last executing test programs: 1m38.84805987s ago: executing program 4 (id=530): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) socket$packet(0x11, 0x3, 0x300) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x68800, 0x1c) lseek(r5, 0x100, 0x1) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r6, 0xc0045401, &(0x7f0000000040)=0x13c) getdents64(r5, 0x0, 0x4f) r7 = open(&(0x7f0000000080)='./file0\x00', 0x44880, 0x20) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f00000000c0)) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x400, 0x0) 1m37.791145586s ago: executing program 4 (id=535): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000000200000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m36.588027954s ago: executing program 4 (id=540): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000071, 0x0, 0x8019b}]}) 1m36.256829793s ago: executing program 4 (id=543): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000200)={[{@discard}, {@namecase}, {@utf8}, {@gid={'gid', 0x3d, 0xee01}}, {@allow_utime={'allow_utime', 0x3d, 0xf12}}, {@keep_last_dots}, {@umask={'umask', 0x3d, 0x9}}, {@errors_remount}, {@namecase}, {@keep_last_dots}]}, 0x1, 0x1545, &(0x7f0000004500)="$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") mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x14011, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0x2020) 1m35.768228145s ago: executing program 4 (id=546): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) socket$packet(0x11, 0x3, 0x300) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x1) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x68800, 0x1c) lseek(r4, 0x100, 0x1) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r5, 0xc0045401, &(0x7f0000000040)=0x13c) getdents64(r4, 0x0, 0x4f) r6 = open(&(0x7f0000000080)='./file0\x00', 0x44880, 0x20) ioctl$SG_GET_PACK_ID(r6, 0x227c, &(0x7f00000000c0)) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x400, 0x0) 1m35.238074407s ago: executing program 4 (id=550): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000500)={0x84, @multicast2, 0x2005, 0x3, 'none\x00', 0x1, 0x2004, 0x48}, 0x2c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010102, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x12d5c}}, 0x44) 1m34.773081678s ago: executing program 32 (id=550): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000500)={0x84, @multicast2, 0x2005, 0x3, 'none\x00', 0x1, 0x2004, 0x48}, 0x2c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010102, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x12d5c}}, 0x44) 1m17.563775971s ago: executing program 5 (id=621): setpriority(0x2, 0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f00000010c0)={0xa, 0x8, 0x1, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7}, 0x1c) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, 0x0, 0x0) bind$vsock_stream(r2, &(0x7f0000001300)={0x28, 0x0, 0x2710, @hyper}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0x3c964e403b131b43}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) syz_clone(0x8001000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x69f8467e}, 0x8) shutdown(r5, 0x1) 1m14.380143577s ago: executing program 5 (id=636): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x0) pread64(r2, &(0x7f0000003300)=""/102351, 0x18fcf, 0x3a) 1m14.159276512s ago: executing program 5 (id=639): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000001140)='./file0\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x100) truncate(&(0x7f0000000100)='./file0\x00', 0x8000000) ftruncate(r0, 0xff) 1m12.819257884s ago: executing program 5 (id=642): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@nobarrier}, {@dioread_lock}, {@dioread_nolock}, {@resgid}, {@nouid32}, {@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") creat(&(0x7f0000000040)='./bus\x00', 0xe0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1042, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) 1m11.999965504s ago: executing program 5 (id=651): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5514, &(0x7f000000b380)="$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") r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r1, 0x2007ffb) lseek(r0, 0x7ffff3, 0x4) 1m8.751893022s ago: executing program 5 (id=664): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) r4 = accept(r3, 0x0, 0x0) sendmsg$netlink(r4, 0x0, 0x44080) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/timer_list\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000031c0)={0x2020}, 0xb7) gettid() timer_create(0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) r6 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r6, 0x2007ffc) 1m8.356681691s ago: executing program 33 (id=664): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) r4 = accept(r3, 0x0, 0x0) sendmsg$netlink(r4, 0x0, 0x44080) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/timer_list\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000031c0)={0x2020}, 0xb7) gettid() timer_create(0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) r6 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r6, 0x2007ffc) 9.340401016s ago: executing program 3 (id=949): bind$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000c40)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x18, 0x1001}}}}}}}, 0x0) 7.895640951s ago: executing program 3 (id=957): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [{0x1b, 0x0, 0xc00}, {0x832, 0x0, 0x40000}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x6e0, 0x0, 0xaa}]}) 6.70152716s ago: executing program 3 (id=960): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x6, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7, 0x0, 0x8000}, "fe"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 5.375485471s ago: executing program 1 (id=965): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) socket$packet(0x11, 0x3, 0x300) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x68800, 0x1c) lseek(r5, 0x100, 0x1) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r6, 0xc0045401, &(0x7f0000000040)=0x13c) getdents64(r5, 0x0, 0x4f) r7 = open(&(0x7f0000000080)='./file0\x00', 0x44880, 0x20) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f00000000c0)) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x400, 0x0) 4.797794255s ago: executing program 1 (id=966): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_fuse_handle_req(r1, &(0x7f0000004180)="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", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.859238138s ago: executing program 1 (id=967): setpriority(0x2, 0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f00000010c0)={0xa, 0x8, 0x1, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7}, 0x1c) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, 0x0, 0x0) bind$vsock_stream(r2, &(0x7f0000001300)={0x28, 0x0, 0x2710, @hyper}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0x3c964e403b131b43}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) syz_clone(0x8001000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) shutdown(r6, 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xfe46) 3.021196698s ago: executing program 6 (id=968): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) fchdir(r2) open(&(0x7f0000000080)='./file0\x00', 0x44880, 0x20) 2.854156592s ago: executing program 3 (id=971): socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x1) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90) 2.570943759s ago: executing program 2 (id=972): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xeed7e89f6334d838}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) poll(&(0x7f00000002c0)=[{r1, 0x80ad}], 0x1, 0x2) exit(0xffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000240)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) 2.048772961s ago: executing program 0 (id=974): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) 1.936777404s ago: executing program 6 (id=975): mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x200c01, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000002000/0x3000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0200"], 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r0, &(0x7f0000012300)={0x2020}, 0x2031) read$FUSE(r0, &(0x7f00000102c0)={0x2020}, 0x2020) 1.875871976s ago: executing program 0 (id=976): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 1.701953129s ago: executing program 6 (id=977): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x10, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ra={0x89, 0x0, 0x0, 0x0, 0xfe, 0x7, 0x7, 0xffffffff}}}}}}, 0x0) 1.67644952s ago: executing program 0 (id=978): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000800)=@gettaction={0x14, 0x32, 0x4, 0x70bd26, 0x25dfdbfd}, 0x14}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x10c, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x8}, {0x2, 0xf}, {0x8, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.570034383s ago: executing program 2 (id=979): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x800800, &(0x7f0000000100)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee01}}, 0x1, 0x0, &(0x7f0000000200)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x21) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000161000/0x18000)=nil, &(0x7f0000000400)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.496034734s ago: executing program 1 (id=980): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xd362c3f33bcdcdd, 0x401d031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xfef3, 0x0, 0x0) 1.474942205s ago: executing program 6 (id=981): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xb000, 0x41000, 0x8, 0x9, 0x3, 0xe0, 0x40, 0x18, 0xff, 0x30, 0x19}, {0xdddd0000, 0xeeee0000, 0xe, 0x0, 0x40, 0x5, 0x8, 0x8, 0x58, 0x3, 0x3}, {0x80a0000, 0xe000, 0x3, 0x5, 0x3, 0x7, 0x6, 0xfc, 0x1, 0xab, 0x5, 0x81}, {0xdddd0000, 0x0, 0x3, 0x5d, 0x4, 0x63, 0x0, 0xfa, 0x80, 0x7, 0xe, 0x4}, {0xdddd0000, 0x9000, 0x8, 0x2, 0x5, 0x7, 0xab, 0x7f, 0x47, 0x80, 0xf7, 0x82}, {0x0, 0x80a0000, 0x8, 0xa0, 0xb5, 0x8, 0x1, 0x5, 0x4, 0xf, 0x1, 0xfd}, {0xffffffff, 0x200000, 0x4, 0x5, 0x7, 0x2, 0xb, 0x0, 0x6, 0x7e, 0xff, 0x70}, {0x1000, 0xb000, 0x10, 0x9, 0xb, 0x0, 0x3, 0x16, 0x2, 0x3, 0x7, 0x9}, {0xeeee8000, 0x1e}, {0x1, 0xd7e}, 0x80000031, 0x0, 0xf000, 0x42024, 0xf, 0x9501, 0x3000, [0x6840000000000002, 0x6, 0x91, 0xff]}) 1.208431501s ago: executing program 0 (id=982): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1804810, &(0x7f0000000680)=ANY=[@ANYRES16=0x0, @ANYRESOCT], 0xfb, 0x6b2, &(0x7f0000000a00)="$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") r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0) 1.198469982s ago: executing program 2 (id=983): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r3, r2, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) 1.171745892s ago: executing program 1 (id=984): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x21, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2e83}, 0x94) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9f, 0x2, 0xd, 0x80000000000007f, 0x44233, 0x7, 0x1, 0xfffffffffffffff1, 0x9, 0x1005, 0x4, 0x4, 0x8, 0xfffffdfffffffff9], 0x200000, 0x84340}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.014087356s ago: executing program 6 (id=985): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) fchdir(r2) open(&(0x7f0000000080)='./file0\x00', 0x44880, 0x20) 969.829077ms ago: executing program 0 (id=986): bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f00000003c0)={'nat\x00', 0x0, 0x3, 0xd4, [0x5, 0xc, 0xffffffffffffff9e, 0x4, 0x4, 0x6], 0x0, &(0x7f0000000080), &(0x7f00000002c0)=""/212}, &(0x7f0000000480)=0x78) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 849.23154ms ago: executing program 2 (id=987): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 687.873264ms ago: executing program 1 (id=988): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x400, @empty}}, 0x3, 0x0, 0x800, 0x0, 0x32, 0x81}, 0x9c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 615.283456ms ago: executing program 3 (id=989): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@newtfilter={0x70, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff2, 0xffff}, {0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x3, 0x80}, {0x7, 0xfffffff4, 0x80000001, 0x3}}}, @TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x3, 0x2, 0x200}, {0x401}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}]}]}}]}, 0x70}}, 0x0) 605.855046ms ago: executing program 2 (id=990): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) socket$packet(0x11, 0x3, 0x300) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x68800, 0x1c) lseek(r5, 0x100, 0x1) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r6, 0xc0045401, &(0x7f0000000040)=0x13c) getdents64(r5, 0x0, 0x4f) r7 = open(&(0x7f0000000080)='./file0\x00', 0x44880, 0x20) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f00000000c0)) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x400, 0x0) 167.651817ms ago: executing program 3 (id=991): setpriority(0x2, 0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f00000010c0)={0xa, 0x8, 0x1, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7}, 0x1c) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, 0x0, 0x0) bind$vsock_stream(r2, &(0x7f0000001300)={0x28, 0x0, 0x2710, @hyper}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0x3c964e403b131b43}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) syz_clone(0x8001000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) shutdown(r6, 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xfe46) 163.129416ms ago: executing program 0 (id=992): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 101.349838ms ago: executing program 2 (id=993): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file7\x00', 0x0, &(0x7f0000000080), 0x1, 0x507, &(0x7f0000000c00)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="73686f72746e3d312c696f636861727365743d6d616363656e746575726f2c757466383d312c757466383d312c696f636861727365743d63833934392c6e66732c756e695f786c6174653d302c756e695f786c6174653d302c757466383d302c726f6469722c757466383d312c757466383d302c73686f72746e616d653d6d697865642c696f636861727365743d6d6163677265656b2c00"/166], 0x0, 0x37c, &(0x7f0000000880)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x26e1, 0x0) 0s ago: executing program 6 (id=994): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x800800, &(0x7f0000000100)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee01}}, 0x1, 0x0, &(0x7f0000000200)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x21) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000161000/0x18000)=nil, &(0x7f0000000400)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): softirq work is pending, handler #382!!! [ 89.167654][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 89.177647][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 89.187659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 89.197653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 89.207653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 89.217653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 89.248014][ T4350] libceph: connect (1)[c::]:6789 error -101 [ 89.267912][ T4350] libceph: mon0 (1)[c::]:6789 connect error [ 89.344028][ T4514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25'. [ 89.747742][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 90.062003][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 90.071442][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.079441][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.253201][ T4539] loop2: detected capacity change from 0 to 128 [ 90.357510][ T4539] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000ff0) [ 90.418830][ T4539] FAT-fs (loop2): Filesystem has been set read-only [ 90.866161][ T4544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.35'. [ 92.757636][ C1] sched: RT throttling activated [ 93.347205][ T4425] libceph: connect (1)[c::]:6789 error -101 [ 93.349953][ T4425] libceph: mon0 (1)[c::]:6789 connect error [ 93.610739][ T4425] libceph: connect (1)[c::]:6789 error -101 [ 93.611282][ T4425] libceph: mon0 (1)[c::]:6789 connect error [ 94.021468][ T4574] ceph: No mds server is up or the cluster is laggy [ 94.128154][ T4344] libceph: connect (1)[c::]:6789 error -101 [ 94.134239][ T4344] libceph: mon0 (1)[c::]:6789 connect error [ 94.187358][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 0 < 9 [ 94.255169][ T4586] loop2: detected capacity change from 0 to 128 [ 94.807715][ T4282] Bluetooth: hci4: command 0x0405 tx timeout [ 94.905741][ T4584] loop3: detected capacity change from 0 to 32768 [ 95.991714][ T4584] ea_get: invalid extended attribute [ 96.036425][ T4584] ffff888054c63170: 04 00 00 00 .... [ 96.126292][ T4613] ceph: No source [ 96.323454][ T4350] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.524278][ T4350] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 96.533549][ T4350] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 96.559085][ T4630] loop0: detected capacity change from 0 to 128 [ 96.570544][ T4350] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 96.635625][ T4350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.802947][ T4350] usb 3-1: Product: syz [ 96.808225][ T4350] usb 3-1: Manufacturer: syz [ 96.812863][ T4350] usb 3-1: SerialNumber: syz [ 96.820221][ T4350] usb 3-1: config 0 descriptor?? [ 96.830134][ T4350] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 97.023335][ T4637] Illegal XDP return value 4294967262 on prog (id 4) dev syz_tun, expect packet loss! [ 97.428906][ T4350] gspca_sunplus: reg_r err -110 [ 97.521363][ T4350] sunplus: probe of 3-1:0.0 failed with error -110 [ 97.612653][ T4640] comedi comedi3: board detection failed [ 97.684895][ T4646] bridge0: port 3(netdevsim0) entered blocking state [ 97.694529][ T4646] bridge0: port 3(netdevsim0) entered disabled state [ 97.709091][ T4646] device netdevsim0 entered promiscuous mode [ 97.717796][ T4646] bridge0: port 3(netdevsim0) entered blocking state [ 97.724896][ T4646] bridge0: port 3(netdevsim0) entered forwarding state [ 97.759671][ T4647] netlink: 'syz.4.62': attribute type 10 has an invalid length. [ 97.770832][ T4647] bridge0: port 3(netdevsim0) entered disabled state [ 97.778137][ T4647] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.786781][ T4647] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.915826][ T4647] bridge0: port 3(netdevsim0) entered blocking state [ 97.922730][ T4647] bridge0: port 3(netdevsim0) entered forwarding state [ 97.930813][ T4647] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.938000][ T4647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.945403][ T4647] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.952578][ T4647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.978709][ T4647] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 99.253639][ T4649] loop0: detected capacity change from 0 to 256 [ 99.260639][ T4649] exfat: Deprecated parameter 'namecase' [ 99.266457][ T4649] exfat: Deprecated parameter 'utf8' [ 99.395231][ T4649] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 99.562517][ T4421] usb 3-1: USB disconnect, device number 2 [ 101.303354][ T4683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.67'. [ 101.861847][ T4687] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.71' sets config #1 [ 102.515234][ T4700] comedi comedi3: board detection failed [ 102.656011][ T4702] bridge0: port 3(netdevsim0) entered blocking state [ 102.663301][ T4702] bridge0: port 3(netdevsim0) entered disabled state [ 102.677426][ T4702] device netdevsim0 entered promiscuous mode [ 102.685585][ T4702] bridge0: port 3(netdevsim0) entered blocking state [ 102.692392][ T4702] bridge0: port 3(netdevsim0) entered forwarding state [ 102.975373][ T4702] netlink: 'syz.2.78': attribute type 10 has an invalid length. [ 102.984818][ T4702] bridge0: port 3(netdevsim0) entered disabled state [ 102.992245][ T4702] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.999864][ T4702] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.021418][ T4702] bridge0: port 3(netdevsim0) entered blocking state [ 103.028365][ T4702] bridge0: port 3(netdevsim0) entered forwarding state [ 103.035556][ T4702] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.042852][ T4702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.050422][ T4702] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.057737][ T4702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.080481][ T4702] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 104.690001][ T4727] Unknown options in mask b7f2 [ 104.945199][ T4734] loop1: detected capacity change from 0 to 1024 [ 104.959942][ T4731] Zero length message leads to an empty skb [ 105.081749][ T4734] hfsplus: invalid length 1280 has been corrected to 255 [ 106.646310][ T4772] tipc: Can't bind to reserved service type 0 [ 106.672566][ T4764] comedi comedi3: board detection failed [ 106.694194][ T4770] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 106.732917][ T4765] bridge0: port 3(netdevsim0) entered blocking state [ 106.739902][ T4765] bridge0: port 3(netdevsim0) entered disabled state [ 106.750874][ T4765] device netdevsim0 entered promiscuous mode [ 106.759297][ T4765] bridge0: port 3(netdevsim0) entered blocking state [ 106.766127][ T4765] bridge0: port 3(netdevsim0) entered forwarding state [ 106.795903][ T4765] netlink: 'syz.3.97': attribute type 10 has an invalid length. [ 106.812297][ T4765] bridge0: port 3(netdevsim0) entered disabled state [ 106.819362][ T4765] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.826986][ T4765] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.930134][ T4765] bridge0: port 3(netdevsim0) entered blocking state [ 106.937022][ T4765] bridge0: port 3(netdevsim0) entered forwarding state [ 106.944180][ T4765] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.951358][ T4765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.958798][ T4765] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.965950][ T4765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.982718][ T4765] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 108.559300][ T4806] loop2: detected capacity change from 0 to 256 [ 108.571790][ T4806] exfat: Deprecated parameter 'namecase' [ 108.577678][ T4806] exfat: Deprecated parameter 'utf8' [ 108.673333][ T4806] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 109.627565][ T4818] loop0: detected capacity change from 0 to 164 [ 109.833181][ T4797] loop3: detected capacity change from 0 to 32768 [ 110.056892][ T4797] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 110.436011][ T4813] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 110.480902][ T4813] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 111.826983][ T4719] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 117.331443][ T4932] loop4: detected capacity change from 0 to 512 [ 118.083690][ T4932] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 118.164673][ T4932] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #12: comm syz.4.148: corrupted xattr block 8 [ 118.245987][ T4939] loop1: detected capacity change from 0 to 256 [ 118.268417][ T4939] exfat: Deprecated parameter 'utf8' [ 118.286211][ T4939] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 118.536488][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 120.965339][ T4968] capability: warning: `syz.0.157' uses deprecated v2 capabilities in a way that may be insecure [ 122.524063][ T4987] misc userio: The device must be registered before sending interrupts [ 122.581333][ T4992] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 122.586063][ T4993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.167'. [ 122.655368][ T4993] netlink: set zone limit has 4 unknown bytes [ 122.738705][ T4999] loop3: detected capacity change from 0 to 512 [ 122.754799][ T4999] EXT4-fs: Ignoring removed orlov option [ 122.873737][ T4999] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 122.891235][ T4999] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.186314][ T4284] EXT4-fs (loop3): unmounting filesystem. [ 124.977712][ T22] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 125.022963][ T5038] ip_tables: iptables: counters copy to user failed while replacing table [ 125.117734][ T4350] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 125.157703][ T22] usb 3-1: Using ep0 maxpacket: 32 [ 125.178785][ T22] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 125.186827][ T22] usb 3-1: config 0 has no interface number 0 [ 125.196376][ T22] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 125.206738][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.215144][ T22] usb 3-1: Product: syz [ 125.219857][ T22] usb 3-1: Manufacturer: syz [ 125.224493][ T22] usb 3-1: SerialNumber: syz [ 125.245867][ T22] usb 3-1: config 0 descriptor?? [ 125.256121][ T22] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 125.265455][ T22] usb 3-1: selecting invalid altsetting 1 [ 125.271600][ T22] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 125.298410][ T4350] usb 4-1: Using ep0 maxpacket: 32 [ 125.309708][ T4350] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11 [ 125.322607][ T22] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 125.333102][ T4350] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 125.345273][ T22] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 125.354201][ T22] usb 3-1: media controller created [ 125.360972][ T4350] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59391, setting to 1024 [ 125.387775][ T4353] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 125.388003][ T4350] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 125.411988][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.433504][ T4350] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.462040][ T4350] usb 4-1: Product: syz [ 125.487338][ T4350] usb 4-1: Manufacturer: syz [ 125.496855][ T4350] usb 4-1: SerialNumber: syz [ 125.514346][ T22] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 125.528857][ T4350] usb 4-1: config 0 descriptor?? [ 125.535830][ T22] zl10353_read_register: readreg error (reg=127, ret==-71) [ 125.550369][ T5034] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 125.551355][ T22] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 125.574252][ T4350] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 125.597735][ T4353] usb 5-1: Using ep0 maxpacket: 32 [ 125.611549][ T4353] usb 5-1: config index 0 descriptor too short (expected 19, got 18) [ 125.649772][ T4353] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 125.690754][ T4353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.723103][ T22] usb 3-1: USB disconnect, device number 3 [ 125.749433][ T4353] usb 5-1: Product: syz [ 125.764871][ T4353] usb 5-1: Manufacturer: syz [ 125.798204][ T4353] usb 5-1: SerialNumber: syz [ 125.817981][ T4353] usb 5-1: config 0 descriptor?? [ 125.875934][ T4353] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 125.883859][ T4346] usb 4-1: USB disconnect, device number 3 [ 125.883919][ C1] xpad 4-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 125.908370][ T4353] dvb-usb: bulk message failed: -22 (2/0) [ 125.922896][ T4353] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 125.935317][ T4353] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 125.950153][ T4353] usb 5-1: media controller created [ 125.997561][ T4353] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 126.093347][ T5043] cxusb: i2c wr: len=8192 is too big! [ 126.093347][ T5043] [ 126.103044][ T4353] usb 5-1: selecting invalid altsetting 7 [ 126.111425][ T4353] cxusb: set interface failed [ 126.322330][ T4353] dvb-usb: bulk message failed: -22 (1/0) [ 126.650109][ T4353] DVB: Unable to find symbol lgdt330x_attach() [ 126.661917][ T4353] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 126.818465][ T4353] rc_core: IR keymap rc-dvico-portable not found [ 126.831277][ T4353] Registered IR keymap rc-empty [ 126.852157][ T4353] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 126.874693][ T4353] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input7 [ 126.989178][ T4353] dvb-usb: schedule remote query interval to 100 msecs. [ 127.018515][ T4353] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 127.031765][ T4353] usb 5-1: USB disconnect, device number 2 [ 127.136314][ T4353] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 127.238658][ T5081] loop1: detected capacity change from 0 to 4096 [ 127.476127][ T5099] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.819981][ T5081] syz.1.200 (5081) used greatest stack depth: 19536 bytes left [ 129.797704][ T4353] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 130.445904][ T5125] loop2: detected capacity change from 0 to 256 [ 130.463336][ T5125] exfat: Deprecated parameter 'utf8' [ 130.477045][ T5127] loop1: detected capacity change from 0 to 1024 [ 130.484138][ T5125] exfat: Deprecated parameter 'namecase' [ 130.491279][ T5127] EXT4-fs: Ignoring removed bh option [ 130.496800][ T5125] exfat: Deprecated parameter 'namecase' [ 130.502952][ T5127] EXT4-fs: inline encryption not supported [ 130.515557][ T5125] exfat: Deprecated parameter 'namecase' [ 130.521628][ T4353] usb 4-1: Using ep0 maxpacket: 32 [ 130.528966][ T4353] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.541162][ T4353] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.553363][ T4353] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 130.568984][ T4353] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.574093][ T5125] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 130.580949][ T4353] usb 4-1: config 0 descriptor?? [ 130.595564][ T5127] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 2: comm syz.1.214: lblock 2 mapped to illegal pblock 2 (length 1) [ 130.614876][ T4353] hub 4-1:0.0: USB hub found [ 130.623337][ T5127] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 130.632469][ T5127] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.214: Invalid inode table block 1 in block_group 0 [ 130.649247][ T5127] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 130.659732][ T5127] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.214: mark_inode_dirty error [ 130.673899][ T5127] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 130.687534][ T5127] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.214: Failed to acquire dquot type 0 [ 130.699791][ T5127] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 130.712286][ T5127] EXT4-fs error (device loop1): ext4_evict_inode:281: inode #11: comm syz.1.214: mark_inode_dirty error [ 130.734373][ T5127] EXT4-fs warning (device loop1): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 130.745414][ T5127] EXT4-fs (loop1): 1 orphan inode deleted [ 130.751599][ T5127] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 130.762304][ T58] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 130.797696][ T5127] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.214: Invalid inode table block 1 in block_group 0 [ 130.821696][ T58] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 130.826286][ T4353] hub 4-1:0.0: 1 port detected [ 130.830489][ T58] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:4: Failed to release dquot type 0 [ 130.844908][ T5127] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 130.902002][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 130.910028][ T4272] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 130.926372][ T4272] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 130.942647][ T4272] EXT4-fs error (device loop1): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 131.043207][ T4353] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 131.058755][ T4353] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 131.101718][ T4353] usbhid 4-1:0.0: can't add hid device: -71 [ 132.133024][ T5139] ip_tables: iptables: counters copy to user failed while replacing table [ 132.155884][ T4353] usbhid: probe of 4-1:0.0 failed with error -71 [ 132.304393][ T4353] usb 4-1: USB disconnect, device number 4 [ 133.313805][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.321955][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.757671][ T4351] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 135.595738][ T4351] usb 2-1: device descriptor read/all, error -71 [ 136.107946][ T4353] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 136.135612][ T5176] infiniband syz2: set down [ 136.141219][ T5176] infiniband syz2: added ipvlan0 [ 137.912811][ T5176] RDS/IB: syz2: added [ 138.067508][ T5176] smc: adding ib device syz2 with port count 1 [ 138.123742][ T4353] usb 5-1: Using ep0 maxpacket: 16 [ 138.138592][ T4353] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 138.147001][ T4353] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 138.169050][ T5176] smc: ib device syz2 port 1 has pnetid [ 138.186972][ T4353] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 138.195547][ T4353] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 138.211604][ T4353] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 138.230231][ T4353] usb 5-1: config 0 has no interface number 0 [ 138.243856][ T4353] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 138.269699][ T4353] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 138.291451][ T4353] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 138.312050][ T4353] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 138.353751][ T4353] usb 5-1: config 0 interface 125 has no altsetting 0 [ 138.377052][ T4353] usb 5-1: config 0 interface 125 has no altsetting 2 [ 138.395371][ T4353] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 138.405025][ T4353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.413363][ T4353] usb 5-1: Product: syz [ 138.417979][ T4353] usb 5-1: Manufacturer: syz [ 138.422749][ T4353] usb 5-1: SerialNumber: syz [ 139.159446][ T4353] usb 5-1: config 0 descriptor?? [ 139.173917][ T4353] usb 5-1: can't set config #0, error -71 [ 139.182450][ T4353] usb 5-1: USB disconnect, device number 3 [ 140.424452][ T4282] Bluetooth: to_multiplier 8192 > 3200 [ 140.628245][ T5226] SET target dimension over the limit! [ 141.365770][ T5219] ALSA: mixer_oss: invalid OSS volume '' [ 142.117385][ T5237] netlink: 12 bytes leftover after parsing attributes in process `syz.3.245'. [ 142.377713][ T4344] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 142.496859][ T4282] Bluetooth: hci0: command 0x2021 tx timeout [ 142.543683][ T5255] capability: warning: `syz.4.253' uses 32-bit capabilities (legacy support in use) [ 142.559821][ T4344] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.592043][ T4344] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.620125][ T5257] "syz.2.254" (5257) uses obsolete ecb(arc4) skcipher [ 142.627469][ T4344] usb 2-1: config 0 interface 0 has no altsetting 0 [ 142.668306][ T4344] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 142.677497][ T4344] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.708765][ T22] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 142.716648][ T5259] loop2: detected capacity change from 0 to 2048 [ 142.809724][ T5259] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 142.868437][ T5259] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 142.870425][ T4344] usb 2-1: config 0 descriptor?? [ 142.905951][ T5259] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 142.925849][ T5259] UDF-fs: Scanning with blocksize 512 failed [ 142.955150][ T5259] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.057722][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 143.065861][ T22] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.110339][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.154449][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 143.177742][ T4421] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 143.191171][ T22] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 143.218947][ T22] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.257283][ T22] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 143.284957][ T22] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 143.297832][ T4344] sony 0003:054C:0268.0001: ignoring exceeding usage max [ 143.314182][ T4344] sony 0003:054C:0268.0001: unbalanced collection at end of report description [ 143.323316][ T26] audit: type=1800 audit(1791996645.295:2): pid=5273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.261" name="idVendor" dev="configfs" ino=37184 res=0 errno=0 [ 143.339738][ T5273] using random self ethernet address [ 143.348409][ T22] usb 4-1: Manufacturer: syz [ 143.359189][ T4344] sony 0003:054C:0268.0001: parse failed [ 143.365883][ T22] usb 4-1: config 0 descriptor?? [ 143.373328][ T4421] usb 5-1: config 0 interface 0 altsetting 248 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.388318][ T4344] sony: probe of 0003:054C:0268.0001 failed with error -22 [ 143.395903][ T4421] usb 5-1: config 0 interface 0 altsetting 248 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.410102][ T5273] using random host ethernet address [ 143.439458][ T4421] usb 5-1: config 0 interface 0 has no altsetting 0 [ 143.446341][ T4421] usb 5-1: New USB device found, idVendor=056a, idProduct=00df, bcdDevice= 0.00 [ 143.455908][ T4421] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.488160][ T4421] usb 5-1: config 0 descriptor?? [ 143.563676][ T5273] usb0: HOST MAC be:39:fa:8f:2e:97 [ 143.605458][ T5273] usb0: MAC ce:22:ec:4e:a7:8c [ 143.616010][ T4344] usb 2-1: USB disconnect, device number 4 [ 143.827751][ T22] rc_core: IR keymap rc-hauppauge not found [ 143.833708][ T22] Registered IR keymap rc-empty [ 143.846539][ T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 143.911378][ T4421] wacom 0003:056A:00DF.0002: Unknown device_type for 'HID 056a:00df'. Assuming pen. [ 143.920996][ T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 143.946339][ T4342] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 143.958401][ T22] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 143.968514][ T5279] loop2: detected capacity change from 0 to 4096 [ 143.980545][ T4421] wacom 0003:056A:00DF.0002: hidraw0: USB HID vf9.be Joystick [HID 056a:00df] on usb-dummy_hcd.4-1/input0 [ 144.014931][ T22] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9 [ 144.057793][ T4421] input: Wacom Bamboo 16FG 6x8 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00DF.0002/input/input10 [ 144.063458][ T5281] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.126786][ T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 144.138559][ T4342] usb 1-1: Dual-Role OTG device on HNP port [ 144.154846][ T4342] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 144.167815][ T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 144.191547][ T4342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.198583][ T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 144.229446][ T4421] usb 5-1: USB disconnect, device number 4 [ 144.268104][ T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 144.318158][ T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 144.362494][ T4342] cdc_ncm 1-1:1.0: MAC-Address: be:39:fa:8f:2e:97 [ 144.387772][ T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 144.425980][ T4342] cdc_ncm 1-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), be:39:fa:8f:2e:97 [ 144.457795][ T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 144.667840][ T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 145.329873][ T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 145.372552][ T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 145.525461][ T5286] fido_id[5286]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 145.549052][ T22] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 145.585897][ T22] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 145.653165][ T22] usb 4-1: USB disconnect, device number 5 [ 147.029678][ T5326] loop4: detected capacity change from 0 to 1024 [ 147.328615][ T5326] EXT4-fs: Ignoring removed bh option [ 147.380335][ T5326] EXT4-fs: inline encryption not supported [ 147.458282][ T5326] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 2: comm syz.4.272: lblock 2 mapped to illegal pblock 2 (length 1) [ 147.538776][ T5326] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 147.547385][ T5326] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz.4.272: Invalid inode table block 1 in block_group 0 [ 147.567476][ T5326] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 147.584621][ T5326] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.272: mark_inode_dirty error [ 147.596454][ T5326] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 147.612477][ T5326] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.272: Failed to acquire dquot type 0 [ 147.625944][ T5326] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 147.727233][ T5326] EXT4-fs error (device loop4): ext4_evict_inode:281: inode #11: comm syz.4.272: mark_inode_dirty error [ 147.772348][ T5326] EXT4-fs warning (device loop4): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 147.827796][ T5326] EXT4-fs (loop4): 1 orphan inode deleted [ 147.958781][ T5326] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 148.625655][ T4495] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 148.710059][ T4495] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 148.851983][ T5351] netlink: 'syz.1.275': attribute type 4 has an invalid length. [ 149.102115][ T4495] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:11: Failed to release dquot type 0 [ 149.350117][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 149.356022][ T4285] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 149.367494][ T5352] loop2: detected capacity change from 0 to 512 [ 149.392862][ T5352] EXT4-fs (loop2): 1 truncate cleaned up [ 149.398832][ T5352] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 149.418899][ T5352] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.277: bg 0: block 465: padding at end of block bitmap is not set [ 149.437433][ T5352] EXT4-fs (loop2): Remounting filesystem read-only [ 149.476729][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 149.497741][ T4285] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 149.580395][ T4285] EXT4-fs error (device loop4): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 150.894817][ T5383] loop3: detected capacity change from 0 to 164 [ 152.300801][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): usb1: link becomes ready [ 152.807689][ T7] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 153.644241][ T7] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 153.692069][ T7] usb 3-1: config 0 interface 0 has no altsetting 0 [ 153.729728][ T7] usb 3-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 153.763862][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.832912][ T7] usb 3-1: config 0 descriptor?? [ 153.858240][ T5410] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 154.960661][ T7] lenovo 0003:17EF:6062.0003: unknown main item tag 0x2 [ 154.977965][ T7] lenovo 0003:17EF:6062.0003: unknown main item tag 0x3 [ 155.017731][ T7] lenovo 0003:17EF:6062.0003: unknown main item tag 0x1 [ 155.024761][ T7] lenovo 0003:17EF:6062.0003: unknown main item tag 0x2 [ 155.068855][ T7] lenovo 0003:17EF:6062.0003: hidraw0: USB HID v0.01 Device [HID 17ef:6062] on usb-dummy_hcd.2-1/input0 [ 155.216566][ T4425] usb 3-1: USB disconnect, device number 4 [ 155.242482][ T5462] loop3: detected capacity change from 0 to 128 [ 155.347171][ T26] audit: type=1800 audit(1791996657.325:3): pid=5462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.307" name="file1" dev="loop3" ino=1048666 res=0 errno=0 [ 155.393087][ T5458] fido_id[5458]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 155.955761][ T5451] loop4: detected capacity change from 0 to 32768 [ 156.083861][ T26] audit: type=1800 audit(1791996658.065:4): pid=5479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.310" name="idVendor" dev="configfs" ino=37408 res=0 errno=0 [ 156.135881][ T5451] XFS (loop4): Mounting V5 Filesystem [ 156.213105][ T5451] XFS (loop4): Ending clean mount [ 156.478907][ T4285] XFS (loop4): Unmounting Filesystem [ 156.667456][ T5495] loop1: detected capacity change from 0 to 4096 [ 156.744839][ T5473] loop3: detected capacity change from 0 to 32768 [ 156.795755][ T5473] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 156.918418][ T5495] ntfs3: loop1: Failed to load $Extend. [ 157.071238][ T5501] loop4: detected capacity change from 0 to 1024 [ 157.101673][ T26] audit: type=1800 audit(1791996659.085:5): pid=5495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.322" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 157.233086][ T5501] EXT4-fs: Ignoring removed nobh option [ 157.300309][ T5501] EXT4-fs: Ignoring removed bh option [ 157.305752][ T5501] EXT4-fs: Ignoring removed nomblk_io_submit option [ 157.339444][ T5268] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 157.739246][ T5501] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 157.957729][ T26] audit: type=1800 audit(1791996659.925:6): pid=5501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.313" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 158.006138][ T5501] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 158.752585][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 159.115344][ T5532] netlink: 256 bytes leftover after parsing attributes in process `syz.1.320'. [ 159.188911][ T5532] netlink: 64 bytes leftover after parsing attributes in process `syz.1.320'. [ 159.540388][ T5503] loop2: detected capacity change from 0 to 32768 [ 159.575629][ T5503] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.325 (5503) [ 159.612617][ T5544] netlink: 32 bytes leftover after parsing attributes in process `syz.0.326'. [ 159.649422][ T5503] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 159.698137][ T5503] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 159.734540][ T5503] BTRFS info (device loop2): using free space tree [ 159.987865][ T5503] BTRFS info (device loop2): enabling ssd optimizations [ 160.192338][ T4281] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 161.698003][ T5545] loop1: detected capacity change from 0 to 32768 [ 161.795976][ T5545] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 163.295855][ T5290] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 163.975014][ T5650] loop2: detected capacity change from 0 to 1024 [ 164.936907][ T5636] loop1: detected capacity change from 0 to 32768 [ 164.988469][ T5636] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.343 (5636) [ 165.028848][ T5636] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 165.068162][ T5636] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 165.092780][ T5636] BTRFS info (device loop1): using free space tree [ 165.599206][ T5678] netlink: 'syz.3.355': attribute type 4 has an invalid length. [ 166.412889][ T5636] BTRFS error (device loop1): open_ctree failed: -12 [ 166.704193][ T5175] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (5175) [ 168.945737][ T5706] loop4: detected capacity change from 0 to 32768 [ 168.953580][ T5744] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 169.034874][ T5706] (syz.4.356,5706,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 169.077507][ T5706] (syz.4.356,5706,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 169.190616][ T5706] JBD2: Ignoring recovery information on journal [ 169.267992][ T5756] jffs2: notice: (5756) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 169.882108][ T5759] netlink: 'syz.2.372': attribute type 4 has an invalid length. [ 170.041432][ T5728] loop3: detected capacity change from 0 to 32768 [ 170.210092][ T5728] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 170.211386][ T5706] JBD2: recovery failed [ 170.261209][ T5706] (syz.4.356,5706,0):ocfs2_journal_load:1135 ERROR: Failed to load journal! [ 170.278074][ T5706] (syz.4.356,5706,0):ocfs2_check_volume:2431 ERROR: ocfs2 journal load failed! -5 [ 170.327682][ T5706] (syz.4.356,5706,0):ocfs2_check_volume:2487 ERROR: status = -5 [ 170.359656][ T5706] (syz.4.356,5706,0):ocfs2_mount_volume:1821 ERROR: status = -5 [ 170.426450][ T5706] (syz.4.356,5706,0):ocfs2_fill_super:1176 ERROR: status = -5 [ 170.632121][ T5290] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 171.223390][ T5770] loop1: detected capacity change from 0 to 32768 [ 171.253577][ T5770] ea_get: invalid extended attribute [ 171.265818][ T5770] ffff888072ff3170: 04 00 00 00 .... [ 171.687240][ T5801] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 172.025516][ T5809] loop3: detected capacity change from 0 to 1024 [ 173.498610][ T5812] loop1: detected capacity change from 0 to 32768 [ 173.556737][ T5812] (syz.1.387,5812,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 173.648929][ T5812] (syz.1.387,5812,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 173.786303][ T5812] JBD2: Ignoring recovery information on journal [ 173.826687][ T5812] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 175.012770][ T5853] netlink: 20 bytes leftover after parsing attributes in process `syz.4.400'. [ 175.116567][ T5853] netlink: 24 bytes leftover after parsing attributes in process `syz.4.400'. [ 175.228239][ T5853] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 175.601756][ T4272] ocfs2: Unmounting device (7,1) on (node local) [ 175.886800][ T5876] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 178.337590][ T5923] Bluetooth: MGMT ver 1.22 [ 178.365741][ T5924] netlink: 44 bytes leftover after parsing attributes in process `syz.3.422'. [ 178.411656][ T5916] loop1: detected capacity change from 0 to 4096 [ 178.413943][ T5924] netlink: 59 bytes leftover after parsing attributes in process `syz.3.422'. [ 178.438866][ T5924] netlink: 59 bytes leftover after parsing attributes in process `syz.3.422'. [ 178.469693][ T5916] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 178.505908][ T5927] jffs2: notice: (5927) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 178.531683][ T5916] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 178.584652][ T5916] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 178.646874][ T5932] netlink: 12 bytes leftover after parsing attributes in process `syz.4.424'. [ 178.657986][ T5916] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 178.695951][ T5916] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 178.737241][ T5916] ntfs: volume version 3.1. [ 178.767831][ T5916] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 178.808274][ T5916] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 178.844814][ T5936] netlink: 24 bytes leftover after parsing attributes in process `syz.2.426'. [ 178.864118][ T5916] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 178.884191][ T5916] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 178.948113][ T5916] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 179.381752][ T5948] ip_tables: iptables: counters copy to user failed while replacing table [ 180.515356][ T5935] loop3: detected capacity change from 0 to 32768 [ 180.644660][ T5935] XFS (loop3): Mounting V5 Filesystem [ 180.877112][ T5935] XFS (loop3): Starting recovery (logdev: internal) [ 181.042309][ T5935] XFS (loop3): Ending recovery (logdev: internal) [ 181.549701][ T4284] XFS (loop3): Unmounting Filesystem [ 182.130581][ T6020] loop3: detected capacity change from 0 to 136 [ 182.258024][ T6020] rock: directory entry would overflow storage [ 182.264645][ T6020] rock: sig=0x4f50, size=4, remaining=3 [ 182.288307][ T6020] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 183.919453][ T6047] bond0: (slave bridge0): Error: Slave device does not support XDP [ 183.957891][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 183.957905][ T26] audit: type=1800 audit(1791996685.935:7): pid=6051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.450" name="UDC" dev="configfs" ino=38258 res=0 errno=0 [ 187.265627][ T6103] mmap: syz.0.465 (6103) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 191.587958][ T6180] loop2: detected capacity change from 0 to 40427 [ 191.632059][ T6180] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff [ 191.688705][ T6180] F2FS-fs (loop2): invalid crc value [ 191.718552][ T6180] F2FS-fs (loop2): Found nat_bits in checkpoint [ 191.852387][ T6180] F2FS-fs (loop2): Start checkpoint disabled! [ 191.961772][ T6180] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 192.465767][ T4440] kworker/u4:7: attempt to access beyond end of device [ 192.465767][ T4440] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 194.331415][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.337833][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.409003][ T6222] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 194.986246][ T6235] loop1: detected capacity change from 0 to 32768 [ 195.096417][ T6235] XFS (loop1): Mounting V5 Filesystem [ 195.222827][ T6235] XFS (loop1): Starting recovery (logdev: internal) [ 195.357681][ T6235] XFS (loop1): Ending recovery (logdev: internal) [ 195.732373][ T6251] loop4: detected capacity change from 0 to 32768 [ 195.749781][ T4272] XFS (loop1): Unmounting Filesystem [ 195.925733][ T6251] XFS (loop4): Mounting V5 Filesystem [ 196.142511][ T6251] XFS (loop4): Ending clean mount [ 196.249878][ T6251] XFS (loop4): Quotacheck needed: Please wait. [ 196.417134][ T6251] XFS (loop4): Quotacheck: Done. [ 196.661036][ T4285] XFS (loop4): Unmounting Filesystem [ 198.714875][ T6330] loop3: detected capacity change from 0 to 8192 [ 198.907575][ T6341] loop2: detected capacity change from 0 to 8192 [ 198.992101][ T6341] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 199.123547][ T6341] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 199.188526][ T6341] REISERFS (device loop2): using ordered data mode [ 199.195132][ T6341] reiserfs: using flush barriers [ 199.264136][ T6341] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 199.369229][ T6341] REISERFS (device loop2): checking transaction log (loop2) [ 199.416094][ T6341] REISERFS (device loop2): Using r5 hash to sort names [ 199.444140][ T6341] REISERFS (device loop2): using 3.5.x disk format [ 199.490596][ T6341] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 200.597111][ T4342] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 201.073509][ T6389] bond0: (slave bridge0): Error: Slave device does not support XDP [ 201.147731][ T4342] usb 2-1: Using ep0 maxpacket: 8 [ 201.154649][ T4342] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 201.177693][ T4342] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 201.208002][ T4342] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 201.237682][ T4342] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 201.273539][ T4342] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.351446][ T4342] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 201.389163][ T4342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.527890][ T49] Bluetooth: hci0: command 0x0406 tx timeout [ 201.533969][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 201.544121][ T4280] Bluetooth: hci4: command 0x0406 tx timeout [ 201.544148][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 201.550260][ T4280] Bluetooth: hci2: command 0x0406 tx timeout [ 201.627211][ T4342] usb 2-1: GET_CAPABILITIES returned 0 [ 201.633679][ T4342] usbtmc 2-1:16.0: can't read capabilities [ 201.877815][ T4342] usb 2-1: USB disconnect, device number 5 [ 202.009960][ T6411] loop4: detected capacity change from 0 to 256 [ 202.037359][ T6396] loop2: detected capacity change from 0 to 32768 [ 202.045171][ T6411] exfat: Deprecated parameter 'namecase' [ 202.105792][ T6411] exfat: Deprecated parameter 'utf8' [ 202.119076][ T6411] exfat: Deprecated parameter 'namecase' [ 202.131571][ T6411] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 202.178165][ T6396] XFS (loop2): Mounting V5 Filesystem [ 202.237853][ T6411] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x7cbd4b0d, utbl_chksum : 0xe619d30d) [ 202.256392][ T6396] XFS (loop2): Ending clean mount [ 202.461210][ T4281] XFS (loop2): Unmounting Filesystem [ 202.542901][ T6425] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.550473][ T6425] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.073977][ T4824] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.279168][ T4824] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.397325][ T4824] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.496573][ T4824] bridge0: port 3(netdevsim0) entered disabled state [ 203.556146][ T4824] device netdevsim0 left promiscuous mode [ 203.562131][ T4824] bridge0: port 3(netdevsim0) entered disabled state [ 203.583510][ T4824] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.084959][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 205.099547][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 205.108776][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 205.123526][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 205.132134][ T49] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 205.139661][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 205.567790][ T6460] netlink: 72 bytes leftover after parsing attributes in process `syz.0.557'. [ 205.728180][ T6456] rxe_eth0 speed is unknown, defaulting to 1000 [ 206.056642][ T6462] loop1: detected capacity change from 0 to 32768 [ 206.887972][ T49] Bluetooth: hci3: command 0x0405 tx timeout [ 207.124906][ T6487] netlink: 64 bytes leftover after parsing attributes in process `syz.3.564'. [ 207.208265][ T4280] Bluetooth: hci4: command 0x0409 tx timeout [ 208.899642][ T6510] loop2: detected capacity change from 0 to 64 [ 209.287853][ T4280] Bluetooth: hci4: command 0x041b tx timeout [ 209.461791][ T6456] chnl_net:caif_netlink_parms(): no params data found [ 209.855698][ T4824] device hsr_slave_0 left promiscuous mode [ 209.928586][ T4824] device hsr_slave_1 left promiscuous mode [ 209.946702][ T4824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.007350][ T4824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.047266][ T4824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.059388][ T4824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.086554][ T4824] device bridge_slave_1 left promiscuous mode [ 210.104959][ T4824] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.160475][ T4824] device bridge_slave_0 left promiscuous mode [ 210.171835][ T4824] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.295865][ T4824] device veth1_macvtap left promiscuous mode [ 210.319362][ T4824] device veth0_macvtap left promiscuous mode [ 210.340603][ T4824] device veth1_vlan left promiscuous mode [ 210.363663][ T4824] device veth0_vlan left promiscuous mode [ 211.430241][ T4280] Bluetooth: hci4: command 0x040f tx timeout [ 212.095795][ T4824] team0 (unregistering): Port device team_slave_1 removed [ 212.141247][ T4824] team0 (unregistering): Port device team_slave_0 removed [ 212.198524][ T4824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.249151][ T4824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.612928][ T4824] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 212.622047][ T4824] bond0 (unregistering): Released all slaves [ 212.694476][ T6456] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.702100][ T6456] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.712234][ T6456] device bridge_slave_0 entered promiscuous mode [ 212.864808][ T6456] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.882106][ T6456] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.948856][ T6456] device bridge_slave_1 entered promiscuous mode [ 213.003099][ T6456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.072798][ T6456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.145563][ T6581] netlink: 2 bytes leftover after parsing attributes in process `syz.3.586'. [ 213.184039][ T6456] team0: Port device team_slave_0 added [ 213.223863][ T6456] team0: Port device team_slave_1 added [ 213.314127][ T6456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.330553][ T6456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.447856][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 213.467234][ T6456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.535997][ T6585] loop1: detected capacity change from 0 to 8192 [ 213.554338][ T6456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.562801][ T6456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.596627][ T6456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.657756][ T6585] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 213.688257][ T6585] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 213.697523][ T6585] REISERFS (device loop1): using ordered data mode [ 213.767716][ T6585] reiserfs: using flush barriers [ 213.773988][ T6585] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 213.805468][ T6585] REISERFS (device loop1): checking transaction log (loop1) [ 213.987368][ T6456] device hsr_slave_0 entered promiscuous mode [ 214.024685][ T6456] device hsr_slave_1 entered promiscuous mode [ 214.050874][ T6456] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.087859][ T6456] Cannot create hsr debugfs directory [ 214.205372][ T6585] REISERFS (device loop1): Using tea hash to sort names [ 214.243835][ T6585] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 214.420476][ T6606] syz.2.591 uses obsolete (PF_INET,SOCK_PACKET) [ 214.842081][ T6456] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 214.881370][ T6456] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 214.920891][ T6456] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 214.971657][ T6456] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 215.266765][ T6456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.345557][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.369292][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.401564][ T6456] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.421936][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.449144][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.467894][ T4824] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.475065][ T4824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.530319][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.558497][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.589518][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.608659][ T4824] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.615834][ T4824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.664327][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.725507][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.747552][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.758932][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.788017][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.821726][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.864545][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 215.890109][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 215.932317][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 215.958603][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 215.988592][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.015693][ T6456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 216.917086][ T6630] loop1: detected capacity change from 0 to 32768 [ 217.081647][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.117411][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.162796][ T6456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.218820][ T4351] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 217.431886][ T4351] usb 4-1: Using ep0 maxpacket: 32 [ 217.444721][ T4351] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 217.507000][ T4351] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 217.561459][ T4351] usb 4-1: config 0 interface 0 has no altsetting 0 [ 217.600007][ T4351] usb 4-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 217.650238][ T4351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.700066][ T4351] usb 4-1: config 0 descriptor?? [ 218.074039][ T6681] loop1: detected capacity change from 0 to 512 [ 218.606532][ T6681] EXT4-fs (loop1): Test dummy encryption mode enabled [ 218.646658][ T6681] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #11: comm syz.1.606: casefold flag without casefold feature [ 218.657513][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 218.672534][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 218.703934][ T6681] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.606: couldn't read orphan inode 11 (err -117) [ 218.725678][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 218.739685][ T4351] hid-alps 0003:044E:120B.0004: failed to read command (-71) [ 218.755904][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 218.766813][ T6681] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 218.774053][ T4351] hid-alps 0003:044E:120B.0004: failed to change TP mode (-71) [ 218.800360][ T6456] device veth0_vlan entered promiscuous mode [ 218.839443][ T4351] hid-alps 0003:044E:120B.0004: hidraw0: USB HID v80.00 Joystick [HID 044e:120b] on usb-dummy_hcd.3-1/input0 [ 218.852550][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 218.878537][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 218.889609][ T6456] device veth1_vlan entered promiscuous mode [ 218.901613][ T6681] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.606: bg 0: block 7: invalid block bitmap [ 218.921785][ T4351] usb 4-1: USB disconnect, device number 6 [ 219.034411][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 219.054254][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 219.085635][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 219.125992][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 219.136516][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 219.168558][ T6456] device veth0_macvtap entered promiscuous mode [ 219.188265][ T6456] device veth1_macvtap entered promiscuous mode [ 219.200776][ T6699] fido_id[6699]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 219.293275][ T6456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.331419][ T6456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.357238][ T6456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.395728][ T6456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.421382][ T6456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.436140][ T6456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.446747][ T6456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.473728][ T6456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.502017][ T6456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.524613][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 219.573419][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 219.592254][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 219.619613][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 219.652395][ T26] audit: type=1326 audit(1791996721.625:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6711 comm="syz.1.611" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ab3f9e559 code=0x0 [ 219.677210][ T6456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.694164][ T6456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.705739][ T6456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.719631][ T6456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.729927][ T6456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.740891][ T6456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.757736][ T6456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.779000][ T6456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.801352][ T6456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.827016][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 219.838447][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 219.857512][ T6456] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.868904][ T6456] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.880123][ T6456] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.890337][ T6456] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.094697][ T4824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.110915][ T4824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.135658][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 220.173106][ T4497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.190167][ T4497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.212604][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 220.273496][ T26] audit: type=1326 audit(1791996722.255:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6732 comm="syz.2.618" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f66d2f9e559 code=0x0 [ 220.337783][ T4425] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 220.527849][ T4425] usb 4-1: Using ep0 maxpacket: 16 [ 220.535063][ T4425] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.547291][ T6745] loop1: detected capacity change from 0 to 512 [ 220.588437][ T4425] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.608249][ T4425] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 220.652571][ T6745] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 220.653084][ T4425] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 220.671413][ T4425] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.817928][ T6745] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 220.829708][ T4425] usb 4-1: config 0 descriptor?? [ 220.900425][ T6745] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #2: comm syz.1.620: corrupted inode contents [ 221.017425][ T6745] EXT4-fs (loop1): Remounting filesystem read-only [ 221.027357][ T6745] EXT4-fs error (device loop1): ext4_dirty_inode:6166: inode #2: comm syz.1.620: mark_inode_dirty error [ 221.068830][ T6745] EXT4-fs (loop1): Remounting filesystem read-only [ 221.076604][ T6745] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #2: comm syz.1.620: corrupted inode contents [ 221.108090][ T6745] EXT4-fs (loop1): Remounting filesystem read-only [ 221.136310][ T6756] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #2: comm syz.1.620: corrupted inode contents [ 221.267439][ T4425] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 221.284251][ T6756] EXT4-fs (loop1): Remounting filesystem read-only [ 221.296223][ T6756] EXT4-fs error (device loop1): ext4_dirty_inode:6166: inode #2: comm syz.1.620: mark_inode_dirty error [ 221.304613][ T4425] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 221.332083][ T6756] EXT4-fs (loop1): Remounting filesystem read-only [ 221.348831][ T6756] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #2: comm syz.1.620: corrupted inode contents [ 221.349257][ T4425] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 221.405237][ T6756] EXT4-fs (loop1): Remounting filesystem read-only [ 221.415424][ T6756] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.620: mark_inode_dirty error [ 221.427906][ T4425] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 221.461755][ T4425] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 221.476641][ T6756] EXT4-fs (loop1): Remounting filesystem read-only [ 221.485800][ T4425] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 221.501831][ T6756] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #2: comm syz.1.620: corrupted inode contents [ 221.504701][ T4425] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 221.538879][ T6756] EXT4-fs (loop1): Remounting filesystem read-only [ 221.545454][ T6756] EXT4-fs error (device loop1): ext4_dirty_inode:6166: inode #2: comm syz.1.620: mark_inode_dirty error [ 221.559068][ T4425] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 221.562889][ T6769] loop2: detected capacity change from 0 to 512 [ 221.566390][ T4425] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 221.586112][ T6756] EXT4-fs (loop1): Remounting filesystem read-only [ 221.586980][ T4425] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 221.620357][ T6745] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #2: comm syz.1.620: corrupted inode contents [ 221.656352][ T4425] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0005/input/input14 [ 221.745230][ T4425] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 221.775555][ T6769] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 221.928442][ T4425] usb 4-1: USB disconnect, device number 7 [ 222.410967][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 222.411635][ T6779] fido_id[6779]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 223.207792][ T4280] Bluetooth: hci4: command 0x0405 tx timeout [ 223.554380][ T6806] FAULT_INJECTION: forcing a failure. [ 223.554380][ T6806] name fail_futex, interval 1, probability 0, space 0, times 1 [ 223.593822][ T6806] CPU: 0 PID: 6806 Comm: syz.2.633 Not tainted syzkaller #0 [ 223.601225][ T6806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 223.611330][ T6806] Call Trace: [ 223.614633][ T6806] [ 223.617587][ T6806] dump_stack_lvl+0x188/0x24e [ 223.622296][ T6806] ? show_regs_print_info+0x12/0x12 [ 223.627521][ T6806] ? load_image+0x410/0x410 [ 223.632059][ T6806] should_fail_ex+0x390/0x4c0 [ 223.636769][ T6806] get_futex_key+0x1b1/0x1000 [ 223.641561][ T6806] ? futex_setup_timer+0xc0/0xc0 [ 223.646523][ T6806] futex_wake+0x123/0x4f0 [ 223.650878][ T6806] ? futex_wake_mark+0x150/0x150 [ 223.655849][ T6806] ? __lock_acquire+0x7ea0/0x7ea0 [ 223.660915][ T6806] do_futex+0x2e2/0x320 [ 223.665101][ T6806] ? mntput_no_expire+0xbb/0x840 [ 223.670071][ T6806] ? __ia32_sys_get_robust_list+0x100/0x100 [ 223.675990][ T6806] ? mntput+0xb0/0xb0 [ 223.680015][ T6806] __se_sys_futex+0x381/0x410 [ 223.684737][ T6806] ? __x64_sys_futex+0xf0/0xf0 [ 223.689539][ T6806] ? __x64_sys_futex+0x1d/0xf0 [ 223.694331][ T6806] do_syscall_64+0x4c/0xa0 [ 223.698814][ T6806] ? clear_bhb_loop+0x60/0xb0 [ 223.703497][ T6806] ? clear_bhb_loop+0x60/0xb0 [ 223.708172][ T6806] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 223.714074][ T6806] RIP: 0033:0x7f66d2f9e559 [ 223.718492][ T6806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.738134][ T6806] RSP: 002b:00007f66d3d940e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 223.746635][ T6806] RAX: ffffffffffffffda RBX: 00007f66d3225fa8 RCX: 00007f66d2f9e559 [ 223.754629][ T6806] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f66d3225fac [ 223.762598][ T6806] RBP: 00007f66d3225fa0 R08: 001ddf779dc46ac2 R09: 0000000000000000 [ 223.770566][ T6806] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 223.778540][ T6806] R13: 00007f66d3226038 R14: 00007fff44d3e510 R15: 00007fff44d3e5f8 [ 223.786533][ T6806] [ 223.916454][ T6814] rxe_eth0 speed is unknown, defaulting to 1000 [ 223.947689][ T4344] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 223.950731][ T4346] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 224.139438][ T4344] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.157815][ T4344] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 224.177657][ T4344] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 224.178085][ T4346] usb 4-1: Using ep0 maxpacket: 32 [ 224.197676][ T4344] usb 2-1: config 0 interface 0 has no altsetting 0 [ 224.214743][ T4344] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 224.219212][ T4346] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.234398][ T4344] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.250022][ T4346] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.259759][ T4344] usb 2-1: config 0 descriptor?? [ 224.260782][ T6808] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 224.270350][ T4346] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 224.300967][ T6821] loop5: detected capacity change from 0 to 8192 [ 224.310402][ T4346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.335091][ T4346] usb 4-1: config 0 descriptor?? [ 224.372213][ T6821] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 224.383344][ T4346] hub 4-1:0.0: USB hub found [ 224.426608][ T6821] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 224.443757][ T6821] REISERFS (device loop5): using ordered data mode [ 224.451576][ T6821] reiserfs: using flush barriers [ 224.464854][ T6821] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 224.482369][ T6821] REISERFS (device loop5): checking transaction log (loop5) [ 224.532612][ T6825] "syz.2.640" (6825) uses obsolete ecb(arc4) skcipher [ 224.571251][ T4346] hub 4-1:0.0: 1 port detected [ 224.726231][ T6821] REISERFS (device loop5): Using tea hash to sort names [ 224.741221][ T6827] FAULT_INJECTION: forcing a failure. [ 224.741221][ T6827] name failslab, interval 1, probability 0, space 0, times 1 [ 224.754597][ T4344] dragonrise 0003:0079:0006.0006: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.1-1/input0 [ 224.766234][ T6821] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 224.790684][ T4346] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 224.797966][ T6827] CPU: 0 PID: 6827 Comm: syz.2.641 Not tainted syzkaller #0 [ 224.805294][ T6827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 224.815377][ T6827] Call Trace: [ 224.818678][ T6827] [ 224.821636][ T6827] dump_stack_lvl+0x188/0x24e [ 224.826352][ T6827] ? show_regs_print_info+0x12/0x12 [ 224.831588][ T6827] ? load_image+0x410/0x410 [ 224.836120][ T6827] ? __might_sleep+0xd0/0xd0 [ 224.840744][ T6827] ? __lock_acquire+0x7ea0/0x7ea0 [ 224.845804][ T6827] should_fail_ex+0x390/0x4c0 [ 224.850618][ T6827] should_failslab+0x5/0x20 [ 224.855173][ T6827] slab_pre_alloc_hook+0x59/0x300 [ 224.857724][ T4344] dragonrise 0003:0079:0006.0006: no inputs found [ 224.860220][ T6827] kmem_cache_alloc+0x56/0x2f0 [ 224.860248][ T6827] ? security_file_alloc+0x30/0x110 [ 224.860275][ T6827] security_file_alloc+0x30/0x110 [ 224.866734][ T4344] dragonrise 0003:0079:0006.0006: force feedback init failed [ 224.871457][ T6827] __alloc_file+0xc2/0x230 [ 224.871488][ T6827] alloc_empty_file+0x90/0x180 [ 224.871505][ T6827] alloc_file+0x5b/0x5f0 [ 224.871526][ T6827] alloc_file_pseudo+0x180/0x200 [ 224.871548][ T6827] ? alloc_empty_file_noaccount+0x80/0x80 [ 224.871570][ T6827] ? alloc_fd+0x590/0x640 [ 224.871599][ T6827] anon_inode_getfd+0xc6/0x1b0 [ 224.922418][ T6827] do_inotify_init+0x33e/0x450 [ 224.927196][ T6827] __x64_sys_inotify_init1+0x33/0x40 [ 224.932477][ T6827] do_syscall_64+0x4c/0xa0 [ 224.936892][ T6827] ? clear_bhb_loop+0x60/0xb0 [ 224.941564][ T6827] ? clear_bhb_loop+0x60/0xb0 [ 224.946239][ T6827] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.952129][ T6827] RIP: 0033:0x7f66d2f9e559 [ 224.956550][ T6827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.976161][ T6827] RSP: 002b:00007f66d3d94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000126 [ 224.984574][ T6827] RAX: ffffffffffffffda RBX: 00007f66d3225fa0 RCX: 00007f66d2f9e559 [ 224.992546][ T6827] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000800 [ 225.000532][ T6827] RBP: 00007f66d30358b0 R08: 0000000000000000 R09: 0000000000000000 [ 225.008513][ T6827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.016483][ T6827] R13: 00007f66d3226038 R14: 00007f66d3225fa0 R15: 00007fff44d3e5f8 [ 225.024480][ T6827] [ 225.035120][ T4346] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 225.075286][ T4346] usbhid 4-1:0.0: can't add hid device: -71 [ 225.077851][ T4344] usb 2-1: USB disconnect, device number 6 [ 225.093617][ T4346] usbhid: probe of 4-1:0.0 failed with error -71 [ 225.154792][ T4346] usb 4-1: USB disconnect, device number 8 [ 225.326795][ T6829] fido_id[6829]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 225.663012][ T6839] loop5: detected capacity change from 0 to 1024 [ 225.697209][ T26] audit: type=1326 audit(1791996727.675:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.3.645" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce839e559 code=0x7ffc0000 [ 225.727309][ T6839] EXT4-fs: Ignoring removed bh option [ 225.749113][ T6839] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 225.803605][ T26] audit: type=1326 audit(1791996727.745:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.3.645" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6ce839e559 code=0x7ffc0000 [ 225.839578][ T6839] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 225.954880][ T26] audit: type=1326 audit(1791996727.745:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.3.645" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce839e559 code=0x7ffc0000 [ 225.983961][ T26] audit: type=1326 audit(1791996727.755:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.3.645" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce839e559 code=0x7ffc0000 [ 226.068003][ T26] audit: type=1326 audit(1791996727.755:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.3.645" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6ce839e559 code=0x7ffc0000 [ 226.190575][ T6456] EXT4-fs error (device loop5): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /4/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 226.522746][ T6456] EXT4-fs error (device loop5): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /4/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 226.578850][ T26] audit: type=1326 audit(1791996728.565:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.3.645" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce839e559 code=0x7ffc0000 [ 226.623205][ T6456] EXT4-fs error (device loop5): empty_inline_dir:1912: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 226.670657][ T26] audit: type=1326 audit(1791996728.595:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.3.645" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce839e559 code=0x7ffc0000 [ 226.759319][ T6456] EXT4-fs warning (device loop5): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 226.796162][ T26] audit: type=1326 audit(1791996728.625:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.3.645" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f6ce839e559 code=0x7ffc0000 [ 226.841781][ T6456] EXT4-fs error (device loop5): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /4/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 226.943479][ T6875] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 226.955629][ T26] audit: type=1326 audit(1791996728.625:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.3.645" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce839e559 code=0x7ffc0000 [ 226.971490][ T6456] EXT4-fs error (device loop5): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /4/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 227.003615][ T6456] EXT4-fs error (device loop5): empty_inline_dir:1912: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 227.024805][ T26] audit: type=1326 audit(1791996728.625:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6843 comm="syz.3.645" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce839e559 code=0x7ffc0000 [ 227.033797][ T6456] EXT4-fs warning (device loop5): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 227.131207][ T6456] EXT4-fs error (device loop5): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /4/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 227.164278][ T6456] EXT4-fs error (device loop5): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /4/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 227.198801][ T6456] EXT4-fs error (device loop5): empty_inline_dir:1912: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 227.268416][ T6456] EXT4-fs warning (device loop5): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 227.298581][ T6456] EXT4-fs error (device loop5): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /4/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 227.354074][ T6456] EXT4-fs warning (device loop5): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 227.366958][ T6877] loop2: detected capacity change from 0 to 8192 [ 227.410360][ T6877] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 227.434473][ T6877] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 227.457848][ T6877] REISERFS (device loop2): using ordered data mode [ 227.464908][ T6877] reiserfs: using flush barriers [ 227.475247][ T6456] EXT4-fs warning (device loop5): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 227.500850][ T6877] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 227.501503][ T6456] EXT4-fs warning (device loop5): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 227.532254][ T6877] REISERFS (device loop2): checking transaction log (loop2) [ 227.540014][ T7] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 227.676803][ T6456] EXT4-fs warning (device loop5): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 227.751108][ T6456] EXT4-fs warning (device loop5): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 228.020732][ T6456] EXT4-fs warning (device loop5): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 228.441155][ T6456] EXT4-fs warning (device loop5): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 228.467758][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 228.477447][ T7] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 228.497746][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.505792][ T7] usb 4-1: Product: syz [ 228.510049][ T7] usb 4-1: Manufacturer: syz [ 228.514665][ T7] usb 4-1: SerialNumber: syz [ 228.536186][ T7] usb 4-1: config 0 descriptor?? [ 228.544109][ T7] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 228.553329][ T7] usb 4-1: Detected FT-X [ 228.620481][ T6897] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 228.678309][ T6877] REISERFS (device loop2): Using tea hash to sort names [ 228.731095][ T6877] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 228.761648][ T7] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 229.219116][ T7] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 229.306825][ T6456] EXT4-fs (loop5): unmounting filesystem. [ 229.417705][ T7] usb 4-1: USB disconnect, device number 9 [ 229.519206][ T4445] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.519627][ T7] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 229.590071][ T7] ftdi_sio 4-1:0.0: device disconnected [ 229.673948][ T4445] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.824173][ T4445] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.914335][ T6923] loop2: detected capacity change from 0 to 512 [ 230.006693][ T6923] syz.2.669: attempt to access beyond end of device [ 230.006693][ T6923] loop2: rw=524288, sector=17179852706, nr_sectors = 16 limit=512 [ 230.027462][ T4445] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.106549][ T6927] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 230.144110][ T6923] syz.2.669: attempt to access beyond end of device [ 230.144110][ T6923] loop2: rw=0, sector=17179852706, nr_sectors = 8 limit=512 [ 230.203858][ T6927] FAT-fs (loop2): Filesystem has been set read-only [ 230.615931][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 230.628205][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 230.636939][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 230.661887][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 230.670070][ T49] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 230.677848][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 230.858542][ T6929] loop3: detected capacity change from 0 to 32768 [ 230.874174][ T6935] rxe_eth0 speed is unknown, defaulting to 1000 [ 231.157025][ T6929] XFS (loop3): Mounting V5 Filesystem [ 231.177994][ T6950] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 231.261510][ T6929] XFS (loop3): Ending clean mount [ 231.449671][ T6929] XFS (loop3): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 231.685153][ T4284] XFS (loop3): Unmounting Filesystem [ 232.728179][ T49] Bluetooth: hci4: command 0x0409 tx timeout [ 233.247293][ T6935] chnl_net:caif_netlink_parms(): no params data found [ 234.363604][ T4445] device hsr_slave_0 left promiscuous mode [ 234.382914][ T4445] device hsr_slave_1 left promiscuous mode [ 234.543831][ T4445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.556073][ T4445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.624053][ T4445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.809262][ T49] Bluetooth: hci4: command 0x041b tx timeout [ 235.077558][ T4445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.177988][ T4445] device bridge_slave_1 left promiscuous mode [ 235.218832][ T4445] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.261924][ T4445] device bridge_slave_0 left promiscuous mode [ 235.317581][ T7026] netlink: 'syz.0.687': attribute type 29 has an invalid length. [ 235.333349][ T4445] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.433882][ T4445] device veth1_macvtap left promiscuous mode [ 235.450178][ T4445] device veth0_macvtap left promiscuous mode [ 235.451946][ T7030] loop2: detected capacity change from 0 to 2048 [ 235.481522][ T4445] device veth1_vlan left promiscuous mode [ 235.505476][ T4445] device veth0_vlan left promiscuous mode [ 235.556845][ T7034] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 235.596322][ T7006] loop1: detected capacity change from 0 to 32768 [ 235.677505][ T7006] [ 235.677505][ T7006] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 235.677505][ T7006] [ 235.707101][ T7036] NILFS (loop2): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 235.758895][ T7006] ERROR: (device loop1): diWrite: ixpxd invalid [ 235.758895][ T7006] [ 235.820116][ T7006] ERROR: (device loop1): remounting filesystem as read-only [ 235.848313][ T7006] ERROR: (device loop1): txCommit: [ 235.848313][ T7006] [ 236.085236][ T7038] blkno = 0, nblocks = 40 [ 236.102128][ T7038] ERROR: (device loop1): dbFree: block to be freed is outside the map [ 236.102128][ T7038] [ 236.201667][ T4272] [ 236.201667][ T4272] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 236.201667][ T4272] [ 236.215722][ T4272] [ 236.215722][ T4272] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 236.215722][ T4272] [ 236.666865][ T4445] team0 (unregistering): Port device team_slave_1 removed [ 236.719504][ T4445] team0 (unregistering): Port device team_slave_0 removed [ 236.767308][ T4445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.826115][ T4445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.888107][ T49] Bluetooth: hci4: command 0x040f tx timeout [ 237.200544][ T4445] bond0 (unregistering): Released all slaves [ 237.287059][ T7026] netlink: 'syz.0.687': attribute type 29 has an invalid length. [ 237.437840][ T6935] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.500150][ T6935] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.546460][ T6935] device bridge_slave_0 entered promiscuous mode [ 237.583343][ T6935] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.598313][ T6935] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.702072][ T6935] device bridge_slave_1 entered promiscuous mode [ 237.866565][ T6935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.891847][ T6935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.035073][ T6935] team0: Port device team_slave_0 added [ 238.080989][ T6935] team0: Port device team_slave_1 added [ 238.180986][ T6935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.217731][ T6935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.292604][ T6935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.972750][ T6935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.000527][ T6935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.053740][ T49] Bluetooth: hci4: command 0x0419 tx timeout [ 239.152253][ T6935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.357764][ T6935] device hsr_slave_0 entered promiscuous mode [ 239.388152][ T6935] device hsr_slave_1 entered promiscuous mode [ 239.407344][ T7063] loop1: detected capacity change from 0 to 32768 [ 239.424637][ T6935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.439211][ T6935] Cannot create hsr debugfs directory [ 239.491871][ T7063] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 239.531987][ T7063] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 239.576548][ T7063] BTRFS info (device loop1): setting nodatasum [ 239.614424][ T7063] BTRFS info (device loop1): force zlib compression, level 3 [ 239.653251][ T7063] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 239.683951][ T7063] BTRFS info (device loop1): use lzo compression, level 0 [ 239.713916][ T7063] BTRFS info (device loop1): turning on flush-on-commit [ 239.745807][ T7063] BTRFS info (device loop1): enabling auto defrag [ 239.772455][ T7063] BTRFS info (device loop1): max_inline at 4096 [ 239.813504][ T7063] BTRFS info (device loop1): using free space tree [ 240.117021][ T7083] loop3: detected capacity change from 0 to 32768 [ 240.180938][ T7063] BTRFS info (device loop1): enabling ssd optimizations [ 240.224696][ T7083] [ 240.224696][ T7083] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 240.224696][ T7083] [ 240.320474][ T6935] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 240.328683][ T7083] ERROR: (device loop3): diWrite: ixpxd invalid [ 240.328683][ T7083] [ 240.337541][ T7083] ERROR: (device loop3): remounting filesystem as read-only [ 240.389263][ T6935] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 240.416653][ T7083] ERROR: (device loop3): txCommit: [ 240.416653][ T7083] [ 240.457020][ T6935] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 240.513453][ T6935] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 240.723176][ T7122] blkno = 0, nblocks = 40 [ 240.733907][ T7122] ERROR: (device loop3): dbFree: block to be freed is outside the map [ 240.733907][ T7122] [ 240.758061][ T4272] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 240.925273][ T6935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.055162][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.072935][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.128314][ T49] Bluetooth: hci4: command 0x0405 tx timeout [ 241.130788][ T6935] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.175305][ T4284] [ 241.175305][ T4284] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.175305][ T4284] [ 241.192859][ T4284] [ 241.192859][ T4284] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.192859][ T4284] [ 241.236002][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.260115][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.304721][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.311932][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.383937][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.426122][ T7141] netlink: 'syz.1.703': attribute type 4 has an invalid length. [ 241.500780][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.553235][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.582614][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.589818][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.683001][ T7145] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 241.720207][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 241.741028][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 241.772088][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 241.787509][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 241.804411][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 241.836659][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 241.853128][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 241.865754][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 241.881274][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 241.911737][ T6935] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 241.935842][ T6935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 241.949115][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 241.964836][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.364833][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 242.392114][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 242.421556][ T6935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.129863][ T7160] ceph: No mds server is up or the cluster is laggy [ 243.806143][ T7195] bridge0: port 3(syz_tun) entered blocking state [ 243.825817][ T7195] bridge0: port 3(syz_tun) entered disabled state [ 243.837441][ T7195] device syz_tun entered promiscuous mode [ 244.311199][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 244.332860][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 244.429502][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.439524][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.470023][ T6935] device veth0_vlan entered promiscuous mode [ 244.495200][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.538564][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.588317][ T6935] device veth1_vlan entered promiscuous mode [ 244.613165][ T7217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.720'. [ 244.765274][ T7225] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 244.800865][ T7225] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 244.884514][ T7228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.722'. [ 244.980435][ T7234] loop1: detected capacity change from 0 to 128 [ 245.185814][ T5175] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 245.212373][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 245.228909][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 245.263529][ T6935] device veth0_macvtap entered promiscuous mode [ 245.304311][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 245.332242][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 245.380436][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 245.426841][ T6935] device veth1_macvtap entered promiscuous mode [ 245.697766][ T6935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.710258][ T6935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.720791][ T6935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.731525][ T6935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.741605][ T6935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.765994][ T6935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.778879][ T6935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.792476][ T6935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.825987][ T6935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.891048][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 245.910113][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 245.937295][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.977480][ T6935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.991345][ T6935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.024766][ T6935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.055944][ T6935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.083255][ T6935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.117347][ T6935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.147493][ T6935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.170947][ T6935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.242886][ T6935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.281255][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 246.300521][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 246.335937][ T6935] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.365675][ T6935] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.391527][ T6935] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.408597][ T6935] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.663985][ T4451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.690253][ T4451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.746967][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 246.814751][ T4497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.835906][ T4497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.877316][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 246.978030][ T7280] netlink: 88 bytes leftover after parsing attributes in process `syz.3.732'. [ 247.671542][ T7272] loop1: detected capacity change from 0 to 32768 [ 247.746448][ T7272] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.731 (7272) [ 247.815134][ T7272] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 247.870026][ T7272] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 247.911554][ T7272] BTRFS info (device loop1): setting nodatacow, compression disabled [ 247.930614][ T7272] BTRFS info (device loop1): setting datasum, datacow enabled [ 247.978132][ T7272] BTRFS info (device loop1): force clearing of disk cache [ 248.016984][ T7272] BTRFS info (device loop1): enabling ssd optimizations [ 248.047297][ T7272] BTRFS info (device loop1): using spread ssd allocation scheme [ 248.068935][ T7272] BTRFS info (device loop1): turning on sync discard [ 248.078085][ T7272] BTRFS info (device loop1): turning off barriers [ 248.084585][ T7272] BTRFS info (device loop1): enabling disk space caching [ 248.120276][ T7272] BTRFS info (device loop1): enabling auto defrag [ 248.151908][ T7272] BTRFS info (device loop1): not using ssd optimizations [ 248.187685][ T7272] BTRFS info (device loop1): not using spread ssd allocation scheme [ 248.228249][ T7272] BTRFS info (device loop1): disk space caching is enabled [ 249.085974][ T7323] FAULT_INJECTION: forcing a failure. [ 249.085974][ T7323] name failslab, interval 1, probability 0, space 0, times 0 [ 249.107269][ T7323] CPU: 1 PID: 7323 Comm: syz.6.739 Not tainted syzkaller #0 [ 249.114615][ T7323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 249.124695][ T7323] Call Trace: [ 249.127988][ T7323] [ 249.130988][ T7323] dump_stack_lvl+0x188/0x24e [ 249.135697][ T7323] ? show_regs_print_info+0x12/0x12 [ 249.140936][ T7323] ? load_image+0x410/0x410 [ 249.145464][ T7323] ? __might_sleep+0xd0/0xd0 [ 249.150078][ T7323] ? __lock_acquire+0x7ea0/0x7ea0 [ 249.155143][ T7323] should_fail_ex+0x390/0x4c0 [ 249.159858][ T7323] should_failslab+0x5/0x20 [ 249.164373][ T7323] slab_pre_alloc_hook+0x59/0x300 [ 249.169396][ T7323] ? __kasan_kmalloc_large+0x8b/0xd0 [ 249.174769][ T7323] ? io_ring_ctx_alloc+0x279/0xc85 [ 249.179984][ T7323] __kmem_cache_alloc_node+0x4f/0x270 [ 249.185444][ T7323] ? io_ring_ctx_alloc+0x279/0xc85 [ 249.190550][ T7323] kmalloc_trace+0x26/0xe0 [ 249.194966][ T7323] io_ring_ctx_alloc+0x279/0xc85 [ 249.199904][ T7323] io_uring_create+0x29f/0xd6c [ 249.204682][ T7323] ? __might_fault+0xc2/0x120 [ 249.209357][ T7323] ? __might_fault+0xa6/0x120 [ 249.214033][ T7323] __x64_sys_io_uring_setup+0x21b/0x230 [ 249.219573][ T7323] ? __ia32_sys_io_uring_enter+0xf0/0xf0 [ 249.225235][ T7323] ? lockdep_hardirqs_on+0x94/0x140 [ 249.230439][ T7323] do_syscall_64+0x4c/0xa0 [ 249.234852][ T7323] ? clear_bhb_loop+0x60/0xb0 [ 249.239544][ T7323] ? clear_bhb_loop+0x60/0xb0 [ 249.244238][ T7323] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.250153][ T7323] RIP: 0033:0x7fc02dd9e559 [ 249.254575][ T7323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.274188][ T7323] RSP: 002b:00007fc02ec1bfb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 249.282603][ T7323] RAX: ffffffffffffffda RBX: 0000200000000340 RCX: 00007fc02dd9e559 [ 249.290573][ T7323] RDX: 0000200000000440 RSI: 0000200000000340 RDI: 0000000000007221 [ 249.298538][ T7323] RBP: 00007fc02de358b0 R08: 0000000000000000 R09: 0000000000000000 [ 249.306504][ T7323] R10: 0000200000000480 R11: 0000000000000206 R12: 0000200000000440 [ 249.314474][ T7323] R13: 0000200000000480 R14: 0000200000000400 R15: 00007ffc7f81afd8 [ 249.322560][ T7323] [ 249.477193][ T7272] BTRFS info (device loop1): rebuilding free space tree [ 249.605240][ T7272] BTRFS info (device loop1): disabling free space tree [ 249.649443][ T7272] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 249.698469][ T7272] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 249.870656][ T4272] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 249.897954][ T4425] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 250.090240][ T4425] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.112732][ T4425] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.161185][ T4425] usb 7-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 250.236427][ T4425] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.712088][ T4425] wacom 0003:056A:033B.0007: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 250.743644][ T4425] wacom 0003:056A:033B.0007: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.6-1/input0 [ 250.789206][ T4425] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/0003:056A:033B.0007/input/input15 [ 250.813884][ T7376] loop2: detected capacity change from 0 to 512 [ 250.838307][ T7376] EXT4-fs: Ignoring removed i_version option [ 250.845509][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.750'. [ 250.857810][ T7376] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 250.895372][ T7376] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 250.925504][ T4425] usb 7-1: USB disconnect, device number 2 [ 250.997813][ T7376] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.052807][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 251.052821][ T26] audit: type=1800 audit(1791996753.035:21): pid=7376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.749" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 251.210743][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 251.386719][ T7396] rxe_eth0 speed is unknown, defaulting to 1000 [ 251.418722][ T7385] fido_id[7385]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 252.593247][ T7414] FAULT_INJECTION: forcing a failure. [ 252.593247][ T7414] name failslab, interval 1, probability 0, space 0, times 0 [ 252.685578][ T7414] CPU: 0 PID: 7414 Comm: syz.6.759 Not tainted syzkaller #0 [ 252.692936][ T7414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 252.703011][ T7414] Call Trace: [ 252.706307][ T7414] [ 252.709251][ T7414] dump_stack_lvl+0x188/0x24e [ 252.713952][ T7414] ? show_regs_print_info+0x12/0x12 [ 252.719160][ T7414] ? load_image+0x410/0x410 [ 252.723683][ T7414] ? __might_sleep+0xd0/0xd0 [ 252.728293][ T7414] ? __lock_acquire+0x7ea0/0x7ea0 [ 252.733351][ T7414] should_fail_ex+0x390/0x4c0 [ 252.738057][ T7414] should_failslab+0x5/0x20 [ 252.742575][ T7414] slab_pre_alloc_hook+0x59/0x300 [ 252.747625][ T7414] kmem_cache_alloc+0x56/0x2f0 [ 252.752406][ T7414] ? __alloc_file+0x25/0x230 [ 252.757025][ T7414] __alloc_file+0x25/0x230 [ 252.761461][ T7414] alloc_empty_file+0x90/0x180 [ 252.766246][ T7414] alloc_file+0x5b/0x5f0 [ 252.770513][ T7414] alloc_file_pseudo+0x180/0x200 [ 252.775483][ T7414] ? alloc_empty_file_noaccount+0x80/0x80 [ 252.781224][ T7414] ? _raw_spin_unlock+0x24/0x40 [ 252.786106][ T7414] anon_inode_getfd+0xc6/0x1b0 [ 252.790898][ T7414] bpf_enable_stats+0xdc/0x140 [ 252.795686][ T7414] __sys_bpf+0x667/0x780 [ 252.799968][ T7414] ? bpf_link_show_fdinfo+0x380/0x380 [ 252.805376][ T7414] ? exc_page_fault+0x88/0x100 [ 252.810180][ T7414] ? lock_chain_count+0x20/0x20 [ 252.815063][ T7414] __x64_sys_bpf+0x78/0x90 [ 252.819512][ T7414] do_syscall_64+0x4c/0xa0 [ 252.823947][ T7414] ? clear_bhb_loop+0x60/0xb0 [ 252.828657][ T7414] ? clear_bhb_loop+0x60/0xb0 [ 252.833364][ T7414] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.839280][ T7414] RIP: 0033:0x7fc02dd9e559 [ 252.843715][ T7414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.863350][ T7414] RSP: 002b:00007fc02ec1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 252.871789][ T7414] RAX: ffffffffffffffda RBX: 00007fc02e025fa0 RCX: 00007fc02dd9e559 [ 252.879784][ T7414] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000020 [ 252.887781][ T7414] RBP: 00007fc02de358b0 R08: 0000000000000000 R09: 0000000000000000 [ 252.895782][ T7414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.903778][ T7414] R13: 00007fc02e026038 R14: 00007fc02e025fa0 R15: 00007ffc7f81afd8 [ 252.911800][ T7414] [ 254.978304][ T7463] netlink: 876 bytes leftover after parsing attributes in process `syz.1.770'. [ 255.339005][ T7451] loop3: detected capacity change from 0 to 131072 [ 255.368856][ T7451] F2FS-fs (loop3): Wrong secs_per_zone / total_sections (512, 24) [ 255.376732][ T7451] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 255.387471][ T7451] F2FS-fs (loop3): Test dummy encryption mode enabled [ 255.397283][ T7451] F2FS-fs (loop3): invalid crc value [ 255.435873][ T7451] F2FS-fs (loop3): Found nat_bits in checkpoint [ 255.471755][ T7451] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 255.506199][ T7451] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 255.551168][ T7451] F2FS-fs (loop3): Start checkpoint disabled! [ 255.580980][ T7451] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 255.588242][ T7451] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 255.773571][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.781132][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.942568][ T4344] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 256.149363][ T4344] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 256.205292][ T4344] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 256.254258][ T4344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 256.276589][ T4344] usb 2-1: Product: syz [ 256.286272][ T4344] usb 2-1: Manufacturer: syz [ 256.304498][ T4344] usb 2-1: SerialNumber: syz [ 256.542915][ T4344] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 257.530733][ T7528] netlink: 'syz.3.786': attribute type 4 has an invalid length. [ 258.161444][ T7530] netlink: 'syz.3.786': attribute type 4 has an invalid length. [ 258.466147][ T7544] FAULT_INJECTION: forcing a failure. [ 258.466147][ T7544] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 258.497926][ T7544] CPU: 1 PID: 7544 Comm: syz.6.789 Not tainted syzkaller #0 [ 258.505266][ T7544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 258.515338][ T7544] Call Trace: [ 258.518629][ T7544] [ 258.521664][ T7544] dump_stack_lvl+0x188/0x24e [ 258.526379][ T7544] ? show_regs_print_info+0x12/0x12 [ 258.531601][ T7544] ? load_image+0x410/0x410 [ 258.536130][ T7544] ? __lock_acquire+0x7ea0/0x7ea0 [ 258.541182][ T7544] ? verify_lock_unused+0x140/0x140 [ 258.546407][ T7544] should_fail_ex+0x390/0x4c0 [ 258.551115][ T7544] prepare_alloc_pages+0x1e1/0x5b0 [ 258.556259][ T7544] __alloc_pages+0x130/0x4f0 [ 258.560870][ T7544] ? zone_statistics+0x170/0x170 [ 258.565820][ T7544] ? alloc_pages+0x4dd/0x740 [ 258.570413][ T7544] kimage_alloc_pages+0xc5/0x330 [ 258.575346][ T7544] ? __might_sleep+0xd0/0xd0 [ 258.579935][ T7544] kimage_alloc_page+0x87/0x790 [ 258.584799][ T7544] ? __might_fault+0xc2/0x120 [ 258.589471][ T7544] ? __might_fault+0xa6/0x120 [ 258.594146][ T7544] kimage_load_segment+0x5ed/0x9f0 [ 258.599262][ T7544] do_kexec_load+0x4a5/0x670 [ 258.603855][ T7544] __se_sys_kexec_load+0x170/0x1c0 [ 258.608968][ T7544] do_syscall_64+0x4c/0xa0 [ 258.613378][ T7544] ? clear_bhb_loop+0x60/0xb0 [ 258.618048][ T7544] ? clear_bhb_loop+0x60/0xb0 [ 258.622717][ T7544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.628601][ T7544] RIP: 0033:0x7fc02dd9e559 [ 258.633007][ T7544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.652607][ T7544] RSP: 002b:00007fc02ec1c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 258.661013][ T7544] RAX: ffffffffffffffda RBX: 00007fc02e025fa0 RCX: 00007fc02dd9e559 [ 258.668978][ T7544] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000000002 [ 258.676960][ T7544] RBP: 00007fc02de358b0 R08: 0000000000000000 R09: 0000000000000000 [ 258.684922][ T7544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.692883][ T7544] R13: 00007fc02e026038 R14: 00007fc02e025fa0 R15: 00007ffc7f81afd8 [ 258.700859][ T7544] [ 258.739009][ T7548] FAULT_INJECTION: forcing a failure. [ 258.739009][ T7548] name failslab, interval 1, probability 0, space 0, times 0 [ 258.797122][ T7548] CPU: 0 PID: 7548 Comm: syz.3.792 Not tainted syzkaller #0 [ 258.804494][ T7548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 258.814573][ T7548] Call Trace: [ 258.817865][ T7548] [ 258.820809][ T7548] dump_stack_lvl+0x188/0x24e [ 258.825519][ T7548] ? show_regs_print_info+0x12/0x12 [ 258.830743][ T7548] ? load_image+0x410/0x410 [ 258.835270][ T7548] ? __might_sleep+0xd0/0xd0 [ 258.839885][ T7548] ? __lock_acquire+0x7ea0/0x7ea0 [ 258.844938][ T7548] should_fail_ex+0x390/0x4c0 [ 258.849645][ T7548] should_failslab+0x5/0x20 [ 258.854172][ T7548] slab_pre_alloc_hook+0x59/0x300 [ 258.859230][ T7548] kmem_cache_alloc+0x56/0x2f0 [ 258.864016][ T7548] ? sk_prot_alloc+0x57/0x210 [ 258.868724][ T7548] sk_prot_alloc+0x57/0x210 [ 258.873248][ T7548] ? sk_alloc+0x20/0x330 [ 258.877520][ T7548] sk_alloc+0x36/0x330 [ 258.881615][ T7548] inet6_create+0x7ad/0x11b0 [ 258.886227][ T7548] ? inet6_create+0x7c/0x11b0 [ 258.890934][ T7548] __sock_create+0x49a/0x940 [ 258.895556][ T7548] __sys_socket+0xc4/0x190 [ 258.899998][ T7548] __x64_sys_socket+0x76/0x80 [ 258.904701][ T7548] do_syscall_64+0x4c/0xa0 [ 258.909154][ T7548] ? clear_bhb_loop+0x60/0xb0 [ 258.913858][ T7548] ? clear_bhb_loop+0x60/0xb0 [ 258.918556][ T7548] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.924479][ T7548] RIP: 0033:0x7f6ce839e559 [ 258.928919][ T7548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.948555][ T7548] RSP: 002b:00007f6ce9203028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 258.957009][ T7548] RAX: ffffffffffffffda RBX: 00007f6ce8625fa0 RCX: 00007f6ce839e559 [ 258.965097][ T7548] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 258.973102][ T7548] RBP: 00007f6ce84358b0 R08: 0000000000000000 R09: 0000000000000000 [ 258.981111][ T7548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.989120][ T7548] R13: 00007f6ce8626038 R14: 00007f6ce8625fa0 R15: 00007fff9d6675c8 [ 258.997156][ T7548] [ 263.101165][ T7665] user requested TSC rate below hardware speed [ 263.216353][ T7669] overlayfs: failed to clone upperpath [ 263.332403][ T26] audit: type=1326 audit(1791996765.315:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.3.823" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ce839e559 code=0x0 [ 263.466655][ T22] usb 2-1: USB disconnect, device number 7 [ 263.505417][ T22] usblp0: removed [ 267.275091][ T26] audit: type=1326 audit(1791996769.255:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7755 comm="syz.0.846" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9471f9e559 code=0x0 [ 268.660033][ T7784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.851'. [ 268.681786][ T7782] loop2: detected capacity change from 0 to 512 [ 268.689568][ T26] audit: type=1326 audit(1791996770.675:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7778 comm="syz.3.849" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6ce839e559 code=0x0 [ 268.751889][ T7782] EXT4-fs (loop2): Test dummy encryption mode enabled [ 268.977896][ T7782] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #11: comm syz.2.850: casefold flag without casefold feature [ 269.764772][ T7782] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.850: couldn't read orphan inode 11 (err -117) [ 269.870930][ T7782] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 269.921407][ T26] audit: type=1800 audit(1791996771.905:25): pid=7782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.850" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 270.056159][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 270.138765][ T4347] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 270.230517][ T7814] gadgetfs: bound to dummy_udc driver [ 270.347968][ T4347] usb 7-1: Using ep0 maxpacket: 32 [ 270.376335][ T4347] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 189, changing to 11 [ 270.420347][ T4347] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 270.465872][ T4347] usb 7-1: config 0 interface 0 has no altsetting 0 [ 270.494527][ T4347] usb 7-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 270.524912][ T4347] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.574203][ T4347] usb 7-1: config 0 descriptor?? [ 270.794703][ T7802] loop3: detected capacity change from 0 to 32768 [ 270.843775][ T7802] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.854 (7802) [ 270.945596][ T4347] usbhid 7-1:0.0: can't add hid device: -71 [ 270.958088][ T4347] usbhid: probe of 7-1:0.0 failed with error -71 [ 270.966715][ T4347] usb 7-1: USB disconnect, device number 3 [ 270.995891][ T7802] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 271.070579][ T7802] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 271.128689][ T7802] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 271.157749][ T7802] BTRFS info (device loop3): use zstd compression, level 3 [ 271.165025][ T7802] BTRFS info (device loop3): using free space tree [ 271.402087][ T7802] BTRFS info (device loop3): enabling ssd optimizations [ 271.694032][ T7802] overlayfs: conflicting lowerdir path [ 272.043162][ T4284] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 274.291660][ T7913] loop2: detected capacity change from 0 to 131072 [ 274.301546][ T7913] F2FS-fs (loop2): invalid crc value [ 274.388625][ T7913] F2FS-fs (loop2): Found nat_bits in checkpoint [ 274.424848][ T7913] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 274.479254][ T7913] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 275.912619][ T7940] loop3: detected capacity change from 0 to 32768 [ 276.815335][ T7940] XFS (loop3): Mounting V5 Filesystem [ 277.002299][ T7940] XFS (loop3): Ending clean mount [ 277.051057][ T7940] XFS (loop3): Quotacheck needed: Please wait. [ 277.152686][ T7940] XFS (loop3): Quotacheck: Done. [ 279.250145][ T4284] XFS (loop3): Unmounting Filesystem [ 279.590284][ T26] audit: type=1326 audit(1791996781.575:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.0.905" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9471f9e559 code=0x0 [ 281.104380][ T8061] process 'syz.6.911' launched './file1' with NULL argv: empty string added [ 281.276990][ T8064] fuse: Bad value for 'fd' [ 281.596872][ T8078] loop3: detected capacity change from 0 to 512 [ 281.729386][ T8078] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 281.770882][ T8078] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.020201][ T8078] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 283.986538][ T4284] EXT4-fs (loop3): unmounting filesystem. [ 284.026243][ T8106] device wlan0 entered promiscuous mode [ 284.387722][ T5593] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 284.920935][ T5593] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 284.940758][ T5593] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 284.955861][ T5593] usb 3-1: Product: syz [ 284.971018][ T5593] usb 3-1: SerialNumber: syz [ 284.986037][ T5593] usb 3-1: config 0 descriptor?? [ 285.389996][ T5593] hso 3-1:0.0: Failed to find INT IN ep [ 285.602525][ T5593] usb 3-1: USB disconnect, device number 5 [ 286.266881][ T8161] loop3: detected capacity change from 0 to 512 [ 286.325744][ T8161] EXT4-fs (loop3): invalid journal inode [ 286.359285][ T8161] EXT4-fs (loop3): can't get journal size [ 286.419294][ T8161] EXT4-fs (loop3): 1 truncate cleaned up [ 286.426406][ T8161] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 286.517846][ T8161] loop3: detected capacity change from 512 to 64 [ 286.550390][ T8174] syz.3.934: attempt to access beyond end of device [ 286.550390][ T8174] loop3: rw=524288, sector=54, nr_sectors = 18 limit=64 [ 286.649428][ T8174] syz.3.934: attempt to access beyond end of device [ 286.649428][ T8174] loop3: rw=0, sector=62, nr_sectors = 8 limit=64 [ 286.685754][ T26] audit: type=1800 audit(1791996788.665:27): pid=8174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.934" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 286.739968][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054a0f800: rx timeout, send abort [ 286.899747][ T4284] EXT4-fs (loop3): unmounting filesystem. [ 287.239973][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054a0f000: rx timeout, send abort [ 287.250425][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054a0f800: abort rx timeout. Force session deactivation [ 287.332651][ C0] vcan0: j1939_simple_recv: Received already invalidated message [ 287.652881][ T8194] ip_tables: iptables: counters copy to user failed while replacing table [ 287.748331][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054a0f000: abort rx timeout. Force session deactivation [ 287.890390][ T8200] loop6: detected capacity change from 0 to 2048 [ 288.014589][ T8200] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 289.200813][ T6935] EXT4-fs (loop6): unmounting filesystem. [ 292.626130][ T26] audit: type=1800 audit(1791996794.615:28): pid=8279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.961" name="file1" dev="ramfs" ino=47642 res=0 errno=0 [ 296.628001][ T8346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.978'. [ 296.667824][ T8346] netlink: 'syz.0.978': attribute type 12 has an invalid length. [ 296.737776][ T8346] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.747172][ T8346] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.756498][ T8346] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.765270][ T8346] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.857183][ T8346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.978'. [ 296.869908][ T8346] netlink: 'syz.0.978': attribute type 12 has an invalid length. [ 297.360658][ T49] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 298.213783][ T8397] loop2: detected capacity change from 0 to 512 [ 298.294090][ T8396] [ 298.296473][ T8396] ====================================================== [ 298.303488][ T8396] WARNING: possible circular locking dependency detected [ 298.310528][ T8396] syzkaller #0 Not tainted [ 298.314935][ T8396] ------------------------------------------------------ [ 298.321940][ T8396] syz.0.992/8396 is trying to acquire lock: [ 298.327824][ T8396] ffff88804f91e2d8 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 298.337478][ T8396] [ 298.337478][ T8396] but task is already holding lock: [ 298.344830][ T8396] ffff88807c700290 (&sb->s_type->i_mutex_key#14){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 298.355706][ T8396] [ 298.355706][ T8396] which lock already depends on the new lock. [ 298.355706][ T8396] [ 298.366096][ T8396] [ 298.366096][ T8396] the existing dependency chain (in reverse order) is: [ 298.375097][ T8396] [ 298.375097][ T8396] -> #1 (&sb->s_type->i_mutex_key#14){+.+.}-{3:3}: [ 298.383783][ T8396] down_write+0x36/0x60 [ 298.388458][ T8396] process_measurement+0x3af/0x1c40 [ 298.394176][ T8396] ima_file_mmap+0xe9/0x140 [ 298.399198][ T8396] __se_sys_remap_file_pages+0x55a/0x7b0 [ 298.405343][ T8396] do_syscall_64+0x4c/0xa0 [ 298.410271][ T8396] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 298.416683][ T8396] [ 298.416683][ T8396] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 298.424227][ T8396] __lock_acquire+0x3a03/0x7ea0 [ 298.429592][ T8396] lock_acquire+0x1bc/0x4a0 [ 298.434607][ T8396] down_read_killable+0x4c/0x340 [ 298.440064][ T8396] mmap_read_lock_killable+0x1d/0x60 [ 298.445889][ T8396] lock_mm_and_find_vma+0x2b1/0x2f0 [ 298.451603][ T8396] do_user_addr_fault+0x2e8/0xb20 [ 298.457143][ T8396] exc_page_fault+0x60/0x100 [ 298.462249][ T8396] asm_exc_page_fault+0x22/0x30 [ 298.467611][ T8396] fault_in_readable+0x13e/0x1f0 [ 298.473068][ T8396] fault_in_iov_iter_readable+0xbf/0x2f0 [ 298.479220][ T8396] generic_perform_write+0x1f1/0x5c0 [ 298.485107][ T8396] __generic_file_write_iter+0x148/0x2a0 [ 298.491251][ T8396] generic_file_write_iter+0xab/0x2e0 [ 298.497140][ T8396] vfs_write+0x482/0x9a0 [ 298.501898][ T8396] ksys_write+0x14d/0x260 [ 298.506739][ T8396] do_syscall_64+0x4c/0xa0 [ 298.511668][ T8396] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 298.518082][ T8396] [ 298.518082][ T8396] other info that might help us debug this: [ 298.518082][ T8396] [ 298.528298][ T8396] Possible unsafe locking scenario: [ 298.528298][ T8396] [ 298.535731][ T8396] CPU0 CPU1 [ 298.541081][ T8396] ---- ---- [ 298.546428][ T8396] lock(&sb->s_type->i_mutex_key#14); [ 298.551882][ T8396] lock(&mm->mmap_lock); [ 298.558722][ T8396] lock(&sb->s_type->i_mutex_key#14); [ 298.566695][ T8396] rlock(&mm->mmap_lock); [ 298.571102][ T8396] [ 298.571102][ T8396] *** DEADLOCK *** [ 298.571102][ T8396] [ 298.579238][ T8396] 3 locks held by syz.0.992/8396: [ 298.584245][ T8396] #0: ffff888076b82d68 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 298.593465][ T8396] #1: ffff88807b6a8460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 298.602339][ T8396] #2: ffff88807c700290 (&sb->s_type->i_mutex_key#14){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 298.613645][ T8396] [ 298.613645][ T8396] stack backtrace: [ 298.619518][ T8396] CPU: 0 PID: 8396 Comm: syz.0.992 Not tainted syzkaller #0 [ 298.626787][ T8396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 298.636839][ T8396] Call Trace: [ 298.640109][ T8396] [ 298.643029][ T8396] dump_stack_lvl+0x188/0x24e [ 298.647699][ T8396] ? load_image+0x410/0x410 [ 298.652191][ T8396] ? show_regs_print_info+0x12/0x12 [ 298.657381][ T8396] ? print_circular_bug+0x12b/0x1a0 [ 298.662576][ T8396] check_noncircular+0x2f8/0x400 [ 298.667516][ T8396] ? print_deadlock_bug+0x5d0/0x5d0 [ 298.672709][ T8396] ? lockdep_lock+0xf1/0x1f0 [ 298.677293][ T8396] ? _find_first_zero_bit+0xd2/0x100 [ 298.682577][ T8396] __lock_acquire+0x3a03/0x7ea0 [ 298.687429][ T8396] ? verify_lock_unused+0x140/0x140 [ 298.692628][ T8396] ? verify_lock_unused+0x140/0x140 [ 298.697819][ T8396] ? verify_lock_unused+0x140/0x140 [ 298.703015][ T8396] lock_acquire+0x1bc/0x4a0 [ 298.707514][ T8396] ? mmap_read_lock_killable+0x1d/0x60 [ 298.712966][ T8396] ? read_lock_is_recursive+0x10/0x10 [ 298.718356][ T8396] ? cmp_ex_search+0x1a/0x70 [ 298.722939][ T8396] ? bsearch+0x86/0xb0 [ 298.727085][ T8396] ? fault_in_readable+0x13e/0x1f0 [ 298.732191][ T8396] ? search_extable+0x8c/0xd0 [ 298.736883][ T8396] ? trim_init_extable+0x3b0/0x3b0 [ 298.741987][ T8396] ? mmap_read_lock_killable+0x1d/0x60 [ 298.747435][ T8396] down_read_killable+0x4c/0x340 [ 298.752368][ T8396] ? mmap_read_lock_killable+0x1d/0x60 [ 298.757817][ T8396] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 298.763788][ T8396] mmap_read_lock_killable+0x1d/0x60 [ 298.769067][ T8396] lock_mm_and_find_vma+0x2b1/0x2f0 [ 298.774257][ T8396] do_user_addr_fault+0x2e8/0xb20 [ 298.779276][ T8396] ? _raw_spin_unlock_irq+0x1f/0x40 [ 298.784469][ T8396] ? lockdep_hardirqs_on+0x94/0x140 [ 298.789665][ T8396] exc_page_fault+0x60/0x100 [ 298.794247][ T8396] asm_exc_page_fault+0x22/0x30 [ 298.799087][ T8396] RIP: 0010:fault_in_readable+0x13e/0x1f0 [ 298.804803][ T8396] Code: 18 2a c4 ff 4d 89 f4 49 81 cc ff 0f 00 00 4d 89 f7 49 01 dc 49 81 e4 00 f0 ff ff 4d 39 e6 77 44 e8 f7 29 c4 ff 4d 39 e7 74 47 <41> 8a 07 88 44 24 07 49 81 c7 00 10 00 00 4d 39 e7 74 07 e8 da 29 [ 298.824399][ T8396] RSP: 0018:ffffc90023b5fab0 EFLAGS: 00050287 [ 298.830455][ T8396] RAX: ffffffff81be1c89 RBX: 0000000000001000 RCX: 0000000000080000 [ 298.838437][ T8396] RDX: ffffc90004f32000 RSI: 0000000000016d7f RDI: 0000000000016d80 [ 298.846396][ T8396] RBP: 0000000000000000 R08: ffff88807530bc00 R09: 0000000000000002 [ 298.854355][ T8396] R10: 0000000000000006 R11: 0000000000000002 R12: 00002000000a6000 [ 298.862316][ T8396] R13: dffffc0000000000 R14: 00002000000a4040 R15: 00002000000a5000 [ 298.870277][ T8396] ? fault_in_readable+0x139/0x1f0 [ 298.875392][ T8396] fault_in_iov_iter_readable+0xbf/0x2f0 [ 298.881040][ T8396] generic_perform_write+0x1f1/0x5c0 [ 298.886325][ T8396] ? generic_file_direct_write+0x330/0x330 [ 298.892126][ T8396] ? __file_remove_privs+0x5f0/0x5f0 [ 298.897400][ T8396] ? rwsem_write_trylock+0x135/0x1c0 [ 298.902680][ T8396] ? clear_nonspinnable+0x60/0x60 [ 298.907698][ T8396] ? generic_write_checks_count+0x363/0x440 [ 298.913587][ T8396] __generic_file_write_iter+0x148/0x2a0 [ 298.919221][ T8396] generic_file_write_iter+0xab/0x2e0 [ 298.924587][ T8396] vfs_write+0x482/0x9a0 [ 298.928830][ T8396] ? file_end_write+0x250/0x250 [ 298.933674][ T8396] ? __fget_files+0x3fc/0x460 [ 298.938345][ T8396] ? __fdget_pos+0x2ae/0x360 [ 298.942925][ T8396] ? ksys_write+0x70/0x260 [ 298.947334][ T8396] ksys_write+0x14d/0x260 [ 298.951661][ T8396] ? __ia32_sys_read+0x80/0x80 [ 298.956416][ T8396] ? lockdep_hardirqs_on+0x94/0x140 [ 298.961615][ T8396] do_syscall_64+0x4c/0xa0 [ 298.966022][ T8396] ? clear_bhb_loop+0x60/0xb0 [ 298.970692][ T8396] ? clear_bhb_loop+0x60/0xb0 [ 298.975361][ T8396] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 298.981246][ T8396] RIP: 0033:0x7f9471f9e559 [ 298.985648][ T8396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.005242][ T8396] RSP: 002b:00007f9472dd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 299.013648][ T8396] RAX: ffffffffffffffda RBX: 00007f9472225fa0 RCX: 00007f9471f9e559 [ 299.021614][ T8396] RDX: 000000000208e24b RSI: 0000200000000040 RDI: 0000000000000003 [ 299.029576][ T8396] RBP: 00007f94720358b0 R08: 0000000000000000 R09: 0000000000000000 [ 299.037542][ T8396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.045499][ T8396] R13: 00007f9472226038 R14: 00007f9472225fa0 R15: 00007ffd4d09b938 [ 299.053463][ T8396] [ 299.127492][ T8397] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 299.150297][ T8397] ext4 filesystem being mounted at /217/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.238031][ T8397] EXT4-fs error (device loop2): ext4_dx_csum_verify:502: inode #2: comm syz.2.993: dir seems corrupt? Run e2fsck -D. [ 299.257117][ T8408] udevd[8408]: incorrect ext4 checksum on /dev/loop2 [ 299.269766][ T8397] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.993: Directory index failed checksum [ 299.328691][ T4281] EXT4-fs (loop2): unmounting filesystem.