last executing test programs: 1m26.227511689s ago: executing program 2 (id=11): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000e43000000018000180140002006e657464657673696d30000000000000080004000600000008000500000000000800030006"], 0x44}}, 0x0) 1m26.114560521s ago: executing program 2 (id=17): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r0, 0x8926, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) 1m25.866519113s ago: executing program 2 (id=32): r0 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_notify(r0, &(0x7f0000000240)={0x0, 0x27, 0x1}) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) 1m25.791214249s ago: executing program 2 (id=38): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x19) write$binfmt_misc(r0, 0x0, 0x0) 1m25.679763s ago: executing program 2 (id=42): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) 1m25.581842326s ago: executing program 2 (id=46): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000003600"/20, @ANYRES32=0x1], 0x50) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0182101, &(0x7f00000004c0)) 1m10.598074163s ago: executing program 32 (id=46): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000003600"/20, @ANYRES32=0x1], 0x50) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0182101, &(0x7f00000004c0)) 55.74797706s ago: executing program 3 (id=1490): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setreuid(0x0, 0xee01) tkill(r0, 0x15) 55.694635657s ago: executing program 3 (id=1491): setresuid(0x0, 0xee01, 0x0) r0 = fanotify_init(0x200, 0x0) close(r0) 55.658575358s ago: executing program 3 (id=1492): r0 = socket(0x15, 0x5, 0x0) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) getsockopt(r0, 0x200000000114, 0x271f, &(0x7f0000000580)=""/102389, &(0x7f0000000100)=0x18ff5) 55.631351144s ago: executing program 3 (id=1493): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x51e, &(0x7f0000001080)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 55.539331237s ago: executing program 3 (id=1494): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl(r0, 0x3b93, &(0x7f00000000c0)='(') 54.826544957s ago: executing program 3 (id=1515): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) 54.77489823s ago: executing program 33 (id=1515): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) 47.394989847s ago: executing program 4 (id=1845): syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x2882026, 0x0, 0x1, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x3000081, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x400a8, &(0x7f0000000440)=ANY=[], 0x1, 0x0, 0x0) 47.347693733s ago: executing program 4 (id=1847): write$tun(0xffffffffffffffff, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @local}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0x3e) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x10000000) 47.296189731s ago: executing program 4 (id=1850): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$media(&(0x7f00000002c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)=[{}]}) 47.199201593s ago: executing program 4 (id=1855): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4008, &(0x7f00000000c0)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@uni_xlate}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@uni_xlate}, {@shortname_win95}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@shortname_win95}, {@utf8no}, {@utf8no}]}, 0x81, 0x2f1, &(0x7f0000001140)="$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") syz_clone(0xa080400, 0x0, 0x82c86ec5, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.stat\x00', 0x275a, 0x0) 47.089816237s ago: executing program 4 (id=1861): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x30) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) 44.783330801s ago: executing program 4 (id=1946): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x6, @mcast2}, {0xa, 0x4e21, 0x674, @rand_addr=' \x01\x00', 0x3}, r1, 0xb}}, 0x48) 44.782229936s ago: executing program 34 (id=1946): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x6, @mcast2}, {0xa, 0x4e21, 0x674, @rand_addr=' \x01\x00', 0x3}, r1, 0xb}}, 0x48) 14.558323512s ago: executing program 6 (id=3639): setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x2, 0xfffa, 0x5, 0x3, 0x77, 0x9, 0x4}, 0xc) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 14.452115489s ago: executing program 6 (id=3642): prlimit64(0x0, 0x6, &(0x7f0000000140)={0x79, 0x8b}, 0x0) setreuid(0xee00, 0x0) setresuid(0x0, 0x0, 0x0) 14.435407565s ago: executing program 6 (id=3645): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') madvise(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 14.381831694s ago: executing program 6 (id=3648): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f00000002c0)={[{@resuid}, {@jqfmt_vfsv0}, {@minixdf}]}, 0x5, 0x50c, &(0x7f0000001640)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 14.268236773s ago: executing program 6 (id=3656): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000003140)='./bus\x00', 0x1008002, &(0x7f0000000400)={[{@grpquota}, {@delalloc}, {@resuid}, {@errors_remount}, {@dioread_nolock}, {@nojournal_checksum}, {@lazytime}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 13.881516644s ago: executing program 6 (id=3678): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0xde05, 0x8000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r0, 0x838a3000) syz_clone(0x0, 0x0, 0xfffffffffffffe4b, 0x0, 0x0, 0x0) 13.81279902s ago: executing program 35 (id=3678): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0xde05, 0x8000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r0, 0x838a3000) syz_clone(0x0, 0x0, 0xfffffffffffffe4b, 0x0, 0x0, 0x0) 3.375951572s ago: executing program 0 (id=4094): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0)="ad57877f678615cea5858470ef9a9ce63f4388845b68d100479307c5d3db3216b7807206e76d92cff1013bd30a2e69ed768a65bc12b293c353bfd1", &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 3.16160716s ago: executing program 0 (id=4104): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0x0, 0x4b4, &(0x7f0000000a00)="$eJzs3E1sFFUcAPD/bD9o5aMVEQVBK2gkfrS0oHLwgEYTD5qY6AGPtS2ILNTQmgBptBiDR0Pi3Xg08ezBxIMXox6MiVdNPBoSor0AnmpmZ4Zuy+7SLW1Xur9fst33dt7Me2/mvd038zoTQNsaSP8kEVsi4veI6MuiixMMZG/X52bGbszNjCUxP//m30kl3bW5mbEiabHe5jxyoBRR+iSJo8mt+U6dv3BqtFyeOJvHh6ZPvz80df7CMydPj56YODFxZuTIkcOHhp9/buTZValnWq9ruz+c3LPr1bcvvz527PI7P32dFmvn3mx5dT1u60aNCtUwkO61f+Yrli57vImy3w22VoWTzhYWhKZ0RER6uLoq/b8vOmLh4PXFKx+3tHDAmkp/mzbVXzw7D2xgSbS6BEBrFD/06flv8Vqnocf/wtUXI7rz8PW5mbHrczN5tDNKWeCbtcx/ICKOzf77RfqKZq9DAACsQFf65+la479S7Ky8Z3Md2/I5lP6IuDcitkfEfRGxIyLuj6ikfSAiHsxWnu9bZv4DS+K3jn9KV2qWeZWk478XFsZ+lVeeb/HW35HHtlbq35UcP1meOJjvkwPRtSmNDzfI4/uXf/us3rLq8V/6SvMvxoJ5Aa50LrlANz46PbpaO+HqxYjdndX1L+a2kpszAeknuyJid3Ob3lYETj751Z56iW5f/wZWYZ5p/suIJ7Ljn26t6vgvzPEljecnh3qiPHFwqGgVt/r510tv1Mv/juq/Cq7ueygLLLT/JSmqGlq5PHF2qvk8Lv3xad1zmpW2/+7krUqf/OXd7LNzo9PTZ4cjupPXKvHinK7y+cjCuudGp3vTeJE+bf8H9tfu/9vzddLjn+6ltBHvjYiHI+KRvOyPRsS+iNjfoP4/vvTYew3qn0QSrTv+FyPGa37/3Wz//Un1fP0KAh2nfvi23oz58o7/4ZitfNdmKt9/t7HcAt7h7gMAAIC7QikitkRSGszCA1uiVBoczP6Hf0fcUypPTk0/dXzygzPj2T0C/dFVKq509VVdDx1OZvMtZvGR/FpxsfxQft34847eSnxwbLI83uK6Q7vbvLj/R9H/U391tLp0wJpzvxa0r6X9v9Qgbf8alwVYX8v5/XcuABvT4v7fk/7pbVVZgPXl/B/aV63+/9GSuPE/bEyL+/93EfFnjUfWARuR8T+0L/0f2tfN/t/gSaDAhtPM7fxxtN6inoho5rEAxc0CK3+qQM+y7/Bvl0DxxIu1zKs3Lpzqzj+J0p1vMFZS5o4mG9uGCKQ9Zn0zXXiGCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwN3svwAAAP//zxnZKg==") mknodat(r0, &(0x7f0000000100)='./file0\x00', 0x2, 0x101) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000000c0)=@v2={0x2, @aes128, 0x4, '\x00', @auto="f260b25d38461bc098e47b88b28603ff"}) 3.10144394s ago: executing program 0 (id=4107): r0 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r0, 0x1000006) fcntl$addseals(r0, 0x409, 0x7) write(r0, &(0x7f0000000500)="404651893a", 0x5) 3.036575287s ago: executing program 0 (id=4111): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2840) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000040)={0x4, {"0dbad96fff01000008ff00200800", "3dfab043e15fad27a639f905b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x40010, 0x6}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x102, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x4, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x9, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0xffc, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.986065991s ago: executing program 0 (id=4114): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000e40)={0x9c, 0x0, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4010}, [@CTA_EXPECT_NAT={0x88, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 2.962820961s ago: executing program 0 (id=4115): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$rtl8150(0x0, 0x2e, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x5501, &(0x7f00000000c0)=0x18) 1.686144842s ago: executing program 8 (id=4192): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$binfmt_script(r0, &(0x7f0000021180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x10009) vmsplice(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="f8", 0x1}], 0x1, 0x7) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 1.315431958s ago: executing program 5 (id=4212): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, r1, 0x25, 0x0, @val=@netfilter}, 0x40) 1.315270987s ago: executing program 5 (id=4213): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1.11021272s ago: executing program 7 (id=4222): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES64], 0x3, 0x232, &(0x7f0000000640)="$eJzs2r+LHGUYB/BnzsSLFy574i8SEF+0UJshd7VFDklAXFA0K0RBMvFmddlx99hZDlbEbKWtf4K1WNoJktLmGv8CC7trrkwhjmz21GzYFEHNJfHzaeaBd77M+zLvvDzFHLz29af9bp13i3GsZFmsXIhp3MxiI1biT9N49eUrPz3/7pX339xuty++k9Kl7cubWymlMy/8+MHn3714Y3z6ve/P/LAa+xsfHhxu/br/7P7Zg98vf9KrU69Og+E4FenacDgurlVl2unV/Tylt6uyqMvUG9TlaGG8Ww13dyepGOysr+2OyrpOxWCS+uUkjYdpPJqk4uOiN0h5nqf1teCf6Hx7s2nisDl5NZqmeeKbOH0j1n+JVmRPpuypC9kzV7PnptnZw6ZpHfdU+U94//9vtx3qpyKqr/Y6e535dT6+3Y1eVFHG+WjFbzHbJkfm9aU32hfPp1s24svq+lH++l7nscX8ZrRiY3l+c55Pi/nVWIs4GXGU34pWPL08v7U0fypeeem25+fRip8/imFUsROz7N/5LzZTev2t9h35c7fuAwB41OTpL0v7tzy/2/g8fw/94R391Yk4d+J4105EPfmsX1RVOXpki9kqH4BpKP7NYjXuKZVFTGf74IGY/OMPx6d3rMcS98niOQkAAAAAAAAAAMDD4n79gQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA3fwQAAP//rHDMJg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c3040, 0x40) lseek(r0, 0xffffffffffffffff, 0x4) 1.0175124s ago: executing program 7 (id=4226): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, r0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f00000005c0)={0x2, 0x4e25, @remote}, 0x10) 964.118195ms ago: executing program 7 (id=4227): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001240)={0x2c, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x88d4) 899.344263ms ago: executing program 7 (id=4228): r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0x5) accept$inet(r0, 0x0, 0x0) shutdown(r0, 0x1) 796.693069ms ago: executing program 8 (id=4230): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x50, r0, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0b}, @NL80211_KEY_TYPE={0x8}]}]}, 0x50}}, 0x0) 778.887648ms ago: executing program 8 (id=4231): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x0) 766.022289ms ago: executing program 5 (id=4233): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000440)=0x1000, 0x4) sendmmsg$inet6(r0, &(0x7f0000001cc0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @mcast2}, 0x1c, 0x0}}], 0x1, 0x80) 741.111685ms ago: executing program 5 (id=4235): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) 666.893602ms ago: executing program 8 (id=4238): r0 = syz_io_uring_setup(0x141c, &(0x7f0000000080)={0x0, 0x91c1, 0x400, 0x1, 0x6}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f0000001480)=@ublk_io_commit_and_fetch_sqe={0x2e, 0x18, 0x0, 0xffffffffffffffff, 0xc0107521, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, '\x00', {0x3, 0xd83, 0x9, 0x0}}) syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f00000003c0)=@ublk_get_features_sqe={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0x80207513, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbb1, 0x0, r4, '\x00', {0x0, 0xffff, 0x0, 0x0}}) io_uring_enter(r0, 0x20, 0x20, 0x1, 0x0, 0x0) 660.845098ms ago: executing program 5 (id=4239): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x0, 0x1}}, 0x10) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0xc5d116e9899720b9, {{0x42}}}, 0x10) 636.074242ms ago: executing program 5 (id=4241): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00', 0x9}]}, &(0x7f0000000140)=0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)) 627.270571ms ago: executing program 8 (id=4242): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) write$binfmt_format(r0, &(0x7f0000000080)='1\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0xa, [{0x8, 0x4}, {0x8, 0x4}]}]}}, &(0x7f0000000f40)=""/4089, 0x36, 0xff9, 0x8}, 0x28) 598.069014ms ago: executing program 8 (id=4243): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001dc0)=[{{&(0x7f0000000280)={0xa, 0x4e23, 0x54d, @private1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000003c0)="c8", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e21, 0x5, @private1, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000500)="06", 0x1}], 0x1}}], 0x2, 0x55) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 222.701311ms ago: executing program 1 (id=4256): r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mknodat(r1, &(0x7f0000000140)='./file0\x00', 0xc000, 0x8003fffe) 185.779456ms ago: executing program 1 (id=4257): r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f000012f000/0x4000)=nil, &(0x7f0000513000/0x8000)=nil, 0x4000, 0x2, 0x2}) 126.769542ms ago: executing program 1 (id=4258): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1a, 0xd, @mcast2, 0xfffffffe}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @local, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) 121.745797ms ago: executing program 1 (id=4259): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f00000002c0)="edfb14b9", 0xfdef, 0x4000000, &(0x7f00000001c0)={0x2, 0x4e21, @empty}, 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) recvmmsg(r0, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/71, 0x47}], 0x1}, 0x8}], 0x1, 0x100, 0x0) 101.199375ms ago: executing program 1 (id=4260): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./cgroup\x00', 0x2000775) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 78.996863ms ago: executing program 1 (id=4261): syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000002, &(0x7f0000000480)={[{@rodir}, {@numtail}, {@rodir}, {@uni_xlate}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@shortname_lower}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@rodir}, {@utf8no}, {@fat=@fmask={'fmask', 0x3d, 0x7ff}}, {@fat=@flush}, {@shortname_winnt}]}, 0x81, 0x2d1, &(0x7f0000000880)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x58342, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) 31.713553ms ago: executing program 7 (id=4262): unshare(0x20000400) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 0s ago: executing program 7 (id=4263): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000200)={0xfff, 0xa925, 0x9, 0x8007, 0x8, "7a3800e5ffffff00"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x16) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x8) kernel console output (not intermixed with test programs): AN 0 to HW filter on device bond0 [ 67.280781][ T8380] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.283270][ T4399] 8021q: adding VLAN 0 to HW filter on device eth6 [ 67.286185][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.286223][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.286762][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.286788][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.302245][ T8619] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.1606: corrupted xattr block 6: invalid header [ 67.304838][ T8619] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.1606: corrupted xattr block 6: invalid header [ 67.313286][ T8619] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.1606: corrupted xattr block 6: invalid header [ 67.314805][ T8633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1609'. [ 67.314818][ T8633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1609'. [ 67.314833][ T8633] netlink: 'syz.4.1609': attribute type 5 has an invalid length. [ 67.322311][ T8380] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.322719][ T8619] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.1606: corrupted xattr block 6: invalid header [ 67.332953][ T8619] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.1606: corrupted xattr block 6: invalid header [ 67.353347][ T8637] vivid-000: disconnect [ 67.358946][ T8636] vivid-000: reconnect [ 67.360280][ T8619] overlayfs: failed to get uuid (/file0, err=-117); falling back to uuid=null. [ 67.360352][ T8619] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.1606: corrupted xattr block 6: invalid header [ 67.366446][ T8619] overlayfs: failed to get origin (-117) [ 67.366582][ T8619] EXT4-fs error (device loop1): ext4_xattr_block_find:1881: inode #12: comm syz.1.1606: corrupted xattr block 6: invalid header [ 67.379507][ T8619] overlayfs: failed to verify upper root origin [ 67.427584][ T4719] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.455893][ T8650] loop5: detected capacity change from 0 to 128 [ 67.456350][ T8650] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.464460][ T8650] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.643713][ T8380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.766485][ T4399] 8021q: adding VLAN 0 to HW filter on device eth7 [ 67.784419][ T8701] netlink: 408 bytes leftover after parsing attributes in process `syz.1.1627'. [ 67.784451][ T8701] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1627'. [ 67.787739][ T4725] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 67.858894][ T8711] loop4: detected capacity change from 0 to 4096 [ 67.867641][ T8713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1631'. [ 67.878273][ T8380] veth0_vlan: entered promiscuous mode [ 67.883331][ T8380] veth1_vlan: entered promiscuous mode [ 67.885086][ T8711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.894780][ T8380] veth0_macvtap: entered promiscuous mode [ 67.896692][ T8380] veth1_macvtap: entered promiscuous mode [ 67.906932][ T8380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.914616][ T8380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.926432][ T808] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.938150][ T808] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.940177][ T8719] tipc: New replicast peer: 172.20.20.170 [ 67.940285][ T8719] tipc: Enabled bearer , priority 10 [ 67.967372][ T808] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.969160][ T808] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.971853][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.007834][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.007873][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.036338][ T808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.036370][ T808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.063782][ T8733] netlink: 208 bytes leftover after parsing attributes in process `syz.5.1639'. [ 68.397460][ T8779] sctp: [Deprecated]: syz.4.1655 (pid 8779) Use of int in max_burst socket option. [ 68.397460][ T8779] Use struct sctp_assoc_value instead [ 68.429912][ T8784] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1657'. [ 68.476660][ T4725] Bluetooth: hci0: command tx timeout [ 68.507782][ T8797] netlink: 4348 bytes leftover after parsing attributes in process `syz.4.1660'. [ 69.013065][ T8879] binder: 8876:8879 BC_ACQUIRE_DONE node 3 has no pending acquire request [ 69.058177][ T26] tipc: Node number set to 2886997007 [ 69.132771][ T8900] loop4: detected capacity change from 0 to 512 [ 69.137847][ T8900] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.153641][ T8900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.195918][ T4725] Bluetooth: hci4: command tx timeout [ 69.254295][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.350120][ T8933] vim2m vim2m.0: vidioc_s_fmt queue busy [ 69.417351][ T8946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.417574][ T8946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.511669][ T8955] tipc: Enabling of bearer rejected, failed to enable media [ 69.822062][ T8998] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 69.833215][ T8998] bond1 (unregistering): Released all slaves [ 70.029993][ T9023] loop0: detected capacity change from 0 to 512 [ 70.040880][ T9023] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.054111][ T9023] EXT4-fs (loop0): Online resizing not supported with sparse_super2 [ 70.104582][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.143382][ T9034] netlink: 'syz.5.1749': attribute type 2 has an invalid length. [ 70.213543][ T9041] loop0: detected capacity change from 0 to 512 [ 70.257081][ T9041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.322232][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.536353][ T9090] loop5: detected capacity change from 0 to 512 [ 70.543227][ T9090] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 70.558058][ T4725] Bluetooth: hci0: command tx timeout [ 70.566764][ T9090] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 70.566831][ T9090] System zones: 1-12 [ 70.602519][ T9090] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 207 vs 220 free clusters [ 70.606859][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 70.606873][ C0] EXT4-fs (loop5): initial error at time 70: ext4_mb_generate_buddy:1317 [ 70.606886][ C0] EXT4-fs (loop5): last error at time 70: ext4_mb_generate_buddy:1317 [ 70.611793][ T9090] EXT4-fs (loop5): 1 truncate cleaned up [ 70.613360][ T9090] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.651906][ T9108] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 70.653514][ T6498] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.674680][ T9106] loop6: detected capacity change from 0 to 512 [ 70.675132][ T9106] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.679461][ T9106] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 70.679591][ T9106] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.1782: corrupted in-inode xattr: e_value size too large [ 70.679605][ T9106] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 70.679759][ T9106] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1782: couldn't read orphan inode 15 (err -117) [ 70.679772][ T9106] loop6: lost filesystem error report for type 5 error -117 [ 70.681818][ T9106] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.781061][ T8380] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.829691][ T9131] loop5: detected capacity change from 0 to 256 [ 70.847550][ T9135] loop1: detected capacity change from 0 to 128 [ 70.849375][ T9135] EXT4-fs: Ignoring removed orlov option [ 70.862082][ T9135] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.921035][ T4719] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.942562][ T9146] loop6: detected capacity change from 0 to 512 [ 70.978345][ T9146] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.058526][ T8380] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.164101][ T9174] loop0: detected capacity change from 0 to 4096 [ 71.164491][ T9174] EXT4-fs: inline encryption not supported [ 71.172073][ T9174] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 71.172110][ T9174] EXT4-fs (loop0): Test dummy encryption mode enabled [ 71.193337][ T9174] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 71.193420][ T9174] System zones: 0-5 [ 71.198641][ T4725] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 71.198667][ T4725] Bluetooth: hci4: Injecting HCI hardware error event [ 71.199290][ T4725] Bluetooth: hci4: hardware error 0x00 [ 71.202363][ T9174] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.204725][ T9181] loop4: detected capacity change from 0 to 512 [ 71.224555][ T9174] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 71.242374][ T9181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.256025][ T9185] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.269248][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.291684][ T8380] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.293822][ T9181] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 71.318945][ T9181] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 71.347059][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.428119][ T9202] __nla_validate_parse: 17 callbacks suppressed [ 71.428163][ T9202] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1824'. [ 71.440820][ T9202] veth3: entered promiscuous mode [ 71.509866][ T9218] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1830'. [ 71.697825][ T9242] EXT4-fs (loop5): Test dummy encryption mode enabled [ 71.702701][ T9242] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.774222][ T9242] EXT4-fs: Ignoring removed nobh option [ 71.775483][ T9242] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 71.828554][ T9263] CUSE: unknown device info "n|zQC*" [ 71.828583][ T9263] CUSE: unknown device info ">2a" V|#ySioL89IܥѮÇ[<^Q>nHw'0KV,${\d+" [ 71.828590][ T9263] CUSE: unknown device info "" [ 71.828596][ T9263] CUSE: unknown device info "LPt|%IOKu GǪ|QU˜DvF,*p(o9{u[赨gIPYV" [ 71.828602][ T9263] CUSE: DEVNAME unspecified [ 71.836790][ T50] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 71.837803][ T50] Bluetooth: hci2: Injecting HCI hardware error event [ 71.838770][ T50] Bluetooth: hci2: hardware error 0x00 [ 71.848195][ T6498] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.977683][ T4711] FAT-fs (loop4): error, invalid access to FAT (entry 0x000003ff) [ 71.977719][ T4711] FAT-fs (loop4): Filesystem has been set read-only [ 71.982928][ T4711] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 71.983264][ T4711] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 72.029874][ T9282] Injecting memory failure for pfn 0x11f134 at process virtual address 0x20000000 [ 72.038095][ T9282] Memory failure: 0x11f134: Sending SIGBUS to syz.5.1862:9282 due to hardware memory corruption [ 72.040629][ T9282] Memory failure: 0x11f134: recovery action for dirty LRU page: Recovered [ 72.042179][ T9282] Injecting memory failure for pfn 0x219250 at process virtual address 0x20001000 [ 72.043963][ T9282] Memory failure: 0x219250: Sending SIGBUS to syz.5.1862:9282 due to hardware memory corruption [ 72.048164][ T9282] Memory failure: 0x219250: recovery action for already poisoned page: Failed [ 72.085272][ T9285] nbd: must specify at least one socket [ 72.205058][ T9273] Injecting memory failure for pfn 0x11ec00 at process virtual address 0x20000000 [ 72.212039][ T9273] Memory failure: 0x11ec00: recovery action for dirty LRU page: Recovered [ 72.213725][ T9273] Injecting memory failure for pfn 0x122400 at process virtual address 0x20200000 [ 72.217304][ T9273] Memory failure: 0x122400: recovery action for dirty LRU page: Recovered [ 72.218972][ T9273] Injecting memory failure for pfn 0x13e800 at process virtual address 0x20400000 [ 72.221393][ T9273] Memory failure: 0x13e800: recovery action for dirty LRU page: Recovered [ 72.274327][ T9299] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.293796][ T9299] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #15: comm syz.6.1872: corrupted inode contents [ 72.302529][ T9299] EXT4-fs error (device loop6): ext4_dirty_inode:6639: inode #15: comm syz.6.1872: mark_inode_dirty error [ 72.305198][ T9299] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #15: comm syz.6.1872: corrupted inode contents [ 72.305693][ T9299] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #15: comm syz.6.1872: mark_inode_dirty error [ 72.306128][ T9299] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #15: comm syz.6.1872: corrupted inode contents [ 72.306776][ T9299] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #15: comm syz.6.1872: mark_inode_dirty error [ 72.306963][ T9299] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #15: comm syz.6.1872: corrupted inode contents [ 72.313949][ T9299] EXT4-fs error (device loop6): ext4_truncate:4691: inode #15: comm syz.6.1872: mark_inode_dirty error [ 72.314525][ T9299] EXT4-fs error (device loop6) in ext4_setattr:6172: Corrupt filesystem [ 72.325968][ T9299] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #15: comm syz.6.1872: corrupted inode contents [ 72.357903][ T8380] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.376359][ T9320] EXT4-fs: Ignoring removed oldalloc option [ 72.380596][ T9320] EXT4-fs (loop1): Test dummy encryption mode enabled [ 72.399819][ T9320] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.430180][ T9322] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 72.430223][ T9322] EXT4-fs (loop0): Test dummy encryption mode enabled [ 72.433282][ T9322] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840c019, mo2=0003] [ 72.433320][ T9322] System zones: 0-5 [ 72.434086][ T9322] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.438189][ T9320] EXT4-fs error (device loop1): ext4_empty_dir:3085: inode #12: comm syz.1.1880: Directory block failed checksum [ 72.476995][ T9331] Invalid ELF header len 3 [ 72.498345][ T4719] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.520232][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.636880][ T4721] Bluetooth: hci0: command tx timeout [ 72.641739][ T9352] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1895'. [ 72.694099][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1898'. [ 72.791848][ T9377] cgroup: fork rejected by pids controller in /syz6 [ 72.814610][ T9368] loop1: p1 < > p4 < > [ 72.814643][ T9368] loop1: partition table partially beyond EOD, truncated [ 72.815181][ T9368] loop1: p4 start 42180 is beyond EOD, truncated [ 72.987417][ T9398] EXT4-fs: Ignoring removed orlov option [ 72.987449][ T9398] EXT4-fs: Ignoring removed nobh option [ 72.992783][ T9398] EXT4-fs (loop1): blocks per group (131072) and clusters per group (8192) inconsistent [ 73.010024][ T9398] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1917'. [ 73.149619][ T9420] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.226169][ T4717] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.228337][ T4717] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.229313][ T4717] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.229737][ T4717] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.229950][ T4717] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.356383][ T4725] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 73.365059][ T3821] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.648105][ T9440] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.657054][ T3821] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.880466][ T4719] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.918164][ T9447] vlan3: entered allmulticast mode [ 73.918205][ T9447] macsec0: entered allmulticast mode [ 73.918215][ T9447] veth1_macvtap: entered allmulticast mode [ 73.980194][ T9425] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.986605][ T9425] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.986737][ T9425] bridge_slave_0: entered allmulticast mode [ 73.987194][ T9425] bridge_slave_0: entered promiscuous mode [ 73.996730][ T50] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 74.023872][ T3821] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.028782][ T9425] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.028832][ T9425] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.028939][ T9425] bridge_slave_1: entered allmulticast mode [ 74.035835][ T9425] bridge_slave_1: entered promiscuous mode [ 74.070476][ T9425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.073522][ T9425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.089611][ T9425] team0: Port device team_slave_0 added [ 74.116751][ T3821] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.122120][ T9425] team0: Port device team_slave_1 added [ 74.149765][ T9425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.149795][ T9425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.149813][ T9425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.161759][ T9425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.161786][ T9425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.161802][ T9425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.226543][ T9425] hsr_slave_0: entered promiscuous mode [ 74.226933][ T9425] hsr_slave_1: entered promiscuous mode [ 74.227131][ T9425] debugfs: 'hsr0' already exists in 'hsr' [ 74.227143][ T9425] Cannot create hsr debugfs directory [ 74.324792][ T3821] bridge_slave_1: left allmulticast mode [ 74.324838][ T3821] bridge_slave_1: left promiscuous mode [ 74.324926][ T3821] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.338028][ T3821] bridge_slave_0: left allmulticast mode [ 74.338064][ T3821] bridge_slave_0: left promiscuous mode [ 74.338140][ T3821] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.347015][ T4725] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.350225][ T4725] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.352066][ T4725] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.353845][ T4725] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.356543][ T4725] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.560134][ T3821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.566677][ T9507] set_capacity_and_notify: 12 callbacks suppressed [ 74.566891][ T9507] loop1: detected capacity change from 0 to 512 [ 74.567592][ T9507] EXT4-fs: Ignoring removed oldalloc option [ 74.584562][ T9507] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.588200][ T3821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.609908][ T3821] bond0 (unregistering): Released all slaves [ 74.617287][ T4719] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.688586][ T9515] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 74.992997][ T4399] 8021q: adding VLAN 0 to HW filter on device eth9 [ 75.031526][ T3821] hsr_slave_0: left promiscuous mode [ 75.032966][ T3821] hsr_slave_1: left promiscuous mode [ 75.033241][ T3821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.033259][ T3821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.040352][ T3821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.041819][ T3821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.054109][ T3821] veth1_macvtap: left promiscuous mode [ 75.054155][ T3821] veth0_macvtap: left promiscuous mode [ 75.054217][ T3821] veth1_vlan: left promiscuous mode [ 75.054256][ T3821] veth0_vlan: left promiscuous mode [ 75.165985][ T3821] team0 (unregistering): Port device team_slave_1 removed [ 75.171181][ T3821] team0 (unregistering): Port device team_slave_0 removed [ 75.276177][ T50] Bluetooth: hci0: command tx timeout [ 75.401174][ T9597] tipc: Enabling of bearer rejected, failed to enable media [ 75.455065][ T9611] loop0: detected capacity change from 0 to 512 [ 75.472812][ T9482] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.472861][ T9482] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.472921][ T9482] bridge_slave_0: entered allmulticast mode [ 75.473360][ T9482] bridge_slave_0: entered promiscuous mode [ 75.475046][ T9482] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.475070][ T9482] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.475374][ T9482] bridge_slave_1: entered allmulticast mode [ 75.475885][ T9482] bridge_slave_1: entered promiscuous mode [ 75.483100][ T9482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.484054][ T9482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.492580][ T9482] team0: Port device team_slave_0 added [ 75.493613][ T9482] team0: Port device team_slave_1 added [ 75.496082][ T9611] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.501455][ T9482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.501482][ T9482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.501498][ T9482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.502036][ T9482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.502041][ T9482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.502053][ T9482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.511997][ T9482] hsr_slave_0: entered promiscuous mode [ 75.512317][ T9482] hsr_slave_1: entered promiscuous mode [ 75.549188][ T9618] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1987'. [ 75.559485][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.604883][ T9621] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1989'. [ 75.699578][ T9633] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1994'. [ 75.705569][ T3821] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.727674][ T9425] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 75.733512][ T9425] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.733898][ T9425] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 75.738654][ T9425] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.742989][ T9425] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 75.752989][ T9425] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.753389][ T9425] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 75.759409][ T9425] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.777357][ T3821] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.880756][ T3821] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.910240][ T9482] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 75.914368][ T9482] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.917810][ T9482] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 75.932987][ T9482] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.938797][ T9482] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 75.941837][ T9482] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.943568][ T9482] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 75.954243][ T9482] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.980350][ T3821] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.994392][ T9425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.000873][ T9675] netlink: 'syz.0.2003': attribute type 1 has an invalid length. [ 76.011590][ T9425] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.026928][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.026978][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.027521][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.027540][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.072188][ T9425] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.072225][ T9425] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.157965][ T9482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.190998][ T9482] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.203766][ T808] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.203813][ T808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.204337][ T808] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.204355][ T808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.210926][ T3821] bridge_slave_1: left allmulticast mode [ 76.210951][ T9709] loop0: detected capacity change from 0 to 512 [ 76.210956][ T3821] bridge_slave_1: left promiscuous mode [ 76.211025][ T3821] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.236360][ T3821] bridge_slave_0: left allmulticast mode [ 76.236390][ T3821] bridge_slave_0: left promiscuous mode [ 76.236475][ T3821] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.281106][ T9716] loop5: detected capacity change from 0 to 128 [ 76.353236][ T3821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.379191][ T3821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.388201][ T3821] bond0 (unregistering): Released all slaves [ 76.397146][ T50] Bluetooth: hci2: command tx timeout [ 76.414663][ T9716] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2014'. [ 76.422047][ T9482] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.423849][ T9482] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.496760][ T1927] kernel read not supported for file /vga_arbiter (pid: 1927 comm: kworker/1:2) [ 76.694008][ T9425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.850062][ T4399] 8021q: adding VLAN 0 to HW filter on device eth8 [ 76.912983][ T3821] hsr_slave_0: left promiscuous mode [ 76.914370][ T3821] hsr_slave_1: left promiscuous mode [ 76.916000][ T3821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.920876][ T3821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.934191][ T3821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.934220][ T3821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.945408][ T3821] veth1_macvtap: left promiscuous mode [ 76.945464][ T3821] veth0_macvtap: left promiscuous mode [ 76.945529][ T3821] veth1_vlan: left promiscuous mode [ 76.945568][ T3821] veth0_vlan: left promiscuous mode [ 77.133658][ T3821] team0 (unregistering): Port device team_slave_1 removed [ 77.139018][ T3821] team0 (unregistering): Port device team_slave_0 removed [ 77.192787][ T9482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.202282][ T4399] 8021q: adding VLAN 0 to HW filter on device eth9 [ 77.250927][ T9425] veth0_vlan: entered promiscuous mode [ 77.279909][ T9425] veth1_vlan: entered promiscuous mode [ 77.329346][ T9425] veth0_macvtap: entered promiscuous mode [ 77.331985][ T9425] veth1_macvtap: entered promiscuous mode [ 77.359153][ T50] Bluetooth: hci0: command tx timeout [ 77.360776][ T9425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.366107][ T9425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.391853][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.391907][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.391928][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.391942][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.410006][ T9864] netlink: 'syz.1.2052': attribute type 298 has an invalid length. [ 77.459312][ T3821] IPVS: stop unused estimator thread 0... [ 77.487902][ T4399] 8021q: adding VLAN 0 to HW filter on device eth10 [ 77.518913][ T3821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.518941][ T3821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.544098][ T9878] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2058'. [ 77.544139][ T9878] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2058'. [ 77.544480][ T9878] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2058'. [ 77.544492][ T9878] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2058'. [ 77.586597][ T1329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.586632][ T1329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.588313][ T9482] veth0_vlan: entered promiscuous mode [ 77.601660][ T9482] veth1_vlan: entered promiscuous mode [ 77.653329][ T9482] veth0_macvtap: entered promiscuous mode [ 77.659719][ T9482] veth1_macvtap: entered promiscuous mode [ 77.664862][ T9482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.668674][ T9482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.673231][ T1453] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.673325][ T1453] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.673348][ T1453] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.673368][ T1453] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.718848][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.718873][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.744809][ T9900] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2063'. [ 77.744849][ T9900] netlink: 'syz.0.2063': attribute type 1 has an invalid length. [ 77.760231][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.760261][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.783118][ T9909] loop0: detected capacity change from 0 to 512 [ 77.783458][ T9909] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.783478][ T9909] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.811155][ T9909] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 77.811189][ T9909] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 77.817891][ T9909] EXT4-fs (loop0): 1 truncate cleaned up [ 77.818373][ T9909] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.835359][ T9909] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #2: block 4: comm syz.0.2066: lblock 0 mapped to illegal pblock 4 (length 1) [ 77.839344][ T9909] EXT4-fs (loop0): Remounting filesystem read-only [ 77.872935][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.974770][ T9930] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2073'. [ 78.057887][ T9946] loop7: detected capacity change from 0 to 128 [ 78.183063][ T9965] loop1: detected capacity change from 0 to 128 [ 78.228452][ T9965] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 78.270976][ T9977] loop7: detected capacity change from 0 to 512 [ 78.310594][ T4719] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.318509][ T9977] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.2089: corrupted in-inode xattr: invalid ea_ino [ 78.318549][ T9977] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.321437][ T9977] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.2089: couldn't read orphan inode 15 (err -117) [ 78.321460][ T9977] loop7: lost filesystem error report for type 5 error -117 [ 78.323736][ T9977] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.330781][ T4399] 8021q: adding VLAN 0 to HW filter on device eth11 [ 78.380074][ T9482] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.478392][ T50] Bluetooth: hci2: command tx timeout [ 78.625945][ T15] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.628076][ T15] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.628102][ T15] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.628117][ T15] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.748637][ T4811] bridge0: entered promiscuous mode [ 78.798455][T10044] netlink: 'syz.6.2112': attribute type 1 has an invalid length. [ 78.800153][T10044] netlink: 'syz.6.2112': attribute type 2 has an invalid length. [ 78.801902][T10044] netlink: 16134 bytes leftover after parsing attributes in process `syz.6.2112'. [ 78.851364][T10048] Injecting memory failure for pfn 0x13e3e4 at process virtual address 0x20001000 [ 78.862340][T10051] loop0: detected capacity change from 0 to 512 [ 78.868371][T10051] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.871208][T10048] Memory failure: 0x13e3e4: Sending SIGBUS to syz.5.2114:10048 due to hardware memory corruption [ 78.871635][T10048] Memory failure: 0x13e3e4: recovery action for dirty LRU page: Recovered [ 78.871665][T10048] Injecting memory failure for pfn 0x219250 at process virtual address 0x20002000 [ 78.871684][T10048] Memory failure: 0x219250: Sending SIGBUS to syz.5.2114:10048 due to hardware memory corruption [ 78.871694][T10048] Memory failure: 0x219250: recovery action for already poisoned page: Failed [ 78.885357][T10051] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.2116: iget: bad i_size value: 38620345925642 [ 78.885407][T10051] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.888669][T10051] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.2116: couldn't read orphan inode 15 (err -117) [ 78.888706][T10051] loop0: lost filesystem error report for type 5 error -117 [ 78.893449][T10051] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.947474][T10058] loop1: detected capacity change from 0 to 512 [ 78.952727][T10058] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2118: bg 0: block 5: invalid block bitmap [ 78.952759][T10058] loop1: lost filesystem error report for type 5 error -117 [ 78.954352][T10058] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 78.954369][T10058] loop1: lost filesystem error report for type 5 error -117 [ 78.954533][T10058] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2118: invalid indirect mapped block 3 (level 2) [ 78.954550][T10058] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 78.954709][T10058] EXT4-fs (loop1): 1 orphan inode deleted [ 78.954720][T10058] EXT4-fs (loop1): 1 truncate cleaned up [ 78.955186][T10058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.993168][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.030844][ T4719] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.064462][T10070] EXT4-fs (loop6): orphan cleanup on readonly fs [ 79.067079][T10070] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2124: bg 0: block 63: padding at end of block bitmap is not set [ 79.067115][T10070] loop6: lost filesystem error report for type 5 error -117 [ 79.071311][T10070] EXT4-fs error (device loop6): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.6.2124: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 79.071355][T10070] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 79.072309][T10070] EXT4-fs warning (device loop6): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.6.2124: ea_inode dec ref err=-117 [ 79.072451][T10070] EXT4-fs (loop6): 1 orphan inode deleted [ 79.072888][T10070] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 79.156517][ T9425] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.279436][T10082] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 79.279476][T10082] FAT-fs (loop5): Filesystem has been set read-only [ 79.279545][T10082] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 79.437436][ T50] Bluetooth: hci0: command tx timeout [ 79.468789][T10118] proc: Bad value for 'gid' [ 79.614533][T10140] set_capacity_and_notify: 2 callbacks suppressed [ 79.616238][T10140] loop0: detected capacity change from 0 to 256 [ 79.624396][T10140] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 79.630252][T10140] FAT-fs (loop0): Filesystem has been set read-only [ 79.701092][T10147] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2160'. [ 79.781229][T10158] loop0: detected capacity change from 0 to 512 [ 79.807848][T10158] EXT4-fs (loop0): orphan cleanup on readonly fs [ 79.807880][T10158] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 79.811196][T10158] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 79.815742][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 79.815777][ C0] EXT4-fs (loop0): initial error at time 79: ext4_mb_generate_buddy:1317 [ 79.815807][ C0] EXT4-fs (loop0): last error at time 79: ext4_mb_generate_buddy:1317 [ 79.823358][T10158] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.2165: attempt to clear invalid blocks 2 len 1 [ 79.823397][T10158] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 79.825902][T10158] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2165: invalid indirect mapped block 1819239214 (level 0) [ 79.825919][T10158] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 79.827655][T10158] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2165: invalid indirect mapped block 1819239214 (level 1) [ 79.827679][T10158] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 79.836509][T10158] EXT4-fs (loop0): 1 truncate cleaned up [ 79.837005][T10158] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.863284][T10158] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 79.885883][T10158] EXT4-fs (loop0): can't enable nombcache during remount [ 79.910711][T10171] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 79.949612][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.967615][T10178] Bluetooth: MGMT ver 1.23 [ 80.090501][T10192] loop5: detected capacity change from 0 to 512 [ 80.107596][T10192] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 80.107633][T10192] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 80.107645][T10192] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2181: Corrupt directory, running e2fsck is recommended [ 80.143645][T10192] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 80.143726][T10192] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.2181: corrupted in-inode xattr: invalid ea_ino [ 80.143743][T10192] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 80.146121][T10192] EXT4-fs (loop5): Remounting filesystem read-only [ 80.146592][T10192] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.167254][T10206] netlink: 348 bytes leftover after parsing attributes in process `syz.7.2188'. [ 80.329287][ T6498] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.367867][T10226] loop5: detected capacity change from 0 to 512 [ 80.387707][T10226] EXT4-fs (loop5): 1 truncate cleaned up [ 80.396095][T10226] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.423562][T10232] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2199'. [ 80.429224][ T6498] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.555910][ T50] Bluetooth: hci2: command tx timeout [ 80.918707][T10302] loop1: detected capacity change from 0 to 512 [ 80.927043][T10302] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.2228: invalid block [ 80.927075][T10302] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 80.931110][T10302] EXT4-fs (loop1): Remounting filesystem read-only [ 80.934551][T10302] EXT4-fs (loop1): 2 truncates cleaned up [ 80.936589][T10302] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.987648][ T4719] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.247170][T10347] xt_hashlimit: size too large, truncated to 1048576 [ 81.339174][T10357] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 81.417910][T10368] syz.1.2250 (10368): /proc/10367/oom_adj is deprecated, please use /proc/10367/oom_score_adj instead. [ 81.517410][ T50] Bluetooth: hci0: command tx timeout [ 81.614618][ T26] kernel read not supported for file /mdstat (pid: 26 comm: kworker/1:1) [ 81.872770][T10441] Injecting memory failure for pfn 0x13bd35 at process virtual address 0x20001000 [ 81.875793][T10441] Memory failure: 0x13bd35: recovery action for clean LRU page: Recovered [ 81.875904][T10441] Injecting memory failure for pfn 0x11f008 at process virtual address 0x20002000 [ 81.876096][T10441] Memory failure: 0x11f008: recovery action for clean LRU page: Recovered [ 81.876230][T10441] Injecting memory failure for pfn 0x13b048 at process virtual address 0x20003000 [ 81.876545][T10441] Memory failure: 0x13b048: recovery action for clean LRU page: Recovered [ 81.902552][T10443] loop0: detected capacity change from 0 to 256 [ 81.933270][T10439] loop5: detected capacity change from 0 to 2048 [ 81.949006][T10439] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.066512][ T6498] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.277531][T10491] Invalid ELF header magic: != ELF [ 82.467910][T10520] loop7: detected capacity change from 0 to 512 [ 82.511777][ T30] audit: type=1326 audit(82.500:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10525 comm="syz.1.2325" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc77a168 code=0x0 [ 82.511935][T10520] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.536601][ T9482] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.595061][T10536] loop5: detected capacity change from 0 to 4096 [ 82.616932][T10536] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 82.636503][ T50] Bluetooth: hci2: command tx timeout [ 82.791082][T10562] netlink: 'syz.5.2342': attribute type 3 has an invalid length. [ 82.919482][T10586] loop7: detected capacity change from 0 to 256 [ 82.925244][T10586] FAT-fs (loop7): Directory bread(block 1285) failed [ 82.929611][T10586] FAT-fs (loop7): Directory bread(block 1286) failed [ 82.931471][T10586] FAT-fs (loop7): Directory bread(block 1287) failed [ 82.933959][T10586] FAT-fs (loop7): Directory bread(block 1288) failed [ 82.943182][T10586] FAT-fs (loop7): Directory bread(block 1285) failed [ 82.943216][T10586] FAT-fs (loop7): Directory bread(block 1286) failed [ 82.943231][T10586] FAT-fs (loop7): Directory bread(block 1287) failed [ 82.943260][T10586] FAT-fs (loop7): Directory bread(block 1288) failed [ 82.943286][T10586] FAT-fs (loop7): Directory bread(block 1285) failed [ 82.943299][T10586] FAT-fs (loop7): Directory bread(block 1286) failed [ 83.001944][T10595] Invalid source name [ 83.001972][T10595] UBIFS error (pid: 10595): cannot open "/dev/loop6", error -22 [ 83.432538][ T50] Bluetooth: hci1: adv larger than maximum supported [ 83.432576][ T50] Bluetooth: hci1: Malformed LE Event: 0x0d [ 83.469645][T10666] __nla_validate_parse: 7 callbacks suppressed [ 83.469687][T10666] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2393'. [ 83.525071][T10670] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 83.560841][ T30] audit: type=1326 audit(83.550:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10680 comm="syz.1.2401" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc77a168 code=0x7ffc0000 [ 83.560952][ T30] audit: type=1326 audit(83.550:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10680 comm="syz.1.2401" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc77a168 code=0x7ffc0000 [ 83.561953][ T30] audit: type=1326 audit(83.550:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10680 comm="syz.1.2401" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffffbc77a168 code=0x7ffc0000 [ 83.562164][ T30] audit: type=1326 audit(83.550:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10680 comm="syz.1.2401" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc77a168 code=0x7ffc0000 [ 83.562229][ T30] audit: type=1326 audit(83.550:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10680 comm="syz.1.2401" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc77a168 code=0x7ffc0000 [ 83.562919][ T30] audit: type=1326 audit(83.550:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10680 comm="syz.1.2401" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffffbc77a168 code=0x7ffc0000 [ 83.562999][ T30] audit: type=1326 audit(83.550:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10680 comm="syz.1.2401" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc77a168 code=0x7ffc0000 [ 83.667507][T10692] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 83.740286][T10697] SQUASHFS error: Failed to read block 0x6e6: -5 [ 83.740321][T10697] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 83.740913][T10697] SQUASHFS error: read_indexes: reading block [6e4:0] [ 83.895297][T10715] ip_tables: iptables: counters copy to user failed while replacing table [ 83.985567][T10731] netlink: 'syz.0.2421': attribute type 1 has an invalid length. [ 84.011641][T10733] netlink: 'syz.7.2423': attribute type 3 has an invalid length. [ 84.359747][T10784] EXT4-fs: Ignoring removed bh option [ 84.393724][T10784] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2842c028, mo2=0002] [ 84.393792][T10784] System zones: 0-1, 3-8 [ 84.422065][T10784] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2447: bg 0: block 112: padding at end of block bitmap is not set [ 84.426444][T10784] EXT4-fs (loop1): Remounting filesystem read-only [ 84.440605][T10792] EXT4-fs: Ignoring removed bh option [ 84.440642][T10792] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.449375][T10792] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 84.452077][T10792] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 84.452273][T10792] EXT4-fs (loop0): orphan cleanup on readonly fs [ 84.463935][T10792] Quota error (device loop0): do_insert_tree: Free block already used in tree: block 4 [ 84.463989][T10792] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 84.464039][T10792] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.2450: Failed to acquire dquot type 1 [ 84.464060][T10792] loop0: lost filesystem error report for type 5 error -5 [ 84.465837][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 84.465851][ C0] EXT4-fs (loop0): last error at time 84: ext4_acquire_dquot:7041 [ 84.466804][T10798] tipc: Started in network mode [ 84.466821][T10798] tipc: Node identity aaaaaaaaaa16, cluster identity 4711 [ 84.466895][T10798] tipc: Enabled bearer , priority 10 [ 84.479966][T10792] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.2450: Invalid block bitmap block 0 in block_group 0 [ 84.479999][T10792] loop0: lost filesystem error report for type 5 error -117 [ 84.483771][T10792] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.2450: Invalid block bitmap block 0 in block_group 0 [ 84.483804][T10792] loop0: lost filesystem error report for type 5 error -117 [ 84.491900][T10792] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.2450: Invalid block bitmap block 0 in block_group 0 [ 84.491932][T10792] loop0: lost filesystem error report for type 5 error -117 [ 84.497741][T10792] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.2450: Failed to acquire dquot type 1 [ 84.501906][T10792] loop0: lost filesystem error report for type 5 error -28 [ 84.506310][T10792] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.2450: Failed to acquire dquot type 1 [ 84.506347][T10792] loop0: lost filesystem error report for type 5 error -28 [ 84.515245][T10792] EXT4-fs (loop0): 1 orphan inode deleted [ 84.735126][T10823] set_capacity_and_notify: 7 callbacks suppressed [ 84.746556][T10823] loop5: detected capacity change from 0 to 8192 [ 84.764827][T10839] x_tables: ip6_tables: cgroup.2 match: invalid size 528 (kernel) != (user) 536 [ 84.848447][T10847] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 84.848641][ T4796] IPVS: starting estimator thread 0... [ 84.875576][T10856] Soft offlining pfn 0x13b879 at process virtual address 0x20000000 [ 84.936226][T10854] IPVS: using max 60 ests per chain, 144000 per kthread [ 84.995843][T10874] binder: 10873:10874 got reply transaction with no transaction stack [ 85.004437][T10874] binder: 10873:10874 transaction reply to 0:0 failed 5/29201/-71, code 0 size 0-0 line 3155 [ 85.007919][T10874] binder: 10873:10874 ioctl c0306201 20000380 returned -14 [ 85.249887][T10902] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 85.249922][T10902] IPv6: NLM_F_CREATE should be set when creating new route [ 85.250028][T10902] IPv6: NLM_F_CREATE should be set when creating new route [ 85.250039][T10902] IPv6: NLM_F_CREATE should be set when creating new route [ 85.300375][T10910] loop5: detected capacity change from 0 to 256 [ 85.396342][T10919] geneve0: entered promiscuous mode [ 85.397594][T10919] macvlan3: entered promiscuous mode [ 85.449982][ T4693] hid_parser_main: 210 callbacks suppressed [ 85.452623][ T4693] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 85.454288][ T4693] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 85.457580][ T4693] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 85.459008][ T4693] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 85.460391][ T4693] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 85.461806][ T4693] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 85.463405][ T4693] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 85.464815][ T4693] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 85.466348][ T4693] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 85.467703][ T4693] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 85.477318][ T4693] hid-generic 0000:0000:0004.0003: hidraw0: HID v0.03 Device [syz1] on syz1 [ 85.535002][T10932] fido_id[10932]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 85.585935][ T26] tipc: Node number set to 12364458 [ 85.788600][T10975] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2537'. [ 85.790846][T10975] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2537'. [ 85.814444][T10980] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2540'. [ 85.883083][T10990] 9p: p9: multiple sources not supported [ 85.990973][T11000] loop6: detected capacity change from 0 to 512 [ 85.996040][T11000] EXT4-fs (loop6): Test dummy encryption mode enabled [ 86.009087][T11000] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.2549: inode has both inline data and extents flags [ 86.009127][T11000] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 86.011797][T11000] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.2549: couldn't read orphan inode 15 (err -117) [ 86.011844][T11000] loop6: lost filesystem error report for type 5 error -117 [ 86.068482][T11010] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 86.107902][T11016] loop1: detected capacity change from 0 to 256 [ 86.173875][T11022] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2558'. [ 86.194088][T11024] loop7: detected capacity change from 0 to 512 [ 86.240779][T11032] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2562'. [ 86.242917][T11032] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2562'. [ 86.247699][T11032] netlink: 'syz.0.2562': attribute type 1 has an invalid length. [ 86.582003][T11078] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1398 [ 86.615358][T11080] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2585'. [ 86.782717][T11095] loop6: detected capacity change from 0 to 4096 [ 86.844253][T11101] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2594'. [ 87.295491][T11169] loop1: detected capacity change from 0 to 256 [ 87.511280][T11203] loop6: detected capacity change from 0 to 512 [ 87.542821][T11203] EXT4-fs (loop6): orphan cleanup on readonly fs [ 87.542960][T11203] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2642: bg 0: block 63: padding at end of block bitmap is not set [ 87.542988][T11203] loop6: lost filesystem error report for type 5 error -117 [ 87.545753][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 87.545769][ C1] EXT4-fs (loop6): initial error at time 87: ext4_validate_block_bitmap:441 [ 87.545786][ C1] EXT4-fs (loop6): last error at time 87: ext4_validate_block_bitmap:441 [ 87.551374][T11210] loop0: detected capacity change from 0 to 128 [ 87.553051][T11203] EXT4-fs error (device loop6): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.6.2642: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 87.553072][T11203] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 87.559946][T11209] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2644'. [ 87.562071][T11203] EXT4-fs warning (device loop6): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.6.2642: ea_inode dec ref err=-117 [ 87.562233][T11203] EXT4-fs (loop6): 1 orphan inode deleted [ 87.873327][T11229] loop5: detected capacity change from 0 to 512 [ 87.879770][T11229] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 87.879804][T11229] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 87.884535][T11229] EXT4-fs (loop5): orphan cleanup on readonly fs [ 87.885141][T11229] __quota_error: 4 callbacks suppressed [ 87.885150][T11229] Quota error (device loop5): v2_read_file_info: Block with free entry 5 out of range (1, 5). [ 87.885308][T11229] EXT4-fs warning (device loop5): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 87.885549][T11229] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 87.886929][T11229] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 87.887985][T11229] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #12: comm syz.5.2655: corrupted inode contents [ 87.888006][T11229] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 87.888142][T11229] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #12: comm syz.5.2655: mark_inode_dirty error [ 87.888154][T11229] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 87.888236][T11229] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #12: comm syz.5.2655: corrupted inode contents [ 87.888247][T11229] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 87.888318][T11229] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #12: comm syz.5.2655: mark_inode_dirty error [ 87.888329][T11229] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 87.888421][T11229] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #12: comm syz.5.2655: corrupted inode contents [ 87.888431][T11229] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 87.889110][T11229] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 87.889123][T11229] loop5: lost filesystem error report for type 5 error -117 [ 87.889200][T11229] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #12: comm syz.5.2655: corrupted inode contents [ 87.889211][T11229] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 87.889274][T11229] EXT4-fs error (device loop5): ext4_truncate:4691: inode #12: comm syz.5.2655: mark_inode_dirty error [ 87.889284][T11229] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 87.889340][T11229] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 87.889348][T11229] loop5: lost filesystem error report for type 5 error -117 [ 87.889495][T11229] EXT4-fs (loop5): 1 truncate cleaned up [ 87.963305][T11234] iwpm_parse_nlmsg: Invalid attribute (msg type Query Mapping response ret = -34) [ 88.004883][T11229] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 88.017773][T11229] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 88.018234][T11229] EXT4-fs warning (device loop5): ext4_multi_mount_protect:287: Invalid MMP block in superblock [ 88.055408][T11247] ublk_ctrl_add_dev: invalid recovery flags 10 [ 88.088530][T11251] tipc: Started in network mode [ 88.088563][T11251] tipc: Node identity 7fff, cluster identity 4711 [ 88.088571][T11251] tipc: Node number set to 32767 [ 88.267845][T11278] Injecting memory failure for pfn 0x11e00b at process virtual address 0x20003000 [ 88.270489][T11278] Memory failure: 0x11e00b: recovery action for clean LRU page: Recovered [ 88.272544][T11278] Injecting memory failure for pfn 0x13b3d8 at process virtual address 0x20004000 [ 88.277184][T11278] Memory failure: 0x13b3d8: recovery action for clean LRU page: Recovered [ 88.304315][T11284] veth1_macvtap: left promiscuous mode [ 88.305530][T11284] macsec0: entered allmulticast mode [ 88.317752][T11284] veth1_macvtap: entered promiscuous mode [ 88.318808][T11284] veth1_macvtap: entered allmulticast mode [ 88.324829][T11284] macsec0: left allmulticast mode [ 88.324857][T11284] veth1_macvtap: left allmulticast mode [ 88.480771][T11305] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.868287][T11364] __nla_validate_parse: 2 callbacks suppressed [ 88.868326][T11364] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2716'. [ 88.978852][T11381] netlink: 'syz.5.2721': attribute type 3 has an invalid length. [ 89.024977][T11389] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 89.028955][T11392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2729'. [ 89.036049][T11389] EXT4-fs (loop5): 1 truncate cleaned up [ 89.138910][T11406] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2734'. [ 89.288731][T11436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2745'. [ 89.323342][T11441] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2748'. [ 89.447873][T11460] netlink: 'syz.5.2755': attribute type 4 has an invalid length. [ 89.580137][T11480] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2762'. [ 89.580172][T11480] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2762'. [ 89.580202][T11480] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2762'. [ 89.646556][T11457] Injecting memory failure for pfn 0x11f003 at process virtual address 0x20276000 [ 89.662738][T11457] Memory failure: 0x11f003: keeping poisoned page in swap cache [ 89.662979][T11457] Memory failure: 0x11f003: recovery action for clean swapcache page: Recovered [ 89.663011][T11457] Injecting memory failure for pfn 0x121002 at process virtual address 0x20277000 [ 89.665257][T11457] Memory failure: 0x121002: keeping poisoned page in swap cache [ 89.665301][T11457] Memory failure: 0x121002: recovery action for clean swapcache page: Recovered [ 89.680167][T11495] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2766'. [ 89.762812][T11509] set_capacity_and_notify: 5 callbacks suppressed [ 89.764222][T11509] loop5: detected capacity change from 0 to 512 [ 89.777674][T11509] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 89.777751][T11509] System zones: 1-12 [ 89.783161][T11509] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.2772: error while reading EA inode 32 err=-116 [ 89.787108][T11509] loop5: lost filesystem error report for type 5 error -117 [ 89.792273][T11509] EXT4-fs (loop5): Remounting filesystem read-only [ 89.792354][T11509] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 89.792421][T11509] EXT4-fs (loop5): 1 orphan inode deleted [ 89.917526][T11530] loop6: detected capacity change from 0 to 128 [ 89.917858][T11530] EXT4-fs: Ignoring removed nobh option [ 89.944934][T11535] loop1: detected capacity change from 0 to 256 [ 90.219319][T11569] vhci_hcd vhci_hcd.2: invalid port number 96 [ 90.219352][T11569] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 90.243624][T11571] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2794'. [ 90.302109][T11575] hugetlbfs: Bad value '' for mount option 'nr_inodes' [ 90.302109][T11575] [ 90.423885][T11594] loop7: detected capacity change from 0 to 512 [ 90.424377][T11594] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 90.485525][T11601] tipc: Enabling of bearer rejected, failed to enable media [ 90.714841][T11621] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 91.084750][T11660] loop5: detected capacity change from 0 to 128 [ 91.097441][T11660] EXT4-fs (loop5): Test dummy encryption mode enabled [ 91.178480][T11667] loop0: detected capacity change from 0 to 1024 [ 91.204994][T11667] EXT4-fs: Ignoring removed bh option [ 91.207750][T11667] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 91.240963][T11660] EXT4-fs: Ignoring removed nobh option [ 91.267160][T11660] EXT4-fs (loop5): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.294360][ T4710] EXT4-fs error (device loop0): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /630/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 91.313266][ T4710] EXT4-fs (loop0): Remounting filesystem read-only [ 91.365708][T11682] 8021q: VLANs not supported on xfrm0 [ 91.821168][T11743] loop0: detected capacity change from 0 to 512 [ 91.840698][T11743] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.2862: bg 0: block 5: invalid block bitmap [ 91.840737][T11743] loop0: lost filesystem error report for type 5 error -117 [ 91.843446][T11743] EXT4-fs (loop0): Remounting filesystem read-only [ 91.843519][T11743] EXT4-fs (loop0): 2 truncates cleaned up [ 91.871338][T11743] EXT4-fs warning (device loop0): empty_inline_dir:1785: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 92.079555][T11778] loop6: detected capacity change from 0 to 512 [ 92.092326][T11778] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 92.094106][T11778] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.2875: corrupted in-inode xattr: e_value size too large [ 92.094148][T11778] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 92.097238][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 92.097252][ C0] EXT4-fs (loop6): initial error at time 92: ext4_iget_extra_inode:5180: inode 15 [ 92.097268][ C0] EXT4-fs (loop6): last error at time 92: ext4_iget_extra_inode:5180: inode 15 [ 92.112484][T11778] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.2875: couldn't read orphan inode 15 (err -117) [ 92.112521][T11778] loop6: lost filesystem error report for type 5 error -117 [ 92.341639][T11814] loop6: detected capacity change from 0 to 4096 [ 92.347190][T11814] EXT4-fs: inline encryption not supported [ 92.349127][T11814] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 92.349147][T11814] EXT4-fs (loop6): Test dummy encryption mode enabled [ 92.359824][T11814] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 92.359890][T11814] System zones: 0-5 [ 92.372749][T11818] loop0: detected capacity change from 0 to 4096 [ 92.382957][T11818] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.382998][T11818] EXT4-fs (loop0): Test dummy encryption mode enabled [ 92.527581][T11842] bond0: option lp_interval: invalid value (18446744073709551614) [ 92.527620][T11842] bond0: option lp_interval: allowed values 1 - 2147483647 [ 92.602919][T11843] vhci_hcd vhci_hcd.2: default hub control req: 010b v0000 i0000 l0 [ 92.925629][T11894] overlayfs: null uuid in non-single lower fs '/syz0', falling back to xino=off,index=off,nfs_export=off. [ 92.953212][T11898] trusted_key: encrypted_key: key trusted:syz not found [ 93.087900][T11922] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.2941: iget: bad i_size value: 38620345925642 [ 93.087940][T11922] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 93.088316][T11922] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.2941: couldn't read orphan inode 15 (err -117) [ 93.088337][T11922] loop0: lost filesystem error report for type 5 error -117 [ 93.101604][T11922] EXT4-fs warning (device loop0): ext4_empty_dir:3094: inode #2: comm syz.0.2941: directory missing '.' [ 93.183428][T11934] EXT4-fs: inline encryption not supported [ 93.368649][T11958] vfat: Bad value for 'shortname' [ 93.630852][T11985] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 93.644226][T11985] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 93.644355][T11985] EXT4-fs (loop1): orphan cleanup on readonly fs [ 93.657416][T11985] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.2967: Allocating blocks 41-42 which overlap fs metadata [ 93.657455][T11985] loop1: lost filesystem error report for type 5 error -117 [ 93.665736][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 93.665763][ C0] EXT4-fs (loop1): initial error at time 93: ext4_mb_mark_diskspace_used:4222 [ 93.665792][ C0] EXT4-fs (loop1): last error at time 93: ext4_mb_mark_diskspace_used:4222 [ 93.672169][T11985] EXT4-fs (loop1): Remounting filesystem read-only [ 93.672306][T11985] Quota error (device loop1): write_blk: dquota write failed [ 93.672348][T11985] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 93.672487][T11985] EXT4-fs (loop1): 1 truncate cleaned up [ 93.679947][T11985] EXT4-fs (loop1): pa 000000008b3afcdb: logic 1, phys. 41, len 23 [ 93.956372][T12024] EXT4-fs (loop0): resizing filesystem from 256 to 2 blocks [ 93.956411][T12024] EXT4-fs warning (device loop0): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 94.023671][T12038] CUSE: unknown device info "xKJ H+ۤ2LhnL1`Cc80(3նi" [ 94.025474][T12038] CUSE: unknown device info "ٮ,ًqd" [ 94.026825][T12038] CUSE: unknown device info "3ܟ,̘" [ 94.028103][T12038] CUSE: unknown device info "J2S Z !e/J+-na4\N4" [ 94.028134][T12038] CUSE: unknown device info " [ 94.028134][T12038] fzXS! [ 94.028134][T12038] Axj" [ 94.028148][T12038] CUSE: unknown device info " xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 94.028164][T12038] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TM_/V{" [ 94.028177][T12038] CUSE: unknown device info "n_h b 1 [ 105.317965][ T4725] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.319525][ T4725] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.323653][ T4725] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.325528][ T4725] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 105.342699][ T39] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.342745][ T39] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.387468][T13550] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 105.394264][T13555] can0: slcan on ptm0. [ 105.408582][T13553] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.416984][T13550] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 105.443319][T13550] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #11: comm syz.0.3686: No space for directory leaf checksum. Please run e2fsck -D. [ 105.443365][T13550] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #11: comm syz.0.3686: checksumming directory block 0 [ 105.451273][ T39] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.451317][ T39] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.465056][T13552] can0 (unregistered): slcan off ptm0. [ 105.468608][T13564] vfat: Deprecated parameter 'posix' [ 105.473135][T13564] FAT-fs: "posix" option is obsolete, not supported now [ 105.475583][ T4710] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.479066][ T9482] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.549485][ T39] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.549527][ T39] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.620904][T13581] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 105.789071][ T39] bridge_slave_1: left allmulticast mode [ 105.789104][ T39] bridge_slave_1: left promiscuous mode [ 105.789212][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.794773][ T39] bridge_slave_0: left allmulticast mode [ 105.794796][ T39] bridge_slave_0: left promiscuous mode [ 105.794881][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.909457][ T39] geneve0 (unregistering): left promiscuous mode [ 105.954672][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.997488][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.026990][ T39] bond0 (unregistering): Released all slaves [ 106.035403][ T4399] 8021q: adding VLAN 0 to HW filter on device eth12 [ 106.050690][T13544] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.052366][T13544] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.054024][T13544] bridge_slave_0: entered allmulticast mode [ 106.056182][T13544] bridge_slave_0: entered promiscuous mode [ 106.058498][T13544] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.060101][T13544] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.061679][T13544] bridge_slave_1: entered allmulticast mode [ 106.063430][T13544] bridge_slave_1: entered promiscuous mode [ 106.079256][T13544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.083410][T13544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.101237][T13544] team0: Port device team_slave_0 added [ 106.103714][T13544] team0: Port device team_slave_1 added [ 106.112255][T13544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.113705][T13544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.119405][T13544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.122167][T13544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.123547][T13544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.126415][T13544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.255110][T13544] hsr_slave_0: entered promiscuous mode [ 106.255481][T13544] hsr_slave_1: entered promiscuous mode [ 106.255707][T13544] debugfs: 'hsr0' already exists in 'hsr' [ 106.258436][T13544] Cannot create hsr debugfs directory [ 106.362426][ T39] hsr_slave_0: left promiscuous mode [ 106.366926][ T39] hsr_slave_1: left promiscuous mode [ 106.367252][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.367265][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.370178][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.370189][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.383599][ T39] veth1_macvtap: left promiscuous mode [ 106.384892][ T39] veth0_macvtap: left promiscuous mode [ 106.390449][ T39] veth1_vlan: left promiscuous mode [ 106.390507][ T39] veth0_vlan: left promiscuous mode [ 106.605683][ T39] team0 (unregistering): Port device team_slave_1 removed [ 106.615361][ T39] team0 (unregistering): Port device team_slave_0 removed [ 106.674590][T13673] net_ratelimit: 3 callbacks suppressed [ 106.674817][T13673] netlink: zone id is out of range [ 106.674851][T13673] netlink: zone id is out of range [ 106.674867][T13673] netlink: zone id is out of range [ 106.714846][T13677] __nla_validate_parse: 3 callbacks suppressed [ 106.719668][T13677] netlink: 1208 bytes leftover after parsing attributes in process `syz.1.3726'. [ 106.758733][T13679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3728'. [ 106.773528][ T4399] 8021q: adding VLAN 0 to HW filter on device eth13 [ 106.778270][T13679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3728'. [ 106.807930][T13683] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3730'. [ 106.810322][T13683] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3730'. [ 106.812078][T13683] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 106.813708][T13683] iwpm_hello_cb: Unable to parse nlmsg [ 106.983753][T13544] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 106.998676][T13544] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.999013][T13544] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 107.020366][T13544] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.026182][T13544] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 107.055110][T13544] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 107.055476][T13544] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 107.061960][T13544] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.174481][T13544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.201527][T13544] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.207296][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.207336][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.217473][ T1453] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.217515][ T1453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.273680][ T4399] 8021q: adding VLAN 0 to HW filter on device eth14 [ 107.306166][T13759] netlink: 'syz.7.3756': attribute type 2 has an invalid length. [ 107.357039][ T4725] Bluetooth: hci0: command tx timeout [ 107.447968][T13544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.478937][T13785] set_capacity_and_notify: 10 callbacks suppressed [ 107.478979][T13785] loop1: detected capacity change from 0 to 2048 [ 107.479733][T13785] EXT4-fs: Ignoring removed nomblk_io_submit option [ 107.484053][T13785] EXT4-fs (loop1): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 107.494415][T13785] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.543878][T13802] loop7: detected capacity change from 0 to 512 [ 107.547705][T13802] EXT4-fs: Ignoring removed nomblk_io_submit option [ 107.549319][T13802] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 107.561584][T13802] EXT4-fs (loop7): 1 truncate cleaned up [ 107.562074][T13802] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.584656][ T9482] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.655511][ T4399] 8021q: adding VLAN 0 to HW filter on device eth15 [ 107.668642][T13544] veth0_vlan: entered promiscuous mode [ 107.674694][T13544] veth1_vlan: entered promiscuous mode [ 107.690222][T13544] veth0_macvtap: entered promiscuous mode [ 107.693535][T13544] veth1_macvtap: entered promiscuous mode [ 107.699576][ T4719] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.702693][T13544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.709002][T13544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.719842][T13814] loop7: detected capacity change from 0 to 4096 [ 107.723081][ T40] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.723249][ T40] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.723330][ T40] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.723383][ T40] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.745217][T13814] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 107.763806][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.763838][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.769193][T13814] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.792903][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.794458][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.826025][ T9482] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.050293][T13843] loop1: detected capacity change from 0 to 4096 [ 108.052338][T13843] EXT4-fs (loop1): Test dummy encryption mode enabled [ 108.055272][T13852] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.3781'. [ 108.068999][T13843] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.127206][T13862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3786'. [ 108.129043][T13862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3786'. [ 108.174915][ T3821] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.174963][ T3821] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.174999][ T3821] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.175020][ T3821] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.178577][ T4719] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.189878][T13862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3786'. [ 108.189993][T13862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3786'. [ 108.219564][T13865] vhci_hcd vhci_hcd.2: invalid port number 96 [ 108.219606][T13865] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 108.334031][T13883] loop5: detected capacity change from 0 to 128 [ 108.340154][T13883] EXT4-fs (loop5): Test dummy encryption mode enabled [ 108.352073][T13885] loop1: detected capacity change from 0 to 1024 [ 108.359170][T13885] EXT4-fs: Ignoring removed bh option [ 108.365864][T13885] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 108.381125][T13883] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 108.429511][T13894] loop8: detected capacity change from 0 to 4096 [ 108.508350][T13894] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 108.839330][T13935] loop1: detected capacity change from 0 to 128 [ 108.847044][T13935] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 108.847086][T13935] System zones: 1-3, 19-19, 35-36 [ 109.105263][T13971] ima: policy update failed [ 109.108493][ T30] audit: type=1802 audit(109.100:25): pid=13971 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.0.3836" res=0 errno=0 [ 109.160546][T13978] loop5: detected capacity change from 0 to 512 [ 109.192579][T13978] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 18: comm syz.5.3839: lblock 23 mapped to illegal pblock 18 (length 1) [ 109.202591][T13978] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 3: comm syz.5.3839: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 109.209406][T13978] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 12: comm syz.5.3839: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 109.214709][T13978] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 13: comm syz.5.3839: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 109.307221][T13994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.307426][T13994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.380818][T14000] loop0: detected capacity change from 0 to 128 [ 109.436071][ T4725] Bluetooth: hci0: command tx timeout [ 109.622113][T14018] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 110.125196][T14065] EXT4-fs: Conflicting test_dummy_encryption options [ 110.182064][T14069] Bluetooth: MGMT ver 1.23 [ 110.819182][T14124] batman_adv: batadv0: Adding interface: ip6gretap2 [ 110.822205][T14124] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.822517][T14124] batman_adv: batadv0: Not using interface ip6gretap2 (retrying later): interface not active [ 110.913608][T14133] EXT4-fs (loop1): Test dummy encryption mode enabled [ 110.953858][T14137] EXT4-fs (loop7): 1 truncate cleaned up [ 110.996636][T14141] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 111.122877][T14149] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.122910][T14149] EXT4-fs (loop1): Test dummy encryption mode enabled [ 111.123781][T14149] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 111.123815][T14149] System zones: 0-5 [ 111.440419][T14180] ip_tables: iptables: counters copy to user failed while replacing table [ 111.516185][ T4725] Bluetooth: hci0: command tx timeout [ 111.594142][T14088] Set syz1 is full, maxelem 65536 reached [ 111.643063][T14200] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 111.765553][T14213] EXT4-fs: Ignoring removed i_version option [ 111.765590][T14213] EXT4-fs: Ignoring removed oldalloc option [ 111.834744][T14216] fscrypt (loop1, inode 12): Can't use IV_INO_LBLK_64 policy on filesystem 'loop1' because it doesn't have stable inode numbers [ 111.919033][T14228] __nla_validate_parse: 2 callbacks suppressed [ 111.920382][T14228] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3950'. [ 111.953393][T14225] syz.1.3948: attempt to access beyond end of device [ 111.953393][T14225] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 111.957415][T14225] Buffer I/O error on dev loop1, logical block 57847, async page read [ 111.964720][T14225] syz.1.3948: attempt to access beyond end of device [ 111.964720][T14225] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 111.964768][T14225] Buffer I/O error on dev loop1, logical block 57847, async page read [ 111.964800][T14225] syz.1.3948: attempt to access beyond end of device [ 111.964800][T14225] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 111.964817][T14225] Buffer I/O error on dev loop1, logical block 57847, async page read [ 111.964842][T14225] syz.1.3948: attempt to access beyond end of device [ 111.964842][T14225] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 111.964857][T14225] Buffer I/O error on dev loop1, logical block 57847, async page read [ 111.964879][T14225] syz.1.3948: attempt to access beyond end of device [ 111.964879][T14225] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 111.964894][T14225] Buffer I/O error on dev loop1, logical block 57847, async page read [ 111.964915][T14225] syz.1.3948: attempt to access beyond end of device [ 111.964915][T14225] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 111.964929][T14225] Buffer I/O error on dev loop1, logical block 57847, async page read [ 111.964951][T14225] syz.1.3948: attempt to access beyond end of device [ 111.964951][T14225] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 111.964964][T14225] Buffer I/O error on dev loop1, logical block 57847, async page read [ 111.964985][T14225] syz.1.3948: attempt to access beyond end of device [ 111.964985][T14225] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 111.964999][T14225] Buffer I/O error on dev loop1, logical block 57847, async page read [ 111.965020][T14225] syz.1.3948: attempt to access beyond end of device [ 111.965020][T14225] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 111.965098][T14225] Buffer I/O error on dev loop1, logical block 57847, async page read [ 111.965127][T14225] syz.1.3948: attempt to access beyond end of device [ 111.965127][T14225] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 111.965144][T14225] Buffer I/O error on dev loop1, logical block 57847, async page read [ 112.016324][T14235] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 112.016354][T14235] FAT-fs (loop1): Filesystem has been set read-only [ 112.232898][T14263] vfat: Unknown parameter 'i0sj#PJT /s4I' [ 112.242558][T14263] netlink: 112 bytes leftover after parsing attributes in process `syz.8.3965'. [ 112.503408][T14290] set_capacity_and_notify: 18 callbacks suppressed [ 112.505152][T14290] loop8: detected capacity change from 0 to 512 [ 112.513640][T14290] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.8.3978: corrupted xattr block 95: invalid header [ 112.513670][T14290] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 112.516420][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 112.516436][ C0] EXT4-fs (loop8): initial error at time 112: ext4_expand_extra_isize_ea:2810: inode 11 [ 112.516454][ C0] EXT4-fs (loop8): last error at time 112: ext4_expand_extra_isize_ea:2810: inode 11 [ 112.526624][T14290] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.3978: bg 0: block 7: invalid block bitmap [ 112.526659][T14290] loop8: lost filesystem error report for type 5 error -117 [ 112.526888][T14290] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 112.526899][T14290] loop8: lost filesystem error report for type 5 error -117 [ 112.527020][T14290] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2972: inode #11: comm syz.8.3978: corrupted xattr block 95: invalid header [ 112.527035][T14290] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 112.527158][T14290] EXT4-fs warning (device loop8): ext4_evict_inode:287: xattr delete (err -117) [ 112.527192][T14290] EXT4-fs (loop8): 1 orphan inode deleted [ 112.603560][T14296] loop0: detected capacity change from 0 to 256 [ 112.675786][T14300] i2c i2c-0: new_device: Extra parameters [ 112.689815][T14298] loop5: detected capacity change from 0 to 4096 [ 112.729431][T14298] EXT4-fs error (device loop5): ext4_get_first_dir_block:3548: inode #12: comm syz.5.3981: directory missing '.' [ 112.783796][T14305] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3984'. [ 112.806065][T14305] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3984'. [ 112.961585][T14319] Injecting memory failure for pfn 0x1228f5 at process virtual address 0x20000000 [ 112.986032][T14319] Memory failure: 0x1228f5: Sending SIGBUS to syz.5.3991:14319 due to hardware memory corruption [ 112.987129][T14319] Memory failure: 0x1228f5: recovery action for dirty LRU page: Recovered [ 113.293813][T14366] i2c i2c-0: new_device: Instantiated device wcd9390-usbss at 0x42 [ 113.363748][T14377] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4019'. [ 113.372549][T14378] vhci_hcd vhci_hcd.0: failed to lookup sock [ 113.432528][T14387] loop0: detected capacity change from 0 to 512 [ 113.438094][T14387] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 113.464527][T14387] EXT4-fs (loop0): 1 truncate cleaned up [ 113.465361][T14392] loop5: detected capacity change from 0 to 512 [ 113.465694][T14392] EXT4-fs: Ignoring removed oldalloc option [ 113.470899][T14392] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 113.596386][ T4725] Bluetooth: hci0: command tx timeout [ 113.723347][T13990] kernel write not supported for file /ppp (pid: 13990 comm: kworker/1:7) [ 113.753979][T14425] loop0: detected capacity change from 0 to 4096 [ 113.765637][T14428] loop5: detected capacity change from 0 to 4096 [ 113.794621][T14434] loop7: detected capacity change from 0 to 2048 [ 113.797662][ T1453] Bluetooth: hci3: Frame reassembly failed (-84) [ 113.805909][T14430] Bluetooth: hci3: Frame reassembly failed (-84) [ 113.825200][T14434] fs-verity (loop7, inode 13): Unsupported log_blocksize: 14 [ 113.972706][T14443] loop0: detected capacity change from 0 to 128 [ 113.990179][T14443] fscrypt (loop0, inode 12): Unsupported encryption flags (0x7b) [ 114.192446][T14446] can0: slcan on ttyS3. [ 114.767853][T14446] can0 (unregistered): slcan off ttyS3. [ 114.922379][T14482] loop5: detected capacity change from 0 to 512 [ 114.932531][T14482] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 114.932558][T14482] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 114.932671][T14482] EXT4-fs (loop5): orphan cleanup on readonly fs [ 114.943877][T14482] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #13: comm syz.5.4059: iget: bad i_size value: 12154761577498 [ 114.943920][T14482] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 114.946076][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 114.946090][ C0] EXT4-fs (loop5): initial error at time 114: ext4_orphan_get:1399: inode 13 [ 114.946112][ C0] EXT4-fs (loop5): last error at time 114: ext4_orphan_get:1399: inode 13 [ 114.948788][T14482] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.4059: couldn't read orphan inode 13 (err -117) [ 114.948805][T14482] loop5: lost filesystem error report for type 5 error -117 [ 114.980916][T14482] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.4059: dx entry: limit 65535 != root limit 120 [ 114.984802][T14482] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.4059: Corrupt directory, running e2fsck is recommended [ 115.042333][T14495] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4065'. [ 115.495165][T14559] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4086'. [ 115.632412][T14570] EXT4-fs: inline encryption not supported [ 115.633978][T14570] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 115.639935][T14570] EXT4-fs (loop0): 1 truncate cleaned up [ 115.709587][T14577] netlink: 'syz.0.4094': attribute type 39 has an invalid length. [ 115.835909][ T50] Bluetooth: hci3: command 0x1003 tx timeout [ 115.835953][ T4725] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 115.910721][T14596] binder: 14594:14596 cannot find target node [ 115.910760][T14596] binder: 14594:14596 transaction async to 0:0 failed 7/29189/-22, code 0 size 0-0 line 3252 [ 115.934614][T14599] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.4104: corrupted in-inode xattr: invalid ea_ino [ 115.934653][T14599] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 115.934771][T14599] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.4104: couldn't read orphan inode 15 (err -117) [ 115.934784][T14599] loop0: lost filesystem error report for type 5 error -117 [ 115.947360][T14599] EXT4-fs warning (device loop0): ext4_empty_dir:3094: inode #2: comm syz.0.4104: directory missing '.' [ 116.086268][T14618] bond1 (unregistering): Released all slaves [ 116.212745][T14635] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 116.229261][T14638] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4122'. [ 116.229293][T14638] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 116.335943][T14654] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4130'. [ 116.335986][T14654] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4130'. [ 116.373946][T14658] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 116.374073][T14658] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 116.467275][T14673] dyndbg: expected <4096 bytes into control [ 116.626826][ T4693] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 116.701968][T14709] dummy_hcd dummy_hcd.0: remove, state 1 [ 116.702094][T14709] usb usb1: USB disconnect, device number 1 [ 116.716081][ T4693] usb usb1-port1: attempt power cycle [ 116.748990][T14712] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.752128][T14709] dummy_hcd dummy_hcd.0: stopped [ 116.755634][T14709] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 116.843980][T14720] netlink: 'syz.1.4157': attribute type 1 has an invalid length. [ 116.891884][T14724] netlink: 'syz.8.4159': attribute type 1 has an invalid length. [ 117.090080][T14754] __nla_validate_parse: 3 callbacks suppressed [ 117.090120][T14754] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4175'. [ 117.100251][T14756] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.104291][T14756] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 117.108308][T14756] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.4176: invalid indirect mapped block 256 (level 1) [ 117.117229][T14756] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 117.120889][T14756] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.4176: invalid indirect mapped block 2683928664 (level 1) [ 117.125742][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 117.125769][ C0] EXT4-fs (loop7): initial error at time 117: ext4_free_branches:1023: inode 13 [ 117.125807][ C0] EXT4-fs (loop7): last error at time 117: ext4_free_branches:1023: inode 13 [ 117.130745][T14756] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 117.131517][T14756] EXT4-fs (loop7): 1 truncate cleaned up [ 117.161208][T14756] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.4176: Invalid block bitmap block 3 in block_group 0 [ 117.163935][T14756] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 117.167528][T14756] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.4176: invalid indirect mapped block 1536 (level 1) [ 117.189101][T14765] netlink: 'syz.5.4180': attribute type 2 has an invalid length. [ 117.329421][T14783] ipvlan2: entered promiscuous mode [ 117.330796][T14783] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 117.533561][T14803] set_capacity_and_notify: 7 callbacks suppressed [ 117.533602][T14803] loop7: detected capacity change from 0 to 4096 [ 117.540141][T14803] EXT4-fs: inline encryption not supported [ 117.545485][T14803] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 117.545536][T14803] EXT4-fs (loop7): Test dummy encryption mode enabled [ 117.548891][T14803] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0002] [ 117.548940][T14803] System zones: 0-5 [ 117.598208][T14817] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4203'. [ 117.682505][T14827] netlink: 172 bytes leftover after parsing attributes in process `syz.5.4209'. [ 117.853569][T14844] netlink: 148 bytes leftover after parsing attributes in process `syz.7.4217'. [ 117.933666][T14848] netlink: 'syz.7.4219': attribute type 2 has an invalid length. [ 117.962458][T14852] loop1: detected capacity change from 0 to 256 [ 117.971154][T14852] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 117.993621][T14854] loop7: detected capacity change from 0 to 128 [ 118.061826][T14860] loop1: detected capacity change from 0 to 512 [ 118.139209][T14860] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4225: bg 0: block 217: padding at end of block bitmap is not set [ 118.145609][T14860] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 118.265572][T14835] syz.5.4213 (14835): drop_caches: 2 [ 118.462929][T14896] loop1: detected capacity change from 0 to 512 [ 118.691167][T14918] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 119.014752][T14956] loop1: detected capacity change from 0 to 256 [ 119.131555][T14624] Unable to handle kernel paging request at virtual address dfff800000000000 [ 119.131576][T14624] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 119.131583][T14624] Mem abort info: [ 119.131585][T14624] ESR = 0x0000000096000005 [ 119.131589][T14624] EC = 0x25: DABT (current EL), IL = 32 bits [ 119.131594][T14624] SET = 0, FnV = 0 [ 119.131598][T14624] EA = 0, S1PTW = 0 [ 119.131601][T14624] FSC = 0x05: level 1 translation fault [ 119.131605][T14624] Data abort info: [ 119.131607][T14624] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 119.131611][T14624] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 119.131615][T14624] GCS = 0, Overlay = 0, DirtyBit = 0 [ 119.131620][T14624] [dfff800000000000] address between user and kernel address ranges [ 119.131700][T14624] Internal error: Oops: 0000000096000005 [#1] SMP [ 119.145563][T14624] Modules linked in: [ 119.146242][T14624] CPU: 0 UID: 0 PID: 14624 Comm: syz.0.4115 Tainted: G L syzkaller #0 PREEMPT [ 119.148038][T14624] Tainted: [L]=SOFTLOCKUP [ 119.148789][T14624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 119.150512][T14624] pstate: 834000c5 (Nzcv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 119.151931][T14624] pc : set_link_state+0x38/0xcec [ 119.152810][T14624] lr : set_link_state+0x34/0xcec [ 119.153729][T14624] sp : ffff800093fb7480 [ 119.154485][T14624] x29: ffff800093fb74a0 x28: dfff800000000000 x27: 0000000000008002 [ 119.155936][T14624] x26: 1fffe00018e08989 x25: dfff800000000000 x24: dfff800000000000 [ 119.157348][T14624] x23: 0000000000000000 x22: 0000000000000000 x21: ffff0000c704529a [ 119.158750][T14624] x20: 0000000000000000 x19: 0000000000000000 x18: 1fffe00035bc5428 [ 119.160168][T14624] x17: 0000000000000003 x16: ffff800088b07000 x15: ffff800080307a8c [ 119.161618][T14624] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000004 [ 119.163138][T14624] x11: ffff7000127f6e84 x10: ffff7000127f6e84 x9 : 0000000000000000 [ 119.164448][T14977] loop7: detected capacity change from 0 to 256 [ 119.165545][T14624] x8 : 0000000000000000 x7 : ffff8000835b7d00 x6 : 0000000000000000 [ 119.166924][T14624] x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff8000835b7d10 [ 119.168360][T14624] x2 : 0000000000000000 x1 : ffff0000cc810000 x0 : 0000000000000000 [ 119.169753][T14624] Call trace: [ 119.170328][T14624] set_link_state+0x38/0xcec (P) [ 119.171201][T14624] dummy_pullup+0xd8/0x12c [ 119.171983][T14624] usb_gadget_disconnect_locked+0xf8/0x60c [ 119.173024][T14624] gadget_unbind_driver+0xa0/0x790 [ 119.173915][T14624] device_remove+0xc4/0x134 [ 119.174718][T14624] device_release_driver_internal+0x124/0x20c [ 119.175766][T14624] driver_detach+0x124/0x1b4 [ 119.176578][T14624] bus_remove_driver+0x124/0x22c [ 119.177482][T14624] driver_unregister+0x78/0xac [ 119.178280][T14624] usb_gadget_unregister_driver+0x50/0x78 [ 119.179258][T14624] raw_release+0xc4/0x290 [ 119.180016][T14624] __fput+0x338/0x74c [ 119.180701][T14624] ____fput+0x20/0x30 [ 119.181372][T14624] task_work_run+0x1cc/0x25c [ 119.182148][T14624] do_exit+0x58c/0x1a74 [ 119.182861][T14624] do_group_exit+0x198/0x238 [ 119.183621][T14624] get_signal+0xfb0/0x1094 [ 119.184372][T14624] arch_do_signal_or_restart+0x288/0x444c [ 119.185357][T14624] exit_to_user_mode_loop+0x70/0x17c [ 119.186233][T14624] el0_svc+0x18c/0x260 [ 119.186907][T14624] el0t_64_sync_handler+0x48/0x148 [ 119.187780][T14624] el0t_64_sync+0x198/0x19c [ 119.188533][T14624] Code: aa0003f4 f2fbfff9 97427a42 d343fe88 (38796908) [ 119.189718][T14624] ---[ end trace 0000000000000000 ]--- [ 119.487453][T14624] Kernel panic - not syncing: Oops: Fatal exception [ 119.488511][T14624] SMP: stopping secondary CPUs [ 119.489309][T14624] Kernel Offset: disabled [ 119.489984][T14624] CPU features: 0x14000000,003c0008,27020501,5427fea7 [ 119.491101][T14624] Memory Limit: none [ 119.809441][T14624] Rebooting in 86400 seconds..