last executing test programs: 4m24.246220526s ago: executing program 32 (id=112): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 3m37.609259191s ago: executing program 33 (id=541): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002500)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000240)='I', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)="ab09e3af", 0x4}], 0x1, &(0x7f0000000980)=ANY=[@ANYBLOB="140000000000000029000000340000000700000000000000980000000000000029000000390000002b1001bc676ce6dbfb1fc40a0000000000000000000000bbff010000000000000000000000000001fc020000000000000000000000000000200100000000000000000000000000012001000000000000000000000000000020010000000000000000000000000000fc000000000000000000000000000000fe80000000000000000000000000003614"], 0xc8}}], 0x2, 0x8010) shutdown(r0, 0x1) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) 3m25.844698949s ago: executing program 1 (id=612): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000000)={'ip_vti0\x00'}) 3m25.406806824s ago: executing program 1 (id=619): syz_mount_image$reiserfs(&(0x7f0000000200), &(0x7f0000000580)='./file1\x00', 0x8488, &(0x7f00000005c0), 0xfe, 0x1101, &(0x7f0000001640)="$eJzs2T+LE0EYB+Df7MZ/VWSvXwQtLOS4I36BKxTSWtuIXOVVl0rx4/hx9AqxP67X4sB+ZU02UQkEkqgcPA8s8+7LO7vvlDMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I2SryU5qJJmyFVJStK2F9OrJO2Qv/+xrlLy4nQ6e3Y+eT5LUv8sL/eGkpKkOX54t5k0k+a4eXpw8ujT7O27N6/Ozk7PlzVtLq/3v5Sy6AcAAAD4Xbezz//5/wAAAMAmeztIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhSN17FzRBUSUrSthfTqyTtmnm3/lF/AAAAwO5Kqrwcr8vPjwFWnuTLuCzz/fi99PFRPqyZv1G1fc8AAABww3V3FsGv9+vl9mo//jij5da5zz3IKIeH8/fFkG8nSZ3k6I+PX16/fz08pav/9loAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAHO3AsAAAAACDM3zqNjg0AAAAAAAAAAAAAAAAAAGCvAAAA///e69c/") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) pwritev2(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="15", 0x1}], 0x1, 0x800fff, 0xc, 0x4) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 3m23.93726262s ago: executing program 1 (id=628): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0x48, [0x0, 0x0, 0x0, 0x7, 0x1, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x10002, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0xff, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0x296, 0x1, 0x0, 0x0, 0x0, 0x2000, 0xfa, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x4000000, 0x0, 0x5, 0x10001, 0x80, 0x8000, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200, 0x7, 0xfffffffc, 0xffffffff, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x9, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0xfffffffd, 0x4000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80002, 0x0, 0xfffffffd, 0xfffffffc, 0x8, 0x400000, 0x0, 0x2aa6, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0xb, 0xffffffff, 0x4000000, 0x0, 0x1, 0x4, 0x1000, 0x80, 0x0, 0x400, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x2, 0xfffffffc, 0x0, 0x8eeb, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0xb9f8, 0x6, 0x0, 0x1000, 0xe, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfff, 0x4000006, 0x0, 0x0, 0x0, 0x9, 0xc1], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x40, 0x0, 0x0, 0xbd, 0x0, 0xff, 0x0, 0x0, 0x1, 0x2, 0x0, 0x2, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cb9, 0xcaa, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x7ff, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 3m23.369110546s ago: executing program 1 (id=633): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$fuse(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x8814a0, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) mknod(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x0) 3m22.447687005s ago: executing program 1 (id=641): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x4, 0x0, 0x0, 0x6}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f000001b580)=[{&(0x7f000001a400)=""/4082, 0xff2}], 0x1, 0x7, 0xb) 3m17.695653907s ago: executing program 1 (id=661): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x10, 0x572, 0x8000, 0x9, "ff000d00009a468e0cd912098d00"}) r1 = syz_open_pts(r0, 0x8000) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000200)={0xa26d, 0x81, 0x8, 0xb33f, 0xa, "6c06002004dc17a8"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x6) 3m17.362303071s ago: executing program 34 (id=661): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x10, 0x572, 0x8000, 0x9, "ff000d00009a468e0cd912098d00"}) r1 = syz_open_pts(r0, 0x8000) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000200)={0xa26d, 0x81, 0x8, 0xb33f, 0xa, "6c06002004dc17a8"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x6) 2m24.575603833s ago: executing program 3 (id=1109): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000023c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002400)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f0000000700)={0x4c, r1, 0xd1d, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x400}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x8898}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) 2m24.404596285s ago: executing program 3 (id=1110): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@uuid_off}]}) r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 2m24.167286877s ago: executing program 3 (id=1114): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xfffffff6, @private0, 0x9}]}, &(0x7f0000000080)=0x10) 2m22.541697545s ago: executing program 3 (id=1120): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x4000, &(0x7f0000000400)={[{@errors_remount}, {@nodelalloc}]}, 0x1, 0x477, &(0x7f0000000980)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x0, 0x0, &(0x7f0000000540)) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000480)=ANY=[], 0x1, 0x0, 0x0) 2m21.739499223s ago: executing program 3 (id=1123): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 2m17.051692984s ago: executing program 3 (id=1152): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xefff, @dev={0xac, 0x14, 0x14, 0x16}}}, 0x1e) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x24, @loopback}}, 0x1e) 2m16.889946936s ago: executing program 35 (id=1152): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xefff, @dev={0xac, 0x14, 0x14, 0x16}}}, 0x1e) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x24, @loopback}}, 0x1e) 2m2.156890656s ago: executing program 7 (id=1263): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_macvtap\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0xc000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x11, 0x45, 'ib_multicast\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 2m2.065992427s ago: executing program 7 (id=1264): mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) creat(0x0, 0x107) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000140)={0x2a, 0x4, 0x0, {0x1, 0xffffffffffffffff, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) 2m1.126521317s ago: executing program 7 (id=1275): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m0.914716949s ago: executing program 7 (id=1289): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 2m0.772745101s ago: executing program 7 (id=1281): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") truncate(&(0x7f0000000200)='./file2\x00', 0x63fc) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000300)={0x0, {}, 0x0, {}, 0x9, 0x0, 0x200000, 0x9, "22536af39b7c02b753c2acf8852d3c3a9a6c2f359e9ba7d94d93b581061383374a2f79470700000800", "0410b161aec02400cd4b97afd9c4456c9ecf8500", [0x3, 0x9]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x80) 1m57.651929454s ago: executing program 7 (id=1296): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000b80), 0x2200005, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}, {@redirect_dir_nofollow}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f0000008ec0)={0x2020}, 0x2020) 1m57.445947307s ago: executing program 36 (id=1296): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000b80), 0x2200005, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}, {@redirect_dir_nofollow}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f0000008ec0)={0x2020}, 0x2020) 1m39.450181642s ago: executing program 8 (id=1426): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x30, r1, 0x1, 0x80000000, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x72cc}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0xd132}]}]}, 0x30}}, 0x0) 1m39.316682393s ago: executing program 8 (id=1429): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2, 0x805, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0xd96b}, 0x28) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r2, 0x7}, &(0x7f0000000080)=0x8) 1m39.082031536s ago: executing program 8 (id=1432): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a34000000060a090400000000000000000200ffff0900020073797a32000000000900010073797a30000000000700074050111e0014000000110001"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 1m38.910086578s ago: executing program 8 (id=1435): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x8b141a, 0x0) syz_clone(0x8821000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m38.65425971s ago: executing program 8 (id=1439): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f00000008c0)={[{@nodots}, {@fat=@fmask={'fmask', 0x3d, 0xdbd}}, {@dots}, {@fat=@flush}, {@nodots}, {@nodots}, {@fat=@nfs_stale_rw}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {}, {@nodots}, {@fat=@gid}, {@fat=@quiet}, {@fat=@tz_utc}, {@nodots}, {@nodots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x7da5}}, {@nodots}, {@nodots}, {@fat=@nfs_stale_rw}, {@dots}], [{@fowner_gt}, {@smackfsfloor={'smackfsfloor', 0x3d, 'flush'}}, {@obj_type={'obj_type', 0x3d, 'fmask'}}, {@dont_appraise}, {@dont_appraise}, {@dont_measure}]}, 0x1, 0x1fe, &(0x7f0000002380)="$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") pipe2$9p(0x0, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) 1m36.89166438s ago: executing program 8 (id=1452): syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000004c0)=ANY=[], 0x3, 0x153e, &(0x7f0000001f40)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) vmsplice(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x100d4c2, 0x0, 0xfc, 0x0, 0x0) 1m36.720425301s ago: executing program 37 (id=1452): syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000004c0)=ANY=[], 0x3, 0x153e, &(0x7f0000001f40)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) vmsplice(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x100d4c2, 0x0, 0xfc, 0x0, 0x0) 47.782469762s ago: executing program 9 (id=1617): unshare(0x26020400) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fsmount(r1, 0x0, 0x5) 47.579236294s ago: executing program 9 (id=1620): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x1, 0x7c, 0x1f, 0x0, 0x83}) read$midi(r0, 0x0, 0x3b) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) 47.216552538s ago: executing program 9 (id=1624): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) 46.951353311s ago: executing program 9 (id=1627): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$fuse(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x8814a0, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) mknod(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x0) 46.003624421s ago: executing program 9 (id=1644): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="40274000000005edaeffffffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 42.44423237s ago: executing program 9 (id=1645): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) 42.134089913s ago: executing program 38 (id=1645): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) 6.43439819s ago: executing program 6 (id=1868): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, r1, 0x1, 0x70bd27, 0x2, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x90}]}, 0x28}, 0x1, 0x0, 0x0, 0x144}, 0x800) 5.47556762s ago: executing program 4 (id=1878): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000002000)='./file1\x00', 0x2000410, &(0x7f0000002100)=ANY=[], 0x1, 0x5573, &(0x7f000000b500)="$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") syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setuid(0xee01) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) 5.222572773s ago: executing program 6 (id=1881): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9, 0x0, 0xffffffffffffffff, 0x8000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000003000000040000000800000001000000", @ANYRES32=r0], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) close(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) 4.921215526s ago: executing program 6 (id=1885): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000002600)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) 4.756743358s ago: executing program 6 (id=1886): syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c830102030109022900010000000009042900000202010005240200000524"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 3.345287034s ago: executing program 4 (id=1893): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x5, &(0x7f0000000180)=0x0) io_submit(r2, 0x3, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x4, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4, r1, 0x0, 0x0, 0x7ff}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xf, r0, 0x0, 0x0, 0x1d689440}]) 3.262753104s ago: executing program 2 (id=1895): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x8080000, 0x1d000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x8000000, 0x3000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0xeeee8000, 0x12000}) 3.020732137s ago: executing program 2 (id=1897): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x8d0, &(0x7f0000000080)=ANY=[], 0x1, 0x26c, &(0x7f00000002c0)="$eJzs3cGKUlEYB/DPq6OOm2YdLS60aTVUbyBhEAmB4aJWCdZmJgJnY618jJ6hR+oxXM3OmLmXnHEmsdA5Off3A/Hj/D34nc09Cufqh0efT8Zfzj4tfn6PdpZHI2IW5xFHkUU9CrXyObusm3HVLACAfTMYjLqpe2CLajeHJpPu6CAiWjeS4Y+7aQoAAAAAAAAAAIBtu3b+v+38PwBUgfP/999k0h11ys9v1zn/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKRzvlg8WKx5pO4PANi+i/0/s/8DQKX4/g8A1bPZ/p+lbhMA2KK3796/7mbRG+R5O2JRK0bns+mwqF6+6vee5peay1nz6XR4UNb93rMiz1fzTjn/+a15M548LvKL7MWb/kreivFOVw4AAAAAAAAAAAAAAAAAAAD/j+P8t6Pl6Hw6HdaL/PhPeVFd+X2Alfv3G/GwcWfLAAAAAAAAAAAAAAAAAAAAgL129vXbyej09ONk4+Lwb16ctGhGRDky7kQk72d/isP4h1nt2HFjrYhdv0W1ilpjzRUg9ZUJAAAAAAAAAAAAAAAAAACqZ3nTb+pOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACCd5f//b1qsm1WP22alXiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQDb8CAAD//5qUhGI=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x189800, 0x9b) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x2000008e) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000000c0)) 2.653803651s ago: executing program 2 (id=1900): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x81, 0xfffff00c}, {0x6, 0x0, 0x5, 0x12e}]}, 0x10) syz_emit_ethernet(0x16, &(0x7f00000006c0)={@local, @link_local, @void, {@llc_tr={0x11, {@snap={0xab, 0x0, ' ', "a0b95d", 0x88a8}}}}}, 0x0) 2.484416503s ago: executing program 0 (id=1901): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003101a08, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETGROUP(r1, 0x400454ce, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.344189965s ago: executing program 2 (id=1903): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file7\x00', 0x14444, &(0x7f0000000200)=ANY=[@ANYRES16=0x0], 0xfe, 0xc22, &(0x7f00000002c0)="$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") writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') 2.174885466s ago: executing program 4 (id=1905): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x12c, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x10e, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1ff}, @val={0x5, 0xa5, {0x5, 0x97, 0x5, "840713d363c6724d98bf35001c09bfc3ef576ef4cbdedd44f1719d86e7202598ad5ab2b4e5dff62ed61751909b8422ef7be7fa9aeee03cce1881434df3bc53402458604b55890de2298e22ae5eb55d3e14358d8172d3caffea4c3165a9936a26aa4560071601df38cfb687a86ed61c704879c02c575dcc5f792ca84bd70fc9a24035370ffe3e5d14541c8831eed97732a996891591391a05b51387596e4634cf9ec3"}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0x0, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x12c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.949096309s ago: executing program 4 (id=1906): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x80, 0x0, @mcast2, 0x9}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x200, 0x2, @dev, 0x3}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) 1.84193798s ago: executing program 2 (id=1908): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$eJzs3c9vI1cdAPDvTH65222zCz1ABewChQWt1t5421XVS8sFhKpKiIoD4rANiTcKseMQO6UJkUj/BpBA4gR/AgckDkg9ceDGEYkDQpQDUoEItEHiYDRjJ+smNmtqx+7Gn480O/Pmzcz3PWdn3vNz4hfA1LoeEQcRMR8Rb0TEYmd/0lnilfaSHffgcH/l6HB/JYlW6/W/J3l+ti+6zsk82blmISK+/pWIbydn4zZ29zaWq9XKdiddata2So3dvVvrteW1ylpls1y+u3T39ot3XiiPrK7Xar9478vrr37j17/65Lu/O/ji97NiXe7kdddjlNpVnzuJk5mNiFfPI9gEzHTW8xMuBx9MGhEfiYjP5Pf/Yszk/zsBgIus1VqM1mJ3GgC46NJ8DCxJixGRpp1OQLE9hvdMXEqr9Ubz5v36zuZqe6zsSsyl99erldtXF/7w3fzguSRLL+V5eX6eLp9K34mIqxHxo4Un8nRxpV5dnUyXBwCm3pPd7X9E/GshTYvFgU7t8akeAPDYKEy6AADA2Gn/AWD6aP8BYPoM0P53Puw/OPeyAADj4f0/AEwf7T8ATB/tPwBMla+99lq2tI4633+9+ubuzkb9zVurlcZGsbazUlypb28V1+r1tfw7e2qPul61Xt9aej523io1K41mqbG7d69W39ls3su/1/teZW4stQIA/per1975fRIRBy89kS/RNZeDthoutnSERwGPl5lhTtZBgMea2b5geg3UhOedhN+ee1mAyej5Zd6Fnpvv95P/I4jfM4IPlRsfH3z83xzPcLEY2Yfp9cHG/18eeTmA8TP+D9Or1UpOz/k/f5IFAFxIQ/wKX+sHo+qEABP1qMm8R/L5PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwwlyPiO5GkxXwu8DT7Ny0WI56KiCsxl9xfr1ZuR8TTcS0i5hay9NKkCw0ADCn9a9KZ/+vG4nOXT+fOJ/9eyNcR8b2fvv7jt5abze2lbP8/TvYvHE8fVn543hDzCgIAg/vzIAfl7Xe5s+56I//gcH/leDnHMp7x3pdOJh9dOTrcz5d2zmy0Wq1WRCHvS1z6ZxKznXMKEfFsRMyMIP7B2xHxsV71T/KxkSudmU+740cn9lNjjZ++L36a57XX2cv30RGUBabNO9nz55Ve918a1/N17/u/kD+hhpc//woRx8++o674s51IMz3iZ/f89UFjPP+br57Z2Vps570d8exsr/jJSfykT/znBoz/x0986ocv98lr/SziRvSO3x2r1KxtlRq7e7fWa8trlbXKZrl8d+nu7RfvvFAu5WPUpeOR6rP+9tLNp/uVLav/pT7xCz3rP39y7ucGrP/P//PGtz79MLlwOv4XPtv75/9Mz/htWZv4+QHjL1/6Zd/pu7P4q33q/6if/80B47/7l73VAQ8FAMagsbu3sVytVraH2sjehY7iOmc2siIOdvBxd3G4oH+KfGNEL0ufjawzNsjBc+f1qp77xuxJX3G0V/5mdsUxVycdeS2G2ngwrliTeyYB4/Hwpp90SQAAAAAAAAAAAAAAgH7G8adLk64jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9d/AwAA//8+JMPM") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x940650, 0x0, 0x1, 0x0, &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) 1.79286237s ago: executing program 0 (id=1909): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x40}}, 0x0) 1.712758481s ago: executing program 5 (id=1910): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) readv(r0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)=""/248, 0xf8}], 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) 1.664961932s ago: executing program 4 (id=1911): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$tipc(0x1e, 0x2, 0x0) capset(&(0x7f0000000740)={0x20071026}, &(0x7f0000000780)={0x0, 0x4, 0x0, 0x400, 0x4}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000000c0)={0x0, 0x1, 0x9, 0xd, 0xc0, 0x0}) 1.535637603s ago: executing program 6 (id=1912): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000280)='./file2\x00', 0x10, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRESDEC], 0x1, 0x25c, &(0x7f0000000a00)="$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") openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_create_resource$binfmt(0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000002000000300012800b00010067656e65766500002000028014000700ff", @ANYRES16=r0], 0x64}}, 0x2000000) 1.450130304s ago: executing program 5 (id=1913): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) sendmmsg$unix(r2, &(0x7f0000006b00)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000000c0)="55e01103f1", 0x5}, {&(0x7f0000000100)="9063af24cdb0b0c7215aaf425aa3b0a99c6e0359240d5bca86686479b2985328e9aac94d688822be37c193ddedb40decb224702f7f6e33d7401c8c3cad17c2fff8acba41908bf33494e6dc79c27e32606e74b91a3bb50e8c21480f86fe14d694e8272e0fc3b773d1e27570a67bee05236cb932cdc0b5b62d558375d8", 0x7c}], 0x2, 0x0, 0x0, 0x48}}], 0x1, 0x2014080) 1.430801684s ago: executing program 4 (id=1914): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000004c0)=[{0x6, 0x4, 0xa4, 0x7fff0003}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.341037325s ago: executing program 0 (id=1915): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x3, @empty, 0x57}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x8, 0x4) write(r0, 0x0, 0xfffffe90) recvmmsg(r0, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2000, 0x0) 1.197080987s ago: executing program 6 (id=1916): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x808000, &(0x7f0000000040)={[{@dax_never}]}, 0x1, 0x97e9, &(0x7f000001c700)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x11) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0xffffffffffffffff, 0x0) 1.166867117s ago: executing program 0 (id=1917): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x84, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x3, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x13, 0xf, [@random={0xbf, 0xd, "579c524a1c5751d4d58ec71c9b"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 1.158004647s ago: executing program 5 (id=1918): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000f, 0x38011, r1, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x84e, &(0x7f0000001a80)=ANY=[@ANYRES64], 0x1, 0x152d, &(0x7f00000001c0)="$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") ioctl$FS_IOC_SETFLAGS(r0, 0x125f, 0x0) 669.823383ms ago: executing program 2 (id=1919): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x78d, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/174, 0xae}], 0x1) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) 607.738573ms ago: executing program 0 (id=1920): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000006000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000005000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x121942, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000000c0)=r0) 466.690145ms ago: executing program 5 (id=1921): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000080), 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000000100)={0xa, 0x4001, 0xfffe, @loopback, 0x4}, 0x1c) 243.594617ms ago: executing program 5 (id=1922): set_mempolicy(0x4005, &(0x7f0000000300)=0x4, 0x7) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000680001ed"], 0x2c}}, 0x4000) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) 152.759258ms ago: executing program 5 (id=1923): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x4e23, 0xa, @mcast2, 0x7}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000440), 0x1000a) sendfile(r0, r1, &(0x7f0000000080)=0x5, 0xffff) 0s ago: executing program 0 (id=1924): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x80, 0x0}, 0x3404bf60) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @local}) kernel console output (not intermixed with test programs): newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.615309][ T8186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.670667][ T8186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.699025][ T8186] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.730164][ T8186] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.752074][ T8186] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.803850][ T8186] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.846323][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 219.909703][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 220.169126][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.189641][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.237207][ T7483] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 220.247931][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.276200][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.287060][ T6002] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 220.314324][ T7481] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 220.527020][ T6002] usb 3-1: Using ep0 maxpacket: 32 [ 220.568222][ T8330] loop6: detected capacity change from 0 to 256 [ 220.657162][ T6002] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 220.677071][ T6002] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 220.897923][ T6002] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 220.926889][ T6002] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.934968][ T6002] usb 3-1: Product: syz [ 220.971915][ T6002] usb 3-1: Manufacturer: syz [ 220.972613][ T8337] loop8: detected capacity change from 0 to 128 [ 221.006863][ T6002] usb 3-1: SerialNumber: syz [ 221.022204][ T6002] usb 3-1: config 0 descriptor?? [ 221.233781][ T6002] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 221.297441][ T7483] usb 3-1: Failed to submit usb control message: -71 [ 221.305484][ T7483] usb 3-1: unable to send the bmi data to the device: -71 [ 221.318852][ T6002] usb 3-1: USB disconnect, device number 16 [ 221.338122][ T8337] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 221.374117][ T8337] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 221.439888][ T7483] usb 3-1: unable to get target info from device [ 221.446300][ T7483] usb 3-1: could not get target info (-71) [ 221.503635][ T7483] usb 3-1: could not probe fw (-71) [ 221.556990][ T13] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 221.567340][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 221.806975][ T13] usb 6-1: Using ep0 maxpacket: 32 [ 221.927210][ T13] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.956083][ T13] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.031611][ T8358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1222'. [ 222.098490][ T13] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 222.125447][ T13] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 222.158486][ T13] usb 6-1: Product: syz [ 222.167013][ T13] usb 6-1: Manufacturer: syz [ 222.214184][ T8360] device erspan0 entered promiscuous mode [ 222.228324][ T13] hub 6-1:4.0: USB hub found [ 222.243298][ T8360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1223'. [ 222.278465][ T8360] device erspan0 left promiscuous mode [ 222.547224][ T13] hub 6-1:4.0: 1 port detected [ 222.668149][ T8372] loop2: detected capacity change from 0 to 256 [ 222.766987][ T13] hub 6-1:4.0: hub_hub_status failed (err = -71) [ 222.773410][ T13] hub 6-1:4.0: config failed, can't get hub status (err -71) [ 222.820218][ T8372] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e06c6e, utbl_chksum : 0xe619d30d) [ 222.868404][ T13] usb 6-1: USB disconnect, device number 13 [ 223.028633][ T8376] input: syz0 as /devices/virtual/input/input21 [ 223.397143][ T8337] loop_set_status: loop8 () has still dirty pages (nrpages=1) [ 224.633310][ T8407] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 224.662835][ T8406] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 224.756119][ T8406] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 225.188689][ T8421] loop6: detected capacity change from 0 to 512 [ 225.309906][ T8421] EXT4-fs (loop6): Test dummy encryption mode enabled [ 225.330580][ T8421] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 225.466605][ T8421] EXT4-fs error (device loop6): ext4_orphan_get:1432: comm syz.6.1247: bad orphan inode 131083 [ 225.511900][ T5995] kernel write not supported for file /snd/pcmC0D0p (pid: 5995 comm: kworker/0:9) [ 225.568274][ T8436] loop8: detected capacity change from 0 to 512 [ 225.585028][ T8421] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none. [ 225.733328][ T8440] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1255'. [ 225.746375][ T8436] EXT4-fs (loop8): Ignoring removed oldalloc option [ 225.887597][ T8436] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: comm syz.8.1252: inode #1: comm syz.8.1252: iget: illegal inode # [ 225.927703][ T8436] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.1252: error while reading EA inode 1 err=-117 [ 226.003761][ T8436] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: comm syz.8.1252: inode #1: comm syz.8.1252: iget: illegal inode # [ 226.043582][ T8436] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.1252: error while reading EA inode 1 err=-117 [ 226.124992][ T8436] EXT4-fs (loop8): 1 orphan inode deleted [ 226.131690][ T23] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 226.166304][ T8436] EXT4-fs (loop8): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,oldalloc,,errors=continue. Quota mode: writeback. [ 226.192398][ T23] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 226.230582][ T8443] loop6: detected capacity change from 0 to 2048 [ 226.393793][ T8443] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.909675][ T8452] loop8: detected capacity change from 0 to 8192 [ 227.651344][ T8461] siw: device registration error -23 [ 227.865205][ T8468] loop6: detected capacity change from 0 to 1024 [ 227.943681][ T8452] REISERFS (device loop8): found reiserfs format "3.6" with non-standard journal [ 227.992715][ T8452] REISERFS (device loop8): using ordered data mode [ 228.026933][ T26] audit: type=1800 audit(1777980708.202:142): pid=8468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1274" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 228.075025][ T8452] reiserfs: using flush barriers [ 228.081169][ T8468] hfsplus: b-tree write err: -5, ino 20 [ 228.146552][ T8472] hfsplus: b-tree write err: -5, ino 20 [ 228.152244][ T8452] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 228.265655][ T8452] REISERFS (device loop8): checking transaction log (loop8) [ 228.275151][ T154] hfsplus: b-tree write err: -5, ino 25 [ 228.289493][ T154] hfsplus: b-tree write err: -5, ino 4 [ 228.295473][ T154] hfsplus: b-tree write err: -5, ino 2 [ 228.342641][ T8452] REISERFS (device loop8): Using r5 hash to sort names [ 228.369227][ T8452] REISERFS warning (device loop8): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 228.422652][ T8452] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 228.534641][ T8452] REISERFS warning (device loop8): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 228.616029][ T8485] loop6: detected capacity change from 0 to 128 [ 228.647331][ T8486] REISERFS warning (device loop8): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 228.681299][ T8486] REISERFS warning (device loop8): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 228.701051][ T8488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1273'. [ 228.878345][ T8494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1277'. [ 229.364538][ T8500] loop2: detected capacity change from 0 to 4096 [ 229.793471][ T4191] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 229.800097][ T4191] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 230.367133][ T8498] loop6: detected capacity change from 0 to 64 [ 230.660681][ T8512] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1285'. [ 230.676614][ T8514] loop8: detected capacity change from 0 to 64 [ 230.683043][ T8512] bridge: RTM_NEWNEIGH with invalid ether address [ 230.728637][ T8512] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1285'. [ 230.804249][ T8512] bridge: RTM_NEWNEIGH with invalid ether address [ 230.811923][ T26] audit: type=1800 audit(1777980710.992:143): pid=8514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1279" name="file1" dev="loop8" ino=5 res=0 errno=0 [ 230.868022][ T26] audit: type=1800 audit(1777980710.992:144): pid=8514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1279" name="file1" dev="loop8" ino=5 res=0 errno=0 [ 231.164321][ T8528] loop2: detected capacity change from 0 to 128 [ 232.128517][ T8541] loop6: detected capacity change from 0 to 256 [ 232.173730][ T8541] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 232.201091][ T8541] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 232.377781][ T8541] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 232.971384][ T8559] vcan0 speed is unknown, defaulting to 1000 [ 233.147804][ T8571] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 233.624875][ T8559] chnl_net:caif_netlink_parms(): no params data found [ 233.745871][ T26] audit: type=1326 audit(1777980713.922:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.8.1317" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a209dbdd9 code=0x0 [ 233.849101][ T8559] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.865055][ T8559] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.885819][ T8559] device bridge_slave_0 entered promiscuous mode [ 233.896146][ T8559] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.904313][ T8559] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.913168][ T8559] device bridge_slave_1 entered promiscuous mode [ 233.943735][ T8559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.970108][ T8559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.062406][ T8559] team0: Port device team_slave_0 added [ 234.101853][ T8559] team0: Port device team_slave_1 added [ 234.165842][ T8559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.213440][ T8559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.275465][ T8559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.307903][ T8559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.319673][ T8559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.448986][ T8559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.630385][ T8559] device hsr_slave_0 entered promiscuous mode [ 234.645096][ T8603] loop8: detected capacity change from 0 to 64 [ 234.737167][ T8559] device hsr_slave_1 entered promiscuous mode [ 234.750345][ T8559] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.773477][ T8559] Cannot create hsr debugfs directory [ 234.926784][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 235.166662][ T8559] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 235.191106][ T8559] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 235.212148][ T8559] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 235.247197][ T8559] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 235.459714][ T8559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.528046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 235.540059][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 235.560586][ T8559] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.593740][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 235.620654][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 235.650270][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.657491][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.680540][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 235.698519][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 235.721879][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.729099][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.762789][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 235.809186][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 235.878081][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 235.899754][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 235.935703][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 235.987125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 236.030524][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 236.054107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 236.098357][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 236.127843][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 236.155937][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 236.179465][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 236.210840][ T8613] vcan0 speed is unknown, defaulting to 1000 [ 236.220314][ T8559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 236.577329][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 236.584972][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 236.694389][ T8559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.988924][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 237.259854][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 237.287378][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 237.417804][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 237.448675][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 237.506395][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 237.538254][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 237.574643][ T8559] device veth0_vlan entered promiscuous mode [ 237.635987][ T8559] device veth1_vlan entered promiscuous mode [ 237.678592][ T8648] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1338'. [ 237.736945][ T8648] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1338'. [ 237.762511][ T8648] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1338'. [ 237.794428][ T8648] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1338'. [ 237.907427][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 237.916126][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 237.951285][ T8559] device veth0_macvtap entered promiscuous mode [ 237.962592][ T8559] device veth1_macvtap entered promiscuous mode [ 238.017726][ T8559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.052355][ T8559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.078219][ T8559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.104136][ T8559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.136942][ T8559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.162626][ T8559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.191854][ T8559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.217824][ T8559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.243030][ T8559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.268731][ T8559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.286885][ T8559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.330262][ T8559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.349706][ T8559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.389892][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 238.405144][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 238.430763][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 238.462397][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 238.500055][ T8559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.518452][ T8559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.561242][ T8559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.571988][ T8559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.597142][ T8559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.622773][ T8559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.647548][ T8559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.666064][ T8559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.707885][ T8559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.718530][ T8559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.757680][ T8559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.802283][ T8559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.829193][ T8559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.839249][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 238.864857][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 238.906358][ T8559] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.935223][ T8559] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.952413][ T8559] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.988969][ T8559] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.079983][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 239.233229][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.285306][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.332511][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 239.357249][ T4499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.366299][ T4499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.380559][ T7483] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 240.001852][ T8674] loop8: detected capacity change from 0 to 128 [ 240.072169][ T8674] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 240.090788][ T8674] hpfs: filesystem error: improperly stopped [ 240.096900][ T8674] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 240.104744][ T8674] hpfs: You really don't want any checks? You are crazy... [ 240.167018][ T8674] hpfs: hpfs_map_sector(): read error [ 240.192019][ T8674] hpfs: code page support is disabled [ 240.248986][ T8674] hpfs: hpfs_map_4sectors(): unaligned read [ 240.273551][ T8674] hpfs: hpfs_map_4sectors(): unaligned read [ 240.280925][ T8674] hpfs: filesystem error: unable to find root dir [ 240.351051][ T8674] hpfs: hpfs_map_4sectors(): unaligned read [ 240.363013][ T8670] loop9: detected capacity change from 0 to 32768 [ 240.365202][ T8674] hpfs: hpfs_map_sector(): read error [ 240.584950][ T26] audit: type=1800 audit(1777980721.762:146): pid=8670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1345" name="file1" dev="loop9" ino=4 res=0 errno=0 [ 240.906607][ T8691] loop6: detected capacity change from 0 to 2048 [ 241.030452][ T8691] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 241.186663][ T5750] Bluetooth: hci1: command 0x0419 tx timeout [ 241.619885][ T8695] vcan0 speed is unknown, defaulting to 1000 [ 243.102606][ T8728] netlink: 240 bytes leftover after parsing attributes in process `syz.9.1369'. [ 243.432028][ T8738] Invalid argument reading file caps for ./file0 [ 244.009439][ T8732] loop8: detected capacity change from 0 to 32768 [ 244.053299][ T8732] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.1373 (8732) [ 244.153746][ T8732] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 244.216828][ T8732] BTRFS info (device loop8): setting nodatasum [ 244.262611][ T8732] BTRFS info (device loop8): force zlib compression, level 3 [ 244.299608][ T8732] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_LZO (0x8) [ 244.357229][ T8732] BTRFS info (device loop8): use lzo compression, level 0 [ 244.416594][ T8732] BTRFS info (device loop8): turning on flush-on-commit [ 244.445464][ T8732] BTRFS info (device loop8): enabling auto defrag [ 244.465541][ T8732] BTRFS info (device loop8): max_inline at 4096 [ 244.497042][ T8732] BTRFS info (device loop8): using free space tree [ 244.503630][ T8732] BTRFS info (device loop8): has skinny extents [ 244.907617][ T8732] BTRFS info (device loop8): enabling ssd optimizations [ 244.964025][ T8782] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1386'. [ 245.025319][ T26] audit: type=1800 audit(1777980726.202:147): pid=8732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1373" name="file1" dev="loop8" ino=260 res=0 errno=0 [ 245.046011][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.903494][ T5954] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop8 scanned by udevd (5954) [ 246.025919][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061d8c000: rx timeout, send abort [ 246.067152][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888061d8c000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 246.488016][ T6004] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 246.859505][ T6004] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 246.879117][ T6004] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.923817][ T6004] usb 6-1: config 0 descriptor?? [ 246.971753][ T6004] cp210x 6-1:0.0: cp210x converter detected [ 246.992913][ T8818] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 247.417084][ T6004] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 247.469665][ T6004] usb 6-1: cp210x converter now attached to ttyUSB0 [ 247.550703][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 247.582306][ T8829] Illegal XDP return value 2026290403, expect packet loss! [ 247.693297][ T6004] usb 6-1: USB disconnect, device number 14 [ 247.715667][ T6004] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 247.773967][ T6004] cp210x 6-1:0.0: device disconnected [ 247.946829][ T8837] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61) [ 248.108444][ T5995] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 248.205539][ T8846] loop2: detected capacity change from 0 to 512 [ 248.346948][ T5995] usb 10-1: Using ep0 maxpacket: 16 [ 248.377580][ T8846] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 248.489540][ T8846] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 248.586466][ T8846] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.1410: Invalid block bitmap block 0 in block_group 0 [ 248.647052][ T5995] usb 10-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 248.677769][ T5995] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.685925][ T5995] usb 10-1: Product: syz [ 248.696384][ T5995] usb 10-1: Manufacturer: syz [ 248.706367][ T8846] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 248.725519][ T5995] usb 10-1: SerialNumber: syz [ 248.749450][ T5995] usb 10-1: config 0 descriptor?? [ 248.797563][ T8846] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.1410: attempt to clear invalid blocks 983261 len 1 [ 248.840491][ T7479] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.888744][ T8846] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.1410: Invalid inode table block 0 in block_group 0 [ 248.917125][ T8846] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 249.027711][ T8846] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 249.069372][ T8846] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.1410: Invalid inode table block 0 in block_group 0 [ 249.143776][ T8846] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 249.196687][ T8846] EXT4-fs error (device loop2): ext4_truncate:4286: inode #11: comm syz.2.1410: mark_inode_dirty error [ 249.213044][ T8845] loop8: detected capacity change from 0 to 32768 [ 249.227495][ T5995] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 249.252377][ T5995] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 249.276926][ T8846] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 249.287402][ T5995] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 249.327965][ T5995] usb 10-1: media controller created [ 249.344590][ T8846] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.1410: Invalid inode table block 0 in block_group 0 [ 249.405653][ T5995] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 249.526828][ T8846] EXT4-fs (loop2): 1 truncate cleaned up [ 249.543228][ T5995] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 249.583930][ T8846] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none. [ 249.604594][ T5995] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 249.753606][ T5995] usb 10-1: USB disconnect, device number 2 [ 249.830726][ T8846] EXT4-fs (loop2): shut down requested (1) [ 249.850305][ T5995] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 250.269386][ T5995] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 250.513399][ T8892] sctp: [Deprecated]: syz.8.1429 (pid 8892) Use of struct sctp_assoc_value in delayed_ack socket option. [ 250.513399][ T8892] Use struct sctp_sack_info instead [ 250.647429][ T5995] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.699137][ T5995] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.740089][ T5995] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 250.786908][ T5995] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.798850][ T8882] loop2: detected capacity change from 0 to 32768 [ 250.834296][ T5995] usb 6-1: config 0 descriptor?? [ 250.837160][ T8902] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1434'. [ 250.909500][ T8902] netlink: 'syz.9.1434': attribute type 5 has an invalid length. [ 250.927084][ T8902] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1434'. [ 250.963221][ T8902] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.972898][ T8902] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.981682][ T8902] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.991523][ T8902] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.067103][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1434'. [ 251.137853][ T8904] netlink: 'syz.9.1434': attribute type 5 has an invalid length. [ 251.160765][ T8904] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1434'. [ 251.192668][ T8910] loop6: detected capacity change from 0 to 16 [ 251.341650][ T5995] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 251.367022][ T5995] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 251.387101][ T5995] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 251.394567][ T5995] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 251.446046][ T5995] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 251.469872][ T5995] playstation 0003:054C:0DF2.0017: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 251.606093][ T7479] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.608068][ T5995] playstation 0003:054C:0DF2.0017: Invalid reportID received, expected 9 got 0 [ 251.661975][ T5995] playstation 0003:054C:0DF2.0017: Failed to retrieve DualSense pairing info: -22 [ 251.691303][ T5995] playstation 0003:054C:0DF2.0017: Failed to get MAC address from DualSense [ 251.707362][ T8923] loop2: detected capacity change from 0 to 512 [ 251.721002][ T5995] playstation 0003:054C:0DF2.0017: Failed to create dualsense. [ 251.748780][ T5995] playstation: probe of 0003:054C:0DF2.0017 failed with error -22 [ 251.814602][ T5995] usb 6-1: USB disconnect, device number 15 [ 252.169350][ T8927] loop9: detected capacity change from 0 to 128 [ 252.213392][ T8927] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 252.241810][ T8927] hpfs: filesystem error: improperly stopped [ 252.248551][ T8927] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 252.256325][ T8927] hpfs: You really don't want any checks? You are crazy... [ 252.274099][ T8927] hpfs: hpfs_map_sector(): read error [ 252.286907][ T8927] hpfs: code page support is disabled [ 252.297376][ T8927] hpfs: hpfs_map_4sectors(): unaligned read [ 252.313813][ T8927] hpfs: hpfs_map_4sectors(): unaligned read [ 252.323588][ T8927] hpfs: filesystem error: unable to find root dir [ 252.406353][ T8927] hpfs: hpfs_map_4sectors(): unaligned read [ 252.525929][ T8910] erofs: (device loop6): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 252.904607][ T8923] EXT4-fs (loop2): Ignoring removed orlov option [ 252.916851][ T8923] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 252.978885][ T8923] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 253.009952][ T8923] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.1443: corrupted in-inode xattr [ 253.042223][ T8923] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.1443: couldn't read orphan inode 15 (err -117) [ 253.065855][ T8923] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,debug,noblock_validity,noload,nombcache,orlov,min_batch_time=0x0000000000000002,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 253.420691][ T8939] vcan0 speed is unknown, defaulting to 1000 [ 253.630054][ T8939] chnl_net:caif_netlink_parms(): no params data found [ 253.756434][ T8939] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.782073][ T8939] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.811561][ T8939] device bridge_slave_0 entered promiscuous mode [ 253.842315][ T8939] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.857266][ T8939] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.865963][ T8939] device bridge_slave_1 entered promiscuous mode [ 253.934774][ T8939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.969436][ T8939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.271665][ T8939] team0: Port device team_slave_0 added [ 254.376483][ T8956] fido_id[8956]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 254.380449][ T8958] loop2: detected capacity change from 0 to 128 [ 254.404281][ T8939] team0: Port device team_slave_1 added [ 254.440070][ T8939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.475952][ T8939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.510333][ T8939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.536100][ T8939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.563106][ T8939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.600174][ T8939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.629135][ T7479] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.667089][ T8958] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 254.679823][ T8958] System zones: 1-3, 19-19, 35-36 [ 254.713709][ T8958] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 254.747272][ T8939] device hsr_slave_0 entered promiscuous mode [ 254.756141][ T8939] device hsr_slave_1 entered promiscuous mode [ 254.766455][ T8958] ext4 filesystem being mounted at /266/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 254.799605][ T8939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.808784][ T8939] Cannot create hsr debugfs directory [ 254.887910][ T8958] EXT4-fs warning (device loop2): verify_group_input:147: Cannot add at group 131073 (only 1 groups) [ 255.343700][ T8971] IPv6: addrconf: prefix option has invalid lifetime [ 255.383290][ T5995] Bluetooth: hci2: command 0x0409 tx timeout [ 255.721668][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.730035][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.512451][ T9008] loop6: detected capacity change from 0 to 256 [ 256.836965][ T1107] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 257.086985][ T1107] usb 3-1: Using ep0 maxpacket: 32 [ 257.206999][ T1107] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 257.231857][ T1107] usb 3-1: config 0 has no interface number 0 [ 257.323998][ T9012] loop9: detected capacity change from 0 to 2048 [ 257.341291][ T7479] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.418137][ T1107] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 257.430639][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.439014][ T1107] usb 3-1: Product: syz [ 257.443218][ T1107] usb 3-1: Manufacturer: syz [ 257.448119][ T1107] usb 3-1: SerialNumber: syz [ 257.454897][ T1107] usb 3-1: config 0 descriptor?? [ 257.460787][ T5995] Bluetooth: hci2: command 0x041b tx timeout [ 257.498151][ T1107] smsc95xx v2.0.0 [ 257.753720][ T9008] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 257.777110][ T5995] Bluetooth: hci0: command 0x0406 tx timeout [ 257.937200][ T1107] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 257.953776][ T1107] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 258.447111][ T1107] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 258.464047][ T1107] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 258.491642][ T1107] usb 3-1: USB disconnect, device number 17 [ 258.782191][ T9012] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 259.263471][ T7479] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.395537][ T1107] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 259.424719][ T1107] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 259.510601][ T9040] loop9: detected capacity change from 0 to 4096 [ 259.537266][ T1107] Bluetooth: hci2: command 0x040f tx timeout [ 259.584390][ T9040] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 259.599822][ T9040] EXT4-fs (loop9): Test dummy encryption mode enabled [ 259.637912][ T9040] EXT4-fs (loop9): Ignoring removed orlov option [ 259.694772][ T9040] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,max_dir_size_kb=0x0000000000000009,nodelalloc,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 261.618565][ T1107] Bluetooth: hci2: command 0x0419 tx timeout [ 261.738003][ T9104] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1494'. [ 261.775816][ T9104] device gretap0 entered promiscuous mode [ 261.832330][ T9104] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1494'. [ 261.874557][ T9104] 0{X: renamed from gretap0 [ 261.893772][ T9104] device 30{X left promiscuous mode [ 261.935339][ T9104] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 262.143454][ T9120] loop2: detected capacity change from 0 to 512 [ 262.240339][ T9120] EXT4-fs (loop2): Ignoring removed nobh option [ 262.279732][ T9120] EXT4-fs (loop2): Ignoring removed orlov option [ 262.334232][ T9120] EXT4-fs error (device loop2): __ext4_iget:4919: inode #11: block 1: comm syz.2.1498: invalid block [ 262.397631][ T9120] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.1498: couldn't read orphan inode 11 (err -117) [ 262.452018][ T9120] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000000,nobh,max_dir_size_kb=0x0000000000000008,debug_want_extra_isize=0x0000000000000080,nogrpid,sysvgroups,orlov,grpquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 262.582291][ T9120] EXT4-fs (loop2): shut down requested (1) [ 263.153296][ T9143] loop6: detected capacity change from 0 to 512 [ 263.251389][ T9143] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1501: invalid indirect mapped block 4294967295 (level 1) [ 263.357325][ T9143] EXT4-fs (loop6): Remounting filesystem read-only [ 263.382036][ T9143] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1501: invalid indirect mapped block 4294967295 (level 1) [ 263.441629][ T9143] EXT4-fs (loop6): Remounting filesystem read-only [ 263.468711][ T9143] EXT4-fs (loop6): 2 truncates cleaned up [ 263.485662][ T7479] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.505707][ T9143] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpjquota=,errors=remount-ro,mb_optimize_scan=0x0000000000000001,auto_da_alloc=0x000000007fffffff,barrier=0x0000000000000000,. Quota mode: writeback. [ 264.137537][ T23] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 264.504972][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 264.645204][ T5743] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 264.916984][ T23] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 264.926123][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.953007][ T23] usb 3-1: Product: syz [ 264.969546][ T23] usb 3-1: Manufacturer: syz [ 264.974318][ T23] usb 3-1: SerialNumber: syz [ 265.003235][ T23] usb 3-1: config 0 descriptor?? [ 265.010981][ T5743] usb 10-1: Using ep0 maxpacket: 32 [ 265.173769][ T5743] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.200264][ T5743] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.236833][ T5743] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 265.262391][ T9195] netlink: 'syz.5.1514': attribute type 4 has an invalid length. [ 265.270430][ T5743] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.297871][ T5743] usb 10-1: config 0 descriptor?? [ 265.387111][ T9196] netlink: 'syz.5.1514': attribute type 17 has an invalid length. [ 265.468793][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 265.753746][ T23] peak_usb 3-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 265.847060][ T5743] savu 0003:1E7D:2D5A.0019: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.9-1/input0 [ 266.152136][ T5750] usb 10-1: USB disconnect, device number 3 [ 266.236422][ T9212] fido_id[9212]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 266.892670][ T9223] loop2: detected capacity change from 0 to 4096 [ 267.100473][ T9234] loop6: detected capacity change from 0 to 128 [ 267.417689][ T9234] EXT4-fs (loop6): mounted filesystem without journal. Opts: stripe=0x00000000000000da,,errors=continue. Quota mode: none. [ 267.461353][ T9234] ext4 filesystem being mounted at /157/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 267.559095][ T4191] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 267.616583][ T4191] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 267.705820][ T7479] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.954961][ T23] peak_usb: probe of 3-1:0.0 failed with error -71 [ 269.003159][ T23] usb 3-1: USB disconnect, device number 18 [ 270.142053][ T7479] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.531564][ T8939] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 272.687566][ T8939] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 272.725760][ T8939] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 272.765224][ T8939] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 273.004254][ T8939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.046351][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 273.067816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 273.090846][ T8939] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.117569][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 273.138165][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.159514][ T4499] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.166764][ T4499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.209605][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 273.227950][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 273.248697][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 273.269315][ T4499] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.276449][ T4499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.295825][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 273.317768][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 273.366678][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 273.384811][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 273.409601][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 273.419409][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 273.429495][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 273.448139][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 273.474133][ T8939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.500357][ T8939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 273.514308][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 273.526488][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 273.547536][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 273.908182][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 273.915749][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 273.963374][ T8939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.364347][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 274.384024][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 274.448101][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 274.464399][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 274.490436][ T8939] device veth0_vlan entered promiscuous mode [ 274.499105][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 274.508042][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 274.532086][ T8939] device veth1_vlan entered promiscuous mode [ 274.606492][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 274.615606][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 274.646327][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 274.672782][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 274.698571][ T8939] device veth0_macvtap entered promiscuous mode [ 274.729626][ T8939] device veth1_macvtap entered promiscuous mode [ 274.788052][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.798722][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.823942][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.850654][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.870512][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.897057][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.917212][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.946934][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.976898][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.016965][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.041595][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.077488][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.106968][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.126833][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.155388][ T8939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.190492][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 275.207613][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 275.230437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 275.249814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 275.283489][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.303468][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.336949][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.365389][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.390951][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.415899][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.436983][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.461467][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.483164][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.506860][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.526803][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.623737][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.634909][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.646399][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.659057][ T8939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.672992][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 275.684276][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 275.713527][ T8939] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.737530][ T8939] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.746376][ T8939] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.766531][ T8939] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.919185][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.935820][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.961277][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 275.998004][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.006161][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.030325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 276.336636][ T9422] vcan0 speed is unknown, defaulting to 1000 [ 276.772564][ T9443] loop6: detected capacity change from 0 to 128 [ 276.862507][ T9443] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 276.968629][ T9443] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 277.316250][ T9462] loop6: detected capacity change from 0 to 64 [ 277.874812][ T9473] loop9: detected capacity change from 0 to 512 [ 278.311410][ T9491] loop2: detected capacity change from 0 to 256 [ 278.387640][ T9491] exfat: Deprecated parameter 'utf8' [ 278.393187][ T9491] exfat: Deprecated parameter 'namecase' [ 278.419590][ T9491] exfat: Deprecated parameter 'namecase' [ 278.428088][ T9491] exfat: Deprecated parameter 'utf8' [ 278.497256][ T9491] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 278.825472][ T9483] loop6: detected capacity change from 0 to 32768 [ 278.896931][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.904822][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.092189][ T9483] XFS (loop6): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 279.207054][ T6017] XFS (loop6): Unmounting Filesystem [ 279.619760][ T9497] loop4: detected capacity change from 0 to 40427 [ 279.687635][ T9511] loop2: detected capacity change from 0 to 32768 [ 279.762567][ T9497] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 279.777713][ T9497] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 279.840525][ T9511] XFS (loop2): Mounting V5 Filesystem [ 279.852345][ T9497] F2FS-fs (loop4): Found nat_bits in checkpoint [ 279.935351][ T9511] XFS (loop2): Ending clean mount [ 279.949690][ T9511] XFS (loop2): Quotacheck needed: Please wait. [ 280.089829][ T9539] loop6: detected capacity change from 0 to 4096 [ 280.103975][ T9497] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 280.111196][ T9497] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 280.122331][ T9511] XFS (loop2): Quotacheck: Done. [ 280.152606][ T9473] EXT4-fs (loop9): Test dummy encryption mode enabled [ 280.169924][ T9473] EXT4-fs (loop9): Ignoring removed oldalloc option [ 280.212230][ T26] audit: type=1800 audit(1777980761.392:148): pid=9511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1549" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=6155 res=0 errno=0 [ 280.301465][ T4191] XFS (loop2): Unmounting Filesystem [ 280.344424][ T9473] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 280.377879][ T9497] attempt to access beyond end of device [ 280.377879][ T9497] loop4: rw=2049, want=53264, limit=40427 [ 280.489835][ T8939] attempt to access beyond end of device [ 280.489835][ T8939] loop4: rw=2049, want=45104, limit=40427 [ 281.044042][ T5745] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 281.403597][ T5745] usb 10-1: Using ep0 maxpacket: 8 [ 281.530448][ T9571] loop4: detected capacity change from 0 to 1024 [ 281.746938][ T4238] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 281.806844][ T9539] EXT4-fs (loop6): inline encryption not supported [ 281.813718][ T9539] EXT4-fs (loop6): Test dummy encryption mode enabled [ 281.832277][ T5745] usb 10-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 281.842287][ T5745] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.858820][ T5745] usb 10-1: Product: syz [ 281.871373][ T5745] usb 10-1: Manufacturer: syz [ 281.884494][ T5745] usb 10-1: SerialNumber: syz [ 281.900924][ T5745] usb 10-1: config 0 descriptor?? [ 281.924332][ T9539] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 281.937289][ T9539] System zones: 0-5 [ 281.981754][ T5745] gspca_main: se401-2.14.0 probing 047d:5003 [ 281.988153][ T9539] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 282.107036][ T4238] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 282.133411][ T4238] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 282.156912][ T4238] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.229407][ T4238] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 282.409349][ T5745] gspca_se401: ExtraFeatures: 10 [ 282.414564][ T5745] gspca_se401: Too many frame sizes [ 282.612498][ T1107] usb 10-1: USB disconnect, device number 4 [ 282.689640][ T4499] Bluetooth: hci5: Frame reassembly failed (-84) [ 282.988399][ T9571] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 283.008697][ T6004] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 283.098886][ T9571] EXT4-fs (loop4): mounted filesystem without journal. Opts: mblk_io_submit,errors=continue,noquota,delalloc,journal_dev=0x0000000000000008,grpjquota=,,errors=continue. Quota mode: none. [ 283.139619][ T9571] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.254551][ T9571] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: block 3: comm syz.4.1556: lblock 3 mapped to illegal pblock 3 (length 3) [ 283.271587][ T6004] usb 3-1: Using ep0 maxpacket: 16 [ 283.297444][ T26] audit: type=1326 audit(1777980764.482:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.9.1560" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8833cd7dd9 code=0x7ffc0000 [ 283.390686][ T9571] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 283.391884][ T26] audit: type=1326 audit(1777980764.482:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.9.1560" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8833cd7dd9 code=0x7ffc0000 [ 283.429203][ T6004] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 283.437489][ T4238] stv0680 6-1:4.0: Could not get descriptor 0200 [ 283.446797][ T9571] EXT4-fs (loop4): This should not happen!! Data will be lost [ 283.446797][ T9571] [ 283.453455][ T6004] usb 3-1: config 0 has no interface number 0 [ 283.479414][ T6004] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 283.510004][ T6004] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 283.573307][ T4499] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:7: lblock 8 mapped to illegal pblock 8 (length 5) [ 283.588737][ T26] audit: type=1326 audit(1777980764.522:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.9.1560" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8833cd7dd9 code=0x7ffc0000 [ 283.633133][ T4499] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 283.657198][ T4238] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 283.665852][ T4238] stv0680 6-1:4.0: last error: 2, command = 0x11 [ 283.674221][ T26] audit: type=1326 audit(1777980764.522:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.9.1560" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8833cd7dd9 code=0x7ffc0000 [ 283.698546][ T4499] EXT4-fs (loop4): This should not happen!! Data will be lost [ 283.698546][ T4499] [ 283.707832][ T6004] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 283.723947][ T6004] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.734399][ T4238] usb 6-1: USB disconnect, device number 16 [ 283.755130][ T4499] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm kworker/u4:7: bg 0: block 112: padding at end of block bitmap is not set [ 283.770578][ T26] audit: type=1326 audit(1777980764.522:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.9.1560" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8833cd7dd9 code=0x7ffc0000 [ 283.773764][ T6004] usb 3-1: Product: syz [ 283.832098][ T4499] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 283.852818][ T26] audit: type=1326 audit(1777980764.522:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.9.1560" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8833cd7dd9 code=0x7ffc0000 [ 283.899318][ T4499] EXT4-fs (loop4): This should not happen!! Data will be lost [ 283.899318][ T4499] [ 283.926806][ T4499] EXT4-fs (loop4): Total free blocks count 0 [ 283.932884][ T4499] EXT4-fs (loop4): Free/Dirty block details [ 283.942611][ T6004] usb 3-1: Manufacturer: syz [ 283.973594][ T6004] usb 3-1: SerialNumber: syz [ 283.992560][ T26] audit: type=1326 audit(1777980764.522:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.9.1560" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8833cd7dd9 code=0x7ffc0000 [ 284.021974][ T4499] EXT4-fs (loop4): free_blocks=0 [ 284.037794][ T4499] EXT4-fs (loop4): dirty_blocks=64 [ 284.047154][ T6004] usb 3-1: config 0 descriptor?? [ 284.067086][ T9600] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 284.074340][ T9600] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 284.096857][ T26] audit: type=1326 audit(1777980764.532:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.9.1560" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8833cd7dd9 code=0x7ffc0000 [ 284.241659][ T26] audit: type=1326 audit(1777980764.532:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.9.1560" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8833cd7dd9 code=0x7ffc0000 [ 284.358474][ T9600] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 284.365605][ T9600] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 284.647192][ T6004] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 284.737124][ T4206] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 285.244574][ T9640] loop9: detected capacity change from 0 to 40427 [ 285.307002][ T6004] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 285.322623][ T6004] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 285.344083][ T9640] F2FS-fs (loop9): invalid crc value [ 285.376516][ T9640] F2FS-fs (loop9): Found nat_bits in checkpoint [ 285.387000][ T6004] asix: probe of 3-1:0.34 failed with error -71 [ 285.425394][ T6004] usb 3-1: USB disconnect, device number 19 [ 285.542916][ T9640] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 285.731767][ T8559] attempt to access beyond end of device [ 285.731767][ T8559] loop9: rw=2049, want=45104, limit=40427 [ 286.015616][ T9672] loop4: detected capacity change from 0 to 2048 [ 286.338093][ T9672] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,quota,delalloc,. Quota mode: writeback. [ 286.397087][ T9672] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.542763][ T9672] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1563: bg 0: block 345: padding at end of block bitmap is not set [ 286.580570][ T9672] EXT4-fs (loop4): Remounting filesystem read-only [ 287.171733][ T9706] loop4: detected capacity change from 0 to 256 [ 287.188419][ T9705] vcan0 speed is unknown, defaulting to 1000 [ 287.773636][ T9687] loop2: detected capacity change from 0 to 40427 [ 287.866598][ T9687] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 287.911153][ T9687] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 288.155786][ T9687] F2FS-fs (loop2): Found nat_bits in checkpoint [ 288.295578][ T9724] vcan0 speed is unknown, defaulting to 1000 [ 288.564098][ T9687] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 288.576749][ T9687] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 288.692750][ T9734] loop9: detected capacity change from 0 to 4096 [ 288.760686][ T9734] __ntfs_warning: 63 callbacks suppressed [ 288.760704][ T9734] ntfs: (device loop9): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 288.820602][ T9687] attempt to access beyond end of device [ 288.820602][ T9687] loop2: rw=2049, want=53264, limit=40427 [ 288.878380][ T9741] loop4: detected capacity change from 0 to 128 [ 288.938959][ T4191] attempt to access beyond end of device [ 288.938959][ T4191] loop2: rw=2049, want=45104, limit=40427 [ 288.998514][ T9741] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 289.068053][ T9734] ntfs: volume version 3.1. [ 289.113657][ T9739] vcan0 speed is unknown, defaulting to 1000 [ 289.140136][ T9741] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 289.265936][ T9734] ntfs: (device loop9): parse_options(): Unrecognized mount option 18446744073709551615@LqE: 艞t}0$. [ 289.527274][ T144] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 290.954951][ T9786] vcan0 speed is unknown, defaulting to 1000 [ 290.989377][ T9791] loop6: detected capacity change from 0 to 256 [ 291.827552][ T7481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.845672][ T7481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.954110][ T26] audit: type=1326 audit(1777980773.132:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz.2.1593" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fb14fdd9 code=0x7ffc0000 [ 292.076839][ T26] audit: type=1326 audit(1777980773.132:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz.2.1593" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fb14fdd9 code=0x7ffc0000 [ 292.206323][ T26] audit: type=1326 audit(1777980773.172:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz.2.1593" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fb14fdd9 code=0x7ffc0000 [ 292.386364][ T26] audit: type=1326 audit(1777980773.172:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz.2.1593" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb6fb14fdd9 code=0x7ffc0000 [ 292.553974][ T26] audit: type=1326 audit(1777980773.172:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz.2.1593" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fb14fdd9 code=0x7ffc0000 [ 292.710728][ T26] audit: type=1326 audit(1777980773.172:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz.2.1593" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fb14fdd9 code=0x7ffc0000 [ 292.827260][ T26] audit: type=1326 audit(1777980773.172:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz.2.1593" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fb14fdd9 code=0x7ffc0000 [ 292.884247][ T9845] vcan0 speed is unknown, defaulting to 1000 [ 292.945453][ T26] audit: type=1326 audit(1777980773.192:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz.2.1593" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fb14fdd9 code=0x7ffc0000 [ 293.152210][ T9853] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 293.216811][ T9853] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 293.380612][ T9857] loop9: detected capacity change from 0 to 1764 [ 293.924802][ T9842] loop4: detected capacity change from 0 to 32768 [ 294.192308][ T9842] XFS (loop4): Mounting V5 Filesystem [ 294.317370][ T9842] XFS (loop4): Ending clean mount [ 294.327672][ T9842] XFS (loop4): Quotacheck needed: Please wait. [ 294.446892][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.454786][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.554330][ T9842] XFS (loop4): Quotacheck: Done. [ 294.616837][ T6004] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 294.724996][ T26] kauditd_printk_skb: 63 callbacks suppressed [ 294.725012][ T26] audit: type=1800 audit(1777980775.902:292): pid=9842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1597" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=6155 res=0 errno=0 [ 294.877478][ T8939] XFS (loop4): Unmounting Filesystem [ 294.886879][ T6004] usb 3-1: Using ep0 maxpacket: 16 [ 295.024414][ T6004] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 295.227067][ T6004] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 295.252114][ T6004] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.283151][ T6004] usb 3-1: Product: syz [ 295.300334][ T6004] usb 3-1: Manufacturer: syz [ 295.328182][ T6004] usb 3-1: SerialNumber: syz [ 295.401199][ T6004] usb 3-1: config 0 descriptor?? [ 295.453987][ T6004] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 295.491867][ T6004] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 296.098039][ T6004] em28xx 3-1:0.0: chip ID is em2765 [ 296.672736][ T6004] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 296.683721][ T6004] em28xx 3-1:0.0: board has no eeprom [ 296.817565][ T6004] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 296.837374][ T6004] em28xx 3-1:0.0: dvb set to bulk mode. [ 296.863147][ T4274] em28xx 3-1:0.0: Binding DVB extension [ 296.908346][ T6004] usb 3-1: USB disconnect, device number 20 [ 296.970993][ T6004] em28xx 3-1:0.0: Disconnecting em28xx [ 297.028924][ T4274] em28xx 3-1:0.0: Registering input extension [ 297.045729][ T6004] em28xx 3-1:0.0: Closing input extension [ 297.122497][ T6004] em28xx 3-1:0.0: Freeing device [ 297.245640][ T7479] device hsr_slave_0 left promiscuous mode [ 297.258737][ T7479] device hsr_slave_1 left promiscuous mode [ 297.295290][ T7479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.310355][ T7479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.340957][ T7479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.371422][ T7479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.398303][ T7479] device bridge_slave_1 left promiscuous mode [ 297.416908][ T7479] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.467422][ T7479] device bridge_slave_0 left promiscuous mode [ 297.473714][ T7479] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.539108][ T7479] device hsr_slave_0 left promiscuous mode [ 297.585249][ T7479] device hsr_slave_1 left promiscuous mode [ 297.592659][ T7479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.600571][ T7479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.628149][ T7479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.644142][ T7479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.673555][ T7479] device bridge_slave_1 left promiscuous mode [ 297.679925][ T7479] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.726242][ T7479] device bridge_slave_0 left promiscuous mode [ 297.732669][ T7479] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.769439][ T7479] rdma_rxe: ignoring netdev event = 10 for vcan0 [ 297.840391][ T7479] device veth1_macvtap left promiscuous mode [ 297.846831][ T7479] device veth0_macvtap left promiscuous mode [ 297.879675][ T7479] device veth1_vlan left promiscuous mode [ 297.885828][ T7479] device veth0_vlan left promiscuous mode [ 297.923326][ T7479] device veth1_macvtap left promiscuous mode [ 297.959246][ T7479] device veth0_macvtap left promiscuous mode [ 297.965452][ T7479] device veth1_vlan left promiscuous mode [ 297.982907][ T7479] device veth0_vlan left promiscuous mode [ 298.333314][ T7479] infiniband syz1: set down [ 298.680614][ T7479] bond1 (unregistering): Released all slaves [ 298.995112][ T7479] team0 (unregistering): Port device team_slave_1 removed [ 299.046458][ T7479] team0 (unregistering): Port device team_slave_0 removed [ 299.089918][ T7479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.133776][ T7479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.363626][ T7479] bond0 (unregistering): Released all slaves [ 299.389084][ T7481] smc: removing ib device syz1 [ 299.511385][ T7479] team0 (unregistering): Port device batadv1 removed [ 299.855742][ T7479] team0 (unregistering): Port device team_slave_1 removed [ 299.892514][ T7479] team0 (unregistering): Port device team_slave_0 removed [ 299.930558][ T7479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.977827][ T7479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.232429][ T7479] bond0 (unregistering): Released all slaves [ 300.376497][ T5749] vcan0 speed is unknown, defaulting to 1000 [ 301.116043][ T26] audit: type=1326 audit(1777980782.292:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9957 comm="syz.5.1621" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f966dbf1dd9 code=0x0 [ 301.147663][ T9960] loop2: detected capacity change from 0 to 512 [ 301.560451][ T9960] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 301.628880][ T9960] ext4 filesystem being mounted at /302/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.782687][ T9988] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 301.866222][ T9988] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 302.218576][ T9960] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 302.249784][ T9960] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 302.261438][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.293356][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.341982][ T9960] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.1612: Failed to acquire dquot type 0 [ 302.454280][ T9960] overlayfs: failed to verify origin (/, ino=2, err=-117) [ 302.462009][ T9960] overlayfs: failed to verify upper root origin [ 302.502187][T10012] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 302.944674][T10027] loop9: detected capacity change from 0 to 1024 [ 303.108369][T10027] EXT4-fs (loop9): Ignoring removed bh option [ 303.224689][T10027] EXT4-fs (loop9): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 303.454780][T10027] EXT4-fs error (device loop9): ext4_check_all_de:667: inode #12: block 7: comm syz.9.1627: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 303.530642][T10027] EXT4-fs (loop9): Remounting filesystem read-only [ 303.768202][ T8559] EXT4-fs error (device loop9): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /63/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=132 fake=0 [ 303.838326][ T8559] EXT4-fs (loop9): Remounting filesystem read-only [ 303.860762][ T8559] EXT4-fs error (device loop9): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /63/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=132 fake=0 [ 303.969489][ T8559] EXT4-fs (loop9): Remounting filesystem read-only [ 303.976466][ T8559] EXT4-fs error (device loop9): empty_inline_dir:1873: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 304.062424][ T8559] EXT4-fs (loop9): Remounting filesystem read-only [ 304.069098][ T8559] EXT4-fs warning (device loop9): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 304.101131][ T8559] EXT4-fs error (device loop9): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /63/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=132 fake=0 [ 304.168939][ T8559] EXT4-fs (loop9): Remounting filesystem read-only [ 304.175672][ T8559] EXT4-fs error (device loop9): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /63/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=132 fake=0 [ 304.269899][ T8559] EXT4-fs (loop9): Remounting filesystem read-only [ 304.280171][ T8559] EXT4-fs error (device loop9): empty_inline_dir:1873: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 304.332272][ T8559] EXT4-fs (loop9): Remounting filesystem read-only [ 304.339229][ T8559] EXT4-fs warning (device loop9): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 304.405574][ T8559] EXT4-fs error (device loop9): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /63/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=132 fake=0 [ 304.535854][ T8559] EXT4-fs (loop9): Remounting filesystem read-only [ 304.551016][ T8559] EXT4-fs error (device loop9): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /63/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=132 fake=0 [ 304.623043][ T7481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.634499][ T7481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.653757][ T8559] EXT4-fs (loop9): Remounting filesystem read-only [ 304.666213][ T8559] EXT4-fs error (device loop9): empty_inline_dir:1873: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 304.763499][ T8559] EXT4-fs (loop9): Remounting filesystem read-only [ 304.803713][T10071] loop4: detected capacity change from 0 to 512 [ 304.830542][ T8559] EXT4-fs warning (device loop9): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 305.014566][ T8559] EXT4-fs warning (device loop9): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 305.080215][ T8559] EXT4-fs warning (device loop9): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 305.116975][T10071] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 305.151274][T10071] ext4 filesystem being mounted at /21/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.178504][ T8559] EXT4-fs warning (device loop9): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 305.302467][ T8559] EXT4-fs warning (device loop9): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 305.398312][ T8559] EXT4-fs warning (device loop9): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 305.474761][T10071] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 305.487339][ T8559] EXT4-fs warning (device loop9): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 305.517703][T10071] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 305.536164][ T8559] EXT4-fs warning (device loop9): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 305.570891][T10071] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.1637: Failed to acquire dquot type 0 [ 305.624687][T10071] overlayfs: failed to verify origin (/, ino=2, err=-117) [ 305.695912][T10071] overlayfs: failed to verify upper root origin [ 305.985350][ T7483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.056774][ T7483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.096900][ T6004] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 306.507095][ T6004] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.533179][ T6004] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 306.570518][ T6004] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 306.611402][ T6004] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.668607][ T6004] usb 6-1: config 0 descriptor?? [ 306.729474][ T6004] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 306.736156][ T6004] dvb-usb: bulk message failed: -22 (3/0) [ 306.794355][ T6004] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 306.849925][ T6004] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 306.872610][ T6004] usb 6-1: media controller created [ 306.904634][ T6004] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 306.930014][T10088] dvb-usb: bulk message failed: -22 (2/0) [ 306.944032][T10088] dibusb: i2c wr: len=235 is too big! [ 306.944032][T10088] [ 307.029922][ T6004] dvb-usb: bulk message failed: -22 (6/0) [ 307.062555][ T6004] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 307.128326][ T6004] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input23 [ 307.195181][ T6004] dvb-usb: schedule remote query interval to 150 msecs. [ 307.232187][ T6004] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 307.271860][T10117] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input24 [ 307.304805][ T6004] usb 6-1: USB disconnect, device number 17 [ 307.468259][ T6004] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 307.732077][ T4206] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 307.742568][ T4206] CPU: 0 PID: 4206 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 307.750172][ T4206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 307.760281][ T4206] Workqueue: hci2 hci_rx_work [ 307.765035][ T4206] Call Trace: [ 307.768514][ T4206] [ 307.771474][ T4206] dump_stack_lvl+0x188/0x250 [ 307.776191][ T4206] ? show_regs_print_info+0x20/0x20 [ 307.781550][ T4206] ? load_image+0x400/0x400 [ 307.786105][ T4206] sysfs_create_dir_ns+0x26a/0x290 [ 307.791255][ T4206] ? sysfs_warn_dup+0xa0/0xa0 [ 307.795972][ T4206] ? process_one_work+0x85f/0x1010 [ 307.801127][ T4206] ? do_raw_spin_unlock+0x11d/0x230 [ 307.806369][ T4206] kobject_add_internal+0x6e0/0xd90 [ 307.811626][ T4206] kobject_add+0x160/0x230 [ 307.816088][ T4206] ? kobject_init+0x1d0/0x1d0 [ 307.820812][ T4206] ? klist_children_get+0x50/0x50 [ 307.825884][ T4206] ? get_device_parent+0x121/0x3f0 [ 307.831043][ T4206] device_add+0x483/0xfb0 [ 307.835430][ T4206] hci_conn_add_sysfs+0xd1/0x1e0 [ 307.840421][ T4206] le_conn_complete_evt+0xc48/0x15c0 [ 307.845763][ T4206] ? cs_le_create_conn+0x5e0/0x5e0 [ 307.850922][ T4206] ? __mutex_trylock_common+0x155/0x260 [ 307.856517][ T4206] hci_le_meta_evt+0x285/0x3c90 [ 307.861411][ T4206] ? hci_event_packet+0x37b/0x1370 [ 307.866560][ T4206] ? __lock_acquire+0x7d10/0x7d10 [ 307.871645][ T4206] ? hci_remote_host_features_evt+0x280/0x280 [ 307.877756][ T4206] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 307.883441][ T4206] ? mark_lock+0x94/0x320 [ 307.887813][ T4206] ? mutex_unlock+0x10/0x10 [ 307.892372][ T4206] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 307.898399][ T4206] ? lock_chain_count+0x20/0x20 [ 307.903300][ T4206] ? __rwlock_init+0x140/0x140 [ 307.908119][ T4206] hci_event_packet+0xe48/0x1370 [ 307.913105][ T4206] ? lockdep_hardirqs_on+0x94/0x140 [ 307.918351][ T4206] ? rcu_lock_release+0x20/0x20 [ 307.923251][ T4206] ? hci_send_to_monitor+0x9c/0x4a0 [ 307.928504][ T4206] hci_rx_work+0x255/0xa10 [ 307.932984][ T4206] process_one_work+0x85f/0x1010 [ 307.937975][ T4206] ? worker_detach_from_pool+0x240/0x240 [ 307.943646][ T4206] ? lockdep_hardirqs_off+0x70/0x100 [ 307.948979][ T4206] ? _raw_spin_lock_irq+0xb7/0xf0 [ 307.954042][ T4206] ? _raw_spin_lock_irqsave+0x100/0x100 [ 307.959635][ T4206] ? wq_worker_running+0x97/0x170 [ 307.964708][ T4206] worker_thread+0xaa6/0x1290 [ 307.969436][ T4206] ? lockdep_hardirqs_on+0x94/0x140 [ 307.974682][ T4206] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 307.980624][ T4206] kthread+0x436/0x520 [ 307.984727][ T4206] ? rcu_lock_release+0x20/0x20 [ 307.989615][ T4206] ? kthread_blkcg+0xd0/0xd0 [ 307.994247][ T4206] ret_from_fork+0x1f/0x30 [ 307.998717][ T4206] [ 308.010525][ T4206] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 308.023968][ T4206] Bluetooth: hci2: failed to register connection device [ 308.489429][ T7483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.511011][ T7483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.910733][T10135] chnl_net:caif_netlink_parms(): no params data found [ 309.093125][T10128] loop2: detected capacity change from 0 to 32768 [ 309.211257][T10135] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.220039][T10135] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.230976][T10135] device bridge_slave_0 entered promiscuous mode [ 309.248744][T10128] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 309.248744][T10128] [ 309.244260][T10135] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.295962][T10135] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.311547][T10128] ERROR: (device loop2): remounting filesystem as read-only [ 309.324906][T10135] device bridge_slave_1 entered promiscuous mode [ 309.414382][ T276] blkno = 5002c, nblocks = 1 [ 309.422778][ T276] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 309.422778][ T276] [ 309.439724][ T276] blkno = 5002c, nblocks = 1 [ 309.444392][ T276] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 309.444392][ T276] [ 309.480469][ T276] blkno = 5002c, nblocks = 1 [ 309.485141][ T276] ERROR: (device loop2): dbFree: block to be freed is outside the map [ 309.485141][ T276] [ 309.503281][T10135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.549551][T10135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.642986][T10135] team0: Port device team_slave_0 added [ 309.679143][T10135] team0: Port device team_slave_1 added [ 309.734070][T10135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.762389][T10135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.860698][T10135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.904872][T10135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.936761][T10135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.036846][T10135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.140580][T10135] device hsr_slave_0 entered promiscuous mode [ 310.157528][T10135] device hsr_slave_1 entered promiscuous mode [ 310.336861][ T6004] Bluetooth: hci1: command 0x0409 tx timeout [ 310.942972][ T7479] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.970809][ T7479] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.159833][ T7479] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.181040][ T7479] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.385303][ T7479] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.420660][ T7479] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.537429][ T7479] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.559637][ T7479] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.851162][ T7479] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.965906][ T7479] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.060067][ T7479] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.182056][ T7479] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.331978][T10135] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 312.401937][T10135] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 312.418023][ T4238] Bluetooth: hci1: command 0x041b tx timeout [ 312.437420][T10135] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 312.471302][T10135] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 313.011522][T10135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.077270][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 313.085394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 313.106259][T10135] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.158517][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 313.168385][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 313.191519][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.198713][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.252990][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 313.265503][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 313.318935][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 313.337049][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.344189][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.368843][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 313.408457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 313.424671][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 313.449021][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 313.497678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 313.518138][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 313.555676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 313.587791][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 313.605559][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 313.614564][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 313.636496][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 313.658383][T10135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 314.148455][ T7483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 314.156154][ T7483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 314.182886][T10135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.190300][ T1107] Bluetooth: hci2: command 0x0406 tx timeout [ 314.287904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 314.298586][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 314.420221][T10135] device veth0_vlan entered promiscuous mode [ 314.430282][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 314.439931][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 314.468186][T10135] device veth1_vlan entered promiscuous mode [ 314.497589][ T1107] Bluetooth: hci1: command 0x040f tx timeout [ 314.543701][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 314.554704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 314.579856][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 314.732145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 314.752209][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 314.771185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 314.802755][T10135] device veth0_macvtap entered promiscuous mode [ 314.839881][T10135] device veth1_macvtap entered promiscuous mode [ 314.955637][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.981458][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.003097][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.024017][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.042543][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.064027][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.083357][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.096174][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.118220][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.140388][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.156974][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.177037][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.196659][T10135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.214033][ T7481] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 315.239938][ T7481] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 315.257752][ T7481] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 315.276439][ T7481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 315.302921][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.327689][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.339892][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.350518][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.361219][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.371932][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.382668][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.393587][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.460932][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.472843][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.483560][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.494593][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.515552][T10135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.538859][ T7481] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 315.559591][ T7481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 315.583266][T10135] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.603145][T10135] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.614920][T10135] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.624724][T10135] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.865266][ T7481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.875551][ T7481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.900970][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 315.966567][ T7483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.988936][ T7483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.051103][ T7483] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 316.216997][T10230] loop2: detected capacity change from 0 to 256 [ 316.256432][T10232] device geneve2 entered promiscuous mode [ 316.458242][T10230] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 316.577187][ T1107] Bluetooth: hci1: command 0x0419 tx timeout [ 316.890096][ T7479] device hsr_slave_0 left promiscuous mode [ 316.908422][ T7479] device hsr_slave_1 left promiscuous mode [ 316.922762][ T7479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.935574][ T7479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.950437][ T7479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.958343][ T7479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.969612][ T7479] device bridge_slave_1 left promiscuous mode [ 316.975965][ T7479] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.997334][ T7479] device bridge_slave_0 left promiscuous mode [ 317.003753][ T7479] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.028676][ T7479] device hsr_slave_0 left promiscuous mode [ 317.039004][ T7479] device hsr_slave_1 left promiscuous mode [ 317.045758][ T7479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.067987][ T7479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.117667][ T7479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.159921][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.166294][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.168201][ T7479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.252926][ T7479] device bridge_slave_1 left promiscuous mode [ 317.300144][ T7479] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.388785][ T7479] device bridge_slave_0 left promiscuous mode [ 317.410655][ T7479] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.520341][ T7479] device veth1_macvtap left promiscuous mode [ 317.526630][ T7479] device veth0_macvtap left promiscuous mode [ 317.533672][ T7479] device veth1_vlan left promiscuous mode [ 317.540038][ T7479] device veth0_vlan left promiscuous mode [ 317.571654][ T7479] device veth1_macvtap left promiscuous mode [ 317.579512][ T7479] device veth0_macvtap left promiscuous mode [ 317.607187][ T7479] device veth1_vlan left promiscuous mode [ 317.631234][ T7479] device veth0_vlan left promiscuous mode [ 318.440927][T10260] loop4: detected capacity change from 0 to 32768 [ 319.020871][T10299] loop2: detected capacity change from 0 to 1024 [ 319.054417][T10260] XFS (loop4): Mounting V5 Filesystem [ 319.339602][T10287] loop6: detected capacity change from 0 to 131072 [ 319.490849][T10287] F2FS-fs (loop6): Test dummy encryption mode enabled [ 319.631469][T10287] F2FS-fs (loop6): Found nat_bits in checkpoint [ 319.671303][T10260] XFS (loop4): Ending clean mount [ 319.753534][T10260] XFS (loop4): Quotacheck needed: Please wait. [ 319.803574][T10287] F2FS-fs (loop6): Mounted with checkpoint version = 753bd00b [ 319.824175][ T7479] team0 (unregistering): Port device team_slave_1 removed [ 319.981595][ T7479] team0 (unregistering): Port device team_slave_0 removed [ 320.001616][T10260] XFS (loop4): Quotacheck: Done. [ 320.079531][ T7479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.197246][ T7479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.249683][ T8939] XFS (loop4): Unmounting Filesystem [ 320.660118][ T7479] bond0 (unregistering): Released all slaves [ 320.774520][T10319] loop2: detected capacity change from 0 to 512 [ 321.043231][T10319] EXT4-fs (loop2): Ignoring removed orlov option [ 321.221769][T10319] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,orlov,,errors=continue. Quota mode: writeback. [ 321.336428][T10328] loop4: detected capacity change from 0 to 256 [ 321.403305][T10328] exfat: Deprecated parameter 'namecase' [ 321.460884][ T26] audit: type=1800 audit(1777980802.642:294): pid=10319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1686" name="file3" dev="loop2" ino=16 res=0 errno=0 [ 321.596109][ T7479] team0 (unregistering): Port device team_slave_1 removed [ 321.641452][T10328] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 321.654927][ T7479] team0 (unregistering): Port device team_slave_0 removed [ 321.701905][ T7479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.862502][T10332] loop2: detected capacity change from 0 to 16 [ 321.877223][ T7479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.942429][T10332] erofs: (device loop2): mounted with root inode @ nid 36. [ 322.323167][ T7479] bond0 (unregistering): Released all slaves [ 323.388101][T10365] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1701'. [ 323.625161][T10377] loop0: detected capacity change from 0 to 128 [ 323.714632][T10383] loop4: detected capacity change from 0 to 256 [ 323.747712][ T26] audit: type=1326 audit(1777980804.932:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10382 comm="syz.5.1708" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966dbf1dd9 code=0x7ffc0000 [ 323.862891][ T26] audit: type=1326 audit(1777980804.962:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10382 comm="syz.5.1708" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f966dbf1dd9 code=0x7ffc0000 [ 323.883362][T10383] exfat: Deprecated parameter 'utf8' [ 323.888539][T10377] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 323.913695][T10383] exfat: Deprecated parameter 'utf8' [ 323.937077][T10377] hpfs: filesystem error: improperly stopped [ 323.943162][T10377] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 324.029738][T10377] hpfs: You really don't want any checks? You are crazy... [ 324.070091][ T26] audit: type=1326 audit(1777980804.962:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10382 comm="syz.5.1708" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966dbf1dd9 code=0x7ffc0000 [ 324.111791][T10377] hpfs: hpfs_map_sector(): read error [ 324.151220][T10377] hpfs: code page support is disabled [ 324.179531][T10383] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 324.196805][T10377] hpfs: hpfs_map_4sectors(): unaligned read [ 324.202840][T10377] hpfs: hpfs_map_4sectors(): unaligned read [ 324.205204][ T26] audit: type=1326 audit(1777980804.962:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10382 comm="syz.5.1708" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966dbf1dd9 code=0x7ffc0000 [ 324.286555][T10377] hpfs: filesystem error: unable to find root dir [ 324.364356][ T26] audit: type=1326 audit(1777980804.962:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10382 comm="syz.5.1708" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f966dbf1dd9 code=0x7ffc0000 [ 324.553150][ T26] audit: type=1326 audit(1777980804.962:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10382 comm="syz.5.1708" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966dbf1dd9 code=0x7ffc0000 [ 324.691473][ T26] audit: type=1326 audit(1777980804.962:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10382 comm="syz.5.1708" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966dbf1dd9 code=0x7ffc0000 [ 324.760953][ T26] audit: type=1326 audit(1777980805.012:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10382 comm="syz.5.1708" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f966dbf1dd9 code=0x7ffc0000 [ 324.840673][T10403] loop2: detected capacity change from 0 to 8192 [ 324.982021][ T26] audit: type=1326 audit(1777980805.012:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10382 comm="syz.5.1708" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966dbf1dd9 code=0x7ffc0000 [ 325.028542][T10417] device sit0 entered promiscuous mode [ 325.042900][T10404] loop2: p3 p4 < > [ 325.054753][T10404] loop2: p3 size 218103808 extends beyond EOD, truncated [ 325.090394][T10417] netlink: 'syz.4.1717': attribute type 1 has an invalid length. [ 325.146476][T10417] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1717'. [ 325.217495][T10403] loop2: p3 p4 < > [ 325.227393][T10403] loop2: p3 size 218103808 extends beyond EOD, truncated [ 325.671146][T10241] udevd[10241]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 325.684445][T10227] udevd[10227]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 325.744248][T10429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1720'. [ 325.848779][T10227] udevd[10227]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 325.880572][T10241] udevd[10241]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 326.085285][T10441] loop6: detected capacity change from 0 to 7 [ 326.183915][ T6017] Dev loop6: unable to read RDB block 7 [ 326.190816][ T6017] loop6: AHDI p3 p4 [ 326.211235][ T6017] loop6: partition table partially beyond EOD, truncated [ 326.303016][ T6017] loop6: p3 start 2427370299 is beyond EOD, truncated [ 326.338754][T10441] Dev loop6: unable to read RDB block 7 [ 326.361429][T10441] loop6: AHDI p3 p4 [ 326.365698][T10441] loop6: partition table partially beyond EOD, truncated [ 326.431280][T10441] loop6: p3 start 2427370299 is beyond EOD, truncated [ 326.784714][T10460] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 326.874808][T10464] device syzkaller1 entered promiscuous mode [ 326.905633][T10468] loop6: detected capacity change from 0 to 1024 [ 327.236941][T10468] EXT4-fs (loop6): Ignoring removed bh option [ 327.351423][T10476] loop0: detected capacity change from 0 to 4096 [ 327.407671][T10468] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc,. Quota mode: none. [ 328.464167][T10476] ntfs: volume version 3.1. [ 328.787193][T10475] loop2: detected capacity change from 0 to 40427 [ 328.881309][T10483] loop4: detected capacity change from 0 to 32768 [ 328.923056][T10475] F2FS-fs (loop2): invalid crc value [ 329.031790][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 329.031806][ T26] audit: type=1800 audit(1777980810.212:305): pid=10483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1735" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 329.090615][T10475] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 329.170582][ T26] audit: type=1800 audit(1777980810.292:306): pid=10483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1735" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 329.418743][T10523] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 329.533710][T10475] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 329.801689][ T26] audit: type=1800 audit(1777980810.982:307): pid=10475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1734" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 329.866408][T10475] attempt to access beyond end of device [ 329.866408][T10475] loop2: rw=34817, want=77952, limit=40427 [ 329.916818][ T5995] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 330.116366][ T4191] attempt to access beyond end of device [ 330.116366][ T4191] loop2: rw=2049, want=45104, limit=40427 [ 330.166809][ T5995] usb 5-1: Using ep0 maxpacket: 16 [ 330.287670][ T5995] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.321160][ T5995] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.394128][ T5995] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 330.436056][ T5995] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 330.483686][ T5995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.527143][ T5995] usb 5-1: config 0 descriptor?? [ 330.964003][T10567] loop0: detected capacity change from 0 to 2048 [ 331.028970][ T5995] microsoft 0003:045E:07DA.001A: collection stack underflow [ 331.053859][ T5995] microsoft 0003:045E:07DA.001A: item 0 1 0 12 parsing failed [ 331.094608][ T5995] microsoft 0003:045E:07DA.001A: parse failed [ 331.123355][ T5995] microsoft: probe of 0003:045E:07DA.001A failed with error -22 [ 331.234141][T10567] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,noblock_validity,jqfmt=vfsold,,errors=continue. Quota mode: none. [ 331.265963][T10567] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.293921][ T5995] usb 5-1: USB disconnect, device number 2 [ 331.595540][T10573] loop6: detected capacity change from 0 to 8192 [ 331.640731][T10586] loop2: detected capacity change from 0 to 256 [ 331.794808][T10586] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 331.857798][ T144] wlan1: Trigger new scan to find an IBSS to join [ 331.879094][T10573] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 331.960420][T10573] REISERFS (device loop6): using ordered data mode [ 332.035067][T10573] reiserfs: using flush barriers [ 332.083104][T10573] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 332.136524][ T26] audit: type=1326 audit(1777980813.312:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10597 comm="syz.4.1765" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f29eb81ddd9 code=0x0 [ 332.190793][T10573] REISERFS (device loop6): checking transaction log (loop6) [ 332.652842][T10612] loop0: detected capacity change from 0 to 512 [ 332.822522][T10573] REISERFS (device loop6): Using tea hash to sort names [ 332.839857][T10573] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 333.221892][ T26] audit: type=1800 audit(1777980814.402:309): pid=10573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1760" name="file1" dev="loop6" ino=4 res=0 errno=0 [ 333.884486][T10647] loop2: detected capacity change from 0 to 2048 [ 334.072310][T10649] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 334.146970][T10647] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 334.372258][T10647] UDF-fs: error (device loop2): udf_rename: directory (ino 1345) has parent entry pointing to another inode (1376 != 1367) [ 334.466951][T10659] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1784'. [ 334.548553][T10664] loop4: detected capacity change from 0 to 64 [ 334.953850][T10678] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1791'. [ 336.563054][T10735] loop2: detected capacity change from 0 to 4096 [ 336.698452][T10689] loop4: detected capacity change from 0 to 32768 [ 336.900790][T10756] loop0: detected capacity change from 0 to 2048 [ 336.907259][ T1174] wlan1: Trigger new scan to find an IBSS to join [ 336.994565][T10689] XFS (loop4): Mounting V5 Filesystem [ 337.072401][T10756] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 337.292158][ T4191] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 337.311875][ T4191] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 337.389355][T10689] XFS (loop4): Ending clean mount [ 337.461986][T10689] XFS (loop4): Quotacheck needed: Please wait. [ 337.857293][T10689] XFS (loop4): Quotacheck: Done. [ 337.994100][ T144] wlan1: Creating new IBSS network, BSSID c6:d1:2c:f4:b7:b6 [ 338.118078][T10797] loop8: detected capacity change from 0 to 8 [ 338.225116][T10804] device pim6reg1 entered promiscuous mode [ 338.236913][T10797] Dev loop8: unable to read RDB block 8 [ 338.242573][T10797] loop8: unable to read partition table [ 338.327107][T10797] loop8: partition table beyond EOD, truncated [ 338.385270][T10797] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 338.498204][T10809] loop2: detected capacity change from 0 to 256 [ 338.542063][T10809] FAT-fs (loop2): Unrecognized mount option "shortnameGwinnt" or missing value [ 338.561648][ T8939] XFS (loop4): Unmounting Filesystem [ 338.884036][T10809] loop2: detected capacity change from 0 to 4096 [ 339.059808][T10809] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 339.076734][T10809] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 339.190511][T10809] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 339.219000][T10809] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 339.326774][T10809] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 339.378858][T10809] ntfs: volume version 3.1. [ 339.548816][T10839] netlink: 'syz.5.1840': attribute type 1 has an invalid length. [ 339.587324][T10839] netlink: 'syz.5.1840': attribute type 2 has an invalid length. [ 339.646911][T10809] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 339.690066][T10842] netlink: 'syz.5.1840': attribute type 1 has an invalid length. [ 339.697960][T10809] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 339.758782][T10809] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 339.780559][T10809] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 339.826897][T10809] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 339.933153][T10842] netlink: 'syz.5.1840': attribute type 2 has an invalid length. [ 340.023539][T10850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1844'. [ 340.114457][T10850] netlink: 'syz.0.1844': attribute type 1 has an invalid length. [ 340.166212][T10850] netlink: 'syz.0.1844': attribute type 2 has an invalid length. [ 340.488047][T10866] loop2: detected capacity change from 0 to 128 [ 340.572205][T10866] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 340.593164][T10866] hpfs: filesystem error: improperly stopped [ 340.619688][T10866] hpfs: You really don't want any checks? You are crazy... [ 340.661627][T10866] hpfs: hpfs_map_sector(): read error [ 340.691798][T10866] hpfs: code page support is disabled [ 340.712544][T10866] hpfs: hpfs_map_4sectors(): unaligned read [ 340.757672][T10866] hpfs: hpfs_map_4sectors(): unaligned read [ 340.784789][T10866] hpfs: filesystem error: unable to find root dir [ 340.980044][T10882] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input25 [ 341.668128][ T1107] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 342.027055][ T1107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.068537][ T1107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.106775][ T1107] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 342.202659][ T1107] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 342.247818][T10879] loop4: detected capacity change from 0 to 32768 [ 342.260592][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.271455][T10884] loop6: detected capacity change from 0 to 40427 [ 342.310960][T10879] [ 342.310960][T10879] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 342.310960][T10879] [ 342.338726][ T1107] usb 1-1: config 0 descriptor?? [ 342.442989][T10884] F2FS-fs (loop6): invalid crc value [ 342.472564][T10879] ERROR: (device loop4): dbReAlloc: the block is outside the filesystem [ 342.472564][T10879] [ 342.530989][T10884] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 342.602407][T10879] ERROR: (device loop4): remounting filesystem as read-only [ 342.819537][ T1107] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 342.882106][ T1107] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 342.952589][T10884] F2FS-fs (loop6): Start checkpoint disabled! [ 343.051901][T10884] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e7 [ 343.222448][ T5995] usb 1-1: USB disconnect, device number 7 [ 343.330731][T10937] fido_id[10937]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 343.360565][ T1174] attempt to access beyond end of device [ 343.360565][ T1174] loop6: rw=2049, want=45104, limit=40427 [ 343.913805][T10954] device bond0 entered promiscuous mode [ 343.945366][T10954] device bond_slave_0 entered promiscuous mode [ 343.990870][T10954] device bond_slave_1 entered promiscuous mode [ 344.189314][T10969] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1876'. [ 344.753635][T10990] loop2: detected capacity change from 0 to 64 [ 345.089436][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 345.089451][ T26] audit: type=1800 audit(1777980826.262:310): pid=10990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1883" name="file0" dev="loop2" ino=3 res=0 errno=0 [ 345.273851][T10966] loop0: detected capacity change from 0 to 32768 [ 345.527505][T10966] ERROR: (device loop0): dbAlloc: unable to allocate blocks [ 345.527505][T10966] [ 345.607544][T10971] loop4: detected capacity change from 0 to 40427 [ 345.636783][T10966] ERROR: (device loop0): remounting filesystem as read-only [ 345.655878][T10971] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 345.702044][T10971] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 345.770561][T10971] F2FS-fs (loop4): invalid crc value [ 345.848680][T10971] F2FS-fs (loop4): Found nat_bits in checkpoint [ 346.013766][T10971] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 346.037048][T10971] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 346.765731][T11044] loop2: detected capacity change from 0 to 512 [ 346.778029][T11041] device syzkaller1 entered promiscuous mode [ 347.513803][T11067] loop2: detected capacity change from 0 to 2048 [ 347.624916][T11067] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 347.697293][T11067] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 348.141624][T11088] loop2: detected capacity change from 0 to 512 [ 348.232672][T11091] loop6: detected capacity change from 0 to 128 [ 348.388378][T11088] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 348.427679][T11091] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1912'. [ 348.461910][T11088] ext4 filesystem being mounted at /368/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 348.488603][T11091] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1912'. [ 348.604737][T11088] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #2: comm syz.2.1908: corrupted inode contents [ 348.616993][ T4274] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 348.706825][T11088] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #2: comm syz.2.1908: mark_inode_dirty error [ 348.794499][T11088] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #2: comm syz.2.1908: corrupted inode contents [ 348.888091][T11088] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.1908: mark_inode_dirty error [ 348.939889][T11088] EXT4-fs error (device loop2): ext4_lookup:1855: inode #19: comm syz.2.1908: 'file0' linked to parent dir [ 349.008597][T11109] loop6: detected capacity change from 0 to 32768 [ 349.018572][T11106] nullb0: [POWERTEC] p1 [ 349.039994][T11106] nullb0: p1 start 1768304430 is beyond EOD, truncated [ 349.158275][ T4274] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 349.227744][ T4274] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.317589][ T4274] usb 5-1: Product: syz [ 349.321838][ T4274] usb 5-1: Manufacturer: syz [ 349.378414][ T4274] usb 5-1: SerialNumber: syz [ 349.412712][T11121] loop2: detected capacity change from 0 to 2048 [ 349.429614][ T4274] usb 5-1: config 0 descriptor?? [ 349.667922][T11109] XFS (loop6): Mounting V5 Filesystem [ 349.698676][T11121] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 349.880262][ T8789] usb 5-1: USB disconnect, device number 3 [ 349.899497][T11121] [ 349.901891][T11121] ====================================================== [ 349.908927][T11121] WARNING: possible circular locking dependency detected [ 349.915977][T11121] syzkaller #0 Not tainted [ 349.920490][T11121] ------------------------------------------------------ [ 349.927530][T11121] syz.2.1919/11121 is trying to acquire lock: [ 349.933618][T11121] ffff888049c032a0 (&ei->xattr_sem){++++}-{3:3}, at: ext4_destroy_inline_data+0x24/0xe0 [ 349.943619][T11121] [ 349.943619][T11121] but task is already holding lock: [ 349.951010][T11121] ffff888056eb6c58 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2df0 [ 349.961163][T11121] [ 349.961163][T11121] which lock already depends on the new lock. [ 349.961163][T11121] [ 349.971598][T11121] [ 349.971598][T11121] the existing dependency chain (in reverse order) is: [ 349.980637][T11121] [ 349.980637][T11121] -> #1 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 349.989105][T11121] percpu_down_read+0x46/0x1b0 [ 349.994459][T11121] ext4_writepages+0x20f/0x2df0 [ 350.000053][T11121] do_writepages+0x476/0x6e0 [ 350.005200][T11121] __writeback_single_inode+0x153/0xda0 [ 350.011303][T11121] writeback_single_inode+0x3cb/0x8e0 [ 350.017225][T11121] write_inode_now+0x23b/0x2c0 [ 350.022549][T11121] iput+0x5ab/0x8a0 [ 350.026915][T11121] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 350.032853][T11121] ext4_xattr_block_set+0x979/0x2d20 [ 350.038699][T11121] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 350.045259][T11121] __ext4_expand_extra_isize+0x301/0x3e0 [ 350.051456][T11121] __ext4_mark_inode_dirty+0x469/0x700 [ 350.057659][T11121] ext4_evict_inode+0xa8d/0x1090 [ 350.063246][T11121] evict+0x4c9/0x8d0 [ 350.067696][T11121] ext4_orphan_cleanup+0xad2/0x1320 [ 350.073468][T11121] ext4_fill_super+0x8d6e/0x94f0 [ 350.078961][T11121] mount_bdev+0x287/0x3c0 [ 350.083926][T11121] legacy_get_tree+0xe6/0x180 [ 350.089150][T11121] vfs_get_tree+0x88/0x270 [ 350.094115][T11121] do_new_mount+0x24a/0xa40 [ 350.099172][T11121] __se_sys_mount+0x2e3/0x3d0 [ 350.104396][T11121] do_syscall_64+0x4c/0xa0 [ 350.109372][T11121] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 350.115827][T11121] [ 350.115827][T11121] -> #0 (&ei->xattr_sem){++++}-{3:3}: [ 350.123431][T11121] __lock_acquire+0x2c42/0x7d10 [ 350.128850][T11121] lock_acquire+0x19e/0x400 [ 350.133908][T11121] down_write+0x38/0x60 [ 350.138625][T11121] ext4_destroy_inline_data+0x24/0xe0 [ 350.144615][T11121] ext4_writepages+0x670/0x2df0 [ 350.150198][T11121] do_writepages+0x476/0x6e0 [ 350.155345][T11121] filemap_fdatawrite_wbc+0x1eb/0x240 [ 350.161283][T11121] file_write_and_wait_range+0x14d/0x220 [ 350.167483][T11121] ext4_sync_file+0x1ff/0xae0 [ 350.172731][T11121] ext4_buffered_write_iter+0x338/0x3b0 [ 350.178838][T11121] ext4_file_write_iter+0x74d/0x1700 [ 350.184776][T11121] do_iter_readv_writev+0x47e/0x5f0 [ 350.190569][T11121] do_iter_write+0x205/0x7b0 [ 350.195719][T11121] do_pwritev+0x240/0x3a0 [ 350.200598][T11121] do_syscall_64+0x4c/0xa0 [ 350.205572][T11121] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 350.212072][T11121] [ 350.212072][T11121] other info that might help us debug this: [ 350.212072][T11121] [ 350.222326][T11121] Possible unsafe locking scenario: [ 350.222326][T11121] [ 350.229809][T11121] CPU0 CPU1 [ 350.235210][T11121] ---- ---- [ 350.240602][T11121] lock(&sbi->s_writepages_rwsem); [ 350.245827][T11121] lock(&ei->xattr_sem); [ 350.252736][T11121] lock(&sbi->s_writepages_rwsem); [ 350.260470][T11121] lock(&ei->xattr_sem); [ 350.264822][T11121] [ 350.264822][T11121] *** DEADLOCK *** [ 350.264822][T11121] [ 350.272976][T11121] 2 locks held by syz.2.1919/11121: [ 350.278183][T11121] #0: ffff88807a722460 (sb_writers#5){++++}-{0:0}, at: do_pwritev+0x229/0x3a0 [ 350.287188][T11121] #1: ffff888056eb6c58 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2df0 [ 350.297765][T11121] [ 350.297765][T11121] stack backtrace: [ 350.303697][T11121] CPU: 0 PID: 11121 Comm: syz.2.1919 Not tainted syzkaller #0 [ 350.311185][T11121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 350.321259][T11121] Call Trace: [ 350.324564][T11121] [ 350.327516][T11121] dump_stack_lvl+0x188/0x250 [ 350.332237][T11121] ? load_image+0x400/0x400 [ 350.336768][T11121] ? show_regs_print_info+0x20/0x20 [ 350.341988][T11121] ? print_circular_bug+0x12b/0x1a0 [ 350.347204][T11121] check_noncircular+0x296/0x330 [ 350.352160][T11121] ? deref_stack_reg+0xd0/0x120 [ 350.357035][T11121] ? add_chain_block+0x940/0x940 [ 350.361988][T11121] ? lockdep_lock+0xf1/0x1f0 [ 350.366599][T11121] ? mark_lock+0x94/0x320 [ 350.370943][T11121] __lock_acquire+0x2c42/0x7d10 [ 350.375825][T11121] ? verify_lock_unused+0x140/0x140 [ 350.381050][T11121] ? mark_lock+0x94/0x320 [ 350.385397][T11121] ? verify_lock_unused+0x140/0x140 [ 350.390609][T11121] ? __lock_acquire+0x12e8/0x7d10 [ 350.395656][T11121] ? verify_lock_unused+0x140/0x140 [ 350.400966][T11121] lock_acquire+0x19e/0x400 [ 350.405505][T11121] ? ext4_destroy_inline_data+0x24/0xe0 [ 350.411074][T11121] ? read_lock_is_recursive+0x10/0x10 [ 350.416470][T11121] ? rcu_read_lock_any_held+0xb0/0x130 [ 350.421956][T11121] ? ext4_journal_check_start+0x180/0x250 [ 350.427694][T11121] down_write+0x38/0x60 [ 350.431881][T11121] ? ext4_destroy_inline_data+0x24/0xe0 [ 350.437458][T11121] ext4_destroy_inline_data+0x24/0xe0 [ 350.442869][T11121] ext4_writepages+0x670/0x2df0 [ 350.447754][T11121] ? __might_sleep+0xf0/0xf0 [ 350.452407][T11121] ? mark_lock+0x94/0x320 [ 350.456774][T11121] ? __might_sleep+0xf0/0xf0 [ 350.461400][T11121] ? ext4_readpage+0x2e0/0x2e0 [ 350.466213][T11121] ? ext4_readpage+0x2e0/0x2e0 [ 350.471037][T11121] do_writepages+0x476/0x6e0 [ 350.475779][T11121] ? filemap_fdatawrite_wbc+0x1e0/0x240 [ 350.481391][T11121] ? __writepage+0x130/0x130 [ 350.486013][T11121] ? __lock_acquire+0x7d10/0x7d10 [ 350.491066][T11121] ? __rwlock_init+0x140/0x140 [ 350.495873][T11121] ? generic_write_end+0x24d/0x3d0 [ 350.501000][T11121] ? do_raw_spin_unlock+0x11d/0x230 [ 350.506237][T11121] filemap_fdatawrite_wbc+0x1eb/0x240 [ 350.511631][T11121] file_write_and_wait_range+0x14d/0x220 [ 350.517283][T11121] ? __filemap_set_wb_err+0x1b0/0x1b0 [ 350.522721][T11121] ext4_sync_file+0x1ff/0xae0 [ 350.527425][T11121] ext4_buffered_write_iter+0x338/0x3b0 [ 350.532996][T11121] ext4_file_write_iter+0x74d/0x1700 [ 350.538307][T11121] ? __lock_acquire+0x7d10/0x7d10 [ 350.543367][T11121] ? ext4_file_read_iter+0x700/0x700 [ 350.548669][T11121] ? aa_file_perm+0x38b/0xe80 [ 350.553400][T11121] do_iter_readv_writev+0x47e/0x5f0 [ 350.558651][T11121] ? aa_path_link+0x880/0x880 [ 350.563375][T11121] ? generic_file_rw_checks+0x280/0x280 [ 350.568955][T11121] ? common_file_perm+0x171/0x1c0 [ 350.573999][T11121] ? fsnotify_perm+0x5d/0x560 [ 350.578693][T11121] ? security_file_permission+0x75/0xa0 [ 350.584258][T11121] do_iter_write+0x205/0x7b0 [ 350.588871][T11121] do_pwritev+0x240/0x3a0 [ 350.593217][T11121] ? do_preadv+0x390/0x390 [ 350.597660][T11121] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 350.603667][T11121] ? lock_chain_count+0x20/0x20 [ 350.608559][T11121] ? vtime_user_exit+0x2c8/0x3e0 [ 350.613515][T11121] ? lockdep_hardirqs_on+0x94/0x140 [ 350.618746][T11121] ? __x64_sys_pwritev2+0xba/0x100 [ 350.623871][T11121] do_syscall_64+0x4c/0xa0 [ 350.628304][T11121] ? clear_bhb_loop+0x30/0x80 [ 350.633026][T11121] ? clear_bhb_loop+0x30/0x80 [ 350.637722][T11121] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 350.643641][T11121] RIP: 0033:0x7fb6fb14fdd9 [ 350.648070][T11121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.667697][T11121] RSP: 002b:00007fb6f93a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 350.676137][T11121] RAX: ffffffffffffffda RBX: 00007fb6fb3c8fa0 RCX: 00007fb6fb14fdd9 [ 350.684123][T11121] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 350.692121][T11121] RBP: 00007fb6fb1e5d69 R08: 0000000000000000 R09: 0000000000000000 [ 350.700115][T11121] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000000 [ 350.708099][T11121] R13: 00007fb6fb3c9038 R14: 00007fb6fb3c8fa0 R15: 00007ffd62106c88 [ 350.716100][T11121] [ 350.783527][T11109] XFS (loop6): Ending clean mount [ 350.789328][T11121] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 350.920700][ T6017] XFS (loop6): Unmounting Filesystem [ 351.040712][T11121] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 351.078657][T11121] EXT4-fs (loop2): This should not happen!! Data will be lost [ 351.078657][T11121] [ 351.088938][T11121] EXT4-fs (loop2): Total free blocks count 0 [ 351.094958][T11121] EXT4-fs (loop2): Free/Dirty block details [ 351.119147][T11121] EXT4-fs (loop2): free_blocks=2415919504 [ 351.124944][T11121] EXT4-fs (loop2): dirty_blocks=48 [ 351.173703][T11121] EXT4-fs (loop2): Block reservation details [ 351.209559][T11121] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 351.288928][ T7474] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 351.310782][ T7474] EXT4-fs (loop2): This should not happen!! Data will be lost [ 351.310782][ T7474]