last executing test programs: 14m26.888605372s ago: executing program 32 (id=182): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000180)=[{0x6, 0xad, 0x0, 0x7fff0000}]}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0xb, 0x2, 0x40, 0x42, 0xffffffffffffffff, 0x40757584, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000000), &(0x7f00000000c0)=@tcp, 0x2}, 0x20) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@ifindex, 0x37, 0x1, 0x9, &(0x7f0000000080)=[0x0], 0x1, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0}, 0x40) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="72d6e9c4d090025a6d4712edc9c5a3a67dd7fb2ff99df2d3a71c8c4d", @ANYRES32=r7, @ANYBLOB, @ANYRES64=r6], 0x20) write$sequencer(r1, &(0x7f0000000200)=ANY=[@ANYRESHEX=r2, @ANYRES32=r1, @ANYRESDEC, @ANYRESDEC=r0, @ANYBLOB="aac0b4aa43e52969a04b910fae9cbc9214eb2a5968a0ca91107406b67d22338757e1cd78e48f06482f40254ed917b192f0e89f0e1d32f0d72a42a4ddbc54d1f7612e98b4d76824d84b9e59a2eca0b4b0ba7bb58be5ad7c8b86e339002f4f0a05c8b20001c57e0e5eb60936b1767ebc42d86d47f8bc0ba15293f56db8c56363b1ed61c2f6e49855d4b72bd972ef6d13756939c44357f60e836d0373a27bf021e2751ad86249ac07df29f2e2c01b37e2ada1ea30b06539d9a1a3c69fe22d5a59faadd8e59b249232870550ddb24e2721d253ff1870d77eca0bedd7bfb531f1bc80eaa6c2ea1247"], 0x24) 12m48.197717704s ago: executing program 33 (id=317): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume_offset', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) setsockopt$inet_buf(r0, 0x0, 0x23, &(0x7f0000000300)="dcdbf77dd228eac92e0d994437b472648343854bf4865b479dea1fe6ec38ef0767b81be4e5ab5b81a36d4cba36b19ab788e17fdd7dc93851ffa1f0105abcc83d005e3e60a025e0cd55fff34cca983c0c7c5380a7502096f17af236dc755faf59845b686b9204cdf346d19b265a0924de34191148f3c8351070e0c830afba1351a5577521f9f7b7c2fe1a03a49e35208e22b80befbdfb5e908245bbfa301c4d5ad13bf1ec58e7eacafffaf69775c00f5ff376941bb9", 0xb5) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f00000000c0)=0x3) unshare(0x2040400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000240)=0x3}) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r5, &(0x7f0000002000)='`', 0x88020) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000000)=0xfffffff9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@fwd={0x2}, @typedef={0x1}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x5f, 0x4f]}}, &(0x7f0000001540)=""/4096, 0x4c, 0x1000, 0xa, 0x0, 0x0, @void, @value}, 0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000040)={0x5, 0x4, 0x0, 0x5}, &(0x7f0000000080)=0x10) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000002040)={0x62d, 0xa804, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_settime(r7, 0x25029e0ef5c4af92, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) timer_settime(r7, 0x0, &(0x7f0000000140)={{}, {0x77359400}}, &(0x7f00000002c0)) 12m28.757858136s ago: executing program 34 (id=353): r0 = timerfd_create(0x2, 0x80000) close_range(r0, 0xffffffffffffffff, 0x2) r1 = epoll_create1(0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x65) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, 0x0) 12m11.152337109s ago: executing program 35 (id=361): r0 = open(&(0x7f0000000180)='./bus\x00', 0x4047e, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="868c9d766f7e24be04a10ef6eff79180bd5d48374f8ef432890f5f704bffebd7e731cc96e8b3102315dd07dd20b82674d2d03dd1f6a47f4006d091d825b1eaf6e7febf2a2fd7d43bea6ef03749cf26bca7c3bd48b72b05f26eccf874e549d4133fd2ef6cfb30dfb0c247485b8fde37990e08e776c65485f77bbc2db8cfba5c2609ce7e6ccb78dd73d4fdb474cf2b896e3558f7f0b066e96ad890411522f767dc47f9f92c58a12ea34a848ba04fe4b49bd4072a3b0035dec8d18ce4f8fb1245b602972d5e80bccdec64", 0xc9}], 0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x16) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000380)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000480)={0x0, 0xc5, "c62900a88cf2264cd6d7b5a4f5f8dc0850f471b55fb892ec51bfd1e641fcacc27b2122f329c2241503c467237a8eb28f38c2026efce8d5cb317ae9e8abaca3aa9411c59f6a7b6d696370c5ab1dd2275cf34f8e3b1b60d9ccdbc87c4238ea3aecb0d3c6054be967714d608383a9e96603cf691fa55765b94793072f1ee5406acc91cfdddc930c609220fc6ea1f097da42de95b3d363d0cf871a0a136cd4ffa5b17a0f14e9d1d543862edfbe76790150959c871e2b15f886102adadeb186180b18c86e37f4ae"}, &(0x7f00000002c0)=0xcd) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={r4, 0x4}, &(0x7f0000000340)=0x8) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r5, 0x8b21, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x7, 0x7d, 0xe, 0x40, 0x5ac, 0x223, 0xe1fc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0xd0, 0x2}}]}}]}}, 0x0) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000400)) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000001c0)=""/194, &(0x7f0000000000)=0xc2) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x9, 0x0, 0xd64a, 0x0, 0xffffffffffffffff, 0x1, 0x1000000000001, 0x80000001, 0x0, 0x0, 0x0, 0x7, 0x5, 0x3], 0x5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x100080d, &(0x7f0000000340)=ANY=[], 0xff, 0x1f2, &(0x7f0000000900)="$eJzsmb2LE0EYxp+Z3cveHSLYWNhYeOCJ3n5F5ZorThArQThFLYO3dwT3LpKskAREgo2NpYhg6z9gYZHKws7OVgsVBAtTChbCyHy4mSRuSLgigbw/yOR53/l6Z5I8KRYEQSws377++vLsyubNCwCOYQ2eyf9w+mM4kEefXz48/3zr6qs3n16/Pzz+qDu8HgcgxOT7rwB4t+0gU5EQ4vFg/5psXgzmboHjnNG3weBr+UcodJCA4a5SLpBroLZiRJr492rp7l41TULZRLKJZVO295Kzex2GXQDLukLBrP5Gq32/kqZJfVgsiX/7jHRNK8bdn6pvm2PLxLI++RncefqkI2NzNwjB9V0CiMARGV0Gw47Rm/Dg+37/Sqzzn3L76zuTnH9Wgv3WXwOZObEx+3oWRghvLsqYQLDhjPxB55mTve6H0Vnf56X4YsFQ4DjKuADkmWtmzMfVNL1+hE1LZsfRLsf2J+YCZy1/cuHm/hFkBw+CRqu9UT2o7Cf7yWEcly+HF8PwUhzsVT2EgbKjMf63rPxp1Vp/yR5g/aGUWAnNSpbVoyaQ1aM8jnVrOe7O29pPNYcr/+NYP6PXkJesju39vx5mXly9S7XuFBZPEARBEARBEARBEARBEAQxFafBoB+BqAdVooD4hhr9NwAA//+OVm3c") getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000140), &(0x7f00000001c0)=0x4) mlockall(0x7) mlockall(0x0) 11m49.202776713s ago: executing program 36 (id=375): socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000000)={0xdddd1000, 0x4000}) 8m51.377599461s ago: executing program 37 (id=603): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x400180, 0x0) r1 = syz_io_uring_setup(0x9c1, &(0x7f0000000200)={0x0, 0x0, 0x2000, 0x2, 0x1, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x122) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) chdir(&(0x7f0000000040)='./file1\x00') r5 = creat(&(0x7f0000000540)='./bus\x00', 0x0) quotactl_fd$Q_GETQUOTA(r5, 0xffffffff80000700, 0xffffffffffffffff, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$cgroup_ro(r7, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x48, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r6}}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) 6m21.056984755s ago: executing program 38 (id=1058): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r2 = dup(r1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000140)) r4 = syz_io_uring_setup(0x16bf, &(0x7f0000000480)={0x0, 0x1f29, 0x10100, 0x0, 0x32a}, &(0x7f0000000300)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffd}}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='9p_protocol_dump\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r9 = dup(r8) write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x3105c51, &(0x7f0000000400)=ANY=[]) setsockopt$inet6_tcp_TLS_TX(r9, 0x6, 0x1, &(0x7f0000000200)=@gcm_128={{0x304}, "03e654f96a037f16", "9081fec43f6797df6d5347acf0c38c7d", "dd6690a9", "6c34eb290f486789"}, 0x28) prlimit64(0x0, 0x6, &(0x7f0000000280)={0x4, 0xc4}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r11, @ANYBLOB='\b\x00&'], 0x2c}}, 0x808) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r13 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r13, 0x1, &(0x7f0000000080)=ANY=[@ANYRESOCT=r13]) 6m5.836616428s ago: executing program 39 (id=1099): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="4966d2eb28", 0x5}], 0x1}}], 0x1, 0x4004441) 6m2.632188366s ago: executing program 40 (id=1106): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r1, r0, 0x4, r0}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000080), &(0x7f00000000c0)='%pi6 \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x80, 0x700, 0x7fff, 0x2, {{0x16, 0x4, 0x1, 0x2, 0x58, 0x65, 0x0, 0xc, 0x265f5fd33c5ed154, 0x0, @empty, @remote, {[@timestamp_prespec={0x44, 0x44, 0x83, 0x3, 0x3, [{@multicast1, 0x8}, {@private=0xa010101, 0x2}, {@local, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10}, {@multicast1, 0x2}, {@multicast2, 0x7}, {@remote, 0xffffff74}, {@rand_addr=0x64010100, 0x46ec9c4f}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000680)={'ip_vti0\x00', 0x0, 0x8, 0xe, 0x9, 0x1, {{0x21, 0x4, 0x1, 0x8, 0x84, 0x64, 0x0, 0x10, 0x4, 0x0, @empty, @remote, {[@timestamp_prespec={0x44, 0x24, 0x68, 0x3, 0x0, [{@loopback, 0x1}, {@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@remote, 0x6}]}, @end, @ssrr={0x89, 0xb, 0xf5, [@private=0xa010100, @remote]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x5a, 0x3, 0x4, [{@broadcast, 0x6}]}, @timestamp_prespec={0x44, 0x1c, 0x9c, 0x3, 0xe, [{@broadcast, 0x5}, {@broadcast, 0xffff0001}, {@multicast2, 0x6}]}, @noop, @end, @lsrr={0x83, 0xf, 0xf7, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x37}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000740)={'syztnl0\x00', 0x0, 0x10, 0x40, 0x5, 0x4, {{0xc, 0x4, 0x3, 0x7, 0x30, 0x66, 0x0, 0x7, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0x6b, 0x3, 0xe, [{@local, 0x7ff}, {@multicast2, 0x9}, {@empty, 0xfffffffa}]}]}}}}}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f00000007c0)={0xb0, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000500)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x4e22, 0x28c9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}]}, 0x60}}, 0x0) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r10, 0x29, 0xcb, &(0x7f0000000540), 0xc) io_setup(0x8, &(0x7f0000004200)=0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r11, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r12, 0x0}]) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x1000, 0x787a0c37, 0x7, 0x400, 0x1, 0xa, '\x00', r13, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0xe, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r14, &(0x7f0000000300)="a494", &(0x7f0000000180)=""/10, 0x2}, 0x20) 3m41.356821445s ago: executing program 3 (id=1541): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_LOCK(r0, 0xb) setitimer(0x2, &(0x7f0000001d80)={{0x0, 0x2710}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) modify_ldt$write(0x1, &(0x7f0000000080)={0x3}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000340)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, &(0x7f0000000140)=[{&(0x7f00000001c0)="3f434f330b9ff5ec951a50d352fa644dab709b4350cfa0a38bc3953c3709ab066f8aa48f9fc24c94b929171c99471bed100871051086c3f86d5130ea73417a071f0e529148e62a747f9052f9f4336e61292005dcca225f8aa74fe4bc988dbd1c21837dce94be16aee59a0c30cf9f976113be7e72f98c58cd88abef2dc3ca2b531457fdc25c459b8f29a9021e900ca8e1f8277cd94e04fbfd034ecb145c09be29b0d2b07ce198cb2ce9842d76018b1a230b790e0aa7f96ed7a9417eff8d3d11f53feffa8e3b6367a9df49882c8e98683ac1", 0xd1}, {&(0x7f00000002c0)="afa3cdcd5518c684cacbe3aeba82fb7e645d7c3d2e01cce21a6ec5b180a52d8d261892285e6416adc4abf43f03ec48c9ad7f4f04e46f0f8ccd6cdfed865cd5678b7916cd1e", 0x1c}], 0x2}, 0x31c467c443841f3c) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m40.869423029s ago: executing program 3 (id=1544): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0000000308050000000000000003000700000006000240000000000900010073797a31000000"], 0x5c}}, 0x0) 3m40.378400851s ago: executing program 3 (id=1547): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.self_freezing\x00', 0x26e1, 0x0) 3m39.940400095s ago: executing program 3 (id=1548): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000012009702000000000000000222000000", @ANYRES32=0x0, @ANYBLOB="000000000000000024000e"], 0x44}}, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}, 0x48) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=within_size']) chdir(&(0x7f0000000240)='./file0/file0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) syz_mount_image$ufs(&(0x7f0000000300), &(0x7f0000000080)='./file0/../file0\x00', 0x8808, &(0x7f0000000080)=ANY=[], 0x1, 0x9e20, &(0x7f0000009e40)="$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") bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x10) ioctl$TCFLSH(r1, 0x404c4701, 0x20000000) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000680)={0x3, [[0x4, 0x6a31, 0x40, 0x6, 0x7, 0x3, 0x0, 0x3], [0x5, 0x6000, 0x3, 0x0, 0x0, 0x6, 0x9, 0x5], [0xde, 0x8, 0x8, 0x1000, 0x7fffffff, 0x0, 0x2, 0x1]], '\x00', [{0x5, 0x8, 0x0, 0x0, 0x1}, {0xb097, 0x7, 0x1, 0x0, 0x1}, {0x3, 0x8, 0x1, 0x0, 0x0, 0x1}, {0xe, 0x40, 0x0, 0x1}, {0x17e, 0xffff8000, 0x1, 0x1, 0x1, 0x1}, {0xfc31, 0xcd, 0x0, 0x0, 0x1, 0x1}, {0xf, 0x0, 0x0, 0x0, 0x1}, {0x8, 0xfffffffc, 0x0, 0x0, 0x1}, {0xd, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x1, 0x0, 0x1}, {0xd4, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x0, 0xdd, 0x1, 0x1}]}) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) accept4(r4, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380), 0xd, 0x5e4, &(0x7f0000001200)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000580)={0x0, 0x3, 0xec}, &(0x7f00000005c0)=0x8) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r3, &(0x7f00000002c0)='./file0\x00', r3, &(0x7f0000000040)='./file0\x00', 0x140) 3m38.720882826s ago: executing program 3 (id=1554): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_LOCK(r0, 0xb) setitimer(0x2, &(0x7f0000001d80)={{0x0, 0x2710}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) modify_ldt$write(0x1, &(0x7f0000000080)={0x3}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000340)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, &(0x7f0000000140)=[{&(0x7f00000001c0)="3f434f330b9ff5ec951a50d352fa644dab709b4350cfa0a38bc3953c3709ab066f8aa48f9fc24c94b929171c99471bed100871051086c3f86d5130ea73417a071f0e529148e62a747f9052f9f4336e61292005dcca225f8aa74fe4bc988dbd1c21837dce94be16aee59a0c30cf9f976113be7e72f98c58cd88abef2dc3ca2b531457fdc25c459b8f29a9021e900ca8e1f8277cd94e04fbfd034ecb145c09be29b0d2b07ce198cb2ce9842d76018b1a230b790e0aa7f96ed7a9417eff8d3d11f53feffa8e3b6367a9df49882c8e98683ac1", 0xd1}, {&(0x7f00000002c0)="afa3cdcd5518c684cacbe3aeba82fb7e645d7c3d2e01cce21a6ec5b180a52d8d261892285e6416adc4abf43f03ec48c9ad7f4f04e46f0f8ccd6cdfed865cd5678b7916cd1e", 0x1c}], 0x2}, 0x31c467c443841f3c) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m38.062677773s ago: executing program 3 (id=1557): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0000000308050000000000000003000700000006000240000000000900010073797a31000000"], 0x5c}}, 0x0) 3m36.873331236s ago: executing program 41 (id=1557): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0000000308050000000000000003000700000006000240000000000900010073797a31000000"], 0x5c}}, 0x0) 2m41.605832626s ago: executing program 1 (id=1771): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}, 0x3}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) bind$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) 2m41.090389187s ago: executing program 1 (id=1774): r0 = socket$inet6(0xa, 0x3, 0x7) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, 0x0, &(0x7f0000000000)=0xffffffffffffff9c) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x7fc, 0x1, 0x2000000000903, 0x1, 0x4}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000000)='c', 0x1) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) sendmmsg$alg(r0, &(0x7f00000010c0), 0x0, 0xc800) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3, &(0x7f0000000040)=ANY=[], 0x4, 0x664, &(0x7f0000000dc0)="$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") r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 2m40.327605863s ago: executing program 1 (id=1780): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)}}], 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="014900"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20040012) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) 2m38.903630348s ago: executing program 1 (id=1786): syz_mount_image$exfat(&(0x7f0000000200), &(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa0081a, &(0x7f0000000680)=ANY=[@ANYBLOB="646d61736b3d30303030303030303030303030303030303030323632312c757466382c756d61736b3d30303030303030303030303030303030303230303030302c6e616d65636173653d312c646973636172642c6572726f72733d72656d6f756e742d726f2c756d61736b3d30303030303030303030303030303030303230303030342c756d61736b3d30303030303030303030303030303030303030333337372c6e616d65636173653d312c757466382c696f636861727365743d69736f383835392d342c616c6c6f775f7574696d653d30303030303030303030303030303030303030303031312c646d61736b3d30313737373737373737373737373737373737373737302c6572726f72733d72656d6f756e742d726f2c7569643dd100203140d2f136b23c72070077b98b925a36537a0708edadd86d687948d558b6484005fef9b0ee6ed381060ed3d24e9419b3432361f1211bce1ed5501540408601070e425f2334fc70ee0ac75ae1d777ab874f3004e0d2210796f7ae31b2e81b1fc3ede661bde3b4d791eafd09c9e602828100c164f0cd0a32f87ed4d10545ce8c565af10f7489c7b6ccefaad9b771c4462634adfc860cd8b263ffc5d3d769c23b5a688d652d11998fce0c0e43658c744dde5a6f4c8c5b47d0274884e51fcc20c65d6ce446e8134f67d2c3f0dc89127833e61b3972542d06ff976780d4195ecebcda28a0cf449954c55979af67d537dd03af6bf5d39fed9fea70a9dd489055ec69b24d4a78d9b3afeb41699ffda9746da9a4c56bd661b8689221c81424b13b7208c392a0afb236f0921fe8b1c30c604ff1ff20bbaef52b50bc7df2c4d9a0016f2a1448ecf26bd42b91661cf2c7c31e5eb128a97d1c5ec2d2637a0d79e58710d64cffe04140d2c52fc78f9456066e92d8600d6ffbec80b94b63bfda0a658e7fa11a4d1aa7ee69fa8a71e9c14bf2c008fd9996c0e3c46e", @ANYRESHEX, @ANYRES64, @ANYRESDEC, @ANYRES16=0x0, @ANYRES8=0x0, @ANYRES64, @ANYRESOCT, @ANYRES64], 0x21, 0x14fd, &(0x7f0000003f40)="$eJzs3Au0jtXWOPA511oPm6Q3yX3NNR/etLFIklyS5JIkyZEkt4QkSZKkcr8lIQm5J7mH5BaS+/2We5Ik7SQJyS1Z/6HT+XRO5/v3ne873zDGt+dvjGfsNd/nneuZ65177Od53j3e97sOg6rUq1qxDjPD/wj+9UdXAEgBgL4AcA0ARABQMlvJbJf2Z9LY9X92EPHv9eDUK12BuJKk/+mb9D99k/6nb9L/9E36n75J/9M36X/6Jv0XIj3bOi33tbKl303e/0/P5Pz/f0ha0dFfrS96fcd/IUX6n75J/9M36X/6Jv1P36T/6Zv0P32T/qdv0n8h0rP//nvH8r+D/wvblf79E0IIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgiRPpwNlxkA+Nv4StclhBBCCCGEEEKIf5+Q8UpXIIQQQgghhBBCiP99CAo0GIggA2SEFMgEmeEqyAJXQ1a4BhJwLWSD6yA7XA85ICfkgtyQB/JCPrBA4IAhhvxQAJJwAxSEGyEVCkFhKAIeikIxuAmKw81QAm6BknArlILboDSUgbJQDm6H8nAHVIA7oSLcBZWgMlSBqnA3VIN7oDrcCzXgPqgJ90MteABqw1+gDjwIdeEhqAcPQ314BBpAQ2gEjaHJfyv/RXgJXobO0AW6QjfoDj2gJ/SC3tAH+sIr0A9SfnttBsIgeB0GwxswBN6EoTAMhsNbMAJGwigYDWNgLIyDt2E8vAMT4F2YCJNgMkyBqTANpsN7MANmwix4H2bDBzAH5sI8mA8L4ENYCItgMXwES+BjWArLYDmsgJWwClbDGlgL62A9bICNsAk2wxbYCp/ANtgOO2An7ILdsAc+hb3wGeyDz2E/fPEv5p/5h/yOCAioUKFBgxkwA6ZgCmbGzJgFs2BWzIoJTGA2zIbZMTvmwBw35sJcmAfzYD7Mh4SEjIz5MT8mMYkFsSCmYioWxsLo0WMxLIbF8WYsgSWwJJbEUlgKS2MZLIPlsByWx/JYAStgRayIlbASVsEqeDfejfdgdayONbAG1sSaWAtrYVre2lgH62BdrIv1sB7Wx/rYABtgI2yETbAJNsWm2AybYQtsgS2xJbbCVtgaW2MbbINtsS22w3bYHttjB+yAHfEFfAFfxBfxZXwZu2Al1Q27Y3fsiT2xN/bBPvgK9sNX8VV8DQfgQByEr+Pr+AYOwdM4FIfhcByO5dVIHIWjkdVYHIfjcDyOxwk4ASfiJJyEU3AqTsPpOB1n4Eycie/jbPwAP8C5OBfn4wJcgAtxES7GxbgEz+BSXIbLcQWuxFW4EtfgWlyD63EDrsdNuAm34Bb8BD/B7bgdd+JO3I0GAD/Fz/AzHID7cT8ewAN4EA/iITyEaZiGh/EwHsEjeBSP4jE8hsfxBJ7EE3gKT+FpPINn8Syex/N4AZ/L803d3YXWDQB1iVFGZVAZVIpKUZlVZpVFZVFZVVaVUAmVTWVT2VV2lUPlULlULpVH5VH51DlFihSrWOVX+VVSJVVBVVClqlRVWBVWXnlVTBVTxVVxVUKVUCXVraqUuk2VVmVUc19OlVPlVQtfQd2pKqqKqpKqrKqoqqqqqqaqqeqquqqhaqiaqqaqpR5QtVU37I0PqkudqacGYn01CBuohqqRaqzewEdVUzUEm6nmqoV6XA3DodhKNfWt1VOqjRqFbdUzajQ+q9qrsdhBPa86qhdUJ/Wiekk1851VFzURu6nuagr2VL1Ub9VHzcDK6lLHqqjX1AA1UA1Sr6v5+IYaot5UQ9UwNVy9pUaokWqUGq3GqLFqnHpbjVfvqAnqXTVRTVKT1RQ1VU1T09V7aoaaqWap99Vs9YGao+aqeWq+WqA+VAvVIrVYfaSWqI/VUrVMLVcr1Eq1Sq1Wa9RatU6tVxvURrVJbVZb1Fb1idqmtqsdaqfapXarPepTtVd9pvapz9V+9YU6oL5UB9VX6pD6WqWpb9Rh9a06or5TR9X36pj6QR1XJ9RJ9aM6pX5Sp9UZdVadU+fVz+qC+kVdVEGBRq201kZHOoPOqFN0Jp1ZX6Wz6Kt1Vn2NTuhrdTZ9nc6ur9c5dE6dS+fWeXRenU9bTdpp1rHOrwvopL5BF9Q36lRdSBfWRbTXRXUxfZMurm/WJfQtuqS+VZfSt+nSuowuq8vp23V5fYeuoO/UFfVdupKurKvoqvpuXU3fo6vre3UNfZ+uqe/XtfQDurb+i66jH9R19UO6nn5Y19eP6Aa6oW6kG+sm+lHdVD+mm+nmuoV+XLfUT+hW+kndWj+l2+indVv9jG6nn9Xt9XO6g35ed9Qv6E76F31RB91Zd9FddTfdXffQPXUv3Vv30X31K7qfflX316/pAXqgHqRf14P1G3qIflMP1cP0cP2WHqFH6lF6tB6jx+px+m09Xr+jJ+h39UQ9SU/WU/RUPU33/m2mWf+F/Hf+SX7/X4++RW/Vn+hterveoXfqXXq33qP36L16r96n9+n9er8+oA/og/qgPqQP6TSdpg/rw/qIPqKP6qP6mD6mj+sT+pz+UZ/SP+nT+ow+o8/p8/q8vvDbawAGjTLaGBOZDCajSTGZTGZzlclirjZZzTUmYa412cx1Jru53uQwOU0uk9vkMXlNPmMNGWfYxCa/KWCS5gb87aRpCpsixpuippi56V/JNwXNjSbVFPq7/D+rr4lpYpqapqaZaWZamBampWlpWplWprVpbdqYNqataWvamXamvWlvOpgOpqPpaDqZTuYl85LpbDqbrqar6W56mJ6ml+lt+pi+5hXTz/Qz/U1/M8AMMIPMIDPYDDZDzBAz1Aw1w81wM8KMMKPMKDPGjDHjzDgz3ow3E8wEM9FMNJPNZDPVTDXTzXQzw8wws8wsM9vMNnPMHDPPzDMLzAKz0Cw0i81is8QsMUvNMrPMrDArzCqzyqwxa8w6s85sMBvMJrPJLM241Ww128w2s8PsMLvMLrPH7DF7zV6zz+wz+81+c8AcMAfNQXPIHDJpJs0cNofNEXPEHDVHzTFzzBw3x81Jc9KcMqfMaXPanDVnzXlz3lwwF8xFc/HSZV+kIhWZyEQZogxRSpQSZY4yR1miLFHWKGuUiBJRtihblD26PsoR5YxyRbmjPFHeKF9kI4pcxFEc5Y8KRMnohqhgdGOUGhWKCkdFIh8VjYpFN0XFo5ujEtEtUcno1qhUdFtUOioTlY3KRbdH5aM7ogrRnVHF6K6oUlQ5qhJVje6OqkX3RNWje6Ma0X1Rzej+qFb0QFQ7+ktUJ3owqhs9FNWLHo7qR49EDaKGUaOocdTk3zp/CKdzPuY72y62q+1mu9setqftZXvbPravfcX2s6/a/vY1O8AOtIPs63awfcMOsW/aoXaYHW7fsiPsSDvKjrZj7Fg7zr5tx9t37AT7rp1oJ9nJdoqdaqfZ6fY9O8POtLPs+3a2/cDOsXPtPDvfLrAf2oV2kV1sP7JL7Md2qV1ml9sVdqVdZVfbNXatXWfX2w12o91kN9stdqv9xG6z2+0Ou9PusrvtHvup3Ws/s/vs53a//cIesF/ag/Yre8h+bdPsN/aw/dYesd/Zo/Z7e8z+YI/bE/ak/dGesj/Z0/aMPWvP2fP2Z3vB/mIv2nDp4v7S6Z0MGcpAGSiFUigzZaYslIWyUlZKUIKyUTbKTtkpB+WgXJSL8lAeykf56BImpvyUn5KUpIJUkFIplQpTYfLkqRgVo+JUnEpQCSpJJakUlaLSVJrKUlm6nW6nO+gOupPupLvoLqpMlakqVaVqVI2qU3WqQTWoJtWkWlSLalNtqkN1qC7VpXpUj+pTfWpADagRNaIm1ISaUlNqRs2oBbWgltSSWlErak2tqQ21obbUltpRO2pP7akDdaCO1JE6USd6iV6iztSZulJX6k7dqSf1pN7Um/pSX+pH/ag/9acBNIAG0SAaTINpCA2hoTSMhtNbNIJG0igaTWNoLI2jcTSextMEmkATaSJNpsk0labSdJpOM2gGzaJZNJtm0xyaQ/NoHi2gBbSQFtJiWkxLaAktpaW0nJbTSlpJq2k1raW1tJ7W00baSJtpM22lrbSNttEO2kG7aBftoT20l/bSPtpH+2k/HaADdJAO0iE6RGmURofpMB2hI3SUjtIxOkbH6TidpJN0ik7RaTpNZ+ksnaef6QL9QhcpUIrL5DK7q1wWd7XL6q5x/xjncrldHpfX5XPW5XA5/y4m51yqK+QKuyLOu6KumLvJpV66pfpdXNqVcWVdOXe7K+/ucBX+EFdz97jq7l5Xw93nqrq7/y6u6e53tdzDrrZ7xNVxDV1d19jVcw+7+u4R18A1dI1cY9fSPeFauSdda/eUa+Oe/kO80C1ya906t95tcHvdZ+6sO+eOuO/cefez6+y6uL7uFdfPver6u9fcADfwD/Fw95Yb4Ua6UW60G+PG/iGe7Ka4qW6am+7eczPczD/EC9yHbrZb7Oa4uW6em/9rfKmmxe4jt8R97Ja6ZW65W+FWulVutVvzH7WucJvcZrfF7XGfum1uu9vhdrpdbvev8aV17HOfu/3uC3fYfesOuq/cIXfUpblvfo0vre+o+94dcz+44+6EO+l+dKfcT+60O/Pr+i+t/Uf3i7voggNGVqzZcMQZOCOncCbOzFdxFr6as/I1nOBrORtfx9n5es7BOTkX5+Y8nJfzsWVix8wx5+cCnOQbuCDfyKlciAtzEfZclIvxTVycb+YSfAuX5Fu5FN/GpbkMl+VyfDuX5zu4At/JFfkursSVuQpX5bu5Gt/D1flersH3cU2+n2vxA1yb/8J1+EGuyw9xPX6Y6/Mj3IAbciNuzE34UW7Kj3Ezbs4t+HFuyU9wK36SW/NT3Iaf5rb8DLfjZ7k9P8cd+HnuyC9wJ36RX+KXuTN34a7cjbtzD+7Jvbg39+G+/Ar341e5P7/GA3ggD+LXeTC/wUP4TR7Kw3g4v8UjeCSP4tE8hsfyOH6bx/M7PIHf5Yk8iSfzFJ7K03g6v8czeCbP4vd5Nn/Ac3guz+P5vIA/5IW8iBfzR7yEP+alvIyX8wpeyat4Na/htbyO1/MG3sibeDNv4a38CW/j7byDd/Iu3s17+FPey5/xPv6c9/MXfIC/5IP8FR/irzmNv+HD/C0f4e/4KH/Px/gHPs4n+CT/yKf4Jz7NZ/gsn+Pz/DNf4F/4IgeGGGMV69jEUZwhzhinxJnizPFVcZb46jhrfE2ciK+Ns8XXxdnj6+Mccc44V5w7zhPnjfPFNqbYxRzHcf64QJyMb4gLxjfGqXGhuHBcJPZx0bhYfFNcPL45LhHfEpeMb41LxbfFpeMy8cP3lYtvj8vHd8QV4jvjivFdcaW4clwlrhrfHVeL74mrx/fGNeL74hLx/XGt+IEYfvu8St34obhe/HBcP34kbhA3jBvFjeMm8aNx0/ixuFncPG4RPx63jJ+IW8VPxq3jp+I28dN/ur9r3C3uHveIe8Qh3KvnJecnFyQ/TC5MLkouTn6UXJL8OLk0uSy5PLkiuTK5Krk6uSa5NrkuuT65IbkxuSm5ObklGULVjODRK6+98ZHP4DP6FJ/JZ/ZX+Sz+ap/VX+MT/lqfzV/ns/vrfQ6f0+fyuX0en9fn89aTd5597PP7Aj7pb/AF/Y0+1RfyhX0R731RX8w39k18E9/UP+ab+ea+hX/cP+6f8E/4J/2T/infxj/t2/pnfDv/rG/vn/PP+ed9R/+C7+Rf9C/5l31n38V39V19d9/d9/Q9fW/f2/f1fX0/38/39/39AD/AD/KD/GA/2A/xQ/xQP9QP98P9CD/Cj/Kj/Bg/xo/z4/x4P95P8BP8RD/RT/aT/VQ/1U/30/0MP8PP8rP87NTZfo6f4+f5eX6BX+AX+oV+sV/sl/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/2qf5b/xh/60/4r/zR/33/pj/wR/3J/xJ/6M/5X/yp/0Zf9af8+f9z/6C/8Vf9MGPS7ydGJ94JzEh8W5iYmJSYnJiSmJqYlpieuK9xIzEzMSsxPuJ2YkPEnMScxPzEvMTCxIfJhYmFiUWJz5KLEl8nFiaWJZYnliRWJlYlQgh77Y45A8FQjLcEAqGG0NqKBQKhyLBh6KhWLgpFA83hxLhllAy3BpKhdtC6VAmlA2PhAahYWgUGocm4dHQNDwWmoXmoUV4PLQMT4RW4cnQOjwV2oSnQ9vwTGgXng3tw3OhQ3g+dPzbHVd4OXQOXULX0C10Dz1Cz9Ar9A59Qt/wSugXXg39w2thQBgYBoXXw+DwRhgS3gxDw7AwPLwVRoSRYVQYHcaEsWFceDuMD++ECeHdMDFMCpPDlDA1TAvTw3thRpgZZoX3w+zwQZgT5oZ5YX5YED4MC8OisDh8FJaEj8PSsCwsDyvCyrAqrA5rwtqwLqwPG8LGsClsDlvC1vBJ2Ba2hx1hZ9gVdoc94dOwN3wW9oXPw/7wRTgQvgwHw1fhUPg6pIVvwuHwbTgSvgtHw/fhWPghHA8nwsnwYzgVfgqnw5lwNpwL58PP4UL4JVyUz6wJIYQQQvyX9PiT/d3+yWMGANRv4+4AcPX23Gm/368BYGOOv457qTwtEwDwVJcOD/5tq1Spa9euvz13qYaowFwASPzDAX6Ll0ELeAJaQ3Mo/k/r66VeOM9/Mn/yVoDMv8tJgcvx5fm//E/mf/Tx4QtLxWez/X/mnwuQWuByTia4HC+DFpdWA82hxH8yf86mf1J/pq/GATT7XU4WuBxfrr8YPAZPQ+u/e6YQQgghhBBCCPFXvVTZdn92/3zp/jyPuZyTES7Hf3Z/LoQQQgghhBBCiCvv2Rc6Pflo69bN28lABjKQwX8MrvRfJiGEEEIIIcS/2+WL/suPZbqSBQkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEOnQ7770KxMA/K98ndiVXqMQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQghxpf2/AAAA//+7dzOa") ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @win={{0x1ff, 0x1, 0x1, 0x2a}, 0xbecd35599603e9de, 0x2000aa4, &(0x7f0000000580)={{0x3, 0x69, 0x0, 0x2}}, 0x3, 0x0, 0x8}}) creat(&(0x7f0000000280)='./bus\x00', 0x100) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000001900)='./bus\x00', 0x0, 0x21002, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c02, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x80) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) 2m37.999736019s ago: executing program 1 (id=1789): r0 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)="fa", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="1100000000000000004003001100000000000000000000001c00000000000000000f00fdffff0700", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00", @ANYRES32=0x0, @ANYBLOB="a005000000000000000000001000000000000000840000000700000011"], 0x80}, 0x0) 2m37.228610266s ago: executing program 1 (id=1791): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$nfs4(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='tcp']) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m35.10664533s ago: executing program 42 (id=1791): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$nfs4(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='tcp']) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m54.630413397s ago: executing program 5 (id=1966): r0 = socket$packet(0x11, 0x2, 0x300) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) recvfrom(r0, &(0x7f0000000040)=""/171, 0xab, 0x2, 0x0, 0x0) 1m53.309620937s ago: executing program 5 (id=1970): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_delroute={0x2c, 0x19, 0x1, 0x70bd2c, 0x25dfdbfd, {0x2, 0x14, 0x0, 0xa, 0xfc, 0x4, 0xc8, 0x0, 0x800}, [@RTA_PREFSRC={0x8, 0x7, @remote}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x44}}]}, 0x2c}}, 0x0) 1m52.950980962s ago: executing program 5 (id=1973): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x26, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m52.161080042s ago: executing program 5 (id=1979): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000001440)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') symlink(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file1\x00') 1m51.189610238s ago: executing program 5 (id=1987): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="0800000000000000040000801c5d0000040000000500000001040000090000000c0000000000000000000000000000000000008d050000000100000003000000cf000000ff0f000004000000000000000000000000000000020000000800000000000000ff7f0000ff030000040000005a070000000000000000000000000000000000800100"]) 1m50.589562371s ago: executing program 5 (id=1993): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800002, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) 1m49.612001608s ago: executing program 43 (id=1993): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800002, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) 1m14.668120426s ago: executing program 7 (id=2149): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[], 0x1, 0x17d, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000003c80)={0x2020}, 0x2020) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000069193800000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) poll(&(0x7f00000000c0)=[{r2, 0x2124}, {r2}, {r3, 0x40}, {r2, 0x40}, {r1, 0x2}], 0x5, 0x80000000) 1m13.205180349s ago: executing program 7 (id=2155): bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m12.737001537s ago: executing program 7 (id=2158): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) symlink(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m12.385593405s ago: executing program 7 (id=2161): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@dioread_lock}, {@noblock_validity}, {@lazytime}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x143042, 0x161) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x2804000, &(0x7f0000000100), 0x40, 0x50b, &(0x7f0000001940)="$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") open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x41800, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3, 0x28011, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendfile(r0, r0, 0x0, 0x7a680000) 1m11.694418872s ago: executing program 7 (id=2167): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, 0x0, 0x0) r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x106}, 0x0, 0x0, 0x4, 0xf, 0x1}) msgsnd(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="3ffe00"], 0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x2, 0x3000) msgctl$IPC_RMID(0x0, 0x0) 1m11.111164196s ago: executing program 9 (id=2171): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000400)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x7, 0x0, 0x0, 0x0, {[@sack={0x5, 0x2}, @sack={0x5, 0x2}]}}}}}}}}, 0x0) 1m10.729132797s ago: executing program 9 (id=2173): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x11, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0xc, 0x0, 0x0, 0x9, [0x5, 0x3]}, @timestamp_prespec={0x44, 0x14, 0xc0, 0x3, 0x1, [{@multicast1, 0x5}, {@empty, 0x3}]}, @timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x8}, @lsrr={0x83, 0x7, 0xdc, [@local]}, @rr={0x7, 0x3}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000080)=0xfff) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m9.574428953s ago: executing program 9 (id=2180): bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m9.178655777s ago: executing program 9 (id=2184): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) close(0xffffffffffffffff) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 1m8.686756493s ago: executing program 9 (id=2187): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x30, r1, 0x5, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m5.497450512s ago: executing program 9 (id=2190): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x9f3, 0x4) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x20008801, 0x0, 0x0) 1m4.295529537s ago: executing program 44 (id=2190): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x9f3, 0x4) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x20008801, 0x0, 0x0) 1m4.165265775s ago: executing program 7 (id=2195): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newsa={0xf0, 0x10, 0x633, 0x70bd2a, 0x25dfdbfc, {{@in=@local, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8004, 0x0, 0xa0}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, {0x327, 0x9, 0x0, 0x4, 0xfff, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x100}, {0x8f, 0x0, 0x8}, 0x70bd27, 0x0, 0xa, 0x1}}, 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x4008094) 1m2.780448211s ago: executing program 45 (id=2195): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newsa={0xf0, 0x10, 0x633, 0x70bd2a, 0x25dfdbfc, {{@in=@local, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8004, 0x0, 0xa0}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, {0x327, 0x9, 0x0, 0x4, 0xfff, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x100}, {0x8f, 0x0, 0x8}, 0x70bd27, 0x0, 0xa, 0x1}}, 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x4008094) 11.514109284s ago: executing program 2 (id=2362): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000002c0)={0x1f, 0x1, 0xafa205fe78375684}, 0x6) 11.329821181s ago: executing program 2 (id=2363): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0xffffffee, 0x0, 0x0, 0x0, 0x0, "1241b72d7fffff5b000f000000462200"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_open_dev$evdev(&(0x7f0000000880), 0x200000000000002, 0x862b01) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 9.079923158s ago: executing program 2 (id=2376): r0 = syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00d381c67f655a2559d29eb6892bf10aeebbc9df90ef45b8d28119848805fefae1189951a233a78b9637d45da9d54e0abef364a75cbd87895df4934f06561c2d3fb08f0dfdec93d05440296ea969bffef25943a0a483d382446e1bc00eb59b"], 0x1, 0xc3c, &(0x7f0000000d00)="$eJzs3V1sXGdaB/DnnWMndsqyU9qmXbpIsxSxaZoE56OtUVrkbIy1K0VtVMcLNyCP40kY1V+1nVVawSpIwA0Igoq0Ai7IDRIXXOQGCa0QirhZJECKQJUWgUSgabQSAmYFCysqYXRm3rHHbtK4+bLT/H5t/J8585w575n2OT4TzXsmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICIL/30saGDaatHAQA8SK+NvzF02O9/AHiknPL+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA20tRxFuR4r2xVpps3+8YONGcO3d+YnTs5qsNpkhRiaJdX/4ZOHjo8JEXX3p5uJsfv/699rl4ffzUsdrx+dmFxcbSUmO6NjHXPD0/3dj0M9zt+hvtbb8Atdk3z02fObNUO3Tg8LqHz1dv7Hxsd/Xo8LP7nu/WToyOjY331PT13/HWPyLdu6fiU2RHFPHlSPGt/d9J9YioxN33wm2OHffbYPSV/dfeiYnRsfaOzDTrc8vlg6mSq/oiqj0rjXR75AH04l0ZibhQ/ncqB7y33L3xhfpifWqmUTtZX1xuLjfn51KlM9pyf6pRieEUsRARrWKrB8920x9FvBopbnzYSlMRUXT74IXXxt8YOnzrFfse4CBvsflqEXE1HoKehW1qZxTx25Hi3cmhOJ37qt021yO+WOYrEW+VeSXFxXw/lQeI4Yjv+n0CD7W+KOJvIsV8aqXpbu+3zytPfLX2lbkz8z213fPKh/79wYPk3IRtbCCKmGqf8bfSnf9lFwAAAAAAAAAAAADwYBTxzUhxeXZPWojeOaXNubO1U/Wpmc6ngruf/a/ltVZWVlaqqZO1nEM5R3KezDmZcyHnhZwXc17KeTnnlZxXc17L2coZlbz9nLWcQzlHcp7MOZlzIeeFnBdzXsp5OeeVnFdzXsvZyhnmPQEAAAAAAAAAAAAAAAAAAHCPDUYRvxEp/v33v9b+Xulofy/9Z48OHz/xmd7vjH/mNs9T1h6IiG/G5r6Td0f+rvFUKf+59/sF3N5AFPH1/P1/v7zVgwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALaFShTxK5HiG99rpUgRMRIxGZ28Vmz16AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA0s5UxKuR4md/d2R1WV9EpPa/HXvKH0dipMj5RJmvxMjBdlZGjpU5EHFgC8YP3Lmlt995sz4z01h0ww033Fi9sdVHJgAAAAAAAAAAAAAAAAB4hKUi/j5S/OTvtVI1Is5Xb+x8bHf16PCz+54vomhfBCD11r8+fupY7fj87MJiY2mpMV2bmGuenp9ubHZzAyeac+fOT4yO3Zedua3B+zz+wYHj8wtvLzbP/sLyTR/fNXBsaml5sX765g/HYPRFDPUu2dse8MToWHvQM836XHvVVLnFAPsiapvdGR55u1IR/xsp3tv/7Xg8L8vX/+jv3Fvr/j/8xbV7P9y3Plf/d2wfPz57dPj4ruc2czttdqB7241XNsLYeM/ivjzKH+pZVs3j2vRzwyOq7P8XIsXP/1GRuj2U+/8HOveK1dr/+fpaTx3dkKu2qP+f6Fl2NB+1+vsiBpZnF/qfjhhYevud/c3Z+tnG2cbckUMvvzR85OUXj7zUvyNi4ExzpjG0dmvTrx0AAAAAAAAAAAAAAAAA3C/9qYgvRYpf+ru/XJ03nuf/faZzb23+X+/83z0bnqf3ugG3un3TuX63mdfXq9xmSkU8FSme/bNn2uNNscucd7hDu1IR3y/7afrL6Qt5We7/PLP/5v1/YUOu2qL5v4/3LLuQjxP/ESke/4Nn4gs9x4mNs3vLur+IFFM/8vlcFzvKuu7zdeZEdyYGl7VfixTvn1xf2503/cRa7cHN7hZspbL/ZyPFP/zW38aP5mXrr/9x8/7ftSFXbVH/P9m7TxGx9PY7b9ZnZhqLS5t+KeCRU/b/r0eKv/6Tb8dzednHXf+ne52fPc+tz8Fu0Rb1/1M9y6p5XD/2CV8LAAAAAAAAAAAAeFjsSkX8U6T48z/dl/bnZZv5/O/0hly1RZ//e7pn2fS6z//evxubfpEBAGCb6E9F/ESk+OPp66k7N/aW839fWZv/M7rxxL19Tv+D7Xn+n+hc/xPM/y+3mVIR/5fn9Q7dZl7vj0eKX/upfbku7S7rRrrDbf8ceG1+bv+xmZn50/Xl+tRMoza+UD/dKNfdGyn+9d8+n9ettOf5dudHd+YGr80J/p1I8XMfdGs7c4K7cymfXKs9WNbujxTff399bXfe1VNrtYfK2t+MFGP/ffPa3Wu1h8vaf4wU//lurVu7q6ztvp97eq32wOn5mY+8ZQMAAAAAAAAAAAAAAAAAAGDr9aciUqS48jOXVufGr7/+V/c6AOuv/7XR/fr+/+q92U0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeCikKOK/IsV7Y610rSjvdwycaM6dOz8xOnbz1QZTpKhE0a4v/wwcPHT4yIsvvTzczY9f/177XLw+fupY7fj87MJiY2mpMV2bmGuenp9ubPoZ7nb9jfa2X4Da7Jvnps+cWaodOnB43cPnqzd2Pra7enT42X3Pd2snRsfGxntq+vrveOsfke7dU/EpsiOK+KtI8a3930n/XERU4u574TbHjvttMPrK/mvvxMToWHtHZpr1ueXywVTJVX0R1Z6VRro98gB68a6MRFyIiEo54L3l7o0v1BfrUzON2sn64nJzuTk/lyqd0Zb7U41KDKeIhYhoFVs9eLab/ijiSqS48WEr/UsRUXT74IXXxt8YOnzrFfse4CBvsflqEXE1HoKehW1qZxTxZKR4d3Io3i86fdVum+sRXyzzlYi3yryS4mK+n8oDxHDEd/0+gYdaXxRxMlLMp1a6XuTeb59Xnvhq7StzZ+Z7arvnlQ/9+4MHybkJ29hAFPFB+4y/lT7w+xwAAAAAAAAAAAAAtrkiXo0Ul2f3pPb80NU5pc25s7VT9amZzsf6u5/9r+W1VlZWVqqpk7WcQzlHcp7MOZlzIeeFnBdzXsp5OeeVnFdzXsvZyhmVvP2ctZxDOUdynsw5mXMh54WcF3Neynk555WcV3Ney9nKGT4nDQAAAAAAAAAAAAAAAADAfVKJIn41Unzje620UnS+X3YyOnnNPFf4VPv/AAAA//84/iOE") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) socketpair$unix(0x1, 0x2, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, r3) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in=@local}}, {{@in6=@ipv4={""/10, ""/2, @private}}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8) chdir(&(0x7f0000000000)='./file0\x00') r4 = syz_create_resource$binfmt(&(0x7f0000000cc0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x41, 0x1ff) mount$fuse(0x0, 0xfffffffffffffffc, 0x0, 0x40000, &(0x7f0000000500)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x3000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x4}}, {@max_read={'max_read', 0x3d, 0x8002}}, {@default_permissions}]}}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000200)={[{@discard}, {@quota}]}, 0x26, 0x756, &(0x7f00000002c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xdd7401, 0x0) write$cgroup_subtree(r5, &(0x7f00000001c0), 0x0) fstat(r0, &(0x7f0000000b40)) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000b00)='system.posix_acl_default\x00', &(0x7f0000000bc0)={{}, {0x1, 0x1}, [{}, {0x2, 0x4, r2}, {0x2, 0x4}], {}, [], {0x10, 0x1}, {0x20, 0x1}}, 0x3c, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) ftruncate(r1, 0x0) 8.697845376s ago: executing program 8 (id=2380): sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) 7.256373908s ago: executing program 8 (id=2383): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) prctl$PR_GET_SECUREBITS(0x1b) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200c9905, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = inotify_init() ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x48, &(0x7f0000000000)=0x4000a, 0x4) getsockopt$inet6_int(r2, 0x29, 0x48, 0x0, &(0x7f00007d0000)) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004010) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x60, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4c0d5}, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r4, &(0x7f0000000100)='-1\x00', 0x2) close_range(r4, 0xffffffffffffffff, 0x0) 6.047406583s ago: executing program 6 (id=2385): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYBLOB="000000000000000000000000000012"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 5.91731749s ago: executing program 4 (id=2386): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90a495, &(0x7f00000002c0)={[{@jqfmt_vfsv1}, {@mblk_io_submit}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@dax_always}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/kvm\x00'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}, 0x6, 0x50d, &(0x7f0000008340)="$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") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r3, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000340)={0xa, 0x4e20, 0x8001, @mcast1}, 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x7, 0x4, 0x0, 0x0, 0x40000000}, {0x0, 0x1, 0xde, 0x0, 0x40, 0x2, 0xcd, 0x0, 0x9, 0xff, 0x0, 0x0, 0x8}, {0x3fe, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x4, 0x40}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xe3, 0xa, 0xc, 0x426, 0x8000000000000001, 0x1, 0xc, 0x3, 0x2e72, 0xd8, 0x0, 0x10000000000000, 0x3, 0x4, 0x4, 0x1ff], 0x18000, 0x81}) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040805}, 0x8000) syz_mount_image$exfat(&(0x7f0000000700), &(0x7f0000000640)='./file0\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x1, 0x1503, &(0x7f0000002a80)="$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") getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f000000ac40)={0x2020}, 0x2020) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r6, 0x0, 0x2, 0x0) 5.785435904s ago: executing program 2 (id=2387): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f0b3cda094f2a9000070900be008304"], 0x0}, 0x0) 4.765204241s ago: executing program 6 (id=2388): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000000)={0xb, 0x200, 0xa}) 4.496501162s ago: executing program 0 (id=2389): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x4d, 0x0, 0x1}, {0x6, 0x5, 0x0, 0xe}]}) 3.91903657s ago: executing program 0 (id=2390): syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1a4, &(0x7f0000000440)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0xfe37, 0x0) 3.26865239s ago: executing program 8 (id=2391): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setuid(0xee01) mkdir(&(0x7f0000000140)='./control\x00', 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) rmdir(&(0x7f0000000100)='./control\x00') 3.219818482s ago: executing program 4 (id=2392): open(0x0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032dbd700000000000020000000000000000000000080017004e214e22"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x8000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00!'], 0x28}}, 0x0) 2.967271485s ago: executing program 6 (id=2393): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000002c0)='proc\x00', 0x4010, 0x0) 2.896928588s ago: executing program 2 (id=2394): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000700)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0xc, 0x7fff, 0x2, 0x3e, 0xffffffec, 0x294, 0x40, 0xa0, 0x0, 0x0, 0x38, 0x1, 0x0, 0x7f, 0x8}, [{0x3, 0xec, 0x2, 0x0, 0x3, 0x2, 0x400, 0x6}]}, 0x78) close(r0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0x2000775) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 2.863667267s ago: executing program 4 (id=2395): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_LINKMODE={0x5, 0x11, 0x40}]}, 0x3c}}, 0x0) 2.749166837s ago: executing program 0 (id=2396): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.548999294s ago: executing program 4 (id=2397): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a3a2a4e7417e941910c27d130b55ac2d5f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731250f87d27b5e9e61000e70f0c6a4e2432073d0d3e18f864e9ef64637d14e5485f36e53c821cb5898685c055a367ea51b653eff6581710f6c3824bc667bd24219163c60803099f985567be0d978e301b4f6603628606afadb04eee58f42f1853f2e8598a5e250e0f4c9a"], 0x1, 0x14fe, &(0x7f0000002ac0)="$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") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000001540)='./file1\x00', 0x2, &(0x7f0000000100)=ANY=[], 0x1, 0x1511, &(0x7f0000002ac0)="$eJzs3AvYTdX2MPAx5pyLl8ROcp9jjsVOLpMkySVJLkmSJEluCUmS5AjJLbckJCH3JLmF5BaS+/2We5IcSZKEhCTze946Hef8O//TOV99f//vvOP3POvZczxzjbnm3ON9915rPXvvrzoMrlKvasU6zAy/C/780B0AUgCgHwBkAYAIAEpmLZk1tT+Dxu6/7yDij3X/1Ms9A3E5Sf3TNql/2ib1T9uk/mmb1D9tk/qnbVL/tE3qL0RatnVarqtkS7vb77//n/Lzg9z///+QvP+nbVL//zSnM/w7e0v9/5NcDCH8exlS/7RN6v8fT/+zTql/2ib1T9uk/mmb1F+ItOxy33+W7fJul/vvTwghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE2nAuXGIA4Jf25Z6XEEIIIYQQQggh/jgh/eWegRBCCCGEEEIIIf7fQ1CgwUAE6SA9pEAGyAhXQCa4EjJDFkjAVZAVroZscA1khxyQE3JBbsgDecECgQOGGPJBfkjCtVAAroOCUAgKQxHwUBSKwfVQHG6AEnAjlISboBTcDKWhDJSFcnALlIdboQLcBhXhdqgElaEKVIU7oBrcCdXhLqgBd0NNuAdqwb1QG+6DOnA/1IUHoB48CPXhIWgADaERNIYmf5Of7l/Ofxa6wHPQFbpBd+gBPeF56AW9oQ/0hX7wAvSHF2EAvAQDYRAMhpdhCLwCQ+FVGAbDYQS8BiNhFIyGMTAWxsF4eB0mwBswEd6ESfAWTIYpMBWmwXR4G2bATJgF78BseBfmwFyYB/NhAbwHC2ERLIb3YQl8AEthGSyHFbASVsFqWANrYR2shw2wETbBZtgCW+FD2AbbYQfshF2wG/bAR7AXPoZ98Ansh0//zfyz/yW/IwICKlRo0GA6TIcpmIIZMSNmwkyYGTNjAhOYFbNiNsyG2TE75sScmBtzY17Mi4SEjIz5MB8mMYkFsAAWxIJYGAujR4/FsBgWxxuwBJbAklgSS2EpLI1lsAyWw3JYHstjBayAFbEiVsJKWAWr4B14B96J1bE61sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYCBthE2yCTbEpNsNm2AJbYEtsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yEnfBZfBafw+ewG1ZSPbAn9sRe2Av7YF/siy9gf3wRX8SXcCAOwsH4Mr6Mr+BQPIPDcDiOwBFYXo3C0TgGWY3D8TgeJ+AEnIgTcRK+hW/hFJyK03A6TscZOBNn4js4G9/Fd3EuzsX5uAAX4EJchItxMS7Bs7gUl+FyXIErcRWuxDW4FtfgetyA63ETbsItuAU/xA9xO27HnbgTd+Nu/Ag/wo/xYxyI+3E/HsADeBAP4iE8hIfxMB7BI3gUj+IxPIbH8TiewJN4Ck/iaTyNZ/AsnsNzeB7P4wW8gBfxYuo/v0pllFHpVDqVolJURpVRZVKZVGaVWSVUQmVVWVU2lU1lV9lVTpVT5Va5VV6VV5EixSpW+VQ+lVRJVUAVUAVVQVVYFVZeeVVMFVPFVXFVQpVQJdVNqpS6WZVWZVRzX06VU+VVC19B3aYqqoqqkqqsqqiqqqqqpqqp6qq6qqFqqJqqpqql7lW1VQ/sg/er1MrUU4OwvhqMDVRD1Ug1Vq/gw6qpGorNVHPVQj2qhuMwbKWa+tbqCdVGjca26ik1Bp9W7dU47KCeUR1VJ9VZPau6qGa+q+qmJmEP1VNNwV6qt+qj+qoZWFmlVqyKekkNVIPUYPWymo+vqKHqVTVMDVcj1GtqpBqlRqsxaqwap8ar19UE9YaaqN5Uk9RbarKaoqaqaWq6elvNUDPVLPWOmq3eVXPUXDVPzVcL1HtqoVqkFqv31RL1gVqqlqnlaoVaqVap1WqNWqvWqfVqg9qoNqnNaovaqj5U29R2tUPtVLvUbrVHfaT2qo/VPvWJ2q8+VQfUn9VB9Zk6pD5Xh9UX6oj6Uh1VX6lj6mt1XH2jTqiT6pT6Vp1W36kz6qw6p75X59UP6oL6UV1UQYFGrbTWRkc6nU6vU3QGnVFfoTPpK3VmnUUn9FU6q75aZ9PX6Ow6h86pc+ncOo/Oq60m7TTrWOfT+XVSX6sL6Ot0QV1IF9ZFtNdFdTF9vS6ub9Al9I26pL5Jl9I369K6jC6ry+lbdHl9q66gb9MV9e26kq6sq+iq+g5dTd+pq+u7dA19t66p79G19L26tr5P19H367r6AV1PP6jr64d0A91QN9KNdRP9sG6qH9HNdHPdQj+qW+rHdCv9uG6tn9Bt9JO6rX5Kt9NP6/b6T7qDfkZ31J10Z/2jvqiD7qq76e66h+6pn9e9dG/dR/fV/fQLur9+UQ/QL+mBepAerF/WQ/Qreqh+VQ/Tw/UI/ZoeqUfp0XqMHqvH6fH6dT1Bv6En6jf1JP2Wnqyn6Kl6mu7zl5Fm/Qv5b/yD/AE/HX2L3qo/1Nv0dr1D79S79G69R+/Re/VevU/v0/v1fn1AH9AH9UF9SB/Sh/VhfUQf0Uf1UX1MH9PH9XF9Qp/U3+tv9Wn9nT6jz+qz+nt9Xp/XF/7yHIBBo4w2xkQmnUlvUkwGk9FcYTKZK01mk8UkzFUmq7naZDPXmOwmh8lpcpncJo/Ja6wh4wyb2OQz+U3SXGsKmOtMQVPIFDZFjDdFTTFz/e/O/635NTFNTFPT1DQzzUwL08K0NC1NK9PKtDatTRvTxrQ1bU070860N+1NB9PBdDQdTWfT2XQxXUwAgO6mu+lpnje9TG/Tx/Q1/cwLpr/pbwaYAWagGWgGm8FmiBlihpqhZpgZZkaYEWakGWlGm9FmrBlrxpvxZoKZYCaaiWaSmWQmm8lmqplqppvpZoaZYWaZWWa2mW3mmDlmnplnFpgFZqFZaBabxWaJWWKWmmVmmVlhVphVZpVZY9aYdWad2WA2mE1mk1lqfvmA5g6zw+wyu8wes8fsNXvNPrPP7Df7zQFzwBw0B80hc8gcNofNEXPEHDVHzTFzzBw3x80Jc8KcMqfMaXPanDFnzDlzzpw3580Fc8FcNBdTT/siFanIRCZKF6WLUqKUKGOUMcoUZYoyR5mjRJSIskZZo2zRNVH2KEeUM8oV5Y7yRHkjG1HkIo7iKF+UP0pG10YFouuiglGhqHBUJPJR0ahYdH1UPLohKhHdGJWMbopKRTdHpaMyUdmoXHRLVD66NaoQ3RZVjG6PKkWVoypR1eiOqFp0Z1Q9uiuqEd0d1YzuiWpF90a1o/uiOtH9Ud3ogahe9GBUP3ooahA1jBpFjaMmf+j4IZzJ8YjvarvZ7raH7Wmft71sb9vH9rX97Au2v33RDrAv2YF2kB1sX7ZD7Ct2qH3VDrPD7Qj7mh1pR9nRdowda8fZ8fZ1O8G+YSfaN+0k+5adbKfYqXaanW7ftjPsTDvLvmNn23ftHDvXzrPz7QL7nl1oF9nF9n27xH5gl9pldrldYVfaVXa1XWPX2nV2vd1gN9pNdrPdYrfaD+02u93usDvtLrvb7rEf2b32Y7vPfmL320/tAftne9B+Zg/Zz+1h+4U9Yr+0R+1X9pj92h6339gT9qQ9Zb+1p+139ow9a8/Z7+15+4O9YH+0F21IPblPfXsnQ4bSUTpKoRTKSBkpE2WizJSZEpSgrJSVslE2yk7ZKSflpNyUm/JSXkrFxJSP8lGSklSAClBBKkiFqTB58lSMilFxKk4lqASVpJJUikpRaSpNZSn1euQWupVupdvoNrqdbqfKVJmqUlWqRtWoOlWnGlSDalJNqkW1qDbVpjpUh+pSXapH9ag+1acG1IAaUSNqQk2oKTWlZtSMWlALakktqRW1otbUmtpQG2pLbakdtaP21J46UAfqSB2pM3WmLtSFulJX6k7dqSf1pF7Ui/pQH+pH/ag/9acBNIAG0kAaTINpCA2hoTSUhtFwGkGv0UgaRaNpDI2lcTSextMEmkATaSJNokk0mSbTVJpK02k6zaAZNItm0WyaTXNoDs2jebSAFtBCWkiLaTEtoSW0lJbSclpOK2klrabVtJbW0npaTxtpI22mzbSVttI22kY7aAftol20h/bQXtpL+2gf7af9dIAO0EE6SIfoEB2mw3SEjtBROkrH6Bgdp+N0gk7gKTpFp+k0naEzdI7O0Xn6gS7Qj3SRAqW4DC6ju8Jlcle6zC6LS3EZugHAX+OcLpfL7fK4vM667C7H38XknCvoCrnCrojzrqgr5q7/VVzalXFlXTl3iyvvbnUVfhVXc3e66u4uV8Pd7aq6O/4urunucbXcg662e8jVcQ1dXdfY1XMPuvruIdfANXSNXGPX0j3mWrnHXWv3hGvjnvxVvNAtcmvdOrfebXB73cfunPveHXVfufPuB9fVdXP93Auuv3vRDXAvuYFu0K/iEe41N9KNcqPdGDfWjftVPNlNcVPdNDfdve1muJm/ihe499xst9jNcXPdPDf/pzh1Tovd+26J+8AtdcvccrfCrXSr3Gq35q9zXeE2uc1ui9vjPnLb3Ha3w+10u9zun+LUdexzn7j97lN3xH3pDrrP3CF3zB12X/wUp67vmPvaHXffuBPupDvlvnWn3XfujDv70/pT1/6t+9FddMEBIyvWbDjidJyeUzgDZ+QrOBNfyZk5Cyf4Ks7KV3M2voazcw7Oybk4N+fhvGyZ2DFzzPk4Pyf5Wi7A13FBLsSFuQh7LsrF+HouzjdwCb6RS/JNXIpv5tJchstyOb6Fy/OtXIFv44p8O1fiylyFq/IdXI3v5Op8F9fgu7km38O1+F6uzfdxHb6f6/IDXI8f5Pr8EDfghtyIG3MTfpib8iPcjJtzC36UW/Jj3Iof59b8BLfhJ7ktP8Xt+GlOfcXpwM9wR+7EnflZ7sLPcVfuxt25B/fk57kX9+Y+3Jf78Qvcn1/kAfwSD+RBPJhf5iH8Cg/lV3kYD+cR/BqP5FE8msfwWB7H4/l1nsBv8ER+kyfxWzyZp/BUnsbT+W2ewTN5Fr/Ds/ldnsNzeR7P5wX8Hi/kRbyY3+cl/AEv5WW8nFfwSl7Fq3kNr+V1vJ438EbexJt5C2/lD3kbb+cdvJN38W7ewx/xXv6Y9/EnvJ8/5QP8Zz7In/Eh/pwP8xd8hL/ko/wVH+Ov+Th/wyf4JJ/ib/k0f8dn+Cyf4+/5PP/AF/hHvsiBIcZYxTo2cRSni9PHKXGGOGN8RZwpvjLOHGeJE/FVcdb46jhbfE2cPc4R54xzxbnjPHHe2MYUu5jjOM4X54+T8bVxgfi6uGBcKC4cF4l9XDQuFl8fF49viEvEN8Yl45viUvHNcem4TFw2LhffEpePb40rxLfFFePb40px5bhKXDW+I64W3xlXj++Ka8R3xyXie+Ja8b1x7fi+uE58f1w3fiCuFz8Y148fihvEDeNGceO4Sfxw3DR+JG4WN49bxI/GLePH4lbx43Hr+Im4Tfzkb/Z3j3vEPePn4+fjEO7S85LzkwuS7yUXJhclFyffTy5JfpBcmlyWXJ5ckVyZXJVcnVyTXJtcl1yf3JDcmNyU3Jzckgyhanrw6JXX3vjIp/PpfYrP4DP6K3wmf6XP7LP4hL/KZ/VX+2z+Gp/d5/A5fS6f2+fxeb315J1nH/t8Pr9P+mt9AX+dL+gL+cK+iPe+qC/mG/smvolv6h/xzXxz38I/6h/1j/nH/OP+cf+Eb+Of9G39U76df9q393/yf/LP+I6+k+/sn/Vd/HO+q+/mu/vuvqfv6Xv5Xr6P7+P7+X6+v+/vB/gBfqAf6Af7wX6IH+KH+qF+mB/mR/gRfqQf6Uf70X6sH+vH+/F+gp/gJ/qJfpKf5Cf7yX6qn+qn++l+hp/hZ/lZfraf7ef4OX6en+cX+AV+oV/oF/vFfolf4pf6pX65X+5X+pV+tV/t1/q1fr1f7zf6jX6z3+y3+q1+m9/md/gdfpff5ff4PX6v3+v3+X1+v9/vD/gD/qA/6A/5z/1h/4U/4r/0R/1X/pj/2h/33/gT/qQ/5b/1p/13/ow/68/57/15/4O/4H/0F33w4xOvJyYk3khMTLyZmJR4KzE5MSUxNTEtMT3xdmJGYmZiVuKdxOzEu4k5ibmJeYn5iQWJ9xILE4sSixPvJ5YkPkgsTSxLLE+sSKxMrEqEkGdbHPKF/CEZrg0FwnWhYCgUCociwYeioVi4PhQPN4QS4cZQMtwUSoWbQ+lQJpQND4UGoWFoFBqHJuHh0DQ8EpqF5qFFeDS0DI+FVuHx0Do8EdqEJ0Pb8FRoF54O7cOfQofwTOgYOoXO4dnQJTwXuoZuoXvoEXqG50Ov0Dv0CX1Dv/BC6B9eDAPCS2FgGBQGh5fDkPBKGBpeDcPC8DAivBZGhlFhdBgTxoZxYXx4PUwIb4SJ4c0waV6Gn28Ph2lheng7zAgzw6zwTpgd3g1zwtwwL8wPC8J7YWFYFBaH98OS8EFYGpaF5WFFWBlWhdVhTVgb1oX1YUPYGDaFzWFL2Bo+DNvC9rAj7Ay7wu6wJ3wU9oaPw77wSdgfPg0Hwp/DwfBZOBQ+D4fDF+FI+DIcDV+FY+HrcDx8E06Ek+FU+DacDt+FM+FsOBe+D+fDD+FC+DFclO+sCSGEEEL8S/Rv9Pf4b3LUX9o9AeDK7bkO/9f+jdl/bvdOn7tlAgCe6Nbh/l+2SpW6d+/+l32XaojyzwWAxKX8dHApXgYt4DFoDc2h+F/7U/7mWL1Vp/P8z8bvAVHyJoCMf5OTmv9LfGn8G/7h+nurUbP/6fgaouRcgIL5L+Wknjn/El8av8R/M36Opr8xfobPxgM0+5ucTHApvjR+MXgEnoTWf7enEEIIIYQQQgjxs96qbLvfur5NvT7PbS7lpIdL8T+6PhdCCCGEEEIIIcT/Lk936vz4w61bN28njV81Av4h44QsPz/Vl3s5/7MNAIT/BdOQxv9t43K/MgkhhBBCCCH+aJdO+n+Of+v7AEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhPjj/U/8nNgvx5LfFhBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCJFW/Z8AAAD//x/sMrQ=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$FUSE_WRITE(r1, &(0x7f00000000c0)={0x18}, 0xfffffdef) process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, 0x0, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0xb73d) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0xc0185879, &(0x7f0000000240)={0x87, 0xfffd, 0xfffffffffffffffd, 0x4, 0x100011, 0x0, 0x2401}) 2.150596375s ago: executing program 8 (id=2398): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{0xff7f000000000000, 0x405}, {0x0, 0x405}, 0x401, 0x4}) 1.991473797s ago: executing program 0 (id=2399): r0 = socket$netlink(0x10, 0x3, 0x4) setuid(0xee01) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008007f0fffeffe809005300fff5dd00000010000100050c100000000000224e0000", 0x58}], 0x1) 1.660930641s ago: executing program 8 (id=2400): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x104880, 0x0, 0x1, 0x0, &(0x7f0000000200)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61) sendfile(r0, r0, 0x0, 0x800000009) 1.637797834s ago: executing program 6 (id=2401): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000330c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000000)) 1.635830661s ago: executing program 4 (id=2402): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d564b"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x0, 0xc}, {0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x4}]}]}]}}]}, 0x4c}}, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)) 1.393253456s ago: executing program 2 (id=2403): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x8, 0x60200) ioctl$BLKPG(r0, 0x1269, &(0x7f00000000c0)={0x3, 0x0, 0x98, &(0x7f00000001c0)={0x0, 0x8000000000000001, 0x3}}) 984.83617ms ago: executing program 6 (id=2404): rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) unshare(0x4000400) r0 = gettid() timer_create(0xb, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r0}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000002480)=""/231, 0xe7}], 0x1) 984.315046ms ago: executing program 0 (id=2405): r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004002000e1000c0400070080000900", 0x33a) 485.294654ms ago: executing program 0 (id=2406): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES64, @ANYRESDEC, @ANYRES8, @ANYRES64, @ANYBLOB="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", @ANYRESDEC, @ANYRES32=0x0], 0xc7, 0x1e9, &(0x7f0000000980)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xf5d7344c329b99ba) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000ffdbdf255c00000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x40850}, 0x14) 115.413822ms ago: executing program 6 (id=2407): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc0, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x26d2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 386.207µs ago: executing program 8 (id=2408): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) 0s ago: executing program 4 (id=2409): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013c0000000000950000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): flc_count > flc_size [ 1002.250990][T10271] sysv_free_block: flc_count > flc_size [ 1002.256863][T10271] sysv_free_block: flc_count > flc_size [ 1002.262601][T10271] sysv_free_block: flc_count > flc_size [ 1002.268622][T10271] sysv_free_block: flc_count > flc_size [ 1002.274359][T10271] sysv_free_block: flc_count > flc_size [ 1002.283352][T10271] sysv_free_block: flc_count > flc_size [ 1002.292096][T10271] sysv_free_block: flc_count > flc_size [ 1002.302212][T10271] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1002.433222][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1711'. [ 1002.725964][T12334] loop1: detected capacity change from 0 to 4096 [ 1002.735218][T12334] ntfs3: Invalid value for fmask. [ 1002.834553][ T10] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 1002.842629][ T10] microsoft 0003:045E:07DA.000E: item fetching failed at offset 33/34 [ 1002.904965][ T10] microsoft 0003:045E:07DA.000E: parse failed [ 1002.912255][ T10] microsoft 0003:045E:07DA.000E: probe with driver microsoft failed with error -22 [ 1003.071148][ T10] usb 10-1: USB disconnect, device number 35 [ 1003.654762][T12340] loop6: detected capacity change from 0 to 4096 [ 1003.750109][T12340] NILFS (loop6): invalid segment: Checksum error in segment payload [ 1003.758900][T12340] NILFS (loop6): trying rollback from an earlier position [ 1003.904795][T12334] loop1: detected capacity change from 0 to 32768 [ 1004.003918][T12340] NILFS (loop6): recovery complete [ 1004.016719][ T7783] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1004.087183][T12347] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1004.132630][T12348] loop0: detected capacity change from 0 to 16 [ 1004.135500][ T29] audit: type=1800 audit(1734442926.160:387): pid=12340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1723" name="file1" dev="loop6" ino=12 res=0 errno=0 [ 1004.182608][T12348] erofs (device loop0): mounted with root inode @ nid 36. [ 1004.360856][T12344] loop4: detected capacity change from 0 to 8 [ 1004.407112][ T114] read_mapping_page failed! [ 1004.566518][T12344] SQUASHFS error: xz decompression failed, data probably corrupt [ 1004.574699][T12344] SQUASHFS error: Failed to read block 0x108: -5 [ 1004.581484][T12344] SQUASHFS error: Unable to read metadata cache entry [106] [ 1004.590377][T12344] SQUASHFS error: Unable to read inode 0x11f [ 1005.893447][T12372] loop4: detected capacity change from 0 to 2048 [ 1006.458530][T12387] netlink: 'syz.1.1738': attribute type 1 has an invalid length. [ 1006.467524][T12387] netlink: 'syz.1.1738': attribute type 2 has an invalid length. [ 1006.475498][T12387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1738'. [ 1006.736925][T12387] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1006.765241][T12388] loop1: detected capacity change from 0 to 128 [ 1006.871898][T12392] loop9: detected capacity change from 0 to 2048 [ 1007.327584][T12399] loop9: detected capacity change from 0 to 16 [ 1007.359185][T12398] loop4: detected capacity change from 0 to 1024 [ 1007.401003][T12398] EXT4-fs: Ignoring removed nobh option [ 1007.447830][T12399] erofs (device loop9): unidentified algorithms fff0, please upgrade kernel [ 1007.476372][T12398] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1007.513115][T12398] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #11: comm syz.4.1741: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1007.558136][T12399] program syz.9.1743 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1007.596610][T12398] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.1741: couldn't read orphan inode 11 (err -117) [ 1007.627624][T12406] loop1: detected capacity change from 0 to 16 [ 1007.638266][T12398] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1007.672525][T12406] erofs (device loop1): mounted with root inode @ nid 36. [ 1007.748478][T12398] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1741: Invalid block bitmap block 0 in block_group 0 [ 1007.794598][T12398] Quota error (device loop4): write_blk: dquota write failed [ 1007.802641][T12398] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1007.813217][T12398] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.1741: Failed to acquire dquot type 0 [ 1007.927201][ T29] audit: type=1326 audit(1734442929.950:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12404 comm="syz.1.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a9985d19 code=0x7ffc0000 [ 1007.993531][T12406] netlink: 'syz.1.1744': attribute type 11 has an invalid length. [ 1008.049891][ T29] audit: type=1326 audit(1734442930.010:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12404 comm="syz.1.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f25a9985d19 code=0x7ffc0000 [ 1008.073110][ T29] audit: type=1326 audit(1734442930.010:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12404 comm="syz.1.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a9985d19 code=0x7ffc0000 [ 1008.096188][ T29] audit: type=1326 audit(1734442930.010:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12404 comm="syz.1.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25a9985d19 code=0x7ffc0000 [ 1008.119299][ T29] audit: type=1326 audit(1734442930.020:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12404 comm="syz.1.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a9985d19 code=0x7ffc0000 [ 1008.146362][ T29] audit: type=1326 audit(1734442930.020:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12404 comm="syz.1.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f25a9985d19 code=0x7ffc0000 [ 1008.170579][ T29] audit: type=1326 audit(1734442930.020:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12404 comm="syz.1.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a9985d19 code=0x7ffc0000 [ 1008.193676][ T29] audit: type=1326 audit(1734442930.020:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12404 comm="syz.1.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f25a9985d19 code=0x7ffc0000 [ 1008.220740][T12405] loop0: detected capacity change from 0 to 4096 [ 1008.319546][ T1134] EXT4-fs error (device loop4): __ext4_get_inode_loc:4435: comm kworker/u8:7: Invalid inode table block 8589934593 in block_group 0 [ 1008.365612][T12405] NILFS (loop0): invalid segment: Checksum error in segment payload [ 1008.374387][T12405] NILFS (loop0): trying rollback from an earlier position [ 1008.450382][T12383] loop6: detected capacity change from 0 to 32768 [ 1008.472725][T10421] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1008.524423][T12405] NILFS (loop0): recovery complete [ 1008.567893][T12413] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1008.813544][T12383] JBD2: Ignoring recovery information on journal [ 1009.009683][T12383] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1009.046596][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1009.249664][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1009.267432][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1009.278947][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1009.289225][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1009.302803][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1009.313065][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.334868][ T10] usb 5-1: config 0 descriptor?? [ 1009.667992][ T7796] ocfs2: Unmounting device (7,6) on (node local) [ 1009.885092][ T10] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1009.901457][ T10] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 1009.968729][ T10] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1010.052809][T12431] loop1: detected capacity change from 0 to 2048 [ 1010.378620][ T10] usb 5-1: USB disconnect, device number 22 [ 1011.369291][T12458] netlink: 'syz.9.1759': attribute type 14 has an invalid length. [ 1011.377998][T12458] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1759'. [ 1011.429570][T12458] loop9: detected capacity change from 0 to 64 [ 1011.574624][T12459] loop0: detected capacity change from 0 to 1024 [ 1011.594599][T12459] EXT4-fs: Ignoring removed nobh option [ 1011.609202][T12459] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1011.682245][T12459] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #11: comm syz.0.1760: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1011.726388][T12459] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1760: couldn't read orphan inode 11 (err -117) [ 1011.799423][T12459] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1011.933400][T12459] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1760: Invalid block bitmap block 0 in block_group 0 [ 1012.000473][T12459] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.1760: Failed to acquire dquot type 0 [ 1012.084389][T12467] loop9: detected capacity change from 0 to 4096 [ 1012.295052][ T1134] EXT4-fs error (device loop0): __ext4_get_inode_loc:4435: comm kworker/u8:7: Invalid inode table block 8589934593 in block_group 0 [ 1012.372384][T10271] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.422424][T12467] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1762'. [ 1012.709933][T12474] loop1: detected capacity change from 0 to 128 [ 1012.767207][T12474] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1012.828052][T12474] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1012.860175][ C1] vkms_vblank_simulate: vblank timer overrun [ 1012.879168][T12479] loop0: detected capacity change from 0 to 64 [ 1012.923896][T12481] loop4: detected capacity change from 0 to 2048 [ 1012.964298][T12479] hfs: keylen 94 too large [ 1013.517989][T11817] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1013.813352][T12498] overlayfs: failed to resolve './file0': -2 [ 1014.376910][T12508] loop6: detected capacity change from 0 to 4096 [ 1014.477260][T12505] loop1: detected capacity change from 0 to 1024 [ 1014.516588][T12505] hfsplus: Unknown parameter 'þ€' [ 1014.781224][T12510] loop4: detected capacity change from 0 to 4096 [ 1014.812620][T12508] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1778'. [ 1014.825021][T12510] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1014.840067][T12510] ntfs3(loop4): mft corrupted [ 1014.845337][T12510] ntfs3(loop4): Failed to load $MFT. [ 1015.535783][T12523] loop6: detected capacity change from 0 to 2048 [ 1016.397220][T12532] loop1: detected capacity change from 0 to 256 [ 1016.417257][T12532] exfat: Deprecated parameter 'utf8' [ 1016.423045][T12532] exfat: Deprecated parameter 'namecase' [ 1016.433136][T12532] exfat: Deprecated parameter 'namecase' [ 1016.440003][T12532] exfat: Deprecated parameter 'utf8' [ 1016.515244][T12532] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 1016.646611][T12532] loop1: detected capacity change from 256 to 0 [ 1016.669294][T12532] syz.1.1786: attempt to access beyond end of device [ 1016.669294][T12532] loop1: rw=524288, sector=160, nr_sectors = 1 limit=0 [ 1016.683903][T12532] syz.1.1786: attempt to access beyond end of device [ 1016.683903][T12532] loop1: rw=524288, sector=161, nr_sectors = 1 limit=0 [ 1016.698016][T12532] syz.1.1786: attempt to access beyond end of device [ 1016.698016][T12532] loop1: rw=524288, sector=162, nr_sectors = 1 limit=0 [ 1016.712031][T12532] syz.1.1786: attempt to access beyond end of device [ 1016.712031][T12532] loop1: rw=524288, sector=163, nr_sectors = 1 limit=0 [ 1016.729494][T12532] syz.1.1786: attempt to access beyond end of device [ 1016.729494][T12532] loop1: rw=524288, sector=164, nr_sectors = 1 limit=0 [ 1016.748715][T12532] syz.1.1786: attempt to access beyond end of device [ 1016.748715][T12532] loop1: rw=524288, sector=165, nr_sectors = 1 limit=0 [ 1016.762773][T12532] syz.1.1786: attempt to access beyond end of device [ 1016.762773][T12532] loop1: rw=524288, sector=166, nr_sectors = 1 limit=0 [ 1016.776756][T12532] syz.1.1786: attempt to access beyond end of device [ 1016.776756][T12532] loop1: rw=524288, sector=167, nr_sectors = 1 limit=0 [ 1016.790733][T12532] syz.1.1786: attempt to access beyond end of device [ 1016.790733][T12532] loop1: rw=0, sector=160, nr_sectors = 1 limit=0 [ 1017.086551][T11817] syz-executor: attempt to access beyond end of device [ 1017.086551][T11817] loop1: rw=524288, sector=160, nr_sectors = 1 limit=0 [ 1017.174534][T12536] ALSA: mixer_oss: invalid OSS volume '' [ 1017.331002][T11817] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 1017.883779][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.054537][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.265490][T12540] loop6: detected capacity change from 0 to 1024 [ 1018.328596][T12540] hfsplus: Unknown parameter 'þ€' [ 1018.630401][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.811537][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.477692][T12545] loop0: detected capacity change from 0 to 4096 [ 1019.492093][ T13] bridge_slave_1: left allmulticast mode [ 1019.498227][ T13] bridge_slave_1: left promiscuous mode [ 1019.511118][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.553468][ T13] bridge_slave_0: left allmulticast mode [ 1019.561012][ T13] bridge_slave_0: left promiscuous mode [ 1019.567776][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.855581][T12545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1792'. [ 1019.989265][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1020.135169][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1020.165388][ T13] bond0 (unregistering): Released all slaves [ 1020.366815][T12552] loop9: detected capacity change from 0 to 2048 [ 1020.675917][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1020.687929][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1020.697574][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1020.710726][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1020.722400][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1020.736613][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1021.111249][ T13] hsr_slave_0: left promiscuous mode [ 1021.181237][ T13] hsr_slave_1: left promiscuous mode [ 1021.195182][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1021.206292][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1021.238592][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1021.249785][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1021.350669][ T13] veth1_macvtap: left promiscuous mode [ 1021.356564][ T13] veth0_macvtap: left promiscuous mode [ 1021.362472][ T13] veth1_vlan: left promiscuous mode [ 1021.372397][ T13] veth0_vlan: left promiscuous mode [ 1021.389151][T12567] loop6: detected capacity change from 0 to 2048 [ 1021.425017][T12567] EXT4-fs: Ignoring removed bh option [ 1021.575684][T12567] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1021.989896][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1022.109536][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1022.151212][ T7796] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1022.236525][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1022.442909][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1022.529174][ T10] usb 5-1: no configurations [ 1022.534203][ T10] usb 5-1: can't read configurations, error -22 [ 1022.644757][T12581] loop9: detected capacity change from 0 to 1024 [ 1022.688858][T12581] hfsplus: Unknown parameter 'þ€' [ 1022.746751][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1022.831165][ T5785] Bluetooth: hci1: command tx timeout [ 1022.917845][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1022.935037][ T10] usb 5-1: no configurations [ 1022.940294][ T10] usb 5-1: can't read configurations, error -22 [ 1022.948732][ T10] usb usb5-port1: attempt power cycle [ 1022.966361][T12557] chnl_net:caif_netlink_parms(): no params data found [ 1023.021402][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1023.028556][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1023.328989][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1023.360724][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1023.375405][ T10] usb 5-1: no configurations [ 1023.380572][ T10] usb 5-1: can't read configurations, error -22 [ 1023.444898][T12557] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.453005][T12557] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.461076][T12557] bridge_slave_0: entered allmulticast mode [ 1023.470200][T12557] bridge_slave_0: entered promiscuous mode [ 1023.482472][ T5842] usb 10-1: new full-speed USB device number 36 using dummy_hcd [ 1023.486523][T12557] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.501903][T12557] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.511643][T12557] bridge_slave_1: entered allmulticast mode [ 1023.520795][T12557] bridge_slave_1: entered promiscuous mode [ 1023.560141][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1023.605501][T12557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1023.606642][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1023.632325][T12557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1023.637355][ T10] usb 5-1: no configurations [ 1023.646828][ T10] usb 5-1: can't read configurations, error -22 [ 1023.674947][ T5842] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1023.686463][ T5842] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1023.698526][ T5842] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1023.712969][ T5842] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1023.724088][ T5842] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1023.738857][ T10] usb usb5-port1: unable to enumerate USB device [ 1023.761263][T12557] team0: Port device team_slave_0 added [ 1023.772162][ T5842] usb 10-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 1023.778909][T12557] team0: Port device team_slave_1 added [ 1023.781863][ T5842] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.796161][ T5842] usb 10-1: Product: syz [ 1023.800649][ T5842] usb 10-1: Manufacturer: syz [ 1023.808353][ T5842] usb 10-1: SerialNumber: syz [ 1023.844452][ T5842] usb 10-1: config 0 descriptor?? [ 1023.864044][ T5842] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 1023.874844][ T5842] imon 10-1:0.0: unable to initialize intf0, err -90 [ 1023.882792][ T5842] imon:imon_probe: failed to initialize context! [ 1023.889443][ T5842] imon 10-1:0.0: unable to register, err -19 [ 1023.915206][T12557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1023.922818][T12557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1023.949343][T12557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1023.967009][T12557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1023.974186][T12557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1024.001358][T12557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1024.087424][T12543] usb 10-1: USB disconnect, device number 36 [ 1024.152777][T12557] hsr_slave_0: entered promiscuous mode [ 1024.174039][T12557] hsr_slave_1: entered promiscuous mode [ 1024.183440][T12557] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1024.191510][T12557] Cannot create hsr debugfs directory [ 1024.731815][T12595] loop0: detected capacity change from 0 to 4096 [ 1024.916711][ T5785] Bluetooth: hci1: command tx timeout [ 1025.131594][T12557] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1025.170647][T12599] loop9: detected capacity change from 0 to 2048 [ 1025.178869][T12557] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1025.191028][T12599] EXT4-fs (loop9): unable to read superblock [ 1025.212541][T12557] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1025.265342][T12557] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1025.564171][T12604] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1810'. [ 1025.951145][T12557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1026.001053][T12557] 8021q: adding VLAN 0 to HW filter on device team0 [ 1026.028115][T12610] loop9: detected capacity change from 0 to 1024 [ 1026.069792][T12610] EXT4-fs: Ignoring removed mblk_io_submit option [ 1026.089073][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.096988][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1026.112572][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.120362][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1026.171541][T12610] EXT4-fs (loop9): blocks per group (131072) and clusters per group (32) inconsistent [ 1026.387554][T12614] loop6: detected capacity change from 0 to 512 [ 1026.435429][T12614] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 1026.521810][T12614] EXT4-fs (loop6): invalid journal inode [ 1026.528261][T12614] EXT4-fs (loop6): can't get journal size [ 1026.681021][T12614] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 1026.699277][T12614] System zones: 1-12, 13-13 [ 1026.768711][T12614] EXT4-fs (loop6): 1 truncate cleaned up [ 1026.779731][T12614] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1027.003704][ T5785] Bluetooth: hci1: command tx timeout [ 1027.208823][T12625] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1817'. [ 1027.373594][ T7796] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1027.392678][T12557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1027.423311][T12629] loop9: detected capacity change from 0 to 128 [ 1027.480398][T12629] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1027.554098][T12632] loop4: detected capacity change from 0 to 256 [ 1027.589280][T12632] vfat: Bad value for 'fmask' [ 1027.600068][T12629] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1027.678159][T12635] loop6: detected capacity change from 0 to 128 [ 1028.365859][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 1028.365944][ T29] audit: type=1326 audit(1734442950.390:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.4.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a2985d19 code=0x7ffc0000 [ 1028.380641][T12645] loop9: detected capacity change from 0 to 8 [ 1028.395254][ T29] audit: type=1326 audit(1734442950.390:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.4.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a2985d19 code=0x7ffc0000 [ 1028.434533][ T29] audit: type=1326 audit(1734442950.440:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.4.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46a2985d19 code=0x7ffc0000 [ 1028.457820][ T29] audit: type=1326 audit(1734442950.460:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.4.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a2985d19 code=0x7ffc0000 [ 1028.480765][ T29] audit: type=1326 audit(1734442950.460:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.4.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a2985d19 code=0x7ffc0000 [ 1028.503816][ T29] audit: type=1326 audit(1734442950.460:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.4.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46a2985d19 code=0x7ffc0000 [ 1028.510805][T12642] loop6: detected capacity change from 0 to 2048 [ 1028.528810][ T29] audit: type=1326 audit(1734442950.460:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.4.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a2985d19 code=0x7ffc0000 [ 1028.529042][ T29] audit: type=1326 audit(1734442950.460:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.4.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a2985d19 code=0x7ffc0000 [ 1028.663280][ T29] audit: type=1326 audit(1734442950.560:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.4.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46a2985d19 code=0x7ffc0000 [ 1028.687614][ T29] audit: type=1326 audit(1734442950.570:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.4.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a2985d19 code=0x7ffc0000 [ 1028.749069][T12645] SQUASHFS error: Failed to read block 0x4e8: -5 [ 1028.756585][T12645] SQUASHFS error: Failed to read block 0x4de: -5 [ 1028.763752][T12645] SQUASHFS error: Failed to read block 0x4de: -5 [ 1028.770992][T12645] SQUASHFS error: Failed to read block 0x4de: -5 [ 1028.775284][T12642] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1028.790395][T12642] ext4 filesystem being mounted at /283/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1029.110457][ T5785] Bluetooth: hci1: command tx timeout [ 1029.171226][T12557] veth0_vlan: entered promiscuous mode [ 1029.254582][T12557] veth1_vlan: entered promiscuous mode [ 1029.326744][ T7796] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1029.386131][T12557] veth0_macvtap: entered promiscuous mode [ 1029.409036][T12557] veth1_macvtap: entered promiscuous mode [ 1029.499643][T12557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1029.510590][T12557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.521737][T12557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1029.532649][T12557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.546271][T12557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1029.558585][T12557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.568878][T12557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1029.579693][T12557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.594279][T12557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1029.612452][T12557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1029.624208][T12557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.634433][T12557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1029.648573][T12557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.659764][T12557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1029.670698][T12557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.680887][T12557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1029.691726][T12557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.705937][T12557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1029.792898][T12557] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.802306][T12557] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.812763][T12557] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.821962][T12557] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.967503][T12680] 9pnet: p9_errstr2errno: server reported unknown error @í [ 1031.299286][T12686] loop9: detected capacity change from 0 to 1024 [ 1031.329209][T12686] EXT4-fs: Ignoring removed bh option [ 1031.414060][T12686] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1031.462954][T12692] loop6: detected capacity change from 0 to 1024 [ 1031.612498][T12686] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4115: comm syz.9.1837: Allocating blocks 481-513 which overlap fs metadata [ 1031.982695][ T7783] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1032.040579][T12703] loop6: detected capacity change from 0 to 512 [ 1032.064784][T12703] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1032.114814][T12703] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #12: comm syz.6.1840: corrupted in-inode xattr: invalid ea_ino [ 1032.149348][T12703] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.1840: couldn't read orphan inode 12 (err -117) [ 1032.167287][T12703] EXT4-fs (loop6): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1032.208786][T12703] EXT4-fs (loop6): shut down requested (2) [ 1032.313087][ T7796] EXT4-fs (loop6): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1034.865708][T12737] loop6: detected capacity change from 0 to 256 [ 1035.096525][T12738] loop0: detected capacity change from 0 to 764 [ 1035.109135][T12737] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000001) [ 1035.118325][T12737] FAT-fs (loop6): Filesystem has been set read-only [ 1035.164586][T12738] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1035.316493][ T4853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1035.324830][ T4853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1035.797077][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1035.805298][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1035.996442][T12740] loop6: detected capacity change from 0 to 128 [ 1036.119670][T12740] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1036.147409][T12740] ext4 filesystem being mounted at /291/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1036.280392][T12740] EXT4-fs error (device loop6): __ext4_find_entry:1652: inode #2: comm syz.6.1851: checksumming directory block 0 [ 1036.524631][T12752] loop5: detected capacity change from 0 to 16 [ 1036.584347][T12752] erofs (device loop5): mounted with root inode @ nid 36. [ 1036.597008][ T7796] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1037.406454][T12543] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1037.606444][T12543] usb 10-1: Using ep0 maxpacket: 32 [ 1037.642105][T12543] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1037.653629][T12543] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1037.767331][T12543] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1037.778803][T12543] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1037.788058][T12543] usb 10-1: Product: syz [ 1037.792563][T12543] usb 10-1: Manufacturer: syz [ 1037.810674][T12767] loop0: detected capacity change from 0 to 512 [ 1037.899989][T12543] hub 10-1:4.0: USB hub found [ 1037.912079][T12767] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1037.925637][T12767] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1038.092715][T12543] hub 10-1:4.0: config failed, hub has too many ports! (err -19) [ 1038.412107][T12543] usb 10-1: USB disconnect, device number 37 [ 1038.539909][T10271] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1038.791834][T12773] loop6: detected capacity change from 0 to 2048 [ 1038.936528][T12773] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1038.949428][T12773] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1040.421990][ T7796] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1040.486817][T12778] loop0: detected capacity change from 0 to 1024 [ 1041.017019][T12785] loop4: detected capacity change from 0 to 1024 [ 1041.027725][T12785] EXT4-fs: Ignoring removed i_version option [ 1041.034204][T12785] EXT4-fs: inline encryption not supported [ 1041.066616][T12785] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1041.565146][T12785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1041.885368][T12795] loop9: detected capacity change from 0 to 64 [ 1042.025768][T12785] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1042.065754][T12795] xt_connbytes: Forcing CT accounting to be enabled [ 1042.074617][T12795] Cannot find add_set index 0 as target [ 1042.371158][T12793] loop0: detected capacity change from 0 to 4096 [ 1042.399761][T10421] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1042.471150][T12793] NILFS (loop0): invalid segment: Checksum error in segment payload [ 1042.479793][T12793] NILFS (loop0): trying rollback from an earlier position [ 1042.563384][T12793] NILFS (loop0): recovery complete [ 1042.578744][T12805] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1042.655679][T12798] loop5: detected capacity change from 0 to 4096 [ 1042.882576][T12811] loop9: detected capacity change from 0 to 8 [ 1043.030869][T12810] loop4: detected capacity change from 0 to 2048 [ 1043.141498][T12810] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1043.149765][T12810] UDF-fs: Scanning with blocksize 512 failed [ 1043.172899][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1043.172979][ T29] audit: type=1800 audit(1734442974.199:455): pid=12798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1871" name="file0" dev="loop5" ino=0 res=0 errno=0 [ 1043.188843][T12810] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1043.281378][T12815] loop0: detected capacity change from 0 to 1024 [ 1043.314669][T12798] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1871'. [ 1043.342588][ T29] audit: type=1800 audit(1734442974.369:456): pid=12810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1873" name="file1" dev="loop4" ino=818 res=0 errno=0 [ 1043.525575][T12817] loop9: detected capacity change from 0 to 2048 [ 1043.693832][T12817] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1043.791676][T12822] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1879'. [ 1043.926482][T12817] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1043.962558][T12817] EXT4-fs (loop9): Remounting filesystem read-only [ 1044.073650][T12825] loop5: detected capacity change from 0 to 128 [ 1044.122726][T12825] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1044.197914][T12825] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1044.289385][ T7783] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.572901][T12557] UDF-fs: warning (device loop5): udf_evict_inode: Inode 105 (mode 100755) has inode size 9000 different from extent length 9216. Filesystem need not be standards compliant. [ 1044.727978][T12839] loop0: detected capacity change from 0 to 1024 [ 1044.885679][ T4853] hfsplus: b-tree write err: -5, ino 4 [ 1045.004865][T12840] loop4: detected capacity change from 0 to 2048 [ 1045.241617][T12840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1045.254473][T12840] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1045.401435][T12851] loop5: detected capacity change from 0 to 2048 [ 1045.432256][T12851] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 1045.584209][T12851] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1045.681738][T12853] loop6: detected capacity change from 0 to 256 [ 1045.968006][T10421] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1046.534396][T12860] loop6: detected capacity change from 0 to 1024 [ 1046.790513][T12862] loop4: detected capacity change from 0 to 2048 [ 1046.878957][T12862] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1048.395161][T12873] loop0: detected capacity change from 0 to 8192 [ 1048.526918][T12883] loop5: detected capacity change from 0 to 1024 [ 1048.600136][T12887] loop9: detected capacity change from 0 to 1024 [ 1048.655187][T12887] EXT4-fs: Ignoring removed i_version option [ 1048.662202][T12887] EXT4-fs: inline encryption not supported [ 1048.697644][T12887] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1048.745809][T12889] loop6: detected capacity change from 0 to 128 [ 1048.792588][T12892] loop4: detected capacity change from 0 to 1024 [ 1048.841014][T12889] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1048.857821][T12889] ext4 filesystem being mounted at /304/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1048.883486][T12887] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1048.901598][T12889] syz.6.1907 (pid 12889) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 1049.109867][ T29] audit: type=1800 audit(1734442980.119:457): pid=12873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1900" name="file1" dev="loop0" ino=1048725 res=0 errno=0 [ 1049.762740][T12889] fscrypt (loop6, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 1049.783600][T12889] fscrypt (loop6, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 1050.025583][T12921] loop0: detected capacity change from 0 to 512 [ 1050.243960][ T7796] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1050.301528][T12921] EXT4-fs (loop0): blocks per group (71) and clusters per group (20800) inconsistent [ 1050.313316][T12887] fscrypt (loop9): Error allocating 'xts(aes)' transform: -4 [ 1050.626902][T12543] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1050.743156][ T7783] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.824358][T12543] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1050.838491][T12543] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.847939][T12543] usb 6-1: Product: syz [ 1050.852363][T12543] usb 6-1: Manufacturer: syz [ 1050.857318][T12543] usb 6-1: SerialNumber: syz [ 1050.935357][T12543] usb 6-1: config 0 descriptor?? [ 1051.098983][T12940] netlink: 'syz.9.1919': attribute type 46 has an invalid length. [ 1051.216853][T12543] usb 6-1: f81604_read: reg: 105 failed: -EPROTO [ 1051.223775][T12543] f81604 6-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 1051.231840][T12543] f81604 6-1:0.0: probe with driver f81604 failed with error -71 [ 1051.337692][T12543] usb 6-1: USB disconnect, device number 24 [ 1051.546658][T12948] loop9: detected capacity change from 0 to 1024 [ 1051.611550][T12948] hfsplus: failed to load root directory [ 1052.089691][T12957] loop5: detected capacity change from 0 to 16 [ 1052.123847][T12957] erofs (device loop5): mounted with root inode @ nid 36. [ 1052.150096][T12962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1927'. [ 1052.204976][T12960] hsr0: left promiscuous mode [ 1052.228885][T12960] hsr_slave_0 (unregistering): left promiscuous mode [ 1052.283618][T12953] loop4: detected capacity change from 0 to 2048 [ 1052.310970][T12953] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1052.356877][T12953] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 1052.363887][T12953] EXT4-fs (loop4): mount failed [ 1052.628145][T12952] loop4: detected capacity change from 0 to 2048 [ 1052.663909][T12968] loop0: detected capacity change from 0 to 256 [ 1052.693885][T12952] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1052.732942][T12970] loop9: detected capacity change from 0 to 128 [ 1052.788986][ T29] audit: type=1804 audit(1734442983.799:458): pid=12968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1930" name="/newroot/182/bus/file0" dev="loop0" ino=1048726 res=1 errno=0 [ 1055.216340][ T5842] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1055.402080][ T5842] usb 5-1: Using ep0 maxpacket: 16 [ 1055.441392][ T5842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1055.457180][ T5842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1055.589185][ T5842] usb 5-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.00 [ 1055.599098][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1055.608158][ T5842] usb 5-1: Product: syz [ 1055.656204][ T5842] usb 5-1: config 0 descriptor?? [ 1056.235969][ T5842] wacom 0003:056A:037A.0010: item fetching failed at offset 2/5 [ 1056.250244][ T5842] wacom 0003:056A:037A.0010: parse failed [ 1056.257277][ T5842] wacom 0003:056A:037A.0010: probe with driver wacom failed with error -22 [ 1056.620382][ T5842] usb 5-1: USB disconnect, device number 27 [ 1057.104786][T13014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1949'. [ 1058.220375][T13035] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1058.264518][T13037] loop5: detected capacity change from 0 to 512 [ 1058.299677][T13037] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1058.308901][T13037] EXT4-fs (loop5): blocks per group (71) and clusters per group (20800) inconsistent [ 1058.946233][T12543] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1059.182590][T12543] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1059.192290][T12543] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.303617][T12543] usb 10-1: config 0 descriptor?? [ 1059.353888][T12543] cp210x 10-1:0.0: cp210x converter detected [ 1061.107551][T12543] cp210x 10-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1061.115599][T12543] cp210x 10-1:0.0: querying part number failed [ 1061.215978][T12543] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1061.742711][T12543] usb 10-1: USB disconnect, device number 38 [ 1061.755059][T12543] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1061.764352][T12543] cp210x 10-1:0.0: device disconnected [ 1061.920668][T13063] raw_sendmsg: syz.6.1969 forgot to set AF_INET. Fix it! [ 1062.418589][T13077] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 1063.204723][T13090] loop5: detected capacity change from 0 to 1024 [ 1063.252049][T13090] EXT4-fs: Ignoring removed orlov option [ 1063.297648][T13090] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1063.345845][T13090] EXT4-fs (loop5): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 1063.395748][T13090] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1063.891106][T12557] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 1063.942682][T12557] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 1064.386894][ T1134] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.425244][T12557] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1064.527410][ T1134] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.673143][ T1134] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.787423][ T1134] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.085410][ T1134] bridge_slave_1: left allmulticast mode [ 1065.091756][ T1134] bridge_slave_1: left promiscuous mode [ 1065.098563][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.121741][ T1134] bridge_slave_0: left allmulticast mode [ 1065.127995][ T1134] bridge_slave_0: left promiscuous mode [ 1065.134619][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.693553][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1065.757829][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1065.817348][ T1134] bond0 (unregistering): Released all slaves [ 1066.263552][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1066.283537][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1066.364116][T13131] loop4: detected capacity change from 0 to 1024 [ 1066.378632][T13131] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1066.406689][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1066.432093][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1066.445760][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1066.487686][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1066.568610][T13131] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1066.661180][ T1134] hsr_slave_0: left promiscuous mode [ 1066.700452][ T1134] hsr_slave_1: left promiscuous mode [ 1066.747671][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1066.755442][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1066.777122][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1066.789958][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1066.933685][T10421] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1066.944756][ T1134] veth1_macvtap: left promiscuous mode [ 1066.951810][ T1134] veth0_macvtap: left promiscuous mode [ 1066.957939][ T1134] veth1_vlan: left promiscuous mode [ 1066.963544][ T1134] veth0_vlan: left promiscuous mode [ 1067.010497][T13143] loop6: detected capacity change from 0 to 512 [ 1067.232143][T13143] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1067.245543][T13143] ext4 filesystem being mounted at /324/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1067.687838][ T1134] team0 (unregistering): Port device team_slave_1 removed [ 1067.712318][ T7796] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1067.714840][ T1134] team0 (unregistering): Port device team_slave_0 removed [ 1068.668092][ T51] Bluetooth: hci1: command tx timeout [ 1068.867036][T13127] chnl_net:caif_netlink_parms(): no params data found [ 1069.022216][T13156] loop6: detected capacity change from 0 to 8192 [ 1069.071944][T13156] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1069.206773][T13156] /dev/loop6: Can't open blockdev [ 1069.251685][T13170] loop4: detected capacity change from 0 to 512 [ 1069.295196][T13170] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1069.542672][T13170] EXT4-fs (loop4): 1 truncate cleaned up [ 1069.551119][T13170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1069.784450][T13127] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.792441][T13127] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.800559][T13127] bridge_slave_0: entered allmulticast mode [ 1069.809763][T13127] bridge_slave_0: entered promiscuous mode [ 1069.824768][T13127] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.832703][T13127] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.840634][T13127] bridge_slave_1: entered allmulticast mode [ 1069.850148][T13127] bridge_slave_1: entered promiscuous mode [ 1069.922311][T10421] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1070.083716][T13127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1070.112553][T13127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1070.172999][T13185] loop9: detected capacity change from 0 to 1024 [ 1070.209602][T13185] hfsplus: invalid extent max_key_len 0 [ 1070.215807][T13185] hfsplus: failed to load extents file [ 1070.400829][T13127] team0: Port device team_slave_0 added [ 1070.433192][T13127] team0: Port device team_slave_1 added [ 1070.523326][T13127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1070.530710][T13127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1070.557251][T13127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1070.574288][T13190] loop0: detected capacity change from 0 to 512 [ 1070.575929][T13127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1070.589082][T13127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1070.616895][T13127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1070.622595][T13190] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1070.682899][T13190] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #12: comm syz.0.2021: corrupted in-inode xattr: invalid ea_ino [ 1070.721414][T13190] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.2021: couldn't read orphan inode 12 (err -117) [ 1070.743329][T13190] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1070.746323][ T51] Bluetooth: hci1: command tx timeout [ 1070.872824][T13127] hsr_slave_0: entered promiscuous mode [ 1070.966729][T13127] hsr_slave_1: entered promiscuous mode [ 1071.012568][T13127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1071.021006][T13127] Cannot create hsr debugfs directory [ 1071.693534][T13198] loop9: detected capacity change from 0 to 164 [ 1072.492493][T10271] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1072.510061][T13127] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1072.700493][T13127] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1072.725111][T13127] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1072.748763][T13127] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1072.827006][ T51] Bluetooth: hci1: command tx timeout [ 1073.643276][T13209] loop0: detected capacity change from 0 to 512 [ 1073.682278][T13209] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1073.856649][T13209] EXT4-fs (loop0): 1 truncate cleaned up [ 1073.864266][T13209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1074.087857][T13127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1074.121542][T13216] loop6: detected capacity change from 0 to 1024 [ 1074.130470][T13127] 8021q: adding VLAN 0 to HW filter on device team0 [ 1074.162129][ T4410] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.169910][ T4410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1074.214173][T13216] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1074.265897][ T7184] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.273711][ T7184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1074.364048][T13216] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1074.371805][T13219] loop4: detected capacity change from 0 to 256 [ 1074.442503][T13127] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1074.453434][T13127] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1074.556661][T13221] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.2030: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 1074.711580][T10271] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1074.922129][ T51] Bluetooth: hci1: command tx timeout [ 1074.945167][ T7796] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1075.226924][T13232] loop6: detected capacity change from 0 to 128 [ 1075.355576][T13232] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1075.501868][T13232] ext4 filesystem being mounted at /329/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1075.545623][T13127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1075.667877][T13239] loop4: detected capacity change from 0 to 256 [ 1075.688822][T13239] vfat: Bad value for 'fmask' [ 1075.934666][T13244] loop0: detected capacity change from 0 to 1024 [ 1076.082388][ T7796] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1076.170068][T13250] loop4: detected capacity change from 0 to 512 [ 1076.202025][T13250] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1076.243150][T13250] EXT4-fs (loop4): invalid journal inode [ 1076.249644][T13250] EXT4-fs (loop4): can't get journal size [ 1076.293252][T13244] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1076.416555][T13258] loop6: detected capacity change from 0 to 256 [ 1076.426416][T13258] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 1076.512920][T13250] EXT4-fs (loop4): 1 truncate cleaned up [ 1076.520694][T13250] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1076.767531][T10271] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.908421][T10421] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.925002][T13127] veth0_vlan: entered promiscuous mode [ 1076.957602][T13127] veth1_vlan: entered promiscuous mode [ 1077.080815][T13127] veth0_macvtap: entered promiscuous mode [ 1077.109335][T13127] veth1_macvtap: entered promiscuous mode [ 1077.180102][T13127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.191001][T13127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.201319][T13127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.212176][T13127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.222364][T13127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.233189][T13127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.243712][T13127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.254565][T13127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.272490][T13127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1077.368604][T13127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1077.379486][T13127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.390571][T13127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1077.401562][T13127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.413219][T13127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1077.424133][T13127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.434446][T13127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1077.445290][T13127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.462496][T13127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1077.491316][T13127] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.500641][T13127] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.509920][T13127] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.519117][T13127] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.797789][T13274] tap0: tun_chr_ioctl cmd 35111 [ 1078.603019][T13290] loop0: detected capacity change from 0 to 128 [ 1078.744380][T13294] loop9: detected capacity change from 0 to 1024 [ 1079.184004][T13300] loop4: detected capacity change from 0 to 1764 [ 1079.939592][T13314] loop6: detected capacity change from 0 to 1024 [ 1080.335268][T13320] loop4: detected capacity change from 0 to 128 [ 1080.446227][T13320] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1080.477546][T13320] ext4 filesystem being mounted at /184/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1080.522303][T13320] EXT4-fs error (device loop4): ext4_validate_block_bitmap:423: comm syz.4.2061: bg 0: bad block bitmap checksum [ 1080.611312][ T29] audit: type=1326 audit(1734443011.639:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13321 comm="syz.9.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae49d85d19 code=0x7ffc0000 [ 1080.733889][ T29] audit: type=1326 audit(1734443011.669:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13321 comm="syz.9.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fae49d85d19 code=0x7ffc0000 [ 1080.758887][ T29] audit: type=1326 audit(1734443011.679:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13321 comm="syz.9.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae49d85d19 code=0x7ffc0000 [ 1080.962897][T10421] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1081.192625][T13338] loop9: detected capacity change from 0 to 256 [ 1081.540303][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1081.548545][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1081.653914][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1081.663557][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1081.748010][T13345] loop4: detected capacity change from 0 to 1024 [ 1082.363081][ T29] audit: type=1326 audit(1734443013.389:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13344 comm="syz.4.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a2985d19 code=0x7fc00000 [ 1082.647395][T13364] loop7: detected capacity change from 0 to 512 [ 1082.749856][T13364] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1082.759799][T13364] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e028, mo2=0002] [ 1082.793626][T13364] System zones: 0-1, 15-15, 18-18, 34-34 [ 1082.871498][T13364] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1082.873501][T13369] loop6: detected capacity change from 0 to 2048 [ 1082.878438][T13364] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0 [ 1082.896976][T13364] EXT4-fs warning (device loop7): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1082.905594][T13369] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 1082.912591][T13364] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 1082.920138][T13369] UDF-fs: Scanning with blocksize 512 failed [ 1082.957243][T13364] EXT4-fs error (device loop7): ext4_orphan_get:1415: comm syz.7.2076: bad orphan inode 16 [ 1082.962903][T13369] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1082.981641][T13364] EXT4-fs (loop7): Remounting filesystem read-only [ 1082.990381][T13364] ext4_test_bit(bit=15, block=18) = 1 [ 1082.999271][T13364] is_bad_inode(inode)=0 [ 1083.003638][T13364] NEXT_ORPHAN(inode)=0 [ 1083.008609][T13364] max_ino=32 [ 1083.012077][T13364] i_nlink=2 [ 1083.017264][T13364] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1083.236756][T13127] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1083.266918][ T5900] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1083.402988][T13376] bpf: Bad value for 'mode' [ 1083.465877][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1083.477653][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1083.487977][ T5900] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1083.503448][ T5900] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1083.513471][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.547981][ T5900] usb 5-1: config 0 descriptor?? [ 1084.004173][T13383] xt_time: unknown flags 0xc [ 1084.027717][ T5900] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x2 [ 1084.064590][ T5900] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 1084.080273][ T5900] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1084.493892][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1084.500747][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1085.456495][ T5900] usb 5-1: reset high-speed USB device number 28 using dummy_hcd [ 1086.034730][T13406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2091'. [ 1086.261196][ T10] usb 5-1: USB disconnect, device number 28 [ 1086.587958][T12543] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1086.610811][T13413] loop4: detected capacity change from 0 to 164 [ 1087.543262][T12543] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.553817][T12543] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 62, changing to 9 [ 1087.565317][T12543] usb 8-1: config 1 interface 1 has no altsetting 0 [ 1087.708634][T12543] usb 8-1: New USB device found, idVendor=0525, idProduct=a488, bcdDevice= 0.40 [ 1087.721550][T12543] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.731057][T12543] usb 8-1: Product: syz [ 1087.735489][T12543] usb 8-1: Manufacturer: syz [ 1087.740526][T12543] usb 8-1: SerialNumber: syz [ 1087.758208][T12543] usb 8-1: selecting invalid altsetting 1 [ 1087.764254][T12543] usb 8-1: selecting invalid altsetting 0 [ 1087.771927][T12543] usb 8-1: selecting invalid altsetting 0 [ 1087.779568][T12543] cdc_ncm 8-1:1.0: bind() failure [ 1087.798177][T12543] usb 8-1: selecting invalid altsetting 0 [ 1087.807354][T12543] cdc_ncm 8-1:1.1: probe with driver cdc_ncm failed with error -22 [ 1087.821216][T12543] usb 8-1: selecting invalid altsetting 0 [ 1087.829650][T12543] cdc_mbim 8-1:1.1: probe with driver cdc_mbim failed with error -22 [ 1087.841539][T12543] usb 8-1: selecting invalid altsetting 0 [ 1087.847685][T12543] usbtest 8-1:1.1: probe with driver usbtest failed with error -22 [ 1087.991312][ T10] usb 8-1: USB disconnect, device number 26 [ 1088.209218][T13429] loop6: detected capacity change from 0 to 512 [ 1088.232433][T13429] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1088.241738][T13429] EXT4-fs (loop6): blocks per group (71) and clusters per group (20800) inconsistent [ 1088.350438][T13434] loop0: detected capacity change from 0 to 512 [ 1088.363346][T13434] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1088.423014][T13434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1088.436831][T13434] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1088.678518][T10271] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.302484][T13454] loop0: detected capacity change from 0 to 512 [ 1089.371778][T13454] EXT4-fs: Ignoring removed nobh option [ 1089.378106][T13454] EXT4-fs: Ignoring removed mblk_io_submit option [ 1089.495804][T13454] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1089.922396][T13457] loop6: detected capacity change from 0 to 764 [ 1090.045175][T10271] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1090.062164][T13457] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1091.553041][T13464] loop7: detected capacity change from 0 to 4096 [ 1091.583695][T13462] loop9: detected capacity change from 0 to 512 [ 1091.668061][T13464] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1091.691016][T13462] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1091.705406][T13462] ext4 filesystem being mounted at /374/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1092.023975][T13127] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1092.026914][ T7783] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1092.936391][T12543] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1093.193184][T13492] loop6: detected capacity change from 0 to 2048 [ 1093.247177][T12543] usb 5-1: Using ep0 maxpacket: 16 [ 1093.260828][T12543] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1093.270060][T12543] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.280896][T12543] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1093.290407][T12543] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1093.301728][T12543] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1093.341494][T13495] loop0: detected capacity change from 0 to 512 [ 1093.390467][T13492] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1093.424798][T13489] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2122'. [ 1093.447545][T13489] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.537755][T13495] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1093.554513][T13495] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1093.567198][T12543] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1093.577019][T12543] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.585310][T12543] usb 5-1: Product: syz [ 1093.589874][T12543] usb 5-1: Manufacturer: syz [ 1093.594724][T12543] usb 5-1: SerialNumber: syz [ 1094.124987][T13481] loop4: detected capacity change from 0 to 1024 [ 1094.493357][T13507] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 102 with max blocks 1 with error 28 [ 1094.506270][T13507] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1094.506270][T13507] [ 1094.516887][T13507] EXT4-fs (loop6): Total free blocks count 0 [ 1094.523133][T13507] EXT4-fs (loop6): Free/Dirty block details [ 1094.529400][T13507] EXT4-fs (loop6): free_blocks=0 [ 1094.534665][T13507] EXT4-fs (loop6): dirty_blocks=0 [ 1094.540001][T13507] EXT4-fs (loop6): Block reservation details [ 1094.546708][T13507] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 1095.123182][T12543] usb 5-1: 0:2 : does not exist [ 1095.147310][T12543] usb 5-1: USB disconnect, device number 29 [ 1096.139853][T10271] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1096.160680][ T7796] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1096.487850][T13517] loop6: detected capacity change from 0 to 128 [ 1096.517509][T13517] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1096.565961][T13515] loop0: detected capacity change from 0 to 256 [ 1096.607160][T13517] ext4 filesystem being mounted at /354/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1096.753453][T13515] loop0: detected capacity change from 0 to 1024 [ 1097.058202][ T7796] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1097.307859][T13527] loop6: detected capacity change from 0 to 512 [ 1097.334352][T13527] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1097.395559][T13528] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2132'. [ 1097.405651][T13528] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 1097.442476][T13528] 0ªX¹¦Dö»: entered allmulticast mode [ 1097.459388][T13527] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1097.463569][ T1134] hfsplus: b-tree write err: -5, ino 4 [ 1097.472778][T13527] ext4 filesystem being mounted at /355/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1097.663282][T13527] EXT4-fs error (device loop6): ext4_get_verity_descriptor_location:335: inode #15: comm syz.6.2131: verity file corrupted; can't find descriptor [ 1097.685725][T13527] fs-verity (loop6, inode 15): Error -117 getting verity descriptor size [ 1097.924062][ T7796] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1097.950998][T13538] loop9: detected capacity change from 0 to 512 [ 1097.999197][T13538] EXT4-fs: Ignoring removed mblk_io_submit option [ 1098.153650][T13544] input: syz1 as /devices/virtual/input/input50 [ 1098.161886][T13538] EXT4-fs (loop9): blocks per group (95) and clusters per group (32768) inconsistent [ 1098.420650][T13550] loop0: detected capacity change from 0 to 8 [ 1098.846765][T13554] loop4: detected capacity change from 0 to 512 [ 1099.013813][T13554] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1099.206746][T13554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1099.220799][T13554] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1099.466829][ T29] audit: type=1804 audit(1734443030.479:463): pid=13554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2143" name="/newroot/194/file1/file1" dev="loop4" ino=15 res=1 errno=0 [ 1099.497325][T13554] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 1099.559185][T13554] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 1 with error 28 [ 1099.572689][T13554] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1099.572689][T13554] [ 1099.584367][T13554] EXT4-fs (loop4): Total free blocks count 0 [ 1099.592535][T13554] EXT4-fs (loop4): Free/Dirty block details [ 1099.599452][T13554] EXT4-fs (loop4): free_blocks=39626 [ 1099.604992][T13554] EXT4-fs (loop4): dirty_blocks=1 [ 1099.610463][T13554] EXT4-fs (loop4): Block reservation details [ 1099.616843][T13554] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 1100.578817][T13570] loop7: detected capacity change from 0 to 16 [ 1100.606926][T13570] erofs (device loop7): mounted with root inode @ nid 36. [ 1100.678361][ T51] erofs (device loop7): failed to decompress -26 in[46, 0] out[9000] [ 1100.748555][T13570] erofs (device loop7): failed to decompress -26 in[46, 4050] out[8192] [ 1100.757580][T13570] erofs (device loop7): read error -117 @ 0 of nid 89 [ 1100.771499][ T29] audit: type=1800 audit(1734443031.789:464): pid=13570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2149" name="file3" dev="loop7" ino=89 res=0 errno=0 [ 1100.837534][T10421] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1100.882799][T13573] loop6: detected capacity change from 0 to 256 [ 1101.005003][T13573] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1101.024003][T13573] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1101.520174][T13578] loop9: detected capacity change from 0 to 512 [ 1101.711083][T13578] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 1101.790313][T13578] EXT4-fs (loop9): invalid journal inode [ 1101.796414][T13578] EXT4-fs (loop9): can't get journal size [ 1101.910991][T13578] EXT4-fs (loop9): 1 truncate cleaned up [ 1101.918763][T13578] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1102.075491][T13587] syz.4.2156 (13587) used obsolete PPPIOCDETACH ioctl [ 1102.134765][ T7783] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1102.405119][T13592] loop9: detected capacity change from 0 to 256 [ 1102.500342][ T29] audit: type=1804 audit(1734443033.529:465): pid=13592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.2157" name="/newroot/382/file0/file0" dev="loop9" ino=1048734 res=1 errno=0 [ 1102.561822][T13596] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.570411][T13596] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.592197][T13596] bridge_slave_1: left allmulticast mode [ 1102.598457][T13596] bridge_slave_1: left promiscuous mode [ 1102.605085][T13596] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.649012][T13596] bridge_slave_0: left allmulticast mode [ 1102.658467][T13596] bridge_slave_0: left promiscuous mode [ 1102.665206][T13596] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.998244][T13601] loop7: detected capacity change from 0 to 1024 [ 1103.074573][T13601] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1103.312178][ T29] audit: type=1800 audit(1734443034.269:466): pid=13601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2161" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 1103.443021][T13127] EXT4-fs error (device loop7): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /24/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1103.520837][T13127] EXT4-fs error (device loop7): ext4_empty_dir:3103: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1103.666617][T13127] EXT4-fs warning (device loop7): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 1103.705151][T13127] EXT4-fs error (device loop7): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /24/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1103.757612][T13127] EXT4-fs error (device loop7): ext4_empty_dir:3103: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1103.768523][T13619] loop4: detected capacity change from 0 to 512 [ 1103.787460][T13127] EXT4-fs warning (device loop7): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 1103.804217][T13127] EXT4-fs error (device loop7): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /24/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1103.897650][T13127] EXT4-fs error (device loop7): ext4_empty_dir:3103: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1103.932931][T13127] EXT4-fs warning (device loop7): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 1103.950778][T13127] EXT4-fs error (device loop7): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /24/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1103.999169][T13619] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.2170: casefold flag without casefold feature [ 1104.013690][T13127] EXT4-fs error (device loop7): ext4_empty_dir:3103: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1104.071673][T13619] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.2170: couldn't read orphan inode 15 (err -117) [ 1104.107665][T13622] loop0: detected capacity change from 0 to 2048 [ 1104.126897][T13622] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1104.128274][T13619] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1104.152662][T13127] EXT4-fs warning (device loop7): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 1104.178570][T13127] EXT4-fs error (device loop7): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /24/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1104.241898][T13127] EXT4-fs error (device loop7): ext4_empty_dir:3103: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1104.304487][T13127] EXT4-fs warning (device loop7): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 1104.341881][T13127] EXT4-fs warning (device loop7): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 1104.404410][T13127] EXT4-fs warning (device loop7): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 1104.435839][T13127] EXT4-fs warning (device loop7): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 1104.531349][T13127] EXT4-fs warning (device loop7): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 1104.533843][T10421] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1104.575185][T13127] EXT4-fs warning (device loop7): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 1104.883276][T13631] loop4: detected capacity change from 0 to 256 [ 1105.071883][T13631] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1105.187703][ T29] audit: type=1800 audit(1734443036.219:467): pid=13631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2174" name="file1" dev="loop4" ino=1048736 res=0 errno=0 [ 1105.538671][T13641] binder: 13640:13641 unknown command 3 [ 1105.544532][T13641] binder: 13640:13641 ioctl c0306201 20000c80 returned -22 [ 1106.293243][T13659] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2185'. [ 1107.900101][T13663] loop6: detected capacity change from 0 to 512 [ 1108.338508][T13663] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1108.351788][T13663] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1109.779001][ T3840] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.092668][ T3840] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.408588][ T7796] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1110.571454][ T3840] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.786424][T13127] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1110.814932][ T3840] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.336937][T11439] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1111.352694][T11439] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1111.363952][T11439] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1111.379312][T11439] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1111.399221][ T3840] syzkaller0: left allmulticast mode [ 1111.404800][ T3840] syzkaller0: left promiscuous mode [ 1111.411361][ T3840] bridge0: port 2(syzkaller0) entered disabled state [ 1111.420243][T11439] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1111.431573][T11439] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1111.440777][ T3840] bridge_slave_0: left allmulticast mode [ 1111.446989][ T3840] bridge_slave_0: left promiscuous mode [ 1111.453601][ T3840] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.717209][ T3840] bond1: left allmulticast mode [ 1111.722375][ T3840] bridge1: left allmulticast mode [ 1111.732198][ T3840] bond1: left promiscuous mode [ 1111.737514][ T3840] bridge1: left promiscuous mode [ 1112.161375][ T3840] bond1 (unregistering): (slave bridge1): Releasing active interface [ 1112.318120][ T3840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1112.336393][ T3840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1112.352296][ T3840] bond0 (unregistering): Released all slaves [ 1112.399743][ T3840] bond1 (unregistering): Released all slaves [ 1113.008051][T13689] pimreg: entered allmulticast mode [ 1113.148980][T13691] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2200'. [ 1113.164246][T13689] pimreg: left allmulticast mode [ 1113.298696][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1113.359722][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1113.373814][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1113.408934][T13675] chnl_net:caif_netlink_parms(): no params data found [ 1113.472409][ T29] audit: type=1326 audit(1734443044.489:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13696 comm="syz.6.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde19b85d19 code=0x7ffc0000 [ 1113.495750][ T29] audit: type=1326 audit(1734443044.489:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13696 comm="syz.6.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde19b85d19 code=0x7ffc0000 [ 1113.547985][ T51] Bluetooth: hci1: command tx timeout [ 1113.558161][ T29] audit: type=1326 audit(1734443044.589:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13696 comm="syz.6.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde19b85d19 code=0x7ffc0000 [ 1113.588358][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1113.592382][ T3840] hsr_slave_1: left promiscuous mode [ 1113.638597][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1113.648514][ T29] audit: type=1326 audit(1734443044.669:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13696 comm="syz.6.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde19b85d19 code=0x7ffc0000 [ 1113.650946][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1113.671590][ T29] audit: type=1326 audit(1734443044.669:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13696 comm="syz.6.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde19b85d19 code=0x7ffc0000 [ 1113.705861][ T3840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1113.715461][ T3840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1113.724515][ T29] audit: type=1326 audit(1734443044.729:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13696 comm="syz.6.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde19b85d19 code=0x7ffc0000 [ 1113.747765][ T29] audit: type=1326 audit(1734443044.729:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13696 comm="syz.6.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde19b85d19 code=0x7ffc0000 [ 1113.770758][ T29] audit: type=1326 audit(1734443044.739:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13696 comm="syz.6.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7fde19b85d19 code=0x7ffc0000 [ 1113.784836][ T3840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1113.793515][ T29] audit: type=1326 audit(1734443044.739:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13696 comm="syz.6.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde19b85d19 code=0x7ffc0000 [ 1113.793731][ T29] audit: type=1326 audit(1734443044.739:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13696 comm="syz.6.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fde19b85d19 code=0x7ffc0000 [ 1113.825280][T13699] loop0: detected capacity change from 0 to 1024 [ 1113.862377][ T3840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1113.880908][ T3840] veth1_macvtap: left promiscuous mode [ 1113.886893][ T3840] veth0_macvtap: left promiscuous mode [ 1113.892799][ T3840] veth1_vlan: left promiscuous mode [ 1113.898663][ T3840] veth0_vlan: left promiscuous mode [ 1114.060719][T13699] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1114.142919][T13704] loop4: detected capacity change from 0 to 1024 [ 1114.146440][T13699] EXT4-fs error (device loop0): ext4_xattr_inode_iget:440: inode #11: comm syz.0.2203: missing EA_INODE flag [ 1114.179489][T13699] EXT4-fs (loop0): Remounting filesystem read-only [ 1114.334646][T10271] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1114.377951][T13708] loop6: detected capacity change from 0 to 512 [ 1114.395475][T13708] EXT4-fs: quotafile must be on filesystem root [ 1114.630234][ T3840] team0 (unregistering): Port device team_slave_1 removed [ 1114.708373][ T3840] team0 (unregistering): Port device team_slave_0 removed [ 1115.438340][T13712] loop6: detected capacity change from 0 to 512 [ 1115.605737][T13712] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1115.619267][T13712] ext4 filesystem being mounted at /371/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1115.627381][T11439] Bluetooth: hci1: command tx timeout [ 1115.694524][T13712] EXT4-fs error (device loop6): ext4_readdir:261: inode #2: block 3: comm syz.6.2208: path /371/file2: bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 1115.731096][ T3840] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.755399][T13712] EXT4-fs error (device loop6): ext4_readdir:261: inode #2: block 12: comm syz.6.2208: path /371/file2: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 1115.817339][T13712] EXT4-fs error (device loop6): ext4_readdir:261: inode #2: block 13: comm syz.6.2208: path /371/file2: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 1115.881440][ T3840] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.947372][T11439] Bluetooth: hci2: command tx timeout [ 1116.034317][ T3840] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.109085][ T3840] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.176615][ T7796] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1116.192825][T13675] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.200752][T13675] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.208663][T13675] bridge_slave_0: entered allmulticast mode [ 1116.217904][T13675] bridge_slave_0: entered promiscuous mode [ 1116.232436][T13675] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.242194][T13675] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.251532][T13675] bridge_slave_1: entered allmulticast mode [ 1116.262783][T13675] bridge_slave_1: entered promiscuous mode [ 1116.443153][T13675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1116.499620][T13675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1116.922007][T13675] team0: Port device team_slave_0 added [ 1117.001968][T13675] team0: Port device team_slave_1 added [ 1117.415157][ T3840] bridge_slave_1: left allmulticast mode [ 1117.421400][ T3840] bridge_slave_1: left promiscuous mode [ 1117.428495][ T3840] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.718530][T11439] Bluetooth: hci1: command tx timeout [ 1117.767139][ T3840] bridge_slave_0: left allmulticast mode [ 1117.773315][ T3840] bridge_slave_0: left promiscuous mode [ 1117.780072][ T3840] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.111262][T11439] Bluetooth: hci2: command tx timeout [ 1118.563158][ T3840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1118.585857][ T3840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1118.711483][ T3840] bond0 (unregistering): Released all slaves [ 1118.824427][T13675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1118.833600][T13675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1118.860947][T13675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1118.874982][T13692] chnl_net:caif_netlink_parms(): no params data found [ 1119.267696][T13675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1119.275080][T13675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1119.301639][T13675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1119.591787][T13750] loop4: detected capacity change from 0 to 512 [ 1119.861139][T13750] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1119.875603][T13750] ext4 filesystem being mounted at /215/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1119.899910][T11439] Bluetooth: hci1: command tx timeout [ 1120.060203][T13675] hsr_slave_0: entered promiscuous mode [ 1120.080725][T13750] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.2218: corrupted inode contents [ 1120.084685][T13675] hsr_slave_1: entered promiscuous mode [ 1120.123041][T13692] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.130963][T13692] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.138980][T13692] bridge_slave_0: entered allmulticast mode [ 1120.148119][T13692] bridge_slave_0: entered promiscuous mode [ 1120.148544][T13750] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #2: comm syz.4.2218: mark_inode_dirty error [ 1120.195787][T11439] Bluetooth: hci2: command tx timeout [ 1120.211439][T13750] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.2218: corrupted inode contents [ 1120.337811][T13750] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.2218: mark_inode_dirty error [ 1120.388861][ T3840] hsr_slave_0: left promiscuous mode [ 1120.733001][ T3840] hsr_slave_1: left promiscuous mode [ 1120.752000][ T3840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1120.754695][T10421] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1120.762132][ T3840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1120.779529][T13768] loop6: detected capacity change from 0 to 8 [ 1120.799814][ T3840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1120.807797][ T3840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1120.833991][T13768] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1120.842506][T13768] SQUASHFS error: Failed to read block 0x91: -5 [ 1120.849162][T13768] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1120.856782][T13768] SQUASHFS error: Unable to read inode 0x11f [ 1120.868487][ T3840] veth1_macvtap: left promiscuous mode [ 1120.874273][ T3840] veth0_macvtap: left promiscuous mode [ 1120.886602][ T3840] veth1_vlan: left promiscuous mode [ 1120.893220][ T3840] veth0_vlan: left promiscuous mode [ 1121.583369][ T3840] team0 (unregistering): Port device team_slave_1 removed [ 1121.682810][ T3840] team0 (unregistering): Port device team_slave_0 removed [ 1121.872323][T13780] loop4: detected capacity change from 0 to 764 [ 1121.951932][T13692] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.960428][T13692] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.968783][T13692] bridge_slave_1: entered allmulticast mode [ 1121.977777][T13692] bridge_slave_1: entered promiscuous mode [ 1122.029786][T13782] netlink: 'syz.6.2227': attribute type 4 has an invalid length. [ 1122.042453][T13780] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1122.269951][T13692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1122.279933][T11439] Bluetooth: hci2: command tx timeout [ 1122.295043][T13692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1122.680898][T13692] team0: Port device team_slave_0 added [ 1122.896730][T13692] team0: Port device team_slave_1 added [ 1123.290418][T13692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1123.298674][T13692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1123.326524][T13692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1123.514413][T13792] loop6: detected capacity change from 0 to 512 [ 1123.523325][T13692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1123.530726][T13692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1123.558687][T13692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1123.674686][T13792] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 1123.683988][T13792] EXT4-fs (loop6): failed to open journal device unknown-block(8,3) -6 [ 1123.912308][T13692] hsr_slave_0: entered promiscuous mode [ 1123.987956][T13692] hsr_slave_1: entered promiscuous mode [ 1124.016842][T13692] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1124.024674][T13692] Cannot create hsr debugfs directory [ 1124.497732][T13675] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1124.753439][T13675] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1124.857158][T13675] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1125.004553][T13675] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1125.522623][T13675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1125.596346][T13675] 8021q: adding VLAN 0 to HW filter on device team0 [ 1125.640650][ T7184] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.648417][ T7184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1125.663447][ T7184] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.671237][ T7184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1125.768694][T13821] loop6: detected capacity change from 0 to 256 [ 1125.880719][T13692] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1125.990405][T13692] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1126.014063][T13821] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 1126.052709][T13692] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1126.085205][T13692] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1127.146829][T13692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1127.338163][T13692] 8021q: adding VLAN 0 to HW filter on device team0 [ 1127.464254][ T7186] bridge0: port 1(bridge_slave_0) entered blocking state [ 1127.472166][ T7186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1127.575116][ T7186] bridge0: port 2(bridge_slave_1) entered blocking state [ 1127.582932][ T7186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1128.488224][T13675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1128.574389][T13851] loop4: detected capacity change from 0 to 128 [ 1128.932914][T13675] veth0_vlan: entered promiscuous mode [ 1129.121106][T13675] veth1_vlan: entered promiscuous mode [ 1129.142358][T13692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1129.359672][T13675] veth0_macvtap: entered promiscuous mode [ 1129.439702][T13675] veth1_macvtap: entered promiscuous mode [ 1129.490350][T13675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1129.501253][T13675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1129.512189][T13675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1129.522980][T13675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1129.533238][T13675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1129.543979][T13675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1129.558396][T13675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1129.576159][T13675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1129.589243][T13675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1129.601361][T13675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1129.613208][T13675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1129.624196][T13675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1129.637012][T13675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1129.657913][T13675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1129.676611][T13675] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.687801][T13675] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.700695][T13675] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.710777][T13675] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.825766][T13863] loop4: detected capacity change from 0 to 2048 [ 1131.282782][T13890] loop4: detected capacity change from 0 to 512 [ 1131.345256][T13890] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1131.401312][T13890] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1131.530163][T13890] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2260: bg 0: block 248: padding at end of block bitmap is not set [ 1131.634056][T13692] veth0_vlan: entered promiscuous mode [ 1131.651404][T13890] __quota_error: 29 callbacks suppressed [ 1131.651483][T13890] Quota error (device loop4): write_blk: dquota write failed [ 1131.669276][T13890] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1131.679753][T13890] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.2260: Failed to acquire dquot type 1 [ 1131.757395][T13692] veth1_vlan: entered promiscuous mode [ 1131.863484][T13692] veth0_macvtap: entered promiscuous mode [ 1131.923356][T13692] veth1_macvtap: entered promiscuous mode [ 1132.057960][T13692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1132.068890][T13692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.079080][T13692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1132.089917][T13692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.100249][T13692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1132.112348][T13692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.123395][T13692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1132.134215][T13692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.151385][T13692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1132.176250][T13692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1132.187184][T13692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.197468][T13692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1132.208317][T13692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.218556][T13692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1132.229479][T13692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.239728][T13692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1132.252459][T13692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.270206][T13692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1132.394679][T13692] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.404110][T13692] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.413347][T13692] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.422625][T13692] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.521332][T13890] EXT4-fs (loop4): 1 truncate cleaned up [ 1132.799879][T13890] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1133.049684][T13890] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz.4.2260: deleted inode referenced: 12 [ 1133.691366][T10421] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1134.486761][ T5846] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1134.734019][ T5846] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1134.814333][ T5846] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1134.824794][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.835465][ T5846] usb 5-1: Product: syz [ 1134.840629][ T5846] usb 5-1: Manufacturer: syz [ 1134.845593][ T5846] usb 5-1: SerialNumber: syz [ 1137.135359][ T5846] cdc_ncm 5-1:1.0: failed to get mac address [ 1137.189947][ T5846] cdc_ncm 5-1:1.0: bind() failure [ 1137.315169][ T5846] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1137.400008][ T5846] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1137.482837][ T5846] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 1137.600912][ T5846] usb 5-1: USB disconnect, device number 30 [ 1139.269423][ T7184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1139.277659][ T7184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1139.735152][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1139.743378][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1141.935150][ T7184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1141.943503][ T7184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1142.075633][ T7184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1142.084104][ T7184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1143.084055][T13980] loop8: detected capacity change from 0 to 1024 [ 1143.159604][T13980] hfsplus: Bad value for 'gid' [ 1143.345276][T13984] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2196'. [ 1143.383286][T13985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1143.457338][T13985] batadv_slave_0: entered promiscuous mode [ 1143.965675][T13987] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1143.979820][T13987] Error validating options; rc = [-22] [ 1145.907786][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1145.914499][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1147.280156][T14011] loop8: detected capacity change from 0 to 128 [ 1147.438716][T14011] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1147.555100][T14011] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1148.072959][T14023] trusted_key: syz.6.2297 sent an empty control message without MSG_MORE. [ 1148.163279][T13692] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1148.173447][T14025] loop4: detected capacity change from 0 to 2048 [ 1148.355337][T14025] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1148.363832][T14025] UDF-fs: Scanning with blocksize 512 failed [ 1148.534897][T14031] loop6: detected capacity change from 0 to 8 [ 1148.540469][T14025] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1148.724698][T14035] loop8: detected capacity change from 0 to 128 [ 1148.747909][ T29] audit: type=1800 audit(1734443079.679:507): pid=14025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2299" name="file1" dev="loop4" ino=818 res=0 errno=0 [ 1150.468582][T14044] loop8: detected capacity change from 0 to 128 [ 1150.539704][T14044] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1150.559870][T14044] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1152.306996][T13692] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1152.449639][T14065] syzkaller0: entered promiscuous mode [ 1152.455421][T14065] syzkaller0: entered allmulticast mode [ 1152.753431][T14071] loop4: detected capacity change from 0 to 128 [ 1152.778092][T14071] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1152.804741][T14071] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1153.005406][T14076] loop2: detected capacity change from 0 to 128 [ 1153.018477][T14077] loop8: detected capacity change from 0 to 512 [ 1153.036991][T14076] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1153.051453][T14077] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1153.065795][T14076] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1153.082138][T14076] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1153.098046][T14077] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e12c, mo2=0002] [ 1153.106919][T14077] System zones: 1-12 [ 1153.108221][T10421] UDF-fs: warning (device loop4): udf_evict_inode: Inode 105 (mode 100755) has inode size 9000 different from extent length 9216. Filesystem need not be standards compliant. [ 1153.116575][T14077] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1153.152660][T14077] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2318: bg 0: block 361: padding at end of block bitmap is not set [ 1153.169755][T14076] EXT4-fs warning (device loop2): ext4_group_extend:1891: can't read last block, resize aborted [ 1153.208715][T14077] EXT4-fs (loop8): Remounting filesystem read-only [ 1153.235466][T14077] EXT4-fs (loop8): 1 truncate cleaned up [ 1153.245892][T14077] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1153.314644][ T51] Bluetooth: hci2: command tx timeout [ 1153.327854][T14077] EXT4-fs warning (device loop8): dx_probe:823: inode #2: lblock 0: comm syz.8.2318: error -117 reading directory block [ 1153.343599][T14077] EXT4-fs warning (device loop8): dx_probe:823: inode #2: lblock 0: comm syz.8.2318: error -117 reading directory block [ 1153.347257][T13675] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1153.425461][T13692] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1153.826545][ T2226] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1153.989386][ T2226] usb 3-1: Using ep0 maxpacket: 32 [ 1154.004337][ T2226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1154.016170][ T2226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1154.026472][ T2226] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1154.035827][ T2226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.064971][ T2226] usb 3-1: config 0 descriptor?? [ 1154.206627][ T5846] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 1154.316677][ T5900] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1154.478299][ T5900] usb 9-1: Using ep0 maxpacket: 8 [ 1154.491993][ T5900] usb 9-1: config 135 has an invalid interface number: 230 but max is 0 [ 1154.501125][ T5900] usb 9-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.511990][ T5900] usb 9-1: config 135 has no interface number 0 [ 1154.518629][ T5900] usb 9-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1154.535521][ T2226] savu 0003:1E7D:2D5A.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 1154.566394][ T5900] usb 9-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 1154.577606][ T5900] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.588071][ T5900] usb 9-1: Product: syz [ 1154.592493][ T5900] usb 9-1: Manufacturer: syz [ 1154.592558][T14091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1154.593240][T14091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1154.597979][ T5900] usb 9-1: SerialNumber: syz [ 1154.634969][ T5846] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1154.664353][ T5846] usb 5-1: no configurations [ 1154.671445][ T5846] usb 5-1: can't read configurations, error -22 [ 1154.733445][ T2226] usb 3-1: USB disconnect, device number 13 [ 1154.843208][ T5900] usb 9-1: USB disconnect, device number 21 [ 1155.679626][T14101] loop8: detected capacity change from 0 to 256 [ 1155.769021][T14101] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1155.779836][T14101] FAT-fs (loop8): Filesystem has been set read-only [ 1155.786928][T14101] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1155.799728][T14101] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1155.813765][ T29] audit: type=1800 audit(1734443086.839:508): pid=14101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2329" name="file1" dev="loop8" ino=1048751 res=0 errno=0 [ 1155.871643][T14101] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1155.922127][T14101] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1155.977403][T14101] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1156.637818][ T5846] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1157.106291][ T5846] usb 5-1: Using ep0 maxpacket: 16 [ 1157.188599][ T5846] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1157.200239][ T5846] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1157.210646][ T5846] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1157.225872][ T5846] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1157.237103][ T5846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.296923][ T5846] usb 5-1: config 0 descriptor?? [ 1157.747289][ T2226] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1157.788148][T14125] bridge_slave_1: left allmulticast mode [ 1157.794408][T14125] bridge_slave_1: left promiscuous mode [ 1157.802097][T14125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.943669][ T2226] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1157.956872][ T2226] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1157.970174][ T2226] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1157.980456][ T2226] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.041042][ T5846] HID 045e:07da: Invalid code 65791 type 1 [ 1158.088909][ T5846] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0013/input/input51 [ 1158.281703][ T2226] usb 9-1: config 0 descriptor?? [ 1159.299924][ T2226] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 1159.310911][ T5846] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1159.347632][ T2226] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.0014/input/input52 [ 1160.331762][ T2226] keytouch 0003:0926:3333.0014: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0 [ 1162.301044][ T5846] usb 5-1: USB disconnect, device number 33 [ 1162.332420][T14160] loop4: detected capacity change from 0 to 1024 [ 1163.065546][ T7186] hfsplus: b-tree write err: -5, ino 4 [ 1163.285514][ T2226] usb 9-1: USB disconnect, device number 22 [ 1163.654414][T14178] loop6: detected capacity change from 0 to 256 [ 1163.810958][T14178] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1163.882325][ T29] audit: type=1800 audit(1734443094.909:509): pid=14178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2360" name="file1" dev="loop6" ino=1048752 res=0 errno=0 [ 1164.106519][T14187] loop8: detected capacity change from 0 to 128 [ 1164.179617][T14187] ip6t_srh: unknown srh match flags FDC7 [ 1164.217237][ T2226] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1164.408081][ T2226] usb 3-1: Using ep0 maxpacket: 8 [ 1164.463014][ T2226] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1164.472214][ T2226] usb 3-1: config 179 has no interface number 0 [ 1164.479041][ T2226] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1164.490525][ T2226] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1164.503509][ T2226] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1164.517850][ T2226] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1164.530934][ T2226] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1164.544721][ T2226] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1164.554268][ T2226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.624179][T14197] input: syz1 as /devices/virtual/input/input53 [ 1164.768496][T14184] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1165.022421][ T7932] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input54 [ 1165.290359][ T5900] usb 3-1: USB disconnect, device number 14 [ 1165.290359][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1165.290581][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1165.321039][ T5900] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1165.900916][T14210] loop8: detected capacity change from 0 to 1024 [ 1166.028779][T14213] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2375'. [ 1166.099907][T14214] loop6: detected capacity change from 0 to 2048 [ 1166.112083][T14210] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1166.408617][T14214] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1166.427406][T13692] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1166.545864][T14221] loop2: detected capacity change from 0 to 2048 [ 1166.634946][T14221] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1166.643312][T14221] UDF-fs: Scanning with blocksize 512 failed [ 1166.789549][T14221] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1167.737672][T14232] loop6: detected capacity change from 0 to 1024 [ 1167.855255][T14232] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1167.855759][T14232] ext4 filesystem being mounted at /403/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1167.922257][T14232] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2381: bg 0: block 393: padding at end of block bitmap is not set [ 1168.002300][T14232] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 32788 with max blocks 1 with error 117 [ 1168.015707][T14232] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1168.015707][T14232] [ 1169.102757][ T7796] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1169.464640][T14246] loop4: detected capacity change from 0 to 512 [ 1169.986640][ T5900] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1170.056342][T14250] loop4: detected capacity change from 0 to 256 [ 1170.068763][T14250] exfat: Deprecated parameter 'namecase' [ 1170.074985][T14250] exfat: Deprecated parameter 'namecase' [ 1170.163011][T14250] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 1170.196255][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 1170.257436][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1170.269283][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1170.279683][ T5900] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1170.293600][ T5900] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1170.303517][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.406842][ T5900] usb 3-1: config 0 descriptor?? [ 1171.190299][ T5900] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 1171.203845][ T5900] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 1171.212056][ T5900] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 1171.220128][ T5900] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 1171.228314][ T5900] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 1171.236211][ T5900] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 1171.244104][ T5900] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 1171.252091][ T5900] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 1171.264990][ T5900] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 1171.273760][ T5900] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 1171.428573][ T5900] HID 045e:07da: Invalid code 65791 type 1 [ 1171.516915][ T5900] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0015/input/input55 [ 1171.606680][ T5900] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1171.768958][ T5900] usb 3-1: USB disconnect, device number 15 [ 1172.446413][ T29] audit: type=1326 audit(1734443103.449:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14271 comm="syz.6.2393" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde19b85d19 code=0x0 [ 1172.657291][T14277] loop4: detected capacity change from 0 to 256 [ 1172.764674][T14277] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1173.141618][T14270] loop2: detected capacity change from 0 to 8192 [ 1173.753069][T14287] loop8: detected capacity change from 0 to 1024 [ 1173.789530][T14287] EXT4-fs: Ignoring removed orlov option [ 1173.832778][T14287] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1173.861819][T14287] EXT4-fs (loop8): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 1174.019786][T14287] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1174.164493][T14295] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2405'. [ 1174.191422][T14287] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))" [ 1174.276996][ T29] audit: type=1800 audit(1734443105.239:511): pid=14287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2400" name="file1" dev="loop8" ino=19 res=0 errno=0 [ 1174.811337][T14299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2406'. [ 1175.112971][ T3696] ===================================================== [ 1175.120240][ T3696] BUG: KMSAN: uninit-value in aes_encrypt+0x15cc/0x1db0 [ 1175.127375][ T3696] aes_encrypt+0x15cc/0x1db0 [ 1175.132152][ T3696] aesti_encrypt+0x7d/0xf0 [ 1175.136771][ T3696] crypto_ecb_encrypt2+0x18a/0x300 [ 1175.142054][ T3696] crypto_lskcipher_crypt_sg+0x36b/0x7f0 [ 1175.147920][ T3696] crypto_lskcipher_encrypt_sg+0x8a/0xc0 [ 1175.153914][ T3696] crypto_skcipher_encrypt+0x119/0x1e0 [ 1175.159579][ T3696] xts_encrypt+0x3c4/0x550 [ 1175.164187][ T3696] crypto_skcipher_encrypt+0x1a0/0x1e0 [ 1175.169847][ T3696] fscrypt_crypt_data_unit+0x4ee/0x8f0 [ 1175.175513][ T3696] fscrypt_encrypt_pagecache_blocks+0x422/0x900 [ 1175.181974][ T3696] ext4_bio_write_folio+0x1377/0x2e50 [ 1175.187559][ T3696] mpage_submit_folio+0x360/0x490 [ 1175.192759][ T3696] mpage_process_page_bufs+0xb92/0xe30 [ 1175.198400][ T3696] mpage_prepare_extent_to_map+0x17a5/0x22a0 [ 1175.204573][ T3696] ext4_do_writepages+0x1117/0x62c0 [ 1175.209986][ T3696] ext4_writepages+0x312/0x830 [ 1175.214924][ T3696] do_writepages+0x427/0xc30 [ 1175.219675][ T3696] __writeback_single_inode+0x103/0x1290 [ 1175.225499][ T3696] writeback_sb_inodes+0xa34/0x1c20 [ 1175.230884][ T3696] wb_writeback+0x4df/0xcb0 [ 1175.235559][ T3696] wb_workfn+0x40b/0x1940 [ 1175.240044][ T3696] process_scheduled_works+0xae0/0x1c40 [ 1175.245800][ T3696] worker_thread+0xea7/0x14f0 [ 1175.250682][ T3696] kthread+0x3e2/0x540 [ 1175.254913][ T3696] ret_from_fork+0x6d/0x90 [ 1175.259507][ T3696] ret_from_fork_asm+0x1a/0x30 [ 1175.264488][ T3696] [ 1175.266906][ T3696] Uninit was stored to memory at: [ 1175.272163][ T3696] xts_xor_tweak+0x4ae/0xbf0 [ 1175.276921][ T3696] xts_encrypt+0x296/0x550 [ 1175.281492][ T3696] crypto_skcipher_encrypt+0x1a0/0x1e0 [ 1175.287131][ T3696] fscrypt_crypt_data_unit+0x4ee/0x8f0 [ 1175.292783][ T3696] fscrypt_encrypt_pagecache_blocks+0x422/0x900 [ 1175.299225][ T3696] ext4_bio_write_folio+0x1377/0x2e50 [ 1175.304806][ T3696] mpage_submit_folio+0x360/0x490 [ 1175.310004][ T3696] mpage_process_page_bufs+0xb92/0xe30 [ 1175.315644][ T3696] mpage_prepare_extent_to_map+0x17a5/0x22a0 [ 1175.321807][ T3696] ext4_do_writepages+0x1117/0x62c0 [ 1175.327213][ T3696] ext4_writepages+0x312/0x830 [ 1175.332143][ T3696] do_writepages+0x427/0xc30 [ 1175.336884][ T3696] __writeback_single_inode+0x103/0x1290 [ 1175.342715][ T3696] writeback_sb_inodes+0xa34/0x1c20 [ 1175.348097][ T3696] wb_writeback+0x4df/0xcb0 [ 1175.352780][ T3696] wb_workfn+0x40b/0x1940 [ 1175.357268][ T3696] process_scheduled_works+0xae0/0x1c40 [ 1175.363028][ T3696] worker_thread+0xea7/0x14f0 [ 1175.367911][ T3696] kthread+0x3e2/0x540 [ 1175.372133][ T3696] ret_from_fork+0x6d/0x90 [ 1175.376714][ T3696] ret_from_fork_asm+0x1a/0x30 [ 1175.381700][ T3696] [ 1175.384109][ T3696] Uninit was created at: [ 1175.388570][ T3696] __alloc_pages_noprof+0x9a7/0xe00 [ 1175.393950][ T3696] alloc_pages_mpol_noprof+0x299/0x990 [ 1175.399584][ T3696] folio_alloc_noprof+0x1db/0x310 [ 1175.404784][ T3696] filemap_alloc_folio_noprof+0xa6/0x440 [ 1175.410600][ T3696] __filemap_get_folio+0xac4/0x1550 [ 1175.416004][ T3696] ext4_write_begin+0x3e5/0x23d0 [ 1175.421116][ T3696] generic_perform_write+0x4d8/0x1080 [ 1175.426695][ T3696] ext4_buffered_write_iter+0x561/0xaa0 [ 1175.432408][ T3696] ext4_file_write_iter+0x266/0x3820 [ 1175.437895][ T3696] vfs_write+0xb2b/0x1540 [ 1175.442409][ T3696] __x64_sys_pwrite64+0x2c5/0x3b0 [ 1175.447637][ T3696] x64_sys_call+0xc16/0x3c30 [ 1175.452427][ T3696] do_syscall_64+0xcd/0x1e0 [ 1175.457089][ T3696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.463197][ T3696] [ 1175.465623][ T3696] CPU: 1 UID: 0 PID: 3696 Comm: kworker/u8:13 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 1175.476751][ T3696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1175.486971][ T3696] Workqueue: writeback wb_workfn (flush-7:8) [ 1175.493173][ T3696] ===================================================== [ 1175.500204][ T3696] Disabling lock debugging due to kernel taint [ 1175.506477][ T3696] Kernel panic - not syncing: kmsan.panic set ... [ 1175.513028][ T3696] CPU: 1 UID: 0 PID: 3696 Comm: kworker/u8:13 Tainted: G B 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 1175.525664][ T3696] Tainted: [B]=BAD_PAGE [ 1175.529922][ T3696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1175.540132][ T3696] Workqueue: writeback wb_workfn (flush-7:8) [ 1175.546340][ T3696] Call Trace: [ 1175.549732][ T3696] [ 1175.552765][ T3696] dump_stack_lvl+0x216/0x2d0 [ 1175.557649][ T3696] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1175.563651][ T3696] dump_stack+0x1e/0x24 [ 1175.567995][ T3696] panic+0x4e2/0xcf0 [ 1175.572078][ T3696] ? kmsan_get_metadata+0xf1/0x1c0 [ 1175.577378][ T3696] kmsan_report+0x2c7/0x2d0 [ 1175.582056][ T3696] ? is_last_task_frame+0x5d/0x450 [ 1175.587357][ T3696] ? __msan_warning+0x95/0x120 [ 1175.592327][ T3696] ? aes_encrypt+0x15cc/0x1db0 [ 1175.597269][ T3696] ? aesti_encrypt+0x7d/0xf0 [ 1175.602054][ T3696] ? crypto_ecb_encrypt2+0x18a/0x300 [ 1175.607506][ T3696] ? crypto_lskcipher_crypt_sg+0x36b/0x7f0 [ 1175.613539][ T3696] ? crypto_lskcipher_encrypt_sg+0x8a/0xc0 [ 1175.619573][ T3696] ? crypto_skcipher_encrypt+0x119/0x1e0 [ 1175.625392][ T3696] ? xts_encrypt+0x3c4/0x550 [ 1175.630143][ T3696] ? crypto_skcipher_encrypt+0x1a0/0x1e0 [ 1175.635956][ T3696] ? fscrypt_crypt_data_unit+0x4ee/0x8f0 [ 1175.641782][ T3696] ? fscrypt_encrypt_pagecache_blocks+0x422/0x900 [ 1175.648397][ T3696] ? ext4_bio_write_folio+0x1377/0x2e50 [ 1175.654154][ T3696] ? mpage_submit_folio+0x360/0x490 [ 1175.659530][ T3696] ? mpage_process_page_bufs+0xb92/0xe30 [ 1175.665350][ T3696] ? mpage_prepare_extent_to_map+0x17a5/0x22a0 [ 1175.671701][ T3696] ? ext4_do_writepages+0x1117/0x62c0 [ 1175.677288][ T3696] ? ext4_writepages+0x312/0x830 [ 1175.682399][ T3696] ? do_writepages+0x427/0xc30 [ 1175.687317][ T3696] ? __writeback_single_inode+0x103/0x1290 [ 1175.693321][ T3696] ? writeback_sb_inodes+0xa34/0x1c20 [ 1175.698882][ T3696] ? wb_writeback+0x4df/0xcb0 [ 1175.703736][ T3696] ? wb_workfn+0x40b/0x1940 [ 1175.708400][ T3696] ? process_scheduled_works+0xae0/0x1c40 [ 1175.714339][ T3696] ? worker_thread+0xea7/0x14f0 [ 1175.719400][ T3696] ? kthread+0x3e2/0x540 [ 1175.723807][ T3696] ? ret_from_fork+0x6d/0x90 [ 1175.728572][ T3696] ? ret_from_fork_asm+0x1a/0x30 [ 1175.733736][ T3696] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 1175.739746][ T3696] ? stack_depot_save_flags+0x6db/0x750 [ 1175.745496][ T3696] ? stack_depot_save+0x12/0x20 [ 1175.750532][ T3696] ? kmsan_internal_chain_origin+0xb0/0xd0 [ 1175.756560][ T3696] ? kmsan_get_metadata+0x13e/0x1c0 [ 1175.761933][ T3696] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1175.767927][ T3696] __msan_warning+0x95/0x120 [ 1175.772727][ T3696] aes_encrypt+0x15cc/0x1db0 [ 1175.777502][ T3696] ? stack_depot_save_flags+0x2c/0x750 [ 1175.783162][ T3696] ? kmsan_get_metadata+0x13e/0x1c0 [ 1175.788530][ T3696] ? kmsan_get_metadata+0x13e/0x1c0 [ 1175.793906][ T3696] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1175.800469][ T3696] aesti_encrypt+0x7d/0xf0 [ 1175.805114][ T3696] crypto_ecb_encrypt2+0x18a/0x300 [ 1175.810401][ T3696] ? __pfx_aesti_encrypt+0x10/0x10 [ 1175.815752][ T3696] crypto_lskcipher_crypt_sg+0x36b/0x7f0 [ 1175.821633][ T3696] ? xts_xor_tweak+0x658/0xbf0 [ 1175.826588][ T3696] ? __pfx_crypto_ecb_encrypt2+0x10/0x10 [ 1175.832403][ T3696] ? __pfx_crypto_ecb_encrypt2+0x10/0x10 [ 1175.838212][ T3696] crypto_lskcipher_encrypt_sg+0x8a/0xc0 [ 1175.844067][ T3696] crypto_skcipher_encrypt+0x119/0x1e0 [ 1175.849707][ T3696] xts_encrypt+0x3c4/0x550 [ 1175.854297][ T3696] ? __pfx_xts_encrypt+0x10/0x10 [ 1175.859413][ T3696] crypto_skcipher_encrypt+0x1a0/0x1e0 [ 1175.865067][ T3696] fscrypt_crypt_data_unit+0x4ee/0x8f0 [ 1175.870759][ T3696] fscrypt_encrypt_pagecache_blocks+0x422/0x900 [ 1175.877246][ T3696] ext4_bio_write_folio+0x1377/0x2e50 [ 1175.882879][ T3696] mpage_submit_folio+0x360/0x490 [ 1175.888107][ T3696] mpage_process_page_bufs+0xb92/0xe30 [ 1175.893760][ T3696] ? kmsan_get_shadow_origin_ptr+0x38/0xb0 [ 1175.899766][ T3696] mpage_prepare_extent_to_map+0x17a5/0x22a0 [ 1175.905937][ T3696] ? perf_output_read+0x15a1/0x2970 [ 1175.911308][ T3696] ? kmsan_get_metadata+0x13e/0x1c0 [ 1175.916679][ T3696] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1175.922670][ T3696] ? kmsan_get_metadata+0x13e/0x1c0 [ 1175.928039][ T3696] ? kmsan_get_metadata+0x13e/0x1c0 [ 1175.933404][ T3696] ? kmsan_get_metadata+0x13e/0x1c0 [ 1175.938822][ T3696] ext4_do_writepages+0x1117/0x62c0 [ 1175.944242][ T3696] ? __local_bh_enable_ip+0x74/0xb0 [ 1175.949683][ T3696] ? _raw_spin_unlock_bh+0x2d/0x40 [ 1175.954988][ T3696] ? cfg80211_inform_single_bss_data+0x24e6/0x2c10 [ 1175.961692][ T3696] ? kmsan_get_metadata+0x13e/0x1c0 [ 1175.967068][ T3696] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1175.973056][ T3696] ? kmsan_get_metadata+0x13e/0x1c0 [ 1175.978430][ T3696] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1175.984440][ T3696] ? kmsan_get_metadata+0x13e/0x1c0 [ 1175.989823][ T3696] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1175.995879][ T3696] ? kmsan_get_metadata+0x13e/0x1c0 [ 1176.001302][ T3696] ? kmsan_get_metadata+0x13e/0x1c0 [ 1176.006689][ T3696] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1176.012692][ T3696] ? kmsan_get_metadata+0x13e/0x1c0 [ 1176.018075][ T3696] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1176.024070][ T3696] ? filter_irq_stacks+0x60/0x1a0 [ 1176.029292][ T3696] ? stack_depot_save_flags+0x2c/0x750 [ 1176.034949][ T3696] ? kmsan_get_metadata+0x13e/0x1c0 [ 1176.040327][ T3696] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1176.046880][ T3696] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1176.052866][ T3696] ext4_writepages+0x312/0x830 [ 1176.057837][ T3696] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1176.063830][ T3696] ? __pfx_ext4_writepages+0x10/0x10 [ 1176.069303][ T3696] do_writepages+0x427/0xc30 [ 1176.074058][ T3696] ? kmsan_get_metadata+0x13e/0x1c0 [ 1176.079434][ T3696] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1176.085423][ T3696] ? writeback_sb_inodes+0x58/0x1c20 [ 1176.090906][ T3696] ? kmsan_get_metadata+0x13e/0x1c0 [ 1176.096291][ T3696] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1176.102283][ T3696] __writeback_single_inode+0x103/0x1290 [ 1176.108119][ T3696] ? _raw_spin_unlock+0x30/0x50 [ 1176.113168][ T3696] writeback_sb_inodes+0xa34/0x1c20 [ 1176.118643][ T3696] ? kmsan_get_metadata+0x13e/0x1c0 [ 1176.124038][ T3696] wb_writeback+0x4df/0xcb0 [ 1176.128740][ T3696] ? queue_io+0x4c1/0x780 [ 1176.133266][ T3696] wb_workfn+0x40b/0x1940 [ 1176.137764][ T3696] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1176.143801][ T3696] ? __pfx_wb_workfn+0x10/0x10 [ 1176.148735][ T3696] process_scheduled_works+0xae0/0x1c40 [ 1176.154543][ T3696] worker_thread+0xea7/0x14f0 [ 1176.159454][ T3696] kthread+0x3e2/0x540 [ 1176.163689][ T3696] ? __pfx_worker_thread+0x10/0x10 [ 1176.169023][ T3696] ? __pfx_kthread+0x10/0x10 [ 1176.173786][ T3696] ret_from_fork+0x6d/0x90 [ 1176.178393][ T3696] ? __pfx_kthread+0x10/0x10 [ 1176.183182][ T3696] ret_from_fork_asm+0x1a/0x30 [ 1176.188175][ T3696] [ 1176.191606][ T3696] Kernel Offset: disabled [ 1176.196019][ T3696] Rebooting in 86400 seconds..