last executing test programs: 9.656518385s ago: executing program 4 (id=8321): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000001340)={[{@lazytime}, {@gquota}, {@swalloc}, {@filestreams}, {@grpquota}, {@allocsize={'allocsize', 0x3d, [0x35, 0x39, 0x6d]}}, {@gquota}], [{@flag='nomand'}]}, 0x4, 0x9606, &(0x7f0000012cc0)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x200, 0x4) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r5, 0x0, 0x0, 0x1000f4) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r6, 0x20, 0x0, 0x0) 9.493119154s ago: executing program 1 (id=8324): preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaae19d74de7dc186dd6004000000380600fe800000000000", @ANYRES32=0x41424344], 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.433481802s ago: executing program 1 (id=8328): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r0, 0x80045113, 0x0) 8.32582642s ago: executing program 1 (id=8329): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="120100000a38a74030088000a0f0000000010902120001000000000904"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 7.632359975s ago: executing program 0 (id=8334): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r2 = accept(r1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) getpriority(0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) 7.488676721s ago: executing program 0 (id=8335): r0 = eventfd2(0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup3(r1, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x0, 0x0, 0x0) 7.247106761s ago: executing program 0 (id=8336): utimensat(0xffffffffffffffff, &(0x7f0000040900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 7.167988179s ago: executing program 0 (id=8337): syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x0, 0x0, 0x8000}, 0x76) close(0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x13, 0x7, 0x10001, 0x9}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000a40)=""/166}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) 6.886009687s ago: executing program 1 (id=8339): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000006c0)=""/83, 0x53}}, 0x120) writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f0000000c00)="ff0c1d92", 0x4}], 0x2) 6.695359219s ago: executing program 1 (id=8341): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) ioctl$TUNSETDEBUG(r0, 0x8903, 0x0) 6.395636276s ago: executing program 2 (id=8343): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/121, 0x79}], 0x1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_call\x00', r2}, 0x10) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) close_range(r4, 0xffffffffffffffff, 0x0) 6.053663341s ago: executing program 0 (id=8344): mlockall(0x3) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r0 = inotify_init1(0x0) close(r0) socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000a40)=""/187, &(0x7f0000000b00)=0xbb) 6.017143049s ago: executing program 2 (id=8345): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='contention_begin\x00', r0}, 0x10) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r1, &(0x7f0000000100)=@abs={0x27}, 0x6e) 5.675770286s ago: executing program 2 (id=8346): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047451, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0xfe8e, 0x12) creat(0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/18, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32], 0x64}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.952018476s ago: executing program 4 (id=8347): ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000000140)) 4.623439842s ago: executing program 2 (id=8348): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={0x0}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}]}, 0x40}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="e10931d8640a", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x10, 0x88, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}}, 0x0) r6 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout_data(r6, 0x107, 0x16, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[], 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000040)={0x0, 0x1, 0xd3, 0x9, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x3}]}, 0x28}, 0x1, 0x8}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0xce4, r5, 0x100, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0xc94, 0x8, 0x0, 0x1, [{0x1fc, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "66917a737f609a2a3de77f9b6e83406fa66699c91cbd5a99387df45bc25deb7b"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d1a8e70d20d806bb6c12b05df0c2f05c7aa26e925bfd4570fecc3165a8d05e82"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x10001, @dev={0xfe, 0x80, '\x00', 0x31}, 0x6}}, @WGPEER_A_ALLOWEDIPS={0x144, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x7ff, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6}}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x4dc, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3b7e86a18c8a315bf24a98715aea143e43abe1433c8b69102e03291f5f79431a"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "356e57219bb50b8e63c09c93c64652aeb09627f84c7f786e1ffe76dfe69e7487"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xa58, @mcast1, 0x7}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "de2517e9fbf73ba2e2b74386a9e53b33841591b5e542829c2a805973682a8487"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d4df4450d6e7d95d8448a775678ba47459de553cddebdd552e7f1405fe5286fc"}, @WGPEER_A_ALLOWEDIPS={0x408, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x81}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x2}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2e}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}]}]}, {0x468, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x438, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d0a73c232c1d308431956b76bf3fdb64583d47536488525cc5598c1e20aeedc2"}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xfffff05a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fffffff}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @private=0xa010102}}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x34, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0x401}}]}, {0x70, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @private2, 0xf9b6}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0xce4}, 0x1, 0x0, 0x0, 0xc000}, 0x20008090) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r8) socket$nl_generic(0x10, 0x3, 0x10) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000050ecd28daa960bb757b6c2a2eeba1ca9dad05100000000001400030074ae077f7d52dbf177320113f7c3aa1d11b48e84aaf75990c42a7ff4767a220fc117f49add1c171cb84004dc3e13a2001f1c7494bb6f161601da75c51f802d1829bf09d0c1d87481f1249b3ec38eeae4d8d88542a29057e08583510c6f1839a9481dc2b4c0724f477b19835b91e42c16d4490ad06269fae3170206263bd8d6cda95bb1b3285cb43d9c652f4d1ee7927790d0907db411c3f0c4b655a2db10df0c92befa1a03c49314f23cdaf67093284e7370d934c803c33644fa9e27c87759e5bdfad0a13f9e04acf20e95a89d088e5510592790dcaef3567f159bbcffa9acd1aa8a7b6ddec074e5eb1a66305c000000000000000000000000000000000000ab9fd4fdd1fd7e317f9a0efcb636b12dc7a0272da7b0089affc147323038e18ba5834451505ba0a08b07a45429199ef7d360ddea96508b014340f6bcd9df597bbf85a759d26277af", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) 4.531928392s ago: executing program 3 (id=8349): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4) r0 = syz_io_uring_setup(0x38, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f00000002c0), &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)={0x77359400}}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000000c0)=ANY=[], 0x118) r3 = syz_io_uring_setup(0x24f7, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r4, r5, &(0x7f0000000740)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}) listen(r6, 0x0) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x101) shutdown(r6, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) io_uring_enter(r0, 0x64e7, 0x0, 0x0, 0x0, 0x0) 4.284146319s ago: executing program 2 (id=8350): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x20000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) kcmp(r0, r0, 0x5, r1, 0xffffffffffffffff) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x0) r3 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000740)={&(0x7f0000000500)="13fb80fbd389b141a163280f4fac1f989606e325469b430d393d726580b5d7780df561d1284ad03d50d274aa3cefb2573e7637394056b874952c62a2607db10bf868ba7403b90e7770c81f8eedd1592e6ccc8a992b49a92a95d884d9983fc26a594e01", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r4, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) r5 = syz_clone(0x0, &(0x7f00000008c0), 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000580)="6ca48f73a7b188d0b8ba6897013cdf0f772171f2d4f3051e39ee3c6ab911d546b1ed9a20756f243a42d0e255e45311d61a27fc8b75965f1421af2f389721a97224cd762dba6ecd85b570435765f45c9d33d5db5c350b6c8bc7ee6c29e427afe841f03c070575f57435705c4177f68e95844780d6ed6c40c398bc64e71963ff3db7990bf0") ioprio_get$pid(0x1, r5) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 3.92824118s ago: executing program 3 (id=8351): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f0000000c00)="ff0c1d92", 0x4}], 0x2) 3.208701022s ago: executing program 3 (id=8352): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000140)='./file1\x00', 0x188080, &(0x7f0000001480), 0x1, 0x4a6, &(0x7f0000000580)="$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") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000200)={0x0, @dev, 0x0, 0x2, 'sed\x00'}, 0xffffffffffffff1c) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00\a', @ANYRES16], 0xd) mq_notify(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) setgroups(0x0, 0x0) lseek(r1, 0x9, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001840)=@newtaction={0x14, 0x30, 0x25}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="00000000000000009000128009000100766c616e0000000080000280040003800c00020004000000020000000c000200540a0000180000000600010001000000580004800c00010000000000680000000c00010005000000ee9500000c00010003000000018000000c000100220b0000000000000c00010004000000010000000c00010081ae000001", @ANYRES32=r4], 0xc0}, 0x1, 0xba01}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) 2.323570075s ago: executing program 4 (id=8353): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000004840)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast2=0xe0008002}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr, @remote}}}], 0x20}}], 0x1, 0x0) 1.862624363s ago: executing program 3 (id=8354): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) socket$rds(0x15, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, &(0x7f0000000040)={0xda62, 0x1, [{0x1, 0x1}]}) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x4, 0x3) fanotify_init(0x200, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x0, 0x0}) 1.403344982s ago: executing program 4 (id=8355): socket$kcm(0x10, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) 455.754991ms ago: executing program 4 (id=8356): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000540)='ext4_ext_convert_to_initialized_enter\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x541b, 0x2000ff00) 437.229569ms ago: executing program 3 (id=8357): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001e00)={'macvtap0\x00'}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1400, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001d000b63d25a80648c2594f90524fc60", 0x14}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 233.237962ms ago: executing program 4 (id=8358): creat(0x0, 0x92) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r3 = inotify_init() inotify_add_watch(r3, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0xffffffff, 0x2003) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000200001000000000000000000022000000000000000000000140003e46b6f000000000000000000000000000008f90000000020aaf53a44fc8deef56c2c0000"], 0x38}}, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x25, &(0x7f00000000c0)=0x101, 0x4) sendto$inet(r4, &(0x7f0000000280)="b2", 0x1, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) 229.071464ms ago: executing program 3 (id=8359): socket$packet(0x11, 0x0, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB='.'], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x40}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00'}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1001) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) brk(0x55555ede5ffe) brk(0x55555ede6001) 101.975294ms ago: executing program 0 (id=8360): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_RCVMTU(r6, 0x6, 0xd, 0x0, &(0x7f0000000180)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000002200)='./file0\x00', 0x0) chroot(0x0) mount(0x0, 0x0, 0x0, 0x2909020, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 100.133547ms ago: executing program 2 (id=8361): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x174, &(0x7f0000000240)="$eJzskj9OAkEUxr9Zlj9aGE2saCCRKBbKsqgxNlpi7wEksCJxUWE3UQjFGmMoLIylJ+AaJl5AC+MBqCmItVkzs28ns17B+RV8+755b2beG869npcF8DMfNXEEQQpL+GAMJoACi7yZEekz6SfpUyR4p7xj8u9J895geNFwXadfPChiJWEA+BaetLzDOwMzsdXXfNTkH6cAwjAMudcCeDrUnBSAnpKTN4FV0UQoc3gjPNgAUPG71xVvMNzqdBttp+1c2nZtz9qxrF27ctZxHSv6ZcoR1Aq4bgLg81pQ1tMAHihnEUmYcjVaZ2ptRplheS1Zayi1sTK8ytos4vcCTrCOHICbgCluSexiQrRUB0OKgqqp3C86KycWtptXbmsMBhaXTWDKPapTpGVgq0FtP4ivPSYtkdZJJ6RT0sKfv4wp3vaRonIAZHDb8P1+lQ8p+pKeLT17OVAHxk99MZLNvRnQaDQajUaj0Wg0mv/ObwAAAP///ip6PA==") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4080, &(0x7f0000000580)=ANY=[@ANYRESDEC=r1, @ANYRES8=r2, @ANYRES8, @ANYRESHEX, @ANYRESDEC=r0, @ANYRES64], 0x2, 0xc2d, &(0x7f0000001900)="$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") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002cc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002d40)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001600000008000300", @ANYRES32=r6, @ANYBLOB="7eb906000802110000011000"], 0x28}}, 0x0) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) open(&(0x7f0000000480)='.\x00', 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000640)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) getpid() r8 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x0, 0x261, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r9}, &(0x7f0000000040), &(0x7f0000000240)}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000540)={0xc924, 0x20c, 0x7, 0x7}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000040)='autofs\x00', 0x500000, &(0x7f0000000840)='r\xaf\xd6\xf2\xa21\xf7\xd7L\xae\xc5;\xfe\xa5\xe5\xa7\xbf\x94\xf1\xd3\xc6A2\xfc\\\xa7\x10\xb7\xab\xfb\xfd2_Su)pEz\x1aM\x00o\xa0x\xeem4\x94x\xec\xa8e\xd3\x100H\x8c\xb6\xc4[Q\xfe\b\x13KuPR-\x91O\x86\xccb\x00\xc6\x9c\xd8\xf9\xa9\x93|RdY%\xb0\xe5\xee\"Ne/\xf3\xd4\xf8\x9cY\x12(\f\xa0\x1e)`\xc6\n\xae\x89\x10\xa2P\x14B5\x8f;\xd6\x93.nz\xc5\xb7D\xa6\x9b\xe2\x1c\xe5\x19\xd5Z\x15Z\xe3M<\x87\xad[\x16\x03\x02\'\x00\'\xe3\xb0\x8f\x9c\xfdH\xdb\xc6.\x19\x13\x8e\xf1\v\x00Tu2Y\xb9f7\x1ayT\xb45\xd1\xe0\x83+\x05\xe8d\x89\xa0\xbe\xff\xd2\xd8\x80\xa2=\xc5!\xf2\x19^\x9e0\x8b\xad\xf8\xeaI\xb7\xfd\xfeV\xedE\x01\xees\x81\xa7\xec\x9f\x8d`\xf4\xd2\xfb\x88Tp;\xccH\xc4\xa4\xfb\xefc|m^<\x84/OWW)d\xff\x7fh\xf0\xe3\xba\xfbL\xf6\xde\x9a\x10rVr\xe4\xb5+-\'\xa0\x9eK\xf7\xcc\xcb\xde\xeb\xc6N\x14\xcc\xb5<5\xd0\xa3|\xcc\x99\xa0\xf2\xff.9|W\xe7F\xa9L&\xb7-\x0f.\xa3\x15\xc6\x86\xa4C_\xc8W6<\xe8\x88\xa8\xf4\x01\xd8\xec\xa2') chdir(&(0x7f0000000080)='./file1\x00') ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0x541b, 0x0) 0s ago: executing program 1 (id=8362): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f0000000c00)="ff0c1d92", 0x4}], 0x2) kernel console output (not intermixed with test programs): e on filesystem root [ 3031.015845][ T5021] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 3031.071498][ T5022] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 3031.354581][ T5027] loop1: detected capacity change from 0 to 16 [ 3031.413145][ T5027] erofs: (device loop1): mounted with root inode @ nid 36. [ 3031.502692][ T5027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3031.720166][ T5036] syz.1.7702: attempt to access beyond end of device [ 3031.720166][ T5036] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 3031.836021][T27439] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3032.514854][ T5046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7705'. [ 3032.568035][ T5046] team0: entered promiscuous mode [ 3032.573180][ T5046] team_slave_1: entered promiscuous mode [ 3032.597493][ T5044] team0: left promiscuous mode [ 3032.615208][ T5044] team_slave_1: left promiscuous mode [ 3032.723755][ T5048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7706'. [ 3033.364175][ T5053] loop3: detected capacity change from 0 to 128 [ 3033.378231][ T5053] ufs: You didn't specify the type of your ufs filesystem [ 3033.378231][ T5053] [ 3033.378231][ T5053] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 3033.378231][ T5053] [ 3033.378231][ T5053] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 3033.409197][ T5053] ufs: ufstype=old is supported read-only [ 3033.796149][ T5053] ufs: ufs_fill_super(): bad magic number [ 3034.388972][ T5061] loop2: detected capacity change from 0 to 164 [ 3034.404182][ T5061] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 3034.860984][T27439] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 3034.920519][ T5063] loop3: detected capacity change from 0 to 4096 [ 3034.953484][ T5063] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 3035.140881][ T5073] loop4: detected capacity change from 0 to 1764 [ 3035.298994][ T5075] loop1: detected capacity change from 0 to 4096 [ 3035.330529][ T5075] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 3035.356790][ T5075] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 3035.369901][ T5075] ntfs3: loop1: Failed to load $MFT (-22). [ 3035.498566][ T5164] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 3035.741926][ T5164] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3035.784034][ T5164] usb 5-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 3035.805316][ T5164] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3035.836893][ T5164] usb 5-1: config 0 descriptor?? [ 3035.852483][ T5164] rndis_host 5-1:0.0: skipping garbage [ 3035.860876][ T5164] usb 5-1: bad CDC descriptors [ 3035.875857][ T5164] cdc_acm 5-1:0.0: skipping garbage [ 3035.885160][ T5164] cdc_acm 5-1:0.0: Control and data interfaces are not separated! [ 3035.894953][ T5164] cdc_acm 5-1:0.0: This needs exactly 3 endpoints [ 3035.901639][ T5164] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22 [ 3036.507344][ T5090] loop2: detected capacity change from 0 to 4096 [ 3036.513510][ T5094] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 3036.526075][ T5090] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 3036.754061][ T5094] loop0: detected capacity change from 0 to 8 [ 3036.826587][ T5094] unable to read xattr id index table [ 3036.865085][ T5092] xt_socket: unknown flags 0x2 [ 3037.014194][T21339] libceph: connect (1)[c::]:6789 error -101 [ 3037.048227][T21339] libceph: mon0 (1)[c::]:6789 connect error [ 3037.102062][ T5094] ceph: No mds server is up or the cluster is laggy [ 3037.585382][ T5108] loop1: detected capacity change from 0 to 16 [ 3037.604960][ T5108] erofs: (device loop1): mounted with root inode @ nid 36. [ 3037.636529][ T5108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3037.676106][ T5108] syz.1.7722: attempt to access beyond end of device [ 3037.676106][ T5108] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 3037.719895][ T5109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7721'. [ 3038.066059][ T5114] loop2: detected capacity change from 0 to 128 [ 3038.079830][ T5114] ufs: You didn't specify the type of your ufs filesystem [ 3038.079830][ T5114] [ 3038.079830][ T5114] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 3038.079830][ T5114] [ 3038.079830][ T5114] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 3038.110759][ T5114] ufs: ufstype=old is supported read-only [ 3038.263914][ T5114] ufs: ufs_fill_super(): bad magic number [ 3038.748472][ T5164] usb 5-1: USB disconnect, device number 86 [ 3038.830953][T27439] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3039.141076][ T5120] loop4: detected capacity change from 0 to 1764 [ 3039.192566][ T5121] loop2: detected capacity change from 0 to 16 [ 3039.394509][ T5121] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 3039.434613][ T5123] netlink: 276 bytes leftover after parsing attributes in process `syz.3.7726'. [ 3039.797284][ T5134] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 3039.858175][ T5164] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 3040.059284][ T5134] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3040.076743][ T5164] usb 4-1: Using ep0 maxpacket: 8 [ 3040.080431][ T5134] usb 5-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 3040.113727][ T5134] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3040.150393][ T5134] usb 5-1: config 0 descriptor?? [ 3040.173165][ T5134] rndis_host 5-1:0.0: skipping garbage [ 3040.190089][ T5134] usb 5-1: bad CDC descriptors [ 3040.200183][ T5164] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3040.217631][ T5164] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 3040.218101][ T5134] cdc_acm 5-1:0.0: skipping garbage [ 3040.242166][ T5128] overlayfs: failed to resolve './file1': -2 [ 3040.255017][ T5134] cdc_acm 5-1:0.0: Control and data interfaces are not separated! [ 3040.292755][ T5134] cdc_acm 5-1:0.0: This needs exactly 3 endpoints [ 3040.313702][ T5164] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3040.330371][ T5164] usb 4-1: config 0 descriptor?? [ 3040.345592][ T5134] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22 [ 3040.345976][ T5164] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 3040.361086][ T5164] usb 4-1: No valid video chain found. [ 3040.570934][T26009] usb 4-1: USB disconnect, device number 86 [ 3041.092835][ T5135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7729'. [ 3041.205931][ T5132] xt_socket: unknown flags 0x2 [ 3041.363568][ T5137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7730'. [ 3041.465954][ T5144] libceph: resolve '. [ 3041.465954][ T5144] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 3041.465954][ T5144] ' (ret=-3): failed [ 3041.853191][ T5144] Restarting kernel threads ... done. [ 3043.174366][T26009] usb 5-1: USB disconnect, device number 87 [ 3043.227553][ T5155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7735'. [ 3043.309727][ T5155] team0: entered promiscuous mode [ 3043.314847][ T5155] team_slave_1: entered promiscuous mode [ 3043.365505][ T5154] team0: left promiscuous mode [ 3043.374557][ T5154] team_slave_1: left promiscuous mode [ 3043.409255][ T5159] loop3: detected capacity change from 0 to 64 [ 3043.703018][ T5141] loop2: detected capacity change from 0 to 32768 [ 3044.334869][ T5141] workqueue: Failed to create a rescuer kthread for wq "bcachefs_copygc": -EINTR [ 3044.335385][ T5141] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): shutdown complete [ 3044.696105][T27439] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 3045.892446][ T5176] loop4: detected capacity change from 0 to 4096 [ 3045.970505][ T5176] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 3045.974336][ T5162] loop0: detected capacity change from 0 to 32768 [ 3045.999360][ T5176] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 3046.008103][ T5176] ntfs3: loop4: Failed to load $MFT (-22). [ 3046.342833][ T5162] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 3046.386021][ T5162] bcachefs (loop0): recovering from clean shutdown, journal seq 8 [ 3046.508741][ T5162] bcachefs (loop0): alloc_read... done [ 3046.536513][ T5162] bcachefs (loop0): stripes_read... done [ 3046.555025][ T5162] bcachefs (loop0): snapshots_read... done [ 3046.579438][ T5196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7745'. [ 3046.614563][ T5162] bcachefs (loop0): journal_replay... done [ 3046.652723][ T5162] bcachefs (loop0): resume_logged_ops... done [ 3046.685353][ T5162] bcachefs (loop0): going read-write [ 3046.740140][ T5162] bcachefs (loop0): bch2_copygc_start(): error creating copygc thread EINTR [ 3046.758422][ T5183] overlayfs: failed to resolve './file1': -2 [ 3046.807008][ T5162] bcachefs (loop0): error starting copygc thread [ 3046.829564][ T5162] bcachefs (loop0): going read-only [ 3046.834821][ T5162] bcachefs (loop0): finished waiting for writes to stop [ 3046.857742][ T5162] bcachefs (loop0): flushing journal and stopping allocators, journal seq 8 [ 3046.945485][ T5197] team0: entered promiscuous mode [ 3046.953545][ T5162] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 8 [ 3046.976232][ T5197] team_slave_1: entered promiscuous mode [ 3046.988866][ T5195] team0: left promiscuous mode [ 3047.058314][ T5195] team_slave_1: left promiscuous mode [ 3047.088425][ T5162] bcachefs (loop0): shutdown complete, journal seq 9 [ 3047.092818][T32585] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3047.129639][T32585] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3047.130388][ T5162] bcachefs (loop0): marking filesystem clean [ 3047.153967][T32585] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3047.165870][T32585] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3047.174031][T32585] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3047.181834][T32585] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3047.233900][ T5162] bcachefs (loop0): bch2_fs_start(): error starting filesystem EINTR [ 3047.264129][ T5189] loop1: detected capacity change from 0 to 32768 [ 3047.288263][ T5189] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.7743 (5189) [ 3047.301560][ T5162] bcachefs (loop0): shutting down [ 3047.327329][ T5189] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 3047.363346][ T5189] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 3047.374018][ T5162] bcachefs (loop0): shutdown complete [ 3047.546216][ T5189] BTRFS info (device loop1): using free-space-tree [ 3049.060249][ T5189] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 3049.060916][ T5189] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 3049.111768][ T5189] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 3049.286820][T32585] Bluetooth: hci4: command tx timeout [ 3050.326933][ T5189] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 3050.327913][ T5189] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 3050.356789][ T5189] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 3050.370475][ T5189] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 3050.380938][T32585] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 3050.384300][ T5189] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 3050.428062][T10480] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3050.446703][ T5189] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 3050.538290][ T5189] BTRFS error (device loop1): open_ctree failed [ 3050.682599][T32585] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 3051.070318][T10480] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3051.336167][T32585] Bluetooth: hci4: command tx timeout [ 3051.543689][T10480] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3051.564179][T32585] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 3051.821770][T10480] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3051.900537][ T5248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7753'. [ 3051.987568][ T5248] team0: entered promiscuous mode [ 3052.013791][ T5248] team_slave_1: entered promiscuous mode [ 3052.113490][ T5201] chnl_net:caif_netlink_parms(): no params data found [ 3052.155446][ T5247] team0: left promiscuous mode [ 3052.177312][ T5247] team_slave_1: left promiscuous mode [ 3052.219927][ T5251] loop4: detected capacity change from 0 to 4096 [ 3052.269114][ T5251] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 3052.299495][ T5255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7755'. [ 3052.344590][ T5251] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 3052.416457][ T5251] ntfs3: loop4: Failed to load $MFT (-22). [ 3052.539283][ T5255] team0: entered promiscuous mode [ 3052.557432][ T5255] team_slave_1: entered promiscuous mode [ 3052.595028][ T5201] bridge0: port 1(bridge_slave_0) entered blocking state [ 3052.622546][ T5201] bridge0: port 1(bridge_slave_0) entered disabled state [ 3052.646840][ T5201] bridge_slave_0: entered allmulticast mode [ 3052.682912][ T5201] bridge_slave_0: entered promiscuous mode [ 3052.705860][T10480] bridge_slave_1: left allmulticast mode [ 3052.711557][T10480] bridge_slave_1: left promiscuous mode [ 3052.734293][T10480] bridge0: port 2(bridge_slave_1) entered disabled state [ 3052.762190][T10480] bridge_slave_0: left allmulticast mode [ 3052.775908][T10480] bridge_slave_0: left promiscuous mode [ 3052.786004][T32585] Bluetooth: hci2: unexpected event for opcode 0x0c12 [ 3052.806781][T10480] bridge0: port 1(bridge_slave_0) entered disabled state [ 3053.415982][T32585] Bluetooth: hci4: command tx timeout [ 3053.781782][ T5265] loop4: detected capacity change from 0 to 32768 [ 3053.914403][ T5265] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 3053.954357][ T5265] bcachefs (loop4): recovering from clean shutdown, journal seq 8 [ 3054.003978][ T5265] bcachefs (loop4): alloc_read... done [ 3054.013485][ T5265] bcachefs (loop4): stripes_read... done [ 3054.019250][ T5265] bcachefs (loop4): snapshots_read... done [ 3054.028001][ T5265] bcachefs (loop4): journal_replay... done [ 3054.051691][ T5265] bcachefs (loop4): resume_logged_ops... done [ 3054.093659][ T5265] bcachefs (loop4): going read-write [ 3054.122154][ T5265] bcachefs (loop4): done starting filesystem [ 3054.302145][ T3248] bcachefs (loop4): shutting down [ 3054.314257][ T3248] bcachefs (loop4): going read-only [ 3054.320678][T10480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3054.333385][ T3248] bcachefs (loop4): finished waiting for writes to stop [ 3054.349632][ T3248] bcachefs (loop4): flushing journal and stopping allocators, journal seq 10 [ 3054.359812][T10480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3054.383114][T10480] bond0 (unregistering): Released all slaves [ 3054.399264][ T3248] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 11 [ 3054.418804][ T5254] team0: left promiscuous mode [ 3054.424041][ T5254] team_slave_1: left promiscuous mode [ 3054.433199][ T3248] bcachefs (loop4): shutdown complete, journal seq 12 [ 3054.444560][ T5201] bridge0: port 2(bridge_slave_1) entered blocking state [ 3054.495530][ T3248] bcachefs (loop4): marking filesystem clean [ 3054.528972][ T5201] bridge0: port 2(bridge_slave_1) entered disabled state [ 3054.539665][ T5201] bridge_slave_1: entered allmulticast mode [ 3054.568156][ T5201] bridge_slave_1: entered promiscuous mode [ 3054.605327][ T3248] bcachefs (loop4): shutdown complete [ 3054.679853][ T5282] loop0: detected capacity change from 0 to 64 [ 3054.743344][ C1] vkms_vblank_simulate: vblank timer overrun [ 3054.887558][ T5201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3055.106862][ T5201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3055.595937][T32585] Bluetooth: hci4: command tx timeout [ 3056.236602][ T5201] team0: Port device team_slave_0 added [ 3056.308414][ T5298] loop1: detected capacity change from 0 to 64 [ 3056.404175][T10480] hsr_slave_0: left promiscuous mode [ 3056.522301][T10480] hsr_slave_1: left promiscuous mode [ 3056.562134][T10480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3056.593900][T10480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3056.647211][T10480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3056.698296][T10480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3056.749168][T10480] veth1_macvtap: left promiscuous mode [ 3056.754763][T10480] veth0_macvtap: left promiscuous mode [ 3056.761324][T10480] veth1_vlan: left promiscuous mode [ 3056.766907][T10480] veth0_vlan: left promiscuous mode [ 3057.364638][ T5305] loop0: detected capacity change from 0 to 4096 [ 3057.446911][ T5305] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 3057.527261][ T5305] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 3057.553209][ T5305] ntfs3: loop0: Failed to load $MFT (-22). [ 3057.718243][ T5312] overlayfs: failed to resolve './file1': -2 [ 3058.348558][ T5307] loop4: detected capacity change from 0 to 32768 [ 3058.595408][ T5307] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 3058.676139][ T5307] bcachefs (loop4): recovering from clean shutdown, journal seq 8 [ 3058.838489][ T5307] bcachefs (loop4): alloc_read... done [ 3058.844052][ T5307] bcachefs (loop4): stripes_read... done [ 3058.853080][ T5307] bcachefs (loop4): snapshots_read... done [ 3058.901559][ T5307] bcachefs (loop4): journal_replay... done [ 3058.938322][ T5307] bcachefs (loop4): resume_logged_ops... done [ 3058.986239][ T5307] bcachefs (loop4): going read-write [ 3059.014882][ T5307] bcachefs (loop4): done starting filesystem [ 3059.270330][T32585] Bluetooth: hci0: unexpected event for opcode 0x0c12 [ 3059.524929][ T3248] bcachefs (loop4): shutting down [ 3059.530740][ T3248] bcachefs (loop4): going read-only [ 3059.538771][ T3248] bcachefs (loop4): finished waiting for writes to stop [ 3059.558476][ T3248] bcachefs (loop4): flushing journal and stopping allocators, journal seq 10 [ 3059.601368][ T5171] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 3059.612966][ T3248] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 11 [ 3059.632991][ T3248] bcachefs (loop4): shutdown complete, journal seq 12 [ 3059.640802][ T3248] bcachefs (loop4): marking filesystem clean [ 3059.687812][ T3248] bcachefs (loop4): shutdown complete [ 3059.835820][ T5171] usb 4-1: Using ep0 maxpacket: 8 [ 3059.874910][ T5171] usb 4-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=56.a0 [ 3059.926618][T10480] team0 (unregistering): Port device team_slave_1 removed [ 3059.935802][ T5171] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3059.980350][ T5171] usb 4-1: Product: syz [ 3059.984548][ T5171] usb 4-1: Manufacturer: syz [ 3059.996235][ T5171] usb 4-1: SerialNumber: syz [ 3060.024576][ T5171] usb 4-1: config 0 descriptor?? [ 3060.364403][ T5171] kaweth 4-1:0.0: Firmware present in device. [ 3060.489548][ T5338] loop4: detected capacity change from 0 to 64 [ 3060.553536][ T5171] kaweth 4-1:0.0: Statistics collection: 0 [ 3060.559982][ T5171] kaweth 4-1:0.0: Multicast filter limit: 0 [ 3060.566283][ T5171] kaweth 4-1:0.0: MTU: 0 [ 3060.589071][ T5171] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 3060.868329][ T5171] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 3060.889794][ T5171] usb 4-1: USB disconnect, device number 87 [ 3061.877095][ T5343] fuse: Bad value for 'fd' [ 3061.891944][T27439] Bluetooth: hci1: unexpected event for opcode 0x0c05 [ 3062.329710][ T5201] team0: Port device team_slave_1 added [ 3062.342293][ T5317] netlink: 276 bytes leftover after parsing attributes in process `syz.0.7769'. [ 3062.347311][ T5348] loop3: detected capacity change from 0 to 1764 [ 3062.536716][ T5201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3062.560692][ T5350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7776'. [ 3062.579925][ T5201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3062.646808][ T5201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3062.665511][ T5201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3062.672687][ T5201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3062.710406][ T5201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3062.820202][T21339] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 3062.885810][ T5350] team0: entered promiscuous mode [ 3062.925272][ T5350] team_slave_1: entered promiscuous mode [ 3063.018542][T21339] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3063.045578][ T5201] hsr_slave_0: entered promiscuous mode [ 3063.056609][ T5201] hsr_slave_1: entered promiscuous mode [ 3063.062698][T21339] usb 4-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 3063.076023][T21339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3063.099578][ T5349] team0: left promiscuous mode [ 3063.105026][ T5349] team_slave_1: left promiscuous mode [ 3063.115133][T21339] usb 4-1: config 0 descriptor?? [ 3063.149370][T21339] rndis_host 4-1:0.0: skipping garbage [ 3063.176417][T21339] usb 4-1: bad CDC descriptors [ 3063.231590][T21339] cdc_acm 4-1:0.0: skipping garbage [ 3063.256362][T21339] cdc_acm 4-1:0.0: Control and data interfaces are not separated! [ 3063.282467][T21339] cdc_acm 4-1:0.0: This needs exactly 3 endpoints [ 3063.307479][T21339] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 3063.486008][ T5356] xt_socket: unknown flags 0x2 [ 3063.831589][ T5357] loop1: detected capacity change from 0 to 4096 [ 3063.845232][ T5357] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 3063.861735][ T5357] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 3063.869503][ T5357] ntfs3: loop1: Failed to load $MFT (-22). [ 3064.059263][ T5359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7779'. [ 3064.092139][ T5359] team0: entered promiscuous mode [ 3064.098246][ T5359] team_slave_1: entered promiscuous mode [ 3064.112759][ T5358] team0: left promiscuous mode [ 3064.120571][ T5358] team_slave_1: left promiscuous mode [ 3064.383144][ T5201] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3064.411083][ T5201] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3064.500801][ T5201] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3064.528918][ T5201] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3064.820039][ T5201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3064.891378][ T5201] 8021q: adding VLAN 0 to HW filter on device team0 [ 3064.923160][T26070] bridge0: port 1(bridge_slave_0) entered blocking state [ 3064.930449][T26070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3064.950800][ T5171] bridge0: port 2(bridge_slave_1) entered blocking state [ 3064.957975][ T5171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3065.488247][T26070] usb 4-1: USB disconnect, device number 88 [ 3066.147132][ T5376] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 3066.318879][ T5376] loop4: detected capacity change from 0 to 8 [ 3066.383018][T27439] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 3066.428025][ T5201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3066.560495][ T5376] unable to read xattr id index table [ 3066.702162][ T5201] veth0_vlan: entered promiscuous mode [ 3066.755482][ T5201] veth1_vlan: entered promiscuous mode [ 3066.897947][ T5201] veth0_macvtap: entered promiscuous mode [ 3066.958249][ T5201] veth1_macvtap: entered promiscuous mode [ 3067.050140][ T5201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3067.064838][ T5201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3067.079643][ T5201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3067.090389][ T5201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3067.108743][ T5201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3067.124516][ T5201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3067.135683][ T5201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3067.205546][ T5201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3067.244419][ T5201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3067.300301][ T5201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3067.324169][ T5201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3067.352194][ T5201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3067.377663][ T5201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3067.399516][ T5201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3067.457992][ T5201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3067.501658][ T5201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3067.534313][ T5201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3067.589135][ T5201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3067.691034][ T5201] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3067.705871][ T5201] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3067.715468][ T5389] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 3067.724219][ T5201] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3067.729953][ T5389] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 3067.755784][ T5201] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3067.801676][ T5389] vhci_hcd vhci_hcd.0: Device attached [ 3067.850657][ T5392] vhci_hcd: connection closed [ 3067.850992][T10480] vhci_hcd: stop threads [ 3067.869508][T10480] vhci_hcd: release socket [ 3067.874192][T10480] vhci_hcd: disconnect device [ 3068.220786][T10480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3068.246784][T10480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3068.341676][T10480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3068.356501][ T5398] loop1: detected capacity change from 0 to 4096 [ 3068.364349][T10480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3068.392057][ T5398] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 3068.436632][ T5398] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 3068.464542][ T5398] ntfs3: loop1: Failed to load $MFT (-22). [ 3070.036590][ T5409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7790'. [ 3070.081407][ T5409] team0: entered promiscuous mode [ 3070.099482][ T5409] team_slave_1: entered promiscuous mode [ 3070.143580][ T5406] team0: left promiscuous mode [ 3070.156660][ T5406] team_slave_1: left promiscuous mode [ 3070.356105][ T5410] overlayfs: failed to resolve './file1': -2 [ 3070.588992][ T5396] loop4: detected capacity change from 0 to 32768 [ 3070.634273][ T5396] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.7787 (5396) [ 3070.704525][ T5418] loop0: detected capacity change from 0 to 128 [ 3070.778943][ T5396] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 3070.823327][ T5396] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 3070.850988][ T5418] ufs: Invalid option: "ÿÿÿÿÿÿÿÿ" or missing value [ 3070.860458][ T5396] BTRFS info (device loop4): using free-space-tree [ 3071.079732][ T5396] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 3071.080672][ T5396] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 3071.091235][ T5418] ufs: wrong mount options [ 3071.134062][ T5396] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 3071.273814][ T5396] BTRFS error (device loop4): open_ctree failed [ 3071.655854][ T5433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3071.751781][ T5433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3073.213718][ T5446] loop4: detected capacity change from 0 to 2048 [ 3073.228479][T27439] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 3073.275930][T27439] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 3073.299075][ T5446] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 3073.338091][ T5446] UDF-fs: warning (device loop4): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 3073.532073][T27439] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 3073.593750][ T5446] loop4: detected capacity change from 0 to 1024 [ 3073.696509][ T5457] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 3073.705831][ T5457] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 3073.766556][ T5446] EXT4-fs: quotafile must be on filesystem root [ 3075.221354][ T5466] loop3: detected capacity change from 0 to 164 [ 3075.443651][ T5466] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 3075.543395][ T5476] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 3076.421968][ T5462] loop0: detected capacity change from 0 to 4096 [ 3076.595991][ T5164] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 3076.619848][ T5462] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 3076.682837][ T5476] loop4: detected capacity change from 0 to 8 [ 3076.718185][ T5482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7809'. [ 3076.947522][ T5476] unable to read xattr id index table [ 3076.995864][ T5164] usb 2-1: Using ep0 maxpacket: 32 [ 3077.013814][ T5164] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3077.065837][ T5164] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3077.111457][ T5164] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3077.174152][ T5164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3077.260316][ T5164] usb 2-1: Product: syz [ 3077.322274][ T5164] usb 2-1: Manufacturer: syz [ 3077.384674][ T5164] usb 2-1: SerialNumber: syz [ 3077.517407][ T5490] loop2: detected capacity change from 0 to 16 [ 3077.577309][ T5490] erofs: (device loop2): mounted with root inode @ nid 36. [ 3077.801086][ T5490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.835105][ T5490] syz.2.7811: attempt to access beyond end of device [ 3077.835105][ T5490] loop2: rw=0, sector=8, nr_sectors = 16 limit=16 [ 3077.865618][ T5164] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 81 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 3077.947347][ T5164] libceph: connect (1)[c::]:6789 error -101 [ 3077.953854][ T5164] libceph: mon0 (1)[c::]:6789 connect error [ 3078.195636][ T5476] ceph: No mds server is up or the cluster is laggy [ 3078.226390][T26015] libceph: connect (1)[c::]:6789 error -101 [ 3078.232896][T26015] libceph: mon0 (1)[c::]:6789 connect error [ 3079.305056][T27439] Bluetooth: hci3: unexpected event for opcode 0x2005 [ 3079.422840][ T5477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3079.433733][ T5477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3079.993900][ T5511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7817'. [ 3080.012363][ T5509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7816'. [ 3081.249859][T13315] usb 2-1: USB disconnect, device number 81 [ 3081.269996][T13315] usblp0: removed [ 3083.571295][ T5532] loop2: detected capacity change from 0 to 2048 [ 3083.581835][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 3083.597103][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 3083.608790][ T29] audit: type=1800 audit(1719360082.511:2972): pid=5531 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.7821" name="bus" dev="sda1" ino=2239 res=0 errno=0 [ 3083.751281][ T5532] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3084.020696][ T29] audit: type=1800 audit(1719360083.031:2973): pid=5532 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.7821" name="bus" dev="loop2" ino=1367 res=0 errno=0 [ 3084.997025][ T5537] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 3085.108854][ T5537] loop0: detected capacity change from 0 to 8 [ 3085.161478][ T5537] unable to read xattr id index table [ 3085.182404][ T5549] loop4: detected capacity change from 0 to 16 [ 3085.216353][ T5549] erofs: (device loop4): mounted with root inode @ nid 36. [ 3085.221951][T27439] Bluetooth: Unexpected continuation frame (len 37) [ 3085.257036][ T5549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3085.283240][ T5545] loop1: detected capacity change from 0 to 4096 [ 3085.292175][ T5545] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 3085.334996][ T5549] syz.4.7828: attempt to access beyond end of device [ 3085.334996][ T5549] loop4: rw=0, sector=8, nr_sectors = 16 limit=16 [ 3085.353116][ T5545] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 3085.373396][T26009] libceph: connect (1)[c::]:6789 error -101 [ 3085.383136][T26009] libceph: mon0 (1)[c::]:6789 connect error [ 3085.389401][ T5545] ntfs3: loop1: Failed to load $MFT (-22). [ 3085.451793][ T5537] ceph: No mds server is up or the cluster is laggy [ 3085.609898][ T5557] overlayfs: failed to resolve './file1': -2 [ 3085.927691][ T5562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7830'. [ 3087.684777][ T5566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7832'. [ 3088.035824][ T5572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7831'. [ 3089.747190][ T5584] loop1: detected capacity change from 0 to 40427 [ 3089.786701][ T5584] F2FS-fs (loop1): invalid crc value [ 3089.838327][ T5584] F2FS-fs (loop1): Found nat_bits in checkpoint [ 3089.888880][ T5584] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 3090.174082][ T5590] overlayfs: failed to resolve './file1': -2 [ 3090.288414][ T5591] syz.1.7836: attempt to access beyond end of device [ 3090.288414][ T5591] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 3090.316777][ T5591] syz.1.7836: attempt to access beyond end of device [ 3090.316777][ T5591] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 3092.058709][ T29] audit: type=1800 audit(1719360089.491:2974): pid=5591 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.7836" name="file2" dev="loop1" ino=19 res=0 errno=0 [ 3092.169208][ T5591] syz.1.7836: attempt to access beyond end of device [ 3092.169208][ T5591] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 3092.250339][T32508] syz-executor: attempt to access beyond end of device [ 3092.250339][T32508] loop1: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 3092.277452][T32508] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 3092.284380][T32508] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 3092.300152][ T29] audit: type=1804 audit(1719360089.591:2975): pid=5591 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.7836" name="/root/syzkaller.g7W6B7/297/file0/file2" dev="loop1" ino=19 res=1 errno=0 [ 3092.324270][T32508] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 3092.413555][ T29] audit: type=1800 audit(1719360091.431:2976): pid=5591 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.7836" name="file2" dev="loop1" ino=19 res=0 errno=0 [ 3092.704173][ T5596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7839'. [ 3092.893697][ T5596] loop0: detected capacity change from 0 to 128 [ 3092.901279][ T5596] ufs: You didn't specify the type of your ufs filesystem [ 3092.901279][ T5596] [ 3092.901279][ T5596] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 3092.901279][ T5596] [ 3092.901279][ T5596] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 3092.932116][ T5596] ufs: ufstype=old is supported read-only [ 3092.946309][ T5596] ufs: ufs_fill_super(): bad magic number [ 3093.373740][ T5605] loop4: detected capacity change from 0 to 4096 [ 3093.450948][ T5605] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 3093.508923][ T5605] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 3093.548393][ T5605] ntfs3: loop4: Failed to load $MFT (-22). [ 3093.762179][ T5609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3093.844473][ T5593] loop2: detected capacity change from 0 to 32768 [ 3093.853403][ T5593] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.7837 (5593) [ 3093.894563][ T5609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3093.920383][ T5593] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 3093.959106][ T5593] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 3094.006623][ T5593] BTRFS info (device loop2): using free-space-tree [ 3094.384626][ T5201] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 3094.551214][ T5631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7845'. [ 3095.592708][ T5641] loop3: detected capacity change from 0 to 40427 [ 3095.612948][ T5641] F2FS-fs (loop3): invalid crc value [ 3095.651683][ T5643] overlayfs: failed to resolve './file1': -2 [ 3095.788398][ T5641] F2FS-fs (loop3): Found nat_bits in checkpoint [ 3095.843875][ T5641] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 3096.128731][ T5650] overlayfs: failed to resolve './file1': -2 [ 3096.242534][ T5651] syz.3.7849: attempt to access beyond end of device [ 3096.242534][ T5651] loop3: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 3096.271690][ T5651] syz.3.7849: attempt to access beyond end of device [ 3096.271690][ T5651] loop3: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 3096.824598][ T29] audit: type=1800 audit(1719360095.441:2977): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.7849" name="file2" dev="loop3" ino=19 res=0 errno=0 [ 3098.176473][ T5651] syz.3.7849: attempt to access beyond end of device [ 3098.176473][ T5651] loop3: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 3098.320465][ T3284] syz-executor: attempt to access beyond end of device [ 3098.320465][ T3284] loop3: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 3098.331038][ T29] audit: type=1804 audit(1719360095.541:2978): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.7849" name="/root/syzkaller.4GBxV0/114/file0/file2" dev="loop3" ino=19 res=1 errno=0 [ 3098.419993][ T3284] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 3098.466038][ T29] audit: type=1800 audit(1719360097.431:2979): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.7849" name="file2" dev="loop3" ino=19 res=0 errno=0 [ 3098.558911][ T3284] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 3098.586056][ T3284] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 3098.759196][ T5656] fuse: Bad value for 'fd' [ 3098.848755][T27439] Bluetooth: hci1: unexpected event for opcode 0x0c05 [ 3100.733594][T27439] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 3101.310590][T27439] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 3101.724713][ T5686] team0: entered promiscuous mode [ 3101.730010][ T5686] team_slave_1: entered promiscuous mode [ 3101.765136][ T5685] team0: left promiscuous mode [ 3101.777621][ T5685] team_slave_1: left promiscuous mode [ 3102.038332][ T5692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7862'. [ 3102.847369][ T5692] team0: entered promiscuous mode [ 3102.852428][ T5692] team_slave_0: entered promiscuous mode [ 3102.885388][ T5692] team_slave_1: entered promiscuous mode [ 3102.927185][ T5696] team_slave_0: entered allmulticast mode [ 3103.057224][ T5696] team0: Port device team_slave_0 removed [ 3103.106509][ T5689] team0: left promiscuous mode [ 3103.111349][ T5689] team_slave_1: left promiscuous mode [ 3103.237271][ T5698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3103.326206][ T5698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3103.326242][ T5700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7864'. [ 3103.410996][ T5700] team0: entered promiscuous mode [ 3103.421154][ T5700] team_slave_1: entered promiscuous mode [ 3103.455248][ T5699] team0: left promiscuous mode [ 3103.464012][ T5699] team_slave_1: left promiscuous mode [ 3103.917012][T26009] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 3104.072543][ T5718] loop0: detected capacity change from 0 to 16 [ 3104.109898][ T5718] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 3104.125987][T26009] usb 3-1: Using ep0 maxpacket: 8 [ 3104.140124][T26009] usb 3-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=56.a0 [ 3104.156900][T26009] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3104.193744][T26009] usb 3-1: Product: syz [ 3104.225647][T26009] usb 3-1: Manufacturer: syz [ 3104.230729][T26009] usb 3-1: SerialNumber: syz [ 3104.260094][T26009] usb 3-1: config 0 descriptor?? [ 3104.369452][ T5721] team0: entered promiscuous mode [ 3104.386228][ T5721] team_slave_1: entered promiscuous mode [ 3104.465382][ T5720] team0: left promiscuous mode [ 3104.504722][ T5720] team_slave_1: left promiscuous mode [ 3104.591466][T26009] kaweth 3-1:0.0: Firmware present in device. [ 3104.694012][ T5709] loop3: detected capacity change from 0 to 32768 [ 3104.728155][ T5709] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.7867 (5709) [ 3104.785927][T26009] kaweth 3-1:0.0: Statistics collection: 0 [ 3104.799313][ T5709] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 3104.802322][T26009] kaweth 3-1:0.0: Multicast filter limit: 0 [ 3104.846076][T26009] kaweth 3-1:0.0: MTU: 0 [ 3104.850447][ T5709] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 3104.871692][T26009] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 3104.881255][ T5709] BTRFS info (device loop3): using free-space-tree [ 3105.013222][T26009] kaweth 3-1:0.0: probe with driver kaweth failed with error -5 [ 3105.067473][T26009] usb 3-1: USB disconnect, device number 72 [ 3105.134862][ T3284] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 3105.927436][ T5749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7875'. [ 3106.133500][ T5752] loop2: detected capacity change from 0 to 128 [ 3106.141254][ T5752] ufs: You didn't specify the type of your ufs filesystem [ 3106.141254][ T5752] [ 3106.141254][ T5752] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 3106.141254][ T5752] [ 3106.141254][ T5752] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 3106.172606][ T5752] ufs: ufstype=old is supported read-only [ 3106.186465][ T5752] ufs: ufs_fill_super(): bad magic number [ 3106.428550][ T5753] overlayfs: failed to resolve './file1': -2 [ 3106.974054][ T5747] loop3: detected capacity change from 0 to 32768 [ 3107.138029][ T5764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7880'. [ 3107.187620][ T5764] team0: entered promiscuous mode [ 3107.227112][ T5764] team_slave_1: entered promiscuous mode [ 3107.314736][ T5747] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 3107.320206][ T5763] team0: left promiscuous mode [ 3107.331645][ T5763] team_slave_1: left promiscuous mode [ 3107.353899][ T5747] bcachefs (loop3): recovering from clean shutdown, journal seq 7 [ 3107.407993][ T5747] bcachefs (loop3): alloc_read... done [ 3107.417177][ T5747] bcachefs (loop3): stripes_read... done [ 3107.425920][ T5747] bcachefs (loop3): snapshots_read... done [ 3107.433718][ T5747] bcachefs (loop3): journal_replay... done [ 3107.439840][ T5747] bcachefs (loop3): resume_logged_ops... done [ 3107.451978][ T5747] bcachefs (loop3): going read-write [ 3107.472582][ T5747] bcachefs (loop3): done starting filesystem [ 3107.518736][ T29] audit: type=1800 audit(1719360106.761:2980): pid=5747 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.7874" name="bus" dev="loop3" ino=4100 res=0 errno=0 [ 3107.587882][T26070] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 3107.588628][ T29] audit: type=1800 audit(1719360106.771:2981): pid=5747 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.7874" name="bus" dev="loop3" ino=4100 res=0 errno=0 [ 3108.564697][T26070] usb 2-1: Using ep0 maxpacket: 8 [ 3108.597234][T26070] usb 2-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=56.a0 [ 3108.619940][T26070] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3108.643473][T26070] usb 2-1: Product: syz [ 3108.666198][T26070] usb 2-1: Manufacturer: syz [ 3108.670856][T26070] usb 2-1: SerialNumber: syz [ 3108.704194][T26070] usb 2-1: config 0 descriptor?? [ 3108.753145][ T5794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7887'. [ 3108.782409][ T5794] team0: entered promiscuous mode [ 3108.788265][ T5794] team_slave_1: entered promiscuous mode [ 3108.811148][ T5795] loop4: detected capacity change from 0 to 16 [ 3108.821068][ T5795] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 3108.849287][ T5793] team0: left promiscuous mode [ 3108.854090][ T5793] team_slave_1: left promiscuous mode [ 3109.005940][T26070] kaweth 2-1:0.0: Firmware present in device. [ 3109.147863][ T5802] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 3109.214312][T26070] kaweth 2-1:0.0: Statistics collection: 0 [ 3109.220885][T26070] kaweth 2-1:0.0: Multicast filter limit: 0 [ 3109.222444][ T5802] loop2: detected capacity change from 0 to 8 [ 3109.255364][T26070] kaweth 2-1:0.0: MTU: 0 [ 3109.273590][T26070] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00 [ 3109.275190][ T5802] unable to read xattr id index table [ 3109.494278][T26070] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 3109.509630][T26070] usb 2-1: USB disconnect, device number 82 [ 3109.799746][ T5804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7889'. [ 3109.997698][ T5804] loop0: detected capacity change from 0 to 128 [ 3110.005168][ T5804] ufs: You didn't specify the type of your ufs filesystem [ 3110.005168][ T5804] [ 3110.005168][ T5804] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 3110.005168][ T5804] [ 3110.005168][ T5804] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 3110.038906][ T5804] ufs: ufstype=old is supported read-only [ 3110.047616][ T5804] ufs: ufs_fill_super(): bad magic number [ 3110.169156][T13315] libceph: connect (1)[c::]:6789 error -101 [ 3110.176166][T13315] libceph: mon0 (1)[c::]:6789 connect error [ 3110.184464][T13315] libceph: connect (1)[c::]:6789 error -101 [ 3110.197613][T13315] libceph: mon0 (1)[c::]:6789 connect error [ 3110.270547][ T5802] ceph: No mds server is up or the cluster is laggy [ 3110.486421][T26015] libceph: connect (1)[c::]:6789 error -101 [ 3110.520526][T26015] libceph: mon0 (1)[c::]:6789 connect error [ 3110.615320][ T5815] loop1: detected capacity change from 0 to 2048 [ 3110.660417][ T5815] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 3110.679370][ T5815] UDF-fs: warning (device loop1): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 3110.771935][ T5817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7892'. [ 3110.848723][ T5817] team0: entered promiscuous mode [ 3110.853808][ T5817] team_slave_1: entered promiscuous mode [ 3110.864694][ T5815] loop1: detected capacity change from 0 to 1024 [ 3110.892677][ T5816] team0: left promiscuous mode [ 3110.896209][ T5815] EXT4-fs: quotafile must be on filesystem root [ 3110.904650][ T5816] team_slave_1: left promiscuous mode [ 3111.950134][T27436] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 3112.015240][ T5834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7896'. [ 3112.098917][ T5834] team0: entered promiscuous mode [ 3112.108863][ T5834] team_slave_1: entered promiscuous mode [ 3112.141584][ T5833] team0: left promiscuous mode [ 3112.155134][ T5833] team_slave_1: left promiscuous mode [ 3112.250901][ T5839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7898'. [ 3112.335953][ T5839] team0: entered promiscuous mode [ 3112.341035][ T5839] team_slave_1: entered promiscuous mode [ 3112.401711][ T5838] team0: left promiscuous mode [ 3112.407765][ T5838] team_slave_1: left promiscuous mode [ 3112.591593][ T5847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7900'. [ 3112.658469][ T5847] team0: entered promiscuous mode [ 3112.676899][ T5847] team_slave_1: entered promiscuous mode [ 3112.702970][ T5846] team0: left promiscuous mode [ 3112.715158][ T5846] team_slave_1: left promiscuous mode [ 3113.015761][ T5857] loop4: detected capacity change from 0 to 16 [ 3113.083546][ T5857] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 3113.235499][ T5859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7905'. [ 3113.288383][ T5861] team0: entered promiscuous mode [ 3113.297996][ T5861] team_slave_1: entered promiscuous mode [ 3113.345659][ T5858] team0: left promiscuous mode [ 3113.360757][ T5858] team_slave_1: left promiscuous mode [ 3113.660093][ T5864] loop2: detected capacity change from 0 to 16 [ 3113.687428][ T5864] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 3114.502016][T27436] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 3114.593742][ T5872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7909'. [ 3114.796684][ T5876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7910'. [ 3114.827633][ T5876] team0: entered promiscuous mode [ 3114.833145][ T5876] team_slave_1: entered promiscuous mode [ 3114.872367][ T5874] team0: left promiscuous mode [ 3114.880609][ T5874] team_slave_1: left promiscuous mode [ 3115.000069][ T5878] overlayfs: failed to resolve './file1': -2 [ 3115.402424][T27436] Bluetooth: hci1: unexpected event for opcode 0x2005 [ 3115.454296][ T5890] overlayfs: failed to resolve './file1': -2 [ 3116.888365][ T5788] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3116.911581][ T5788] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3116.942038][ T5788] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3116.953891][ T5788] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3116.961673][ T5788] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 3116.969390][ T5788] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3117.170004][ T5904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3117.198608][ T5897] chnl_net:caif_netlink_parms(): no params data found [ 3117.274591][ T5900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3117.327382][ T5897] bridge0: port 1(bridge_slave_0) entered blocking state [ 3117.334745][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state [ 3117.353219][ T5897] bridge_slave_0: entered allmulticast mode [ 3117.361569][ T5897] bridge_slave_0: entered promiscuous mode [ 3117.392720][ T5897] bridge0: port 2(bridge_slave_1) entered blocking state [ 3117.400223][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state [ 3117.410310][ T5897] bridge_slave_1: entered allmulticast mode [ 3117.419703][ T5897] bridge_slave_1: entered promiscuous mode [ 3117.502153][ T5897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3117.532638][ T5897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3117.602700][ T5897] team0: Port device team_slave_0 added [ 3117.629940][ T5897] team0: Port device team_slave_1 added [ 3117.683760][ T5897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3117.693182][ T5897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3117.723447][ T5897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3117.736758][ T5897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3117.743692][ T5897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3117.818476][ T5897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3118.098800][ T5897] hsr_slave_0: entered promiscuous mode [ 3118.148340][ T5897] hsr_slave_1: entered promiscuous mode [ 3118.153972][ T5788] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 3118.172947][ T5897] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3118.195818][ T5897] Cannot create hsr debugfs directory [ 3118.539330][ T5917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7922'. [ 3118.594101][ T5919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7923'. [ 3118.677625][ T5919] team0: entered promiscuous mode [ 3118.694522][ T5919] team_slave_1: entered promiscuous mode [ 3118.795368][ T5918] team0: left promiscuous mode [ 3118.856105][ T5918] team_slave_1: left promiscuous mode [ 3119.025931][ T5788] Bluetooth: hci5: command tx timeout [ 3121.077462][ T5929] overlayfs: failed to resolve './file1': -2 [ 3121.114792][ T5788] Bluetooth: hci5: command tx timeout [ 3121.157364][ T5897] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3121.205852][ T5164] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 3121.318006][ T5897] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3121.328856][ T5940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3121.414716][ T5164] usb 2-1: Using ep0 maxpacket: 8 [ 3121.442786][ T5164] usb 2-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=56.a0 [ 3121.454893][ T5897] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3121.465614][ T5164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3121.472418][ T5940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3121.475488][ T5164] usb 2-1: Product: syz [ 3121.530582][ T5164] usb 2-1: Manufacturer: syz [ 3121.535232][ T5164] usb 2-1: SerialNumber: syz [ 3121.577671][ T5164] usb 2-1: config 0 descriptor?? [ 3121.689718][ T5897] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3121.850250][ T5164] kaweth 2-1:0.0: Firmware present in device. [ 3122.157373][ T5897] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3122.187200][ T5897] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3122.201888][ T5897] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3122.206476][ T5164] kaweth 2-1:0.0: Error reading configuration (-71), no net device created [ 3122.243242][ T5897] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3122.247170][ T5164] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 3122.269900][ T5164] usb 2-1: USB disconnect, device number 83 [ 3122.600982][ T5952] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7934'. [ 3122.628446][ T5897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3122.703837][ T5897] 8021q: adding VLAN 0 to HW filter on device team0 [ 3122.760800][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 3122.768031][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3122.828085][T13315] bridge0: port 2(bridge_slave_1) entered blocking state [ 3122.835276][T13315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3123.111460][ T5951] overlayfs: failed to resolve './file1': -2 [ 3123.127610][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7936'. [ 3123.186364][ T5788] Bluetooth: hci5: command tx timeout [ 3123.299213][ T5957] overlayfs: failed to resolve './file1': -2 [ 3123.628735][ T5897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3123.856198][ T5897] veth0_vlan: entered promiscuous mode [ 3124.023220][ T5897] veth1_vlan: entered promiscuous mode [ 3124.090113][ T5972] overlayfs: failed to resolve './file1': -2 [ 3124.133136][ T5897] veth0_macvtap: entered promiscuous mode [ 3124.164464][ T5897] veth1_macvtap: entered promiscuous mode [ 3124.234439][ T5897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3124.274478][ T5897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3124.321456][ T5897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3124.350530][ T5897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3124.407027][ T5971] loop0: detected capacity change from 0 to 4096 [ 3124.415449][ T5897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3124.447637][ T5971] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 3124.510119][ T5897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3124.555810][ T5897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3124.577103][ T5897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3124.616015][ T5897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3124.635164][ T5897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3124.670802][ T5897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3124.708304][ T5897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3124.810933][ T5897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3124.825836][ T5897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3124.853376][ T5897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3124.866611][ T5897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3124.878059][ T5897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3124.888662][ T5897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3124.900125][ T5897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3124.917289][ T5897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3125.075775][ T5897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3125.162472][ T5897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3125.255796][ T5788] Bluetooth: hci5: command tx timeout [ 3125.332112][ T5897] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3126.127635][ T5897] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3126.228295][ T5897] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3126.292744][ T5897] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3126.643200][ T5788] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 3126.669653][ T2889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3126.700600][ T2889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3126.844653][ T2889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3126.872850][ T2889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3127.078580][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7943'. [ 3127.161271][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7914'. [ 3127.178022][ T5991] team0: entered promiscuous mode [ 3127.188347][ T5991] team_slave_1: entered promiscuous mode [ 3127.249155][ T5988] team0: left promiscuous mode [ 3127.259555][ T5988] team_slave_1: left promiscuous mode [ 3127.281387][ T5994] team0: entered promiscuous mode [ 3127.297603][ T5994] team_slave_0: entered promiscuous mode [ 3127.339832][ T5994] team_slave_1: entered promiscuous mode [ 3127.367258][ T5996] team_slave_0: entered allmulticast mode [ 3127.498812][ T5996] team0: Port device team_slave_0 removed [ 3127.558990][ T5992] team0: left promiscuous mode [ 3127.576016][ T5992] team_slave_1: left promiscuous mode [ 3127.592231][ T5984] loop4: detected capacity change from 0 to 32768 [ 3127.699242][ T6003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7946'. [ 3127.734890][ T6003] team0: entered promiscuous mode [ 3127.742329][ T6003] team_slave_1: entered promiscuous mode [ 3127.771303][ T5984] bcachefs (1e246536-b1b3-4f86-83c2-3dfcc2979a4c): filesystem UUID already open [ 3127.798837][ T5999] team0: left promiscuous mode [ 3127.805028][ T5984] bcachefs (1e246536-b1b3-4f86-83c2-3dfcc2979a4c): shutdown complete [ 3127.820373][ T5999] team_slave_1: left promiscuous mode [ 3128.327107][ T6021] team0: entered promiscuous mode [ 3128.403334][ T6021] team_slave_1: entered promiscuous mode [ 3128.526615][ T6016] team0: left promiscuous mode [ 3128.559925][ T6016] team_slave_1: left promiscuous mode [ 3130.063156][ T5788] Bluetooth: hci0: unexpected event for opcode 0x2005 [ 3130.503438][ T6040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7955'. [ 3130.574981][ T6040] team0: entered promiscuous mode [ 3130.596335][ T6040] team_slave_1: entered promiscuous mode [ 3130.639654][ T6039] team0: left promiscuous mode [ 3130.654884][ T6039] team_slave_1: left promiscuous mode [ 3130.942340][ T6048] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 3131.096785][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7959'. [ 3131.162922][ T6050] team0: entered promiscuous mode [ 3131.206511][ T6050] team_slave_1: entered promiscuous mode [ 3131.224119][ T5164] libceph: connect (1)[c::]:6789 error -101 [ 3131.230507][ T5164] libceph: mon0 (1)[c::]:6789 connect error [ 3131.237545][ T5164] libceph: connect (1)[c::]:6789 error -101 [ 3131.311678][ T5164] libceph: mon0 (1)[c::]:6789 connect error [ 3131.321433][ T6049] team0: left promiscuous mode [ 3131.345867][ T6049] team_slave_1: left promiscuous mode [ 3131.399665][ T6048] ceph: No mds server is up or the cluster is laggy [ 3131.626407][T21339] libceph: connect (1)[c::]:6789 error -101 [ 3131.676588][T21339] libceph: mon0 (1)[c::]:6789 connect error [ 3132.469808][T13315] libceph: connect (1)[c::]:6789 error -101 [ 3132.476018][T13315] libceph: mon0 (1)[c::]:6789 connect error [ 3132.892501][T10480] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 3133.040256][ T6073] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7964'. [ 3134.066864][ T6085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7968'. [ 3134.121255][ T6085] team0: entered promiscuous mode [ 3134.143080][ T6085] team_slave_1: entered promiscuous mode [ 3134.167938][ T6084] team0: left promiscuous mode [ 3134.185906][ T6084] team_slave_1: left promiscuous mode [ 3135.407806][ T6101] loop4: detected capacity change from 0 to 16 [ 3135.439002][ T6101] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 3135.783025][ T6108] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 3135.821905][ T6108] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 3136.081716][ T6114] loop2: detected capacity change from 0 to 16 [ 3136.204011][ T6114] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 3137.013966][ T29] audit: type=1804 audit(1719360136.251:2982): pid=6123 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.7980" name="/root/syzkaller.NqnChx/7/cgroup.controllers" dev="sda1" ino=2243 res=1 errno=0 [ 3137.135967][ T29] audit: type=1804 audit(1719360136.371:2983): pid=6123 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.7980" name="/root/syzkaller.NqnChx/7/cgroup.controllers" dev="sda1" ino=2243 res=1 errno=0 [ 3139.514285][ T6143] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 3139.769123][ T6143] loop0: detected capacity change from 0 to 8 [ 3139.816591][ T6143] unable to read xattr id index table [ 3139.956819][T21339] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 3140.057477][T27436] Bluetooth: hci4: unexpected event for opcode 0x2005 [ 3140.178839][T21339] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3140.218865][T21339] usb 4-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 3140.255806][T21339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3140.297128][T21339] usb 4-1: config 0 descriptor?? [ 3140.315001][T21339] rndis_host 4-1:0.0: skipping garbage [ 3140.347138][T21339] usb 4-1: bad CDC descriptors [ 3140.364481][T21339] cdc_acm 4-1:0.0: skipping garbage [ 3140.412142][T21339] cdc_acm 4-1:0.0: Control and data interfaces are not separated! [ 3140.441294][T21339] cdc_acm 4-1:0.0: This needs exactly 3 endpoints [ 3140.466078][T21339] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 3140.664656][ T6161] loop2: detected capacity change from 0 to 16 [ 3140.676112][ T5171] libceph: connect (1)[c::]:6789 error -101 [ 3140.706117][ T5171] libceph: mon0 (1)[c::]:6789 connect error [ 3140.714057][ T6143] ceph: No mds server is up or the cluster is laggy [ 3140.715414][ T6161] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 3140.996475][ T5134] libceph: connect (1)[c::]:6789 error -101 [ 3141.002522][ T5134] libceph: mon0 (1)[c::]:6789 connect error [ 3141.119006][ T6148] xt_socket: unknown flags 0x2 [ 3142.088314][ T6178] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 3142.097026][ T6178] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 3142.249560][ T6181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7999'. [ 3142.284514][ T6181] team0: entered promiscuous mode [ 3142.302691][ T6181] team_slave_1: entered promiscuous mode [ 3142.349901][ T6180] team0: left promiscuous mode [ 3142.366063][ T6180] team_slave_1: left promiscuous mode [ 3142.523229][T31723] usb 4-1: USB disconnect, device number 89 [ 3142.820637][ T6183] loop2: detected capacity change from 0 to 4096 [ 3142.843506][ T6183] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 3142.878140][ T6183] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 3142.906012][ T6183] ntfs3: loop2: Failed to load $MFT (-22). [ 3143.203578][ T6193] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 3143.356876][ T6193] loop1: detected capacity change from 0 to 8 [ 3143.394284][ T6193] unable to read xattr id index table [ 3144.068445][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 3144.074850][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 3144.126179][T21339] libceph: connect (1)[c::]:6789 error -101 [ 3144.133776][T21339] libceph: mon0 (1)[c::]:6789 connect error [ 3144.135136][ T6199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8004'. [ 3144.196990][ T29] audit: type=1804 audit(1719360143.411:2984): pid=6202 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.8001" name="/root/syzkaller.NqnChx/10/bus" dev="sda1" ino=2240 res=1 errno=0 [ 3144.231030][ T6193] ceph: No mds server is up or the cluster is laggy [ 3144.387542][ T6199] team0: entered promiscuous mode [ 3144.413182][ T6199] team_slave_1: entered promiscuous mode [ 3144.470323][ T6197] team0: left promiscuous mode [ 3144.507824][ T6197] team_slave_1: left promiscuous mode [ 3145.040729][ T6210] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 3145.060586][ T6211] netlink: 'syz.0.8007': attribute type 9 has an invalid length. [ 3145.068605][ T6211] netlink: 911 bytes leftover after parsing attributes in process `syz.0.8007'. [ 3145.217275][ T6217] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 3145.353311][ T6218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8010'. [ 3145.476250][ T6218] team0: entered promiscuous mode [ 3145.493467][ T6217] loop1: detected capacity change from 0 to 8 [ 3145.504547][ T6218] team_slave_1: entered promiscuous mode [ 3145.552914][ T6216] team0: left promiscuous mode [ 3145.600987][ T6216] team_slave_1: left promiscuous mode [ 3145.615257][ T6217] unable to read xattr id index table [ 3145.852455][ T5171] libceph: connect (1)[c::]:6789 error -101 [ 3145.879377][ T6225] loop0: detected capacity change from 0 to 16 [ 3145.923207][ T6225] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 3145.940322][ T6210] ceph: No mds server is up or the cluster is laggy [ 3145.953734][ T5171] libceph: mon0 (1)[c::]:6789 connect error [ 3145.972089][T26015] libceph: connect (1)[c::]:6789 error -101 [ 3145.979020][T26015] libceph: mon0 (1)[c::]:6789 connect error [ 3146.213145][ T6217] ceph: No mds server is up or the cluster is laggy [ 3147.015940][T27436] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 3147.025123][T27436] Bluetooth: hci5: Injecting HCI hardware error event [ 3147.040434][T27436] Bluetooth: hci5: hardware error 0x00 [ 3147.325468][ T6233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8012'. [ 3147.569460][ T6237] loop1: detected capacity change from 0 to 4096 [ 3147.605752][ T6237] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 3147.631328][ T6237] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 3147.638821][ T6237] ntfs3: loop1: Failed to load $MFT (-22). [ 3148.351169][ T6243] loop1: detected capacity change from 0 to 4096 [ 3148.368775][ T6243] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 3149.095990][T27436] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 3149.329773][ T6255] netlink: 'syz.2.8020': attribute type 9 has an invalid length. [ 3149.337733][ T6255] netlink: 911 bytes leftover after parsing attributes in process `syz.2.8020'. [ 3149.579355][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8021'. [ 3149.951987][ T2459] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 3150.087998][ T6262] bond_slave_0: entered promiscuous mode [ 3150.093724][ T6262] bond_slave_1: entered promiscuous mode [ 3150.118310][ T6261] bond_slave_0: left promiscuous mode [ 3150.123870][ T6261] bond_slave_1: left promiscuous mode [ 3150.354362][ T6269] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 3150.369049][ T6269] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 3150.580314][ T6278] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8026'. [ 3151.128761][ T6283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8028'. [ 3151.182466][ T6283] team0: entered promiscuous mode [ 3151.203802][ T6283] team_slave_1: entered promiscuous mode [ 3151.266090][ T6282] team0: left promiscuous mode [ 3151.285901][ T6282] team_slave_1: left promiscuous mode [ 3151.488481][ T6287] netlink: 'syz.3.8031': attribute type 9 has an invalid length. [ 3151.496363][ T6287] netlink: 911 bytes leftover after parsing attributes in process `syz.3.8031'. [ 3151.679379][ T6295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8033'. [ 3151.895926][ T5171] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 3152.095923][ T5171] usb 2-1: Using ep0 maxpacket: 32 [ 3152.159353][ T5171] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3152.188720][ T5171] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3152.241299][ T5171] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3152.273376][ T5171] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3152.325774][ T5171] usb 2-1: Product: syz [ 3152.329963][ T5171] usb 2-1: Manufacturer: syz [ 3152.392592][ T5171] usb 2-1: SerialNumber: syz [ 3152.901084][ T5171] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 84 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 3153.014811][ T6306] input: syz0 as /devices/virtual/input/input157 [ 3154.057439][ T6310] loop2: detected capacity change from 0 to 8 [ 3154.058624][ T6293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3154.074453][ T6293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3154.102108][ T6310] unable to read xattr id index table [ 3154.349706][ T6313] overlayfs: failed to resolve './file0': -2 [ 3154.659472][T13315] libceph: connect (1)[c::]:6789 error -101 [ 3154.666042][T13315] libceph: mon0 (1)[c::]:6789 connect error [ 3154.809220][ T6310] ceph: No mds server is up or the cluster is laggy [ 3154.946819][T13315] libceph: connect (1)[c::]:6789 error -101 [ 3154.954317][T13315] libceph: mon0 (1)[c::]:6789 connect error [ 3155.528086][T13315] usb 2-1: USB disconnect, device number 84 [ 3155.706621][T13315] usblp0: removed [ 3156.689711][ T6327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8042'. [ 3156.776647][ T6327] team0: entered promiscuous mode [ 3156.813421][ T6327] team_slave_1: entered promiscuous mode [ 3156.858393][ T6326] team0: left promiscuous mode [ 3156.859754][ T6335] netlink: 'syz.2.8043': attribute type 9 has an invalid length. [ 3156.873498][ T6326] team_slave_1: left promiscuous mode [ 3156.934897][ T6335] netlink: 911 bytes leftover after parsing attributes in process `syz.2.8043'. [ 3156.943146][ T6328] overlayfs: failed to resolve './file1': -2 [ 3157.146393][ T6338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8045'. [ 3157.636990][ T6344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3157.763614][ T6345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3158.002984][ T29] audit: type=1800 audit(1719360157.241:2985): pid=6320 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.8039" name="bus" dev="sda1" ino=2268 res=0 errno=0 [ 3158.059096][ T29] audit: type=1800 audit(1719360157.281:2986): pid=6320 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.8039" name="bus" dev="sda1" ino=2268 res=0 errno=0 [ 3158.077503][ T6347] loop4: detected capacity change from 0 to 4096 [ 3158.121727][ T6347] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 3158.160676][ T6347] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 3158.175418][ T29] audit: type=1800 audit(1719360157.411:2987): pid=6348 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.8039" name="bus" dev="sda1" ino=2268 res=0 errno=0 [ 3158.176639][ T6347] ntfs3: loop4: Failed to load $MFT (-22). [ 3158.574257][ T6351] team0: entered promiscuous mode [ 3158.583135][ T6351] team_slave_1: entered promiscuous mode [ 3158.615021][ T6350] team0: left promiscuous mode [ 3158.625786][ T6350] team_slave_1: left promiscuous mode [ 3159.813401][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8052'. [ 3159.863617][ T6370] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 3160.033852][ T6370] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 3161.226270][ T6379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8055'. [ 3161.240857][ T6369] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3161.308730][ T6379] team0: entered promiscuous mode [ 3161.321456][ T6379] team_slave_1: entered promiscuous mode [ 3161.353232][ T6376] team0: left promiscuous mode [ 3161.372248][ T6376] team_slave_1: left promiscuous mode [ 3161.415224][ T6378] loop2: detected capacity change from 0 to 1764 [ 3161.453164][ T6378] iso9660: Bad value for 'map' [ 3161.613559][ T6383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8057'. [ 3161.627316][ T6385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8056'. [ 3161.705598][ T6383] team0: entered promiscuous mode [ 3161.725838][ T6383] team_slave_1: entered promiscuous mode [ 3161.746449][ T6381] team0: left promiscuous mode [ 3161.794157][ T6381] team_slave_1: left promiscuous mode [ 3161.903298][ T6392] syzkaller1: entered promiscuous mode [ 3161.918775][ T6392] syzkaller1: entered allmulticast mode [ 3162.035504][T10480] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 3162.286460][ T6394] bond_slave_0: entered promiscuous mode [ 3162.292232][ T6394] bond_slave_1: entered promiscuous mode [ 3162.319892][ T6393] bond_slave_0: left promiscuous mode [ 3162.325358][ T6393] bond_slave_1: left promiscuous mode [ 3163.239077][ T6402] loop2: detected capacity change from 0 to 8 [ 3163.349982][ T6402] unable to read xattr id index table [ 3163.367707][ T6408] team0: entered promiscuous mode [ 3163.372795][ T6408] team_slave_1: entered promiscuous mode [ 3163.466381][ T6407] team0: left promiscuous mode [ 3163.490086][ T6407] team_slave_1: left promiscuous mode [ 3163.616204][ T6410] team0: entered promiscuous mode [ 3163.621546][ T6410] team_slave_1: entered promiscuous mode [ 3163.634423][T18340] libceph: connect (1)[c::]:6789 error -101 [ 3163.641490][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8066'. [ 3163.647128][T18340] libceph: mon0 (1)[c::]:6789 connect error [ 3163.680498][ T6414] team0: entered promiscuous mode [ 3163.685545][ T6414] team_slave_1: entered promiscuous mode [ 3163.696392][T18340] libceph: connect (1)[c::]:6789 error -101 [ 3163.715926][T18340] libceph: mon0 (1)[c::]:6789 connect error [ 3163.740166][ T6409] team0: left promiscuous mode [ 3163.745106][ T6409] team_slave_1: left promiscuous mode [ 3163.755039][ T6402] ceph: No mds server is up or the cluster is laggy [ 3163.773885][ T6411] team0: left promiscuous mode [ 3163.792941][ T6411] team_slave_1: left promiscuous mode [ 3163.932287][ T6419] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 3163.938858][ T6419] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 3164.000312][ T6419] vhci_hcd vhci_hcd.0: Device attached [ 3164.040099][ T6428] loop4: detected capacity change from 0 to 16 [ 3164.056234][ T6425] vhci_hcd: connection closed [ 3164.056518][T10480] vhci_hcd: stop threads [ 3164.067337][ T6428] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 3164.074453][T10480] vhci_hcd: release socket [ 3164.079196][T10480] vhci_hcd: disconnect device [ 3164.189985][ T6427] loop1: detected capacity change from 0 to 4096 [ 3164.214237][ T6427] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 3164.293480][ T6427] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 3164.313410][ T6427] ntfs3: loop1: Failed to load $MFT (-22). [ 3164.956909][ T6432] loop0: detected capacity change from 0 to 4096 [ 3164.977885][ T6432] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 3165.044359][ T6432] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 3165.057931][ T6432] ntfs3: loop0: Failed to load $MFT (-22). [ 3165.074706][ T6434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8071'. [ 3165.143355][ T6434] team0: entered promiscuous mode [ 3165.155830][ T6434] team_slave_1: entered promiscuous mode [ 3165.204225][ T6433] team0: left promiscuous mode [ 3165.229479][ T6433] team_slave_1: left promiscuous mode [ 3165.534449][ T6443] loop1: detected capacity change from 0 to 4096 [ 3165.543013][ T6443] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 3165.572026][ T6443] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 3165.591838][ T6443] ntfs3: loop1: Failed to load $MFT (-22). [ 3165.669135][ T6446] loop0: detected capacity change from 0 to 8 [ 3165.731846][ T6446] unable to read xattr id index table [ 3165.799440][ T6442] loop2: detected capacity change from 0 to 4096 [ 3165.865785][ T6442] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 3166.380025][ T5171] libceph: connect (1)[c::]:6789 error -101 [ 3166.433631][ T5171] libceph: mon0 (1)[c::]:6789 connect error [ 3166.450224][ T6453] loop4: detected capacity change from 0 to 16 [ 3166.542868][ T6453] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 3166.594173][ T6446] ceph: No mds server is up or the cluster is laggy [ 3166.748834][T31723] libceph: connect (1)[c::]:6789 error -101 [ 3166.770824][T31723] libceph: mon0 (1)[c::]:6789 connect error [ 3166.846846][ T6459] fuse: Bad value for 'fd' [ 3166.960964][T27436] Bluetooth: hci0: unexpected event for opcode 0x0c05 [ 3167.221729][ T6462] team0: entered promiscuous mode [ 3167.246598][ T6462] team_slave_1: entered promiscuous mode [ 3167.503619][ T6467] loop2: detected capacity change from 0 to 2048 [ 3168.926032][ T29] audit: type=1800 audit(1719360166.661:2988): pid=6466 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.8079" name="bus" dev="sda1" ino=2270 res=0 errno=0 [ 3168.954615][ T6461] team0: left promiscuous mode [ 3168.970094][ T6467] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3168.991537][ T6461] team_slave_1: left promiscuous mode [ 3169.026926][ T29] audit: type=1800 audit(1719360168.241:2989): pid=6465 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.8079" name="bus" dev="loop2" ino=1367 res=0 errno=0 [ 3171.227389][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8084'. [ 3171.290724][ T5788] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 3171.309044][ T6484] team0: entered promiscuous mode [ 3171.337859][ T6486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3171.355784][ T6484] team_slave_1: entered promiscuous mode [ 3171.378589][ T6479] team0: left promiscuous mode [ 3171.386058][ T6479] team_slave_1: left promiscuous mode [ 3171.400015][ T6490] loop1: detected capacity change from 0 to 4096 [ 3171.408797][ T6490] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 3171.430792][ T6488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3171.468191][ T6490] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 3171.488184][ T6490] ntfs3: loop1: Failed to load $MFT (-22). [ 3172.075835][ T5788] Bluetooth: hci4: command 0x0405 tx timeout [ 3172.545528][ T6495] syzkaller1: entered promiscuous mode [ 3172.557461][ T6495] syzkaller1: entered allmulticast mode [ 3172.728218][ T6501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8089'. [ 3172.789350][ T6502] loop2: detected capacity change from 0 to 8 [ 3173.088429][ T29] audit: type=1800 audit(1719360172.321:2990): pid=6509 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.8091" name="bus" dev="sda1" ino=2266 res=0 errno=0 [ 3173.224492][ T6511] loop4: detected capacity change from 0 to 2048 [ 3174.255296][ T6511] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3174.275858][ T29] audit: type=1800 audit(1719360173.511:2991): pid=6508 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.8091" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 3174.311658][ T6502] unable to read xattr id index table [ 3174.669580][ T6516] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8093'. [ 3174.854648][ T6519] fuse: Bad value for 'fd' [ 3174.889942][T27436] Bluetooth: hci3: unexpected event for opcode 0x0c05 [ 3175.038281][T26015] libceph: connect (1)[c::]:6789 error -101 [ 3175.093809][T26015] libceph: mon0 (1)[c::]:6789 connect error [ 3175.134811][ T6502] ceph: No mds server is up or the cluster is laggy [ 3175.369962][T31723] libceph: connect (1)[c::]:6789 error -101 [ 3175.403858][T31723] libceph: mon0 (1)[c::]:6789 connect error [ 3175.669855][ T6531] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3175.769399][ T6533] loop4: detected capacity change from 0 to 1764 [ 3175.839278][ T6533] iso9660: Bad value for 'map' [ 3176.474957][ T6539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8100'. [ 3176.488595][ T6535] loop2: detected capacity change from 0 to 4096 [ 3176.505613][ T6535] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 3176.521898][ T6539] team0: entered promiscuous mode [ 3176.560868][ T6539] team_slave_1: entered promiscuous mode [ 3176.643374][ T6538] team0: left promiscuous mode [ 3176.672637][ T6538] team_slave_1: left promiscuous mode [ 3176.752650][ T6542] overlayfs: failed to resolve './file1': -2 [ 3176.795931][T26015] libceph: connect (1)[c::]:6789 error -101 [ 3176.808563][T26015] libceph: mon0 (1)[c::]:6789 connect error [ 3176.916489][ T6540] ceph: No mds server is up or the cluster is laggy [ 3177.183755][ T1223] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 3177.479061][ T6557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8103'. [ 3178.669710][ T6548] bond_slave_0: entered promiscuous mode [ 3178.675430][ T6548] bond_slave_1: entered promiscuous mode [ 3178.832482][ T6564] loop4: detected capacity change from 0 to 2048 [ 3179.616473][ T29] audit: type=1800 audit(1719360177.991:2992): pid=6563 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.8104" name="bus" dev="sda1" ino=2255 res=0 errno=0 [ 3179.649269][ T6564] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3179.733868][ T6547] bond_slave_0: left promiscuous mode [ 3179.739428][ T6547] bond_slave_1: left promiscuous mode [ 3179.817514][ T29] audit: type=1800 audit(1719360178.911:2993): pid=6562 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.8104" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 3181.621647][ T6585] loop1: detected capacity change from 0 to 2048 [ 3181.668917][ T6585] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 3181.715896][ T6585] UDF-fs: warning (device loop1): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 3181.718354][ T6588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8112'. [ 3181.768952][ T6588] team0: entered promiscuous mode [ 3181.776429][ T6588] team_slave_1: entered promiscuous mode [ 3181.840402][ T6587] team0: left promiscuous mode [ 3181.845340][ T6587] team_slave_1: left promiscuous mode [ 3181.998198][ T6585] loop1: detected capacity change from 0 to 1024 [ 3182.020377][ T6585] EXT4-fs: quotafile must be on filesystem root [ 3183.400918][ T6600] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 3183.407499][ T6600] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 3183.447511][ T6600] vhci_hcd vhci_hcd.0: Device attached [ 3183.488231][ T6602] vhci_hcd: connection closed [ 3183.495456][ T1223] vhci_hcd: stop threads [ 3183.521042][ T6586] loop2: detected capacity change from 0 to 32768 [ 3183.532788][ T1223] vhci_hcd: release socket [ 3183.556720][ T6586] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.8110 (6586) [ 3183.559370][ T1223] vhci_hcd: disconnect device [ 3183.636997][ T6586] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 3183.655954][ T6586] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 3183.685864][ T6586] BTRFS info (device loop2): using free-space-tree [ 3183.932142][ T29] audit: type=1800 audit(1719360183.111:2994): pid=6631 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.8116" name="bus" dev="sda1" ino=2270 res=0 errno=0 [ 3184.043776][ T6632] loop0: detected capacity change from 0 to 2048 [ 3184.756222][ T6632] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3184.778889][ T29] audit: type=1800 audit(1719360184.021:2995): pid=6624 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.8116" name="bus" dev="loop0" ino=1367 res=0 errno=0 [ 3184.847854][ T5201] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 3184.868494][ T6623] bond_slave_0: entered promiscuous mode [ 3184.874342][ T6623] bond_slave_1: entered promiscuous mode [ 3184.897621][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8118'. [ 3184.969118][ T6622] bond_slave_0: left promiscuous mode [ 3184.974618][ T6622] bond_slave_1: left promiscuous mode [ 3185.109828][ T6641] loop1: detected capacity change from 0 to 128 [ 3185.129011][ T6641] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 3185.369639][T27436] Bluetooth: hci0: unexpected event for opcode 0x2012 [ 3185.836635][ T6647] loop0: detected capacity change from 0 to 16 [ 3185.844550][ T6647] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 3185.937710][ C1] vkms_vblank_simulate: vblank timer overrun [ 3186.442561][ T6654] loop4: detected capacity change from 0 to 4096 [ 3186.467489][ T29] audit: type=1804 audit(1719360185.701:2996): pid=6659 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.8120" name="/root/syzkaller.g7W6B7/353/file0/bus" dev="loop1" ino=122 res=1 errno=0 [ 3186.508033][ T6654] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 3187.091896][ T6664] loop2: detected capacity change from 0 to 4096 [ 3187.127570][ T6664] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 3187.206480][ T6670] netlink: 'syz.1.8126': attribute type 9 has an invalid length. [ 3187.214286][ T6670] netlink: 911 bytes leftover after parsing attributes in process `syz.1.8126'. [ 3187.427661][ T5134] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 3187.518962][ T6664] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 3187.545365][ T6664] ntfs3: loop2: Failed to load $MFT (-22). [ 3187.645973][ T5134] usb 4-1: Using ep0 maxpacket: 32 [ 3187.661325][ T5134] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3187.715451][ T5134] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3187.838843][ T5134] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3187.973267][ T5134] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3188.026797][ T5134] usb 4-1: Product: syz [ 3188.056675][ T5134] usb 4-1: Manufacturer: syz [ 3188.231598][ T5134] usb 4-1: SerialNumber: syz [ 3189.415987][T27436] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 3189.427254][T27436] Bluetooth: hci0: Injecting HCI hardware error event [ 3189.438485][ T5788] Bluetooth: hci0: hardware error 0x00 [ 3189.484504][ T5134] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 90 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 3189.520894][ T6677] loop1: detected capacity change from 0 to 4096 [ 3189.592481][ T6677] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 3189.687879][ T6677] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 3189.726336][ T6677] ntfs3: loop1: Failed to load $MFT (-22). [ 3191.153021][ T29] audit: type=1800 audit(1719360190.391:2997): pid=6691 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.8131" name="bus" dev="sda1" ino=2242 res=0 errno=0 [ 3191.174524][ C1] vkms_vblank_simulate: vblank timer overrun [ 3191.294657][ T6692] loop4: detected capacity change from 0 to 2048 [ 3191.497037][ T5788] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 3191.691589][ T6692] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3191.897614][ T29] audit: type=1800 audit(1719360191.141:2998): pid=6687 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.8131" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 3191.919501][ T5134] usb 4-1: USB disconnect, device number 90 [ 3191.949577][ T5134] usblp0: removed [ 3192.098972][ T5788] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 3192.462049][ T5788] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 3192.711694][ T6681] loop0: detected capacity change from 0 to 32768 [ 3192.785315][ T6681] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.8129 (6681) [ 3192.836571][ T6705] loop1: detected capacity change from 0 to 1024 [ 3192.876702][ T6681] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 3192.910145][ T6681] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 3192.971037][ T6681] BTRFS info (device loop0): using free-space-tree [ 3193.029468][ T6681] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 3193.030114][ T6681] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 3193.086362][ T6681] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 3193.116110][ T6681] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 3193.156655][ T6681] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 3193.250529][ T6681] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 3193.283743][ T6681] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 3193.323165][ T2889] hfsplus: b-tree write err: -5, ino 4 [ 3193.402285][ T6681] BTRFS error (device loop0): open_ctree failed [ 3193.700868][ T6728] loop1: detected capacity change from 0 to 128 [ 3193.713836][ T6728] ufs: Invalid option: "ÿÿÿÿÿÿÿÿ" or missing value [ 3193.720528][ T6728] ufs: wrong mount options [ 3194.591825][ C1] vkms_vblank_simulate: vblank timer overrun [ 3195.731763][ T6737] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 3195.780616][ T6737] loop2: detected capacity change from 0 to 8 [ 3195.965035][ T6737] unable to read xattr id index table [ 3196.126080][ T6732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8141'. [ 3196.375775][ T29] audit: type=1800 audit(1719360195.601:2999): pid=6751 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.8144" name="bus" dev="sda1" ino=2261 res=0 errno=0 [ 3196.467395][ T29] audit: type=1800 audit(1719360195.661:3000): pid=6751 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.8144" name="bus" dev="sda1" ino=2261 res=0 errno=0 [ 3196.829569][ T6757] loop1: detected capacity change from 0 to 128 [ 3196.849624][ T6757] ufs: You didn't specify the type of your ufs filesystem [ 3196.849624][ T6757] [ 3196.849624][ T6757] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 3196.849624][ T6757] [ 3196.849624][ T6757] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 3196.881681][ T6757] ufs: ufstype=old is supported read-only [ 3196.891700][ T6757] ufs: ufs_fill_super(): bad magic number [ 3197.725883][T13315] libceph: connect (1)[c::]:6789 error -101 [ 3197.768388][ T6737] ceph: No mds server is up or the cluster is laggy [ 3197.786473][T13315] libceph: mon0 (1)[c::]:6789 connect error [ 3198.257975][ C1] vkms_vblank_simulate: vblank timer overrun [ 3198.546523][ T29] audit: type=1804 audit(1719360197.791:3001): pid=6769 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.8149" name="/root/syzkaller.Saue5j/186/cgroup.controllers" dev="sda1" ino=2269 res=1 errno=0 [ 3198.622039][ T29] audit: type=1804 audit(1719360197.851:3002): pid=6769 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.8149" name="/root/syzkaller.Saue5j/186/cgroup.controllers" dev="sda1" ino=2269 res=1 errno=0 [ 3198.841603][ T6767] loop0: detected capacity change from 0 to 4096 [ 3198.890953][ T6767] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 3199.118147][ T6778] loop4: detected capacity change from 0 to 128 [ 3199.131168][ T6778] ufs: Invalid option: "ÿÿÿÿÿÿÿÿ" or missing value [ 3199.137824][ T6778] ufs: wrong mount options [ 3199.920098][ T6779] loop1: detected capacity change from 0 to 4096 [ 3199.946571][ T6780] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8151'. [ 3199.955944][ T6779] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 3200.012332][ T6779] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 3200.050714][ T6779] ntfs3: loop1: Failed to load $MFT (-22). [ 3201.480789][ T6800] loop4: detected capacity change from 0 to 1024 [ 3201.612335][ T29] audit: type=1804 audit(1719360200.851:3003): pid=6811 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.8160" name="/root/syzkaller.g7W6B7/363/cgroup.controllers" dev="sda1" ino=2268 res=1 errno=0 [ 3201.702313][ T29] audit: type=1804 audit(1719360200.921:3004): pid=6811 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.8160" name="/root/syzkaller.g7W6B7/363/cgroup.controllers" dev="sda1" ino=2268 res=1 errno=0 [ 3201.854409][T10480] hfsplus: b-tree write err: -5, ino 4 [ 3201.969498][ T6818] loop0: detected capacity change from 0 to 128 [ 3201.982710][ T6818] ufs: Invalid option: "ÿÿÿÿÿÿÿÿ" or missing value [ 3201.989355][ T6818] ufs: wrong mount options [ 3202.857972][ T6829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8164'. [ 3202.966302][ T6829] team0: entered promiscuous mode [ 3202.985187][ T6829] team_slave_1: entered promiscuous mode [ 3203.077844][ T6823] team0: left promiscuous mode [ 3203.082631][ T6823] team_slave_1: left promiscuous mode [ 3203.133048][ T6832] ceph: No mds server is up or the cluster is laggy [ 3203.141646][ T5171] libceph: connect (1)[c::]:6789 error -101 [ 3203.170383][ T5171] libceph: mon0 (1)[c::]:6789 connect error [ 3204.086231][ T5171] libceph: connect (1)[c::]:6789 error -101 [ 3204.105331][ T5171] libceph: mon0 (1)[c::]:6789 connect error [ 3205.098134][ T6854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8170'. [ 3205.125396][ T6848] loop4: detected capacity change from 0 to 32768 [ 3205.164995][ T6854] team0: entered promiscuous mode [ 3205.192935][ T6854] team_slave_1: entered promiscuous mode [ 3205.241606][ T6853] team0: left promiscuous mode [ 3205.268200][ T6853] team_slave_1: left promiscuous mode [ 3205.511554][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 3205.517980][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 3205.864739][ T6864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8175'. [ 3206.389454][ T6864] team0: entered promiscuous mode [ 3206.394621][ T6864] team_slave_1: entered promiscuous mode [ 3206.537555][ T6862] team0: left promiscuous mode [ 3206.542368][ T6862] team_slave_1: left promiscuous mode [ 3206.760346][ T6875] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 3207.058725][ T6875] loop0: detected capacity change from 0 to 8 [ 3207.226105][ T6875] unable to read xattr id index table [ 3207.322597][ T6879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8178'. [ 3207.350607][ T6879] team0: entered promiscuous mode [ 3207.361744][ T6881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3207.376137][ T6879] team_slave_1: entered promiscuous mode [ 3207.434780][ T6878] team0: left promiscuous mode [ 3207.444854][ T6878] team_slave_1: left promiscuous mode [ 3207.461508][ T6881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3207.832052][T18340] libceph: connect (1)[c::]:6789 error -101 [ 3207.845981][T18340] libceph: mon0 (1)[c::]:6789 connect error [ 3207.941208][ T6875] ceph: No mds server is up or the cluster is laggy [ 3207.955970][ T6892] loop2: detected capacity change from 0 to 128 [ 3207.982853][ T6885] loop1: detected capacity change from 0 to 4096 [ 3207.998035][ T6892] udf: Unknown parameter '' [ 3208.011192][ T6885] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 3208.214237][ T5788] Bluetooth: hci4: unexpected event for opcode 0x2012 [ 3208.315041][ T6899] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8182'. [ 3208.805095][ T29] audit: type=1804 audit(1719360208.041:3005): pid=6906 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.8181" name="/root/syzkaller.BpPWBB/83/bus" dev="sda1" ino=2273 res=1 errno=0 [ 3209.579727][ T6914] loop2: detected capacity change from 0 to 128 [ 3209.602775][ T6914] udf: Unknown parameter '' [ 3209.635888][T26070] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 3209.666679][ T6909] fuse: Unknown parameter './bus' [ 3209.785845][ T5788] Bluetooth: hci4: unexpected event for opcode 0x2012 [ 3209.835722][T26070] usb 4-1: Using ep0 maxpacket: 32 [ 3209.864177][T26070] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3209.882040][T26070] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3209.924152][T26070] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3209.952304][T26070] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3209.975958][T26070] usb 4-1: Product: syz [ 3209.980830][T26070] usb 4-1: Manufacturer: syz [ 3209.987414][T26070] usb 4-1: SerialNumber: syz [ 3210.011911][ T6920] loop4: detected capacity change from 0 to 4096 [ 3210.054567][ T6920] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 3210.492834][ T29] audit: type=1804 audit(1719360209.731:3006): pid=6929 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.8185" name="/root/syzkaller.BpPWBB/84/bus" dev="sda1" ino=2251 res=1 errno=0 [ 3210.566856][T26070] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 91 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 3212.065334][ T5788] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 3212.216034][ T5788] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 3212.227423][ T5788] Bluetooth: hci4: Injecting HCI hardware error event [ 3212.239618][T27436] Bluetooth: hci4: hardware error 0x00 [ 3212.592396][ T6951] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8192'. [ 3212.724448][ T6958] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 3212.872862][ T6957] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3213.004850][ T6958] loop2: detected capacity change from 0 to 8 [ 3213.132880][ T6958] unable to read xattr id index table [ 3213.198931][ T6957] loop0: detected capacity change from 0 to 1764 [ 3213.244775][ T6957] iso9660: Bad value for 'map' [ 3213.561311][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8196'. [ 3214.445897][T27436] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 3214.895064][ T5164] libceph: connect (1)[c::]:6789 error -101 [ 3214.946210][ T5164] libceph: mon0 (1)[c::]:6789 connect error [ 3214.954104][T13315] usb 4-1: USB disconnect, device number 91 [ 3214.969421][T13315] usblp0: removed [ 3214.987543][ T6958] ceph: No mds server is up or the cluster is laggy [ 3215.380205][ T6959] loop4: detected capacity change from 0 to 32768 [ 3215.528534][ T6959] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 3215.888966][ T6997] loop2: detected capacity change from 0 to 128 [ 3215.908812][ T6997] ufs: You didn't specify the type of your ufs filesystem [ 3215.908812][ T6997] [ 3215.908812][ T6997] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 3215.908812][ T6997] [ 3215.908812][ T6997] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 3215.942300][ T6997] ufs: ufstype=old is supported read-only [ 3217.222096][ T6997] ufs: ufs_fill_super(): bad magic number [ 3217.334575][ T6959] XFS (loop4): Ending clean mount [ 3217.416749][ T3248] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 3217.647406][ T6972] loop1: detected capacity change from 0 to 32768 [ 3219.270852][T27436] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 3219.585210][ T29] audit: type=1804 audit(1719360218.821:3007): pid=7020 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.8199" name="/root/syzkaller.NqnChx/44/bus" dev="sda1" ino=2274 res=1 errno=0 [ 3219.614629][ T7012] input: syz0 as /devices/virtual/input/input159 [ 3219.946464][ T7025] loop2: detected capacity change from 0 to 2048 [ 3219.990676][ T7025] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 3220.024553][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8210'. [ 3220.051721][ T7025] UDF-fs: warning (device loop2): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 3220.284340][ T7025] loop2: detected capacity change from 0 to 1024 [ 3220.316276][ T7025] EXT4-fs: quotafile must be on filesystem root [ 3221.890203][ T7047] fuse: Unknown parameter './bus' [ 3223.124333][ T7051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8216'. [ 3223.208346][ T7051] team0: entered promiscuous mode [ 3223.213522][ T7051] team_slave_1: entered promiscuous mode [ 3223.292915][ T7050] team0: left promiscuous mode [ 3223.301758][ T7050] team_slave_1: left promiscuous mode [ 3223.607516][ T7058] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8218'. [ 3223.894722][ T7044] loop2: detected capacity change from 0 to 32768 [ 3224.220490][ T7065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8221'. [ 3224.682004][ T7057] loop4: detected capacity change from 0 to 32768 [ 3224.731121][ T7057] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.8219 (7057) [ 3224.781043][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8223'. [ 3224.815082][ T7072] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3224.844084][ T7057] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 3224.865960][ T7057] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 3224.882398][ T7057] BTRFS info (device loop4): using free-space-tree [ 3225.354561][ T2889] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 3225.387011][ T29] audit: type=1800 audit(1719360224.571:3008): pid=7057 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.8219" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 3225.437594][ T29] audit: type=1800 audit(1719360224.661:3009): pid=7057 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.8219" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 3225.592381][ T7089] bond_slave_0: entered promiscuous mode [ 3225.598262][ T7089] bond_slave_1: entered promiscuous mode [ 3225.665042][ T7087] bond_slave_0: left promiscuous mode [ 3225.670616][ T7087] bond_slave_1: left promiscuous mode [ 3225.740116][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8226'. [ 3225.750741][ T3248] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 3225.777346][ T7099] team0: entered promiscuous mode [ 3225.796298][ T7099] team_slave_1: entered promiscuous mode [ 3225.854305][ T7098] team0: left promiscuous mode [ 3225.885369][ T7098] team_slave_1: left promiscuous mode [ 3226.110448][ T7107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8229'. [ 3226.962252][ T7107] team0: entered promiscuous mode [ 3226.995321][ T7107] team_slave_1: entered promiscuous mode [ 3227.041635][ T7106] team0: left promiscuous mode [ 3227.066569][ T7106] team_slave_1: left promiscuous mode [ 3227.191225][ T7123] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8231'. [ 3227.192601][ T7122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8232'. [ 3227.627836][ T7128] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 3227.634382][ T7128] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 3227.676220][ T7128] vhci_hcd vhci_hcd.0: Device attached [ 3227.697371][ T7136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8235'. [ 3227.757338][ T7134] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 5 [ 3227.779461][T13854] vhci_hcd: stop threads [ 3227.783748][T13854] vhci_hcd: release socket [ 3227.823728][T13854] vhci_hcd: disconnect device [ 3227.909213][ T5164] vhci_hcd: vhci_device speed not set [ 3228.097646][ T7139] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8236'. [ 3228.899827][ T7131] loop0: detected capacity change from 0 to 32768 [ 3229.116848][ T7141] loop1: detected capacity change from 0 to 32768 [ 3229.138849][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8239'. [ 3229.153148][ T7149] team0: entered promiscuous mode [ 3229.184607][ T7149] team_slave_1: entered promiscuous mode [ 3229.226177][ T7148] team0: left promiscuous mode [ 3229.238904][ T7148] team_slave_1: left promiscuous mode [ 3229.761273][ T7161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8243'. [ 3229.796658][ T7161] team0: entered promiscuous mode [ 3229.801837][ T7161] team_slave_1: entered promiscuous mode [ 3229.828292][ T7160] team0: left promiscuous mode [ 3229.846613][ T7160] team_slave_1: left promiscuous mode [ 3229.862887][ T7168] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8244'. [ 3230.052050][ T7172] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8247'. [ 3230.992561][ T7169] loop4: detected capacity change from 0 to 1764 [ 3231.015345][ T7169] iso9660: Bad value for 'map' [ 3232.386161][ T7184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8250'. [ 3232.876130][ T7184] team0: entered promiscuous mode [ 3232.935466][ T7184] team_slave_1: entered promiscuous mode [ 3233.338321][ T7183] team0: left promiscuous mode [ 3233.343152][ T7183] team_slave_1: left promiscuous mode [ 3233.428945][T27436] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 3233.441786][ T7203] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8253'. [ 3233.638378][ T7205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3233.750939][ T7205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3233.895026][ T7213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8257'. [ 3233.925213][ T7213] team0: entered promiscuous mode [ 3233.934134][ T7213] team_slave_1: entered promiscuous mode [ 3233.959743][ T7212] team0: left promiscuous mode [ 3233.974506][ T7212] team_slave_1: left promiscuous mode [ 3235.233097][ T7229] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8261'. [ 3235.340054][ T7231] loop2: detected capacity change from 0 to 128 [ 3235.348617][ T7231] ufs: Invalid option: "ÿÿÿÿÿÿÿÿ" or missing value [ 3235.355125][ T7231] ufs: wrong mount options [ 3235.391038][ T7230] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 3235.720913][ T7230] loop4: detected capacity change from 0 to 8 [ 3235.811606][ T7230] unable to read xattr id index table [ 3236.393097][ T7233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8263'. [ 3236.402589][ T29] audit: type=1800 audit(1719360235.601:3010): pid=7208 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.8255" name="bus" dev="sda1" ino=2265 res=0 errno=0 [ 3236.424102][ C0] vkms_vblank_simulate: vblank timer overrun [ 3236.762874][T31723] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 3237.855931][T31723] usb 2-1: Using ep0 maxpacket: 32 [ 3237.872769][T31723] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3237.926947][T31723] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3237.964209][T31723] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3238.138799][T31723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3238.147107][T31723] usb 2-1: Product: syz [ 3238.157373][T31723] usb 2-1: Manufacturer: syz [ 3238.162043][T31723] usb 2-1: SerialNumber: syz [ 3239.358041][T31723] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 85 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 3239.410071][T31723] usb 2-1: USB disconnect, device number 85 [ 3239.446449][T31723] usblp0: removed [ 3239.471351][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8269'. [ 3239.519689][ T7249] loop2: detected capacity change from 0 to 4096 [ 3239.526507][ T7253] team0: entered promiscuous mode [ 3239.533956][ T7253] team_slave_1: entered promiscuous mode [ 3239.551454][ T7249] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 3239.571387][ T7251] team0: left promiscuous mode [ 3239.582430][ T7251] team_slave_1: left promiscuous mode [ 3239.609461][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8271'. [ 3245.178043][ T7277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3245.297058][ T7280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3245.466131][ T7283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8278'. [ 3245.496526][ T7283] team0: entered promiscuous mode [ 3245.501697][ T7283] team_slave_1: entered promiscuous mode [ 3245.532374][ T7282] team0: left promiscuous mode [ 3245.549624][ T7282] team_slave_1: left promiscuous mode [ 3245.861627][T27436] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 3246.108757][ T7293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8282'. [ 3246.203767][ T7293] team0: entered promiscuous mode [ 3246.240474][ T7293] team_slave_1: entered promiscuous mode [ 3246.324499][ T7292] team0: left promiscuous mode [ 3246.355131][ T7292] team_slave_1: left promiscuous mode [ 3246.546327][ T7301] loop4: detected capacity change from 0 to 16 [ 3246.627525][ T7301] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 3246.712583][ T7304] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8285'. [ 3247.317521][ T7309] netlink: 'syz.3.8286': attribute type 9 has an invalid length. [ 3247.325535][ T7309] netlink: 911 bytes leftover after parsing attributes in process `syz.3.8286'. [ 3251.832480][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8289'. [ 3251.874370][ T7317] team0: entered promiscuous mode [ 3251.894139][ T7317] team_slave_1: entered promiscuous mode [ 3251.909167][ T7316] team0: left promiscuous mode [ 3251.914201][ T7316] team_slave_1: left promiscuous mode [ 3252.203544][ T7319] loop1: detected capacity change from 0 to 4096 [ 3252.221928][ T7328] loop4: detected capacity change from 0 to 164 [ 3252.247462][ T7319] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 3252.260333][ T7328] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 3252.325185][ T7327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3252.523389][ T7327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3253.325842][ T29] audit: type=1400 audit(1719360252.551:3011): avc: denied { ioctl } for pid=7341 comm="syz.0.8296" path="socket:[179531]" dev="sockfs" ino=179531 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 3253.940106][ T7349] loop0: detected capacity change from 0 to 4096 [ 3253.955347][ T7349] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 3254.010840][ T7349] ntfs3: loop0: Failed to load $MFT (-22). [ 3254.388875][ T29] audit: type=1400 audit(1719360253.611:3012): avc: denied { create } for pid=7362 comm="syz.4.8304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 3254.475003][ T29] audit: type=1400 audit(1719360253.631:3013): avc: denied { bind } for pid=7362 comm="syz.4.8304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 3254.669685][ T7377] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 3254.678125][ T29] audit: type=1400 audit(1719360253.911:3014): avc: denied { setopt } for pid=7370 comm="syz.0.8307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 3254.931438][ T29] audit: type=1400 audit(1719360253.951:3015): avc: denied { create } for pid=7370 comm="syz.0.8307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 3255.070581][ T29] audit: type=1400 audit(1719360253.951:3016): avc: denied { write } for pid=7370 comm="syz.0.8307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 3255.101591][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8309'. [ 3256.251650][ T7369] loop2: detected capacity change from 0 to 32768 [ 3256.843559][ T7398] loop0: detected capacity change from 0 to 512 [ 3256.872143][ T29] audit: type=1326 audit(1719360256.111:3017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7391 comm="syz.3.8316" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f93975ae9 code=0x0 [ 3256.894967][ C1] vkms_vblank_simulate: vblank timer overrun [ 3256.960310][ T7398] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3256.974703][ T7398] ext4 filesystem being mounted at /root/syzkaller.hHjlw3/322/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 3257.060713][ T7401] loop2: detected capacity change from 0 to 2048 [ 3257.087876][ T7401] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 3257.120838][ T7401] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3257.141468][ T29] audit: type=1400 audit(1719360256.371:3018): avc: denied { read } for pid=7393 comm="syz.0.8317" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 3257.723329][ T1493] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3257.938087][ T29] audit: type=1400 audit(1719360257.181:3019): avc: denied { getopt } for pid=7426 comm="syz.0.8326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 3257.965748][T13315] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 3258.100560][T27436] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3 [ 3258.166044][T13315] usb 4-1: Using ep0 maxpacket: 16 [ 3258.201698][T13315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 3258.243693][T13315] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 3258.265708][T13315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3258.277065][T13315] usb 4-1: config 0 descriptor?? [ 3258.564304][ T7434] loop2: detected capacity change from 0 to 4096 [ 3258.585365][ T7434] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 3258.607320][ T7434] ntfs3: loop2: Failed to load $MFT (-22). [ 3258.693952][ T7425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3258.714000][ T7425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3258.765752][T26070] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 3258.850038][ T7415] loop4: detected capacity change from 0 to 32768 [ 3258.883624][ T29] audit: type=1400 audit(1719360258.121:3020): avc: denied { name_bind } for pid=7441 comm="syz.0.8331" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 3258.936975][ T7425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3258.946524][ T7425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3258.959235][T13315] hid (null): bogus close delimiter [ 3258.964543][T13315] hid (null): report_id 0 is invalid [ 3258.967662][T26070] usb 2-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=f0.a0 [ 3258.979273][T13315] hid (null): unknown global tag 0xa5 [ 3258.985322][T13315] hid (null): unknown global tag 0xd [ 3259.010120][T13315] hid-generic 0003:0158:0100.0007: unknown main item tag 0x1 [ 3259.010758][ T7415] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 3259.017686][T13315] hid-generic 0003:0158:0100.0007: unexpected long global item [ 3259.018636][T13315] hid-generic 0003:0158:0100.0007: probe with driver hid-generic failed with error -22 [ 3259.035713][T26070] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3259.090408][T26070] usb 2-1: config 0 descriptor?? [ 3259.140751][T26070] kl5kusb105 2-1:0.0: KL5KUSB105D / PalmConnect converter detected [ 3259.182455][T13315] usb 4-1: USB disconnect, device number 92 [ 3259.182874][T26070] usb 2-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 3259.232308][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 3259.320064][T26070] usb 2-1: USB disconnect, device number 86 [ 3259.337507][T26070] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 3259.349302][T26070] kl5kusb105 2-1:0.0: device disconnected [ 3259.425082][ T29] audit: type=1400 audit(1719360258.661:3021): avc: denied { getopt } for pid=7458 comm="syz.0.8335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 3259.508316][ T7415] XFS (loop4): Ending clean mount [ 3259.564866][ T7415] XFS (loop4): Quotacheck needed: Please wait. [ 3259.733090][ T7415] XFS (loop4): Quotacheck: Done. [ 3260.983132][ T29] audit: type=1400 audit(1719360260.221:3022): avc: denied { create } for pid=7485 comm="syz.2.8345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 3261.074725][ T29] audit: type=1400 audit(1719360260.271:3023): avc: denied { connect } for pid=7485 comm="syz.2.8345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 3261.798787][ T7489] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8346'. [ 3261.856665][ T3248] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 3262.397752][ T7495] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8348'. [ 3265.759612][ T7516] usb usb9: usbfs: process 7516 (syz.3.8354) did not claim interface 0 before use [ 3266.969767][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 3266.986936][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 3267.576648][ T30] INFO: task syz.3.7874:5747 blocked for more than 143 seconds. [ 3267.809086][ T30] Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 3267.827401][ T7538] loop2: detected capacity change from 0 to 8 [ 3267.844711][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3267.863820][ T30] task:syz.3.7874 state:D stack:18896 pid:5747 tgid:5746 ppid:3284 flags:0x00004004 [ 3267.879139][ T30] Call Trace: [ 3267.884325][ T30] [ 3267.893065][ T30] __schedule+0xf15/0x5d00 [ 3267.904309][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 3267.910479][ T7538] SQUASHFS error: lzo decompression failed, data probably corrupt [ 3267.918716][ T7538] SQUASHFS error: Failed to read block 0x28d: -5 [ 3267.925190][ T7538] SQUASHFS error: Unable to read metadata cache entry [28b] [ 3267.933558][ T7538] SQUASHFS error: Unable to read inode 0x11f [ 3267.949490][ T30] ? mark_lock+0xb1/0xc60 [ 3267.979832][ T30] ? __pfx___schedule+0x10/0x10 [ 3267.997324][ T30] ? schedule+0x298/0x350 [ 3268.009449][ T30] ? __pfx_lock_release+0x10/0x10 [ 3268.020963][ T30] schedule+0xe7/0x350 [ 3268.030624][ T30] io_schedule+0xbf/0x130 [ 3268.035159][ T30] folio_wait_bit_common+0x3d8/0x9b0 [ 3268.049343][ T30] ? folio_wait_bit_common+0x13c/0x9b0 [ 3268.054879][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 3268.062499][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 3268.078674][ T30] ? __pfx___might_resched+0x10/0x10 [ 3268.091500][ T30] ? __pfx_lock_release+0x10/0x10 [ 3268.098757][ T30] invalidate_inode_pages2_range+0x6f1/0x1210 [ 3268.105406][ T30] ? __pfx_invalidate_inode_pages2_range+0x10/0x10 [ 3268.114050][ T30] ? bio_alloc_bioset+0x2f8/0x8b0 [ 3268.128384][ T30] ? filemap_check_errors+0xa9/0x160 [ 3268.134746][ T30] bch2_write_invalidate_inode_pages_range+0xb1/0x130 [ 3268.141823][ T30] bch2_direct_write+0x2f96/0x4310 [ 3268.153953][ T30] ? kasan_save_stack+0x42/0x60 [ 3268.158960][ T30] ? kasan_save_stack+0x33/0x60 [ 3268.163851][ T30] ? __pfx_bch2_direct_write+0x10/0x10 [ 3268.169670][ T30] ? iter_file_splice_write+0x1d2/0x10b0 [ 3268.175362][ T30] ? direct_splice_actor+0x19b/0x6d0 [ 3268.192228][ T30] ? splice_direct_to_actor+0x346/0xa40 [ 3268.199303][ T30] ? do_splice_direct+0x17e/0x250 [ 3268.204386][ T30] ? do_sendfile+0xb1e/0xe50 [ 3268.211659][ T30] ? __x64_sys_sendfile64+0x1da/0x220 [ 3268.224926][ T30] ? do_syscall_64+0xcd/0x250 [ 3268.241285][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3268.255099][ T30] bch2_write_iter+0x10c/0x31a0 [ 3268.261908][ T30] ? __pfx_bch2_write_iter+0x10/0x10 [ 3268.268894][ T30] ? rcu_is_watching+0x12/0xc0 [ 3268.280329][ T30] ? splice_from_pipe_next+0x1f8/0x5d0 [ 3268.288763][ T30] iter_file_splice_write+0x906/0x10b0 [ 3268.294656][ T30] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3268.301662][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 3268.316949][ T30] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3268.334251][ T30] direct_splice_actor+0x19b/0x6d0 [ 3268.340564][ T30] splice_direct_to_actor+0x346/0xa40 [ 3268.352062][ T30] ? __pfx_direct_splice_actor+0x10/0x10 [ 3268.358707][ T30] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 3268.365126][ T30] ? __pfx___might_resched+0x10/0x10 [ 3268.382137][ T30] ? __pfx_lock_release+0x10/0x10 [ 3268.393038][ T30] do_splice_direct+0x17e/0x250 [ 3268.401882][ T30] ? __pfx_do_splice_direct+0x10/0x10 [ 3268.407504][ T30] ? avc_policy_seqno+0x9/0x20 [ 3268.420345][ T30] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 3268.431185][ T30] do_sendfile+0xb1e/0xe50 [ 3268.440896][ T30] ? __pfx_do_sendfile+0x10/0x10 [ 3268.448556][ T30] ? __x64_sys_futex+0x1e1/0x4c0 [ 3268.454861][ T30] ? __x64_sys_futex+0x1ea/0x4c0 [ 3268.461918][ T30] __x64_sys_sendfile64+0x1da/0x220 [ 3268.475673][ T30] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 3268.495260][ T30] do_syscall_64+0xcd/0x250 [ 3268.510557][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3268.540688][ T30] RIP: 0033:0x7fd9dc775ae9 [ 3268.549422][ T7543] TCP: TCP_TX_DELAY enabled [ 3268.565208][ T30] RSP: 002b:00007fd9dd5c5048 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 3268.585121][ T30] RAX: ffffffffffffffda RBX: 00007fd9dc903fa0 RCX: 00007fd9dc775ae9 [ 3268.593685][ T30] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 3268.615750][ T30] RBP: 00007fd9dc7f6746 R08: 0000000000000000 R09: 0000000000000000 [ 3268.624499][ T30] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000000 [ 3268.633384][ T30] R13: 000000000000000b R14: 00007fd9dc903fa0 R15: 00007ffc121f0948 [ 3268.641780][ T30] [ 3268.645747][ T30] INFO: task syz.3.7874:5780 blocked for more than 144 seconds. [ 3268.654186][ T30] Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 3268.707103][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3268.715970][ T30] task:syz.3.7874 state:D stack:28272 pid:5780 tgid:5746 ppid:3284 flags:0x00004006 [ 3268.726897][ T30] Call Trace: [ 3268.730546][ T30] [ 3268.734098][ T30] __schedule+0xf15/0x5d00 [ 3268.754088][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 3268.767595][ T30] ? __pfx___schedule+0x10/0x10 [ 3268.789846][ T30] ? schedule+0x298/0x350 [ 3268.798847][ T30] ? __pfx_lock_release+0x10/0x10 [ 3268.816202][ T30] ? mark_held_locks+0x9f/0xe0 [ 3268.828842][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 3268.848861][ T30] ? prepare_to_wait_event+0x94/0x690 [ 3268.869384][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 3268.885756][ T30] schedule+0xe7/0x350 [ 3268.899550][ T30] __bch2_two_state_lock+0x1b6/0x230 [ 3268.920833][ T30] ? __pfx___bch2_two_state_lock+0x10/0x10 [ 3268.928447][ T30] ? __kmalloc_noprof+0x20b/0x410 [ 3268.949812][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 3268.964616][ T30] ? folio_flags.constprop.0+0x56/0x150 [ 3268.981742][ T30] ? __bch2_folio_create+0x1ae/0x200 [ 3268.998396][ T30] bch2_readahead+0x59e/0x1310 [ 3269.013104][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 3269.044010][ T30] ? __pfx_bch2_readahead+0x10/0x10 [ 3269.055745][ T30] ? mark_held_locks+0x9f/0xe0 [ 3269.066334][ T30] ? folio_add_lru+0x42f/0x7f0 [ 3269.073810][ T30] ? __pfx_bch2_readahead+0x10/0x10 [ 3269.081083][ T30] read_pages+0x1a8/0xd80 [ 3269.085678][ T30] ? const_folio_flags+0x71/0x1f0 [ 3269.093812][ T30] ? __pfx_read_pages+0x10/0x10 [ 3269.103178][ T30] page_cache_ra_unbounded+0x2d8/0x5a0 [ 3269.111199][ T30] force_page_cache_ra+0x277/0x380 [ 3269.121813][ T30] generic_fadvise+0x508/0x750 [ 3269.167815][ T30] ? __pfx_generic_fadvise+0x10/0x10 [ 3269.182520][ T30] ? __fget_files+0x256/0x400 [ 3269.194805][ T30] vfs_fadvise+0xb3/0xe0 [ 3269.205308][ T30] ksys_readahead+0x1a6/0x200 [ 3269.218312][ T30] do_syscall_64+0xcd/0x250 [ 3269.280798][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3269.290168][ T30] RIP: 0033:0x7fd9dc775ae9 [ 3269.295675][ T30] RSP: 002b:00007fd9dd5a4048 EFLAGS: 00000246 ORIG_RAX: 00000000000000bb [ 3269.304626][ T30] RAX: ffffffffffffffda RBX: 00007fd9dc904070 RCX: 00007fd9dc775ae9 [ 3269.313895][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 3269.322788][ T30] RBP: 00007fd9dc7f6746 R08: 0000000000000000 R09: 0000000000000000 [ 3269.332812][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3269.344920][ T30] R13: 000000000000006e R14: 00007fd9dc904070 R15: 00007ffc121f0948 [ 3269.354247][ T30] [ 3269.360144][ T30] [ 3269.360144][ T30] Showing all locks held in the system: [ 3269.371784][ T30] 1 lock held by khungtaskd/30: [ 3269.377786][ T30] #0: ffffffff8dbb1920 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 3269.391788][ T30] 5 locks held by kworker/u8:7/2459: [ 3269.427767][ T30] #0: ffff8880b923ebd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 3269.461793][ T30] #1: ffff8880b9328a08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2d9/0x900 [ 3269.489320][ T30] #2: ffff888022f7a0d8 (&wb->list_lock){+.+.}-{2:2}, at: __wb_update_bandwidth+0x7f/0x5a0 [ 3269.511316][ T7538] loop2: detected capacity change from 0 to 2048 [ 3269.519140][ T30] #3: ffffffff94d11d78 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x199/0x540 [ 3269.546541][ T30] #4: ffff8880154a0018 (&pool->lock){-.-.}-{2:2}, at: __queue_work+0x39e/0x1020 [ 3269.551634][ T7538] udf: Unknown parameter '18446744073709551615ÿ0xffffffffffffffff00000000000000000003ÿÿÿÿÿÿÿÿ' [ 3269.566761][ T30] 2 locks held by getty/4836: [ 3269.572080][ T30] #0: ffff88802ab5e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 3269.593876][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 [ 3269.605753][ T30] 1 lock held by syz.3.7874/5747: [ 3269.610796][ T30] #0: ffff8880458da420 (sb_writers#21){.+.+}-{0:0}, at: splice_direct_to_actor+0x346/0xa40 [ 3269.642084][ T30] 1 lock held by syz.3.7874/5780: [ 3269.649241][ T30] #0: ffff88806579cd00 (mapping.invalidate_lock#10){.+.+}-{3:3}, at: page_cache_ra_unbounded+0x12b/0x5a0 [ 3269.675709][ T30] 2 locks held by syz.4.8358/7542: [ 3269.695927][ T30] 1 lock held by syz.2.8361/7532: [ 3269.703055][ T30] #0: ffffffff8e7da648 (reading_mutex){+.+.}-{3:3}, at: rng_dev_read+0x128/0x720 [ 3269.715943][ T30] [ 3269.718530][ T30] ============================================= [ 3269.718530][ T30] [ 3269.730038][ T30] NMI backtrace for cpu 0 [ 3269.734384][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 3269.744297][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 3269.754364][ T30] Call Trace: [ 3269.757652][ T30] [ 3269.760575][ T30] dump_stack_lvl+0x116/0x1f0 [ 3269.765312][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 3269.770354][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 3269.776335][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 3269.782327][ T30] watchdog+0xf86/0x1240 [ 3269.786570][ T30] ? __pfx_watchdog+0x10/0x10 [ 3269.791251][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 3269.796454][ T30] ? __kthread_parkme+0x148/0x220 [ 3269.801475][ T30] ? __pfx_watchdog+0x10/0x10 [ 3269.806145][ T30] kthread+0x2c1/0x3a0 [ 3269.810211][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 3269.815402][ T30] ? __pfx_kthread+0x10/0x10 [ 3269.819991][ T30] ret_from_fork+0x45/0x80 [ 3269.824410][ T30] ? __pfx_kthread+0x10/0x10 [ 3269.828996][ T30] ret_from_fork_asm+0x1a/0x30 [ 3269.833762][ T30] [ 3269.837780][ T30] Sending NMI from CPU 0 to CPUs 1: [ 3269.843014][ C1] NMI backtrace for cpu 1 [ 3269.843034][ C1] CPU: 1 PID: 7542 Comm: syz.4.8358 Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 3269.843060][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 3269.843074][ C1] RIP: 0010:__lock_acquire+0xec2/0x3b30 [ 3269.843113][ C1] Code: 64 f2 ff ff 48 63 5c 24 20 be 08 00 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 c0 62 26 94 e8 26 0f 7e 00 48 0f a3 1d 1e c9 ba 12 <0f> 82 12 fb ff ff 90 e8 e2 19 14 03 85 c0 74 3c 48 c7 c0 14 77 e4 [ 3269.843136][ C1] RSP: 0018:ffffc90003777a48 EFLAGS: 00000047 [ 3269.843155][ C1] RAX: 0000000000000001 RBX: 00000000000001b3 RCX: ffffffff816b999a [ 3269.843171][ C1] RDX: fffffbfff284cc5f RSI: 0000000000000008 RDI: ffffffff942662f0 [ 3269.843187][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff284cc5e [ 3269.843203][ C1] R10: ffffffff942662f7 R11: 0000000000000000 R12: 0000000000000000 [ 3269.843218][ C1] R13: 0000000000000000 R14: ffff88802a63c6e0 R15: 0000000000000004 [ 3269.843233][ C1] FS: 00007f905aa9d6c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 3269.843257][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3269.843274][ C1] CR2: 00007fa73d6ffe00 CR3: 000000002dc34000 CR4: 00000000003506f0 [ 3269.843290][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3269.843304][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3269.843319][ C1] Call Trace: [ 3269.843327][ C1] [ 3269.843335][ C1] ? show_regs+0x8c/0xa0 [ 3269.843369][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 3269.843403][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 3269.843434][ C1] ? nmi_handle+0x1a9/0x5c0 [ 3269.843468][ C1] ? __lock_acquire+0xec2/0x3b30 [ 3269.843503][ C1] ? default_do_nmi+0x6a/0x160 [ 3269.843524][ C1] ? exc_nmi+0x170/0x1e0 [ 3269.843544][ C1] ? end_repeat_nmi+0xf/0x53 [ 3269.843568][ C1] ? __lock_acquire+0xeba/0x3b30 [ 3269.843602][ C1] ? __lock_acquire+0xec2/0x3b30 [ 3269.843636][ C1] ? __lock_acquire+0xec2/0x3b30 [ 3269.843672][ C1] ? __lock_acquire+0xec2/0x3b30 [ 3269.843711][ C1] [ 3269.843718][ C1] [ 3269.843728][ C1] ? rcu_is_watching+0x12/0xc0 [ 3269.843751][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 3269.843789][ C1] lock_acquire+0x1b1/0x560 [ 3269.843824][ C1] ? __might_fault+0xe3/0x190 [ 3269.843848][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 3269.843885][ C1] ? __pfx___might_resched+0x10/0x10 [ 3269.843910][ C1] ? __might_fault+0x62/0x190 [ 3269.843933][ C1] ? __might_fault+0xe3/0x190 [ 3269.843955][ C1] __might_fault+0x11b/0x190 [ 3269.843978][ C1] ? __might_fault+0xe3/0x190 [ 3269.844001][ C1] do_recvmmsg+0x2e7/0x750 [ 3269.844085][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 3269.844116][ C1] ? __pfx_lock_release+0x10/0x10 [ 3269.844152][ C1] ? do_futex+0x123/0x350 [ 3269.844186][ C1] ? __x64_sys_futex+0x1e1/0x4c0 [ 3269.844219][ C1] __x64_sys_recvmmsg+0x239/0x290 [ 3269.844251][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 3269.844286][ C1] do_syscall_64+0xcd/0x250 [ 3269.844318][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3269.844354][ C1] RIP: 0033:0x7f9059d75ae9 [ 3269.844371][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3269.844392][ C1] RSP: 002b:00007f905aa9d048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3269.844414][ C1] RAX: ffffffffffffffda RBX: 00007f9059f04070 RCX: 00007f9059d75ae9 [ 3269.844431][ C1] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 3269.844446][ C1] RBP: 00007f9059df6746 R08: 0000000000000000 R09: 0000000000000000 [ 3269.844461][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 3269.844475][ C1] R13: 000000000000006e R14: 00007f9059f04070 R15: 00007ffff291a618 [ 3269.844495][ C1] [ 3270.319509][ T7538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8361'. [ 3270.338228][ T7538] lo speed is unknown, defaulting to 1000 [ 3270.349912][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 3270.356777][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 3270.366684][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 3270.376744][ T30] Call Trace: [ 3270.380017][ T30] [ 3270.382952][ T30] dump_stack_lvl+0x3d/0x1f0 [ 3270.387548][ T30] panic+0x6f5/0x7a0 [ 3270.391449][ T30] ? __pfx_panic+0x10/0x10 [ 3270.395873][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 3270.401256][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 3270.407236][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 3270.412602][ T30] ? watchdog+0xd3d/0x1240 [ 3270.417015][ T30] ? watchdog+0xd30/0x1240 [ 3270.421425][ T30] watchdog+0xd4e/0x1240 [ 3270.425661][ T30] ? __pfx_watchdog+0x10/0x10 [ 3270.430328][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 3270.435523][ T30] ? __kthread_parkme+0x148/0x220 [ 3270.440544][ T30] ? __pfx_watchdog+0x10/0x10 [ 3270.445213][ T30] kthread+0x2c1/0x3a0 [ 3270.449278][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 3270.454469][ T30] ? __pfx_kthread+0x10/0x10 [ 3270.459056][ T30] ret_from_fork+0x45/0x80 [ 3270.463472][ T30] ? __pfx_kthread+0x10/0x10 [ 3270.468057][ T30] ret_from_fork_asm+0x1a/0x30 [ 3270.472825][ T30] [ 3270.476042][ T30] Kernel Offset: disabled [ 3270.480352][ T30] Rebooting in 86400 seconds..