78] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 445.856459][ T78] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 445.869711][ T78] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 445.881134][ T78] NILFS (loop6): discard dirty page: offset=0, ino=18 [ 445.891511][ T78] NILFS (loop6): discard dirty block: blocknr=0, size=1024 [ 445.901236][ T78] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 445.917305][ T78] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 445.931195][ T78] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 445.949169][ T78] NILFS (loop6): discard dirty page: offset=0, ino=2 [ 445.971252][ T78] NILFS (loop6): discard dirty block: blocknr=18, size=1024 [ 446.002607][ T78] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 446.011927][ T78] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 446.040492][T14609] FAULT_INJECTION: forcing a failure. [ 446.040492][T14609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.072705][ T78] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 446.073105][T14609] CPU: 0 PID: 14609 Comm: syz.3.2877 Not tainted syzkaller #0 [ 446.081649][ T78] NILFS (loop6): discard dirty page: offset=0, ino=5 [ 446.089033][T14609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 446.089048][T14609] Call Trace: [ 446.089058][T14609] [ 446.089066][T14609] dump_stack_lvl+0x18c/0x250 [ 446.089098][T14609] ? show_regs_print_info+0x20/0x20 [ 446.089122][T14609] ? load_image+0x420/0x420 [ 446.126391][T14609] ? __might_fault+0xaa/0x120 [ 446.131081][T14609] ? __lock_acquire+0x7d80/0x7d80 [ 446.136130][T14609] should_fail_ex+0x394/0x4c0 [ 446.140847][T14609] _copy_from_user+0x2f/0xe0 [ 446.145452][T14609] __x64_sys_signalfd4+0x118/0x1a0 [ 446.150582][T14609] ? lock_chain_count+0x20/0x20 [ 446.155431][T14609] ? signalfd_cleanup+0x60/0x60 [ 446.160302][T14609] ? lockdep_hardirqs_on+0x98/0x150 [ 446.165505][T14609] do_syscall_64+0x55/0xb0 [ 446.169922][T14609] ? clear_bhb_loop+0x40/0x90 [ 446.174595][T14609] ? clear_bhb_loop+0x40/0x90 [ 446.179273][T14609] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 446.185170][T14609] RIP: 0033:0x7f37d299e159 [ 446.189583][T14609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.209195][T14609] RSP: 002b:00007f37d38d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000121 [ 446.217609][T14609] RAX: ffffffffffffffda RBX: 00007f37d2c25fa0 RCX: 00007f37d299e159 [ 446.225593][T14609] RDX: 0000000000000008 RSI: 00002000000000c0 RDI: ffffffffffffffff [ 446.233561][T14609] RBP: 00007f37d2a3506b R08: 0000000000000000 R09: 0000000000000000 [ 446.241548][T14609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 446.249520][T14609] R13: 00007f37d2c26038 R14: 00007f37d2c25fa0 R15: 00007ffc82b7a0f8 [ 446.257509][T14609] [ 446.341975][ T78] NILFS (loop6): discard dirty block: blocknr=41, size=1024 [ 446.354245][ T5820] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 446.372243][ T78] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 446.402551][ T78] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 446.411468][ T78] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 446.443833][ T78] NILFS (loop6): discard dirty page: offset=0, ino=4 [ 446.450572][ T78] NILFS (loop6): discard dirty block: blocknr=40, size=1024 [ 446.463891][ T78] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 446.473531][ T78] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 446.523267][ T78] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 446.542895][T14574] NILFS (loop6): mounting fs with errors [ 446.574575][ T5820] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.612155][ T5820] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 446.636500][ T5820] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 446.686250][ T5820] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 446.722547][ T5820] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 446.731712][T14582] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 446.749234][T14582] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4) [ 446.755847][ T5820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.759608][T14582] Remounting filesystem read-only [ 446.785639][ T9762] NILFS (loop6): discard dirty page: offset=0, ino=5 [ 446.794082][ T9762] NILFS (loop6): discard dirty block: blocknr=41, size=1024 [ 446.806999][ T9762] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 446.832893][ T9762] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 446.851691][ T9762] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 446.868121][ T9762] NILFS (loop6): discard dirty page: offset=0, ino=4 [ 446.875550][ T9762] NILFS (loop6): discard dirty block: blocknr=40, size=1024 [ 446.886661][ T9762] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 446.900074][ T9762] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 446.909514][ T9762] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 446.923006][ T6958] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer [ 446.949299][ T6958] NILFS (loop6): discard dirty page: offset=0, ino=3 [ 446.976219][ T6958] NILFS (loop6): discard dirty block: blocknr=42, size=1024 [ 447.002639][ T6958] NILFS (loop6): discard dirty block: blocknr=43, size=1024 [ 447.030316][ T6958] NILFS (loop6): discard dirty block: blocknr=44, size=1024 [ 447.068876][ T6958] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 447.219641][ T5820] gud: probe of 5-1:1.0 failed with error -71 [ 447.282601][T14619] loop5: detected capacity change from 0 to 32768 [ 447.459906][ T5820] usb 5-1: USB disconnect, device number 37 [ 447.466080][ T789] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 447.652655][ T789] usb 7-1: Using ep0 maxpacket: 8 [ 447.659549][ T789] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 447.668069][ T789] usb 7-1: config 179 has no interface number 0 [ 447.675801][ T789] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 447.691490][ T789] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 447.703021][ T789] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 447.714416][ T789] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 447.726138][ T789] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 447.739651][ T789] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 447.749128][ T789] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.759674][T14625] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 448.247862][ T5820] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input57 [ 448.462757][ T789] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 448.655865][ T789] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 448.677135][ T789] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 448.704245][ T789] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 448.727513][ T789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.818946][T14639] lo speed is unknown, defaulting to 1000 [ 448.832375][ T789] usb 7-1: USB disconnect, device number 36 [ 448.832502][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 448.832555][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 448.993301][ T8] usb 5-1: USB disconnect, device number 38 [ 449.548408][T14650] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2892'. [ 449.703640][T14654] loop4: detected capacity change from 0 to 512 [ 449.813872][T14654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.958530][T14644] loop3: detected capacity change from 0 to 32768 [ 450.012518][T14644] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2889 (14644) [ 450.080461][T14644] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 450.123257][T14644] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 450.133771][ T6054] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.154234][T14644] BTRFS info (device loop3): setting nodatasum [ 450.160461][T14644] BTRFS info (device loop3): force zlib compression, level 3 [ 450.192022][T14644] BTRFS info (device loop3): metadata ratio 1 [ 450.236154][T14644] BTRFS info (device loop3): turning on flush-on-commit [ 450.243723][T14644] BTRFS error (device loop3): unrecognized mount option 'rootcontext=sysadm_u' [ 450.283023][T14644] BTRFS error (device loop3): open_ctree failed: -22 [ 450.447674][T14673] loop6: detected capacity change from 0 to 512 [ 450.484510][T14673] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 450.536159][T14673] EXT4-fs error (device loop6): ext4_orphan_get:1434: comm syz.6.2900: bad orphan inode 131083 [ 450.587258][T14673] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.694960][T14673] fscrypt (loop6, inode 18): Mutually exclusive encryption flags (0x0c) [ 450.817214][ T6958] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.061879][T14687] 9pnet: p9_errstr2errno: server reported unknown error # [ 451.061879][T14687] \,7͈^ [ 451.630865][T14709] input: syz0 as /devices/virtual/input/input58 [ 451.648170][T14708] loop3: detected capacity change from 0 to 2048 [ 451.657273][T14709] input: failed to attach handler leds to device input58, error: -6 [ 451.698255][T14708] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 452.212550][ T789] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 452.423622][ T789] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.440112][ T789] usb 7-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 452.458088][ T789] usb 7-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 452.489077][ T789] usb 7-1: Product: syz [ 452.498051][T14739] loop3: detected capacity change from 0 to 256 [ 452.513612][ T789] usb 7-1: Manufacturer: syz [ 452.524450][ T789] usb 7-1: SerialNumber: syz [ 452.546878][ T789] usb 7-1: config 0 descriptor?? [ 452.581760][ T789] keyspan 7-1:0.0: Keyspan 4 port adapter converter detected [ 452.618953][ T789] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 81 [ 452.647731][ T789] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 88 [ 452.674127][ T789] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 1 [ 452.702168][ T789] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 452.734320][ T789] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 2 [ 452.743646][T14744] loop5: detected capacity change from 0 to 24 [ 452.750796][T14744] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 452.799159][ T789] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 452.835388][T14744] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 452.863377][ T789] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 4 [ 452.912552][ T789] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 452.966874][ T789] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 6 [ 453.019768][ T789] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 453.254289][ T11] tipc: Subscription rejected, illegal request [ 453.411811][ T789] usb 7-1: USB disconnect, device number 37 [ 453.443184][ T789] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 453.483278][ T789] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 453.509381][T14755] loop4: detected capacity change from 0 to 2048 [ 453.535549][ T789] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 453.561589][ T789] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 453.585332][ T789] keyspan 7-1:0.0: device disconnected [ 453.592242][T14755] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 453.622932][T14755] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 453.640932][T14755] UDF-fs: Scanning with blocksize 512 failed [ 453.691637][T14755] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 453.761103][ T27] audit: type=1800 audit(35340248.482:241): pid=14755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2944" name="file1" dev="loop4" ino=838 res=0 errno=0 [ 454.136883][T14764] loop4: detected capacity change from 0 to 128 [ 454.144454][T14763] loop5: detected capacity change from 0 to 7 [ 454.167069][T14763] Dev loop5: unable to read RDB block 7 [ 454.180958][T14763] loop5: unable to read partition table [ 454.193215][T14763] loop5: partition table beyond EOD, truncated [ 454.205035][T14766] loop3: detected capacity change from 0 to 2048 [ 454.212224][T14764] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 454.224545][T14763] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 454.332779][T14766] loop3: p3 < > p4 < > [ 454.342038][T14766] loop3: partition table partially beyond EOD, truncated [ 454.382708][T14766] loop3: p3 start 4284289 is beyond EOD, truncated [ 454.564220][ T6054] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 454.780585][T14777] loop4: detected capacity change from 0 to 64 [ 455.652583][ T8] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 455.875571][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 455.900344][ T8] usb 5-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 455.940156][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.980695][ T8] usb 5-1: Product: syz [ 455.992511][ T8] usb 5-1: Manufacturer: syz [ 456.027788][ T8] usb 5-1: SerialNumber: syz [ 456.457972][T14811] loop5: detected capacity change from 0 to 32768 [ 456.528830][ T8] usb 5-1: unknown sample rate [ 456.536780][T14811] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 456.642640][ T789] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 456.701857][ T8] usb 5-1: USB disconnect, device number 39 [ 456.746110][T14811] XFS (loop5): Ending clean mount [ 456.767367][ T8304] udevd[8304]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 456.862756][ T789] usb 7-1: Using ep0 maxpacket: 32 [ 456.912329][ T789] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 456.935865][ T789] usb 7-1: config 0 has no interface number 0 [ 456.964656][ T789] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 456.990656][ T789] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.033600][ T789] usb 7-1: Product: syz [ 457.060265][ T789] usb 7-1: Manufacturer: syz [ 457.075278][ T789] usb 7-1: SerialNumber: syz [ 457.096650][ T789] usb 7-1: config 0 descriptor?? [ 457.117946][ T789] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 457.262927][ T6488] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 457.336198][T14819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.389990][T14819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.429190][ T789] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 457.496581][ T789] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 457.562572][ T8] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 457.693909][T14846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2970'. [ 457.762907][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 457.792038][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.835634][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.866487][ T8] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 457.898802][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.940952][ T8] usb 4-1: config 0 descriptor?? [ 457.954456][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 457.964103][ T789] usb 7-1: USB disconnect, device number 38 [ 458.002219][ T789] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 458.036044][T14852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.058671][ T789] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 458.089796][T14852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.101460][ T789] quatech2 7-1:0.51: device disconnected [ 458.398594][ T8] apple 0003:05AC:024B.0030: unknown main item tag 0x0 [ 458.412591][ T8] apple 0003:05AC:024B.0030: unknown main item tag 0x0 [ 458.428131][ T8] apple 0003:05AC:024B.0030: collection stack underflow [ 458.442595][ T8] apple 0003:05AC:024B.0030: item 0 2 0 12 parsing failed [ 458.460489][ T8] apple 0003:05AC:024B.0030: parse failed [ 458.468897][ T8] apple: probe of 0003:05AC:024B.0030 failed with error -22 [ 458.660891][ T8] usb 4-1: USB disconnect, device number 40 [ 459.030533][T14882] tipc: Started in network mode [ 459.053423][T14882] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 459.776035][T14911] loop4: detected capacity change from 0 to 256 [ 459.840633][T14911] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 459.877129][T14915] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6488] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[14915] [ 460.285548][T14928] binder: 14927:14928 ioctl c0306201 2000000001c0 returned -14 [ 460.973653][T14933] loop6: detected capacity change from 0 to 131072 [ 460.993395][T14933] F2FS-fs (loop6): invalid crc value [ 461.009889][T14933] F2FS-fs (loop6): Found nat_bits in checkpoint [ 461.062160][T14933] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 461.862705][ T8] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 461.874483][T14956] Invalid argument reading file caps for ./file0 [ 462.062512][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 462.084840][ T8] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 462.112770][ T8] usb 5-1: config 0 has no interface number 0 [ 462.118944][ T8] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 462.172524][ T8] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 462.208576][T14962] loop3: detected capacity change from 0 to 1024 [ 462.216930][ T8] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 462.226425][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.256102][ T8] usb 5-1: Product: syz [ 462.271534][ T8] usb 5-1: Manufacturer: syz [ 462.283845][ T8] usb 5-1: SerialNumber: syz [ 462.314557][ T8] usb 5-1: config 0 descriptor?? [ 462.320359][T14950] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 462.332797][T14950] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 462.436376][ T9762] hfsplus: b-tree write err: -5, ino 25 [ 462.451343][ T9762] hfsplus: b-tree write err: -5, ino 4 [ 462.458242][ T9762] hfsplus: b-tree write err: -5, ino 2 [ 462.469299][ T9762] hfsplus: b-tree write err: -5, ino 26 [ 462.574164][T14950] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 462.581929][T14950] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 462.970140][T14973] loop5: detected capacity change from 0 to 1024 [ 463.032954][T14973] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 463.065744][T14973] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.202238][T14965] loop6: detected capacity change from 0 to 32768 [ 463.228975][T14973] overlayfs: invalid origin (0000007900b55a2d4f4bba8bad131b97fffe7a22e2c9188cae78f0cb1b8c4f5f2db472c08eaa258df76ea08c12f10f2595f703f26bfb95d7c195427a254027dc) [ 463.306442][T14965] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 463.412149][T14965] XFS (loop6): Ending clean mount [ 463.458617][ T8] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 463.486485][ T8] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 463.515148][T14965] XFS (loop6): Quotacheck needed: Please wait. [ 463.526765][ T6488] EXT4-fs warning (device loop5): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 463.552025][ T6488] EXT4-fs warning (device loop5): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 463.572660][ T8] asix: probe of 5-1:0.34 failed with error -71 [ 463.583422][ T6488] EXT4-fs warning (device loop5): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 463.606862][ T8] usb 5-1: USB disconnect, device number 40 [ 463.620503][T14965] XFS (loop6): Quotacheck: Done. [ 463.626129][ T6488] EXT4-fs warning (device loop5): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 463.658796][ T6488] EXT4-fs warning (device loop5): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 463.728910][ T6488] EXT4-fs warning (device loop5): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 463.772202][ T6488] EXT4-fs warning (device loop5): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 463.793615][ T6488] EXT4-fs warning (device loop5): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 463.804860][ T6958] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 463.824427][ T6488] EXT4-fs warning (device loop5): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 463.846204][ T6488] EXT4-fs warning (device loop5): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 463.890454][T14985] loop3: detected capacity change from 0 to 32768 [ 463.940201][T14985] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.3016 (14985) [ 463.991064][T14985] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 464.023992][T14985] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 464.062674][T14985] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 464.112546][T14985] BTRFS info (device loop3): use zstd compression, level 3 [ 464.119842][T14985] BTRFS info (device loop3): using free space tree [ 464.200875][ T8402] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.514006][T15008] loop4: detected capacity change from 0 to 1024 [ 464.530265][T15008] EXT4-fs: Ignoring removed oldalloc option [ 464.553001][T15008] EXT4-fs: Ignoring removed orlov option [ 464.563599][T14985] BTRFS info (device loop3): enabling ssd optimizations [ 464.570640][T14985] BTRFS info (device loop3): auto enabling async discard [ 464.582007][T15008] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 ro without journal. Quota mode: writeback. [ 464.712468][ T27] audit: type=1800 audit(35340259.432:242): pid=14985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3016" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 464.751863][T15008] EXT4-fs error (device loop4): ext4_readdir:263: inode #12: block 80: comm syz.4.3020: path /: bad entry in directory: rec_len is smaller than minimal - offset=296, inode=0, rec_len=0, size=1024 fake=0 [ 464.771709][ C0] vkms_vblank_simulate: vblank timer overrun [ 464.946407][ T78] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.975490][ T78] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.994592][ T6054] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /682/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 465.111426][ T6054] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /682/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 465.133933][ T5779] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 465.219300][T15005] loop6: detected capacity change from 0 to 32768 [ 465.268003][T15005] BTRFS warning: duplicate device /dev/loop6 devid 1 generation 8 scanned by syz.6.3018 (15005) [ 465.361910][ T6054] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 465.441173][ T6118] BTRFS warning: duplicate device /dev/loop6 devid 1 generation 8 scanned by udevd (6118) [ 466.014727][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 466.039609][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 466.067692][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 466.091876][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 466.101986][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 466.112735][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 466.135681][ T5091] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 466.159272][ T5091] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 466.166822][ T5091] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 466.175212][ T5091] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 466.183238][ T5091] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 466.230763][ C0] vkms_vblank_simulate: vblank timer overrun [ 466.255839][ T78] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.266434][ T5091] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 466.273912][ T78] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.401909][ T78] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.412331][ T78] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.422028][ C0] vkms_vblank_simulate: vblank timer overrun [ 466.540595][T15028] lo speed is unknown, defaulting to 1000 [ 466.546944][T15043] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 466.555435][T15043] IPv6: NLM_F_CREATE should be set when creating new route [ 466.562852][T15043] IPv6: NLM_F_CREATE should be set when creating new route [ 466.570123][T15043] IPv6: NLM_F_CREATE should be set when creating new route [ 467.025496][T15058] loop3: detected capacity change from 0 to 128 [ 467.106957][T15058] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 467.152705][T15058] hpfs: filesystem error: improperly stopped [ 467.172535][T15058] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 467.210855][T15058] hpfs: You really don't want any checks? You are crazy... [ 467.234679][T15058] hpfs: Code page index out of array [ 467.253223][T15058] hpfs: code page support is disabled [ 467.278135][T15058] hpfs: hpfs_map_4sectors(): unaligned read [ 467.287673][T15028] chnl_net:caif_netlink_parms(): no params data found [ 467.288590][T15058] hpfs: hpfs_map_4sectors(): unaligned read [ 467.345933][T15058] hpfs: filesystem error: unable to find root dir [ 467.471621][T15058] hpfs: hpfs_map_4sectors(): unaligned read [ 467.626448][T15051] loop6: detected capacity change from 0 to 32768 [ 467.661430][T15051] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 scanned by syz.6.3030 (15051) [ 467.714821][T15054] loop4: detected capacity change from 0 to 32768 [ 467.763266][T15051] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 467.797323][T15051] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 467.824195][T15051] BTRFS info (device loop6): turning off barriers [ 467.851110][T15051] BTRFS info (device loop6): turning on async discard [ 467.879847][T15054] syz.4.3032: attempt to access beyond end of device [ 467.879847][T15054] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 467.900980][T15051] BTRFS info (device loop6): doing ref verification [ 467.923752][T15051] BTRFS info (device loop6): using free space tree [ 467.975923][T15054] lbmIODone: I/O error in JFS log [ 468.023776][T15054] *** Log Format Error ! *** [ 468.053852][T15054] lmLogInit: exit(-22) [ 468.072113][T15054] lmLogOpen: exit(-22) [ 468.116162][T15028] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.153854][T15028] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.161136][T15028] bridge_slave_0: entered allmulticast mode [ 468.194393][T15051] BTRFS info (device loop6): enabling ssd optimizations [ 468.206983][T15028] bridge_slave_0: entered promiscuous mode [ 468.227379][T15028] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.266674][T15054] jfs_dirty_inode called on read-only volume [ 468.272566][T15028] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.288798][T15028] bridge_slave_1: entered allmulticast mode [ 468.289071][T15054] Is remount racy? [ 468.323333][T15028] bridge_slave_1: entered promiscuous mode [ 468.360473][T15096] jfs_dirty_inode called on read-only volume [ 468.393296][ T5784] Bluetooth: hci0: command tx timeout [ 468.408168][T15096] Is remount racy? [ 468.448582][T15096] jfs_dirty_inode called on read-only volume [ 468.477748][T15096] Is remount racy? [ 468.504134][T15096] jfs_dirty_inode called on read-only volume [ 468.548198][T15096] Is remount racy? [ 468.603347][T15028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.603677][ T6958] BTRFS info (device loop6): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 468.842935][T15028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.212290][T15028] team0: Port device team_slave_0 added [ 469.279681][T15120] loop6: detected capacity change from 0 to 512 [ 469.368788][T15028] team0: Port device team_slave_1 added [ 469.672888][ T789] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 469.784968][T15028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.792569][T15028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.876861][T15028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.897070][ T789] usb 5-1: unable to get BOS descriptor or descriptor too short [ 469.907141][ T789] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 469.938171][ T789] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 469.953378][T15028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.960367][T15028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.981425][ T789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.005195][T15028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.026416][ T789] usb 5-1: Product: syz [ 470.042547][ T789] usb 5-1: Manufacturer: syz [ 470.053273][ T789] usb 5-1: SerialNumber: syz [ 470.317401][ T789] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 470.336807][T15028] hsr_slave_0: entered promiscuous mode [ 470.361373][T15028] hsr_slave_1: entered promiscuous mode [ 470.386999][T15028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 470.410008][T15028] Cannot create hsr debugfs directory [ 470.474704][ T5091] Bluetooth: hci0: command tx timeout [ 470.643948][T15136] loop6: detected capacity change from 0 to 32768 [ 470.744194][T15136] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 470.766817][ T78] hsr_slave_0: left promiscuous mode [ 470.806432][ T78] hsr_slave_1: left promiscuous mode [ 470.883658][T15136] XFS (loop6): Ending clean mount [ 470.990690][ T78] veth0_macvtap: left promiscuous mode [ 471.001532][ T78] veth1_vlan: left promiscuous mode [ 471.022827][ T78] veth0_vlan: left promiscuous mode [ 471.102673][ T6958] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 471.147061][ T789] usb 5-1: failed to enable PITCH for EP 0x82 [ 471.169137][ T789] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 471.192563][ T789] usb 5-1: clock source 0 is not valid, cannot use [ 471.223708][ T789] usb 5-1: 2:1: cannot get freq (v2/v3): err -71 [ 471.279531][ T789] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 471.347683][ T78] team0 (unregistering): Port device bridge1 removed [ 471.498223][ T789] usb 5-1: USB disconnect, device number 41 [ 471.707239][ T8304] udevd[8304]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 471.821279][T15163] loop3: detected capacity change from 0 to 32768 [ 471.963767][T15163] JBD2: Ignoring recovery information on journal [ 472.101332][T15163] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 472.565298][ T5779] ocfs2: Unmounting device (7,3) on (node local) [ 472.567033][ T5091] Bluetooth: hci0: command tx timeout [ 472.896824][T15190] loop4: detected capacity change from 0 to 32768 [ 472.914704][T15190] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.3048 (15190) [ 472.934878][T15193] Invalid argument reading file caps for ./file0 [ 472.979403][T15190] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 473.002189][T15190] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 473.026018][T15190] BTRFS info (device loop4): using free space tree [ 473.228576][T15190] BTRFS info (device loop4): enabling ssd optimizations [ 473.265158][T15190] BTRFS info (device loop4): auto enabling async discard [ 473.704231][ T6054] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 473.791853][T15220] loop3: detected capacity change from 0 to 4096 [ 473.952858][T15220] ntfs: volume version 3.1. [ 474.647773][ T5091] Bluetooth: hci0: command tx timeout [ 475.525113][T15245] FAULT_INJECTION: forcing a failure. [ 475.525113][T15245] name failslab, interval 1, probability 0, space 0, times 0 [ 475.544091][T15245] CPU: 0 PID: 15245 Comm: syz.3.3064 Not tainted syzkaller #0 [ 475.551618][T15245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 475.561712][T15245] Call Trace: [ 475.565001][T15245] [ 475.567926][T15245] dump_stack_lvl+0x18c/0x250 [ 475.572623][T15245] ? show_regs_print_info+0x20/0x20 [ 475.577822][T15245] ? load_image+0x420/0x420 [ 475.582335][T15245] ? __might_sleep+0xe0/0xe0 [ 475.586934][T15245] ? __lock_acquire+0x7d80/0x7d80 [ 475.591977][T15245] should_fail_ex+0x394/0x4c0 [ 475.596665][T15245] should_failslab+0x9/0x20 [ 475.601263][T15245] slab_pre_alloc_hook+0x59/0x300 [ 475.606304][T15245] kmem_cache_alloc_lru+0x4d/0x2b0 [ 475.611421][T15245] ? __d_alloc+0x31/0x710 [ 475.615753][T15245] ? lockdep_init_map_type+0x9c/0x8e0 [ 475.621134][T15245] __d_alloc+0x31/0x710 [ 475.625297][T15245] d_alloc_pseudo+0x1d/0x70 [ 475.629830][T15245] alloc_file_pseudo+0xe4/0x210 [ 475.634702][T15245] ? fput+0x1a0/0x1a0 [ 475.638690][T15245] ? shmem_get_inode+0xa7a/0xcd0 [ 475.643629][T15245] ? mas_destroy+0x20a0/0x20a0 [ 475.648422][T15245] __shmem_file_setup+0x23c/0x2c0 [ 475.653451][T15245] shmem_zero_setup+0x8d/0x130 [ 475.658227][T15245] mmap_region+0x1225/0x2090 [ 475.662832][T15245] ? file_mmap_ok+0x170/0x170 [ 475.667510][T15245] ? arch_get_unmapped_area+0x7c0/0x7c0 [ 475.673090][T15245] ? cap_mmap_addr+0x213/0x2b0 [ 475.677869][T15245] do_mmap+0x98f/0x10a0 [ 475.682038][T15245] ? mlock_future_ok+0xf0/0xf0 [ 475.686802][T15245] ? down_write+0x200/0x200 [ 475.691310][T15245] vm_mmap_pgoff+0x1c4/0x3f0 [ 475.695914][T15245] ? account_locked_vm+0x200/0x200 [ 475.701031][T15245] ? ksys_mmap_pgoff+0xf3/0x720 [ 475.705885][T15245] ? __x64_sys_mmap+0x7a/0x130 [ 475.710651][T15245] do_syscall_64+0x55/0xb0 [ 475.715075][T15245] ? clear_bhb_loop+0x40/0x90 [ 475.719771][T15245] ? clear_bhb_loop+0x40/0x90 [ 475.724476][T15245] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 475.730373][T15245] RIP: 0033:0x7f37d299e159 [ 475.734790][T15245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.754415][T15245] RSP: 002b:00007f37d38d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 475.762831][T15245] RAX: ffffffffffffffda RBX: 00007f37d2c25fa0 RCX: 00007f37d299e159 [ 475.770797][T15245] RDX: 0000000002000007 RSI: 0000000008000002 RDI: 0000000000000000 [ 475.778765][T15245] RBP: 00007f37d2a3506b R08: ffffffffffffffff R09: 0000000000000000 [ 475.786735][T15245] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 475.794719][T15245] R13: 00007f37d2c26038 R14: 00007f37d2c25fa0 R15: 00007ffc82b7a0f8 [ 475.802704][T15245] [ 475.945194][ T78] bond0 (unregistering): Released all slaves [ 476.001430][T15247] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 476.767395][ T5818] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 476.989653][ T5818] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 476.990752][ T78] IPVS: stop unused estimator thread 0... [ 477.015650][ T5818] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 477.058313][ T5818] usb 7-1: Product: syz [ 477.072665][ T5818] usb 7-1: SerialNumber: syz [ 477.087590][T15028] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 477.118767][ T5818] usb 7-1: config 0 descriptor?? [ 477.157679][T15028] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 477.193162][T15028] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 477.262278][T15028] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 477.269667][T15279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3074'. [ 477.438177][ T5818] hso 7-1:0.0: Failed to find BULK IN ep [ 477.625723][ T5818] usb 7-1: USB disconnect, device number 39 [ 477.635563][T15028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.691270][T15028] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.705512][T15292] netlink: 'syz.4.3077': attribute type 10 has an invalid length. [ 477.716966][T10447] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.717281][T15292] netlink: 'syz.4.3077': attribute type 11 has an invalid length. [ 477.724138][T10447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.740069][T15292] netlink: 'syz.4.3077': attribute type 11 has an invalid length. [ 477.753465][T15292] netlink: 'syz.4.3077': attribute type 11 has an invalid length. [ 477.761426][T15292] netlink: 'syz.4.3077': attribute type 11 has an invalid length. [ 477.762756][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.770145][T15292] netlink: 'syz.4.3077': attribute type 11 has an invalid length. [ 477.776384][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.818951][T15292] netlink: 'syz.4.3077': attribute type 11 has an invalid length. [ 477.845459][T15292] netlink: 'syz.4.3077': attribute type 11 has an invalid length. [ 477.860275][T15028] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 477.880965][T15292] netlink: 'syz.4.3077': attribute type 11 has an invalid length. [ 477.889740][T15028] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 477.900847][T15292] netlink: 'syz.4.3077': attribute type 11 has an invalid length. [ 477.924804][T15292] netlink: 'syz.4.3077': attribute type 11 has an invalid length. [ 477.949280][T15292] netlink: 'syz.4.3077': attribute type 4 has an invalid length. [ 477.961923][T15292] netlink: 'syz.4.3077': attribute type 5 has an invalid length. [ 477.970181][T15292] netlink: 208556 bytes leftover after parsing attributes in process `syz.4.3077'. [ 478.416318][T15028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.736071][T15332] Bluetooth: MGMT ver 1.22 [ 478.780284][T15305] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input59 [ 478.832622][ T5818] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 479.064372][ T5818] usb 4-1: Using ep0 maxpacket: 8 [ 479.090387][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 479.143272][ T5818] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 479.156118][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.174956][ T5818] usb 4-1: config 0 descriptor?? [ 479.175677][T15028] veth0_vlan: entered promiscuous mode [ 479.245037][T15028] veth1_vlan: entered promiscuous mode [ 479.327482][T15028] veth0_macvtap: entered promiscuous mode [ 479.338155][T15028] veth1_macvtap: entered promiscuous mode [ 479.371534][T15028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.385495][T15028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.398853][T15028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.411773][T15028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.427042][T15028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.438580][ T5818] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 479.465239][T15028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.497554][T15028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.525604][T15028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.541100][T15028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.553417][T15028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.572506][T15028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.582368][T15028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.597702][T15028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.609362][T15028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.626170][T15028] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.639790][T15028] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.649792][T15028] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.662024][ T5818] usb 4-1: USB disconnect, device number 41 [ 479.664320][T15028] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.668181][ C0] iowarrior 4-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 479.856492][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.899142][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.004133][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.022627][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.099034][T15364] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3086'. [ 480.154429][T15364] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3086'. [ 481.011644][T15397] loop7: detected capacity change from 0 to 512 [ 481.023559][T15397] EXT4-fs: Ignoring removed oldalloc option [ 481.085885][T15397] EXT4-fs (loop7): Test dummy encryption mode enabled [ 481.162128][T15397] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.338231][T15028] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.670480][T15413] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 482.186568][ T28] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 482.241176][T15407] loop3: detected capacity change from 0 to 32768 [ 482.308601][ T27] audit: type=1800 audit(35340277.032:243): pid=15407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3098" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 482.368647][T15434] loop4: detected capacity change from 0 to 2048 [ 482.418204][ T28] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.439739][T15434] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 482.462824][ T28] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.510675][ T6118] udevd[6118]: incorrect nilfs2 checksum on /dev/loop4 [ 482.522679][ T28] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 482.540489][T15438] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 482.543243][ T28] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.633011][ T28] usb 8-1: config 0 descriptor?? [ 483.058163][T15427] loop6: detected capacity change from 0 to 40427 [ 483.085544][ T28] cm6533_jd 0003:0D8C:0022.0031: unknown main item tag 0x0 [ 483.114567][T15427] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x7 [ 483.121251][ T28] cm6533_jd 0003:0D8C:0022.0031: unknown main item tag 0x0 [ 483.145938][ T28] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0D8C:0022.0031/input/input60 [ 483.167709][T15427] F2FS-fs (loop6): invalid crc value [ 483.196086][T15427] F2FS-fs (loop6): Found nat_bits in checkpoint [ 483.215026][ T28] cm6533_jd 0003:0D8C:0022.0031: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.7-1/input0 [ 483.445994][T15427] F2FS-fs (loop6): Start checkpoint disabled! [ 483.516234][ T5846] usb 8-1: USB disconnect, device number 2 [ 483.580835][T15427] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 483.709562][T15427] syz.6.3103: attempt to access beyond end of device [ 483.709562][T15427] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 483.818684][ T12] kworker/u4:1: attempt to access beyond end of device [ 483.818684][ T12] loop6: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 483.839204][ T12] kworker/u4:1: attempt to access beyond end of device [ 483.839204][ T12] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 483.855319][ T12] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 483.867655][ T12] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 484.152874][ T5820] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 484.233601][T15473] netlink: 256 bytes leftover after parsing attributes in process `syz.7.3113'. [ 484.294805][T15475] loop6: detected capacity change from 0 to 256 [ 484.330660][T15475] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 484.343652][ T5820] usb 4-1: Using ep0 maxpacket: 16 [ 484.371974][ T5820] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.403416][ T5820] usb 4-1: config 0 interface 0 has no altsetting 0 [ 484.421675][ T5820] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 484.462635][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.477842][ T5820] usb 4-1: config 0 descriptor?? [ 484.860096][T15358] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 484.882327][T15358] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 484.904027][T15458] raw-gadget.0 gadget.3: fail, usb_ep_set_halt returned -11 [ 484.915687][ T5820] usbhid 4-1:0.0: can't add hid device: -71 [ 484.924896][ T5820] usbhid: probe of 4-1:0.0 failed with error -71 [ 484.940247][ T5820] usb 4-1: USB disconnect, device number 42 [ 484.992669][T15356] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 485.159027][ T5820] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 485.186653][T15356] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 485.201272][T15356] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 485.229168][T15356] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 485.244792][T15356] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26217, setting to 1024 [ 485.269854][T15356] usb 7-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 485.288232][T15356] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.301541][T15486] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 485.317330][T15486] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 485.327904][T15486] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 485.344693][T15356] pl2303 7-1:1.0: pl2303 converter detected [ 485.359275][T15356] usb 7-1: pl2303 converter now attached to ttyUSB0 [ 485.674107][T15356] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 485.706286][T15490] ceph: No mds server is up or the cluster is laggy [ 485.753187][T15486] pl2303 7-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 485.801141][T15486] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 485.854992][T15486] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 485.857821][T15486] pl2303 7-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 485.899446][T15486] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 486.223449][T15486] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 486.312349][T15486] pl2303 ttyUSB0: error sending break = -32 [ 486.497695][ T5820] usb 7-1: USB disconnect, device number 40 [ 486.523852][ T5820] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 486.552216][ T5820] pl2303 7-1:1.0: device disconnected [ 487.311554][T15556] loop7: detected capacity change from 0 to 2048 [ 487.375341][T15556] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.549396][T15028] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.937723][T15572] loop4: detected capacity change from 0 to 512 [ 487.949740][T15571] loop6: detected capacity change from 0 to 1024 [ 488.016559][T15572] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #15: comm syz.4.3130: iget: bad i_size value: 38620345925642 [ 488.029227][T15575] loop7: detected capacity change from 0 to 512 [ 488.058420][T15572] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.3130: couldn't read orphan inode 15 (err -117) [ 488.082674][T15572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.153087][T15572] EXT4-fs (loop4): shut down requested (2) [ 488.185241][T15571] hfsplus: xattr searching failed [ 488.230581][T15571] hfsplus: xattr searching failed [ 488.253498][T15571] hfsplus: xattr searching failed [ 488.272187][ T6054] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.662790][T15610] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 489.682307][T15598] loop3: detected capacity change from 0 to 32768 [ 489.805910][T15598] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 489.877994][T15618] tipc: Enabling of bearer rejected, failed to enable media [ 490.055913][T15598] (syz.3.3139,15598,0):ocfs2_double_lock:1197 ERROR: status = -2 [ 490.091495][T15598] (syz.3.3139,15598,0):ocfs2_rename:1306 ERROR: status = -2 [ 490.115216][T15598] (syz.3.3139,15598,0):ocfs2_rename:1697 ERROR: status = -2 [ 490.349587][T15632] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3155'. [ 490.362254][ T5779] ocfs2: Unmounting device (7,3) on (node local) [ 490.951908][T15651] kernel read not supported for file /file1 (pid: 15651 comm: syz.7.3162) [ 490.993121][ T27] audit: type=1800 audit(35340285.712:244): pid=15651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3162" name="file1" dev="mqueue" ino=40341 res=0 errno=0 [ 491.019539][T15654] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3165'. [ 491.235576][T15664] loop4: detected capacity change from 0 to 64 [ 491.260802][T15664] Bad inode number on dev loop4: 2 is out of range [ 491.352669][T15666] loop7: detected capacity change from 0 to 512 [ 491.373811][T15666] EXT4-fs error (device loop7): ext4_get_journal_inode:5820: comm syz.7.3170: inode #196608: comm syz.7.3170: iget: illegal inode # [ 491.390473][T15666] EXT4-fs (loop7): Remounting filesystem read-only [ 491.412570][T15666] EXT4-fs (loop7): no journal found [ 491.417820][T15666] EXT4-fs (loop7): can't get journal size [ 491.425976][T15666] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 491.447715][T15666] EXT4-fs (loop7): failed to initialize system zone (-22) [ 491.456657][T15666] EXT4-fs (loop7): mount failed [ 491.672548][T15356] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 491.748555][T15676] syzkaller1: entered promiscuous mode [ 491.754210][T15676] syzkaller1: entered allmulticast mode [ 491.863819][T15356] usb 5-1: not running at top speed; connect to a high speed hub [ 491.899757][T15356] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 491.931575][T15679] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 491.955223][T15356] usb 5-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 491.982515][T15356] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.003324][T15356] usb 5-1: Product: syz [ 492.007549][T15356] usb 5-1: Manufacturer: syz [ 492.042638][T15356] usb 5-1: SerialNumber: syz [ 492.064331][T15356] oti6858 5-1:1.0: oti6858 converter detected [ 492.088377][T15356] usb 5-1: oti6858 converter now attached to ttyUSB0 [ 492.184066][T15686] netlink: 7 bytes leftover after parsing attributes in process `syz.7.3178'. [ 492.390473][T15697] loop3: detected capacity change from 0 to 128 [ 492.416811][T15698] [ 492.419193][T15698] ====================================================== [ 492.426219][T15698] WARNING: possible circular locking dependency detected [ 492.433298][T15698] syzkaller #0 Not tainted [ 492.437721][T15698] ------------------------------------------------------ [ 492.444752][T15698] syz.6.3182/15698 is trying to acquire lock: [ 492.450830][T15698] ffffffff8ce648e8 (bdev_lock){+.+.}-{3:3}, at: bd_prepare_to_claim+0x1d9/0x4a0 [ 492.459950][T15698] [ 492.459950][T15698] but task is already holding lock: [ 492.467356][T15698] ffff8880200cf350 (mapping.invalidate_lock){++++}-{3:3}, at: blkdev_fallocate+0x22b/0x6a0 [ 492.477399][T15698] [ 492.477399][T15698] which lock already depends on the new lock. [ 492.477399][T15698] [ 492.487812][T15698] [ 492.487812][T15698] the existing dependency chain (in reverse order) is: [ 492.496835][T15698] [ 492.496835][T15698] -> #4 (mapping.invalidate_lock){++++}-{3:3}: [ 492.505173][T15698] down_write+0x97/0x200 [ 492.509958][T15698] set_blocksize+0x247/0x4b0 [ 492.515091][T15698] sb_min_blocksize+0xbe/0x190 [ 492.520403][T15698] ext4_fill_super+0x6e7/0x6870 [ 492.525834][T15698] get_tree_bdev+0x3e5/0x520 [ 492.530950][T15698] vfs_get_tree+0x8c/0x280 [ 492.535881][T15698] do_new_mount+0x24a/0xa40 [ 492.540899][T15698] init_mount+0xde/0x130 [ 492.545757][T15698] do_mount_root+0x97/0x230 [ 492.550793][T15698] mount_root_generic+0x1a6/0x3e0 [ 492.556339][T15698] prepare_namespace+0xc2/0x100 [ 492.561739][T15698] kernel_init_freeable+0x41a/0x560 [ 492.567453][T15698] kernel_init+0x1d/0x1c0 [ 492.572317][T15698] ret_from_fork+0x48/0x80 [ 492.577274][T15698] ret_from_fork_asm+0x11/0x20 [ 492.582590][T15698] [ 492.582590][T15698] -> #3 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 492.591193][T15698] down_write+0x97/0x200 [ 492.595950][T15698] set_blocksize+0x1ff/0x4b0 [ 492.601051][T15698] sb_min_blocksize+0xbe/0x190 [ 492.606326][T15698] ext4_fill_super+0x6e7/0x6870 [ 492.611699][T15698] get_tree_bdev+0x3e5/0x520 [ 492.616805][T15698] vfs_get_tree+0x8c/0x280 [ 492.621737][T15698] do_new_mount+0x24a/0xa40 [ 492.626749][T15698] init_mount+0xde/0x130 [ 492.631504][T15698] do_mount_root+0x97/0x230 [ 492.636518][T15698] mount_root_generic+0x1a6/0x3e0 [ 492.642053][T15698] prepare_namespace+0xc2/0x100 [ 492.647416][T15698] kernel_init_freeable+0x41a/0x560 [ 492.653127][T15698] kernel_init+0x1d/0x1c0 [ 492.657971][T15698] ret_from_fork+0x48/0x80 [ 492.662904][T15698] ret_from_fork_asm+0x11/0x20 [ 492.668181][T15698] [ 492.668181][T15698] -> #2 (&type->s_umount_key#31){++++}-{3:3}: [ 492.676452][T15698] down_read+0x46/0x2e0 [ 492.681127][T15698] super_lock+0x189/0x390 [ 492.685968][T15698] fs_bdev_sync+0xa4/0x170 [ 492.690916][T15698] blkdev_common_ioctl+0x8a9/0x2580 [ 492.696631][T15698] blkdev_ioctl+0x512/0x730 [ 492.701647][T15698] __se_sys_ioctl+0xfd/0x170 [ 492.706758][T15698] do_syscall_64+0x55/0xb0 [ 492.711689][T15698] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 492.718122][T15698] [ 492.718122][T15698] -> #1 (&bdev->bd_holder_lock){+.+.}-{3:3}: [ 492.726311][T15698] __mutex_lock+0x135/0xc80 [ 492.731336][T15698] bd_finish_claiming+0x229/0x3f0 [ 492.736905][T15698] blkdev_get_by_dev+0x469/0x610 [ 492.742378][T15698] bdev_open_by_dev+0x77/0x100 [ 492.747672][T15698] setup_bdev_super+0x59/0x660 [ 492.752953][T15698] mount_bdev+0x1ce/0x2c0 [ 492.757800][T15698] legacy_get_tree+0xea/0x180 [ 492.762993][T15698] vfs_get_tree+0x8c/0x280 [ 492.767923][T15698] do_new_mount+0x24a/0xa40 [ 492.772938][T15698] init_mount+0xde/0x130 [ 492.777693][T15698] do_mount_root+0x97/0x230 [ 492.782731][T15698] mount_root_generic+0x1a6/0x3e0 [ 492.788282][T15698] prepare_namespace+0xc2/0x100 [ 492.793646][T15698] kernel_init_freeable+0x41a/0x560 [ 492.799357][T15698] kernel_init+0x1d/0x1c0 [ 492.804207][T15698] ret_from_fork+0x48/0x80 [ 492.809141][T15698] ret_from_fork_asm+0x11/0x20 [ 492.814424][T15698] [ 492.814424][T15698] -> #0 (bdev_lock){+.+.}-{3:3}: [ 492.821555][T15698] __lock_acquire+0x37ef/0x7d80 [ 492.826924][T15698] lock_acquire+0x19e/0x420 [ 492.831944][T15698] __mutex_lock+0x135/0xc80 [ 492.836975][T15698] bd_prepare_to_claim+0x1d9/0x4a0 [ 492.842610][T15698] truncate_bdev_range+0x4e/0x260 [ 492.848147][T15698] blkdev_fallocate+0x428/0x6a0 [ 492.853507][T15698] vfs_fallocate+0x585/0x6f0 [ 492.858608][T15698] do_madvise+0x166b/0x3790 [ 492.863625][T15698] __x64_sys_madvise+0xa6/0xc0 [ 492.868901][T15698] do_syscall_64+0x55/0xb0 [ 492.873836][T15698] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 492.880259][T15698] [ 492.880259][T15698] other info that might help us debug this: [ 492.880259][T15698] [ 492.890473][T15698] Chain exists of: [ 492.890473][T15698] bdev_lock --> &sb->s_type->i_mutex_key#8 --> mapping.invalidate_lock [ 492.890473][T15698] [ 492.904641][T15698] Possible unsafe locking scenario: [ 492.904641][T15698] [ 492.912099][T15698] CPU0 CPU1 [ 492.917465][T15698] ---- ---- [ 492.922824][T15698] lock(mapping.invalidate_lock); [ 492.928015][T15698] lock(&sb->s_type->i_mutex_key#8); [ 492.935901][T15698] lock(mapping.invalidate_lock); [ 492.943519][T15698] lock(bdev_lock); [ 492.947406][T15698] [ 492.947406][T15698] *** DEADLOCK *** [ 492.947406][T15698] [ 492.955541][T15698] 2 locks held by syz.6.3182/15698: [ 492.960724][T15698] #0: ffff8880200cf1c0 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: blkdev_fallocate+0x205/0x6a0 [ 492.971437][T15698] #1: ffff8880200cf350 (mapping.invalidate_lock){++++}-{3:3}, at: blkdev_fallocate+0x22b/0x6a0 [ 492.981876][T15698] [ 492.981876][T15698] stack backtrace: [ 492.987755][T15698] CPU: 0 PID: 15698 Comm: syz.6.3182 Not tainted syzkaller #0 [ 492.995219][T15698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 493.005358][T15698] Call Trace: [ 493.008631][T15698] [ 493.011553][T15698] dump_stack_lvl+0x18c/0x250 [ 493.016232][T15698] ? load_image+0x420/0x420 [ 493.020732][T15698] ? show_regs_print_info+0x20/0x20 [ 493.025926][T15698] ? print_circular_bug+0x12b/0x1a0 [ 493.031120][T15698] check_noncircular+0x2fc/0x400 [ 493.036055][T15698] ? print_deadlock_bug+0x5d0/0x5d0 [ 493.041249][T15698] ? lockdep_lock+0xf5/0x230 [ 493.045830][T15698] ? mark_lock+0x94/0x320 [ 493.050238][T15698] ? _find_first_zero_bit+0xd6/0x100 [ 493.055512][T15698] __lock_acquire+0x37ef/0x7d80 [ 493.060365][T15698] ? verify_lock_unused+0x140/0x140 [ 493.065557][T15698] ? finish_task_switch+0x262/0x8f0 [ 493.070746][T15698] ? verify_lock_unused+0x140/0x140 [ 493.075942][T15698] ? finish_task_switch+0x262/0x8f0 [ 493.081135][T15698] ? __schedule+0x15b6/0x4660 [ 493.085815][T15698] lock_acquire+0x19e/0x420 [ 493.090312][T15698] ? bd_prepare_to_claim+0x1d9/0x4a0 [ 493.095595][T15698] ? __might_sleep+0xe0/0xe0 [ 493.100180][T15698] ? mark_lock+0x94/0x320 [ 493.104502][T15698] ? read_lock_is_recursive+0x20/0x20 [ 493.109866][T15698] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 493.115836][T15698] ? __lock_acquire+0x7d80/0x7d80 [ 493.120853][T15698] ? lock_chain_count+0x20/0x20 [ 493.125698][T15698] ? _raw_spin_lock_irq+0xbb/0xf0 [ 493.130720][T15698] __mutex_lock+0x135/0xc80 [ 493.135216][T15698] ? bd_prepare_to_claim+0x1d9/0x4a0 [ 493.140492][T15698] ? rcu_is_watching+0x15/0xb0 [ 493.145252][T15698] ? trace_contention_end+0x3b/0x110 [ 493.150530][T15698] ? rwsem_down_write_slowpath+0xe0f/0x1020 [ 493.156426][T15698] ? bd_prepare_to_claim+0x1d9/0x4a0 [ 493.161714][T15698] ? mutex_lock_nested+0x20/0x20 [ 493.166648][T15698] ? rwsem_down_read_slowpath+0x880/0x880 [ 493.172369][T15698] bd_prepare_to_claim+0x1d9/0x4a0 [ 493.177498][T15698] ? invalidate_bdev+0xc0/0xc0 [ 493.182267][T15698] ? truncate_bdev_range+0x260/0x260 [ 493.187546][T15698] ? down_write+0x16e/0x200 [ 493.192039][T15698] ? down_read_killable+0x340/0x340 [ 493.197232][T15698] truncate_bdev_range+0x4e/0x260 [ 493.202253][T15698] blkdev_fallocate+0x428/0x6a0 [ 493.207104][T15698] vfs_fallocate+0x585/0x6f0 [ 493.211715][T15698] do_madvise+0x166b/0x3790 [ 493.216310][T15698] ? madvise_set_anon_name+0x440/0x440 [ 493.221770][T15698] ? __lock_acquire+0x7d80/0x7d80 [ 493.226796][T15698] ? slab_free_freelist_hook+0x130/0x1a0 [ 493.232422][T15698] ? verify_lock_unused+0x140/0x140 [ 493.237620][T15698] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 493.243250][T15698] ? __kmem_cache_free+0xba/0x1f0 [ 493.248273][T15698] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 493.253905][T15698] ? tomoyo_path_number_perm+0x217/0x5e0 [ 493.259537][T15698] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 493.265002][T15698] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 493.270983][T15698] ? __lock_acquire+0x7d80/0x7d80 [ 493.276019][T15698] ? lock_chain_count+0x20/0x20 [ 493.280869][T15698] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 493.286788][T15698] ? lockdep_hardirqs_on+0x98/0x150 [ 493.292002][T15698] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 493.297903][T15698] ? rcu_is_watching+0x15/0xb0 [ 493.302668][T15698] ? lock_chain_count+0x20/0x20 [ 493.307525][T15698] __x64_sys_madvise+0xa6/0xc0 [ 493.312291][T15698] do_syscall_64+0x55/0xb0 [ 493.316705][T15698] ? clear_bhb_loop+0x40/0x90 [ 493.321404][T15698] ? clear_bhb_loop+0x40/0x90 [ 493.326105][T15698] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 493.332015][T15698] RIP: 0033:0x7fa897f9e159 [ 493.336443][T15698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.356055][T15698] RSP: 002b:00007fa898e5f028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 493.364475][T15698] RAX: ffffffffffffffda RBX: 00007fa898226090 RCX: 00007fa897f9e159 [ 493.372454][T15698] RDX: 0000000000000009 RSI: 0000000000600002 RDI: 0000200000000000 [ 493.380433][T15698] RBP: 00007fa89803506b R08: 0000000000000000 R09: 0000000000000000 [ 493.388411][T15698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 493.396385][T15698] R13: 00007fa898226128 R14: 00007fa898226090 R15: 00007ffd985ce1d8 [ 493.404377][T15698] [ 493.443086][T15697] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 493.547871][ T5779] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 493.736523][T15356] usb 5-1: USB disconnect, device number 42 [ 493.744678][T15356] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 493.753315][T15356] oti6858 5-1:1.0: device disconnected [ 501.675264][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.681628][ T1293] ieee802154 phy1 wpan1: encryption failed: -22