last executing test programs: 8m15.007250699s ago: executing program 3 (id=211): syz_open_procfs(0x0, 0x0) epoll_create1(0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 8m10.076912152s ago: executing program 3 (id=216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) 8m9.18996852s ago: executing program 3 (id=218): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0x0, 0x1}}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) 8m8.673871907s ago: executing program 3 (id=220): ioprio_set$pid(0x2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/mm/ksm/run\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r2 = socket(0x15, 0x5, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF(r3, 0x5457, &(0x7f0000000000)={0x0, 0x62d, 0xffffffff, 0x0, 0x8e, "7a58bea88a00"}) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000040)={0x5, 0x101, 0xed9, 0xfffffff9, 0x6, "afd2010000eb920000d500"}) getsockopt(r2, 0x200000000114, 0x8, &(0x7f0000000040)=""/10, &(0x7f0000000000)=0xa) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000200)={0x100, r4}, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000280)={0x100, r5}, 0x0) close(r5) close(r4) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x100, r6}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r1, 0x0) close(r1) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x81c0, 0x0) 8m8.033540101s ago: executing program 3 (id=221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000080)='./file0\x00', 0x2200000, &(0x7f0000000600)={[{@dax}]}, 0x1, 0xba4c, &(0x7f0000020c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000640)=@sg0, 0x0, &(0x7f0000000700)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) close(0x3) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000080)=0x100000b3, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0x80ad}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000340)={0xfff8, 0xfffd, 0xa0, 0xffff}, 0x8) sendmmsg$inet(r5, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}], 0x1, 0x4004000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000000c0)=0x1, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r6, &(0x7f0000001180)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000680)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r7, r2, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}, 0x3c) syz_emit_ethernet(0xfc0, &(0x7f0000000000)=ANY=[], 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) 8m3.548614127s ago: executing program 3 (id=225): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000007580)={0x0, 0x0, 0x0}, 0x48040) 7m47.520197767s ago: executing program 32 (id=225): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000007580)={0x0, 0x0, 0x0}, 0x48040) 2m18.446711217s ago: executing program 2 (id=737): prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x6, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x810, &(0x7f0000000240)={[{@autodefrag}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@ssd_spread}, {@compress_force}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x101142, 0xeaff) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x29f) 2m15.748320201s ago: executing program 2 (id=742): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x15, r3, 0x1, 0x6, 0x6, @multicast}, 0x14) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2m13.709455629s ago: executing program 2 (id=745): r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r0, 0x7000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000000)=0xa, 0x4) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010240)={0x0, 0x0, &(0x7f0000010200)={&(0x7f00000001c0)={0x10020, 0x3f7, 0x0, 0x0, 0x0, {0xffff, 0x7, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}}, 0x0) ptrace(0x10, 0x1) r1 = dup(r0) preadv2(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r1, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0xf, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x1a, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@ifindex=r2, r1, 0x2b, 0x0, 0x0, @void, @value=r1}, 0x20) 2m12.574417002s ago: executing program 2 (id=747): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) pwritev2(r0, &(0x7f00000003c0)=[{&(0x7f00000011c0)="4b62a635", 0x4}], 0x1, 0x40042000, 0x2d, 0x7) r1 = socket(0x15, 0x5, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x18, 0x3e, 0x9, 0x0, 0x800, {0x3}, [@typed={0x4, 0x4}]}, 0x18}}, 0x0) ioctl$EVIOCGBITSND(r2, 0x40044591, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000940)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xa}, @hci_ev_le_conn_update_complete={{}, {0x0, 0xc9, 0x3ff, 0x94, 0x8}}}}, 0xd) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x201) ioctl$I2C_RETRIES(r5, 0x701, 0x1) getsockopt(r1, 0x200000000114, 0x8, &(0x7f0000000040)=""/10, &(0x7f0000000000)=0xa) 2m10.171250186s ago: executing program 2 (id=750): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000180)=@keyring={'key_or_keyring:', r0}) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000740), &(0x7f0000000280)=0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x8001, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x401}]}}}]}, 0x40}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000070601010000000000000000020000070500010007"], 0x30}, 0x1, 0x0, 0x0, 0x4081}, 0x0) close(r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0xfffffffa, 0x61, 0x11, 0x68}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x45) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, r1) add_key$user(&(0x7f00000001c0), &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)="61d1e4a0d5ea44a3b6a191f59f2a292619ac26b6d96c641e7bcec3890b08bad4cfe4f6a08494d9aeb5416c09e22edf86b47d2b4e6abb0a0a24c07982633d61ae59acd17eef352c552ba36cf7c1b214a597fa9619214f8c16398b2f17b57fac2d31a51748ce5ca1375777190e5eeb94a83247b32bc52b7f7fd9d83e6a9d48e09f38c7309ad0", 0x85, r6) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], 0xdf, 0xc5b, &(0x7f0000002d80)="$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") 2m8.637472641s ago: executing program 2 (id=755): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)={0x1c, 0x1e, 0x301, 0x20000002, 0x0, {0x1}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x13d}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) syz_open_dev$video(&(0x7f0000000040), 0xf05, 0x0) listen(r0, 0x9) 2m5.335309176s ago: executing program 33 (id=755): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)={0x1c, 0x1e, 0x301, 0x20000002, 0x0, {0x1}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x13d}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) syz_open_dev$video(&(0x7f0000000040), 0xf05, 0x0) listen(r0, 0x9) 16.592311994s ago: executing program 5 (id=935): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, 0x0) r1 = syz_open_dev$media(0x0, 0x4007, 0x440) read$FUSE(r1, 0x0, 0x0) r2 = io_uring_setup(0x937, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x0, 0x35d}) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000000140)={&(0x7f0000000300)=[0x4, 0x6, 0x1, 0x9, 0x5, 0x401, 0x200, 0x4, 0x0, 0xcb0d, 0x770f, 0xff, 0x4, 0x81, 0x2, 0x5, 0x1d, 0x0, 0x78, 0xb, 0x5, 0x6, 0x8, 0x9, 0x69, 0x5, 0xfffffff4, 0x7fff, 0x8, 0xe00, 0x0, 0x3, 0x10000, 0x7f, 0x0, 0xfffffff4, 0x15a0, 0xffffff7f, 0x8, 0x5d, 0x800, 0xf94, 0xff, 0x8, 0x2, 0xfffffff9, 0xe, 0xffffbb46, 0x7, 0x4, 0x1, 0x4, 0x5, 0x1000, 0x6, 0x3, 0x1, 0x8, 0x80, 0xc, 0x7, 0x8, 0x2, 0x1, 0x3, 0x1800000, 0x3, 0x5, 0x400, 0x5, 0x9, 0x1, 0x8, 0x2, 0x1000, 0x9, 0x3, 0x6d, 0xfffffffc, 0x1ff, 0xffffffc0, 0x0, 0x5, 0x8, 0x2008, 0x2, 0xf0, 0x5, 0x7, 0x6, 0x4469, 0xb, 0xfffffb4c, 0x80000001, 0xe5f6, 0x0, 0x4, 0xd4, 0xffffffff, 0x200000, 0x9, 0x2, 0x4, 0x5, 0x2, 0x3, 0x8f, 0x7, 0x6, 0x5, 0x4, 0x6d03, 0x8001, 0x9, 0x3, 0x0, 0x8e7a, 0x2, 0x8, 0xfffffff1, 0x5, 0x1000000, 0xfff3, 0x4, 0x1, 0x80000000, 0x3ff, 0x81, 0x100, 0x8, 0xfffffffb, 0x4, 0xfffffffc, 0x1, 0x7, 0x6, 0x3e, 0x43, 0xffff6a70, 0xc, 0xa092, 0x8, 0x877, 0x1, 0x3, 0x800, 0x5, 0x0, 0x8001, 0x48c, 0x7, 0x2, 0x13, 0x3, 0x3, 0x9, 0x0, 0x70000000, 0x2, 0x8, 0x2, 0x1b1c, 0x8, 0xb5, 0x8, 0x401, 0xfff, 0x5, 0x1, 0xa008, 0x9, 0x8, 0xe4, 0x898, 0x7, 0x81, 0x0, 0x1ff, 0x5, 0x80000000, 0x1, 0x8, 0x1, 0x5, 0x4251, 0x6, 0x4, 0x6, 0x4008, 0x200, 0x5, 0x73f7, 0x6, 0x8001, 0x80, 0xd5, 0x6, 0x800000, 0x40, 0xfffffe03, 0x2, 0x80000001, 0x7f, 0xfffffffa, 0xff, 0x4, 0x4b031fcb, 0x7, 0xf3, 0x40, 0xffffffff, 0x1, 0x0, 0x3, 0x6, 0x0, 0x5, 0x6, 0x3, 0x9, 0xfd, 0xd, 0x1000, 0x94, 0xd4f, 0x3, 0xfffffeff, 0xba7, 0x400, 0x4, 0x0, 0x80000001, 0x7, 0x10001, 0xfff, 0x9, 0x2, 0x9, 0x1, 0xfffffff9, 0x6, 0x62, 0x668, 0xffff, 0x0, 0x7, 0x6, 0x0, 0x49, 0x2, 0x5f4, 0x3fd, 0xfffffffe, 0x4, 0x6, 0x9, 0x0, 0x5, 0x4, 0x6, 0x3, 0x1ff, 0xc3f6, 0x7, 0xd8b8, 0xfffffffe, 0xff, 0x8000, 0x7, 0x100, 0x43, 0x2, 0xc7b, 0xe2a0, 0x5, 0x6, 0x81, 0x6, 0x0, 0x3, 0x75c, 0x1, 0x10000, 0x3f, 0x24f7, 0x5, 0x9, 0xd8c, 0x7ffffffd, 0x7, 0xfffff6d2, 0x0, 0x0, 0x3, 0x9, 0x800, 0x5, 0x9, 0x80000000, 0x1, 0x9dcb, 0x8, 0x4, 0x8001, 0x9, 0x7, 0x6, 0x7, 0x81, 0x7ff, 0x0, 0x7, 0x1c00000, 0x5, 0x10, 0x2, 0x1, 0x4, 0xac, 0x8001, 0xb2, 0x4, 0x84f4, 0xf, 0x0, 0x6, 0x6, 0x3ef, 0x7, 0x101, 0x3, 0x4, 0xa, 0x7f, 0x5, 0x2, 0x7ff, 0xffff094f, 0xb, 0x80, 0x6, 0xfffffffd, 0x63, 0xd, 0x7, 0x9, 0x200, 0x9, 0x7, 0x8, 0xa, 0x10001, 0x8, 0xa21, 0x2, 0x9, 0x7, 0xe207, 0xa4, 0x4, 0x5, 0x7, 0x9, 0x0, 0x0, 0x9, 0x1, 0xd, 0x1, 0xf, 0x1, 0x26d1, 0x9, 0x8b000, 0x6, 0x6, 0x5, 0x80000000, 0xfffffffb, 0x8, 0x7, 0xfffffff9, 0x7, 0x4, 0x2, 0x0, 0x80, 0xffff6c99, 0x5, 0x6bed988b, 0x7f, 0x6, 0xffffff7f, 0x7, 0x7, 0x8, 0x4, 0x10000, 0x6, 0x9, 0x40, 0x0, 0x5, 0x0, 0x2, 0x3, 0x10000, 0x8, 0x9, 0x53fa, 0x0, 0x53, 0x9465, 0x9, 0x3, 0x4, 0x36c9, 0x3ff, 0x3, 0x4, 0x8, 0x68, 0x2, 0x81, 0x8, 0xcd94, 0x75e, 0x1000, 0x9, 0x6, 0x0, 0xfffffff7, 0xe, 0x6, 0x3, 0x7, 0x0, 0x6, 0x80000001, 0x731, 0x6, 0x4, 0x8, 0x3, 0x9, 0x7ffffffe, 0x1, 0xfff, 0x4, 0x6, 0x4, 0x4, 0x2, 0x9, 0x6f9, 0x3, 0x8, 0x475e0e15, 0x80000000, 0x5, 0x4, 0xf3e, 0x9, 0x5, 0x0, 0x3, 0xad64, 0xfffffff9, 0x2, 0x3, 0x10000, 0x4, 0xff, 0x400, 0x7f, 0x7f, 0x7, 0x800, 0x40, 0x7, 0x6, 0x8, 0x1a, 0x0, 0x1000, 0xff, 0x10001, 0x8, 0x2, 0xffff, 0x8, 0x100, 0x100, 0x9, 0x9, 0x37, 0x28, 0xfffffff9, 0x7fffffff, 0x4, 0x83b9, 0xb, 0x2, 0x85f2, 0xd7f, 0x7, 0x3ff, 0x1000000, 0x2387c5a4, 0x3, 0x8, 0xbc4e, 0xffff, 0x1, 0x2, 0x408, 0x5, 0x0, 0x5, 0x6, 0x2, 0x6, 0x0, 0x51, 0x5, 0x3, 0x2, 0xfaf0, 0x4a46, 0x4, 0x10001, 0x9, 0x4921bb4d, 0x5c, 0x6, 0x3, 0x7, 0x7fff, 0x80, 0x3, 0x29dc2fdf, 0x200, 0x1, 0x9, 0xd2c, 0x8, 0x3, 0x3, 0x66f, 0x5, 0x4bb6, 0x258d, 0x101, 0x10000, 0x662f, 0x401, 0x5, 0x4, 0x4, 0xd3f6, 0x4, 0x3, 0x4, 0x1, 0xc, 0xbf2, 0xff, 0x7, 0x8002, 0x9, 0x3ff, 0x80000000, 0x9, 0x9, 0x9, 0xf01a, 0x2, 0x1, 0x9, 0x100, 0x0, 0xffffffff, 0x80000001, 0x3, 0x3, 0x6, 0x240000, 0x0, 0x1, 0xfffffffa, 0x45, 0x0, 0x0, 0x8, 0x5, 0x0, 0x3, 0x8a8, 0xa, 0x9, 0x0, 0x7, 0x9, 0x583, 0x8, 0x8, 0x1, 0x10002, 0x9, 0xffffff81, 0x6, 0x400, 0x227, 0x6, 0x8, 0xc442, 0x0, 0x3, 0x3ff, 0x5, 0x82a, 0x4, 0x72d2, 0x7, 0x5, 0x7, 0x4, 0x8, 0x8, 0xea1, 0x0, 0x566, 0x0, 0xfffffffe, 0x7, 0x737, 0x4, 0x6, 0x2, 0x1000, 0x4, 0x8, 0xff, 0x9, 0x7, 0x5, 0x3, 0x9, 0xbcea, 0x7, 0x8000, 0x0, 0x1, 0x1, 0x3, 0x7fff, 0x8, 0x3, 0x4, 0x9, 0x101, 0x1, 0x8, 0x1, 0x6, 0x6, 0x9, 0x7f800, 0x9, 0xd8a8, 0x3, 0x9, 0xfffffffb, 0x8, 0xd0f, 0x7, 0x8, 0x4, 0x1, 0x7, 0x7, 0x8e, 0x5, 0x0, 0x7, 0xfffffffe, 0x81, 0xad3, 0x4, 0x80000001, 0x7, 0x8, 0x80, 0x8, 0x3ff, 0x6, 0xce1, 0x8, 0x80000001, 0xe, 0x1, 0x400002, 0x8000, 0x4, 0x3, 0xb, 0x2, 0x2, 0x6, 0x1, 0xe30, 0x3ff, 0xa7a, 0x8, 0x8, 0x9, 0x2, 0x401, 0x9, 0x9659, 0x400, 0xa83, 0x6, 0xfffffffe, 0x5082, 0x5, 0x6e82, 0xffff, 0x9, 0x7ff, 0x200800, 0xfffffffb, 0xfffffffb, 0x2, 0xd, 0x1, 0xffffff46, 0x7, 0x8000, 0x5d, 0x70d, 0x7fff, 0x3, 0x4, 0x6, 0x7, 0xa6a0, 0x7, 0x9, 0x1, 0xe8b0c95b, 0x9, 0x3, 0x8a2, 0x4, 0x6, 0x2, 0x3, 0x0, 0x7, 0x3, 0x4, 0x4, 0x0, 0xfffffff9, 0xbffeffff, 0xc, 0xfffffff7, 0x1ff, 0x8, 0x7ffc, 0x9, 0x3, 0xfffffff8, 0x1, 0x434, 0x8, 0x3ab, 0x8, 0x6, 0x0, 0x7, 0x4389, 0x7, 0x800, 0x400, 0x4, 0x0, 0x3, 0x5, 0xc94, 0x9, 0x4, 0x0, 0x4, 0x2, 0x401, 0x6, 0x401, 0x8, 0x1, 0xb, 0xe664, 0x0, 0xc, 0x96, 0x7, 0x101, 0xd, 0x2, 0x6, 0xdc, 0xf, 0x1000, 0x8, 0x7, 0x0, 0x0, 0x10001, 0x9, 0x7, 0x0, 0x40000fff, 0xf9, 0xc8, 0x2400, 0x1, 0x400, 0x9, 0x0, 0x8, 0x8, 0x7, 0x5, 0xfffffffb, 0x6b59b47c, 0x2, 0x4, 0xd64, 0x8, 0xc, 0x0, 0x7, 0x0, 0x9, 0x4, 0x80, 0x3, 0x6, 0x10, 0xc, 0x7, 0x8, 0x8, 0x8000, 0x6, 0x979, 0x385, 0xa0, 0x5, 0x8, 0x3d72e35e, 0xfffffff7, 0x9, 0x80000001, 0x8, 0x1a7, 0x7, 0x8, 0x0, 0x3, 0xe83, 0x3, 0x1, 0x3, 0x0, 0x2, 0x9973, 0x3, 0x4, 0x40, 0x40, 0x4, 0x5, 0x412, 0x4, 0x2, 0x5, 0xb4, 0x1ff, 0xc77c0000, 0xffff2c2c, 0x9, 0x8000, 0x47, 0x9, 0xffffff97, 0xffff, 0x3, 0xffffffc0, 0x10001, 0x2, 0xfffffe01, 0x7fff, 0x78, 0x8, 0x0, 0xf, 0x40, 0x8, 0xed, 0x3, 0x9, 0x8, 0x0, 0x1, 0x1, 0x7, 0x800, 0xb, 0x5, 0x5, 0x9, 0x2, 0xd, 0x2, 0x6, 0x101, 0x4, 0x6, 0xa6d2, 0xd, 0x8000, 0x2, 0x9, 0x2, 0x0, 0x0, 0x3ff, 0x7, 0xffffff00, 0x7, 0x7, 0x40, 0x3, 0x101, 0x20000000, 0xdc000000, 0x2, 0xfffffffb, 0x401, 0x6, 0x1, 0x9, 0x4, 0xffffffa2, 0x5, 0x5, 0x9015, 0x6, 0x5, 0x5, 0x14b, 0x0, 0x336, 0xcf, 0xd, 0x5, 0xbbe7, 0xa8eb, 0xd0, 0xb, 0x800, 0x2b18, 0x3ec3, 0x0, 0x9, 0x5, 0x1, 0x8, 0x200, 0x2, 0x0, 0x5, 0xff, 0xc, 0x8, 0x2, 0x2, 0x7, 0x8, 0x10, 0xb46, 0x8, 0x1, 0x5dc60e00, 0x4, 0x9, 0x8, 0xd2, 0x9, 0xffff4a7a, 0x88f, 0xbd, 0x4, 0x6, 0x5, 0x8, 0x9, 0xffffffff, 0xda, 0xe, 0x8001000, 0x7b, 0x9, 0x10001, 0x6, 0x136, 0x36, 0x3a12, 0x9, 0x8, 0x4, 0x8], 0x1, 0x400, 0x3ff}) close_range(r2, 0xffffffffffffffff, 0x0) 15.890838592s ago: executing program 5 (id=939): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xc45, 0x5112, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x7, 0x19, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x200, 0x3, 0x1, {0x22, 0x2d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xff, 0x3}}}}}]}}]}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x18, 0x55, 0x2e5, 0x70bd26, 0x1}, 0x18}, 0x1, 0xfe0f0000, 0x0, 0x2000c844}, 0x20000110) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket(0x2b, 0x80801, 0x1) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r6, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f0000000180)='./file1\x00', 0x4) renameat2(r4, &(0x7f0000000280)='./cgroup\x00', r4, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 15.719751283s ago: executing program 6 (id=941): io_uring_setup(0x4053, &(0x7f0000000040)={0x0, 0x2063, 0x0, 0x2, 0x94}) r0 = getpid() syz_pidfd_open(r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x4000000000000000, 0x0, 0x0, 0x800, 0x300000000, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x1, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 15.233288946s ago: executing program 6 (id=946): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) 10.671878001s ago: executing program 5 (id=955): r0 = socket$can_j1939(0x1d, 0x2, 0x7) pwritev(0xffffffffffffffff, &(0x7f00000016c0)=[{&(0x7f0000000440)="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", 0xa5e}, {0x0}, {&(0x7f00000014c0)="adab5166cf6fe105777fe68d910030b941e95616d75a5ddbfbba628397d0d6562a2fbd1a52561a2289b9698f1d47eff74d5797ff787fd26d381c485d723eee774811fa4a83b928d566343f15db77fa2b1ec1d4c665d754f2144004cb2aa6628cadd66a0076dd9fb8ee3c", 0x6a}, {&(0x7f0000001540)="805601ead2df737078fff122fef392af468e208bfbd7c39e3b1e51cfaeeb84be5dd96dd656491f128850a67530999b5b358de6f3d941ffedc08e9bb4214ecdd739023a9c63f8920e01901685153a9ce7bd2ab0cde978", 0x56}, {&(0x7f0000001640)="e6", 0x1}], 0x5, 0x994, 0x3) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffc, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x2, "e5410e86db87a41f716be8e1fa0fe2fb143899778cc5c15c1337404bb397c0fc", "0c17d7b032591c2a7eb609eb8d2d9d15", {"28cbbe8b3bc8849d1e6124e7e5913283", "0080200000002000d300000000000400"}}}}}}}, 0x0) r1 = syz_open_dev$media(0x0, 0x4007, 0x440) read$FUSE(r1, 0x0, 0x0) r2 = io_uring_setup(0x937, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x0, 0x35d}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[], 0x24}}, 0x4000) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r5, 0x1, 0x14, 0x15, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}, 0x1, 0x700}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd", 0x19) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r8, 0x7b2, &(0x7f0000000140)={&(0x7f0000000300)=[0x4, 0x6, 0x1, 0x9, 0x5, 0x401, 0x200, 0x4, 0x0, 0xcb0d, 0x770f, 0xff, 0x4, 0x81, 0x2, 0x5, 0x1d, 0x0, 0x78, 0xb, 0x5, 0x6, 0x8, 0x9, 0x69, 0x5, 0xfffffff4, 0x7fff, 0x8, 0xe00, 0x0, 0x3, 0x10000, 0x7f, 0x0, 0xfffffff4, 0x15a0, 0xffffff7f, 0x8, 0x5d, 0x800, 0xf94, 0xff, 0x8, 0x2, 0xfffffff9, 0xe, 0xffffbb46, 0x7, 0x4, 0x1, 0x4, 0x5, 0x1000, 0x6, 0x3, 0x1, 0x8, 0x80, 0xc, 0x7, 0x8, 0x2, 0x1, 0x3, 0x1800000, 0x3, 0x5, 0x400, 0x5, 0x9, 0x1, 0x8, 0x2, 0x1000, 0x9, 0x3, 0x6d, 0xfffffffc, 0x1ff, 0xffffffc0, 0x0, 0x5, 0x8, 0x2008, 0x2, 0xf0, 0x5, 0x7, 0x6, 0x4469, 0xb, 0xfffffb4c, 0x80000001, 0xe5f6, 0x0, 0x4, 0xd4, 0xffffffff, 0x200000, 0x9, 0x2, 0x4, 0x5, 0x2, 0x3, 0x8f, 0x7, 0x6, 0x5, 0x4, 0x6d03, 0x8001, 0x9, 0x3, 0x0, 0x8e7a, 0x2, 0x8, 0xfffffff1, 0x5, 0x1000000, 0xfff3, 0x4, 0x1, 0x80000000, 0x3ff, 0x81, 0x100, 0x8, 0xfffffffb, 0x4, 0xfffffffc, 0x1, 0x7, 0x6, 0x3e, 0x43, 0xffff6a70, 0xc, 0xa092, 0x8, 0x877, 0x1, 0x3, 0x800, 0x5, 0x0, 0x8001, 0x48c, 0x7, 0x2, 0x13, 0x3, 0x3, 0x9, 0x0, 0x70000000, 0x2, 0x8, 0x2, 0x1b1c, 0x8, 0xb5, 0x8, 0x401, 0xfff, 0x5, 0x1, 0xa008, 0x9, 0x8, 0xe4, 0x898, 0x7, 0x81, 0x0, 0x1ff, 0x5, 0x80000000, 0x1, 0x8, 0x1, 0x5, 0x4251, 0x6, 0x4, 0x6, 0x4008, 0x200, 0x5, 0x73f7, 0x6, 0x8001, 0x80, 0xd5, 0x6, 0x800000, 0x40, 0xfffffe03, 0x2, 0x80000001, 0x7f, 0xfffffffa, 0xff, 0x4, 0x4b031fcb, 0x7, 0xf3, 0x40, 0xffffffff, 0x1, 0x0, 0x3, 0x6, 0x0, 0x5, 0x6, 0x3, 0x9, 0xfd, 0xd, 0x1000, 0x94, 0xd4f, 0x3, 0xfffffeff, 0xba7, 0x400, 0x4, 0x0, 0x80000001, 0x7, 0x10001, 0xfff, 0x9, 0x2, 0x9, 0x1, 0xfffffff9, 0x6, 0x62, 0x668, 0xffff, 0x0, 0x7, 0x6, 0x0, 0x49, 0x2, 0x5f4, 0x3fd, 0xfffffffe, 0x4, 0x6, 0x9, 0x0, 0x5, 0x4, 0x6, 0x3, 0x1ff, 0xc3f6, 0x7, 0xd8b8, 0xfffffffe, 0xff, 0x8000, 0x7, 0x100, 0x43, 0x2, 0xc7b, 0xe2a0, 0x5, 0x6, 0x81, 0x6, 0x0, 0x3, 0x75c, 0x1, 0x10000, 0x3f, 0x24f7, 0x5, 0x9, 0xd8c, 0x7ffffffd, 0x7, 0xfffff6d2, 0x0, 0x0, 0x3, 0x9, 0x800, 0x5, 0x9, 0x80000000, 0x1, 0x9dcb, 0x8, 0x4, 0x8001, 0x9, 0x7, 0x6, 0x7, 0x81, 0x7ff, 0x0, 0x7, 0x1c00000, 0x5, 0x10, 0x2, 0x1, 0x4, 0xac, 0x8001, 0xb2, 0x4, 0x84f4, 0xf, 0x0, 0x6, 0x6, 0x3ef, 0x7, 0x101, 0x3, 0x4, 0xa, 0x7f, 0x5, 0x2, 0x7ff, 0xffff094f, 0xb, 0x80, 0x6, 0xfffffffd, 0x63, 0xd, 0x7, 0x9, 0x200, 0x9, 0x7, 0x8, 0xa, 0x10001, 0x8, 0xa21, 0x2, 0x9, 0x7, 0xe207, 0xa4, 0x4, 0x5, 0x7, 0x9, 0x0, 0x0, 0x9, 0x1, 0xd, 0x1, 0xf, 0x1, 0x26d1, 0x9, 0x8b000, 0x6, 0x6, 0x5, 0x80000000, 0xfffffffb, 0x8, 0x7, 0xfffffff9, 0x7, 0x4, 0x2, 0x0, 0x80, 0xffff6c99, 0x5, 0x6bed988b, 0x7f, 0x6, 0xffffff7f, 0x7, 0x7, 0x8, 0x4, 0x10000, 0x6, 0x9, 0x40, 0x0, 0x5, 0x0, 0x2, 0x3, 0x10000, 0x8, 0x9, 0x53fa, 0x0, 0x53, 0x9465, 0x9, 0x3, 0x4, 0x36c9, 0x3ff, 0x3, 0x4, 0x8, 0x68, 0x2, 0x81, 0x8, 0xcd94, 0x75e, 0x1000, 0x9, 0x6, 0x0, 0xfffffff7, 0xe, 0x6, 0x3, 0x7, 0x0, 0x6, 0x80000001, 0x731, 0x6, 0x4, 0x8, 0x3, 0x9, 0x7ffffffe, 0x1, 0xfff, 0x4, 0x6, 0x4, 0x4, 0x2, 0x9, 0x6f9, 0x3, 0x8, 0x475e0e15, 0x80000000, 0x5, 0x4, 0xf3e, 0x9, 0x5, 0x0, 0x3, 0xad64, 0xfffffff9, 0x2, 0x3, 0x10000, 0x4, 0xff, 0x400, 0x7f, 0x7f, 0x7, 0x800, 0x40, 0x7, 0x6, 0x8, 0x1a, 0x0, 0x1000, 0xff, 0x10001, 0x8, 0x2, 0xffff, 0x8, 0x100, 0x100, 0x9, 0x9, 0x37, 0x28, 0xfffffff9, 0x7fffffff, 0x4, 0x83b9, 0xb, 0x2, 0x85f2, 0xd7f, 0x7, 0x3ff, 0x1000000, 0x2387c5a4, 0x3, 0x8, 0xbc4e, 0xffff, 0x1, 0x2, 0x408, 0x5, 0x0, 0x5, 0x6, 0x2, 0x6, 0x0, 0x51, 0x5, 0x3, 0x2, 0xfaf0, 0x4a46, 0x4, 0x10001, 0x9, 0x4921bb4d, 0x5c, 0x6, 0x3, 0x7, 0x7fff, 0x80, 0x3, 0x29dc2fdf, 0x200, 0x1, 0x9, 0xd2c, 0x8, 0x3, 0x3, 0x66f, 0x5, 0x4bb6, 0x258d, 0x101, 0x10000, 0x662f, 0x401, 0x5, 0x4, 0x4, 0xd3f6, 0x4, 0x3, 0x4, 0x1, 0xc, 0xbf2, 0xff, 0x7, 0x8002, 0x9, 0x3ff, 0x80000000, 0x9, 0x9, 0x9, 0xf01a, 0x2, 0x1, 0x9, 0x100, 0x0, 0xffffffff, 0x80000001, 0x3, 0x3, 0x6, 0x240000, 0x0, 0x1, 0xfffffffa, 0x45, 0x0, 0x0, 0x8, 0x5, 0x0, 0x3, 0x8a8, 0xa, 0x9, 0x0, 0x7, 0x9, 0x583, 0x8, 0x8, 0x1, 0x10002, 0x9, 0xffffff81, 0x6, 0x400, 0x227, 0x6, 0x8, 0xc442, 0x0, 0x3, 0x3ff, 0x5, 0x82a, 0x4, 0x72d2, 0x7, 0x5, 0x7, 0x4, 0x8, 0x8, 0xea1, 0x0, 0x566, 0x0, 0xfffffffe, 0x7, 0x737, 0x4, 0x6, 0x2, 0x1000, 0x4, 0x8, 0xff, 0x9, 0x7, 0x5, 0x3, 0x9, 0xbcea, 0x7, 0x8000, 0x0, 0x1, 0x1, 0x3, 0x7fff, 0x8, 0x3, 0x4, 0x9, 0x101, 0x1, 0x8, 0x1, 0x6, 0x6, 0x9, 0x7f800, 0x9, 0xd8a8, 0x3, 0x9, 0xfffffffb, 0x8, 0xd0f, 0x7, 0x8, 0x4, 0x1, 0x7, 0x7, 0x8e, 0x5, 0x0, 0x7, 0xfffffffe, 0x81, 0xad3, 0x4, 0x80000001, 0x7, 0x8, 0x80, 0x8, 0x3ff, 0x6, 0xce1, 0x8, 0x80000001, 0xe, 0x1, 0x400002, 0x8000, 0x4, 0x3, 0xb, 0x2, 0x2, 0x6, 0x1, 0xe30, 0x3ff, 0xa7a, 0x8, 0x8, 0x9, 0x2, 0x401, 0x9, 0x9659, 0x400, 0xa83, 0x6, 0xfffffffe, 0x5082, 0x5, 0x6e82, 0xffff, 0x9, 0x7ff, 0x200800, 0xfffffffb, 0xfffffffb, 0x2, 0xd, 0x1, 0xffffff46, 0x7, 0x8000, 0x5d, 0x70d, 0x7fff, 0x3, 0x4, 0x6, 0x7, 0xa6a0, 0x7, 0x9, 0x1, 0xe8b0c95b, 0x9, 0x3, 0x8a2, 0x4, 0x6, 0x2, 0x3, 0x0, 0x7, 0x3, 0x4, 0x4, 0x0, 0xfffffff9, 0xbffeffff, 0xc, 0xfffffff7, 0x1ff, 0x8, 0x7ffc, 0x9, 0x3, 0xfffffff8, 0x1, 0x434, 0x8, 0x3ab, 0x8, 0x6, 0x0, 0x7, 0x4389, 0x7, 0x800, 0x400, 0x4, 0x0, 0x3, 0x5, 0xc94, 0x9, 0x4, 0x0, 0x4, 0x2, 0x401, 0x6, 0x401, 0x8, 0x1, 0xb, 0xe664, 0x0, 0xc, 0x96, 0x7, 0x101, 0xd, 0x2, 0x6, 0xdc, 0xf, 0x1000, 0x8, 0x7, 0x0, 0x0, 0x10001, 0x9, 0x7, 0x0, 0x40000fff, 0xf9, 0xc8, 0x2400, 0x1, 0x400, 0x9, 0x0, 0x8, 0x8, 0x7, 0x5, 0xfffffffb, 0x6b59b47c, 0x2, 0x4, 0xd64, 0x8, 0xc, 0x0, 0x7, 0x0, 0x9, 0x4, 0x80, 0x3, 0x6, 0x10, 0xc, 0x7, 0x8, 0x8, 0x8000, 0x6, 0x979, 0x385, 0xa0, 0x5, 0x8, 0x3d72e35e, 0xfffffff7, 0x9, 0x80000001, 0x8, 0x1a7, 0x7, 0x8, 0x0, 0x3, 0xe83, 0x3, 0x1, 0x3, 0x0, 0x2, 0x9973, 0x3, 0x4, 0x40, 0x40, 0x4, 0x5, 0x412, 0x4, 0x2, 0x5, 0xb4, 0x1ff, 0xc77c0000, 0xffff2c2c, 0x9, 0x8000, 0x47, 0x9, 0xffffff97, 0xffff, 0x3, 0xffffffc0, 0x10001, 0x2, 0xfffffe01, 0x7fff, 0x78, 0x8, 0x0, 0xf, 0x40, 0x8, 0xed, 0x3, 0x9, 0x8, 0x0, 0x1, 0x1, 0x7, 0x800, 0xb, 0x5, 0x5, 0x9, 0x2, 0xd, 0x2, 0x6, 0x101, 0x4, 0x6, 0xa6d2, 0xd, 0x8000, 0x2, 0x9, 0x2, 0x0, 0x0, 0x3ff, 0x7, 0xffffff00, 0x7, 0x7, 0x40, 0x3, 0x101, 0x20000000, 0xdc000000, 0x2, 0xfffffffb, 0x401, 0x6, 0x1, 0x9, 0x4, 0xffffffa2, 0x5, 0x5, 0x9015, 0x6, 0x5, 0x5, 0x14b, 0x0, 0x336, 0xcf, 0xd, 0x5, 0xbbe7, 0xa8eb, 0xd0, 0xb, 0x800, 0x2b18, 0x3ec3, 0x0, 0x9, 0x5, 0x1, 0x8, 0x200, 0x2, 0x0, 0x5, 0xff, 0xc, 0x8, 0x2, 0x2, 0x7, 0x8, 0x10, 0xb46, 0x8, 0x1, 0x5dc60e00, 0x4, 0x9, 0x8, 0xd2, 0x9, 0xffff4a7a, 0x88f, 0xbd, 0x4, 0x6, 0x5, 0x8, 0x9, 0xffffffff, 0xda, 0xe, 0x8001000, 0x7b, 0x9, 0x10001, 0x6, 0x136, 0x36, 0x3a12, 0x9, 0x8, 0x4, 0x8], 0x1, 0x400, 0x3ff}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4008000) close_range(r2, 0xffffffffffffffff, 0x0) 10.429671496s ago: executing program 6 (id=957): unshare(0x24060400) ppoll(&(0x7f0000000500)=[{0xffffffffffffffff, 0x100}], 0x1, 0x0, 0x0, 0x0) 9.679494154s ago: executing program 0 (id=958): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) unshare(0x8040600) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 9.09222095s ago: executing program 5 (id=961): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000000101010100"], 0x44}}, 0x4000) 8.966044295s ago: executing program 0 (id=962): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {0x1, @local}, 0x4a, {0x2, 0x4e23, @dev}}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @multicast1}, {0x0, @broadcast}, 0xe, {0x2, 0x4e20, @remote}, 'ip6tnl0\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) 8.338312522s ago: executing program 1 (id=963): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x6, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000040), &(0x7f00000001c0)=r0}, 0x20) 8.338046936s ago: executing program 4 (id=964): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r2, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 8.30081773s ago: executing program 6 (id=965): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x88ce359bdb10043d, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r2, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x1000}, 0x4040080) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect$uac1(0x0, 0x9e, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, 0x0, 0x4400d040) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x4000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r6, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x3c}}, 0x8040) 8.112160761s ago: executing program 1 (id=966): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x40, 0x107, 0xfffffffc, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x1142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@typed={0x8, 0x17, 0x0, 0x0, @ipv4=@empty=0x4000000}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048051}, 0xc000) 7.982459399s ago: executing program 0 (id=967): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x20008840) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 7.982087367s ago: executing program 5 (id=968): madvise(&(0x7f000015c000/0x3000)=nil, 0x3000, 0x4) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) msync(&(0x7f0000074000/0x3000)=nil, 0x3000, 0x4) r0 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) mbind(&(0x7f0000352000/0x4000)=nil, 0x4000, 0x8000, 0x0, 0x4b, 0x7) sched_setaffinity(0x0, 0x0, 0x0) 7.857366738s ago: executing program 4 (id=969): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000280)={'\x00', 0xfffc, 0x5, 0x0, 0x0, 0x0, 0x0, 0xdddd1000, '\x00', 0x7}) 7.596972044s ago: executing program 1 (id=970): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x240}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x2, 0x8}, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6c, 0x9, 0x4, 0x400001, 0x3, 0x5, 0x101, 0xffc, 0x4, 0x600, 0x3, 0x1, 0xfffffffa, 0x3, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11003, 0x1, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x1000, 0x4007, 0x8b, 0x5, 0x4, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x9, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x3, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x5, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 7.428052064s ago: executing program 0 (id=971): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000003ec0)={0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0, 0x0, &(0x7f0000003c00)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x58}}], 0x30, 0x54}, 0x4000000) 7.03956172s ago: executing program 1 (id=972): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = inotify_init1(0x80000) r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x400) r2 = dup(r0) read$FUSE(r2, &(0x7f00000042c0)={0x2020}, 0x2020) inotify_rm_watch(r2, r1) 7.039123176s ago: executing program 4 (id=973): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20064}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) 6.83664697s ago: executing program 0 (id=974): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000140)={0x7, {{0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}}}, 0x88) setsockopt$inet_int(r0, 0x0, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, 0x0, 0x0) r5 = io_uring_setup(0x1ddd, &(0x7f0000000440)={0x0, 0x40000000, 0x0, 0x1, 0x8}) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, 0x0, 0x1) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0x9, 0x4, 0x0, 0x0, 0x2) futex(0x0, 0xc, 0x1, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x40, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c10000090780000"], 0x0) 6.501002329s ago: executing program 4 (id=975): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2004000, &(0x7f00000022c0)={[{@jqfmt_vfsv1}, {@errors_remount}, {@abort}]}, 0x1, 0x563, &(0x7f00000007c0)="$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") chdir(&(0x7f0000000100)='./file0\x00') stat(&(0x7f0000000140)='./file0\x00', 0x0) 4.331492651s ago: executing program 6 (id=976): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x140) getdents(r0, &(0x7f0000001f80)=""/55, 0x37) lseek(r0, 0x7b3187471, 0x0) 3.791362836s ago: executing program 0 (id=977): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000020c0), 0x0, &(0x7f0000000580)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x10001}}]}}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket(0x1d, 0x2, 0x6) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000400)={@rand_addr=' \x01\x00', 0x6, 0x0, 0x0, 0x0, 0x280, 0xf4}, &(0x7f0000000440)=0x20) mq_open(&(0x7f0000000240)='ba\x01adv_slave_1\x00', 0x8c2, 0x30, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0xff00, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) sendmsg$nl_generic(r0, 0x0, 0x4040) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') mount_setattr(r4, &(0x7f0000000000)='./file0\x00', 0x900, &(0x7f00000000c0)={0x0, 0x80, 0x180000}, 0x20) 3.76007064s ago: executing program 4 (id=978): open_tree(0xffffffffffffff9c, 0x0, 0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) mremap(&(0x7f0000406000/0x1000)=nil, 0x1000, 0x2000, 0x2, &(0x7f0000a96000/0x2000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000180)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000000a80)=[{0x0}, {0x0}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f0000000980)=""/234, 0xea}, {0x0}, {0x0}], 0x6, 0x0) 3.655099604s ago: executing program 1 (id=979): r0 = socket(0x11, 0x3, 0x0) bind$packet(r0, 0x0, 0x0) 3.461523211s ago: executing program 6 (id=980): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 2.618583857s ago: executing program 5 (id=981): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000100)={[{@nls={'nls', 0x3d, 'cp852'}}, {}, {@part={'part', 0x3d, 0x9}}, {@part={'part', 0x3d, 0x9}}]}, 0x1, 0x5ea, &(0x7f0000002f40)="$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") syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f0000001180)) 2.406165627s ago: executing program 1 (id=982): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2400000002031f001cfffd946fa2830020200a800900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) r2 = socket$inet(0x10, 0x3, 0xc) r3 = socket(0x2, 0x2, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random}) bind$unix(r3, &(0x7f0000000000)=@abs, 0x6e) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000080), 0x4) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="2400000001031f001cfffd946fa2830020200a800900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYBLOB="8984ea6822b61c9bb69beab6e35eae69437c8f829c35c28ebaad1a0d926ff2388235500a6433e9a1c36dcb094bb211c78eea11b2ce417cf83e5f7fd9db04e6f1fde301fe42d808181e3c0b56e430843e1c3dc4a226576a00d2e18598f7626ac16a2dfffddf9a40f7aacfbaf9e41ddbe5be32aae6bb85df869ec93f941c2d0ad63623ad4fb93ee904839e5e4a29", @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0400268073b712b7ea46d927874ae80e42270e23707ff496287e1b0013f6e43a8385c820720eddc9cdaa29cc7abc0000000c003f0000000000000002000d00d880fc8cd828b704001880000000872dbabf04e79912548c2fe9ac2b28ebb91a02adeb0e89fac194f81a94f00d8e4c5c27ae6d83671d383ee2612e5764749d234069aa3b81f4e5707b7bfa7c7e67c9dfbb2ee974b282aa79b6c69c56debaf4749d43354e5db6bff424d6d15abe353a582bd87dab76a6075566a419610127a2f2a4df7c3d8407b73c667770f5445674871db43e2b7304405587059b16717bcdcfad1267b1f34563f9369d0aa5da400708000500", @ANYBLOB="0000000100", @ANYRES8=r3, @ANYBLOB="7509cb30d4c4c7e5f5c68fa5729303ca4334c8f52dd0b63db17dde721dbce0dd4922a9bc0a683c780d6d98c9d90c2be69c34cf8d258e2163bddd104ab6b7983f9015ab32d7a7dcbd96a0de5ec32607826439df8bf53f"], 0x61c}], 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xc4}}, 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)={0x6, 0x0, 0x7, 0xf9, 0x635}) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r7, r7, 0xd, 0x3, &(0x7f0000000040)="ee7d00", 0x9, 0x1, 0x16c0, 0x5505, 0x8b, 0x1, 0x9, 'syz0\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004900010928bd700018dcdf250aff80", @ANYRES32, @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb080002"], 0x54}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x2, 0xa) 0s ago: executing program 4 (id=983): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x84, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x4e, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}, {"c4f01c3dcf33f373ae57d1011972da843be9c22651034743ac7732171e7567df8178d355ff37613db10939b78cb683f7f8fdb9999468f1822edc"}}}}}}}, 0x0) kernel console output (not intermixed with test programs): 9507] bridge_slave_1: entered allmulticast mode [ 683.996508][ T9507] bridge_slave_1: entered promiscuous mode [ 684.243782][ T5681] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 684.464269][ T5681] usb 1-1: Using ep0 maxpacket: 32 [ 684.504870][ T5681] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.544057][ T5681] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.558215][ T9507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.617212][ T5681] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 684.638044][ T9507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.659782][ T5681] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 684.690249][ T5681] usb 1-1: Product: syz [ 684.703535][ T5681] usb 1-1: Manufacturer: syz [ 684.775859][ T5681] hub 1-1:4.0: USB hub found [ 685.108670][ T9507] team0: Port device team_slave_0 added [ 685.180126][ T9507] team0: Port device team_slave_1 added [ 685.252280][ T9664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.733'. [ 685.671756][ T9507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.695301][ T9507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.826122][ T9507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.874469][ T9668] binder: 9666:9668 ioctl c0306201 200000000080 returned -14 [ 685.900303][ T9507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.936825][ T9507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.958660][ T9669] binder: 9666:9669 ioctl c0306201 2000000003c0 returned -14 [ 686.023801][ T9507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.050735][ T5224] 8021q: adding VLAN 0 to HW filter on device eth5 [ 686.665489][ T9507] hsr_slave_0: entered promiscuous mode [ 686.710791][ T9507] hsr_slave_1: entered promiscuous mode [ 686.744853][ T9675] loop4: detected capacity change from 0 to 256 [ 686.788433][ T9675] exfat: Deprecated parameter 'utf8' [ 686.808969][ T9675] exfat: Deprecated parameter 'namecase' [ 686.829460][ T9675] exfat: Deprecated parameter 'namecase' [ 686.971631][ T9675] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 687.390699][ T9677] loop1: detected capacity change from 0 to 2048 [ 687.549827][ T9677] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 687.677991][ T9677] UDF-fs: warning (device loop1): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 687.904390][ T9679] loop2: detected capacity change from 0 to 32768 [ 687.914222][ T9679] btrfs: Deprecated parameter 'usebackuproot' [ 687.920505][ T9679] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 687.936961][ T5681] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 687.945469][ T9679] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.737 (9679) [ 687.966309][ T9679] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 687.976762][ T9679] BTRFS info (device loop2): using crc32c checksum algorithm [ 688.120894][ T7967] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 688.225241][ T9679] BTRFS error (device loop2): failed to load root extent [ 688.233514][ T9679] BTRFS warning (device loop2): try to load backup roots slot 1 [ 688.290673][ T7972] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 688.380136][ T9679] BTRFS warning (device loop2): couldn't read tree root [ 688.387664][ T9679] BTRFS warning (device loop2): try to load backup roots slot 2 [ 688.399138][ T7967] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 688.553851][ T9679] BTRFS warning (device loop2): couldn't read tree root [ 688.561170][ T9679] BTRFS warning (device loop2): try to load backup roots slot 3 [ 688.739518][ T9679] BTRFS info (device loop2): rebuilding free space tree [ 688.805570][ T5681] usb 1-1: USB disconnect, device number 29 [ 688.821066][ T9679] BTRFS info (device loop2): checking UUID tree [ 688.829004][ T9679] BTRFS info (device loop2): enabling ssd optimizations [ 688.836392][ T9679] BTRFS info (device loop2): using spread ssd allocation scheme [ 688.844381][ T9679] BTRFS info (device loop2): turning on async discard [ 688.851322][ T9679] BTRFS info (device loop2): enabling free space tree [ 688.863094][ T9679] BTRFS info (device loop2): force clearing of disk cache [ 688.870399][ T9679] BTRFS info (device loop2): enabling auto defrag [ 688.879028][ T9679] BTRFS info (device loop2): trying to use backup root at mount time [ 688.887498][ T9679] BTRFS info (device loop2): force zlib compression, level 3 [ 688.941781][ T9695] loop4: detected capacity change from 0 to 32768 [ 688.951283][ T9695] btrfs: Deprecated parameter 'usebackuproot' [ 688.959786][ T9695] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 688.971120][ T9695] BTRFS info: device /dev/loop4 (7:4) using temp-fsid 6913e70a-cdd3-4dd3-b850-5b89ac18eab3 [ 688.981657][ T9695] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.739 (9695) [ 689.014406][ T9695] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 689.025835][ T9695] BTRFS info (device loop4): using crc32c checksum algorithm [ 689.042967][ T9695] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 689.197871][ T7977] BTRFS warning (device loop4): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb0e5ffa5 level 0 [ 689.274747][ T9695] BTRFS warning (device loop4): couldn't read tree root [ 689.281968][ T9695] BTRFS warning (device loop4): try to load backup roots slot 1 [ 689.303790][ T7977] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x32d10ca2 level 0 [ 689.422121][ T9695] BTRFS warning (device loop4): couldn't read tree root [ 689.429546][ T9695] BTRFS warning (device loop4): try to load backup roots slot 2 [ 689.445825][ T6828] BTRFS warning (device loop4): checksum verify failed on logical 5255168 mirror 1 wanted 0x9df47653 found 0x6344b7f5 level 1 [ 689.526219][ T9695] BTRFS warning (device loop4): couldn't read tree root [ 689.536090][ T9695] BTRFS warning (device loop4): try to load backup roots slot 3 [ 689.581687][ T9695] BTRFS info (device loop4): rebuilding free space tree [ 689.620597][ T9695] BTRFS info (device loop4): disabling free space tree [ 689.620839][ T5586] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 689.628004][ T9695] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 689.648219][ T9695] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 689.670014][ T4869] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 689.686172][ T9695] BTRFS info (device loop4): checking UUID tree [ 689.701084][ T9695] BTRFS info (device loop4): enabling ssd optimizations [ 689.708419][ T9695] BTRFS info (device loop4): turning off barriers [ 689.717198][ T9695] BTRFS info (device loop4): turning on sync discard [ 689.724666][ T9695] BTRFS info (device loop4): enabling disk space caching [ 689.731887][ T9695] BTRFS info (device loop4): force clearing of disk cache [ 689.739374][ T9695] BTRFS info (device loop4): enabling auto defrag [ 689.746162][ T9695] BTRFS info (device loop4): trying to use backup root at mount time [ 689.754575][ T9695] BTRFS info (device loop4): max_inline set to 0 [ 689.923486][ T9695] netlink: 56 bytes leftover after parsing attributes in process `syz.4.739'. [ 690.488309][ T9729] netlink: 'syz.2.742': attribute type 10 has an invalid length. [ 690.827242][ T9729] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.923494][ T9729] bond0: (slave team0): Enslaving as an active interface with an up link [ 692.159965][ T9739] ptrace attach of "ci-upstream-kmsan-gce-root/syz-executor exec"[5586] was attempted by "\x0a Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ ,ê  ÷ ÿÿ \x07 ./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 692.164890][ T9737] loop1: detected capacity change from 0 to 32768 [ 692.265247][ T9737] btrfs: Deprecated parameter 'usebackuproot' [ 692.265341][ T9737] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 692.327589][ T9737] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.744 (9737) [ 692.360959][ T9737] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 692.371530][ T9737] BTRFS info (device loop1): using crc32c checksum algorithm [ 692.379485][ T9737] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 692.558149][ T6828] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb0e5ffa5 level 0 [ 692.659452][ T9737] BTRFS warning (device loop1): couldn't read tree root [ 692.667143][ T9737] BTRFS warning (device loop1): try to load backup roots slot 1 [ 692.676358][ T6828] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x32d10ca2 level 0 [ 692.690049][ T9737] BTRFS warning (device loop1): couldn't read tree root [ 692.697832][ T9737] BTRFS warning (device loop1): try to load backup roots slot 2 [ 692.706595][ T6828] BTRFS warning (device loop1): checksum verify failed on logical 5255168 mirror 1 wanted 0x9df47653 found 0x6344b7f5 level 1 [ 692.720294][ T9737] BTRFS warning (device loop1): couldn't read tree root [ 692.731989][ T9737] BTRFS warning (device loop1): try to load backup roots slot 3 [ 692.806253][ T9737] BTRFS info (device loop1): rebuilding free space tree [ 692.856956][ T9737] BTRFS info (device loop1): disabling free space tree [ 692.859408][ T5593] BTRFS info (device loop4): last unmount of filesystem 6913e70a-cdd3-4dd3-b850-5b89ac18eab3 [ 692.864189][ T9737] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 692.864312][ T9737] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 692.926336][ T9737] BTRFS info (device loop1): checking UUID tree [ 692.974238][ T9737] BTRFS info (device loop1): enabling ssd optimizations [ 692.981476][ T9737] BTRFS info (device loop1): turning off barriers [ 692.988244][ T9737] BTRFS info (device loop1): turning on sync discard [ 692.995287][ T9737] BTRFS info (device loop1): enabling disk space caching [ 693.002697][ T9737] BTRFS info (device loop1): force clearing of disk cache [ 693.009998][ T9737] BTRFS info (device loop1): enabling auto defrag [ 693.018725][ T9737] BTRFS info (device loop1): trying to use backup root at mount time [ 693.027256][ T9737] BTRFS info (device loop1): max_inline set to 0 [ 693.141577][ T9737] netlink: 56 bytes leftover after parsing attributes in process `syz.1.744'. [ 693.410684][ T9761] loop2: detected capacity change from 0 to 512 [ 693.555647][ T9761] EXT4-fs (loop2): 1 truncate cleaned up [ 693.634190][ T9761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 693.863353][ T9507] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 693.913338][ T29] audit: type=1800 audit(1777788597.065:12): pid=9761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.747" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 694.044394][ T9507] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 694.109320][ T9507] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 694.253305][ T9507] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 694.341331][ T9507] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 694.505609][ T9507] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 694.598558][ T9507] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 694.775938][ T9507] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 695.204482][ T5586] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 695.306693][ T5586] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 695.435087][ T5581] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 695.496082][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.504207][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 696.495518][ T5586] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.582008][ T6828] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.010290][ T6828] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.063570][ T8255] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 697.123597][ T9784] loop1: detected capacity change from 0 to 4096 [ 697.196396][ T9784] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 697.265434][ T8255] usb 5-1: Using ep0 maxpacket: 32 [ 697.301885][ T6828] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.303252][ T8255] usb 5-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 697.402129][ T8255] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.569676][ T8255] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:16.0/input/input19 [ 697.628529][ T6828] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.737997][ T9790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.870284][ T9790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.985328][ T4915] bcm5974 5-1:16.0: could not read from device [ 698.057941][ T9507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.071951][ T4915] bcm5974 5-1:16.0: could not read from device [ 698.153413][ T4915] bcm5974 5-1:16.0: could not read from device [ 698.187075][ T8255] usb 5-1: USB disconnect, device number 29 [ 698.225778][ T4915] bcm5974 5-1:16.0: could not read from device [ 698.838773][ T9507] 8021q: adding VLAN 0 to HW filter on device team0 [ 698.876922][ T6828] bridge_slave_1: left allmulticast mode [ 698.934476][ T6828] bridge_slave_1: left promiscuous mode [ 698.960876][ T6828] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.045239][ T6828] bridge_slave_0: left allmulticast mode [ 699.075989][ T6828] bridge_slave_0: left promiscuous mode [ 699.103580][ T6828] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.969363][ T6828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 700.004863][ T6828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 700.046344][ T6828] bond0 (unregistering): (slave team0): Releasing backup interface [ 700.079525][ T6828] bond0 (unregistering): Released all slaves [ 700.266241][ T7975] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.273829][ T7975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.428364][ T6828] IPVS: stopping backup sync thread 7274 ... [ 700.439140][ T7975] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.446711][ T7975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.349064][ T4869] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 701.358724][ T4869] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 701.369086][ T4869] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 701.384863][ T4869] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 701.401067][ T4869] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 701.561839][ T6828] hsr_slave_0: left promiscuous mode [ 701.591433][ T6828] hsr_slave_1: left promiscuous mode [ 701.628793][ T6828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 701.661016][ T6828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 701.695396][ T6828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 701.721539][ T6828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 701.746687][ T9818] loop0: detected capacity change from 0 to 4096 [ 701.814336][ T6828] veth1_macvtap: left promiscuous mode [ 701.842750][ T6828] veth0_macvtap: left promiscuous mode [ 701.874133][ T6828] veth1_vlan: left promiscuous mode [ 701.904497][ T6828] veth0_vlan: left promiscuous mode [ 701.965309][ T9821] loop1: detected capacity change from 0 to 32768 [ 702.002098][ T9821] (syz.1.761,9821,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 702.017209][ T9821] (syz.1.761,9821,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 702.058224][ T9821] JBD2: Ignoring recovery information on journal [ 702.217654][ T9821] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 702.245271][ T9831] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 702.407858][ T29] audit: type=1800 audit(1777788605.565:13): pid=9821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.761" name="file0" dev="loop1" ino=16983 res=0 errno=0 [ 702.711032][ T5581] ocfs2: Unmounting device (7,1) on (node local) [ 703.299597][ T9840] loop4: detected capacity change from 0 to 256 [ 703.386699][ T9840] vfat: Unknown parameter 'shortnme' [ 703.473248][ T4869] Bluetooth: hci3: command tx timeout [ 704.107363][ T9843] loop0: detected capacity change from 0 to 4096 [ 704.170239][ T9843] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 704.837431][ T6828] team0 (unregistering): Port device team_slave_1 removed [ 704.999246][ T6828] team0 (unregistering): Port device team_slave_0 removed [ 705.553389][ T4869] Bluetooth: hci3: command tx timeout [ 706.163161][ T4893] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 706.373996][ T4893] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.418370][ T4893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 706.477885][ T4893] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 706.544452][ T4893] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 706.616866][ T4893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.699884][ T4893] usb 2-1: config 0 descriptor?? [ 707.028405][ T4893] usb 2-1: USB disconnect, device number 22 [ 707.633411][ T4869] Bluetooth: hci3: command tx timeout [ 708.779975][ T9886] loop1: detected capacity change from 0 to 512 [ 708.875047][ T9889] loop4: detected capacity change from 0 to 256 [ 708.903990][ T9889] exfat: Deprecated parameter 'utf8' [ 708.911773][ T9886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 708.924806][ T9889] exfat: Deprecated parameter 'namecase' [ 708.925120][ T9889] exfat: Deprecated parameter 'namecase' [ 709.049160][ T9889] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 709.077504][ T9886] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 709.559075][ T5581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.572753][ T9891] loop0: detected capacity change from 0 to 4096 [ 709.630748][ T9891] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 709.712880][ T4869] Bluetooth: hci3: command tx timeout [ 711.206752][ T9915] loop0: detected capacity change from 0 to 256 [ 711.272294][ T9915] vfat: Unknown parameter 'shortnme' [ 712.119067][ T9507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 712.920473][ T9930] loop0: detected capacity change from 0 to 32768 [ 712.941637][ T9930] (syz.0.783,9930,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 712.956273][ T9930] (syz.0.783,9930,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 713.004991][ T9930] JBD2: Ignoring recovery information on journal [ 713.111372][ T9930] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 713.127176][ T8255] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 713.320975][ T8255] usb 5-1: Using ep0 maxpacket: 32 [ 713.361465][ T5224] 8021q: adding VLAN 0 to HW filter on device eth7 [ 713.399760][ T8255] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 713.438470][ T8255] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 713.512324][ T8255] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 713.553371][ T8255] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 713.598427][ T8255] usb 5-1: Product: syz [ 713.622732][ T8255] usb 5-1: Manufacturer: syz [ 713.699058][ T5575] ocfs2: Unmounting device (7,0) on (node local) [ 713.716823][ T8255] hub 5-1:4.0: USB hub found [ 713.918531][ T8255] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 714.067570][ T8255] usb 5-1: USB disconnect, device number 30 [ 714.356823][ T9822] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.381110][ T9822] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.401363][ T9822] bridge_slave_0: entered allmulticast mode [ 714.434236][ T9822] bridge_slave_0: entered promiscuous mode [ 714.488657][ T9822] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.524482][ T9822] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.565336][ T9822] bridge_slave_1: entered allmulticast mode [ 714.588199][ T9822] bridge_slave_1: entered promiscuous mode [ 714.987445][ T9822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 715.102653][ T9822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.249146][ T9956] No control pipe specified [ 715.287824][ T4869] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 715.634373][ T9822] team0: Port device team_slave_0 added [ 715.646161][ T9961] loop0: detected capacity change from 0 to 512 [ 715.716459][ T9822] team0: Port device team_slave_1 added [ 715.782319][ T9961] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 715.864884][ T9961] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 716.188638][ T9822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 716.224791][ T9822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.314474][ T9822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 716.344540][ T5575] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.388758][ T9822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 716.432132][ T9822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.562050][ T9822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 717.280729][ T9822] hsr_slave_0: entered promiscuous mode [ 717.329587][ T9822] hsr_slave_1: entered promiscuous mode [ 717.349402][ T9822] debugfs: 'hsr0' already exists in 'hsr' [ 717.370140][ T9822] Cannot create hsr debugfs directory [ 717.926056][ T4869] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 718.543839][ T9990] loop1: detected capacity change from 0 to 512 [ 718.780498][ T9990] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 718.910641][ T9990] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 719.091677][ T9507] veth0_vlan: entered promiscuous mode [ 719.429843][ T9987] loop0: detected capacity change from 0 to 65536 [ 719.491150][ T9996] loop4: detected capacity change from 0 to 512 [ 719.508702][ T9987] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 719.518680][ T9996] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 719.528487][ T9987] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 719.608204][ T9996] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.796: invalid indirect mapped block 256 (level 2) [ 719.628387][ T5224] 8021q: adding VLAN 0 to HW filter on device eth8 [ 719.731753][ T9996] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 719.732541][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 719.748526][ C0] EXT4-fs (loop4): initial error at time 1777788622: ext4_free_branches:1023: inode 11 [ 719.758519][ C0] EXT4-fs (loop4): last error at time 1777788622: ext4_free_branches:1023: inode 11 [ 719.776229][ T9996] EXT4-fs (loop4): 2 truncates cleaned up [ 719.817708][ T5581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.838466][ T9996] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 719.888643][ T9987] XFS (loop0): Ending clean mount [ 720.062261][ T9996] qrtr: Invalid version 9 [ 720.135011][ T9996] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.796: bg 0: block 5: invalid block bitmap [ 720.152065][ T9507] veth1_vlan: entered promiscuous mode [ 720.245401][ T9996] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 720.316289][ T9996] EXT4-fs (loop4): This should not happen!! Data will be lost [ 720.316289][ T9996] [ 720.390432][ T9996] EXT4-fs (loop4): Total free blocks count 0 [ 720.414695][ T9996] EXT4-fs (loop4): Free/Dirty block details [ 720.440040][ T9996] EXT4-fs (loop4): free_blocks=0 [ 720.464628][ T9996] EXT4-fs (loop4): dirty_blocks=0 [ 720.491569][ T9996] EXT4-fs (loop4): Block reservation details [ 720.532098][T10012] loop1: detected capacity change from 0 to 512 [ 720.532263][ T9996] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 720.682828][T10012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 720.737423][T10012] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 720.772187][ T5593] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 720.831073][ T5593] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.953947][ T5581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.095392][ T9822] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 721.244468][ T9822] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 721.294289][ T9822] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 721.400770][ T9822] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 721.447359][ T9507] veth0_macvtap: entered promiscuous mode [ 721.488831][ T9822] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 721.575109][ T9822] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 721.599022][ T9822] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 721.678904][ T9822] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 721.761578][ T9507] veth1_macvtap: entered promiscuous mode [ 722.078631][ T29] audit: type=1326 audit(1777788625.235:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10025 comm="syz.1.801" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa83d19cdd9 code=0x0 [ 722.120390][ T35] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0xb5/0x300, xfs_cntbt block 0x6 [ 722.201096][ T35] XFS (loop0): Unmount and run xfs_repair [ 722.242479][ T35] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 722.270390][ T35] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 722.311325][ T35] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 722.336713][ T35] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 722.389430][ T35] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 722.436368][ T35] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 722.468010][ T35] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 722.503719][ T35] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 722.544675][ T35] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 722.573690][ T35] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x6 len 2 error 74 [ 722.598715][ T35] XFS (loop0): page discard on page ffffea000217a230, inode 0x29, pos 0. [ 722.631800][ T5575] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 722.683212][ T5575] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair. [ 722.884853][ T9822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 723.028389][T10037] No control pipe specified [ 723.166589][ T9822] 8021q: adding VLAN 0 to HW filter on device team0 [ 723.314811][ T6828] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.322329][ T6828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 723.531062][ T7971] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.538795][ T7971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.410458][ T5589] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 724.420156][ T5589] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 724.431009][ T5589] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 724.460615][ T5589] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 724.489442][ T5589] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 724.683456][T10039] loop1: detected capacity change from 0 to 40427 [ 724.700865][T10039] F2FS-fs (loop1): build fault injection rate: 174 [ 724.707788][T10039] F2FS-fs (loop1): build fault injection type: 0x3bfe8c [ 724.722881][T10039] F2FS-fs (loop1): invalid crc value [ 725.064683][T10039] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 725.082257][T10039] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 725.219370][T10039] netlink: 632 bytes leftover after parsing attributes in process `syz.1.804'. [ 725.250367][T10039] overlayfs: upper fs does not support tmpfile. [ 725.729662][ T5581] syz-executor: attempt to access beyond end of device [ 725.729662][ T5581] loop1: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 725.768283][ T5581] CPU: 0 UID: 0 PID: 5581 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 725.768420][ T5581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 725.768497][ T5581] Call Trace: [ 725.768550][ T5581] [ 725.768600][ T5581] __dump_stack+0x26/0x30 [ 725.768752][ T5581] dump_stack_lvl+0x14c/0x1c0 [ 725.768906][ T5581] dump_stack+0x1e/0x25 [ 725.769042][ T5581] f2fs_stop_checkpoint+0xac3/0xc70 [ 725.769204][ T5581] f2fs_write_end_io+0x1207/0x2200 [ 725.769422][ T5581] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 725.769573][ T5581] bio_endio+0xfcc/0x1120 [ 725.769738][ T5581] submit_bio_noacct+0x533/0x2920 [ 725.769965][ T5581] submit_bio+0x57a/0x620 [ 725.770132][ T5581] f2fs_submit_write_bio+0x115/0x310 [ 725.770343][ T5581] __submit_merged_bio+0x16b/0x700 [ 725.770524][ T5581] ? kmsan_get_metadata+0xf1/0x160 [ 725.770717][ T5581] __submit_merged_write_cond+0x4ba/0xae0 [ 725.770940][ T5581] f2fs_write_data_pages+0x4f4d/0x5c60 [ 725.771171][ T5581] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 725.771400][ T5581] ? __seccomp_filter+0x2f50/0x3b20 [ 725.771540][ T5581] ? kmsan_get_metadata+0xf1/0x160 [ 725.771715][ T5581] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 725.771904][ T5581] ? filter_irq_stacks+0x49/0x190 [ 725.772066][ T5581] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 725.772242][ T5581] ? kmsan_get_metadata+0xf1/0x160 [ 725.772414][ T5581] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 725.772587][ T5581] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 725.772738][ T5581] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 725.772887][ T5581] do_writepages+0x3f2/0x860 [ 725.773024][ T5581] ? _raw_spin_unlock+0x30/0x50 [ 725.773163][ T5581] ? wbc_attach_and_unlock_inode+0x131/0x660 [ 725.773353][ T5581] filemap_fdatawrite+0x207/0x260 [ 725.773584][ T5581] f2fs_sync_dirty_inodes+0x2ad/0xa30 [ 725.773783][ T5581] f2fs_write_checkpoint+0x10e1/0x3c50 [ 725.774086][ T5581] kill_f2fs_super+0x320/0x990 [ 725.774283][ T5581] ? __pfx_kill_f2fs_super+0x10/0x10 [ 725.774439][ T5581] deactivate_locked_super+0xcb/0x3c0 [ 725.774611][ T5581] deactivate_super+0x12f/0x140 [ 725.774771][ T5581] cleanup_mnt+0x7eb/0x870 [ 725.774929][ T5581] ? __pfx___cleanup_mnt+0x10/0x10 [ 725.775077][ T5581] __cleanup_mnt+0x22/0x30 [ 725.775217][ T5581] task_work_run+0x208/0x2b0 [ 725.775357][ T5581] exit_to_user_mode_loop+0x306/0x1b60 [ 725.775498][ T5581] ? user_path_at+0x1fc/0x330 [ 725.775668][ T5581] ? __x64_sys_umount+0x1dc/0x250 [ 725.775857][ T5581] do_syscall_64+0x236/0xf80 [ 725.776007][ T5581] ? clear_bhb_loop+0x50/0xa0 [ 725.776155][ T5581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.776305][ T5581] RIP: 0033:0x7fa83d19e017 [ 725.776406][ T5581] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 725.776519][ T5581] RSP: 002b:00007fff2759eb68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 725.776648][ T5581] RAX: 0000000000000000 RBX: 00007fa83d232120 RCX: 00007fa83d19e017 [ 725.776734][ T5581] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff2759ec20 [ 725.776819][ T5581] RBP: 00007fff2759ec20 R08: 00007fff2759fc20 R09: 00000000ffffffff [ 725.776915][ T5581] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff2759fcb0 [ 725.776997][ T5581] R13: 00007fa83d232120 R14: 00000000000b1114 R15: 00007fff2759fcf0 [ 725.777127][ T5581] [ 726.269043][ T5581] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 726.358991][ T5581] CPU: 0 UID: 0 PID: 5581 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 726.359138][ T5581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 726.359221][ T5581] Call Trace: [ 726.359272][ T5581] [ 726.359323][ T5581] __dump_stack+0x26/0x30 [ 726.359473][ T5581] dump_stack_lvl+0x14c/0x1c0 [ 726.359624][ T5581] dump_stack+0x1e/0x25 [ 726.359758][ T5581] f2fs_stop_checkpoint+0xac3/0xc70 [ 726.359921][ T5581] f2fs_write_end_io+0x1207/0x2200 [ 726.360139][ T5581] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 726.360285][ T5581] bio_endio+0xfcc/0x1120 [ 726.360444][ T5581] submit_bio_noacct+0x533/0x2920 [ 726.360655][ T5581] submit_bio+0x57a/0x620 [ 726.360824][ T5581] f2fs_submit_write_bio+0x115/0x310 [ 726.361030][ T5581] __submit_merged_bio+0x16b/0x700 [ 726.361222][ T5581] ? kmsan_get_metadata+0xf1/0x160 [ 726.361419][ T5581] __submit_merged_write_cond+0x4ba/0xae0 [ 726.361638][ T5581] f2fs_write_data_pages+0x4f4d/0x5c60 [ 726.361873][ T5581] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 726.362102][ T5581] ? __seccomp_filter+0x2f50/0x3b20 [ 726.362245][ T5581] ? kmsan_get_metadata+0xf1/0x160 [ 726.362416][ T5581] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 726.362602][ T5581] ? filter_irq_stacks+0x49/0x190 [ 726.362755][ T5581] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 726.362921][ T5581] ? kmsan_get_metadata+0xf1/0x160 [ 726.363089][ T5581] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 726.363272][ T5581] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 726.363425][ T5581] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 726.363573][ T5581] do_writepages+0x3f2/0x860 [ 726.363709][ T5581] ? _raw_spin_unlock+0x30/0x50 [ 726.363847][ T5581] ? wbc_attach_and_unlock_inode+0x131/0x660 [ 726.364031][ T5581] filemap_fdatawrite+0x207/0x260 [ 726.364243][ T5581] f2fs_sync_dirty_inodes+0x2ad/0xa30 [ 726.364432][ T5581] f2fs_write_checkpoint+0x10e1/0x3c50 [ 726.364734][ T5581] kill_f2fs_super+0x320/0x990 [ 726.364928][ T5581] ? __pfx_kill_f2fs_super+0x10/0x10 [ 726.365082][ T5581] deactivate_locked_super+0xcb/0x3c0 [ 726.365266][ T5581] deactivate_super+0x12f/0x140 [ 726.365422][ T5581] cleanup_mnt+0x7eb/0x870 [ 726.365576][ T5581] ? __pfx___cleanup_mnt+0x10/0x10 [ 726.365727][ T5581] __cleanup_mnt+0x22/0x30 [ 726.365863][ T5581] task_work_run+0x208/0x2b0 [ 726.366003][ T5581] exit_to_user_mode_loop+0x306/0x1b60 [ 726.366148][ T5581] ? user_path_at+0x1fc/0x330 [ 726.366320][ T5581] ? __x64_sys_umount+0x1dc/0x250 [ 726.366509][ T5581] do_syscall_64+0x236/0xf80 [ 726.366667][ T5581] ? clear_bhb_loop+0x50/0xa0 [ 726.366811][ T5581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.366952][ T5581] RIP: 0033:0x7fa83d19e017 [ 726.367052][ T5581] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 726.367173][ T5581] RSP: 002b:00007fff2759eb68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 726.367296][ T5581] RAX: 0000000000000000 RBX: 00007fa83d232120 RCX: 00007fa83d19e017 [ 726.367379][ T5581] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff2759ec20 [ 726.367464][ T5581] RBP: 00007fff2759ec20 R08: 00007fff2759fc20 R09: 00000000ffffffff [ 726.367553][ T5581] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff2759fcb0 [ 726.367639][ T5581] R13: 00007fa83d232120 R14: 00000000000b1114 R15: 00007fff2759fcf0 [ 726.367768][ T5581] [ 726.782573][ T4869] Bluetooth: hci5: command tx timeout [ 726.854411][ T5581] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 726.861552][ T5581] CPU: 0 UID: 0 PID: 5581 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 726.861687][ T5581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 726.861767][ T5581] Call Trace: [ 726.861819][ T5581] [ 726.861869][ T5581] __dump_stack+0x26/0x30 [ 726.862024][ T5581] dump_stack_lvl+0x14c/0x1c0 [ 726.862186][ T5581] dump_stack+0x1e/0x25 [ 726.862322][ T5581] f2fs_stop_checkpoint+0xac3/0xc70 [ 726.862487][ T5581] f2fs_write_end_io+0x1207/0x2200 [ 726.862685][ T5581] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 726.862824][ T5581] bio_endio+0xfcc/0x1120 [ 726.862982][ T5581] submit_bio_noacct+0x533/0x2920 [ 726.863187][ T5581] submit_bio+0x57a/0x620 [ 726.863349][ T5581] f2fs_submit_write_bio+0x115/0x310 [ 726.863548][ T5581] __submit_merged_bio+0x16b/0x700 [ 726.863733][ T5581] ? kmsan_get_metadata+0xf1/0x160 [ 726.863930][ T5581] __submit_merged_write_cond+0x4ba/0xae0 [ 726.864159][ T5581] f2fs_write_data_pages+0x4f4d/0x5c60 [ 726.864396][ T5581] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 726.864622][ T5581] ? __seccomp_filter+0x2f50/0x3b20 [ 726.864764][ T5581] ? kmsan_get_metadata+0xf1/0x160 [ 726.864938][ T5581] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 726.865134][ T5581] ? filter_irq_stacks+0x49/0x190 [ 726.865299][ T5581] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 726.865474][ T5581] ? kmsan_get_metadata+0xf1/0x160 [ 726.865650][ T5581] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 726.865829][ T5581] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 726.865980][ T5581] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 726.866136][ T5581] do_writepages+0x3f2/0x860 [ 726.866273][ T5581] ? _raw_spin_unlock+0x30/0x50 [ 726.866413][ T5581] ? wbc_attach_and_unlock_inode+0x131/0x660 [ 726.866606][ T5581] filemap_fdatawrite+0x207/0x260 [ 726.866834][ T5581] f2fs_sync_dirty_inodes+0x2ad/0xa30 [ 726.867030][ T5581] f2fs_write_checkpoint+0x10e1/0x3c50 [ 726.867343][ T5581] kill_f2fs_super+0x320/0x990 [ 726.867540][ T5581] ? __pfx_kill_f2fs_super+0x10/0x10 [ 726.867696][ T5581] deactivate_locked_super+0xcb/0x3c0 [ 726.867869][ T5581] deactivate_super+0x12f/0x140 [ 726.868025][ T5581] cleanup_mnt+0x7eb/0x870 [ 726.868188][ T5581] ? __pfx___cleanup_mnt+0x10/0x10 [ 726.868339][ T5581] __cleanup_mnt+0x22/0x30 [ 726.868480][ T5581] task_work_run+0x208/0x2b0 [ 726.868624][ T5581] exit_to_user_mode_loop+0x306/0x1b60 [ 726.868775][ T5581] ? user_path_at+0x1fc/0x330 [ 726.868945][ T5581] ? __x64_sys_umount+0x1dc/0x250 [ 726.869140][ T5581] do_syscall_64+0x236/0xf80 [ 726.869300][ T5581] ? clear_bhb_loop+0x50/0xa0 [ 726.869449][ T5581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.869591][ T5581] RIP: 0033:0x7fa83d19e017 [ 726.869693][ T5581] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 726.869811][ T5581] RSP: 002b:00007fff2759eb68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 726.869952][ T5581] RAX: 0000000000000000 RBX: 00007fa83d232120 RCX: 00007fa83d19e017 [ 726.870045][ T5581] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff2759ec20 [ 726.870136][ T5581] RBP: 00007fff2759ec20 R08: 00007fff2759fc20 R09: 00000000ffffffff [ 726.870231][ T5581] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff2759fcb0 [ 726.870318][ T5581] R13: 00007fa83d232120 R14: 00000000000b1114 R15: 00007fff2759fcf0 [ 726.870446][ T5581] [ 727.206731][ T5581] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 727.640865][T10064] loop4: detected capacity change from 0 to 512 [ 727.693013][T10064] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 727.807628][T10064] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.806: invalid indirect mapped block 256 (level 2) [ 727.876845][T10064] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 727.880008][T10064] EXT4-fs (loop4): 2 truncates cleaned up [ 727.889549][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 727.889640][ C1] EXT4-fs (loop4): initial error at time 1777788631: ext4_free_branches:1023: inode 11 [ 727.889817][ C1] EXT4-fs (loop4): last error at time 1777788631: ext4_free_branches:1023: inode 11 [ 728.081081][T10064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 728.214169][T10064] qrtr: Invalid version 9 [ 728.317578][T10064] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.806: bg 0: block 5: invalid block bitmap [ 728.397572][T10064] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 728.451500][T10064] EXT4-fs (loop4): This should not happen!! Data will be lost [ 728.451500][T10064] [ 728.495335][T10064] EXT4-fs (loop4): Total free blocks count 0 [ 728.536760][T10064] EXT4-fs (loop4): Free/Dirty block details [ 728.576638][T10064] EXT4-fs (loop4): free_blocks=0 [ 728.623441][T10064] EXT4-fs (loop4): dirty_blocks=0 [ 728.671101][T10064] EXT4-fs (loop4): Block reservation details [ 728.722718][T10064] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 728.840406][ T4869] Bluetooth: hci5: command tx timeout [ 729.157858][ T55] bridge_slave_1: left allmulticast mode [ 729.232336][ T55] bridge_slave_1: left promiscuous mode [ 729.328402][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.362245][ T5593] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 729.530191][ T5593] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.540732][ T55] bridge_slave_0: left allmulticast mode [ 729.573612][ T55] bridge_slave_0: left promiscuous mode [ 729.596472][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.688781][T10079] loop0: detected capacity change from 0 to 32768 [ 729.708133][T10079] (syz.0.802,10079,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 729.729505][T10079] (syz.0.802,10079,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 729.794850][T10079] JBD2: Ignoring recovery information on journal [ 729.982014][T10079] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 730.641375][T10086] loop4: detected capacity change from 0 to 32768 [ 730.763262][T10086] read_mapping_page failed! [ 730.767952][T10086] ERROR: (device loop4): txAbort: [ 730.767952][T10086] [ 730.912633][ T4869] Bluetooth: hci5: command tx timeout [ 731.091627][ T5575] ocfs2: Unmounting device (7,0) on (node local) [ 732.329802][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 732.405278][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 732.448956][ T55] bond0 (unregistering): Released all slaves [ 732.951234][ T55] hsr_slave_0: left promiscuous mode [ 732.985569][ T55] hsr_slave_1: left promiscuous mode [ 732.993666][ T4869] Bluetooth: hci5: command tx timeout [ 733.042825][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 733.071416][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 733.170710][ T55] veth1_macvtap: left promiscuous mode [ 733.205941][ T55] veth0_macvtap: left promiscuous mode [ 733.242663][ T55] veth1_vlan: left promiscuous mode [ 733.269026][ T55] veth0_vlan: left promiscuous mode [ 734.112599][T10104] loop4: detected capacity change from 0 to 32768 [ 734.124446][T10104] btrfs: Deprecated parameter 'usebackuproot' [ 734.130715][T10104] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 734.143081][T10104] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.811 (10104) [ 734.851070][T10108] loop0: detected capacity change from 0 to 32768 [ 734.893773][T10104] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 734.904188][T10104] BTRFS info (device loop4): using crc32c checksum algorithm [ 734.911872][T10104] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 734.936523][T10108] (syz.0.812,10108,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 735.006264][T10108] (syz.0.812,10108,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 735.210344][T10112] loop1: detected capacity change from 0 to 32768 [ 735.220005][T10112] btrfs: Deprecated parameter 'usebackuproot' [ 735.226392][T10112] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 735.238712][T10112] BTRFS info: device /dev/loop1 (7:1) using temp-fsid 925c99c0-7332-4dfb-8d33-e6cb88706225 [ 735.251340][T10112] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.813 (10112) [ 735.281147][T10112] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 735.292687][T10112] BTRFS info (device loop1): using crc32c checksum algorithm [ 735.350529][T10108] JBD2: Ignoring recovery information on journal [ 735.532835][ T7961] BTRFS warning (device loop4): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb0e5ffa5 level 0 [ 735.589788][T10108] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 735.624295][ T7975] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 735.642084][T10104] BTRFS warning (device loop4): couldn't read tree root [ 735.651745][T10104] BTRFS warning (device loop4): try to load backup roots slot 1 [ 735.669945][ T35] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x32d10ca2 level 0 [ 735.683906][T10112] BTRFS error (device loop1): failed to load root extent [ 735.703309][T10112] BTRFS warning (device loop1): try to load backup roots slot 1 [ 735.716469][ T5784] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 735.794331][T10104] BTRFS warning (device loop4): couldn't read tree root [ 735.798615][T10112] BTRFS warning (device loop1): couldn't read tree root [ 735.801506][T10104] BTRFS warning (device loop4): try to load backup roots slot 2 [ 735.811436][T10112] BTRFS warning (device loop1): try to load backup roots slot 2 [ 735.816636][ T35] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 735.849773][ T7975] BTRFS warning (device loop4): checksum verify failed on logical 5255168 mirror 1 wanted 0x9df47653 found 0x6344b7f5 level 1 [ 735.932744][ T29] audit: type=1800 audit(1777788639.065:15): pid=10108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.812" name="file0" dev="loop0" ino=16983 res=0 errno=0 [ 735.953984][T10104] BTRFS warning (device loop4): couldn't read tree root [ 735.962973][T10104] BTRFS warning (device loop4): try to load backup roots slot 3 [ 735.974886][T10112] BTRFS warning (device loop1): couldn't read tree root [ 735.982317][T10112] BTRFS warning (device loop1): try to load backup roots slot 3 [ 736.041765][T10112] BTRFS info (device loop1): rebuilding free space tree [ 736.080884][T10112] BTRFS info (device loop1): checking UUID tree [ 736.091202][T10112] BTRFS info (device loop1): enabling ssd optimizations [ 736.100428][T10112] BTRFS info (device loop1): using spread ssd allocation scheme [ 736.108497][T10112] BTRFS info (device loop1): turning on async discard [ 736.115578][T10112] BTRFS info (device loop1): enabling free space tree [ 736.122969][T10112] BTRFS info (device loop1): force clearing of disk cache [ 736.130236][T10112] BTRFS info (device loop1): trying to use backup root at mount time [ 736.138607][T10112] BTRFS info (device loop1): force zlib compression, level 3 [ 736.185700][T10104] BTRFS info (device loop4): rebuilding free space tree [ 736.236320][T10104] BTRFS info (device loop4): disabling free space tree [ 736.243816][T10104] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 736.253808][T10104] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 736.296581][T10104] BTRFS info (device loop4): checking UUID tree [ 736.304704][T10104] BTRFS info (device loop4): enabling ssd optimizations [ 736.311844][T10104] BTRFS info (device loop4): turning off barriers [ 736.318491][T10104] BTRFS info (device loop4): turning on sync discard [ 736.325430][T10104] BTRFS info (device loop4): enabling disk space caching [ 736.332751][T10104] BTRFS info (device loop4): force clearing of disk cache [ 736.339959][T10104] BTRFS info (device loop4): enabling auto defrag [ 736.346524][T10104] BTRFS info (device loop4): trying to use backup root at mount time [ 736.357215][T10104] BTRFS info (device loop4): max_inline set to 0 [ 736.597713][ T5593] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 736.733165][ T5581] BTRFS info (device loop1): last unmount of filesystem 925c99c0-7332-4dfb-8d33-e6cb88706225 [ 736.859769][ T5575] ocfs2: Unmounting device (7,0) on (node local) [ 737.318462][T10153] No control pipe specified [ 737.559805][T10155] qrtr: Invalid version 8 [ 737.578805][ T55] team0 (unregistering): Port device team_slave_1 removed [ 737.760066][ T55] team0 (unregistering): Port device team_slave_0 removed [ 740.245335][ T9822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 741.983206][T10044] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.993130][T10044] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.006435][T10044] bridge_slave_0: entered allmulticast mode [ 742.017020][T10044] bridge_slave_0: entered promiscuous mode [ 742.057903][ T9822] veth0_vlan: entered promiscuous mode [ 742.066667][T10044] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.078839][T10044] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.089809][T10044] bridge_slave_1: entered allmulticast mode [ 742.104461][T10044] bridge_slave_1: entered promiscuous mode [ 742.220028][T10044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.250175][T10044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 742.364638][ T9822] veth1_vlan: entered promiscuous mode [ 742.392066][T10044] team0: Port device team_slave_0 added [ 742.449734][T10044] team0: Port device team_slave_1 added [ 742.538947][T10044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 742.554312][T10044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 742.584549][T10044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.620989][T10044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.628729][T10044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 742.660044][T10044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.868339][T10044] hsr_slave_0: entered promiscuous mode [ 742.878733][T10044] hsr_slave_1: entered promiscuous mode [ 743.067992][ T9822] veth0_macvtap: entered promiscuous mode [ 743.119336][ T9822] veth1_macvtap: entered promiscuous mode [ 743.395383][ T9822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 743.506476][ T9822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 743.621455][ T7967] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.630838][ T7967] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.665128][ T7967] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.676955][ T7967] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.084962][T10044] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 744.126179][T10044] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 744.157909][T10044] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 744.201222][T10044] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 744.225591][T10044] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 744.267331][T10044] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 744.295212][T10044] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 744.319225][T10044] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 745.090436][T10044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 745.230098][T10044] 8021q: adding VLAN 0 to HW filter on device team0 [ 745.267034][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.274624][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.374520][ T7967] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.382039][ T7967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 746.039222][ T5224] 8021q: adding VLAN 0 to HW filter on device eth5 [ 746.818122][ T7967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.856522][ T7967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.005700][ T5784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.044743][ T5784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.184970][T10044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 748.510864][T10264] loop6: detected capacity change from 0 to 40427 [ 748.528281][T10264] F2FS-fs (loop6): build fault injection rate: 174 [ 748.535135][T10264] F2FS-fs (loop6): build fault injection type: 0x3bfe8c [ 748.548017][T10264] F2FS-fs (loop6): invalid crc value [ 748.708499][ T5224] 8021q: adding VLAN 0 to HW filter on device eth6 [ 748.888510][T10264] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 748.903829][T10264] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 748.955396][T10264] netlink: 632 bytes leftover after parsing attributes in process `syz.6.756'. [ 749.112830][ T9822] syz-executor: attempt to access beyond end of device [ 749.112830][ T9822] loop6: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 749.147009][ T9822] CPU: 1 UID: 0 PID: 9822 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 749.147152][ T9822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 749.147235][ T9822] Call Trace: [ 749.147285][ T9822] [ 749.147335][ T9822] __dump_stack+0x26/0x30 [ 749.147489][ T9822] dump_stack_lvl+0x14c/0x1c0 [ 749.147640][ T9822] dump_stack+0x1e/0x25 [ 749.147778][ T9822] f2fs_stop_checkpoint+0xac3/0xc70 [ 749.147938][ T9822] f2fs_write_end_io+0x1207/0x2200 [ 749.148164][ T9822] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 749.148314][ T9822] bio_endio+0xfcc/0x1120 [ 749.148475][ T9822] submit_bio_noacct+0x533/0x2920 [ 749.148685][ T9822] submit_bio+0x57a/0x620 [ 749.148850][ T9822] f2fs_submit_write_bio+0x115/0x310 [ 749.149052][ T9822] __submit_merged_bio+0x16b/0x700 [ 749.149236][ T9822] ? kmsan_get_metadata+0xf1/0x160 [ 749.149420][ T9822] __submit_merged_write_cond+0x4ba/0xae0 [ 749.149625][ T9822] f2fs_write_data_pages+0x4f4d/0x5c60 [ 749.149768][ T9822] ? do_syscall_64+0x181/0xf80 [ 749.150004][ T9822] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 749.150228][ T9822] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 749.150394][ T9822] ? kmsan_get_metadata+0xf1/0x160 [ 749.150565][ T9822] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 749.150753][ T9822] ? free_unref_folios+0x2938/0x29a0 [ 749.150926][ T9822] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 749.151099][ T9822] ? kmsan_get_metadata+0xf1/0x160 [ 749.151276][ T9822] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 749.151454][ T9822] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 749.151604][ T9822] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 749.151749][ T9822] do_writepages+0x3f2/0x860 [ 749.151885][ T9822] ? _raw_spin_unlock+0x30/0x50 [ 749.152019][ T9822] ? wbc_attach_and_unlock_inode+0x131/0x660 [ 749.152212][ T9822] filemap_fdatawrite+0x207/0x260 [ 749.152433][ T9822] f2fs_sync_dirty_inodes+0x2ad/0xa30 [ 749.152619][ T9822] f2fs_write_checkpoint+0x10e1/0x3c50 [ 749.152909][ T9822] kill_f2fs_super+0x320/0x990 [ 749.153105][ T9822] ? __pfx_kill_f2fs_super+0x10/0x10 [ 749.153261][ T9822] deactivate_locked_super+0xcb/0x3c0 [ 749.153429][ T9822] deactivate_super+0x12f/0x140 [ 749.153585][ T9822] cleanup_mnt+0x7eb/0x870 [ 749.153745][ T9822] ? __pfx___cleanup_mnt+0x10/0x10 [ 749.153891][ T9822] __cleanup_mnt+0x22/0x30 [ 749.154030][ T9822] task_work_run+0x208/0x2b0 [ 749.154177][ T9822] exit_to_user_mode_loop+0x306/0x1b60 [ 749.154316][ T9822] ? user_path_at+0x1fc/0x330 [ 749.154482][ T9822] ? __x64_sys_umount+0x1dc/0x250 [ 749.154665][ T9822] do_syscall_64+0x236/0xf80 [ 749.154818][ T9822] ? clear_bhb_loop+0x50/0xa0 [ 749.154960][ T9822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.155096][ T9822] RIP: 0033:0x7fda2219e017 [ 749.155203][ T9822] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 749.155317][ T9822] RSP: 002b:00007fff142f08b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 749.155448][ T9822] RAX: 0000000000000000 RBX: 00007fda22232120 RCX: 00007fda2219e017 [ 749.155539][ T9822] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff142f0970 [ 749.155621][ T9822] RBP: 00007fff142f0970 R08: 00007fff142f1970 R09: 00000000ffffffff [ 749.155714][ T9822] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff142f1a00 [ 749.155798][ T9822] R13: 00007fda22232120 R14: 00000000000b6da7 R15: 00007fff142f1a40 [ 749.155926][ T9822] [ 749.583107][ T9822] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 749.590308][ T9822] CPU: 1 UID: 0 PID: 9822 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 749.590441][ T9822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 749.590517][ T9822] Call Trace: [ 749.590567][ T9822] [ 749.590612][ T9822] __dump_stack+0x26/0x30 [ 749.590767][ T9822] dump_stack_lvl+0x14c/0x1c0 [ 749.590924][ T9822] dump_stack+0x1e/0x25 [ 749.591060][ T9822] f2fs_stop_checkpoint+0xac3/0xc70 [ 749.591237][ T9822] f2fs_write_end_io+0x1207/0x2200 [ 749.591449][ T9822] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 749.591594][ T9822] bio_endio+0xfcc/0x1120 [ 749.591759][ T9822] submit_bio_noacct+0x533/0x2920 [ 749.591970][ T9822] submit_bio+0x57a/0x620 [ 749.592139][ T9822] f2fs_submit_write_bio+0x115/0x310 [ 749.592342][ T9822] __submit_merged_bio+0x16b/0x700 [ 749.592518][ T9822] ? kmsan_get_metadata+0xf1/0x160 [ 749.592706][ T9822] __submit_merged_write_cond+0x4ba/0xae0 [ 749.592926][ T9822] f2fs_write_data_pages+0x4f4d/0x5c60 [ 749.593070][ T9822] ? do_syscall_64+0x181/0xf80 [ 749.593320][ T9822] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 749.593541][ T9822] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 749.593709][ T9822] ? kmsan_get_metadata+0xf1/0x160 [ 749.593881][ T9822] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 749.594067][ T9822] ? free_unref_folios+0x2938/0x29a0 [ 749.594252][ T9822] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 749.594425][ T9822] ? kmsan_get_metadata+0xf1/0x160 [ 749.594600][ T9822] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 749.594779][ T9822] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 749.594929][ T9822] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 749.595079][ T9822] do_writepages+0x3f2/0x860 [ 749.595225][ T9822] ? _raw_spin_unlock+0x30/0x50 [ 749.595361][ T9822] ? wbc_attach_and_unlock_inode+0x131/0x660 [ 749.595550][ T9822] filemap_fdatawrite+0x207/0x260 [ 749.595777][ T9822] f2fs_sync_dirty_inodes+0x2ad/0xa30 [ 749.595969][ T9822] f2fs_write_checkpoint+0x10e1/0x3c50 [ 749.596280][ T9822] kill_f2fs_super+0x320/0x990 [ 749.596480][ T9822] ? __pfx_kill_f2fs_super+0x10/0x10 [ 749.596635][ T9822] deactivate_locked_super+0xcb/0x3c0 [ 749.596811][ T9822] deactivate_super+0x12f/0x140 [ 749.596969][ T9822] cleanup_mnt+0x7eb/0x870 [ 749.597135][ T9822] ? __pfx___cleanup_mnt+0x10/0x10 [ 749.597282][ T9822] __cleanup_mnt+0x22/0x30 [ 749.597423][ T9822] task_work_run+0x208/0x2b0 [ 749.597566][ T9822] exit_to_user_mode_loop+0x306/0x1b60 [ 749.597718][ T9822] ? user_path_at+0x1fc/0x330 [ 749.597885][ T9822] ? __x64_sys_umount+0x1dc/0x250 [ 749.598078][ T9822] do_syscall_64+0x236/0xf80 [ 749.598242][ T9822] ? clear_bhb_loop+0x50/0xa0 [ 749.598388][ T9822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.598531][ T9822] RIP: 0033:0x7fda2219e017 [ 749.598634][ T9822] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 749.598748][ T9822] RSP: 002b:00007fff142f08b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 749.598873][ T9822] RAX: 0000000000000000 RBX: 00007fda22232120 RCX: 00007fda2219e017 [ 749.598964][ T9822] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff142f0970 [ 749.599050][ T9822] RBP: 00007fff142f0970 R08: 00007fff142f1970 R09: 00000000ffffffff [ 749.599151][ T9822] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff142f1a00 [ 749.599238][ T9822] R13: 00007fda22232120 R14: 00000000000b6da7 R15: 00007fff142f1a40 [ 749.599368][ T9822] [ 749.947942][ T9822] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 749.956330][ T9822] CPU: 1 UID: 0 PID: 9822 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 749.956474][ T9822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 749.956554][ T9822] Call Trace: [ 749.956605][ T9822] [ 749.956655][ T9822] __dump_stack+0x26/0x30 [ 749.956805][ T9822] dump_stack_lvl+0x14c/0x1c0 [ 749.956957][ T9822] dump_stack+0x1e/0x25 [ 749.957095][ T9822] f2fs_stop_checkpoint+0xac3/0xc70 [ 749.957265][ T9822] f2fs_write_end_io+0x1207/0x2200 [ 749.957484][ T9822] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 749.957633][ T9822] bio_endio+0xfcc/0x1120 [ 749.957801][ T9822] submit_bio_noacct+0x533/0x2920 [ 749.958018][ T9822] submit_bio+0x57a/0x620 [ 749.958190][ T9822] f2fs_submit_write_bio+0x115/0x310 [ 749.958396][ T9822] __submit_merged_bio+0x16b/0x700 [ 749.958584][ T9822] ? kmsan_get_metadata+0xf1/0x160 [ 749.958779][ T9822] __submit_merged_write_cond+0x4ba/0xae0 [ 749.959005][ T9822] f2fs_write_data_pages+0x4f4d/0x5c60 [ 749.959153][ T9822] ? do_syscall_64+0x181/0xf80 [ 749.959404][ T9822] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 749.959621][ T9822] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 749.959791][ T9822] ? kmsan_get_metadata+0xf1/0x160 [ 749.959964][ T9822] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 749.960154][ T9822] ? free_unref_folios+0x2938/0x29a0 [ 749.960332][ T9822] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 749.960514][ T9822] ? kmsan_get_metadata+0xf1/0x160 [ 749.960691][ T9822] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 749.960872][ T9822] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 749.961025][ T9822] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 749.961174][ T9822] do_writepages+0x3f2/0x860 [ 749.961312][ T9822] ? _raw_spin_unlock+0x30/0x50 [ 749.961456][ T9822] ? wbc_attach_and_unlock_inode+0x131/0x660 [ 749.961648][ T9822] filemap_fdatawrite+0x207/0x260 [ 749.961877][ T9822] f2fs_sync_dirty_inodes+0x2ad/0xa30 [ 749.962066][ T9822] f2fs_write_checkpoint+0x10e1/0x3c50 [ 749.962372][ T9822] kill_f2fs_super+0x320/0x990 [ 749.962561][ T9822] ? __pfx_kill_f2fs_super+0x10/0x10 [ 749.962718][ T9822] deactivate_locked_super+0xcb/0x3c0 [ 749.962895][ T9822] deactivate_super+0x12f/0x140 [ 749.963054][ T9822] cleanup_mnt+0x7eb/0x870 [ 749.963216][ T9822] ? __pfx___cleanup_mnt+0x10/0x10 [ 749.963374][ T9822] __cleanup_mnt+0x22/0x30 [ 749.963515][ T9822] task_work_run+0x208/0x2b0 [ 749.963662][ T9822] exit_to_user_mode_loop+0x306/0x1b60 [ 749.963816][ T9822] ? user_path_at+0x1fc/0x330 [ 749.963987][ T9822] ? __x64_sys_umount+0x1dc/0x250 [ 749.964180][ T9822] do_syscall_64+0x236/0xf80 [ 749.964341][ T9822] ? clear_bhb_loop+0x50/0xa0 [ 749.964494][ T9822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.964639][ T9822] RIP: 0033:0x7fda2219e017 [ 749.964741][ T9822] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 749.964862][ T9822] RSP: 002b:00007fff142f08b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 749.964990][ T9822] RAX: 0000000000000000 RBX: 00007fda22232120 RCX: 00007fda2219e017 [ 749.965084][ T9822] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff142f0970 [ 749.965171][ T9822] RBP: 00007fff142f0970 R08: 00007fff142f1970 R09: 00000000ffffffff [ 749.965266][ T9822] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff142f1a00 [ 749.965359][ T9822] R13: 00007fda22232120 R14: 00000000000b6da7 R15: 00007fff142f1a40 [ 749.965490][ T9822] [ 750.208497][T10044] veth0_vlan: entered promiscuous mode [ 750.229891][ T9822] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 750.344718][T10044] veth1_vlan: entered promiscuous mode [ 750.655215][T10044] veth0_macvtap: entered promiscuous mode [ 750.735783][T10044] veth1_macvtap: entered promiscuous mode [ 750.859319][T10044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 750.933955][T10044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 750.978728][ T35] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.002999][ T79] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.019775][ T79] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.080332][ T79] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.708550][ T7964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.741468][ T7964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.859574][ T7964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.868351][ T7964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.223625][T10331] loop5: detected capacity change from 0 to 65536 [ 756.293122][T10331] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 756.312805][T10331] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 756.399939][T10331] XFS (loop5): Ending clean mount [ 756.431885][T10331] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0xb5/0x300, xfs_cntbt block 0x6 [ 756.469027][T10331] XFS (loop5): Unmount and run xfs_repair [ 756.476852][T10331] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 756.489528][T10331] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 756.517015][T10331] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 756.527569][T10331] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 756.555771][T10331] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 756.566697][T10331] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 756.584949][T10331] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 756.599303][T10331] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 756.609611][T10331] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 756.620602][T10331] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x6 len 2 error 74 [ 756.634008][T10331] XFS (loop5): page discard on page ffffea0001eb33d0, inode 0x26, pos 3072. [ 756.652806][T10331] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0xb5/0x300, xfs_cntbt block 0x6 [ 756.664496][T10331] XFS (loop5): Unmount and run xfs_repair [ 756.670634][T10331] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 756.680142][T10331] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 756.690407][T10331] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 756.699625][T10331] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 756.709555][T10331] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 756.718724][T10331] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 756.727934][T10331] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 756.737116][T10331] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 756.755613][T10331] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 756.764916][T10331] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x6 len 2 error 74 [ 756.777126][T10331] XFS (loop5): page discard on page ffffea0001eb3380, inode 0x26, pos 4096. [ 756.787409][T10331] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0xb5/0x300, xfs_cntbt block 0x6 [ 756.799092][T10331] XFS (loop5): Unmount and run xfs_repair [ 756.805416][T10331] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 756.813449][T10331] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 756.822659][T10331] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 756.831668][T10331] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 756.842063][T10331] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 756.855985][T10331] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 756.865500][T10331] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 756.874904][T10331] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 756.884142][T10331] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 756.893408][T10331] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x6 len 2 error 74 [ 756.906057][T10331] XFS (loop5): page discard on page ffffea0001e2c740, inode 0x26, pos 8192. [ 756.934221][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 756.940881][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 756.947767][T10331] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0xb5/0x300, xfs_cntbt block 0x6 [ 756.975343][T10331] XFS (loop5): Unmount and run xfs_repair [ 756.981387][T10331] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 756.989732][T10331] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 756.998953][T10331] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 757.008947][T10331] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 757.019317][T10331] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 757.029109][T10331] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 757.038877][T10331] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 757.048563][T10331] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 757.067392][T10331] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 757.076779][T10331] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x6 len 2 error 74 [ 757.089593][T10331] XFS (loop5): page discard on page ffffea0001c50700, inode 0x26, pos 16384. [ 757.112013][T10331] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0xb5/0x300, xfs_cntbt block 0x6 [ 757.123972][T10331] XFS (loop5): Unmount and run xfs_repair [ 757.129957][T10331] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 757.139952][T10331] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 757.151193][T10331] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 757.175560][T10331] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 757.185472][T10331] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 757.194874][T10331] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 757.204153][T10331] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 757.213435][T10331] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 757.222949][T10331] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 757.232067][T10331] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x6 len 2 error 74 [ 757.244723][T10331] XFS (loop5): page discard on page ffffea0000cd0f00, inode 0x26, pos 32768. [ 757.263344][T10331] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0xb5/0x300, xfs_cntbt block 0x6 [ 757.275358][T10331] XFS (loop5): Unmount and run xfs_repair [ 757.281233][T10331] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 757.289193][T10331] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 757.298343][T10331] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 757.307429][T10331] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 757.317127][T10331] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 757.326419][T10331] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 757.337816][T10331] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 757.347370][T10331] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 757.356697][T10331] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 757.373650][T10331] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x6 len 2 error 74 [ 757.386114][T10331] XFS (loop5): page discard on page ffffea00007b77d0, inode 0x26, pos 65536. [ 757.397682][ T30] loop5: writeback error on inode 38, offset 0, sector 22 [ 757.441176][T10044] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 757.464771][T10044] XFS (loop5): Uncorrected metadata errors detected; please run xfs_repair. [ 761.755496][T10368] loop5: detected capacity change from 0 to 512 [ 762.115419][T10368] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 762.317580][T10368] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 763.152950][T10372] loop4: detected capacity change from 0 to 65536 [ 763.211306][T10372] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 763.228488][T10372] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 763.364854][T10372] XFS (loop4): Ending clean mount [ 763.602004][T10400] loop6: detected capacity change from 0 to 512 [ 763.644720][T10044] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.692917][T10372] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0xb5/0x300, xfs_cntbt block 0x6 [ 763.701647][T10400] EXT4-fs (loop6): 1 truncate cleaned up [ 763.704488][T10372] XFS (loop4): Unmount and run xfs_repair [ 763.704576][T10372] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 763.730313][T10372] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 763.739548][T10372] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 763.748970][T10372] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 763.758327][T10372] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 763.767472][T10372] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 763.776682][T10372] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 763.785940][T10372] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 763.795075][T10372] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 763.797392][T10400] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 763.804323][T10372] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x6 len 2 error 74 [ 763.805158][T10372] XFS (loop4): page discard on page ffffea0000b31be0, inode 0x26, pos 3072. [ 763.860585][T10372] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0xb5/0x300, xfs_cntbt block 0x6 [ 763.872182][T10372] XFS (loop4): Unmount and run xfs_repair [ 763.878407][T10372] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 763.886143][T10372] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 763.895351][T10372] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 763.904493][T10372] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 763.922099][T10372] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 763.931413][T10372] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 763.940980][T10372] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 763.950251][T10372] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 763.970541][T10372] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 763.979795][T10372] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x6 len 2 error 74 [ 763.991984][T10372] XFS (loop4): page discard on page ffffea0005bd2c70, inode 0x26, pos 4096. [ 764.001764][ T4893] loop4: writeback error on inode 38, offset 0, sector 22 [ 764.049684][ T4869] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 764.249893][T10400] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.824: bg 0: block 465: padding at end of block bitmap is not set [ 764.458989][T10406] loop0: detected capacity change from 0 to 4096 [ 764.504983][T10406] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 764.781227][ T9822] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.931260][ T55] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0xb5/0x300, xfs_cntbt block 0x6 [ 766.002549][ T55] XFS (loop4): Unmount and run xfs_repair [ 766.036824][ T55] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 766.071018][ T55] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 766.096219][ T55] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 766.137067][ T55] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 766.185568][ T55] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 766.239723][ T55] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 766.294764][ T55] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 766.343006][T10426] netlink: 28 bytes leftover after parsing attributes in process `syz.1.831'. [ 766.366055][ T55] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 766.468615][ T55] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 766.551009][ T55] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x6 len 2 error 74 [ 766.657930][ T55] XFS (loop4): page discard on page ffffea0005a6b350, inode 0x29, pos 0. [ 766.764341][ T5593] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 766.861353][ T5593] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair. [ 767.054641][T10418] loop0: detected capacity change from 0 to 40427 [ 767.076354][T10418] F2FS-fs (loop0): build fault injection rate: 174 [ 767.084375][T10418] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 767.163845][T10418] F2FS-fs (loop0): invalid crc value [ 767.453268][T10418] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 767.491030][T10418] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 767.563444][T10418] netlink: 632 bytes leftover after parsing attributes in process `syz.0.829'. [ 768.076958][ T5575] syz-executor: attempt to access beyond end of device [ 768.076958][ T5575] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 768.166244][ T5575] CPU: 0 UID: 0 PID: 5575 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 768.166380][ T5575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 768.166458][ T5575] Call Trace: [ 768.166510][ T5575] [ 768.166559][ T5575] __dump_stack+0x26/0x30 [ 768.166735][ T5575] dump_stack_lvl+0x14c/0x1c0 [ 768.166888][ T5575] dump_stack+0x1e/0x25 [ 768.167026][ T5575] f2fs_stop_checkpoint+0xac3/0xc70 [ 768.167189][ T5575] f2fs_write_end_io+0x1207/0x2200 [ 768.167389][ T5575] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 768.167527][ T5575] bio_endio+0xfcc/0x1120 [ 768.167697][ T5575] submit_bio_noacct+0x533/0x2920 [ 768.167909][ T5575] submit_bio+0x57a/0x620 [ 768.168078][ T5575] f2fs_submit_write_bio+0x115/0x310 [ 768.168278][ T5575] __submit_merged_bio+0x16b/0x700 [ 768.168463][ T5575] ? kmsan_get_metadata+0xf1/0x160 [ 768.168661][ T5575] __submit_merged_write_cond+0x4ba/0xae0 [ 768.168882][ T5575] f2fs_write_data_pages+0x4f4d/0x5c60 [ 768.169028][ T5575] ? do_syscall_64+0x181/0xf80 [ 768.169267][ T5575] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 768.169481][ T5575] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 768.169658][ T5575] ? kmsan_get_metadata+0xf1/0x160 [ 768.169831][ T5575] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 768.170019][ T5575] ? free_unref_folios+0x2938/0x29a0 [ 768.170196][ T5575] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 768.170368][ T5575] ? kmsan_get_metadata+0xf1/0x160 [ 768.170542][ T5575] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 768.170727][ T5575] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 768.170874][ T5575] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 768.171018][ T5575] do_writepages+0x3f2/0x860 [ 768.171154][ T5575] ? _raw_spin_unlock+0x30/0x50 [ 768.171286][ T5575] ? wbc_attach_and_unlock_inode+0x131/0x660 [ 768.171466][ T5575] filemap_fdatawrite+0x207/0x260 [ 768.171695][ T5575] f2fs_sync_dirty_inodes+0x2ad/0xa30 [ 768.171885][ T5575] f2fs_write_checkpoint+0x10e1/0x3c50 [ 768.172182][ T5575] kill_f2fs_super+0x320/0x990 [ 768.172375][ T5575] ? __pfx_kill_f2fs_super+0x10/0x10 [ 768.172527][ T5575] deactivate_locked_super+0xcb/0x3c0 [ 768.172704][ T5575] deactivate_super+0x12f/0x140 [ 768.172853][ T5575] cleanup_mnt+0x7eb/0x870 [ 768.173013][ T5575] ? __pfx___cleanup_mnt+0x10/0x10 [ 768.173160][ T5575] __cleanup_mnt+0x22/0x30 [ 768.173300][ T5575] task_work_run+0x208/0x2b0 [ 768.173440][ T5575] exit_to_user_mode_loop+0x306/0x1b60 [ 768.173587][ T5575] ? user_path_at+0x1fc/0x330 [ 768.173762][ T5575] ? __x64_sys_umount+0x1dc/0x250 [ 768.173950][ T5575] do_syscall_64+0x236/0xf80 [ 768.174104][ T5575] ? clear_bhb_loop+0x50/0xa0 [ 768.174250][ T5575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.174391][ T5575] RIP: 0033:0x7fc72c19e017 [ 768.174494][ T5575] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 768.174608][ T5575] RSP: 002b:00007fffa754aa28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 768.174740][ T5575] RAX: 0000000000000000 RBX: 00007fc72c232120 RCX: 00007fc72c19e017 [ 768.174831][ T5575] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa754aae0 [ 768.174911][ T5575] RBP: 00007fffa754aae0 R08: 00007fffa754bae0 R09: 00000000ffffffff [ 768.175004][ T5575] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffa754bb70 [ 768.175090][ T5575] R13: 00007fc72c232120 R14: 00000000000bb665 R15: 00007fffa754bbb0 [ 768.175217][ T5575] [ 768.776102][ T5575] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 768.857984][ T5575] CPU: 1 UID: 0 PID: 5575 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 768.858127][ T5575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 768.858207][ T5575] Call Trace: [ 768.858258][ T5575] [ 768.858309][ T5575] __dump_stack+0x26/0x30 [ 768.858466][ T5575] dump_stack_lvl+0x14c/0x1c0 [ 768.858623][ T5575] dump_stack+0x1e/0x25 [ 768.858764][ T5575] f2fs_stop_checkpoint+0xac3/0xc70 [ 768.858942][ T5575] f2fs_write_end_io+0x1207/0x2200 [ 768.859155][ T5575] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 768.859303][ T5575] bio_endio+0xfcc/0x1120 [ 768.859470][ T5575] submit_bio_noacct+0x533/0x2920 [ 768.859681][ T5575] submit_bio+0x57a/0x620 [ 768.859855][ T5575] f2fs_submit_write_bio+0x115/0x310 [ 768.860058][ T5575] __submit_merged_bio+0x16b/0x700 [ 768.860244][ T5575] ? kmsan_get_metadata+0xf1/0x160 [ 768.860435][ T5575] __submit_merged_write_cond+0x4ba/0xae0 [ 768.860656][ T5575] f2fs_write_data_pages+0x4f4d/0x5c60 [ 768.860807][ T5575] ? do_syscall_64+0x181/0xf80 [ 768.861050][ T5575] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 768.861271][ T5575] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 768.861442][ T5575] ? kmsan_get_metadata+0xf1/0x160 [ 768.861615][ T5575] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 768.861813][ T5575] ? free_unref_folios+0x2938/0x29a0 [ 768.861990][ T5575] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 768.862163][ T5575] ? kmsan_get_metadata+0xf1/0x160 [ 768.862339][ T5575] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 768.862506][ T5575] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 768.862657][ T5575] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 768.862807][ T5575] do_writepages+0x3f2/0x860 [ 768.862948][ T5575] ? _raw_spin_unlock+0x30/0x50 [ 768.863084][ T5575] ? wbc_attach_and_unlock_inode+0x131/0x660 [ 768.863275][ T5575] filemap_fdatawrite+0x207/0x260 [ 768.863506][ T5575] f2fs_sync_dirty_inodes+0x2ad/0xa30 [ 768.863702][ T5575] f2fs_write_checkpoint+0x10e1/0x3c50 [ 768.864010][ T5575] kill_f2fs_super+0x320/0x990 [ 768.864207][ T5575] ? __pfx_kill_f2fs_super+0x10/0x10 [ 768.864360][ T5575] deactivate_locked_super+0xcb/0x3c0 [ 768.864535][ T5575] deactivate_super+0x12f/0x140 [ 768.864694][ T5575] cleanup_mnt+0x7eb/0x870 [ 768.864858][ T5575] ? __pfx___cleanup_mnt+0x10/0x10 [ 768.865008][ T5575] __cleanup_mnt+0x22/0x30 [ 768.865153][ T5575] task_work_run+0x208/0x2b0 [ 768.865294][ T5575] exit_to_user_mode_loop+0x306/0x1b60 [ 768.865445][ T5575] ? user_path_at+0x1fc/0x330 [ 768.865614][ T5575] ? __x64_sys_umount+0x1dc/0x250 [ 768.865811][ T5575] do_syscall_64+0x236/0xf80 [ 768.865969][ T5575] ? clear_bhb_loop+0x50/0xa0 [ 768.866116][ T5575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.866257][ T5575] RIP: 0033:0x7fc72c19e017 [ 768.866360][ T5575] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 768.866477][ T5575] RSP: 002b:00007fffa754aa28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 768.866625][ T5575] RAX: 0000000000000000 RBX: 00007fc72c232120 RCX: 00007fc72c19e017 [ 768.866716][ T5575] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa754aae0 [ 768.866811][ T5575] RBP: 00007fffa754aae0 R08: 00007fffa754bae0 R09: 00000000ffffffff [ 768.866908][ T5575] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffa754bb70 [ 768.866993][ T5575] R13: 00007fc72c232120 R14: 00000000000bb665 R15: 00007fffa754bbb0 [ 768.867124][ T5575] [ 769.400953][ T5575] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 769.404003][T10443] loop1: detected capacity change from 0 to 512 [ 769.730815][T10443] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 769.861470][T10443] ext4 filesystem being mounted at /202/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 770.489208][ T5581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.991845][T10455] loop1: detected capacity change from 0 to 64 [ 771.265398][ T4869] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 771.275292][ T4869] CPU: 1 UID: 0 PID: 4869 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 771.275437][ T4869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 771.275542][ T4869] Workqueue: hci3 hci_rx_work [ 771.275723][ T4869] Call Trace: [ 771.275776][ T4869] [ 771.275826][ T4869] __dump_stack+0x26/0x30 [ 771.275977][ T4869] dump_stack_lvl+0x14c/0x1c0 [ 771.276134][ T4869] dump_stack+0x1e/0x25 [ 771.276269][ T4869] sysfs_create_dir_ns+0x46c/0x540 [ 771.276444][ T4869] kobject_add_internal+0x1084/0x19b0 [ 771.276615][ T4869] kobject_add+0x2c1/0x410 [ 771.276839][ T4869] ? kmsan_get_metadata+0xf1/0x160 [ 771.277020][ T4869] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 771.277215][ T4869] device_add+0xa70/0x1c90 [ 771.277386][ T4869] hci_conn_add_sysfs+0x159/0x2e0 [ 771.277563][ T4869] le_conn_complete_evt+0x1de1/0x2330 [ 771.277747][ T4869] hci_le_conn_complete_evt+0x157/0x260 [ 771.277909][ T4869] hci_le_meta_evt+0x6eb/0x960 [ 771.278039][ T4869] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 771.278203][ T4869] hci_event_packet+0xb8c/0x1820 [ 771.278383][ T4869] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 771.278555][ T4869] hci_rx_work+0x8c3/0xfc0 [ 771.278732][ T4869] ? kmsan_get_metadata+0xf1/0x160 [ 771.278918][ T4869] ? __pfx_hci_rx_work+0x10/0x10 [ 771.279098][ T4869] process_scheduled_works+0xb65/0x1e40 [ 771.279321][ T4869] worker_thread+0xee4/0x1590 [ 771.279525][ T4869] kthread+0x53f/0x600 [ 771.279695][ T4869] ? __pfx_worker_thread+0x10/0x10 [ 771.279860][ T4869] ? __pfx_kthread+0x10/0x10 [ 771.280026][ T4869] ret_from_fork+0x20f/0x8d0 [ 771.280175][ T4869] ? __switch_to+0x573/0x7a0 [ 771.280345][ T4869] ? __pfx_kthread+0x10/0x10 [ 771.280532][ T4869] ret_from_fork_asm+0x1a/0x30 [ 771.280722][ T4869] [ 771.280899][ T4869] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 771.480158][ T4869] Bluetooth: hci3: failed to register connection device [ 774.062239][T10479] ptrace attach of "ci-upstream-kmsan-gce-root/syz-executor exec"[5593] was attempted by "\x0a Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ ,ê  ÷ ÿÿ \x07 ./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 774.503721][T10472] loop5: detected capacity change from 0 to 65536 [ 774.746284][T10472] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 774.759436][T10472] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 774.933497][T10472] XFS (loop5): Ending clean mount [ 775.197583][T10472] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0xb5/0x300, xfs_cntbt block 0x6 [ 775.209449][T10472] XFS (loop5): Unmount and run xfs_repair [ 775.215481][T10472] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 775.223166][T10472] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 775.232204][T10472] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 775.241325][T10472] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 775.250450][T10472] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 775.259666][T10472] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 775.268959][T10472] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 775.283097][T10472] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 775.292151][T10472] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 775.302548][T10472] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x6 len 2 error 74 [ 775.314893][T10472] XFS (loop5): page discard on page ffffea0001cfcd70, inode 0x26, pos 3072. [ 775.325572][T10472] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0xb5/0x300, xfs_cntbt block 0x6 [ 775.337130][T10472] XFS (loop5): Unmount and run xfs_repair [ 775.343110][T10472] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 775.350674][T10472] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 775.359846][T10472] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 775.368956][T10472] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 775.378100][T10472] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 775.393007][T10472] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 775.407002][T10472] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 775.417132][T10472] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 775.426296][T10472] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 775.435522][T10472] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x6 len 2 error 74 [ 775.447728][T10472] XFS (loop5): page discard on page ffffea0001c52ff0, inode 0x26, pos 4096. [ 775.457299][ T5681] loop5: writeback error on inode 38, offset 0, sector 22 [ 775.552917][ T8255] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 775.805338][ T8255] usb 7-1: Using ep0 maxpacket: 32 [ 775.838912][ T8255] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.897649][ T8255] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.957067][ T8255] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 775.999990][ T8255] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 776.048449][ T8255] usb 7-1: Product: syz [ 776.081123][ T8255] usb 7-1: Manufacturer: syz [ 776.208098][ T8255] hub 7-1:4.0: USB hub found [ 776.770585][ T8255] hub 7-1:4.0: config failed, can't read hub descriptor (err -22) [ 776.933282][T10516] loop0: detected capacity change from 0 to 64 [ 776.936478][ T8255] usb 7-1: USB disconnect, device number 2 [ 777.242018][ T4869] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 777.779119][ T7964] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0xb5/0x300, xfs_cntbt block 0x6 [ 777.833498][ T7964] XFS (loop5): Unmount and run xfs_repair [ 777.872687][ T7964] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 777.914011][ T7964] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 777.964830][ T7964] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 778.015941][ T7964] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 778.086265][ T7964] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 778.119619][ T7964] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 778.175634][ T7964] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 778.225842][ T7964] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 778.292596][ T7964] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 778.330959][ T7964] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x6 len 2 error 74 [ 778.429032][ T7964] XFS (loop5): page discard on page ffffea0001d83e10, inode 0x29, pos 0. [ 778.486233][T10044] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 778.600995][T10044] XFS (loop5): Uncorrected metadata errors detected; please run xfs_repair. [ 779.229499][T10534] loop6: detected capacity change from 0 to 512 [ 779.455780][T10534] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 779.551724][T10534] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 780.268928][ T9822] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.189536][T10553] loop4: detected capacity change from 0 to 32768 [ 781.199098][T10553] btrfs: Deprecated parameter 'usebackuproot' [ 781.205483][T10553] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 781.231992][T10553] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.860 (10553) [ 781.258940][T10553] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 781.269649][T10553] BTRFS info (device loop4): using crc32c checksum algorithm [ 781.277455][T10553] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 781.369359][ T7967] BTRFS warning (device loop4): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb0e5ffa5 level 0 [ 781.431885][T10553] BTRFS warning (device loop4): couldn't read tree root [ 781.439410][T10553] BTRFS warning (device loop4): try to load backup roots slot 1 [ 781.453303][ T7967] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x32d10ca2 level 0 [ 781.467647][T10553] BTRFS warning (device loop4): couldn't read tree root [ 781.475700][T10553] BTRFS warning (device loop4): try to load backup roots slot 2 [ 781.487731][ T7964] BTRFS warning (device loop4): checksum verify failed on logical 5255168 mirror 1 wanted 0x9df47653 found 0x6344b7f5 level 1 [ 781.514357][T10553] BTRFS warning (device loop4): couldn't read tree root [ 781.521639][T10553] BTRFS warning (device loop4): try to load backup roots slot 3 [ 781.933348][T10553] BTRFS info (device loop4): rebuilding free space tree [ 783.059245][T10572] loop0: detected capacity change from 0 to 65536 [ 783.111964][T10581] loop6: detected capacity change from 0 to 32768 [ 783.121384][T10581] btrfs: Deprecated parameter 'usebackuproot' [ 783.127732][T10581] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 783.161057][T10581] BTRFS info: device /dev/loop6 (7:6) using temp-fsid 825a38de-b7cb-47d6-961d-7244a8545fbd [ 783.170345][T10553] BTRFS info (device loop4): disabling free space tree [ 783.175718][T10581] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.865 (10581) [ 783.179161][T10553] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 783.200924][T10553] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 783.234603][T10553] BTRFS info (device loop4): checking UUID tree [ 783.237480][T10572] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 783.242527][T10553] BTRFS info (device loop4): enabling ssd optimizations [ 783.256325][T10553] BTRFS info (device loop4): turning off barriers [ 783.263084][T10553] BTRFS info (device loop4): turning on sync discard [ 783.273164][T10553] BTRFS info (device loop4): enabling disk space caching [ 783.280383][T10553] BTRFS info (device loop4): force clearing of disk cache [ 783.288837][T10553] BTRFS info (device loop4): enabling auto defrag [ 783.295521][T10553] BTRFS info (device loop4): trying to use backup root at mount time [ 783.303844][T10553] BTRFS info (device loop4): max_inline set to 0 [ 783.313378][T10572] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 783.328795][T10581] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 783.339343][T10581] BTRFS info (device loop6): using crc32c checksum algorithm [ 783.347160][T10581] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 783.460353][ T7971] BTRFS warning (device loop6): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb0e5ffa5 level 0 [ 783.554948][T10581] BTRFS warning (device loop6): couldn't read tree root [ 783.562237][T10581] BTRFS warning (device loop6): try to load backup roots slot 1 [ 783.571642][ T35] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x32d10ca2 level 0 [ 783.595088][T10581] BTRFS warning (device loop6): couldn't read tree root [ 783.602279][T10581] BTRFS warning (device loop6): try to load backup roots slot 2 [ 783.613984][ T7964] BTRFS warning (device loop6): checksum verify failed on logical 5255168 mirror 1 wanted 0x9df47653 found 0x6344b7f5 level 1 [ 783.667717][T10572] XFS (loop0): Ending clean mount [ 783.739939][T10581] BTRFS warning (device loop6): couldn't read tree root [ 783.747416][T10581] BTRFS warning (device loop6): try to load backup roots slot 3 [ 783.851849][T10581] BTRFS info (device loop6): rebuilding free space tree [ 783.910121][T10572] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0xb5/0x300, xfs_cntbt block 0x6 [ 783.921901][T10572] XFS (loop0): Unmount and run xfs_repair [ 783.928133][T10572] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 783.935843][T10572] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 783.945102][T10572] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 783.954324][T10572] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 783.963630][T10572] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 783.972823][T10572] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 783.979761][T10581] BTRFS info (device loop6): disabling free space tree [ 783.986853][T10572] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 783.995159][T10581] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 783.995293][T10581] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 784.030842][T10572] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 784.040012][T10572] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 784.049169][T10572] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x6 len 2 error 74 [ 784.061434][T10572] XFS (loop0): page discard on page ffffea0000b2e530, inode 0x26, pos 3072. [ 784.072604][T10581] BTRFS info (device loop6): checking UUID tree [ 784.074297][T10572] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0xb5/0x300, xfs_cntbt block 0x6 [ 784.095899][T10572] XFS (loop0): Unmount and run xfs_repair [ 784.101801][T10572] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 784.105096][T10581] BTRFS info (device loop6): enabling ssd optimizations [ 784.111232][T10572] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 784.116729][T10581] BTRFS info (device loop6): turning off barriers [ 784.125649][T10572] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 784.125755][T10572] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 784.132187][T10581] BTRFS info (device loop6): turning on sync discard [ 784.141230][T10572] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 784.150143][T10581] BTRFS info (device loop6): enabling disk space caching [ 784.150241][T10581] BTRFS info (device loop6): force clearing of disk cache [ 784.157140][T10572] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 784.166217][T10581] BTRFS info (device loop6): enabling auto defrag [ 784.173459][T10572] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 784.180418][T10581] BTRFS info (device loop6): trying to use backup root at mount time [ 784.195265][T10572] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 784.199753][T10581] BTRFS info (device loop6): max_inline set to 0 [ 784.210429][T10572] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 784.210532][T10572] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x6 len 2 error 74 [ 784.211379][T10572] XFS (loop0): page discard on page ffffea0000d18bc0, inode 0x26, pos 4096. [ 784.212057][ T8255] loop0: writeback error on inode 38, offset 0, sector 22 [ 784.368445][ T5593] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 784.487549][T10581] netlink: 56 bytes leftover after parsing attributes in process `syz.6.865'. [ 787.243984][T10627] loop1: detected capacity change from 0 to 32768 [ 787.320391][T10627] (syz.1.869,10627,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 787.350436][T10627] (syz.1.869,10627,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 787.381170][ T7961] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0xb5/0x300, xfs_cntbt block 0x6 [ 787.474728][ T7961] XFS (loop0): Unmount and run xfs_repair [ 787.486063][ T7961] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 787.502557][ T7961] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 787.514323][T10627] JBD2: Ignoring recovery information on journal [ 787.576314][ T7961] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 787.585781][ T7961] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 787.595212][ T7961] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 787.624893][ T7961] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 787.646996][T10627] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 787.693168][ T7961] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 787.753467][ T7961] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 787.795767][ T9822] BTRFS info (device loop6): last unmount of filesystem 825a38de-b7cb-47d6-961d-7244a8545fbd [ 787.815087][ T7961] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 787.864131][ T7961] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x6 len 2 error 74 [ 787.940118][ T7961] XFS (loop0): page discard on page ffffea0001d770c0, inode 0x29, pos 0. [ 788.017935][ T29] audit: type=1800 audit(1777788691.165:16): pid=10627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.869" name="file0" dev="loop1" ino=16983 res=0 errno=0 [ 788.085365][ T5575] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 788.110763][ T5575] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair. [ 788.866383][ T5581] ocfs2: Unmounting device (7,1) on (node local) [ 790.048895][T10662] xt_connbytes: Forcing CT accounting to be enabled [ 790.378576][T10668] loop4: detected capacity change from 0 to 8 [ 791.555221][T10675] SQUASHFS error: lzo decompression failed, data probably corrupt [ 791.568351][T10675] SQUASHFS error: Failed to read block 0x0: -5 [ 791.575207][T10675] SQUASHFS error: Failed to read block 0xff: -5 [ 791.582055][T10675] SQUASHFS error: lzo decompression failed, data probably corrupt [ 791.590271][T10675] SQUASHFS error: Failed to read block 0x0: -5 [ 792.051851][ T29] audit: type=1800 audit(1777788694.755:17): pid=10675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.880" name="file2" dev="loop4" ino=3 res=0 errno=0 [ 792.637854][T10673] loop5: detected capacity change from 0 to 65536 [ 792.852226][T10673] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 792.881558][T10673] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 793.269845][T10673] XFS (loop5): Ending clean mount [ 793.749640][T10673] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0xb5/0x300, xfs_cntbt block 0x6 [ 793.761365][T10673] XFS (loop5): Unmount and run xfs_repair [ 793.767473][T10673] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 793.775155][T10673] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 793.784322][T10673] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 793.793719][T10673] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 793.802870][T10673] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 793.811905][T10673] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 793.828311][T10673] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 793.841043][T10673] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 793.851045][T10673] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 793.860423][T10673] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x6 len 2 error 74 [ 793.872740][T10673] XFS (loop5): page discard on page ffffea0000c29e30, inode 0x26, pos 3072. [ 793.884395][T10673] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0xb5/0x300, xfs_cntbt block 0x6 [ 793.896280][T10673] XFS (loop5): Unmount and run xfs_repair [ 793.902180][T10673] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 793.909995][T10673] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 793.924237][T10673] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 793.935292][T10673] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 793.944617][T10673] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 793.954127][T10673] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 793.963319][T10673] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 793.972549][T10673] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 793.981602][T10673] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 793.990857][T10673] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x6 len 2 error 74 [ 794.007964][T10673] XFS (loop5): page discard on page ffffea0002138060, inode 0x26, pos 4096. [ 794.023020][ T8255] loop5: writeback error on inode 38, offset 0, sector 22 [ 794.827422][ T8255] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 795.110558][ T8255] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 88, changing to 7 [ 795.195073][ T8255] usb 5-1: language id specifier not provided by device, defaulting to English [ 795.272499][ T8255] usb 5-1: New USB device found, idVendor=ffad, idProduct=a001, bcdDevice= 0.40 [ 795.330367][ T8255] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.379450][ T8255] usb 5-1: Product: syz [ 795.398951][ T8255] usb 5-1: Manufacturer: syz [ 795.420573][T10697] loop1: detected capacity change from 0 to 512 [ 795.423028][ T8255] usb 5-1: SerialNumber: syz [ 795.678399][T10697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 795.782033][ T8255] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 795.803888][T10697] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 796.437669][ T5581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 796.547408][ T8255] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 796.639959][ T7975] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0xb5/0x300, xfs_cntbt block 0x6 [ 796.675448][ T8255] usb 5-1: USB disconnect, device number 31 [ 796.696897][ T7975] XFS (loop5): Unmount and run xfs_repair [ 796.713277][ T7975] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 796.739150][ T7975] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 796.788473][ T7975] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 796.807437][ T7975] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 796.831967][ T7975] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 796.850235][ T7975] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 796.895322][ T7975] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 796.941415][ T7975] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 796.966337][ T7975] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 796.993239][ T7975] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x6 len 2 error 74 [ 797.023528][ T7975] XFS (loop5): page discard on page ffffea000208ad70, inode 0x29, pos 0. [ 797.061959][T10044] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 797.107050][T10044] XFS (loop5): Uncorrected metadata errors detected; please run xfs_repair. [ 797.259317][T10693] udevd[10693]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 797.950690][T10718] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 798.162948][T10716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.893'. [ 798.829657][T10724] binder: 10722:10724 ioctl c0306201 200000000080 returned -14 [ 798.968683][T10724] binder: 10722:10724 ioctl c0306201 2000000003c0 returned -14 [ 799.170909][T10728] netlink: 28 bytes leftover after parsing attributes in process `syz.4.896'. [ 799.892705][ T8255] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 800.110428][ T8255] usb 5-1: unable to get BOS descriptor or descriptor too short [ 800.169039][ T8255] usb 5-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice= 0.40 [ 800.199394][ T8255] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.226703][ T8255] usb 5-1: Product: syz [ 800.238673][ T8255] usb 5-1: Manufacturer: syz [ 800.259154][ T8255] usb 5-1: SerialNumber: syz [ 800.629464][ T8255] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 801.000474][T10737] loop1: detected capacity change from 0 to 1024 [ 801.314149][ T8255] usb 5-1: USB disconnect, device number 32 [ 801.626587][T10411] udevd[10411]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 802.555001][T10755] loop5: detected capacity change from 0 to 64 [ 802.592925][T10756] loop0: detected capacity change from 0 to 128 [ 802.850706][ T29] audit: type=1800 audit(1777788706.005:18): pid=10756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.908" name="file1" dev="loop0" ino=1048623 res=0 errno=0 [ 803.690252][T10767] loop1: detected capacity change from 0 to 1764 [ 803.974587][T10777] loop6: detected capacity change from 0 to 256 [ 804.109249][T10777] exfat: Deprecated parameter 'namecase' [ 804.488788][T10777] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x8d2f696c, utbl_chksum : 0xe619d30d) [ 805.263363][T10785] loop0: detected capacity change from 0 to 1024 [ 805.674786][T10789] fuse: Invalid rootmode [ 806.281427][T10799] loop0: detected capacity change from 0 to 164 [ 807.340976][T10804] loop1: detected capacity change from 0 to 4096 [ 807.400983][T10804] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 807.772635][T10804] ntfs3(loop1): ino=19, mi_enum_attr [ 807.810523][T10804] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 808.934164][T10827] team0: Port device syz_tun removed [ 809.310204][T10831] Process accounting resumed [ 810.002537][ T8255] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 810.202726][ T8255] usb 6-1: Using ep0 maxpacket: 16 [ 810.238600][ T8255] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.269029][ T8255] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 810.351329][ T8255] usb 6-1: config 0 interface 0 has no altsetting 0 [ 810.383297][ T8255] usb 6-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 810.433823][ T8255] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.539237][ T8255] usb 6-1: config 0 descriptor?? [ 813.507192][T10872] fuse: Unknown parameter 'use00000000000000000000' [ 813.692524][ T29] audit: type=1326 audit(1777788716.575:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.1.953" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83d19cdd9 code=0x7ffc0000 [ 814.136228][T10873] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 814.221680][ T29] audit: type=1326 audit(1777788716.585:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.1.953" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83d19cdd9 code=0x7ffc0000 [ 814.568893][ T29] audit: type=1326 audit(1777788716.595:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.1.953" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7fa83d19cdd9 code=0x7ffc0000 [ 814.938861][ T29] audit: type=1326 audit(1777788716.595:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.1.953" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83d19cdd9 code=0x7ffc0000 [ 815.155760][ T8255] usbhid 6-1:0.0: can't add hid device: -71 [ 815.167440][ T8255] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 815.180181][ T8255] usb 6-1: USB disconnect, device number 2 [ 815.209754][ T29] audit: type=1326 audit(1777788716.605:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.1.953" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83d19cdd9 code=0x7ffc0000 [ 815.477455][ T29] audit: type=1326 audit(1777788716.605:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.1.953" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa83d19cdd9 code=0x7ffc0000 [ 815.551603][T10880] netlink: 12 bytes leftover after parsing attributes in process `syz.5.955'. [ 815.766423][ T29] audit: type=1326 audit(1777788716.605:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.1.953" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83d19cdd9 code=0x7ffc0000 [ 816.016144][ T29] audit: type=1326 audit(1777788716.615:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.1.953" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83d19cdd9 code=0x7ffc0000 [ 816.132141][ T29] audit: type=1326 audit(1777788716.615:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.1.953" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fa83d19cdd9 code=0x7ffc0000 [ 816.254130][ T29] audit: type=1326 audit(1777788716.625:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.1.953" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83d19cdd9 code=0x7ffc0000 [ 816.568820][T10893] netlink: 48 bytes leftover after parsing attributes in process `syz.5.961'. [ 817.457281][ T6828] Bluetooth: hci1: Frame reassembly failed (-84) [ 817.633108][T10902] nbd6: detected capacity change from 0 to 63 [ 817.659806][T10905] block nbd6: NBD_DISCONNECT [ 817.685160][T10905] block nbd6: Disconnected due to user request. [ 817.721027][T10905] block nbd6: shutting down sockets [ 818.365067][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.371911][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 819.461476][T10928] loop4: detected capacity change from 0 to 1024 [ 819.482726][ T5589] Bluetooth: hci1: command 0x1003 tx timeout [ 819.483947][ T4869] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 820.082728][ T4869] Bluetooth: hci5: command tx timeout [ 820.116154][T10928] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 820.411328][T10928] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #12: block 7: comm syz.4.975: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 820.672877][T10928] EXT4-fs (loop4): Remounting filesystem read-only [ 821.642141][ T5593] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.555251][T10947] ===================================================== [ 825.567229][T10947] BUG: KMSAN: uninit-value in mptcp_established_options+0x112f/0x3530 [ 825.576974][T10947] mptcp_established_options+0x112f/0x3530 [ 825.583091][T10947] tcp_established_options+0x312/0xcc0 [ 825.588760][T10947] __tcp_transmit_skb+0x5dc/0x5fe0 [ 825.594335][T10947] __tcp_send_ack+0x967/0xad0 [ 825.599197][T10947] tcp_send_ack+0x3d/0x60 [ 825.603920][T10947] mptcp_subflow_shutdown+0x164/0x690 [ 825.609519][T10947] mptcp_check_send_data_fin+0x31b/0x3d0 [ 825.615437][T10947] __mptcp_close+0x860/0x1360 [ 825.620259][T10947] mptcp_close+0x42/0x260 [ 825.625701][T10947] inet_release+0x1ee/0x2a0 [ 825.630432][T10947] sock_close+0xd6/0x2f0 [ 825.635023][T10947] __fput+0x60e/0x1010 [ 825.639241][T10947] ____fput+0x25/0x30 [ 825.643568][T10947] task_work_run+0x208/0x2b0 [ 825.648342][T10947] exit_to_user_mode_loop+0x306/0x1b60 [ 825.654125][T10947] do_syscall_64+0x236/0xf80 [ 825.662632][T10947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.668699][T10947] [ 825.671091][T10947] Local variable opts created at: [ 825.671199][T10953] loop5: detected capacity change from 0 to 1024 [ 825.677457][T10947] __tcp_transmit_skb+0x4d/0x5fe0 [ 825.687823][T10947] __tcp_send_ack+0x967/0xad0 [ 825.692715][T10947] [ 825.695126][T10947] CPU: 1 UID: 0 PID: 10947 Comm: syz.6.980 Not tainted syzkaller #0 PREEMPT(full) [ 825.704668][T10947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 825.715194][T10947] ===================================================== [ 825.722280][T10947] Disabling lock debugging due to kernel taint [ 825.775713][T10947] Kernel panic - not syncing: kmsan.panic set ... [ 825.782302][T10947] CPU: 1 UID: 0 PID: 10947 Comm: syz.6.980 Tainted: G B syzkaller #0 PREEMPT(full) [ 825.793327][T10947] Tainted: [B]=BAD_PAGE [ 825.797568][T10947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 825.807732][T10947] Call Trace: [ 825.811087][T10947] [ 825.814099][T10947] __dump_stack+0x26/0x30 [ 825.818568][T10947] dump_stack_lvl+0x50/0x1c0 [ 825.823291][T10947] ? dump_stack+0x12/0x25 [ 825.827754][T10947] dump_stack+0x1e/0x25 [ 825.832037][T10947] vpanic+0x7b4/0x1430 [ 825.836283][T10947] panic+0x15d/0x160 [ 825.840366][T10947] kmsan_report+0x31a/0x320 [ 825.845033][T10947] ? __msan_warning+0x1b/0x30 [ 825.849862][T10947] ? mptcp_established_options+0x112f/0x3530 [ 825.855995][T10947] ? tcp_established_options+0x312/0xcc0 [ 825.861801][T10947] ? __tcp_transmit_skb+0x5dc/0x5fe0 [ 825.867212][T10947] ? __tcp_send_ack+0x967/0xad0 [ 825.872188][T10947] ? tcp_send_ack+0x3d/0x60 [ 825.876842][T10947] ? mptcp_subflow_shutdown+0x164/0x690 [ 825.882538][T10947] ? mptcp_check_send_data_fin+0x31b/0x3d0 [ 825.888493][T10947] ? __mptcp_close+0x860/0x1360 [ 825.893483][T10947] ? mptcp_close+0x42/0x260 [ 825.898141][T10947] ? inet_release+0x1ee/0x2a0 [ 825.902970][T10947] ? sock_close+0xd6/0x2f0 [ 825.907546][T10947] ? __fput+0x60e/0x1010 [ 825.911913][T10947] ? ____fput+0x25/0x30 [ 825.916185][T10947] ? task_work_run+0x208/0x2b0 [ 825.921069][T10947] ? exit_to_user_mode_loop+0x306/0x1b60 [ 825.926845][T10947] ? do_syscall_64+0x236/0xf80 [ 825.931763][T10947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.937974][T10947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.944223][T10947] ? kmsan_get_metadata+0xf1/0x160 [ 825.949523][T10947] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 825.955509][T10947] ? mptcp_established_options+0xe1/0x3530 [ 825.961470][T10947] ? filter_irq_stacks+0x49/0x190 [ 825.966630][T10947] ? stack_depot_save_flags+0x35/0x790 [ 825.972274][T10947] ? kmsan_get_metadata+0xf1/0x160 [ 825.977563][T10947] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 825.984068][T10947] ? kmsan_get_metadata+0xf1/0x160 [ 825.989362][T10947] __msan_warning+0x1b/0x30 [ 825.994010][T10947] mptcp_established_options+0x112f/0x3530 [ 826.000036][T10947] tcp_established_options+0x312/0xcc0 [ 826.005693][T10947] __tcp_transmit_skb+0x5dc/0x5fe0 [ 826.010947][T10947] ? kmem_cache_alloc_node_noprof+0x3f5/0x12c0 [ 826.017287][T10947] ? kmsan_get_metadata+0xf1/0x160 [ 826.022563][T10947] ? kmsan_get_metadata+0xf1/0x160 [ 826.027846][T10947] ? kmsan_get_metadata+0xf1/0x160 [ 826.033126][T10947] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 826.039123][T10947] ? __alloc_skb+0xb7d/0x1190 [ 826.043961][T10947] __tcp_send_ack+0x967/0xad0 [ 826.048792][T10947] tcp_send_ack+0x3d/0x60 [ 826.053273][T10947] mptcp_subflow_shutdown+0x164/0x690 [ 826.058796][T10947] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 826.064785][T10947] mptcp_check_send_data_fin+0x31b/0x3d0 [ 826.070590][T10947] __mptcp_close+0x860/0x1360 [ 826.075449][T10947] ? __pfx_mptcp_close+0x10/0x10 [ 826.080554][T10947] mptcp_close+0x42/0x260 [ 826.085043][T10947] ? __pfx_mptcp_close+0x10/0x10 [ 826.090142][T10947] inet_release+0x1ee/0x2a0 [ 826.094801][T10947] ? __pfx_inet_release+0x10/0x10 [ 826.099977][T10947] sock_close+0xd6/0x2f0 [ 826.104397][T10947] ? __pfx_sock_close+0x10/0x10 [ 826.109410][T10947] __fput+0x60e/0x1010 [ 826.113640][T10947] ? __pfx_____fput+0x10/0x10 [ 826.118454][T10947] ____fput+0x25/0x30 [ 826.122559][T10947] task_work_run+0x208/0x2b0 [ 826.127283][T10947] exit_to_user_mode_loop+0x306/0x1b60 [ 826.132911][T10947] ? __x64_sys_close_range+0x97/0xe0 [ 826.138348][T10947] do_syscall_64+0x236/0xf80 [ 826.143083][T10947] ? clear_bhb_loop+0x50/0xa0 [ 826.147895][T10947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.153925][T10947] RIP: 0033:0x7fda2219cdd9 [ 826.158440][T10947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.178179][T10947] RSP: 002b:00007fff142f17a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 826.186736][T10947] RAX: 0000000000000000 RBX: 00007fff142f1890 RCX: 00007fda2219cdd9 [ 826.194821][T10947] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 826.202901][T10947] RBP: 00000000000c8f65 R08: 0000000000000001 R09: 0000000000000000 [ 826.210977][T10947] R10: 0000001b30f20000 R11: 0000000000000246 R12: 00007fff142f18d0 [ 826.219067][T10947] R13: 00007fda22415fac R14: 00000000000c98c7 R15: 00007fda22415fa0 [ 826.227181][T10947] [ 826.230643][T10947] Kernel Offset: disabled [ 826.235020][T10947] Rebooting in 86400 seconds..